@autofleet/zehut 1.6.3-beta-1 → 1.7.0-beta1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/check-permission.d.ts +4 -5
- package/lib/check-permission.js +5 -5
- package/lib/index.d.ts +24 -2
- package/lib/index.js +19 -5
- package/lib/{secret-getter/index.test.js → secret-getter.test.js} +5 -5
- package/lib/tracer.d.ts +15 -0
- package/lib/tracer.js +55 -0
- package/lib/user/ApiUser.d.ts +28 -0
- package/lib/user/ApiUser.js +96 -0
- package/lib/user/api-user.d.ts +0 -2
- package/lib/user/api-user.js +3 -26
- package/lib/user/index.d.ts +3 -3
- package/lib/user/index.js +44 -39
- package/lib/{utils/index.js → utils.js} +1 -1
- package/package.json +7 -10
- package/lib/context-manager/context-manager.d.ts +0 -6
- package/lib/context-manager/context-manager.js +0 -9
- package/lib/context-manager/context.d.ts +0 -7
- package/lib/context-manager/context.js +0 -16
- package/lib/context-manager/index.d.ts +0 -4
- package/lib/context-manager/index.js +0 -11
- /package/lib/{secret-getter/index.d.ts → secret-getter.d.ts} +0 -0
- /package/lib/{secret-getter/index.js → secret-getter.js} +0 -0
- /package/lib/{secret-getter/index.test.d.ts → secret-getter.test.d.ts} +0 -0
- /package/lib/{services/identity-ms.d.ts → services.d.ts} +0 -0
- /package/lib/{services/identity-ms.js → services.js} +0 -0
- /package/lib/{utils/index.d.ts → utils.d.ts} +0 -0
|
@@ -1,6 +1,5 @@
|
|
|
1
|
-
|
|
2
|
-
export declare const getUser: () => ApiUser;
|
|
1
|
+
export declare const getUser: () => any;
|
|
3
2
|
export declare const isUserExist: () => boolean;
|
|
4
|
-
export declare const checkFleetPermission: (fleetId:
|
|
5
|
-
export declare const checkBusinessModelPermission: (businessModelId:
|
|
6
|
-
export declare const checkDemandSourcePermission: (demandSourceId:
|
|
3
|
+
export declare const checkFleetPermission: (fleetId: any) => boolean;
|
|
4
|
+
export declare const checkBusinessModelPermission: (businessModelId: any) => boolean;
|
|
5
|
+
export declare const checkDemandSourcePermission: (demandSourceId: any) => boolean;
|
package/lib/check-permission.js
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.checkDemandSourcePermission = exports.checkBusinessModelPermission = exports.checkFleetPermission = exports.isUserExist = exports.getUser = void 0;
|
|
4
|
-
const
|
|
5
|
-
exports.getUser = () =>
|
|
4
|
+
const tracer_1 = require("./tracer");
|
|
5
|
+
exports.getUser = () => { var _a, _b; return (_b = (_a = tracer_1.getCurrentTrace()) === null || _a === void 0 ? void 0 : _a.context) === null || _b === void 0 ? void 0 : _b.user; };
|
|
6
6
|
exports.isUserExist = () => !!exports.getUser();
|
|
7
7
|
exports.checkFleetPermission = (fleetId) => {
|
|
8
8
|
if (exports.isUserExist()) {
|
|
9
|
-
const context =
|
|
9
|
+
const { context } = tracer_1.getCurrentTrace();
|
|
10
10
|
const user = context === null || context === void 0 ? void 0 : context.get('userObject');
|
|
11
11
|
return !user || Object.keys(user.permissions.fleets).includes(fleetId);
|
|
12
12
|
}
|
|
@@ -14,7 +14,7 @@ exports.checkFleetPermission = (fleetId) => {
|
|
|
14
14
|
};
|
|
15
15
|
exports.checkBusinessModelPermission = (businessModelId) => {
|
|
16
16
|
if (exports.isUserExist()) {
|
|
17
|
-
const context =
|
|
17
|
+
const { context } = tracer_1.getCurrentTrace();
|
|
18
18
|
const user = context === null || context === void 0 ? void 0 : context.get('userObject');
|
|
19
19
|
return !user || Object.keys(user.permissions.businessModels).includes(businessModelId);
|
|
20
20
|
}
|
|
@@ -22,7 +22,7 @@ exports.checkBusinessModelPermission = (businessModelId) => {
|
|
|
22
22
|
};
|
|
23
23
|
exports.checkDemandSourcePermission = (demandSourceId) => {
|
|
24
24
|
if (exports.isUserExist()) {
|
|
25
|
-
const context =
|
|
25
|
+
const { context } = tracer_1.getCurrentTrace();
|
|
26
26
|
const user = context === null || context === void 0 ? void 0 : context.get('userObject');
|
|
27
27
|
return !user || Object.keys(user.permissions.demandSources).includes(demandSourceId);
|
|
28
28
|
}
|
package/lib/index.d.ts
CHANGED
|
@@ -2,5 +2,27 @@ import User, { middleware, eagerLoadPermissionsMiddleware, middlewareWithDecode,
|
|
|
2
2
|
