@canmingir/link-express 1.6.10 → 1.7.0

package/src/routes/oauth.js

@@ -1,213 +0,0 @@
-const Joi = require("joi");
-const router = require("express").Router();
-const jwt = require("jsonwebtoken");
-const axios = require("axios");
-const config = require("../config");
-const { AuthenticationError, AuthorizationError } = require("../error");
-const Permission = require("../models/Permission");
-const { project } = config();
-
-router.post("/", async (req, res) => {
-  let { appId, projectId, code, refreshToken, redirectUri, provider } =
-    Joi.attempt(
-      req.body,
-      Joi.object({
-        appId: Joi.string().required(),
-        projectId: Joi.string().optional(),
-        code: Joi.string().optional(),
-        refreshToken: Joi.string().optional(),
-        redirectUri: Joi.string().optional(),
-        provider: Joi.string().required(),
-      })
-        .required()
-        .options({ stripUnknown: true })
-    );
-
-  if (!code && !refreshToken) {
-    return res.status(400).send("Missing OAuth Code and Refresh Token");
-  }
-
-  const providerConfig = project.oauth.providers[provider];
-  if (!providerConfig) {
-    return res.status(400).send("Unsupported OAuth provider");
-  }
-
-  let accessTokenForAPI;
-  let newRefreshToken = refreshToken;
-
-  if (code && redirectUri) {
-    const params = new URLSearchParams();
-    params.append("grant_type", "authorization_code");
-    params.append("client_id", providerConfig.clientId);
-    params.append(
-      "client_secret",
-      process.env[`${provider.toUpperCase()}_CLIENT_SECRET`]
-    );
-    params.append("code", code);
-    params.append("redirect_uri", redirectUri);
-
-    const tokenResponse = await axios.post(
-      providerConfig.tokenUrl,
-      params.toString(),
-      {
-        headers: {
-          "Content-Type": "application/x-www-form-urlencoded",
-          Accept: "application/json",
-        },
-        timeout: 10000,
-      }
-    );
-
-    if (tokenResponse.data.error) {
-      throw new AuthorizationError(
-        tokenResponse.data.error_description || tokenResponse.data.error
-      );
-    }
-
-    if (!tokenResponse.data.access_token) {
-      throw new AuthenticationError(
-        "No access token received from OAuth provider"
-      );
-    }
-
-    accessTokenForAPI = tokenResponse.data.access_token;
-    newRefreshToken =
-      tokenResponse.data.refresh_token || tokenResponse.data.access_token;
-  } else {
-    accessTokenForAPI = refreshToken;
-  }
-
-  let userResponse = await axios.get(providerConfig.userUrl, {
-    headers: {
-      Authorization: `Bearer ${accessTokenForAPI}`,
-      Accept: "application/json",
-    },
-    timeout: 10000,
-  });
-
-  console.log("User info response:", userResponse.data);
-
-  let userId;
-  const identifierField = providerConfig.userIdentifier;
-
-  if (userResponse.data[identifierField]) {
-    userId = userResponse.data[identifierField].toString();
-  } else if (userResponse.data[project.oauth.jwt.identifier]) {
-    userId = userResponse.data[project.oauth.jwt.identifier].toString();
-  } else {
-    console.error("User identifier extraction failed:", {
-      availableFields: Object.keys(userResponse.data),
-      expectedField: identifierField,
-      fallbackField: project.oauth.jwt.identifier,
-    });
-    throw new Error(
-      `Cannot find user identifier in ${provider} OAuth response`
-    );
-  }
-
-  let accessToken;
-
-  if (projectId) {
-    const permissions = await Permission.findAll({
-      where: { userId, projectId, appId },
-    });
-
-    if (!permissions.length) {
-      accessToken = jwt.sign(
-        {
-          sub: userId,
-          iss: "nuc",
-          aid: appId,
-          provider: provider,
-          iat: Math.floor(Date.now() / 1000),
-        },
-        process.env.JWT_SECRET,
-        { expiresIn: "12h" }
-      );
-    } else {
-      accessToken = jwt.sign(
-        {
-          sub: userId,
-          iss: "nuc",
-          aud: projectId,
-          oid: permissions[0].organizationId,
-          aid: appId,
-          rls: permissions.map((permission) => permission.role),
-          provider: provider,
-          iat: Math.floor(Date.now() / 1000),
-        },
-        process.env.JWT_SECRET,
-        { expiresIn: "12h" }
-      );
-    }
-  } else {
-    accessToken = jwt.sign(
-      {
-        sub: userId,
-        iss: "nuc",
-        aid: appId,
-        provider: provider,
-        iat: Math.floor(Date.now() / 1000),
-      },
-      process.env.JWT_SECRET,
-      { expiresIn: "12h" }
-    );
-  }
-
-  res.status(200).json({
-    accessToken,
-    refreshToken: newRefreshToken,
-  });
-});
-
-router.get("/user", async (req, res) => {
-  const authHeader = req.headers.authorization;
-  const refreshTokenHeader = req.headers["x-refresh-token"];
-
-  if (!authHeader || !authHeader.startsWith("Bearer ")) {
-    return res.status(401).end();
-  }
-
-  if (!refreshTokenHeader) {
-    return res.status(400).send("Missing refresh token");
-  }
-
-  const token = authHeader.split(" ")[1];
-
-  const decoded = jwt.verify(token, process.env.JWT_SECRET);
-  const userId = decoded.sub;
-  const provider = decoded.provider;
-
-  if (!userId || !provider) {
-    return res.status(401).end();
-  }
-
-  const providerConfig = project.oauth.providers[provider];
-  if (!providerConfig) {
-    return res.status(400).send("Unsupported OAuth provider");
-  }
-
-  const userResponse = await axios.get(providerConfig.userUrl, {
-    headers: {
-      Authorization: `Bearer ${refreshTokenHeader}`,
-      Accept: "application/json",
-    },
-    timeout: 10000,
-  });
-
-  const userFieldMapping = providerConfig.userFields;
-  const userDetails = {
-    id: userId,
-    provider: provider,
-    name: userResponse.data[userFieldMapping.name] || null,
-    displayName: userResponse.data[userFieldMapping.displayName] || null,
-    avatarUrl: userResponse.data[userFieldMapping.avatarUrl] || null,
-    email: userResponse.data[userFieldMapping.email] || null,
-  };
-
-  res.status(200).json({
-    user: userDetails,
-  });
-});
-
-module.exports = router;

package/src/routes/settings.js

@@ -1,25 +0,0 @@
-const express = require("express");
-const router = express.Router({ mergeParams: true });
-
-const settings = require("../lib/settings");
-const { AuthorizationError } = require("../error");
-
-router.get("/", async (req, res) => {
-  if (req.params.projectId !== req.session.projectId) {
-    throw new AuthorizationError();
-  }
-
-  const setting = await settings.get(req.session, req.params);
-  res.json(setting);
-});
-
-router.patch("/", async (req, res) => {
-  if (req.params.projectId !== req.session.projectId) {
-    throw new AuthorizationError();
-  }
-
-  await settings.upsert(req.session, req.body, req.params);
-  res.end();
-});
-
-module.exports = router;

package/src/schemas/index.js

@@ -1,5 +0,0 @@
-const Permission = require("./Permission");
-const Organization = require("./Organization");
-const Project = require("./Project");
-
-module.exports = { Permission, Organization, Project };