@fonoster/identity 0.6.1-alpha.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +3 -0
- package/dist/JsonWebErrorEnum.d.ts +5 -0
- package/dist/JsonWebErrorEnum.js +26 -0
- package/dist/apikeys/ApiRoleEnum.d.ts +4 -0
- package/dist/apikeys/ApiRoleEnum.js +25 -0
- package/dist/apikeys/createApiKey.d.ts +24 -0
- package/dist/apikeys/createApiKey.js +73 -0
- package/dist/apikeys/deleteApiKey.d.ts +18 -0
- package/dist/apikeys/deleteApiKey.js +58 -0
- package/dist/apikeys/index.d.ts +5 -0
- package/dist/apikeys/index.js +39 -0
- package/dist/apikeys/listApiKeys.d.ts +23 -0
- package/dist/apikeys/listApiKeys.js +50 -0
- package/dist/apikeys/regenerateApiKey.d.ts +20 -0
- package/dist/apikeys/regenerateApiKey.js +64 -0
- package/dist/createAuthInterceptor.d.ts +15 -0
- package/dist/createAuthInterceptor.js +75 -0
- package/dist/db.d.ts +14 -0
- package/dist/db.js +31 -0
- package/dist/envs.d.ts +1 -0
- package/dist/envs.js +24 -0
- package/dist/errors.d.ts +4 -0
- package/dist/errors.js +35 -0
- package/dist/exchanges/TokenUseEnum.d.ts +6 -0
- package/dist/exchanges/TokenUseEnum.js +27 -0
- package/dist/exchanges/exchangeApiKey.d.ts +24 -0
- package/dist/exchanges/exchangeApiKey.js +86 -0
- package/dist/exchanges/exchangeCredentials.d.ts +24 -0
- package/dist/exchanges/exchangeCredentials.js +86 -0
- package/dist/exchanges/exchangeRefreshToken.d.ts +21 -0
- package/dist/exchanges/exchangeRefreshToken.js +62 -0
- package/dist/exchanges/exchangeTokens.d.ts +8 -0
- package/dist/exchanges/exchangeTokens.js +92 -0
- package/dist/exchanges/index.d.ts +5 -0
- package/dist/exchanges/index.js +39 -0
- package/dist/exchanges/payloads/apikeys/getAccessTokenPayload.d.ts +4 -0
- package/dist/exchanges/payloads/apikeys/getAccessTokenPayload.js +45 -0
- package/dist/exchanges/payloads/apikeys/getRefreshTokenPayload.d.ts +4 -0
- package/dist/exchanges/payloads/apikeys/getRefreshTokenPayload.js +32 -0
- package/dist/exchanges/payloads/apikeys/index.d.ts +2 -0
- package/dist/exchanges/payloads/apikeys/index.js +36 -0
- package/dist/exchanges/payloads/buildRefreshTokenPayload.d.ts +7 -0
- package/dist/exchanges/payloads/buildRefreshTokenPayload.js +34 -0
- package/dist/exchanges/payloads/users/getAccessTokenPayload.d.ts +4 -0
- package/dist/exchanges/payloads/users/getAccessTokenPayload.js +55 -0
- package/dist/exchanges/payloads/users/getIdTokenPayload.d.ts +4 -0
- package/dist/exchanges/payloads/users/getIdTokenPayload.js +39 -0
- package/dist/exchanges/payloads/users/getRefreshTokenPayload.d.ts +4 -0
- package/dist/exchanges/payloads/users/getRefreshTokenPayload.js +35 -0
- package/dist/exchanges/payloads/users/index.d.ts +3 -0
- package/dist/exchanges/payloads/users/index.js +37 -0
- package/dist/exchanges/types.d.ts +56 -0
- package/dist/exchanges/types.js +2 -0
- package/dist/getPublicKey.d.ts +6 -0
- package/dist/getPublicKey.js +21 -0
- package/dist/getPublicKeyClient.d.ts +5 -0
