@crowdin/app-project-module 0.70.2 → 0.71.1

package/out/index.js

@@ -105,9 +105,9 @@ exports.metadataStore = {
         return storage.getStorage().deleteMetadata(id);
     },
     getUserSettings: (clientId) => __awaiter(void 0, void 0, void 0, function* () {
-        const integrationCredentials = yield storage.getStorage().getIntegrationConfig(clientId);
-        if (integrationCredentials === null || integrationCredentials === void 0 ? void 0 : integrationCredentials.config) {
-            return JSON.parse(integrationCredentials.config);
+        const integrationConfig = yield storage.getStorage().getIntegrationConfig(clientId);
+        if (integrationConfig === null || integrationConfig === void 0 ? void 0 : integrationConfig.config) {
+            return JSON.parse(integrationConfig.config);
         }
     }),
 };

package/out/middlewares/integration-credentials.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -13,19 +36,54 @@ const storage_1 = require("../storage");
 const util_1 = require("../util");
 const connection_1 = require("../util/connection");
 const logger_1 = require("../util/logger");
+const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
 function handle(config, integration, optional = false) {
     return (0, util_1.runAsyncWrapper)((req, res, next) => __awaiter(this, void 0, void 0, function* () {
-        const clientId = req.crowdinContext.clientId;
+        let clientId = req.crowdinContext.clientId;
+        const { organization, projectId, userId } = crowdinAppFunctions.parseCrowdinId(clientId);
         req.logInfo(`Loading integration credentials for client ${clientId}`);
-        const integrationCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentials(clientId);
-        const integrationConfig = yield (0, storage_1.getStorage)().getIntegrationConfig(clientId);
+        let integrationCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentials(clientId);
+        const ownerIds = [];
+        // check if user has access to integration in settings(managers)
+        if (!integrationCredentials) {
+            const projectIntegrationCredentials = (yield (0, storage_1.getStorage)().getAllIntegrationCredentials(organization)).filter((item) => {
+                const { organization: itemOrganization, projectId: itemProjectId } = crowdinAppFunctions.parseCrowdinId(item.id);
+                return itemOrganization === organization && itemProjectId === projectId;
+            });
+            if (projectIntegrationCredentials.length) {
+                for (const credentials of projectIntegrationCredentials) {
+                    ownerIds.push(crowdinAppFunctions.parseCrowdinId(credentials.id).userId);
+                    if (yield checkUserAccessToIntegration(credentials, `${userId}`)) {
+                        integrationCredentials = credentials;
+                        clientId = credentials.id;
+                        req.crowdinContext.clientId = clientId;
+                        break;
+                    }
+                }
+            }
+        }
         if (!integrationCredentials) {
-            if (optional) {
+            const owners = yield getIntegrationManagedBy(ownerIds, req);
+            if (optional && !owners.length) {
                 return next();
             }
-            (0, logger_1.temporaryErrorDebug)('Access denied: integration-credentials', req);
-            return res.status(403).send({ error: 'Access denied' });
+            const errorOptions = {
+                code: 403,
+                message: 'Access denied',
+                owners: null,
+                hideActions: false,
+            };
+            if (owners) {
+                errorOptions.message = 'Looks like you don’t have access';
+                errorOptions.hideActions = true;
+                errorOptions.owners = owners;
+            }
+            else {
+                (0, logger_1.temporaryErrorDebug)('Access denied: integration-credentials', req);
+            }
+            return res.render('error', errorOptions);
         }
+        const integrationConfig = yield (0, storage_1.getStorage)().getIntegrationConfig(clientId);
         if (integrationConfig === null || integrationConfig === void 0 ? void 0 : integrationConfig.config) {
             req.integrationSettings = JSON.parse(integrationConfig.config);
         }
@@ -40,3 +98,43 @@ function handle(config, integration, optional = false) {
     }));
 }
 exports.default = handle;
+function checkUserAccessToIntegration(integrationCredentials, userId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const projectIntegrationConfig = yield (0, storage_1.getStorage)().getIntegrationConfig(integrationCredentials.id);
+        if (projectIntegrationConfig === null || projectIntegrationConfig === void 0 ? void 0 : projectIntegrationConfig.config) {
+            const appSettings = JSON.parse(projectIntegrationConfig.config);
+            return ((appSettings === null || appSettings === void 0 ? void 0 : appSettings.managers) || []).includes(userId);
+        }
+        return false;
+    });
+}
+function getIntegrationManagedBy(ownerIds, req) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (!ownerIds.length) {
+            return [];
+        }
+        const projectId = crowdinAppFunctions.getProjectId(req.crowdinContext.clientId);
+        let owners = [];
+        try {
+            owners =
+                ownerIds.length > 1
+                    ? (yield req.crowdinApiClient.usersApi.listProjectMembers(projectId)).data.filter((member) => ownerIds.includes(member.data.id))
+                    : [yield req.crowdinApiClient.usersApi.getProjectMemberPermissions(projectId, ownerIds[0])];
+        }
+        catch (e) {
+            console.warn('Failed to get project members', e);
+            return [];
+        }
+        return owners.map((owner) => {
+            const ownerFullName = 'fullName' in owner.data
+                ? owner.data.fullName
+                : `${owner.data.firstName || ''} ${owner.data.lastName || ''}`.trim();
+            return {
+                id: owner.data.id,
+                name: !!ownerFullName && owner.data.username !== ownerFullName
+                    ? `${ownerFullName} (${owner.data.username})`
+                    : owner.data.username,
+            };
+        });
+    });
+}

