@edgedev/create-edge-app 1.0.19 → 1.0.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/firestore.rules +30 -1
- package/firestore.rules.backup +293 -0
- package/functions/package.json +5 -2
- package/package.json +14 -5
- package/functions/.runtimeconfig.json +0 -5
- package/functions/config.js +0 -21
- package/functions/edgeFirebase.js +0 -302
- package/functions/index.js.backup +0 -4
- package/functions/package-lock.json +0 -5059
|
@@ -1,302 +0,0 @@
|
|
|
1
|
-
const { onCall, HttpsError, logger, getFirestore, functions, admin, twilio, db } = require('./config.js')
|
|
2
|
-
|
|
3
|
-
const authToken = process.env.TWILIO_AUTH_TOKEN
|
|
4
|
-
const accountSid = process.env.TWILIO_SID
|
|
5
|
-
const systemNumber = process.env.TWILIO_SYSTEM_NUMBER
|
|
6
|
-
|
|
7
|
-
function formatPhoneNumber(phone) {
|
|
8
|
-
// Remove non-numeric characters from the phone number
|
|
9
|
-
const numericPhone = phone.replace(/\D/g, '')
|
|
10
|
-
// Return the formatted number
|
|
11
|
-
return `+1${numericPhone}`
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
exports.sendVerificationCode = functions.https.onCall(async (data, context) => {
|
|
15
|
-
const code = (Math.floor(Math.random() * 1000000) + 1000000).toString().substring(1)
|
|
16
|
-
const phone = formatPhoneNumber(data.phone)
|
|
17
|
-
|
|
18
|
-
try {
|
|
19
|
-
const client = twilio(accountSid, authToken)
|
|
20
|
-
await client.messages.create({
|
|
21
|
-
body: `Your verification code is: ${code}`,
|
|
22
|
-
to: phone, // the user's phone number
|
|
23
|
-
from: systemNumber, // your Twilio phone number from the configuration
|
|
24
|
-
})
|
|
25
|
-
}
|
|
26
|
-
catch (error) {
|
|
27
|
-
console.log(error)
|
|
28
|
-
return { success: false, error: 'Invalid Phone #' }
|
|
29
|
-
}
|
|
30
|
-
|
|
31
|
-
try {
|
|
32
|
-
// Use the formatted phone number as the document ID for Firestore
|
|
33
|
-
await db.collection('phone-auth').doc(phone).set({
|
|
34
|
-
phone,
|
|
35
|
-
code,
|
|
36
|
-
})
|
|
37
|
-
return phone
|
|
38
|
-
}
|
|
39
|
-
catch (error) {
|
|
40
|
-
return { success: false, error }
|
|
41
|
-
}
|
|
42
|
-
})
|
|
43
|
-
|
|
44
|
-
exports.verifyPhoneNumber = functions.https.onCall(async (data, context) => {
|
|
45
|
-
const phone = data.phone
|
|
46
|
-
const code = data.code
|
|
47
|
-
|
|
48
|
-
// Get the phone-auth document with the given phone number
|
|
49
|
-
const phoneDoc = await db.collection('phone-auth').doc(phone).get()
|
|
50
|
-
|
|
51
|
-
if (!phoneDoc.exists) {
|
|
52
|
-
return { success: false, error: 'Phone number not found.' }
|
|
53
|
-
}
|
|
54
|
-
|
|
55
|
-
const storedCode = phoneDoc.data().code
|
|
56
|
-
|
|
57
|
-
if (storedCode !== code) {
|
|
58
|
-
return { success: false, error: 'Invalid verification code.' }
|
|
59
|
-
}
|
|
60
|
-
|
|
61
|
-
// If the code matches, authenticate the user with Firebase Custom Auth
|
|
62
|
-
try {
|
|
63
|
-
// You would typically generate a UID based on the phone number or another system
|
|
64
|
-
const uid = phone
|
|
65
|
-
|
|
66
|
-
// Create a custom token (this can be used on the client to sign in)
|
|
67
|
-
const customToken = await admin.auth().createCustomToken(uid)
|
|
68
|
-
|
|
69
|
-
return { success: true, token: customToken }
|
|
70
|
-
}
|
|
71
|
-
catch (error) {
|
|
72
|
-
console.error('Error creating custom token:', error)
|
