@crowdin/app-project-module 0.70.2 → 0.71.0

package/out/index.js

@@ -105,9 +105,9 @@ exports.metadataStore = {
         return storage.getStorage().deleteMetadata(id);
     },
     getUserSettings: (clientId) => __awaiter(void 0, void 0, void 0, function* () {
-        const integrationCredentials = yield storage.getStorage().getIntegrationConfig(clientId);
-        if (integrationCredentials === null || integrationCredentials === void 0 ? void 0 : integrationCredentials.config) {
-            return JSON.parse(integrationCredentials.config);
+        const integrationConfig = yield storage.getStorage().getIntegrationConfig(clientId);
+        if (integrationConfig === null || integrationConfig === void 0 ? void 0 : integrationConfig.config) {
+            return JSON.parse(integrationConfig.config);
         }
     }),
 };

package/out/middlewares/integration-credentials.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -13,19 +36,53 @@ const storage_1 = require("../storage");
 const util_1 = require("../util");
 const connection_1 = require("../util/connection");
 const logger_1 = require("../util/logger");
+const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
 function handle(config, integration, optional = false) {
     return (0, util_1.runAsyncWrapper)((req, res, next) => __awaiter(this, void 0, void 0, function* () {
-        const clientId = req.crowdinContext.clientId;
+        let clientId = req.crowdinContext.clientId;
+        const { organization, projectId, userId } = crowdinAppFunctions.parseCrowdinId(clientId);
         req.logInfo(`Loading integration credentials for client ${clientId}`);
-        const integrationCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentials(clientId);
-        const integrationConfig = yield (0, storage_1.getStorage)().getIntegrationConfig(clientId);
+        let integrationCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentials(clientId);
+        const ownerIds = [];
+        // check if user has access to integration in settings(managers)
         if (!integrationCredentials) {
-            if (optional) {
+            const projectIntegrationCredentials = (yield (0, storage_1.getStorage)().getAllIntegrationCredentials(organization)).filter((item) => {
+                const { organization: itemOrganization, projectId: itemProjectId } = crowdinAppFunctions.parseCrowdinId(item.id);
+                return itemOrganization === organization && itemProjectId === projectId;
+            });
+            if (projectIntegrationCredentials.length) {
+                for (const credentials of projectIntegrationCredentials) {
+                    ownerIds.push(crowdinAppFunctions.parseCrowdinId(credentials.id).userId);
+                    if (yield checkUserAccessToIntegration(credentials, `${userId}`)) {
+                        integrationCredentials = credentials;
+                        clientId = credentials.id;
+                        req.crowdinContext.clientId = clientId;
+                        break;
+                    }
+                }
+            }
+        }
+        if (!integrationCredentials) {
+            if (optional && !ownerIds.length) {
                 return next();
             }
-            (0, logger_1.temporaryErrorDebug)('Access denied: integration-credentials', req);
-            return res.status(403).send({ error: 'Access denied' });
+            const errorOptions = {
+                code: 403,
+                message: 'Access denied',
+                owners: null,
+                hideActions: false,
+            };
+            if (ownerIds) {
+                errorOptions.message = 'Looks like you don’t have access';
+                errorOptions.hideActions = true;
+                errorOptions.owners = yield getIntegrationManagedBy(ownerIds, req);
+            }
+            else {
+                (0, logger_1.temporaryErrorDebug)('Access denied: integration-credentials', req);
+            }
+            return res.render('error', errorOptions);
         }
+        const integrationConfig = yield (0, storage_1.getStorage)().getIntegrationConfig(clientId);
         if (integrationConfig === null || integrationConfig === void 0 ? void 0 : integrationConfig.config) {
             req.integrationSettings = JSON.parse(integrationConfig.config);
         }
@@ -40,3 +97,32 @@ function handle(config, integration, optional = false) {
     }));
 }
 exports.default = handle;
+function checkUserAccessToIntegration(integrationCredentials, userId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const projectIntegrationConfig = yield (0, storage_1.getStorage)().getIntegrationConfig(integrationCredentials.id);
+        if (projectIntegrationConfig === null || projectIntegrationConfig === void 0 ? void 0 : projectIntegrationConfig.config) {
+            const appSettings = JSON.parse(projectIntegrationConfig.config);
+            return ((appSettings === null || appSettings === void 0 ? void 0 : appSettings.managers) || []).includes(userId);
+        }
+        return false;
+    });
+}
+function getIntegrationManagedBy(ownerIds, req) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const projectId = crowdinAppFunctions.getProjectId(req.crowdinContext.clientId);
+        const owners = ownerIds.length > 1
+            ? (yield req.crowdinApiClient.usersApi.listProjectMembers(projectId)).data.filter((member) => ownerIds.includes(member.data.id))
+            : [yield req.crowdinApiClient.usersApi.getProjectMemberPermissions(projectId, ownerIds[0])];
+        return owners.map((owner) => {
+            const ownerFullName = 'fullName' in owner.data
+                ? owner.data.fullName
+                : `${owner.data.firstName || ''} ${owner.data.lastName || ''}`.trim();
+            return {
+                id: owner.data.id,
+                name: !!ownerFullName && owner.data.username !== ownerFullName
+                    ? `${ownerFullName} (${owner.data.username})`
+                    : owner.data.username,
+            };
+        });
+    });
+}