package/out/modules/integration/handlers/integration-logout.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -14,8 +37,13 @@ const util_1 = require("../../../util");
 const logger_1 = require("../../../util/logger");
 const subscription_1 = require("../../../util/subscription");
 const webhooks_1 = require("../util/webhooks");
+const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
 function handle(config, integration) {
     return (0, util_1.runAsyncWrapper)((req, res) => __awaiter(this, void 0, void 0, function* () {
+        const { userId } = crowdinAppFunctions.parseCrowdinId(req.crowdinContext.clientId);
+        if (+userId !== +req.crowdinContext.jwtPayload.sub) {
+            return res.status(403).send({ error: 'Access denied' });
+        }
         req.logInfo('Received integration logout request');
         if (integration.onLogout) {
             try {

package/out/modules/integration/handlers/main.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -13,6 +36,7 @@ const util_1 = require("../../../util");
 const logger_1 = require("../../../util/logger");
 const subscription_1 = require("../../../util/subscription");
 const defaults_1 = require("../util/defaults");
+const crowdinAppFunctions = __importStar(require("@crowdin/crowdin-apps-functions"));
 function handle(config, integration) {
     return (0, util_1.runAsyncWrapper)((req, res) => __awaiter(this, void 0, void 0, function* () {
         var _a, _b;
@@ -41,6 +65,8 @@ function handle(config, integration) {
             }
         }
         else if (integration.getConfiguration) {
+            const { userId } = crowdinAppFunctions.parseCrowdinId(req.crowdinContext.clientId);
+            options.isOwner = +req.crowdinContext.jwtPayload.sub === userId;
             const configurationFields = yield integration.getConfiguration(req.crowdinContext.jwtPayload.context.project_id, req.crowdinApiClient, req.integrationCredentials);
             options.configurationFields = configurationFields;
             options.config = JSON.stringify(req.integrationSettings || {});