- package/dist/getPublicKeyClient.js +62 -0
- package/dist/index.d.ts +10 -0
- package/dist/index.js +44 -0
- package/dist/invites/EmailTemplatesEnum.d.ts +5 -0
- package/dist/invites/EmailTemplatesEnum.js +26 -0
- package/dist/invites/createInviteBody.d.ts +8 -0
- package/dist/invites/createInviteBody.js +44 -0
- package/dist/invites/index.d.ts +3 -0
- package/dist/invites/index.js +37 -0
- package/dist/invites/sendInvite.d.ts +11 -0
- package/dist/invites/sendInvite.js +29 -0
- package/dist/invites/templates/inviteExistingUser.hbs +54 -0
- package/dist/invites/templates/inviteNewUser.hbs +55 -0
- package/dist/roles.d.ts +5 -0
- package/dist/roles.js +129 -0
- package/dist/service.d.ts +200 -0
- package/dist/service.js +63 -0
- package/dist/users/createUser.d.ts +27 -0
- package/dist/users/createUser.js +66 -0
- package/dist/users/deleteUser.d.ts +12 -0
- package/dist/users/deleteUser.js +59 -0
- package/dist/users/getUser.d.ts +17 -0
- package/dist/users/getUser.js +67 -0
- package/dist/users/index.d.ts +5 -0
- package/dist/users/index.js +39 -0
- package/dist/users/updateUser.d.ts +27 -0
- package/dist/users/updateUser.js +73 -0
- package/dist/users/upsertDefaultUser.d.ts +17 -0
- package/dist/users/upsertDefaultUser.js +87 -0
- package/dist/utils/createCallAccessToken.d.ts +6 -0
- package/dist/utils/createCallAccessToken.js +65 -0
- package/dist/utils/decodeToken.d.ts +4 -0
- package/dist/utils/decodeToken.js +26 -0
- package/dist/utils/generateAccessKeyId.d.ts +8 -0
- package/dist/utils/generateAccessKeyId.js +39 -0
- package/dist/utils/generateAccessKeySecret.d.ts +2 -0
- package/dist/utils/generateAccessKeySecret.js +26 -0
- package/dist/utils/getAccessKeyIdFromCall.d.ts +3 -0
- package/dist/utils/getAccessKeyIdFromCall.js +9 -0
- package/dist/utils/getAccessKeyIdFromEmail.d.ts +3 -0
- package/dist/utils/getAccessKeyIdFromEmail.js +37 -0
- package/dist/utils/getAccessKeyIdFromToken.d.ts +2 -0
- package/dist/utils/getAccessKeyIdFromToken.js +31 -0
- package/dist/utils/getApiKeyByAccessKeyId.d.ts +12 -0
- package/dist/utils/getApiKeyByAccessKeyId.js +26 -0
- package/dist/utils/getTokenFromCall.d.ts +3 -0
- package/dist/utils/getTokenFromCall.js +9 -0
- package/dist/utils/getUserByEmail.d.ts +15 -0
- package/dist/utils/getUserByEmail.js +26 -0
- package/dist/utils/getUserRefFromToken.d.ts +2 -0
- package/dist/utils/getUserRefFromToken.js +31 -0
- package/dist/utils/hasAccess.d.ts +3 -0
- package/dist/utils/hasAccess.js +10 -0
- package/dist/utils/hasAccessToResource.d.ts +5 -0
- package/dist/utils/hasAccessToResource.js +53 -0
- package/dist/utils/index.d.ts +11 -0
- package/dist/utils/index.js +45 -0
- package/dist/utils/isValidToken.d.ts +2 -0
- package/dist/utils/isValidToken.js +52 -0
- package/dist/utils/tokenHasAccessKeyId.d.ts +2 -0
- package/dist/utils/tokenHasAccessKeyId.js +29 -0
- package/dist/utils/withAccess.d.ts +6 -0
- package/dist/utils/withAccess.js +77 -0
- package/dist/workspaces/WorkspaceRoleEnum.d.ts +6 -0