import { checkFleetPermission, checkBusinessModelPermission, checkDemandSourcePermission, isUserExist, getUser } from './check-permission';
|
|
3
3
|
import { UnauthorizedAccessError } from './errors';
|
|
4
4
|
import { getRefreshTokenSecret, getTokenSecret } from './secret-getter';
|
|
5
|
-
|
|
6
|
-
export { User, middleware, middlewareWithDecode, eagerLoadPermissionsMiddleware, getDecodedBearer, checkFleetPermission, checkBusinessModelPermission, checkDemandSourcePermission, isUserExist, getUser, getRefreshTokenSecret, getTokenSecret, UnauthorizedAccessError, };
|
|
5
|
+
declare const getCurrentPayload: () => any;
|
|
6
|
+
export { User, middleware, middlewareWithDecode, eagerLoadPermissionsMiddleware, getCurrentPayload, getDecodedBearer, checkFleetPermission, checkBusinessModelPermission, checkDemandSourcePermission, isUserExist, getUser, getRefreshTokenSecret, getTokenSecret, UnauthorizedAccessError, };
|
|
7
|
+
declare const _default: {
|
|
8
|
+
User: typeof User;
|
|
9
|
+
middleware: (options?: {
|
|
10
|
+
eagerLoadUserPermissions?: boolean;
|
|
11
|
+
eagerLoadUserPermissionsLegacy?: boolean;
|
|
12
|
+
customPermissionLoader?: import("./user/ApiUser").CustomPermissionLoader;
|
|
13
|
+
}) => (req: any, res: any, next: any) => Promise<any>;
|
|
14
|
+
middlewareWithDecode: (options?: {
|
|
15
|
+
eagerLoadUserPermissions?: boolean;
|
|
16
|
+
eagerLoadUserPermissionsLegacy?: boolean;
|
|
17
|
+
}) => (req: any, res: any, next: any) => Promise<void>;
|
|
18
|
+
eagerLoadPermissionsMiddleware: (req: any, res: any, next: any) => Promise<any>;
|
|
19
|
+
getCurrentPayload: () => any;
|
|
20
|
+
getDecodedBearer: (req: any) => any;
|
|
21
|
+
checkFleetPermission: (fleetId: any) => boolean;
|
|
22
|
+
checkBusinessModelPermission: (businessModelId: any) => boolean;
|
|
23
|
+
checkDemandSourcePermission: (demandSourceId: any) => boolean;
|
|
24
|
+
isUserExist: () => boolean;
|
|
25
|
+
getUser: () => any;
|
|
26
|
+
UnauthorizedAccessError: typeof UnauthorizedAccessError;
|
|
27
|
+
};
|
|
28
|
+
export default _default;
|
package/lib/index.js
CHANGED
|
@@ -18,17 +18,15 @@ var __importStar = (this && this.__importStar) || function (mod) {
|
|
|
18
18
|
__setModuleDefault(result, mod);
|
|
19
19
|
return result;
|
|
20
20
|
};
|
|
21
|
-
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
22
|
-
for (var p in m) if (p !== "default" && !exports.hasOwnProperty(p)) __createBinding(exports, m, p);
|
|
23
|
-
};
|
|
24
21
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
25
|
-
exports.UnauthorizedAccessError = exports.getTokenSecret = exports.getRefreshTokenSecret = exports.getUser = exports.isUserExist = exports.checkDemandSourcePermission = exports.checkBusinessModelPermission = exports.checkFleetPermission = exports.getDecodedBearer = exports.eagerLoadPermissionsMiddleware = exports.middlewareWithDecode = exports.middleware = exports.User = void 0;
|
|
22
|
+
exports.UnauthorizedAccessError = exports.getTokenSecret = exports.getRefreshTokenSecret = exports.getUser = exports.isUserExist = exports.checkDemandSourcePermission = exports.checkBusinessModelPermission = exports.checkFleetPermission = exports.getDecodedBearer = exports.getCurrentPayload = exports.eagerLoadPermissionsMiddleware = exports.middlewareWithDecode = exports.middleware = exports.User = void 0;
|
|
26
23
|
const user_1 = __importStar(require("./user"));
|
|
27
24
|
exports.User = user_1.default;
|
|
28
25
|
Object.defineProperty(exports, "middleware", { enumerable: true, get: function () { return user_1.middleware; } });
|
|
29
26
|
Object.defineProperty(exports, "eagerLoadPermissionsMiddleware", { enumerable: true, get: function () { return user_1.eagerLoadPermissionsMiddleware; } });
|
|
30
27
|
Object.defineProperty(exports, "middlewareWithDecode", { enumerable: true, get: function () { return user_1.middlewareWithDecode; } });
|
|
31
28
|
Object.defineProperty(exports, "getDecodedBearer", { enumerable: true, get: function () { return user_1.getDecodedBearer; } });
|
|
29
|
+
const tracer_1 = require("./tracer");
|
|
32
30
|
const check_permission_1 = require("./check-permission");
|
|
33
31
|
