@contember/engine-tenant-api 1.4.0-rc.8 → 2.0.0-alpha.8

package/dist/development/src/resolvers/types/ProjectTypeResolver.cjs

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PermissionActions = require("../../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../../model/authorization/PermissionContext.cjs");
+require("../../model/authorization/PermissionsFactory.cjs");
+const schema = require("@contember/schema");
+require("../../model/type/ApiKey.cjs");
+require("@contember/database");
+require("node:crypto");
+require("../../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+require("../../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../../model/service/idp/providers/OIDCTypes.cjs");
+require("../../model/service/idp/providers/OIDCHelpers.cjs");
+require("../../model/service/idp/providers/FacebookProvider.cjs");
+const schemaUtils = require("@contember/schema-utils");
+require("otpauth");
+const graphqlUtils = require("@contember/graphql-utils");
+class ProjectTypeResolver {
+  constructor(projectMemberManager, projectSchemaResolver) {
+    this.projectMemberManager = projectMemberManager;
+    this.projectSchemaResolver = projectSchemaResolver;
+  }
+  async members(parent, args, context) {
+    const projectScope = await context.permissionContext.createProjectScope(parent);
+    const verifier = context.permissionContext.createAccessVerifier(projectScope);
+    if (!await verifier(PermissionActions.PermissionActions.PROJECT_VIEW_MEMBER([]))) {
+      return [];
+    }
+    if (args.input?.filter?.email && args.input.filter.memberType === "API_KEY") {
+      throw new graphqlUtils.UserInputError(`Cannot use email filter for ApiKey member type.`);
+    }
+    if (args.input?.filter?.personId && args.input.filter.memberType === "API_KEY") {
+      throw new graphqlUtils.UserInputError(`Cannot use personId  filter for ApiKey member type.`);
+    }
+    if (args.memberType && args.input) {
+      throw new graphqlUtils.UserInputError(`Cannot use both deprecated memberType parameter and new input parameter`);
+    }
+    const members = await this.projectMemberManager.getProjectMembers(context.db, parent.id, verifier, args.input ?? { filter: { memberType: args.memberType } });
+    return members.map((it) => ({
+      ...it,
+      identity: { ...it.identity, projects: [] }
+    }));
+  }
+  async roles(parent, args, context) {
+    const schema$1 = await this.projectSchemaResolver.getSchema(parent.slug);
+    if (!schema$1) {
+      return [];
+    }
+    return Object.entries(schema$1.acl.roles).map(([role, def]) => ({
+      name: role,
+      variables: Object.entries(schemaUtils.getRoleVariables(role, schema$1.acl)).map(([name, variableDef]) => {
+        switch (variableDef.type) {
+          case schema.Acl.VariableType.entity:
+            return { __typename: "RoleEntityVariableDefinition", name, entityName: variableDef.entityName };
+          case schema.Acl.VariableType.predefined:
+            return { __typename: "RolePredefinedVariableDefinition", name, value: variableDef.value };
+          case schema.Acl.VariableType.condition:
+            return { __typename: "RoleConditionVariableDefinition", name };
+        }
+      })
+    }));
+  }
+}
+exports.ProjectTypeResolver = ProjectTypeResolver;
+//# sourceMappingURL=ProjectTypeResolver.cjs.map

