@extrahorizon/exh-cli 1.8.2-dev-74-994b4dc → 1.8.2-feat-76-eba7a78

package/build/commands/tasks/sync.js

@@ -5,6 +5,7 @@ const fs = require("fs/promises");
 const chalk = require("chalk");
 const constants_1 = require("../../constants");
 const util_1 = require("../../helpers/util");
+const authRepository = require("../../repositories/auth");
 const functionRepository = require("../../repositories/functions");
 const taskConfig_1 = require("./taskConfig");
 const util_2 = require("./util");
@@ -96,13 +97,31 @@ async function syncSingleTask(sdk, config) {
     if (config.memoryLimit) {
         request.memoryLimit = config.memoryLimit;
     }
-    if (config.environment) {
-        request.environmentVariables =
-            Object.entries(config.environment).reduce((prev, curr) => ({ ...prev, [curr[0]]: { value: curr[1] } }), {});
-    }
     if (config.retryPolicy) {
         request.retryPolicy = config.retryPolicy;
     }
+    if (config.executionCredentials) {
+        const credentials = await (0, util_2.syncFunctionUser)(sdk, {
+            taskName: config.name,
+            targetEmail: config.executionCredentials.email,
+            targetPermissions: config.executionCredentials.permissions,
+        });
+        config.environment = {
+            ...config.environment,
+            API_HOST: authRepository.getHost(sdk),
+            API_OAUTH_CONSUMER_KEY: process.env.API_OAUTH_CONSUMER_KEY,
+            API_OAUTH_CONSUMER_SECRET: process.env.API_OAUTH_CONSUMER_SECRET,
+            API_OAUTH_TOKEN: credentials.token,
+            API_OAUTH_TOKEN_SECRET: credentials.tokenSecret,
+        };
+    }
+    if (config.environment) {
+        const environmentVariables = {};
+        for (const [key, value] of Object.entries(config.environment)) {
+            environmentVariables[key] = { value };
+        }
+        request.environmentVariables = environmentVariables;
+    }
     if (myFunction === undefined) {
         await functionRepository.create(sdk, request);
         console.log(chalk.green('Successfully created task', config.name));

package/build/commands/tasks/taskConfig.d.ts

@@ -17,6 +17,10 @@ export interface TaskConfig {
         enabled: boolean;
         errorsToRetry: string[];
     };
+    executionCredentials?: {
+        email?: string;
+        permissions: string[];
+    };
 }
 export declare function assertExecutionPermission(mode: string): asserts mode is permissionModes | undefined;
 export declare function validateConfig(config: TaskConfig): Promise<boolean>;

package/build/commands/tasks/taskConfig.js

@@ -26,6 +26,10 @@ const taskConfigSchema = Joi.object({
     }),
     environment: Joi.object().pattern(/.*/, Joi.string()),
     executionPermission: Joi.string().valid(...Object.values(permissionModes)),
+    executionCredentials: Joi.object({
+        email: Joi.string(),
+        permissions: Joi.array().items(Joi.string()).required(),
+    }),
 });
 function assertExecutionPermission(mode) {
     if (mode !== undefined && !Object.values(permissionModes).includes(mode)) {

package/build/commands/tasks/util.d.ts

@@ -1 +1,10 @@
+import { OAuth1Client } from '@extrahorizon/javascript-sdk';
 export declare function zipFileFromDirectory(path: string): Promise<string>;
+export declare function syncFunctionUser(sdk: OAuth1Client, data: {
+    taskName: string;
+    targetEmail?: string;
+    targetPermissions: string[];
+}): Promise<{
+    token: any;
+    tokenSecret: any;
+}>;