Object.defineProperty(exports, "checkFleetPermission", { enumerable: true, get: function () { return check_permission_1.checkFleetPermission; } });
|
|
34
32
|
Object.defineProperty(exports, "checkBusinessModelPermission", { enumerable: true, get: function () { return check_permission_1.checkBusinessModelPermission; } });
|
|
@@ -40,4 +38,20 @@ Object.defineProperty(exports, "UnauthorizedAccessError", { enumerable: true, ge
|
|
|
40
38
|
const secret_getter_1 = require("./secret-getter");
|
|
41
39
|
Object.defineProperty(exports, "getRefreshTokenSecret", { enumerable: true, get: function () { return secret_getter_1.getRefreshTokenSecret; } });
|
|
42
40
|
Object.defineProperty(exports, "getTokenSecret", { enumerable: true, get: function () { return secret_getter_1.getTokenSecret; } });
|
|
43
|
-
|
|
41
|
+
tracer_1.enable();
|
|
42
|
+
const getCurrentPayload = tracer_1.getCurrentTrace;
|
|
43
|
+
exports.getCurrentPayload = getCurrentPayload;
|
|
44
|
+
exports.default = {
|
|
45
|
+
User: user_1.default,
|
|
46
|
+
middleware: user_1.middleware,
|
|
47
|
+
middlewareWithDecode: user_1.middlewareWithDecode,
|
|
48
|
+
eagerLoadPermissionsMiddleware: user_1.eagerLoadPermissionsMiddleware,
|
|
49
|
+
getCurrentPayload,
|
|
50
|
+
getDecodedBearer: user_1.getDecodedBearer,
|
|
51
|
+
checkFleetPermission: check_permission_1.checkFleetPermission,
|
|
52
|
+
checkBusinessModelPermission: check_permission_1.checkBusinessModelPermission,
|
|
53
|
+
checkDemandSourcePermission: check_permission_1.checkDemandSourcePermission,
|
|
54
|
+
isUserExist: check_permission_1.isUserExist,
|
|
55
|
+
getUser: check_permission_1.getUser,
|
|
56
|
+
UnauthorizedAccessError: errors_1.UnauthorizedAccessError,
|
|
57
|
+
};
|
|
@@ -48,7 +48,7 @@ describe('secret getter tests', () => {
|
|
|
48
48
|
});
|
|
49
49
|
it('test get new refresh token secret when after deprecation timestamp', () => __awaiter(void 0, void 0, void 0, function* () {
|
|
50
50
|
process.env.DEPRECATION_UNIX_TIMESTAMP = moment_1.default().subtract(1, 'days').unix().toString();
|
|
51
|
-
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('
|
|
51
|
+
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('./secret-getter')));
|
|
52
52
|
const token = jsonwebtoken_1.default.sign({
|
|
53
53
|
exp: moment_1.default().unix() + (60 * 60 * 24 * 365),
|
|
54
54
|
}, testSecrets.JWT_NEW_SECRET);
|
|
@@ -57,7 +57,7 @@ describe('secret getter tests', () => {
|
|
|
57
57
|
}));
|
|
58
58
|
it('test get old refresh token secret when before deprecation timestamp', () => __awaiter(void 0, void 0, void 0, function* () {
|
|
59
59
|
process.env.DEPRECATION_UNIX_TIMESTAMP = moment_1.default().add(1, 'days').unix().toString();
|
|
60
|
-
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('
|
|
60
|
+
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('./secret-getter')));
|
|
61
61
|
const token = jsonwebtoken_1.default.sign({
|
|
62
62
|
exp: moment_1.default().unix() + (60 * 60 * 24 * 365),
|
|
63
63
|
}, testSecrets.DEPRECATED_JWT_SECRET);
|
|
@@ -69,20 +69,20 @@ describe('secret getter tests', () => {
|
|
|
69
69
|
exp: moment_1.default().unix() + (60 * 60 * 24 * 365),
|
|
70
70
|
}, testSecrets.DEPRECATED_JWT_SECRET);
|
|
71
71
|
process.env.DEPRECATION_UNIX_TIMESTAMP = moment_1.default().add(10, 'seconds').unix().toString();
|
|
72
|
-
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('
|
|
72
|
+
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('./secret-getter')));
|
|
73
73
|
yield sleep(1000);
|
|
74
74
|
const result = getTokenSecret(token);
|
|
75
75
|
expect(result).toBe(testSecrets.DEPRECATED_JWT_SECRET);
|
|
76
76
|
}));
|
|
77
77
|
it('test malformed token returns new secret', () => __awaiter(void 0, void 0, void 0, function* () {
|
|
78
|
-
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('
|
|
78
|
+
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('./secret-getter')));
|
|
79
79
|
const token = 'shit';
|
|
80
80
|
const result = getTokenSecret(token);
|
|
81
81
|
expect(result).toBe(testSecrets.JWT_NEW_SECRET);
|
|
82
82
|
}));
|
|
83
83
|
it('test malformed token returns new secret even before deprecation time', () => __awaiter(void 0, void 0, void 0, function* () {
|
|
84
84
|