package/dist/development/src/resolvers/types/ProjectTypeResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectTypeResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/types/ProjectTypeResolver.ts"],"sourcesContent":["import { ProjectIdentityRelation, ProjectMembersArgs, ProjectResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, Project, ProjectMemberManager, ProjectSchemaResolver } from '../../model'\nimport { getRoleVariables } from '@contember/schema-utils'\nimport { Acl } from '@contember/schema'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class ProjectTypeResolver implements ProjectResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectSchemaResolver: ProjectSchemaResolver,\n\t) {}\n\n\tasync members(\n\t\tparent: Project,\n\t\targs: ProjectMembersArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<readonly ProjectIdentityRelation[]> {\n\t\tconst projectScope = await context.permissionContext.createProjectScope(parent)\n\t\tconst verifier = context.permissionContext.createAccessVerifier(projectScope)\n\t\tif (!(await verifier(PermissionActions.PROJECT_VIEW_MEMBER([])))) {\n\t\t\treturn []\n\t\t}\n\t\tif (args.input?.filter?.email && args.input.filter.memberType === 'API_KEY') {\n\t\t\tthrow new UserInputError(`Cannot use email filter for ApiKey member type.`)\n\t\t}\n\t\tif (args.input?.filter?.personId && args.input.filter.memberType === 'API_KEY') {\n\t\t\tthrow new UserInputError(`Cannot use personId  filter for ApiKey member type.`)\n\t\t}\n\t\tif (args.memberType && args.input) {\n\t\t\tthrow new UserInputError(`Cannot use both deprecated memberType parameter and new input parameter`)\n\t\t}\n\n\t\tconst members = await this.projectMemberManager.getProjectMembers(context.db, parent.id, verifier, args.input ?? { filter: { memberType: args.memberType } })\n\t\treturn members.map(it => ({\n\t\t\t...it,\n\t\t\tidentity: { ...it.identity, projects: [] },\n\t\t}))\n\t}\n\n\tasync roles(parent: Project, args: unknown, context: TenantResolverContext) {\n\t\tconst schema = await this.projectSchemaResolver.getSchema(parent.slug)\n\t\tif (!schema) {\n\t\t\treturn []\n\t\t}\n\t\treturn Object.entries(schema.acl.roles).map(([role, def]) => ({\n\t\t\tname: role,\n\t\t\tvariables: Object.entries(getRoleVariables(role, schema.acl)).map(([name, variableDef]) => {\n\t\t\t\tswitch (variableDef.type) {\n\t\t\t\t\tcase Acl.VariableType.entity:\n\t\t\t\t\t\treturn { __typename: 'RoleEntityVariableDefinition', name, entityName: variableDef.entityName }\n\t\t\t\t\tcase Acl.VariableType.predefined:\n\t\t\t\t\t\treturn { __typename: 'RolePredefinedVariableDefinition', name, value: variableDef.value }\n\t\t\t\t\tcase Acl.VariableType.condition:\n\t\t\t\t\t\treturn { __typename: 'RoleConditionVariableDefinition', name }\n\t\t\t\t}\n\t\t\t}),\n\t\t}))\n\t}\n}\n"],"names":["PermissionActions","UserInputError","schema","getRoleVariables","Acl"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAOO,MAAM,oBAAgD;AAAA,EAC5D,YACkB,sBACA,uBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,wBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QACL,QACA,MACA,SAC8C;AAC9C,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,MAAM;AAC9E,UAAM,WAAW,QAAQ,kBAAkB,qBAAqB,YAAY;AACxE,QAAA,CAAE,MAAM,SAASA,kBAAAA,kBAAkB,oBAAoB,CAAA,CAAE,CAAC,GAAI;AACjE,aAAO;IACR;AACI,QAAA,KAAK,OAAO,QAAQ,SAAS,KAAK,MAAM,OAAO,eAAe,WAAW;AACtE,YAAA,IAAIC,4BAAe,iDAAiD;AAAA,IAC3E;AACI,QAAA,KAAK,OAAO,QAAQ,YAAY,KAAK,MAAM,OAAO,eAAe,WAAW;AACzE,YAAA,IAAIA,4BAAe,qDAAqD;AAAA,IAC/E;AACI,QAAA,KAAK,cAAc,KAAK,OAAO;AAC5B,YAAA,IAAIA,4BAAe,yEAAyE;AAAA,IACnG;AAEA,UAAM,UAAU,MAAM,KAAK,qBAAqB,kBAAkB,QAAQ,IAAI,OAAO,IAAI,UAAU,KAAK,SAAS,EAAE,QAAQ,EAAE,YAAY,KAAK,cAAc;AACrJ,WAAA,QAAQ,IAAI,CAAO,QAAA;AAAA,MACzB,GAAG;AAAA,MACH,UAAU,EAAE,GAAG,GAAG,UAAU,UAAU,CAAA,EAAG;AAAA,IACxC,EAAA;AAAA,EACH;AAAA,EAEA,MAAM,MAAM,QAAiB,MAAe,SAAgC;AAC3E,UAAMC,WAAS,MAAM,KAAK,sBAAsB,UAAU,OAAO,IAAI;AACrE,QAAI,CAACA,UAAQ;AACZ,aAAO;IACR;AACO,WAAA,OAAO,QAAQA,SAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,OAAO;AAAA,MAC7D,MAAM;AAAA,MACN,WAAW,OAAO,QAAQC,YAAA,iBAAiB,MAAMD,SAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,WAAW,MAAM;AAC1F,gBAAQ,YAAY,MAAM;AAAA,UACzB,KAAKE,OAAAA,IAAI,aAAa;AACrB,mBAAO,EAAE,YAAY,gCAAgC,MAAM,YAAY,YAAY;UACpF,KAAKA,OAAAA,IAAI,aAAa;AACrB,mBAAO,EAAE,YAAY,oCAAoC,MAAM,OAAO,YAAY;UACnF,KAAKA,OAAAA,IAAI,aAAa;AACd,mBAAA,EAAE,YAAY,mCAAmC;QAC1D;AAAA,MAAA,CACA;AAAA,IACA,EAAA;AAAA,EACH;AACD;;"}