package/out/modules/integration/handlers/integration-logout.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -14,8 +37,13 @@ const util_1 = require("../../../util");
 const logger_1 = require("../../../util/logger");
 const subscription_1 = require("../../../util/subscription");
 const webhooks_1 = require("../util/webhooks");
+const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
 function handle(config, integration) {
     return (0, util_1.runAsyncWrapper)((req, res) => __awaiter(this, void 0, void 0, function* () {
+        const { userId } = crowdinAppFunctions.parseCrowdinId(req.crowdinContext.clientId);
+        if (+userId !== +req.crowdinContext.jwtPayload.sub) {
+            return res.status(403).send({ error: 'Access denied' });
+        }
         req.logInfo('Received integration logout request');
         if (integration.onLogout) {
             try {

package/out/modules/integration/handlers/main.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -13,6 +36,7 @@ const util_1 = require("../../../util");
 const logger_1 = require("../../../util/logger");
 const subscription_1 = require("../../../util/subscription");
 const defaults_1 = require("../util/defaults");
+const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
 function handle(config, integration) {
     return (0, util_1.runAsyncWrapper)((req, res) => __awaiter(this, void 0, void 0, function* () {
         var _a, _b;
@@ -41,6 +65,8 @@ function handle(config, integration) {
             }
         }
         else if (integration.getConfiguration) {
+            const { userId } = crowdinAppFunctions.parseCrowdinId(req.crowdinContext.clientId);
+            options.isOwner = +req.crowdinContext.jwtPayload.sub === userId;
             const configurationFields = yield integration.getConfiguration(req.crowdinContext.jwtPayload.context.project_id, req.crowdinApiClient, req.integrationCredentials);
             options.configurationFields = configurationFields;
             options.config = JSON.stringify(req.integrationSettings || {});

package/out/modules/integration/util/defaults.js

@@ -147,6 +147,27 @@ function applyIntegrationModuleDefaults(config, integration) {
             fields = yield getUserSettings(projectId, crowdinClient, integrationCredentials);
         }
         const defaultSettings = [];
+        const mangers = yield getManagers(projectId, crowdinClient, integrationCredentials);
+        if (mangers.length) {
+            defaultSettings.push({
+                key: 'managers',
+                label: 'Managers',
+                type: 'select',
+                isMulti: true,
+                isSearchable: true,
+                options: mangers.map((manager) => {
+                    const ownerFullName = 'fullName' in manager
+                        ? manager.fullName
+                        : ((manager.firstName || '') + ' ' + (manager.lastName || '')).trim();
+                    return {
+                        value: manager.id.toString(),
+                        label: !!ownerFullName && (manager === null || manager === void 0 ? void 0 : manager.username) !== ownerFullName
+                            ? `${ownerFullName} (${manager === null || manager === void 0 ? void 0 : manager.username})`
+                            : manager === null || manager === void 0 ? void 0 : manager.username,
+                    };
+                }),
+            });
+        }
         if (project.data.inContext) {
             defaultSettings.push({
                 key: 'inContext',
@@ -299,3 +320,17 @@ function getOAuthLoginFormId(clientId) {
     return `oauth_form_${clientId}`;
 }
 exports.getOAuthLoginFormId = getOAuthLoginFormId;
+function getManagers(projectId, client, integrationCredentials) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const managers = [];
+        if (client.organization) {
+            const admins = (yield client.usersApi.listUsers()).data.filter((user) => user.data.isAdmin);
+            managers.push(...admins.map((admin) => admin.data));
+        }
+        const projectMembers = (yield client.usersApi.listProjectMembers(projectId)).data.filter((user) => 'role' in user.data ? ['owner', 'manager'].includes(user.data.role) : user.data.isManager);
+        managers.push(...projectMembers.map((members) => members.data));
+        return managers
+            .filter((manager) => manager.id !== +integrationCredentials.ownerId)
+            .filter((manager, index, self) => self.findIndex((m) => m.id === manager.id) === index);
+    });
+}