process.env.DEPRECATION_UNIX_TIMESTAMP = moment_1.default().add(10, 'day').unix().toString();
|
|
85
|
-
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('
|
|
85
|
+
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('./secret-getter')));
|
|
86
86
|
const token = 'shit';
|
|
87
87
|
const result = getTokenSecret(token);
|
|
88
88
|
expect(result).toBe(testSecrets.JWT_NEW_SECRET);
|
package/lib/tracer.d.ts
ADDED
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
import asyncHooks from 'async_hooks';
|
|
2
|
+
declare const tracer: {
|
|
3
|
+
currentTrace: any;
|
|
4
|
+
traces: {};
|
|
5
|
+
};
|
|
6
|
+
declare class Trace {
|
|
7
|
+
id: string;
|
|
8
|
+
type: string;
|
|
9
|
+
context: Map<string, any>;
|
|
10
|
+
constructor(type: any);
|
|
11
|
+
}
|
|
12
|
+
export declare const newTrace: (type: any) => Trace;
|
|
13
|
+
export declare const enable: () => asyncHooks.AsyncHook;
|
|
14
|
+
export declare const getCurrentTrace: () => any;
|
|
15
|
+
export default tracer;
|
package/lib/tracer.js
ADDED
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.getCurrentTrace = exports.enable = exports.newTrace = void 0;
|
|
7
|
+
const async_hooks_1 = __importDefault(require("async_hooks"));
|
|
8
|
+
const uuid_1 = require("uuid");
|
|
9
|
+
const prevStates = {};
|
|
10
|
+
const tracer = {
|
|
11
|
+
currentTrace: null,
|
|
12
|
+
traces: {},
|
|
13
|
+
};
|
|
14
|
+
function init(asyncId, type, triggerAsyncId) {
|
|
15
|
+
if (tracer.traces[triggerAsyncId]) {
|
|
16
|
+
tracer.traces[asyncId] = tracer.traces[triggerAsyncId];
|
|
17
|
+
}
|
|
18
|
+
}
|
|
19
|
+
function before(asyncId) {
|
|
20
|
+
if (!tracer.traces[asyncId]) {
|
|
21
|
+
return;
|
|
22
|
+
}
|
|
23
|
+
prevStates[asyncId] = tracer.currentTrace;
|
|
24
|
+
tracer.currentTrace = tracer.traces[asyncId];
|
|
25
|
+
}
|
|
26
|
+
function after(asyncId) {
|
|
27
|
+
if (!tracer.traces[asyncId]) {
|
|
28
|
+
return;
|
|
29
|
+
}
|
|
30
|
+
tracer.currentTrace = prevStates[asyncId];
|
|
31
|
+
}
|
|
32
|
+
function destroy(asyncId) {
|
|
33
|
+
if (tracer.traces[asyncId]) {
|
|
34
|
+
delete tracer.traces[asyncId];
|
|
35
|
+
delete prevStates[asyncId];
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
const hook = async_hooks_1.default.createHook({
|
|
39
|
+
init, before, after, destroy,
|
|
40
|
+
});
|
|
41
|
+
class Trace {
|
|
42
|
+
constructor(type) {
|
|
43
|
+
this.id = uuid_1.v1();
|
|
44
|
+
this.type = type;
|
|
45
|
+
this.context = new Map();
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
exports.newTrace = (type) => {
|
|
49
|
+
tracer.currentTrace = new Trace(type);
|
|
50
|
+
tracer.traces[async_hooks_1.default.executionAsyncId()] = tracer.currentTrace;
|
|
51
|
+
return tracer.currentTrace;
|
|
52
|
+
};
|
|
53
|
+
exports.enable = () => hook.enable();
|
|
54
|
+
exports.getCurrentTrace = () => tracer.currentTrace || {};
|
|
55
|
+
exports.default = tracer;
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
interface EntityPermissions {
|
|
2
|
+
[key: string]: string[];
|
|
3
|
+
}
|
|
4
|
+
export interface UserPayload {
|
|
5
|
+
businessModels: EntityPermissions;
|
|
6
|
+
fleets: EntityPermissions;
|
|
7
|
+
demandSources: EntityPermissions;
|
|
8
|
+
contexts?: EntityPermissions;
|
|
9
|
+
createdAt?: string;
|
|
10
|
+
}
|
|
11
|
+
export declare type CustomPermissionLoader = (string: any) => Promise<UserPayload>;
|
|
12
|
+
export default class ApiUser {
|
|
13
|
+
id: string | undefined;
|
|
14
|
+
privatePermissions: UserPayload | undefined;
|
|
15
|
+
privatePermissionsLegacy: any;
|
|
16
|
+
emptyUser: boolean;
|
|
17
|
+
constructor(id?: string);
|
|
18
|
+
getUserPermissions(): Promise<UserPayload>;
|
|
19
|
+
useCustomPermissionLoader(customPermissionLoader: any): Promise<unknown>;
|
|
20
|
+
get businessModels(): string[] | undefined;
|
|
21
|
+
get fleets(): string[] | undefined;
|
|
22
|
+
get demandSources(): string[] | undefined;
|
|
23
|
+
getUserProperty(key: any): string[] | undefined;
|
|
24
|
+
get permissions(): UserPayload | undefined;
|
|
25
|
+
getUserPermissionsLegacy(): Promise<any>;
|
|
26
|
+
get permissionsLegacy(): any;
|
|
27
|
+
}
|
|
28
|
+
export {};
|
|
@@ -0,0 +1,96 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