|
73
|
-
return { success: false, error: 'Failed to authenticate.' }
|
|
74
|
-
}
|
|
75
|
-
})
|
|
76
|
-
|
|
77
|
-
exports.initFirestore = functions.https.onCall(async (data, context) => {
|
|
78
|
-
// checks to see of the collections 'collection-data' and 'staged-users' exist if not will seed them with data
|
|
79
|
-
const collectionData = await db.collection('collection-data').get()
|
|
80
|
-
const stagedUsers = await db.collection('staged-users').get()
|
|
81
|
-
if (collectionData.empty) {
|
|
82
|
-
// create a document with the id of '-' and one called '-default-':
|
|
83
|
-
const admin = { assign: true, delete: true, read: true, write: true }
|
|
84
|
-
const editor = { assign: false, delete: true, read: true, write: true }
|
|
85
|
-
const writer = { assign: false, delete: false, read: true, write: true }
|
|
86
|
-
const user = { assign: false, delete: false, read: true, write: false }
|
|
87
|
-
await db.collection('collection-data').doc('-').set({ admin, editor, writer, user })
|
|
88
|
-
await db.collection('collection-data').doc('-default-').set({ admin, editor, writer, user })
|
|
89
|
-
}
|
|
90
|
-
if (stagedUsers.empty) {
|
|
91
|
-
const templateUser = {
|
|
92
|
-
docId: 'organization-registration-template',
|
|
93
|
-
isTemplate: true,
|
|
94
|
-
meta: {
|
|
95
|
-
name: 'Organization Registration Template',
|
|
96
|
-
},
|
|
97
|
-
subCreate: {
|
|
98
|
-
documentStructure: {
|
|
99
|
-
name: '',
|
|
100
|
-
},
|
|
101
|
-
dynamicDocumentField: 'name',
|
|
102
|
-
role: 'admin',
|
|
103
|
-
rootPath: 'organizations',
|
|
104
|
-
},
|
|
105
|
-
userId: '',
|
|
106
|
-
}
|
|
107
|
-
await db.collection('staged-users').doc('organization-registration-template').set(templateUser)
|
|
108
|
-
}
|
|
109
|
-
})
|
|
110
|
-
|
|
111
|
-
exports.removeNonRegisteredUser = functions.https.onCall(async (data, context) => {
|
|
112
|
-
if (data.uid === context.auth.uid) {
|
|
113
|
-
const stagedUser = await db.collection('staged-users').doc(data.docId).get()
|
|
114
|
-
if (stagedUser.exists) {
|
|
115
|
-
const stagedUserData = stagedUser.data()
|
|
116
|
-
|
|
117
|
-
const rolesExist = stagedUserData.roles && Object.keys(stagedUserData.roles).length !== 0
|
|
118
|
-
const specialPermissionsExist = stagedUserData.specialPermissions && Object.keys(stagedUserData.specialPermissions).length !== 0
|
|
119
|
-
const userIdExistsAndNotBlank = stagedUserData.userId && stagedUserData.userId !== ''
|
|
120
|
-
|
|
121
|
-
if (!rolesExist && !specialPermissionsExist && !userIdExistsAndNotBlank) {
|
|
122
|
-
await db.collection('staged-users').doc(data.docId).delete()
|
|
123
|
-
return { success: true, message: '' }
|
|
124
|
-
}
|
|
125
|
-
else {
|
|
126
|
-
let message = ''
|
|
127
|
-
if (rolesExist && specialPermissionsExist) {
|
|
128
|
-
message = 'Cannot delete because the non-registered user still has roles and special permissions assigned.'
|
|
129
|
-
}
|
|
130
|
-
else if (rolesExist) {
|
|
131
|
-
message = 'Cannot delete because the non-registered user still has roles assigned.'
|
|
132
|
-
}
|
|
133
|
-
else if (specialPermissionsExist) {
|
|
134
|
-
message = 'Cannot delete because the non-registered user still has special permissions assigned.'
|
|
135
|
-
}
|
|
136
|
-
else if (userIdExistsAndNotBlank) {
|
|
137
|
-
message = 'Cannot delete because the user is registered.'
