@chevre/domain 23.2.0-alpha.9 → 23.2.0

package/example/src/idaas/auth0/adminApplications.ts

@@ -1,183 +0,0 @@
-// tslint:disable:no-implicit-dependencies no-console no-magic-numbers
-import { ManagementClient } from 'auth0';
-import { readFileSync } from 'fs';
-import * as moment from 'moment';
-// import * as crypto from 'crypto'; // client_secret 生成用 (PKJWTなしの場合)
-// import { JWK, importPKCS8, generateKeyPair, SignJWT } from 'jose'; // Private Key JWT 用
-
-const PUBLIC_KEY_FILE_PATH = `${__dirname}/../../samplePublicKey.pem`;
-const { AUTH0_DOMAIN, AUTH0_MGMT_CLIENT_ID, AUTH0_MGMT_CLIENT_SECRET, AUTH0_MGMT_API_AUDIENCE, AUTH0_AUDIENCE } = process.env;
-
-if (typeof AUTH0_DOMAIN !== 'string'
-    || typeof AUTH0_MGMT_CLIENT_ID !== 'string'
-    || typeof AUTH0_MGMT_CLIENT_SECRET !== 'string'
-    || typeof AUTH0_MGMT_API_AUDIENCE !== 'string'
-    || typeof AUTH0_AUDIENCE !== 'string'
-) {
-    throw new Error('set envs!');
-}
-
-// --- Auth0 ManagementClient の初期化 ---
-const management = new ManagementClient({
-    domain: AUTH0_DOMAIN,
-    clientId: AUTH0_MGMT_CLIENT_ID,
-    clientSecret: AUTH0_MGMT_CLIENT_SECRET,
-    audience: AUTH0_MGMT_API_AUDIENCE
-    // scope: 'read:clients create:clients' // 必要なスコープを明示
-});
-
-async function sleep(waitInSeconds: number) {
-    await new Promise<void>((resolve) => {
-        setTimeout(
-            () => {
-                resolve();
-            },
-            waitInSeconds
-        );
-    });
-}
-
-/**
- * アプリケーションを検索し、存在しなければ作成します。
- * Private Key JWT 認証を使用する前提。
- */
-async function findOrCreateServiceAccount(
-    appName: string,
-    projectId: string,
-    roles: string[],
-    audience: string
-) {
-    try {
-        console.log('getting organization...');
-        const getOrganizationResponse = await management.organizations.getByName({
-            name: projectId
-        });
-        const organization = getOrganizationResponse.data;
-        console.log('organization exists.', organization);
-
-        const newClient = (await management.clients.create({
-            name: appName,
-            app_type: 'non_interactive', // Machine to Machine アプリケーション
-            jwt_configuration: { // Private Key JWT の設定
-                alg: 'RS256' // 署名アルゴリズム
-            },
-            // token_endpoint_auth_method: 'client_secret_post',
-            client_authentication_methods: {
-                private_key_jwt: {
-                    credentials: [{
-                        alg: 'RS256',
-                        /**
-                         * Credential type. Supported types: public_key.
-                         *
-                         */
-                        credential_type: 'public_key',
-                        // name?: string;
-                        pem: readFileSync(PUBLIC_KEY_FILE_PATH, 'utf8')
-
-                    }]
-                }
-            },
-            grant_types: ['client_credentials'],
-            organization_usage: 'require', // 組織での利用を許可
-            default_organization: {
-                organization_id: organization.id,
-                flows: ['client_credentials']
-            },
-            oidc_conformant: true,
-            client_metadata: {
-                roles: JSON.stringify(roles)
-            }
-        })).data;
-        console.log(`Successfully created new application: ${newClient.client_id} (${newClient.name})`);
-
-        console.log(`checking clientGrant... ${newClient.client_id} (${newClient.name})`);
-        await sleep(3000);
-
-        let clientGrant = (await management.clientGrants.getAll({
-            audience,
-            client_id: newClient.client_id
-        })).data.shift();
-        if (clientGrant === undefined) {
-            clientGrant = (await management.clientGrants.create({
-                client_id: newClient.client_id,
-                audience,
-                organization_usage: 'require',
-                allow_any_organization: false,
-                scope: ['iam.members.me.read']
-            })).data;
-            console.log(`clientGrant created. ${newClient.client_id} (${newClient.name})`);
-        } else {
-            console.log(`clientGrant already exists. ${newClient.client_id} (${newClient.name})`);
-        }
-
-        console.log(`checking organizationClientGrant... ${newClient.client_id} (${newClient.name})`);
-        await sleep(3000);
-        const organizationClientGrant = (await management.organizations.getOrganizationClientGrants({
-            id: organization.id,
-            audience: 'https://development.apis.smart-theater.com',
-            client_id: newClient.client_id
-        })).data.shift();
-        if (organizationClientGrant === undefined) {
-            await management.organizations.postOrganizationClientGrants(
-                {
-                    id: organization.id
-                },
-                {
-                    grant_id: clientGrant.id
-                }
-            );
-            console.log(`organizationClientGrant created. ${newClient.client_id} (${newClient.name})`);
-        } else {
-            console.log(`organizationClientGrant already exists. ${newClient.client_id} (${newClient.name})`);
-        }
-
-        // 1. アプリケーションを検索 (名前で検索するのが一般的)
-        console.log('searching for applications...');
-        await sleep(3000);
-
-        await searchClients({ organization });
-    } catch (error) {
-        console.error(`Error finding or creating application: ${error.message}`);
-        throw error;
-    }
-}
-
-async function searchClients(params: {
-    organization: { id: string };
-}) {
-    const existingApps = await management.clients.getAll({
-        include_totals: true,
-        // app_type: 'non_interactive',
-        // is_global: false,
-        // page: 0,
-        // per_page: 50,
-        // q: `name:"${appName}"`, // 名前で検索
-        q: `client_grant.organization_id:"${params.organization.id}"`,
-        // from: undefined,
-        take: 50
-        // is_client_credentials: true // Machine to Machine アプリケーションに絞る
-    });
-    const clients = existingApps.data.clients;
-    console.log(clients.length, 'existingApps exist.', clients);
-    console.log(clients.length, 'clients found.');
-}
-
-export async function run() {
-    if (typeof AUTH0_AUDIENCE !== 'string') {
-        throw new Error('set envs!');
-    }
-
-    try {
-        await findOrCreateServiceAccount(
-            `sampleServiceAccount-${moment()
-                .format('YYYY-MM-DDTHH:mm:ss')}`,
-            'cinerino',
-            ['inventoryManager', 'user'],
-            AUTH0_AUDIENCE
-        );
-    } catch (error) {
-        console.error('Failed to run provisioning script:', error);
-    }
-}
-
-run();