12
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
13
|
+
};
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
/* eslint-disable consistent-return */
|
|
16
|
+
const node_cache_1 = __importDefault(require("node-cache"));
|
|
17
|
+
const services_1 = require("../services");
|
|
18
|
+
const userCache = new node_cache_1.default({ stdTTL: 10 });
|
|
19
|
+
class ApiUser {
|
|
20
|
+
constructor(id) {
|
|
21
|
+
this.id = id;
|
|
22
|
+
this.emptyUser = !!id;
|
|
23
|
+
}
|
|
24
|
+
getUserPermissions() {
|
|
25
|
+
return __awaiter(this, void 0, void 0, function* () {
|
|
26
|
+
if (!this.id) {
|
|
27
|
+
return;
|
|
28
|
+
}
|
|
29
|
+
if (this.privatePermissions) {
|
|
30
|
+
return this.privatePermissions;
|
|
31
|
+
}
|
|
32
|
+
const { data } = yield services_1.IdentityNetwork.get(`/api/v1/users/${this.id}/authorization-payload`);
|
|
33
|
+
this.privatePermissions = data;
|
|
34
|
+
return this.privatePermissions;
|
|
35
|
+
});
|
|
36
|
+
}
|
|
37
|
+
useCustomPermissionLoader(customPermissionLoader) {
|
|
38
|
+
return __awaiter(this, void 0, void 0, function* () {
|
|
39
|
+
if (!this.id) {
|
|
40
|
+
return;
|
|
41
|
+
}
|
|
42
|
+
if (this.privatePermissions) {
|
|
43
|
+
return this.privatePermissions;
|
|
44
|
+
}
|
|
45
|
+
const cachedResult = userCache.get(this.id);
|
|
46
|
+
if (cachedResult) {
|
|
47
|
+
return cachedResult;
|
|
48
|
+
}
|
|
49
|
+
const data = yield customPermissionLoader(this.id);
|
|
50
|
+
userCache.set(this.id, data, data);
|
|
51
|
+
this.privatePermissions = data;
|
|
52
|
+
return this.privatePermissions;
|
|
53
|
+
});
|
|
54
|
+
}
|
|
55
|
+
get businessModels() {
|
|
56
|
+
return this.getUserProperty('businessModels');
|
|
57
|
+
}
|
|
58
|
+
get fleets() {
|
|
59
|
+
return this.getUserProperty('fleets');
|
|
60
|
+
}
|
|
61
|
+
get demandSources() {
|
|
62
|
+
return this.getUserProperty('demandSources');
|
|
63
|
+
}
|
|
64
|
+
getUserProperty(key) {
|
|
65
|
+
if (!this.privatePermissions) {
|
|
66
|
+
throw new Error(`Cannot get ${key} without calling (async) getUserPermissions before`);
|
|
67
|
+
}
|
|
68
|
+
return Object.keys(this.privatePermissions[key] || {});
|
|
69
|
+
}
|
|
70
|
+
get permissions() {
|
|
71
|
+
if (!this.privatePermissions) {
|
|
72
|
+
throw new Error('Cannot get permissions without calling (async) getUserPermissions before');
|
|
73
|
+
}
|
|
74
|
+
return this.privatePermissions;
|
|
75
|
+
}
|
|
76
|
+
getUserPermissionsLegacy() {
|
|
77
|
+
return __awaiter(this, void 0, void 0, function* () {
|
|
78
|
+
if (!this.id) {
|
|
79
|
+
return;
|
|
80
|
+
}
|
|
81
|
+
if (this.privatePermissionsLegacy) {
|
|
82
|
+
return this.privatePermissionsLegacy;
|
|
83
|
+
}
|
|
84
|
+
const { data } = yield services_1.IdentityNetwork.get(`/api/v1/users/${this.id}/authorization-payload-legacy`);
|
|
85
|
+
this.privatePermissionsLegacy = data;
|
|
86
|
+
return this.privatePermissionsLegacy;
|
|
87
|
+
});
|
|
88
|
+
}
|
|
89
|
+
get permissionsLegacy() {
|
|
90
|
+
if (!this.privatePermissionsLegacy) {
|
|
91
|
+
throw new Error('Cannot get permissionsLegacy without calling (async) getUserPermissionsLegacy before');
|
|
92
|
+
}
|
|
93
|
+
return this.privatePermissionsLegacy;
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
exports.default = ApiUser;
|
package/lib/user/api-user.d.ts
CHANGED
|
@@ -7,7 +7,6 @@ export interface UserPayload {
|
|
|
7
7
|
demandSources: EntityPermissions;
|
|
8
8
|
createdAt?: string;
|
|
9
9
|
}
|
|
10
|
-
export declare type CustomPermissionLoader = (string: any) => Promise<UserPayload>;
|
|
11
10
|
export default class ApiUser {
|
|
12
11
|
id: string | undefined;
|
|
13
12
|
privatePermissions: UserPayload | undefined;
|
|
@@ -15,7 +14,6 @@ export default class ApiUser {
|
|
|
15
14
|
emptyUser: boolean;
|
|
16
15
|
constructor(id?: string);
|
|
17
16
|
getUserPermissions(): Promise<UserPayload>;
|
|
18
|
-
useCustomPermissionLoader(customPermissionLoader: any): Promise<unknown>;
|
|
19
17
|
get businessModels(): string[] | undefined;
|
|
20
18
|
get fleets(): string[] | undefined;
|
|
21
19
|
get demandSources(): string[] | undefined;
|
package/lib/user/api-user.js
CHANGED
|