package/out/modules/integration/util/webhooks.js

@@ -110,7 +110,6 @@ function registerWebhooks({ config, apiCredentials, appSettings, client, crowdin
                     projectId,
                     webhook,
                     events,
-                    url: webhookUrl,
                 });
             }
             else if (isWebhookSync && !webhook) {
@@ -198,7 +197,7 @@ function registerCrowdinWebhook({ client, config, crowdinContext, events, url, }
         });
     });
 }
-function updateCrowdinWebhooks({ client, events, projectId, url, webhook, }) {
+function updateCrowdinWebhooks({ client, events, projectId, webhook, }) {
     return __awaiter(this, void 0, void 0, function* () {
         const payload = createPayload(events);
         yield client.webhooksApi.editWebhook(projectId, webhook.id, [
@@ -212,11 +211,6 @@ function updateCrowdinWebhooks({ client, events, projectId, url, webhook, }) {
                 op: 'replace',
                 path: '/payload',
             },
-            {
-                value: url,
-                op: 'replace',
-                path: '/url',
-            },
         ]);
     });
 }

package/out/modules/uninstall.js

@@ -20,6 +20,10 @@ function handle(config) {
         (0, logger_1.log)(`Received uninstall request ${JSON.stringify(event, null, 2)}`);
         const projectIntegration = config.projectIntegration;
         const organization = (event.domain || event.organizationId).toString();
+        const crowdinCredential = yield (0, storage_1.getStorage)().getCrowdinCredentials(organization);
+        if ((crowdinCredential === null || crowdinCredential === void 0 ? void 0 : crowdinCredential.appSecret) !== event.appSecret) {
+            return res.status(403).send({ error: 'Access denied' });
+        }
         if (config.onUninstall) {
             let allCredentials = [];
             if (projectIntegration) {

package/out/static/css/styles.css

@@ -59,6 +59,10 @@
     margin-left: 8px;
 }
 
+.mt-2 {
+    margin-top: 16px;
+}
+
 .m-0 {
     margin: 0;
 }
@@ -254,4 +258,4 @@
     form > .MuiBox-root {
         display: none;
     }
-}
+}

package/out/util/connection.js

@@ -46,6 +46,7 @@ const axios_2 = require("./axios");
 const logger_1 = require("./logger");
 const os = __importStar(require("os"));
 const defaults_1 = require("../modules/integration/util/defaults");
+const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
 const axiosCustom = new axios_2.AxiosProvider().axios;
 function prepareCrowdinClient({ config, credentials, autoRenew = false, context, }) {
     var _a, _b;
@@ -220,6 +221,7 @@ function prepareIntegrationCredentials(config, integration, integrationCredentia
     var _a, _b, _c, _d, _e, _f, _g;
     return __awaiter(this, void 0, void 0, function* () {
         const credentials = JSON.parse((0, _1.decryptData)(config, integrationCredentials.credentials));
+        credentials.ownerId = crowdinAppFunctions.parseCrowdinId(integrationCredentials.id).userId;
         const oauthLogin = integration.oauthLogin;
         const integrationLogin = integration.loginForm;
         if ((oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.refresh) || (integrationLogin === null || integrationLogin === void 0 ? void 0 : integrationLogin.refresh)) {