- package/dist/workspaces/WorkspaceRoleEnum.js +27 -0
- package/dist/workspaces/createSendEmail.d.ts +3 -0
- package/dist/workspaces/createSendEmail.js +38 -0
- package/dist/workspaces/createWorkspace.d.ts +18 -0
- package/dist/workspaces/createWorkspace.js +65 -0
- package/dist/workspaces/deleteWorkspace.d.ts +12 -0
- package/dist/workspaces/deleteWorkspace.js +59 -0
- package/dist/workspaces/getWorkspace.d.ts +16 -0
- package/dist/workspaces/getWorkspace.js +65 -0
- package/dist/workspaces/index.d.ts +9 -0
- package/dist/workspaces/index.js +43 -0
- package/dist/workspaces/inviteUserToWorkspace.d.ts +31 -0
- package/dist/workspaces/inviteUserToWorkspace.js +152 -0
- package/dist/workspaces/isAdminMember.d.ts +3 -0
- package/dist/workspaces/isAdminMember.js +53 -0
- package/dist/workspaces/isWorkspaceMember.d.ts +3 -0
- package/dist/workspaces/isWorkspaceMember.js +32 -0
- package/dist/workspaces/listWorkspaces.d.ts +16 -0
- package/dist/workspaces/listWorkspaces.js +55 -0
- package/dist/workspaces/removeUserFromWorkspace.d.ts +12 -0
- package/dist/workspaces/removeUserFromWorkspace.js +84 -0
- package/dist/workspaces/resendWorkspaceMembershipInvitation.d.ts +14 -0
- package/dist/workspaces/resendWorkspaceMembershipInvitation.js +98 -0
- package/dist/workspaces/updateWorkspace.d.ts +21 -0
- package/dist/workspaces/updateWorkspace.js +76 -0
- package/package.json +50 -0
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import { GrpcErrorMessage } from "@fonoster/common";
|
|
2
|
+
import { Prisma } from "../db";
|
|
3
|
+
type GetWorkspaceRequest = {
|
|
4
|
+
ref: string;
|
|
5
|
+
};
|
|
6
|
+
type Workspace = {
|
|
7
|
+
ref: string;
|
|
8
|
+
name: string;
|
|
9
|
+
ownerRef: string;
|
|
10
|
+
createdAt: Date;
|
|
11
|
+
updatedAt: Date;
|
|
12
|
+
};
|
|
13
|
+
declare function getWorkspace(prisma: Prisma): (call: {
|
|
14
|
+
request: GetWorkspaceRequest;
|
|
15
|
+
}, callback: (error: GrpcErrorMessage, response?: Workspace) => void) => Promise<void>;
|
|
16
|
+
export { getWorkspace };
|
|
@@ -0,0 +1,65 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.getWorkspace = void 0;
|
|
13
|
+
/*
|
|
14
|
+
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
15
|
+
* http://github.com/fonoster/fonoster
|
|
16
|
+
*
|
|
17
|
+
* This file is part of Fonoster
|
|
18
|
+
*
|
|
19
|
+
* Licensed under the MIT License (the "License");
|
|
20
|
+
* you may not use this file except in compliance with
|
|
21
|
+
* the License. You may obtain a copy of the License at
|
|
22
|
+
*
|
|
23
|
+
* https://opensource.org/licenses/MIT
|
|
24
|
+
*
|
|
25
|
+
* Unless required by applicable law or agreed to in writing, software
|
|
26
|
+
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
27
|
+
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
28
|
+
* See the License for the specific language governing permissions and
|
|
29
|
+
* limitations under the License.