@@ -8,14 +8,9 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
|
|
|
8
8
|
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
9
|
});
|
|
10
10
|
};
|
|
11
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
12
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
13
|
-
};
|
|
14
11
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
12
|
/* eslint-disable consistent-return */
|
|
16
|
-
const
|
|
17
|
-
const identity_ms_1 = require("../services/identity-ms");
|
|
18
|
-
const userCache = new node_cache_1.default({ stdTTL: 10 });
|
|
13
|
+
const services_1 = require("../services");
|
|
19
14
|
class ApiUser {
|
|
20
15
|
constructor(id) {
|
|
21
16
|
this.id = id;
|
|
@@ -29,25 +24,7 @@ class ApiUser {
|
|
|
29
24
|
if (this.privatePermissions) {
|
|
30
25
|
return this.privatePermissions;
|
|
31
26
|
}
|
|
32
|
-
const { data } = yield
|
|
33
|
-
this.privatePermissions = data;
|
|
34
|
-
return this.privatePermissions;
|
|
35
|
-
});
|
|
36
|
-
}
|
|
37
|
-
useCustomPermissionLoader(customPermissionLoader) {
|
|
38
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
39
|
-
if (!this.id) {
|
|
40
|
-
return;
|
|
41
|
-
}
|
|
42
|
-
if (this.privatePermissions) {
|
|
43
|
-
return this.privatePermissions;
|
|
44
|
-
}
|
|
45
|
-
const cachedResult = userCache.get(this.id);
|
|
46
|
-
if (cachedResult) {
|
|
47
|
-
return cachedResult;
|
|
48
|
-
}
|
|
49
|
-
const data = yield customPermissionLoader(this.id);
|
|
50
|
-
userCache.set(this.id, data, data);
|
|
27
|
+
const { data } = yield services_1.IdentityNetwork.get(`/api/v1/users/${this.id}/authorization-payload`);
|
|
51
28
|
this.privatePermissions = data;
|
|
52
29
|
return this.privatePermissions;
|
|
53
30
|
});
|
|
@@ -81,7 +58,7 @@ class ApiUser {
|
|
|
81
58
|
if (this.privatePermissionsLegacy) {
|
|
82
59
|
return this.privatePermissionsLegacy;
|
|
83
60
|
}
|
|
84
|
-
const { data } = yield
|
|
61
|
+
const { data } = yield services_1.IdentityNetwork.get(`/api/v1/users/${this.id}/authorization-payload-legacy`);
|
|
85
62
|
this.privatePermissionsLegacy = data;
|
|
86
63
|
return this.privatePermissionsLegacy;
|
|
87
64
|
});
|
package/lib/user/index.d.ts
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import ApiUser, { CustomPermissionLoader } from './
|
|
1
|
+
import ApiUser, { CustomPermissionLoader } from './ApiUser';
|
|
2
2
|
export declare const middleware: (options?: {
|
|
3
3
|
eagerLoadUserPermissions?: boolean;
|
|
4
4
|
eagerLoadUserPermissionsLegacy?: boolean;
|
|
@@ -7,7 +7,7 @@ export declare const middleware: (options?: {
|
|
|
7
7
|
export declare const middlewareWithDecode: (options?: {
|
|
8
8
|
eagerLoadUserPermissions?: boolean;
|
|
9
9
|
eagerLoadUserPermissionsLegacy?: boolean;
|
|
10
|
-
}) => (req: any, res: any, next: any) => Promise<
|
|
11
|
-
export declare const eagerLoadPermissionsMiddleware: (req: any, res: any, next: any) => Promise<
|
|
10
|
+
}) => (req: any, res: any, next: any) => Promise<void>;
|
|
11
|
+
export declare const eagerLoadPermissionsMiddleware: (req: any, res: any, next: any) => Promise<any>;
|
|
12
12
|
export declare const getDecodedBearer: (req: any) => any;
|
|
13
13
|
export default ApiUser;
|
package/lib/user/index.js
CHANGED
|
@@ -14,38 +14,40 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
|
14
14
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
15
|
exports.getDecodedBearer = exports.eagerLoadPermissionsMiddleware = exports.middlewareWithDecode = exports.middleware = void 0;
|
|
16
16
|
const jsonwebtoken_1 = require("jsonwebtoken");
|
|
17
|
-
const
|
|
17
|
+
const ApiUser_1 = __importDefault(require("./ApiUser"));
|
|
18
18
|
const utils_1 = require("../utils");
|
|
19
|
-
const
|
|
19
|
+
const tracer_1 = require("../tracer");
|
|
20
20
|
exports.middleware = (options = {}) => (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
|
|
21
21
|
const userId = req.headers['x-af-user-id'];
|
|
22
|
-
const
|
|
22
|
+
const trace = tracer_1.newTrace('userPayload');
|
|
23
23
|
if (!userId) {
|
|
24
|
-
context.set('userObject', {});
|
|
24
|
+
trace.context.set('userObject', {});
|
|
25
|
+
return next();
|
|
25
26
|
}
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
if (options.