package/dist/development/src/resolvers/types/ProjectTypeResolver.js

@@ -0,0 +1,69 @@
+import { PermissionActions } from "../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../model/authorization/PermissionContext.js";
+import "../../model/authorization/PermissionsFactory.js";
+import { Acl } from "@contember/schema";
+import "../../model/type/ApiKey.js";
+import "@contember/database";
+import "node:crypto";
+import "../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import "../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../model/service/idp/providers/OIDCTypes.js";
+import "../../model/service/idp/providers/OIDCHelpers.js";
+import "../../model/service/idp/providers/FacebookProvider.js";
+import { getRoleVariables } from "@contember/schema-utils";
+import "otpauth";
+import { UserInputError } from "@contember/graphql-utils";
+class ProjectTypeResolver {
+  constructor(projectMemberManager, projectSchemaResolver) {
+    this.projectMemberManager = projectMemberManager;
+    this.projectSchemaResolver = projectSchemaResolver;
+  }
+  async members(parent, args, context) {
+    const projectScope = await context.permissionContext.createProjectScope(parent);
+    const verifier = context.permissionContext.createAccessVerifier(projectScope);
+    if (!await verifier(PermissionActions.PROJECT_VIEW_MEMBER([]))) {
+      return [];
+    }
+    if (args.input?.filter?.email && args.input.filter.memberType === "API_KEY") {
+      throw new UserInputError(`Cannot use email filter for ApiKey member type.`);
+    }
+    if (args.input?.filter?.personId && args.input.filter.memberType === "API_KEY") {
+      throw new UserInputError(`Cannot use personId  filter for ApiKey member type.`);
+    }
+    if (args.memberType && args.input) {
+      throw new UserInputError(`Cannot use both deprecated memberType parameter and new input parameter`);
+    }
+    const members = await this.projectMemberManager.getProjectMembers(context.db, parent.id, verifier, args.input ?? { filter: { memberType: args.memberType } });
+    return members.map((it) => ({
+      ...it,
+      identity: { ...it.identity, projects: [] }
+    }));
+  }
+  async roles(parent, args, context) {
+    const schema = await this.projectSchemaResolver.getSchema(parent.slug);
+    if (!schema) {
+      return [];
+    }
+    return Object.entries(schema.acl.roles).map(([role, def]) => ({
+      name: role,
+      variables: Object.entries(getRoleVariables(role, schema.acl)).map(([name, variableDef]) => {
+        switch (variableDef.type) {
+          case Acl.VariableType.entity:
+            return { __typename: "RoleEntityVariableDefinition", name, entityName: variableDef.entityName };
+          case Acl.VariableType.predefined:
+            return { __typename: "RolePredefinedVariableDefinition", name, value: variableDef.value };
+          case Acl.VariableType.condition:
+            return { __typename: "RoleConditionVariableDefinition", name };
+        }
+      })
+    }));
+  }
+}
+export {
+  ProjectTypeResolver
+};
+//# sourceMappingURL=ProjectTypeResolver.js.map

