@exulu/backend 0.1.8 → 0.1.9

package/dist/index.cjs

@@ -398,6 +398,7 @@ var sanitizeName = (name) => {
 };
 
 // src/postgres/init-db.ts
+var import_bcryptjs = __toESM(require("bcryptjs"), 1);
 var up = async function(knex) {
   if (!await knex.schema.hasTable("roles")) {
     await knex.schema.createTable("roles", (table) => {
@@ -545,6 +546,11 @@ var up = async function(knex) {
     });
   }
 };
+var SALT_ROUNDS = 12;
+async function encryptApiKey(apiKey) {
+  const hash = await import_bcryptjs.default.hash(apiKey, SALT_ROUNDS);
+  return hash;
+}
 var execute = async () => {
   console.log("[EXULU] Initializing database.");
   const { db: db2 } = await postgresClient();
@@ -563,6 +569,10 @@ var execute = async () => {
   } else {
     roleId = existingRole.id;
   }
+  const newKeyName = "exulu_default_key";
+  const plainKey = `sk_${Math.random().toString(36).substring(2, 15)}_${Math.random().toString(36).substring(2, 15)}`;
+  const postFix = `/${newKeyName.toLowerCase().trim().replaceAll(" ", "_")}`;
+  const encryptedKey = await encryptApiKey(plainKey);
   const existingUser = await db2.from("users").where({ email: "admin@exulu.com" }).first();
   if (!existingUser) {
     console.log("[EXULU] Creating default admin user.");
@@ -572,11 +582,28 @@ var execute = async () => {
       super_admin: true,
       createdAt: /* @__PURE__ */ new Date(),
       updatedAt: /* @__PURE__ */ new Date(),
+      type: "user",
+      // password: "admin", todo add this again when we implement password auth / encryption as alternative to OTP
+      role: roleId
+    });
+  }
+  const existingApiUser = await db2.from("users").where({ email: "api@exulu.com" }).first();
+  if (!existingApiUser) {
+    console.log("[EXULU] Creating default api user.");
+    await db2.from("users").insert({
+      name: "exulu",
+      email: "admin@exulu.com",
+      super_admin: true,
+      createdAt: /* @__PURE__ */ new Date(),
+      updatedAt: /* @__PURE__ */ new Date(),
+      type: "user",
+      apikey: `${encryptedKey}${postFix}`,
       // password: "admin", todo add this again when we implement password auth / encryption as alternative to OTP
       role: roleId
     });
   }
   console.log("[EXULU] Database initialized.");
+  console.log("[EXULU] Default api key: ", `${encryptedKey}${postFix}`);
   return;
 };
 
@@ -1428,7 +1455,7 @@ var import_express = require("express");
 var import_jwt = require("next-auth/jwt");
 
 // src/auth/auth.ts
-var import_bcryptjs = __toESM(require("bcryptjs"), 1);
+var import_bcryptjs2 = __toESM(require("bcryptjs"), 1);
 var authentication = async ({
   apikey,
   authtoken,
@@ -1523,7 +1550,7 @@ var authentication = async ({
     for (const user of filtered) {
       const lastSlashIndex = user.apiKey.lastIndexOf("/");
       const compareValue = lastSlashIndex !== -1 ? user.apiKey.substring(0, lastSlashIndex) : user.apiKey;
-      const isMatch = await import_bcryptjs.default.compare(keyValue, compareValue);
+      const isMatch = await import_bcryptjs2.default.compare(keyValue, compareValue);
       if (isMatch) {
         await db2.from("users").where({ id: user.id }).update({
           lastUsed: /* @__PURE__ */ new Date()

package/dist/index.js

@@ -357,6 +357,7 @@ var sanitizeName = (name) => {
 };
 
 // src/postgres/init-db.ts
+import bcrypt from "bcryptjs";
 var up = async function(knex) {
   if (!await knex.schema.hasTable("roles")) {
     await knex.schema.createTable("roles", (table) => {
@@ -504,6 +505,11 @@ var up = async function(knex) {
     });
   }
 };
+var SALT_ROUNDS = 12;
+async function encryptApiKey(apiKey) {
+  const hash = await bcrypt.hash(apiKey, SALT_ROUNDS);
+  return hash;
+}
 var execute = async () => {
   console.log("[EXULU] Initializing database.");
   const { db: db2 } = await postgresClient();
@@ -522,6 +528,10 @@ var execute = async () => {
   } else {
     roleId = existingRole.id;
   }
+  const newKeyName = "exulu_default_key";
+  const plainKey = `sk_${Math.random().toString(36).substring(2, 15)}_${Math.random().toString(36).substring(2, 15)}`;
+  const postFix = `/${newKeyName.toLowerCase().trim().replaceAll(" ", "_")}`;
+  const encryptedKey = await encryptApiKey(plainKey);
   const existingUser = await db2.from("users").where({ email: "admin@exulu.com" }).first();
   if (!existingUser) {
     console.log("[EXULU] Creating default admin user.");
@@ -531,11 +541,28 @@ var execute = async () => {
       super_admin: true,
       createdAt: /* @__PURE__ */ new Date(),
       updatedAt: /* @__PURE__ */ new Date(),
+      type: "user",
+      // password: "admin", todo add this again when we implement password auth / encryption as alternative to OTP
+      role: roleId
+    });
+  }
+  const existingApiUser = await db2.from("users").where({ email: "api@exulu.com" }).first();
+  if (!existingApiUser) {
+    console.log("[EXULU] Creating default api user.");
+    await db2.from("users").insert({
+      name: "exulu",
+      email: "admin@exulu.com",
+      super_admin: true,
+      createdAt: /* @__PURE__ */ new Date(),
+      updatedAt: /* @__PURE__ */ new Date(),
+      type: "user",
+      apikey: `${encryptedKey}${postFix}`,
       // password: "admin", todo add this again when we implement password auth / encryption as alternative to OTP
       role: roleId
     });
   }
   console.log("[EXULU] Database initialized.");
+  console.log("[EXULU] Default api key: ", `${encryptedKey}${postFix}`);
   return;
 };
 
@@ -1387,7 +1414,7 @@ import "express";
 import { getToken } from "next-auth/jwt";
 
 // src/auth/auth.ts
-import bcrypt from "bcryptjs";
+import bcrypt2 from "bcryptjs";
 var authentication = async ({
   apikey,
   authtoken,
@@ -1482,7 +1509,7 @@ var authentication = async ({
     for (const user of filtered) {
       const lastSlashIndex = user.apiKey.lastIndexOf("/");
       const compareValue = lastSlashIndex !== -1 ? user.apiKey.substring(0, lastSlashIndex) : user.apiKey;
-      const isMatch = await bcrypt.compare(keyValue, compareValue);
+      const isMatch = await bcrypt2.compare(keyValue, compareValue);
       if (isMatch) {
         await db2.from("users").where({ id: user.id }).update({
           lastUsed: /* @__PURE__ */ new Date()

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@exulu/backend",
     "author": "Qventu Bv.",
-    "version": "0.1.8",
+    "version": "0.1.9",
     "main": "./dist/index.js",
     "private": false,
     "publishConfig": {