|
|
29
|
-
|
|
30
|
-
yield userObject.useCustomPermissionLoader(options.customPermissionLoader);
|
|
31
|
-
}
|
|
32
|
-
else {
|
|
33
|
-
yield userObject.getUserPermissions();
|
|
34
|
-
}
|
|
27
|
+
const userObject = new ApiUser_1.default(userId);
|
|
28
|
+
if (options.eagerLoadUserPermissions) {
|
|
29
|
+
if (options.customPermissionLoader) {
|
|
30
|
+
yield userObject.useCustomPermissionLoader(options.customPermissionLoader);
|
|
35
31
|
}
|
|
36
|
-
|
|
37
|
-
yield userObject.
|
|
32
|
+
else {
|
|
33
|
+
yield userObject.getUserPermissions();
|
|
38
34
|
}
|
|
39
|
-
req.user = userObject;
|
|
40
|
-
context.set('userObject', userObject);
|
|
41
35
|
}
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
}
|
|
36
|
+
if (options.eagerLoadUserPermissions) {
|
|
37
|
+
yield userObject.getUserPermissions();
|
|
38
|
+
}
|
|
39
|
+
if (options.eagerLoadUserPermissionsLegacy) {
|
|
40
|
+
yield userObject.getUserPermissionsLegacy();
|
|
41
|
+
}
|
|
42
|
+
req.user = userObject;
|
|
43
|
+
trace.context.set('userObject', userObject);
|
|
44
|
+
// Added in order to support outbreak.
|
|
45
|
+
req.headers['x-af-user-permissions'] = userObject;
|
|
46
|
+
return next();
|
|
45
47
|
});
|
|
46
48
|
exports.middlewareWithDecode = (options = {}) => (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
|
|
47
49
|
var _a;
|
|
48
|
-
const
|
|
50
|
+
const trace = tracer_1.newTrace('userPayload');
|
|
49
51
|
let decoded;
|
|
50
52
|
if (req.headers.authorization) {
|
|
51
53
|
try {
|
|
@@ -53,24 +55,30 @@ exports.middlewareWithDecode = (options = {}) => (req, res, next) => __awaiter(v
|
|
|
53
55
|
}
|
|
54
56
|
catch (e) {
|
|
55
57
|
if (e instanceof jsonwebtoken_1.TokenExpiredError) {
|
|
56
|
-
|
|
58
|
+
res.status(401);
|
|
59
|
+
res.json({
|
|
57
60
|
errors: ['Access token expired'],
|
|
58
61
|
});
|
|
59
62
|
}
|
|
60
|
-
if (e instanceof jsonwebtoken_1.JsonWebTokenError) {
|
|
61
|
-
|
|
63
|
+
else if (e instanceof jsonwebtoken_1.JsonWebTokenError) {
|
|
64
|
+
res.status(400);
|
|
65
|
+
res.json({
|
|
62
66
|
errors: [e.message],
|
|
63
67
|
});
|
|
64
68
|
}
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
69
|
+
else {
|
|
70
|
+
res.status(500);
|
|
71
|
+
res.json({
|
|
72
|
+
errors: ['Server error while parsing token'],
|
|
73
|
+
});
|
|
74
|
+
}
|
|
75
|
+
return;
|
|
68
76
|
}
|
|
69
77
|
const userId = (_a = decoded === null || decoded === void 0 ? void 0 : decoded.user) === null || _a === void 0 ? void 0 : _a.id;
|
|
70
78
|
if (userId) {
|
|
71
79
|
req.headers['X-AF-USER-ID'] = userId;
|
|
72
80
|
}
|
|
73
|
-
const userObject = new
|
|
81
|
+
const userObject = new ApiUser_1.default(userId);
|
|
74
82
|
if (options.eagerLoadUserPermissions) {
|
|
75
83
|
yield userObject.getUserPermissions();
|
|
76
84
|
}
|
|
@@ -78,20 +86,17 @@ exports.middlewareWithDecode = (options = {}) => (req, res, next) => __awaiter(v
|
|
|
78
86
|
yield userObject.getUserPermissionsLegacy();
|
|
79
87
|
}
|
|
80
88
|
req.user = userObject;
|
|
81
|
-
context.set('userObject', userObject);
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
context.set('userObject', {});
|
|
89
|
+
trace.context.set('userObject', userObject);
|
|
90
|
+
// Added in order to support outbreak.
