@bleedingdev/modern-js-bff-core 3.5.0-ultramodern.4 → 3.5.0-ultramodern.41

package/dist/esm/security/operationContracts.mjs

@@ -4,7 +4,7 @@ import { HttpMetadata } from "../types.mjs";
 import { __webpack_require__ } from "../rslib-runtime.mjs";
 import * as __rspack_external_zod from "zod";
 __webpack_require__.add({
-    6284 (module) {
+    7347 (module) {
         module.exports = __rspack_external_zod;
     }
 });
@@ -29,7 +29,7 @@ let cachedZodToJSONSchema;
 const resolveZodToJSONSchema = ()=>{
     if (void 0 !== cachedZodToJSONSchema) return cachedZodToJSONSchema;
     try {
-        const zod = __webpack_require__(6284);
+        const zod = __webpack_require__(7347);
         const candidate = zod?.toJSONSchema ?? zod?.z?.toJSONSchema;
         cachedZodToJSONSchema = 'function' == typeof candidate ? candidate : null;
     } catch  {

package/dist/esm-node/adapter-kit/index.mjs

@@ -57,10 +57,14 @@ const getResponseMetaList = (handler)=>{
     const responseMeta = Reflect.getMetadata(HttpMetadata.Response, handler);
     return Array.isArray(responseMeta) ? responseMeta : [];
 };
-const buildPositionalHandlerArgs = (input)=>[
-        ...Object.values(input.params),
+const buildPositionalHandlerArgs = (input, routePath)=>{
+    const paramNames = routePath?.match(/:(\w+)/g)?.map((param)=>param.slice(1)) ?? [];
+    const positionalParams = paramNames.length > 0 ? paramNames.map((param)=>input.params[param]) : Object.values(input.params);
+    return [
+        ...positionalParams,
         input
     ];
+};
 const checkCrossProjectPolicy = (headers, policy)=>{
     const violation = evaluateCrossProjectPolicy(headers, policy);
     if (!violation) return null;

package/dist/esm-node/adapter-kit/parity-scenarios/cross-project-denial.mjs

@@ -0,0 +1,18 @@
+import "node:module";
+import { deniedScenario, envelopeHeader } from "./shared.mjs";
+const createCrossProjectDenialScenarios = ()=>[
+        deniedScenario('policy denies missing envelope', 'missing_envelope', {}),
+        deniedScenario('policy denies invalid envelope', 'invalid_envelope', {
+            'x-modernjs-bff-envelope': 'not-json'
+        }),
+        deniedScenario('policy denies envelope that is valid JSON but not an object', 'invalid_envelope', {
+            'x-modernjs-bff-envelope': '123'
+        }),
+        deniedScenario('policy denies missing requestId', 'missing_request_id', {
+            'x-modernjs-bff-envelope': envelopeHeader(void 0)
+        }),
+        deniedScenario('policy denies namespace outside allowlist', 'namespace_not_allowed', {
+            'x-modernjs-bff-envelope': envelopeHeader('billing.producer-z')
+        })
+    ];
+export { createCrossProjectDenialScenarios };