package/out/modules/integration/util/defaults.js

@@ -147,6 +147,27 @@ function applyIntegrationModuleDefaults(config, integration) {
             fields = yield getUserSettings(projectId, crowdinClient, integrationCredentials);
         }
         const defaultSettings = [];
+        const mangers = yield getManagers(projectId, crowdinClient, integrationCredentials);
+        if (mangers.length) {
+            defaultSettings.push({
+                key: 'managers',
+                label: 'Managers',
+                type: 'select',
+                isMulti: true,
+                isSearchable: true,
+                options: mangers.map((manager) => {
+                    const ownerFullName = 'fullName' in manager
+                        ? manager.fullName
+                        : ((manager.firstName || '') + ' ' + (manager.lastName || '')).trim();
+                    return {
+                        value: manager.id.toString(),
+                        label: !!ownerFullName && (manager === null || manager === void 0 ? void 0 : manager.username) !== ownerFullName
+                            ? `${ownerFullName} (${manager === null || manager === void 0 ? void 0 : manager.username})`
+                            : manager === null || manager === void 0 ? void 0 : manager.username,
+                    };
+                }),
+            });
+        }
         if (project.data.inContext) {
             defaultSettings.push({
                 key: 'inContext',
@@ -299,3 +320,17 @@ function getOAuthLoginFormId(clientId) {
     return `oauth_form_${clientId}`;
 }
 exports.getOAuthLoginFormId = getOAuthLoginFormId;
+function getManagers(projectId, client, integrationCredentials) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const managers = [];
+        if (client.organization) {
+            const admins = (yield client.usersApi.listUsers()).data.filter((user) => user.data.isAdmin);
+            managers.push(...admins.map((admin) => admin.data));
+        }
+        const projectMembers = (yield client.usersApi.listProjectMembers(projectId)).data.filter((user) => 'role' in user.data ? ['owner', 'manager'].includes(user.data.role) : user.data.isManager);
+        managers.push(...projectMembers.map((members) => members.data));
+        return managers
+            .filter((manager) => manager.id !== +integrationCredentials.ownerId)
+            .filter((manager, index, self) => self.findIndex((m) => m.id === manager.id) === index);
+    });
+}

package/out/modules/integration/util/webhooks.js

@@ -110,7 +110,6 @@ function registerWebhooks({ config, apiCredentials, appSettings, client, crowdin
                     projectId,
                     webhook,
                     events,
-                    url: webhookUrl,
                 });
             }
             else if (isWebhookSync && !webhook) {
@@ -198,7 +197,7 @@ function registerCrowdinWebhook({ client, config, crowdinContext, events, url, }
         });
     });
 }
-function updateCrowdinWebhooks({ client, events, projectId, url, webhook, }) {
+function updateCrowdinWebhooks({ client, events, projectId, webhook, }) {
     return __awaiter(this, void 0, void 0, function* () {
         const payload = createPayload(events);
         yield client.webhooksApi.editWebhook(projectId, webhook.id, [
@@ -212,11 +211,6 @@ function updateCrowdinWebhooks({ client, events, projectId, url, webhook, }) {
                 op: 'replace',
                 path: '/payload',
             },
-            {
-                value: url,
-                op: 'replace',
-                path: '/url',
-            },
         ]);
     });
 }

package/out/modules/uninstall.js

@@ -20,6 +20,10 @@ function handle(config) {
         (0, logger_1.log)(`Received uninstall request ${JSON.stringify(event, null, 2)}`);
         const projectIntegration = config.projectIntegration;
         const organization = (event.domain || event.organizationId).toString();
+        const crowdinCredential = yield (0, storage_1.getStorage)().getCrowdinCredentials(organization);
+        if ((crowdinCredential === null || crowdinCredential === void 0 ? void 0 : crowdinCredential.appSecret) !== event.appSecret) {
+            return res.status(403).send({ error: 'Access denied' });
+        }
         if (config.onUninstall) {
             let allCredentials = [];
             if (projectIntegration) {

package/out/static/css/styles.css

@@ -59,6 +59,10 @@
     margin-left: 8px;
 }
 
+.mt-2 {
+    margin-top: 16px;
+}
+
 .m-0 {
     margin: 0;
 }
@@ -254,4 +258,4 @@
     form > .MuiBox-root {
         display: none;
     }
-}
+}