package/example/src/idaas/auth0/getToken.ts

@@ -1,55 +0,0 @@
-// tslint:disable:no-implicit-dependencies no-console
-interface IAuth0Config {
-    auth0Domain: string;
-    clientId: string;
-    clientSecret: string;
-    audience: string;
-}
-
-// 環境変数から機密情報を取得することを強く推奨します
-const config: IAuth0Config = {
-    auth0Domain: String(process.env.AUTH0_DOMAIN),
-    clientId: String(process.env.AUTH0_CLIENT_ID),
-    clientSecret: String(process.env.AUTH0_CLIENT_SECRET),
-    audience: String(process.env.AUTH0_AUDIENCE)
-    // scopes: process.env.OKTA_SCOPES || 'api_access_scope openid', // 必要なスコープを指定
-    // authServerId: 'aussd9v86wlIar3cX697', // デフォルト承認サーバーを使用する場合はコメントアウトまたは指定しない
-};
-
-async function getToken() {
-    try {
-        const response = await fetch(
-            `https://${config.auth0Domain}/oauth/token`,
-            {
-                method: 'POST',
-                headers: { 'content-type': 'application/json' },
-                body: JSON.stringify({
-                    client_id: config.clientId,
-                    client_secret: config.clientSecret,
-                    audience: config.audience,
-                    grant_type: 'client_credentials'
-                    // organization: 'org_zuMP9ng42QSgZ5Kn'
-                })
-            });
-
-        if (!response.ok) {
-            console.log(await response.json());
-            throw new Error('Network response was not ok');
-        }
-
-        const data = await response.json();
-        console.log(data);
-
-        return data;
-    } catch (error) {
-        console.error('Error fetching token:', error);
-    }
-}
-
-export async function main() {
-    const token = await getToken();
-    console.log(token);
-}
-
-main()
-    .catch(console.error);