package/dist/development/src/resolvers/types/ProjectTypeResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectTypeResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/types/ProjectTypeResolver.ts"],"sourcesContent":["import { ProjectIdentityRelation, ProjectMembersArgs, ProjectResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, Project, ProjectMemberManager, ProjectSchemaResolver } from '../../model'\nimport { getRoleVariables } from '@contember/schema-utils'\nimport { Acl } from '@contember/schema'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class ProjectTypeResolver implements ProjectResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectSchemaResolver: ProjectSchemaResolver,\n\t) {}\n\n\tasync members(\n\t\tparent: Project,\n\t\targs: ProjectMembersArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<readonly ProjectIdentityRelation[]> {\n\t\tconst projectScope = await context.permissionContext.createProjectScope(parent)\n\t\tconst verifier = context.permissionContext.createAccessVerifier(projectScope)\n\t\tif (!(await verifier(PermissionActions.PROJECT_VIEW_MEMBER([])))) {\n\t\t\treturn []\n\t\t}\n\t\tif (args.input?.filter?.email && args.input.filter.memberType === 'API_KEY') {\n\t\t\tthrow new UserInputError(`Cannot use email filter for ApiKey member type.`)\n\t\t}\n\t\tif (args.input?.filter?.personId && args.input.filter.memberType === 'API_KEY') {\n\t\t\tthrow new UserInputError(`Cannot use personId  filter for ApiKey member type.`)\n\t\t}\n\t\tif (args.memberType && args.input) {\n\t\t\tthrow new UserInputError(`Cannot use both deprecated memberType parameter and new input parameter`)\n\t\t}\n\n\t\tconst members = await this.projectMemberManager.getProjectMembers(context.db, parent.id, verifier, args.input ?? { filter: { memberType: args.memberType } })\n\t\treturn members.map(it => ({\n\t\t\t...it,\n\t\t\tidentity: { ...it.identity, projects: [] },\n\t\t}))\n\t}\n\n\tasync roles(parent: Project, args: unknown, context: TenantResolverContext) {\n\t\tconst schema = await this.projectSchemaResolver.getSchema(parent.slug)\n\t\tif (!schema) {\n\t\t\treturn []\n\t\t}\n\t\treturn Object.entries(schema.acl.roles).map(([role, def]) => ({\n\t\t\tname: role,\n\t\t\tvariables: Object.entries(getRoleVariables(role, schema.acl)).map(([name, variableDef]) => {\n\t\t\t\tswitch (variableDef.type) {\n\t\t\t\t\tcase Acl.VariableType.entity:\n\t\t\t\t\t\treturn { __typename: 'RoleEntityVariableDefinition', name, entityName: variableDef.entityName }\n\t\t\t\t\tcase Acl.VariableType.predefined:\n\t\t\t\t\t\treturn { __typename: 'RolePredefinedVariableDefinition', name, value: variableDef.value }\n\t\t\t\t\tcase Acl.VariableType.condition:\n\t\t\t\t\t\treturn { __typename: 'RoleConditionVariableDefinition', name }\n\t\t\t\t}\n\t\t\t}),\n\t\t}))\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAOO,MAAM,oBAAgD;AAAA,EAC5D,YACkB,sBACA,uBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,wBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QACL,QACA,MACA,SAC8C;AAC9C,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,MAAM;AAC9E,UAAM,WAAW,QAAQ,kBAAkB,qBAAqB,YAAY;AACxE,QAAA,CAAE,MAAM,SAAS,kBAAkB,oBAAoB,CAAA,CAAE,CAAC,GAAI;AACjE,aAAO;IACR;AACI,QAAA,KAAK,OAAO,QAAQ,SAAS,KAAK,MAAM,OAAO,eAAe,WAAW;AACtE,YAAA,IAAI,eAAe,iDAAiD;AAAA,IAC3E;AACI,QAAA,KAAK,OAAO,QAAQ,YAAY,KAAK,MAAM,OAAO,eAAe,WAAW;AACzE,YAAA,IAAI,eAAe,qDAAqD;AAAA,IAC/E;AACI,QAAA,KAAK,cAAc,KAAK,OAAO;AAC5B,YAAA,IAAI,eAAe,yEAAyE;AAAA,IACnG;AAEA,UAAM,UAAU,MAAM,KAAK,qBAAqB,kBAAkB,QAAQ,IAAI,OAAO,IAAI,UAAU,KAAK,SAAS,EAAE,QAAQ,EAAE,YAAY,KAAK,cAAc;AACrJ,WAAA,QAAQ,IAAI,CAAO,QAAA;AAAA,MACzB,GAAG;AAAA,MACH,UAAU,EAAE,GAAG,GAAG,UAAU,UAAU,CAAA,EAAG;AAAA,IACxC,EAAA;AAAA,EACH;AAAA,EAEA,MAAM,MAAM,QAAiB,MAAe,SAAgC;AAC3E,UAAM,SAAS,MAAM,KAAK,sBAAsB,UAAU,OAAO,IAAI;AACrE,QAAI,CAAC,QAAQ;AACZ,aAAO;IACR;AACO,WAAA,OAAO,QAAQ,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,OAAO;AAAA,MAC7D,MAAM;AAAA,MACN,WAAW,OAAO,QAAQ,iBAAiB,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,WAAW,MAAM;AAC1F,gBAAQ,YAAY,MAAM;AAAA,UACzB,KAAK,IAAI,aAAa;AACrB,mBAAO,EAAE,YAAY,gCAAgC,MAAM,YAAY,YAAY;UACpF,KAAK,IAAI,aAAa;AACrB,mBAAO,EAAE,YAAY,oCAAoC,MAAM,OAAO,YAAY;UACnF,KAAK,IAAI,aAAa;AACd,mBAAA,EAAE,YAAY,mCAAmC;QAC1D;AAAA,MAAA,CACA;AAAA,IACA,EAAA;AAAA,EACH;AACD;"}

package/dist/development/src/schema/index.cjs

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=index.cjs.map

package/dist/development/src/schema/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/development/src/schema/index.js

@@ -0,0 +1,2 @@
+
+//# sourceMappingURL=index.js.map

package/dist/development/src/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":""}