package/out/views/error.handlebars

@@ -8,11 +8,28 @@
     <div>
       <div class="error-page-message">
         <crowdin-h3>{{ message }}</crowdin-h3>
+        {{#if owners}}
+            <crowdin-h6>This integration allows only one connection per project to ensure consistent configuration and prevent file import or synchronization issues.</crowdin-h6>
+            {{#if owners.[1]}}
+                <crowdin-h5 class="mt-2">Managed by:</crowdin-h5>
+                <ul>
+                    {{#each owners}}
+                        <li><crowdin-a href="#" onclick="contactUser({{this.id}})">{{this.name}}</crowdin-a></li>
+                    {{/each}}
+                </ul>
+                <crowdin-h6 class="mt-2">To request access, please contact one of the project members listed above.</crowdin-h6>
+            {{else}}
+                <crowdin-h5 class="mt-2">Managed by: <crowdin-a href="#" onclick="contactUser({{owners.[0].id}})">{{owners.[0].name}}</crowdin-a></crowdin-h5>
+                <crowdin-h6 class="mt-2">To request access, please contact the project member listed above.</crowdin-h6>
+            {{/if}}
+        {{/if}}
       </div>
-      <div class="error-page-action">
-        <crowdin-button outlined onclick="integrationLogout()">Log out</crowdin-button>
-        <span> or <crowdin-a href="https://crowdin.com/contacts" target="_blank">contact us</crowdin-a> for help</span>
-      </div>
+      {{#unless hideActions}}
+        <div class="error-page-action">
+          <crowdin-button outlined onclick="integrationLogout()">Log out</crowdin-button>
+          <span> or <crowdin-a href="https://crowdin.com/contacts" target="_blank">contact us</crowdin-a> for help</span>
+        </div>
+      {{/unless}}
     </div>
   </div>
 </div>
@@ -28,4 +45,10 @@
       .then(localStorage.removeItem('revised_{{name}}'))
       .catch(e => catchRejection(e, 'Looks like you are not logged in'));
   }
-</script>
+
+  function contactUser(userId) {
+    AP.getContext(function(context) {
+      AP.redirect(`${context.organization_id ? '/u' : ''}/messages/create/${userId}`);
+    });
+  }
+</script>

package/out/views/main.handlebars

@@ -42,7 +42,14 @@
                 {{#if configurationFields}}
                     <crowdin-button icon-before="settings" onclick="openModal(settingsModal);fillSettingsForm();">Settings</crowdin-button>
                 {{/if}}
-                <crowdin-button icon-before="account_circle" onclick="integrationLogout()">Log out</crowdin-button>
+                <crowdin-button
+                    {{#unless isOwner}}
+                        disabled
+                        title="Only the owner can log out"
+                    {{/unless}}
+                    icon-before="account_circle"
+                    onclick="integrationLogout()"
+                >Log out</crowdin-button>
             </div>
         </div>
         <crowdin-simple-integration
@@ -388,7 +395,7 @@
             .then(checkResponse)
             .then(reloadLocation)
             .then(localStorage.removeItem('revised_{{name}}'))
-            .catch(e => catchRejection(e, 'Looks like you are not logged in'));
+            .catch(e => catchRejection(e, e.error || 'Looks like you are not logged in'));
     }
 
     function getCrowdinData() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crowdin/app-project-module",
-  "version": "0.70.2",
+  "version": "0.71.0",
   "description": "Module that generates for you all common endpoints for serving standalone Crowdin App",
   "main": "out/index.js",
   "types": "out/index.d.ts",
@@ -21,7 +21,7 @@
   "dependencies": {
     "@aws-sdk/client-s3": "^3.606.0",
     "@aws-sdk/s3-request-presigner": "^3.682.0",
-    "@crowdin/crowdin-apps-functions": "0.9.0",
+    "@crowdin/crowdin-apps-functions": "^0.10.0",
     "@crowdin/logs-formatter": "^2.1.7",
     "@godaddy/terminus": "^4.12.1",
     "@monaco-editor/react": "^4.6.0",