package/dist/esm-node/adapter-kit/parity-scenarios/envelope.mjs

@@ -0,0 +1,91 @@
+import "node:module";
+const createEnvelopeParityScenarios = ()=>[
+        {
+            name: 'plain handler returns object payload',
+            policy: false,
+            request: {
+                method: 'get',
+                path: '/hello'
+            },
+            expected: {
+                kind: 'payload',
+                status: 200,
+                payload: {
+                    message: 'hello'
+                }
+            }
+        },
+        {
+            name: 'plain handler returns scalar payload',
+            policy: false,
+            request: {
+                method: 'post',
+                path: '/hello'
+            },
+            expected: {
+                kind: 'payload',
+                status: 200,
+                payload: 'hello'
+            }
+        },
+        {
+            name: 'plain handler returning undefined',
+            policy: false,
+            request: {
+                method: 'get',
+                path: '/nothing'
+            },
+            expected: {
+                kind: 'payload',
+                status: 404,
+                payload: '404 Not Found'
+            }
+        },
+        {
+            name: 'plain handler receives data, query and cookies',
+            policy: false,
+            request: {
+                method: 'post',
+                path: '/echo?q=z',
+                headers: {
+                    'content-type': 'application/json',
+                    cookie: 'id=666'
+                },
+                body: {
+                    a: 1
+                }
+            },
+            expected: {
+                kind: 'payload',
+                status: 200,
+                payload: {
+                    data: {
+                        a: 1
+                    },
+                    query: {
+                        q: 'z'
+                    },
+                    cookie: 'id=666'
+                }
+            }
+        },
+        {
+            name: 'plain handler receives positional route params',
+            policy: false,
+            request: {
+                method: 'get',
+                path: '/items/123?q=x'
+            },
+            expected: {
+                kind: 'payload',
+                status: 200,
+                payload: {
+                    id: '123',
+                    query: {
+                        q: 'x'
+                    }
+                }
+            }
+        }
+    ];
+export { createEnvelopeParityScenarios };

package/dist/esm-node/adapter-kit/parity-scenarios/operation-context.mjs

@@ -0,0 +1,118 @@
+import "node:module";
+import { PARITY_PRODUCER_REQUEST_ID, deniedScenario, detailHeader } from "./shared.mjs";
+const createOperationContextSuccessScenarios = ({ helloContract, validEnvelope, validOperationId })=>[
+        {
+            name: 'policy pass with full operation context',
+            policy: true,
+            request: {
+                method: 'get',
+                path: '/hello',
+                headers: {
+                    'x-modernjs-bff-envelope': validEnvelope,
+                    'x-operation-id': validOperationId,
+                    'x-modernjs-bff-operation-context': detailHeader({
+                        requestId: PARITY_PRODUCER_REQUEST_ID,
+                        method: 'GET',
+                        routePath: '/hello',
+                        schemaHash: helloContract.schemaHash,
+                        operationVersion: helloContract.operationVersion
+                    })
+                }
+            },
+            expected: {
+                kind: 'payload',
+                status: 200,
+                payload: {
+                    message: 'hello'
+                }
+            }
+        }
+    ];
+const createOperationContextDenialScenarios = ({ helloContract, validEnvelope, validOperationId })=>[
+        deniedScenario('policy denies missing operation context', 'missing_operation_context', {
+            'x-modernjs-bff-envelope': validEnvelope
+        }),
+        deniedScenario('policy denies operation context mismatch', 'operation_context_mismatch', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': 'someone-else:parity'
+        }),
+        deniedScenario('policy denies missing operation context details', 'missing_operation_context_details', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId
+        }),
+        deniedScenario('policy denies JSON-array operation context details', 'invalid_operation_context_details', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId,
+            'x-modernjs-bff-operation-context': '[]'
+        }),
+        deniedScenario('policy denies invalid operation context details', 'invalid_operation_context_details', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId,
+            'x-modernjs-bff-operation-context': 'not-json'
+        }),
+        deniedScenario('policy denies detail requestId mismatch', 'operation_context_details_request_id_mismatch', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId,
+            'x-modernjs-bff-operation-context': detailHeader({
+                requestId: 'crm.producer-b',
+                method: 'GET',
+                routePath: '/hello',
+                schemaHash: helloContract.schemaHash,
+                operationVersion: helloContract.operationVersion
+            })
+        }),
+        deniedScenario('policy denies missing operation schema hash', 'missing_operation_schema_hash', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId,
+            'x-modernjs-bff-operation-context': detailHeader({
+                requestId: PARITY_PRODUCER_REQUEST_ID,
+                method: 'GET',
+                routePath: '/hello',
+                operationVersion: helloContract.operationVersion
+            })
+        }),
+        deniedScenario('policy denies missing operation version', 'missing_operation_version', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId,
+            'x-modernjs-bff-operation-context': detailHeader({
+                requestId: PARITY_PRODUCER_REQUEST_ID,
+                method: 'GET',
+                routePath: '/hello',
+                schemaHash: helloContract.schemaHash
+            })
+        }),
+        deniedScenario('policy denies unknown operation contract', 'unknown_operation_contract', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId,
+            'x-modernjs-bff-operation-context': detailHeader({
+                requestId: PARITY_PRODUCER_REQUEST_ID,
+                method: 'GET',
+                routePath: '/does-not-exist',
+                schemaHash: helloContract.schemaHash,
+                operationVersion: helloContract.operationVersion
+            })
+        }),
+        deniedScenario('policy denies operation schema hash mismatch', 'operation_schema_hash_mismatch', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId,
+            'x-modernjs-bff-operation-context': detailHeader({
+                requestId: PARITY_PRODUCER_REQUEST_ID,
+                method: 'GET',
+                routePath: '/hello',
+                schemaHash: 'deadbeef',
+                operationVersion: helloContract.operationVersion
+            })
+        }),
+        deniedScenario('policy denies operation version mismatch', 'operation_version_mismatch', {
+            'x-modernjs-bff-envelope': validEnvelope,
+            'x-operation-id': validOperationId,
+            'x-modernjs-bff-operation-context': detailHeader({
+                requestId: PARITY_PRODUCER_REQUEST_ID,
+                method: 'GET',
+                routePath: '/hello',
+                schemaHash: helloContract.schemaHash,
+                operationVersion: helloContract.operationVersion + 1
+            })
+        })
+    ];
+export { createOperationContextDenialScenarios, createOperationContextSuccessScenarios };