|
|
91
|
+
req.headers['x-af-user-permissions'] = userObject;
|
|
85
92
|
}
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
93
|
+
trace.context.set('userObject', {});
|
|
94
|
+
// eslint-disable-next-line consistent-return
|
|
95
|
+
return next();
|
|
89
96
|
});
|
|
90
97
|
exports.eagerLoadPermissionsMiddleware = (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
|
|
91
98
|
yield req.user.getUserPermissions();
|
|
92
|
-
return
|
|
93
|
-
next();
|
|
94
|
-
});
|
|
99
|
+
return next();
|
|
95
100
|
});
|
|
96
101
|
exports.getDecodedBearer = (req) => {
|
|
97
102
|
if (req.headers.authorization) {
|
|
@@ -99,4 +104,4 @@ exports.getDecodedBearer = (req) => {
|
|
|
99
104
|
}
|
|
100
105
|
return null;
|
|
101
106
|
};
|
|
102
|
-
exports.default =
|
|
107
|
+
exports.default = ApiUser_1.default;
|
|
@@ -22,7 +22,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
22
22
|
exports.getContextAttributes = exports.getEntitiesFromContext = exports.parsePermissions = exports.decodeBearer = exports.getAuthFromBearer = void 0;
|
|
23
23
|
/* eslint-disable prefer-destructuring */
|
|
24
24
|
const jwt = __importStar(require("jsonwebtoken"));
|
|
25
|
-
const secret_getter_1 = require("
|
|
25
|
+
const secret_getter_1 = require("./secret-getter");
|
|
26
26
|
const CONTEXT_PROPS = ['fleetId', 'businessModelId', 'demandSourceId'];
|
|
27
27
|
const CONTEXT_MAP_PROPS = {
|
|
28
28
|
fleet: 'fleets',
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@autofleet/zehut",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.7.0-beta1",
|
|
4
4
|
"description": "manage user's identity",
|
|
5
5
|
"main": "lib/index.js",
|
|
6
6
|
"types": "lib/index.d.ts",
|
|
@@ -28,6 +28,7 @@
|
|
|
28
28
|
"homepage": "https://github.com/Autofleet/zehut",
|
|
29
29
|
"dependencies": {
|
|
30
30
|
"@autofleet/network": "^1.2.5",
|
|
31
|
+
"@autofleet/outbreak": "0.0.7",
|
|
31
32
|
"@types/jest": "^22.0.0",
|
|
32
33
|
"jsonwebtoken": "^8.5.1",
|
|
33
34
|
"moment": "^2.29.1",
|
|
@@ -35,19 +36,15 @@
|
|
|
35
36
|
"uuid": "^8.3.2"
|
|
36
37
|
},
|
|
37
38
|
"devDependencies": {
|
|
38
|
-
"
|
|
39
|
+
"typescript": "^3.9.5",
|
|
40
|
+
"jest": "^22.4.4",
|
|
41
|
+
"ts-jest": "^25.4.0",
|
|
39
42
|
"@typescript-eslint/eslint-plugin": "^4.8.1",
|
|
40
43
|
"eslint": "^7.13.0",
|
|
41
44
|
"eslint-config-airbnb-typescript": "^12.0.0",
|
|
42
|
-
"eslint-plugin-import": "^2.22.1"
|
|
43
|
-
"jest": "^22.4.4",
|
|
44
|
-
"ts-jest": "^25.4.0",
|
|
45
|
-
"typescript": "^3.9.5"
|
|
45
|
+
"eslint-plugin-import": "^2.22.1"
|
|
46
46
|
},
|
|
47
47
|
"files": [
|
|
48
48
|
"lib/**/*"
|
|
49
|
-
]
|
|
50
|
-
"peerDependencies": {
|
|
51
|
-
"@autofleet/outbreak": "^0.1.1"
|
|
52
|
-
}
|
|
49
|
+
]
|
|
53
50
|
}
|
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const async_hooks_1 = require("async_hooks");
|
|
4
|
-
class ContextManager extends async_hooks_1.AsyncLocalStorage {
|
|
5
|
-
getContext() {
|
|
6
|
-
return this.getStore();
|
|
7
|
-
}
|
|
8
|
-
}
|
|
9
|
-
exports.default = ContextManager;
|
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const uuid_1 = require("uuid");
|
|
4
|
-
class Context {
|
|
5
|
-
constructor() {
|
|
6
|
-
this.id = uuid_1.v4();
|
|
7
|
-
this.store = new Map();
|
|
8
|
-
}
|
|
9
|
-
set(key, value) {
|
|
10
|
-
this.store.set(key, value);
|
|
11
|
-
}
|
|
12
|
-
get(key) {
|
|
13
|
-
return this.store.get(key);
|
|
14
|
-
}
|
|
15
|
-
}
|
|
16
|
-
exports.default = Context;
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
exports.Context = exports.contextManager = void 0;
|
|
7
|
-
const context_manager_1 = __importDefault(require("./context-manager"));
|
|
8
|
-
const context_1 = __importDefault(require("./context"));
|
|
9
|
-
exports.Context = context_1.default;
|
|
10
|
-
const contextManager = new context_manager_1.default();
|
|
11
|
-
exports.contextManager = contextManager;
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|