|
|
30
|
+
*/
|
|
31
|
+
const common_1 = require("@fonoster/common");
|
|
32
|
+
const logger_1 = require("@fonoster/logger");
|
|
33
|
+
const grpc_js_1 = require("@grpc/grpc-js");
|
|
34
|
+
const getTokenFromCall_1 = require("../utils/getTokenFromCall");
|
|
35
|
+
const getUserRefFromToken_1 = require("../utils/getUserRefFromToken");
|
|
36
|
+
const logger = (0, logger_1.getLogger)({ service: "identity", filePath: __filename });
|
|
37
|
+
function getWorkspace(prisma) {
|
|
38
|
+
return (call, callback) => __awaiter(this, void 0, void 0, function* () {
|
|
39
|
+
try {
|
|
40
|
+
const { ref } = call.request;
|
|
41
|
+
const token = (0, getTokenFromCall_1.getTokenFromCall)(call);
|
|
42
|
+
const ownerRef = (0, getUserRefFromToken_1.getUserRefFromToken)(token);
|
|
43
|
+
logger.verbose("getting workspace by id", { ref, ownerRef });
|
|
44
|
+
const workspace = yield prisma.workspace.findUnique({
|
|
45
|
+
where: {
|
|
46
|
+
ref,
|
|
47
|
+
ownerRef
|
|
48
|
+
}
|
|
49
|
+
});
|
|
50
|
+
if (!workspace) {
|
|
51
|
+
callback({
|
|
52
|
+
code: grpc_js_1.status.NOT_FOUND,
|
|
53
|
+
message: "Workspace not found"
|
|
54
|
+
});
|
|
55
|
+
return;
|
|
56
|
+
}
|
|
57
|
+
const response = (0, common_1.datesMapper)(workspace);
|
|
58
|
+
callback(null, response);
|
|
59
|
+
}
|
|
60
|
+
catch (error) {
|
|
61
|
+
(0, common_1.handleError)(error, callback);
|
|
62
|
+
}
|
|
63
|
+
});
|
|
64
|
+
}
|
|
65
|
+
exports.getWorkspace = getWorkspace;
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
export * from "./createWorkspace";
|
|
2
|
+
export * from "./deleteWorkspace";
|
|
3
|
+
export * from "./getWorkspace";
|
|
4
|
+
export * from "./updateWorkspace";
|
|
5
|
+
export * from "./listWorkspaces";
|
|
6
|
+
export * from "./inviteUserToWorkspace";
|
|
7
|
+
export * from "./removeUserFromWorkspace";
|
|
8
|
+
export * from "./resendWorkspaceMembershipInvitation";
|
|
9
|
+
export * from "./WorkspaceRoleEnum";
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
/*
|
|
18
|
+
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
19
|
+
* http://github.com/fonoster/fonoster
|
|
20
|
+
*
|
|
21
|
+
* This file is part of Fonoster
|
|
22
|
+
*
|
|
23
|
+
* Licensed under the MIT License (the "License");
|
|
24
|
+
* you may not use this file except in compliance with
|
|
25
|
+
* the License. You may obtain a copy of the License at
|
|
26
|
+
*
|
|
27
|
+
* https://opensource.org/licenses/MIT
|
|
28
|
+
*
|
|
29
|
+
* Unless required by applicable law or agreed to in writing, software
|
|
30
|
+
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
31
|
+
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
32
|
+
* See the License for the specific language governing permissions and
|
|
33
|
+
* limitations under the License.