package/dist/esm-node/adapter-kit/parity-scenarios/schema.mjs

@@ -0,0 +1,72 @@
+import "node:module";
+const createSchemaParityScenarios = ()=>[
+        {
+            name: 'schema handler success',
+            policy: false,
+            request: {
+                method: 'patch',
+                path: '/schema',
+                headers: {
+                    'content-type': 'application/json'
+                },
+                body: {
+                    id: 777
+                }
+            },
+            expected: {
+                kind: 'payload',
+                status: 200,
+                payload: {
+                    type: 'HandleSuccess',
+                    value: {
+                        id: 777
+                    }
+                }
+            }
+        },
+        {
+            name: 'schema handler input validation error',
+            policy: false,
+            request: {
+                method: 'patch',
+                path: '/schema',
+                headers: {
+                    'content-type': 'application/json'
+                },
+                body: {
+                    id: 'aaa'
+                }
+            },
+            expected: {
+                kind: 'payload',
+                status: 200,
+                payload: {
+                    type: 'InputValidationError',
+                    message: 'invalid input'
+                }
+            }
+        },
+        {
+            name: 'schema handler output validation error',
+            policy: false,
+            request: {
+                method: 'patch',
+                path: '/schema',
+                headers: {
+                    'content-type': 'application/json'
+                },
+                body: {
+                    id: 'boom'
+                }
+            },
+            expected: {
+                kind: 'payload',
+                status: 200,
+                payload: {
+                    type: 'OutputValidationError',
+                    message: 'invalid output'
+                }
+            }
+        }
+    ];
+export { createSchemaParityScenarios };

package/dist/esm-node/adapter-kit/parity-scenarios/shared.mjs

@@ -0,0 +1,22 @@
+import "node:module";
+const PARITY_REQUEST_ID = 'crm';
+const PARITY_PRODUCER_REQUEST_ID = 'crm.producer-a';
+const envelopeHeader = (requestId)=>JSON.stringify(void 0 === requestId ? {} : {
+        requestId
+    });
+const detailHeader = (details)=>JSON.stringify(details);
+const deniedScenario = (name, reason, headers)=>({
+        name,
+        policy: true,
+        request: {
+            method: 'get',
+            path: '/hello',
+            headers
+        },
+        expected: {
+            kind: 'denied',
+            status: 403,
+            reason
+        }
+    });
+export { PARITY_PRODUCER_REQUEST_ID, PARITY_REQUEST_ID, deniedScenario, detailHeader, envelopeHeader };