package/build/commands/tasks/util.js

@@ -1,10 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.zipFileFromDirectory = void 0;
+exports.syncFunctionUser = exports.zipFileFromDirectory = void 0;
 const fs_1 = require("fs");
 const os_1 = require("os");
 const archiver = require("archiver");
+const chalk = require("chalk");
 const uuid_1 = require("uuid");
+const authRepository = require("../../repositories/auth");
+const functionRepository = require("../../repositories/functions");
+const userRepository = require("../../repositories/user");
 async function zipFileFromDirectory(path) {
     return new Promise((res, rej) => {
         const tmpPath = `${(0, os_1.tmpdir)()}/${(0, uuid_1.v4)()}`;
@@ -25,3 +29,96 @@ async function zipFileFromDirectory(path) {
     });
 }
 exports.zipFileFromDirectory = zipFileFromDirectory;
+async function syncFunctionUser(sdk, data) {
+    const { taskName, targetEmail, targetPermissions } = data;
+    const email = targetEmail || `exh.tasks+${taskName}@extrahorizon.com`;
+    validateEmail(email);
+    const password = `0Oo-${(0, uuid_1.v4)()}`;
+    const roleName = `exh.tasks.${taskName}`;
+    const role = await syncRoleWithPermissions(sdk, taskName, roleName, targetPermissions);
+    let user = await userRepository.findUserByEmail(sdk, email);
+    if (!user) {
+        console.log(chalk.white('⚙️  Creating a user for the task'));
+        const isEmailAvailable = await userRepository.isEmailAvailable(sdk, email);
+        if (!isEmailAvailable) {
+            throw new Error('❌ The user could not be created as the email address is already in use');
+        }
+        const registerUserData = {
+            firstName: `${taskName}`,
+            lastName: 'exh.tasks',
+            email,
+            password,
+            phoneNumber: '0000000000',
+            language: 'EN',
+        };
+        user = await userRepository.createUser(sdk, registerUserData);
+        console.log(chalk.green('✅ Successfully created a user for task'));
+        await assignRoleToUser(sdk, user.id, role.id);
+        return await createOAuth1Tokens(sdk, email, password);
+    }
+    console.log(chalk.white('⚙️  Checking for the existing users credentials'));
+    const currentFunction = await functionRepository.findByName(sdk, taskName);
+    const hasExistingCredentials = (currentFunction?.environmentVariables?.API_HOST?.value &&
+        currentFunction?.environmentVariables?.API_OAUTH_TOKEN_SECRET?.value &&
+        currentFunction?.environmentVariables?.API_OAUTH_TOKEN?.value &&
+        currentFunction?.environmentVariables?.API_OAUTH_CONSUMER_KEY?.value &&
+        currentFunction?.environmentVariables?.API_OAUTH_CONSUMER_SECRET?.value);
+    if (!hasExistingCredentials) {
+        throw new Error('❌ No credentials were found for the existing user');
+    }
+    const userRole = user.roles.find(({ name }) => name === roleName);
+    if (!userRole) {
+        await assignRoleToUser(sdk, user.id, role.id);
+    }
+    console.log(chalk.green('✅ Using existing credentials for the user'));
+    return {
+        token: currentFunction.environmentVariables.API_OAUTH_TOKEN.value,
+        tokenSecret: currentFunction.environmentVariables.API_OAUTH_TOKEN_SECRET.value,
+    };
+}
+exports.syncFunctionUser = syncFunctionUser;
+async function syncRoleWithPermissions(sdk, taskName, roleName, targetPermissions) {
+    console.log(chalk.white('⚙️  Checking if the role exists'));
+    let role = await userRepository.findGlobalRoleByName(sdk, roleName);
+    if (!role) {
+        console.log(chalk.white('⚙️  Role does not exist, creating a new role'));
+        const roleDescription = `A role created by the CLI for the execution of the task ${taskName}`;
+        role = await userRepository.createGlobalRole(sdk, roleName, roleDescription);
+        console.log(chalk.white('⚙️  Assigning permissions to the role'));
+        await userRepository.addPermissionsToGlobalRole(sdk, roleName, targetPermissions);
+        console.log(chalk.green('✅ Successfully assigned permissions to the role'));
+        return role;
+    }
+    const currentPermissions = role.permissions?.flatMap(permission => permission.name) || [];
+    const permissionsToAdd = targetPermissions.filter(targetPermission => !currentPermissions.includes(targetPermission));
+    const permissionsToRemove = currentPermissions.filter(currentPermission => !targetPermissions.includes(currentPermission));
+    if (permissionsToAdd.length > 0) {
+        console.log(chalk.white('⚙️  Adding missing permissions to the role'));
+        await userRepository.addPermissionsToGlobalRole(sdk, roleName, permissionsToAdd);
+        console.log(chalk.green('✅ Successfully added missing permissions to the role'));
+    }
+    if (permissionsToRemove.length > 0) {
+        console.log(chalk.white('⚙️  Removing excess permissions from the role'));
+        await userRepository.removePermissionsFromGlobalRole(sdk, roleName, permissionsToRemove);
+        console.log(chalk.green('✅ Successfully removed excess permissions from the role'));
+    }
+    return role;
+}
+async function assignRoleToUser(sdk, userId, roleId) {
+    console.log(chalk.white('⚙️  Assigning the role to the user'));
+    await userRepository.addGlobalRoleToUser(sdk, userId, roleId);
+    console.log(chalk.green('✅ Successfully assigned the role to the user'));
+}
+async function createOAuth1Tokens(sdk, email, password) {
+    console.log(chalk.white('⚙️  Creating OAuth1 tokens for the user', email));
+    const response = await authRepository.createOAuth1Tokens(sdk, email, password);
+    const { token, tokenSecret } = response.data;
+    console.log(chalk.green('✅ Successfully created OAuth1 tokens for the user', email));
+    return { token, tokenSecret };
+}
+function validateEmail(email) {
+    const emailRegex = /.+@.+\..+/;
+    if (email.length < 3 || email.length > 256 || !emailRegex.test(email)) {
+        throw new Error('Invalid email address');
+    }
+}

package/build/repositories/auth.d.ts

@@ -1,3 +1,4 @@
 import { OAuth1Client } from '@extrahorizon/javascript-sdk';
 export declare function getHost(sdk: OAuth1Client): string;
+export declare function createOAuth1Tokens(sdk: OAuth1Client, email: string, password: string): Promise<any>;
 export declare function fetchMe(sdk: OAuth1Client): Promise<import("@extrahorizon/javascript-sdk").UserData>;