|
|
138
|
-
}
|
|
139
|
-
return { success: false, message }
|
|
140
|
-
}
|
|
141
|
-
}
|
|
142
|
-
}
|
|
143
|
-
return { success: false, message: 'Non-registered user not found.' }
|
|
144
|
-
})
|
|
145
|
-
|
|
146
|
-
exports.currentUserRegister = functions.https.onCall(async (data, context) => {
|
|
147
|
-
if (data.uid === context.auth.uid) {
|
|
148
|
-
const stagedUser = await db.collection('staged-users').doc(data.registrationCode).get()
|
|
149
|
-
if (!stagedUser.exists) {
|
|
150
|
-
return { success: false, message: 'Registration code not found.' }
|
|
151
|
-
}
|
|
152
|
-
else {
|
|
153
|
-
const stagedUserData = await stagedUser.data()
|
|
154
|
-
let process = false
|
|
155
|
-
if (stagedUserData.isTemplate) {
|
|
156
|
-
process = true
|
|
157
|
-
}
|
|
158
|
-
if (!stagedUserData.isTemplate && stagedUserData.userId === '') {
|
|
159
|
-
process = true
|
|
160
|
-
}
|
|
161
|
-
if (!process) {
|
|
162
|
-
return { success: false, message: 'Registration code not valid.' }
|
|
163
|
-
}
|
|
164
|
-
const newRoles = stagedUserData.roles || {}
|
|
165
|
-
const currentUser = await db.collection('users').doc(data.uid).get()
|
|
166
|
-
const currentUserData = await currentUser.data()
|
|
167
|
-
const currentRoles = currentUserData.roles || {}
|
|
168
|
-
const currentUserCollectionPaths = currentUserData.collectionPaths || []
|
|
169
|
-
let newRole = {}
|
|
170
|
-
if (stagedUserData.subCreate && Object.keys(stagedUserData.subCreate).length !== 0 && stagedUserData.isTemplate) {
|
|
171
|
-
if (!data.dynamicDocumentFieldValue) {
|
|
172
|
-
return { success: false, message: 'Dynamic document field value is required.' }
|
|
173
|
-
}
|
|
174
|
-
const rootPath = stagedUserData.subCreate.rootPath
|
|
175
|
-
const newDoc = stagedUserData.subCreate.documentStructure
|
|
176
|
-
newDoc[stagedUserData.subCreate.dynamicDocumentField] = data.dynamicDocumentFieldValue
|
|
177
|
-
const addedDoc = await db.collection(rootPath).add(newDoc)
|
|
178
|
-
await db.collection(rootPath).doc(addedDoc.id).update({ docId: addedDoc.id })
|
|
179
|
-
newRole = { [`${rootPath}-${addedDoc.id}`]: { collectionPath: `${rootPath}-${addedDoc.id}`, role: stagedUserData.subCreate.role } }
|
|
180
|
-
}
|
|
181
|
-
const combinedRoles = { ...currentRoles, ...newRoles, ...newRole }
|
|
182
|
-
Object.values(combinedRoles).forEach((role) => {
|
|
183
|
-
if (!currentUserCollectionPaths.includes(role.collectionPath)) {
|
|
184
|
-
currentUserCollectionPaths.push(role.collectionPath)
|
|
185
|
-
}
|
|
186
|
-
})
|
|
187
|
-
await db.collection('staged-users').doc(currentUserData.stagedDocId).update({ roles: combinedRoles, collectionPaths: currentUserCollectionPaths })
|
|
188
|
-
if (!stagedUserData.isTemplate) {
|
|
189
|
-
await db.collection('staged-users').doc(data.registrationCode).delete()
|
|
190
|
-
}
|
|
191
|
-
return { success: true, message: '' }
|
|
192
|
-
}
|
|
193
|
-
}
|
|
194
|
-
})
|
|
195
|
-
|
|
196
|
-
exports.updateUser = functions.firestore.document('staged-users/{docId}').onUpdate(async (change, context) => {
|
|
197
|
-
const eventId = context.eventId
|
|
198
|
-
const eventRef = db.collection('events').doc(eventId)
|
|
199
|
-
const stagedDocId = context.params.docId
|
|
200
|
-
let newData = change.after.data()
|
|
201
|
-
const oldData = change.before.data()
|
|
202
|
-
|
|
203
|
-
const shouldProcess = await eventRef.get().then((eventDoc) => {
|
|
204
|
-
return !eventDoc.exists || !eventDoc.data().processed
|
|
205
|
-
})
|
|
206
|
-
|
|
207
|
-
if (!shouldProcess) {
|
|
208
|
-
return null
|
|
209
|
-
}
|
|
210
|
-
|
|
211
|
-
// Note: we can trust on newData.uid because we are checking in rules that it matches the auth.uid
|
|
212
|
-
if (newData.userId) {
|
|
213
|
-
const userRef = db.collection('users').doc(newData.userId)
|
|
214
|
-
await setUser(userRef, newData, oldData, stagedDocId)
|
|
215
|
-
await markProcessed(eventRef)
|
|
216
|
-
}
|
|
217
|
-
else {
|
|
218
|
-
if (newData.templateUserId !== oldData.templateUserId) {
|
|
219