|
|
34
|
+
*/
|
|
35
|
+
__exportStar(require("./createWorkspace"), exports);
|
|
36
|
+
__exportStar(require("./deleteWorkspace"), exports);
|
|
37
|
+
__exportStar(require("./getWorkspace"), exports);
|
|
38
|
+
__exportStar(require("./updateWorkspace"), exports);
|
|
39
|
+
__exportStar(require("./listWorkspaces"), exports);
|
|
40
|
+
__exportStar(require("./inviteUserToWorkspace"), exports);
|
|
41
|
+
__exportStar(require("./removeUserFromWorkspace"), exports);
|
|
42
|
+
__exportStar(require("./resendWorkspaceMembershipInvitation"), exports);
|
|
43
|
+
__exportStar(require("./WorkspaceRoleEnum"), exports);
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
import { GrpcErrorMessage } from "@fonoster/common";
|
|
2
|
+
import { z } from "zod";
|
|
3
|
+
import { WorkspaceRoleEnum } from "./WorkspaceRoleEnum";
|
|
4
|
+
import { Prisma } from "../db";
|
|
5
|
+
import { IdentityConfig } from "../exchanges/types";
|
|
6
|
+
import { SendInvite } from "../invites/sendInvite";
|
|
7
|
+
declare const InviteUserToWorkspaceRequestSchema: z.ZodObject<{
|
|
8
|
+
email: z.ZodString;
|
|
9
|
+
name: z.ZodString;
|
|
10
|
+
role: z.ZodEnum<[WorkspaceRoleEnum.ADMIN, WorkspaceRoleEnum.USER]>;
|
|
11
|
+
password: z.ZodUnion<[z.ZodString, z.ZodUndefined]>;
|
|
12
|
+
}, "strip", z.ZodTypeAny, {
|
|
13
|
+
name?: string;
|
|
14
|
+
email?: string;
|
|
15
|
+
password?: string;
|
|
16
|
+
role?: WorkspaceRoleEnum.ADMIN | WorkspaceRoleEnum.USER;
|
|
17
|
+
}, {
|
|
18
|
+
name?: string;
|
|
19
|
+
email?: string;
|
|
20
|
+
password?: string;
|
|
21
|
+
role?: WorkspaceRoleEnum.ADMIN | WorkspaceRoleEnum.USER;
|
|
22
|
+
}>;
|
|
23
|
+
type InviteUserToWorkspaceRequest = z.infer<typeof InviteUserToWorkspaceRequestSchema>;
|
|
24
|
+
type CreateWorkspaceResponse = {
|
|
25
|
+
workspaceRef: string;
|
|
26
|
+
userRef: string;
|
|
27
|
+
};
|
|
28
|
+
declare function inviteUserToWorkspace(prisma: Prisma, identityConfig: IdentityConfig, sendInvite: SendInvite): (call: {
|
|
29
|
+
request: InviteUserToWorkspaceRequest;
|
|
30
|
+
}, callback: (error: GrpcErrorMessage, response?: CreateWorkspaceResponse) => void) => Promise<void>;
|
|
31
|
+
export { inviteUserToWorkspace };
|
|
@@ -0,0 +1,152 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.inviteUserToWorkspace = void 0;
|
|
13
|
+
/*
|
|
14
|
+
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
15
|
+
* http://github.com/fonoster/fonoster
|
|
16
|
+
*
|
|
17
|
+
* This file is part of Fonoster
|
|
18
|
+
*
|
|
19
|
+
* Licensed under the MIT License (the "License");
|
|
20
|
+
* you may not use this file except in compliance with
|
|
21
|
+
* the License. You may obtain a copy of the License at
|
|
22
|
+
*
|
|
23
|
+
* https://opensource.org/licenses/MIT
|
|
24
|
+
*
|
|
25
|
+
* Unless required by applicable law or agreed to in writing, software
|
|
26
|
+
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
27
|
+
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
28
|
+
* See the License for the specific language governing permissions and
|
|
29
|
+
* limitations under the License.