package/build/repositories/auth.js

@@ -1,10 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.fetchMe = exports.getHost = void 0;
+exports.fetchMe = exports.createOAuth1Tokens = exports.getHost = void 0;
 function getHost(sdk) {
     return sdk?.raw?.defaults?.baseURL;
 }
 exports.getHost = getHost;
+async function createOAuth1Tokens(sdk, email, password) {
+    const response = await sdk.raw.post('/auth/v2/oauth1/tokens', { email, password });
+    return response.data;
+}
+exports.createOAuth1Tokens = createOAuth1Tokens;
 async function fetchMe(sdk) {
     return await sdk?.users.me();
 }

package/build/repositories/functions.js

@@ -7,7 +7,7 @@ async function find(sdk) {
 }
 exports.find = find;
 async function findByName(sdk, name) {
-    const response = await sdk.raw.get(`/tasks/v1/functions/${name}`);
+    const response = await sdk.raw.get(`/tasks/v1/functions/${name}`, { customResponseKeys: ['*'] });
     return response.data;
 }
 exports.findByName = findByName;

package/build/repositories/user.d.ts

@@ -0,0 +1,9 @@
+import { OAuth1Client, RegisterUserData } from '@extrahorizon/javascript-sdk';
+export declare function findUserByEmail(sdk: OAuth1Client, email: string): Promise<import("@extrahorizon/javascript-sdk").UserData>;
+export declare function isEmailAvailable(sdk: OAuth1Client, email: string): Promise<boolean>;
+export declare function createUser(sdk: OAuth1Client, data: RegisterUserData): Promise<import("@extrahorizon/javascript-sdk").UserData>;
+export declare function findGlobalRoleByName(sdk: OAuth1Client, name: string): Promise<import("@extrahorizon/javascript-sdk").Role>;
+export declare function createGlobalRole(sdk: OAuth1Client, name: string, description: string): Promise<import("@extrahorizon/javascript-sdk").Role>;
+export declare function addPermissionsToGlobalRole(sdk: OAuth1Client, name: string, permissions: string[]): Promise<import("@extrahorizon/javascript-sdk").AffectedRecords>;
+export declare function removePermissionsFromGlobalRole(sdk: OAuth1Client, name: string, permissions: string[]): Promise<import("@extrahorizon/javascript-sdk").AffectedRecords>;
+export declare function addGlobalRoleToUser(sdk: OAuth1Client, userId: string, roleId: string): Promise<import("@extrahorizon/javascript-sdk").AffectedRecords>;

package/build/repositories/user.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addGlobalRoleToUser = exports.removePermissionsFromGlobalRole = exports.addPermissionsToGlobalRole = exports.createGlobalRole = exports.findGlobalRoleByName = exports.createUser = exports.isEmailAvailable = exports.findUserByEmail = void 0;
+const javascript_sdk_1 = require("@extrahorizon/javascript-sdk");
+async function findUserByEmail(sdk, email) {
+    const rql = (0, javascript_sdk_1.rqlBuilder)().eq('email', email).build();
+    return await sdk.users.findFirst({ rql });
+}
+exports.findUserByEmail = findUserByEmail;
+async function isEmailAvailable(sdk, email) {
+    const { emailAvailable } = await sdk.users.isEmailAvailable(email);
+    return emailAvailable;
+}
+exports.isEmailAvailable = isEmailAvailable;
+async function createUser(sdk, data) {
+    return await sdk.users.createAccount(data);
+}
+exports.createUser = createUser;
+async function findGlobalRoleByName(sdk, name) {
+    return await sdk.users.globalRoles.findByName(name);
+}
+exports.findGlobalRoleByName = findGlobalRoleByName;
+async function createGlobalRole(sdk, name, description) {
+    return await sdk.users.globalRoles.create({ name, description });
+}
+exports.createGlobalRole = createGlobalRole;
+async function addPermissionsToGlobalRole(sdk, name, permissions) {
+    return await sdk.users.globalRoles.addPermissions((0, javascript_sdk_1.rqlBuilder)().eq('name', name).build(), { permissions });
+}
+exports.addPermissionsToGlobalRole = addPermissionsToGlobalRole;
+async function removePermissionsFromGlobalRole(sdk, name, permissions) {
+    return await sdk.users.globalRoles.removePermissions((0, javascript_sdk_1.rqlBuilder)().eq('name', name).build(), { permissions });
+}
+exports.removePermissionsFromGlobalRole = removePermissionsFromGlobalRole;
+async function addGlobalRoleToUser(sdk, userId, roleId) {
+    return await sdk.users.globalRoles.addToUsers((0, javascript_sdk_1.rqlBuilder)().eq('id', userId).build(), { roles: [roleId] });
+}
+exports.addGlobalRoleToUser = addGlobalRoleToUser;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@extrahorizon/exh-cli",
-  "version": "1.8.2-dev-74-994b4dc",
+  "version": "1.8.2-feat-76-eba7a78",
   "main": "build/index.js",
   "exports": "./build/index.js",
   "license": "MIT",