|
-
// Check if templateUserId already exists in the staged-users collection
|
|
220
|
-
const stagedUserRef = db.collection('staged-users').doc(newData.templateUserId)
|
|
221
|
-
const doc = await stagedUserRef.get()
|
|
222
|
-
|
|
223
|
-
// If it exists, skip the creation process
|
|
224
|
-
if (doc.exists) {
|
|
225
|
-
return null
|
|
226
|
-
}
|
|
227
|
-
|
|
228
|
-
newData.isTemplate = false
|
|
229
|
-
const templateUserId = newData.templateUserId
|
|
230
|
-
newData.meta = newData.templateMeta
|
|
231
|
-
delete newData.templateMeta
|
|
232
|
-
delete newData.templateUserId
|
|
233
|
-
if (Object.prototype.hasOwnProperty.call(newData, 'subCreate') && Object.values(newData.subCreate).length > 0) {
|
|
234
|
-
const subCreate = newData.subCreate
|
|
235
|
-
delete newData.subCreate
|
|
236
|
-
const addedDoc = await db.collection(subCreate.rootPath).add({ [subCreate.dynamicDocumentField]: newData.dynamicDocumentFieldValue })
|
|
237
|
-
await db.collection(subCreate.rootPath).doc(addedDoc.id).update({ docId: addedDoc.id })
|
|
238
|
-
delete newData.dynamicDocumentFieldValue
|
|
239
|
-
const newRole = { [`${subCreate.rootPath}-${addedDoc.id}`]: { collectionPath: `${subCreate.rootPath}-${addedDoc.id}`, role: subCreate.role } }
|
|
240
|
-
if (Object.prototype.hasOwnProperty.call(newData, 'collectionPaths')) {
|
|
241
|
-
newData.collectionPaths.push(`${subCreate.rootPath}-${addedDoc.id}`)
|
|
242
|
-
}
|
|
243
|
-
else {
|
|
244
|
-
newData.collectionPaths = [`${subCreate.rootPath}-${addedDoc.id}`]
|
|
245
|
-
}
|
|
246
|
-
const newRoles = { ...newData.roles, ...newRole }
|
|
247
|
-
newData = { ...newData, roles: newRoles }
|
|
248
|
-
const stagedUserRef = db.collection('staged-users').doc(templateUserId)
|
|
249
|
-
await stagedUserRef.set({ ...newData, userId: templateUserId })
|
|
250
|
-
const userRef = db.collection('users').doc(templateUserId)
|
|
251
|
-
await setUser(userRef, newData, oldData, templateUserId)
|
|
252
|
-
await markProcessed(eventRef)
|
|
253
|
-
}
|
|
254
|
-
else {
|
|
255
|
-
const stagedUserRef = db.collection('staged-users').doc(templateUserId)
|
|
256
|
-
await stagedUserRef.set({ ...newData, userId: templateUserId })
|
|
257
|
-
const userRef = db.collection('users').doc(templateUserId)
|
|
258
|
-
await setUser(userRef, newData, oldData, templateUserId)
|
|
259
|
-
await markProcessed(eventRef)
|
|
260
|
-
}
|
|
261
|
-
}
|
|
262
|
-
}
|
|
263
|
-
await markProcessed(eventRef)
|
|
264
|
-
})
|
|
265
|
-
|
|
266
|
-
function setUser(userRef, newData, oldData, stagedDocId) {
|
|
267
|
-
// IT's OK If "users" doesn't match exactly matched "staged-users" because this is only preventing
|
|
268
|
-
// writing from outside the @edgdev/firebase functions, so discrepancies will be rare since
|
|
269
|
-
// the package will prevent before it gets this far.
|
|
270
|
-
return userRef.get().then((user) => {
|
|
271
|
-
let userUpdate = { meta: newData.meta, stagedDocId }
|
|
272
|
-
|
|
273
|
-
if (Object.prototype.hasOwnProperty.call(newData, 'roles')) {
|
|
274
|
-
userUpdate = { ...userUpdate, roles: newData.roles }
|
|
275
|
-
}
|
|
276
|
-
if (Object.prototype.hasOwnProperty.call(newData, 'specialPermissions')) {
|
|
277
|
-
userUpdate = { ...userUpdate, specialPermissions: newData.specialPermissions }
|
|
278
|
-
}
|
|
279
|
-
|
|
280
|
-
if (!oldData.userId) {
|
|
281
|
-
userUpdate = { ...userUpdate, userId: newData.uid }
|
|
282
|
-
}
|
|
283
|
-
if (!user.exists) {
|
|
284
|
-
return userRef.set(userUpdate)
|
|
285
|
-
}
|
|
286
|
-
else {
|
|
287
|
-
return userRef.update(userUpdate)
|
|
288
|
-
}
|
|
289
|
-
})
|
|
290
|
-
}
|
|
291
|
-
|
|
292
|
-
function shouldProcess(eventRef) {
|
|
293
|
-
return eventRef.get().then((eventDoc) => {
|
|
294
|
-
return !eventDoc.exists || !eventDoc.data().processed
|
|
295
|
-
})
|
|
296
|
-
}
|
|
297
|
-
|
|
298
|
-
function markProcessed(eventRef) {
|
|
299
|
-
return eventRef.set({ processed: true }).then(() => {
|
|
300
|
-
return null
|
|
301
|
-
})
|
|
302
|
-
}
|