|
|
30
|
+
*/
|
|
31
|
+
const common_1 = require("@fonoster/common");
|
|
32
|
+
const logger_1 = require("@fonoster/logger");
|
|
33
|
+
const grpc_js_1 = require("@grpc/grpc-js");
|
|
34
|
+
const nanoid_1 = require("nanoid");
|
|
35
|
+
const zod_1 = require("zod");
|
|
36
|
+
const createSendEmail_1 = require("./createSendEmail");
|
|
37
|
+
const isAdminMember_1 = require("./isAdminMember");
|
|
38
|
+
const isWorkspaceMember_1 = require("./isWorkspaceMember");
|
|
39
|
+
const WorkspaceRoleEnum_1 = require("./WorkspaceRoleEnum");
|
|
40
|
+
const utils_1 = require("../utils");
|
|
41
|
+
const getTokenFromCall_1 = require("../utils/getTokenFromCall");
|
|
42
|
+
const getUserRefFromToken_1 = require("../utils/getUserRefFromToken");
|
|
43
|
+
const logger = (0, logger_1.getLogger)({ service: "identity", filePath: __filename });
|
|
44
|
+
const InviteUserToWorkspaceRequestSchema = zod_1.z.object({
|
|
45
|
+
email: zod_1.z.string().email(),
|
|
46
|
+
name: zod_1.z.string().min(3, "Name must contain at least 3 characters").max(50),
|
|
47
|
+
role: zod_1.z.enum([WorkspaceRoleEnum_1.WorkspaceRoleEnum.ADMIN, WorkspaceRoleEnum_1.WorkspaceRoleEnum.USER]),
|
|
48
|
+
password: zod_1.z
|
|
49
|
+
.string()
|
|
50
|
+
.min(6, "Password must contain at least 8 characters")
|
|
51
|
+
.or(zod_1.z.undefined())
|
|
52
|
+
});
|
|
53
|
+
const userIsMemberError = {
|
|
54
|
+
code: grpc_js_1.status.ALREADY_EXISTS,
|
|
55
|
+
message: "User is already a member of this workspace"
|
|
56
|
+
};
|
|
57
|
+
const inviterIsNotAdminError = {
|
|
58
|
+
code: grpc_js_1.status.PERMISSION_DENIED,
|
|
59
|
+
message: "Only admins or owners can invite users to a workspace"
|
|
60
|
+
};
|
|
61
|
+
const findUserByEmail = (prisma, email) => __awaiter(void 0, void 0, void 0, function* () {
|
|
62
|
+
return yield prisma.user.findUnique({
|
|
63
|
+
where: {
|
|
64
|
+
email
|
|
65
|
+
}
|
|
66
|
+
});
|
|
67
|
+
});
|
|
68
|
+
const createUser = (prisma) => {
|
|
69
|
+
return (request) => __awaiter(void 0, void 0, void 0, function* () {
|
|
70
|
+
const { name, email, password } = request;
|
|
71
|
+
return yield prisma.user.create({
|
|
72
|
+
data: {
|
|
73
|
+
name,
|
|
74
|
+
email,
|
|
75
|
+
accessKeyId: (0, utils_1.generateAccessKeyId)(utils_1.AccessKeyIdType.USER),
|
|
76
|
+
password
|
|
77
|
+
}
|
|
78
|
+
});
|
|
79
|
+
});
|
|
80
|
+
};
|
|
81
|
+
var WorkspaceMemberStatus;
|
|
82
|
+
(function (WorkspaceMemberStatus) {
|
|
83
|
+
WorkspaceMemberStatus["PENDING"] = "PENDING";
|
|
84
|
+
WorkspaceMemberStatus["ACTIVE"] = "ACTIVE";
|
|
85
|
+
})(WorkspaceMemberStatus || (WorkspaceMemberStatus = {}));
|
|
86
|
+
function inviteUserToWorkspace(prisma, identityConfig, sendInvite) {
|
|
87
|
+
return (call, callback) => __awaiter(this, void 0, void 0, function* () {
|
|
88
|
+
try {
|
|
89
|
+
const token = (0, getTokenFromCall_1.getTokenFromCall)(call);
|
|
90
|
+
const adminRef = (0, getUserRefFromToken_1.getUserRefFromToken)(token);
|
|
91
|
+
const accessKeyId = (0, utils_1.getAccessKeyIdFromCall)(call);
|
|
92
|
+
const workspace = yield prisma.workspace.findUnique({
|
|
93