package/example/src/idaas/auth0/getTokenByPrivateKeyJWT.ts

@@ -1,84 +0,0 @@
-// tslint:disable:no-implicit-dependencies no-console
-import * as crypto from 'crypto';
-import { readFileSync } from 'fs';
-import { SignJWT } from 'jose';
-import * as uuid from 'uuid';
-
-const PRIVATE_KEY_FILE_PATH = `${__dirname}/../../samplePrivateKey.pem`;
-
-interface IAuth0Config {
-    auth0Domain: string;
-    clientId: string;
-    privateKeyContent: string; // PEM形式の秘密鍵の内容 (例: fs.readFileSync('private_key.pem', 'utf8'))
-    audience: string;
-}
-
-// 環境変数から機密情報を取得することを強く推奨します
-const auth0config: IAuth0Config = {
-    auth0Domain: String(process.env.AUTH0_DOMAIN),
-    clientId: String(process.env.AUTH0_CLIENT_ID),
-    // keyId: 'xxx',
-    privateKeyContent: readFileSync(PRIVATE_KEY_FILE_PATH, 'utf8'), // 秘密鍵の内容を読み込む
-    audience: String(process.env.AUTH0_AUDIENCE)
-    // scopes: process.env.OKTA_SCOPES || 'api_access_scope openid', // 必要なスコープを指定
-    // authServerId: 'aussd9v86wlIar3cX697', // デフォルト承認サーバーを使用する場合はコメントアウトまたは指定しない
-};
-
-async function generateJwtAssertion(config: IAuth0Config) {
-    const privateKeyPEM = crypto.createPrivateKey(readFileSync(PRIVATE_KEY_FILE_PATH, 'utf8'));
-
-    return new SignJWT({})
-        .setProtectedHeader({
-            alg: 'RS256' // or RS384 or PS256
-            // kid: '(OPTIONAL) KID_GENERATED_BY_AUTH0'
-        })
-        .setIssuedAt()
-        .setIssuer(config.clientId)
-        .setSubject(config.clientId)
-        .setAudience(`https://${config.auth0Domain}/`)
-        .setExpirationTime('1m')
-        .setJti(uuid.v4())
-        .sign(privateKeyPEM);
-}
-
-async function getToken() {
-    try {
-        const jwtAssertion = await generateJwtAssertion(auth0config);
-        console.log('jwtAssertion:', jwtAssertion);
-
-        const body = new URLSearchParams({
-            grant_type: 'client_credentials',
-            client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
-            client_assertion: jwtAssertion,
-            audience: auth0config.audience
-            // scope: config.scopes,
-        }).toString();
-        const response = await fetch(
-            `https://${auth0config.auth0Domain}/oauth/token`,
-            {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-                body: body
-            });
-
-        if (!response.ok) {
-            console.log(await response.json());
-            throw new Error('Network response was not ok');
-        }
-
-        const data = await response.json();
-        console.log(data);
-
-        return data;
-    } catch (error) {
-        console.error('Error fetching token:', error);
-    }
-}
-
-export async function main() {
-    const token = await getToken();
-    console.log(token);
-}
-
-main()
-    .catch(console.error);

package/lib/chevre/service/eventOld.d.ts

@@ -1,60 +0,0 @@
-/**
- * マスターデータ同期サービス
- */
-import type * as COA from '@motionpicture/coa-service';
-import type { ActionRepo } from '../repo/action';
-import type { CategoryCodeRepo } from '../repo/categoryCode';
-import type { CreativeWorkRepo } from '../repo/creativeWork';
-import type { EventRepo } from '../repo/event';
-import type { EventSeriesRepo } from '../repo/eventSeries';
-import type { MovieTheaterRepo } from '../repo/place/movieTheater';
-import type { ScreeningRoomRepo } from '../repo/place/screeningRoom';
-import type { SellerRepo } from '../repo/seller';
-import * as factory from '../factory';
-interface IImportFromCOAParams {
-    project: {
-        id: string;
-        typeOf: factory.organizationType.Project;
-    };
-    /**
-     * 施設コード
-     */
-    locationBranchCode: string;
-    importFrom: Date;
-    importThrough: Date;
-    /**
-     * 施設を保管するかどうか
-     */
-    saveMovieTheater: boolean;
-    /**
-     * 施設コンテンツを保管するかどうか
-     */
-    saveScreeningEventSeries: boolean;
-    saveScreeningEventSeriesPeriodInMonth: number;
-}
-/**
- * イベントをインポートする
- */
-declare function importFromCOA(params: IImportFromCOAParams): (repos: {
-    action: ActionRepo;
-    categoryCode: CategoryCodeRepo;
-    creativeWork: CreativeWorkRepo;
-    event: EventRepo;
-    eventSeries: EventSeriesRepo;
-    movieTheater: MovieTheaterRepo;
-    screeningRoom: ScreeningRoomRepo;
-    seller: SellerRepo;
-    masterService: COA.service.Master;
-}) => Promise<void>;
-/**
- * COA情報からイベントIDを作成する
- */
-declare function createScreeningEventIdFromCOA(params: {
-    theaterCode: string;
-    titleCode: string;
-    titleBranchNum: string;
-    dateJouei: string;
-    screenCode: string;
-    timeBegin: string;
-}): string;
-export { importFromCOA, createScreeningEventIdFromCOA };