|
+
where: {
|
|
94
|
+
accessKeyId
|
|
95
|
+
}
|
|
96
|
+
});
|
|
97
|
+
const workspaceRef = workspace.ref;
|
|
98
|
+
const { email, name, role } = InviteUserToWorkspaceRequestSchema.parse(call.request);
|
|
99
|
+
logger.verbose("inviting user to workspace", {
|
|
100
|
+
workspaceRef,
|
|
101
|
+
email,
|
|
102
|
+
role
|
|
103
|
+
});
|
|
104
|
+
const isAdmin = yield (0, isAdminMember_1.isAdminMember)(prisma)(workspaceRef, adminRef);
|
|
105
|
+
if (!isAdmin) {
|
|
106
|
+
return callback(inviterIsNotAdminError);
|
|
107
|
+
}
|
|
108
|
+
let user = yield findUserByEmail(prisma, email);
|
|
109
|
+
const isMember = yield (0, isWorkspaceMember_1.isWorkspaceMember)(prisma)(workspaceRef, user === null || user === void 0 ? void 0 : user.ref);
|
|
110
|
+
if (isMember) {
|
|
111
|
+
return callback(userIsMemberError);
|
|
112
|
+
}
|
|
113
|
+
const oneTimePassword = (0, nanoid_1.customAlphabet)("1234567890abcdef", 10)();
|
|
114
|
+
let isExistingUser = true;
|
|
115
|
+
if (!user) {
|
|
116
|
+
isExistingUser = false;
|
|
117
|
+
user = yield createUser(prisma)({
|
|
118
|
+
name,
|
|
119
|
+
email,
|
|
120
|
+
password: oneTimePassword
|
|
121
|
+
});
|
|
122
|
+
}
|
|
123
|
+
const newMember = yield prisma.workspaceMember.create({
|
|
124
|
+
data: {
|
|
125
|
+
userRef: user.ref,
|
|
126
|
+
workspaceRef,
|
|
127
|
+
role: role,
|
|
128
|
+
status: WorkspaceMemberStatus.PENDING
|
|
129
|
+
},
|
|
130
|
+
include: {
|
|
131
|
+
workspace: true
|
|
132
|
+
}
|
|
133
|
+
});
|
|
134
|
+
yield sendInvite((0, createSendEmail_1.createSendEmail)(identityConfig), {
|
|
135
|
+
recipient: email,
|
|
136
|
+
oneTimePassword,
|
|
137
|
+
workspaceName: newMember.workspace.name,
|
|
138
|
+
isExistingUser,
|
|
139
|
+
// TODO: Create inviteUrl with invite token
|
|
140
|
+
inviteUrl: "https://placehold.it?token=jwt"
|
|
141
|
+
});
|
|
142
|
+
callback(null, {
|
|
143
|
+
userRef: user === null || user === void 0 ? void 0 : user.ref,
|
|
144
|
+
workspaceRef
|
|
145
|
+
});
|
|
146
|
+
}
|
|
147
|
+
catch (error) {
|
|
148
|
+
(0, common_1.handleError)(error, callback);
|
|
149
|
+
}
|
|
150
|
+
});
|
|
151
|
+
}
|
|
152
|
+
exports.inviteUserToWorkspace = inviteUserToWorkspace;
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.isAdminMember = void 0;
|
|
13
|
+
/*
|
|
14
|
+
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
15
|
+
* http://github.com/fonoster/fonoster
|
|
16
|
+
*
|
|
17
|
+
* This file is part of Fonoster
|
|
18
|
+
*
|
|
19
|
+
* Licensed under the MIT License (the "License");
|
|
20
|
+
* you may not use this file except in compliance with
|
|
21
|
+
* the License. You may obtain a copy of the License at
|
|
22
|
+
*
|
|
23
|
+
* https://opensource.org/licenses/MIT
|
|
24
|
+
*
|
|
25
|
+
* Unless required by applicable law or agreed to in writing, software
|
|
26
|
+
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
27
|
+
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
28
|
+
* See the License for the specific language governing permissions and
|
|
29
|
+
* limitations under the License.
|
|
30
|
+
*/
|
|
31
|
+
const WorkspaceRoleEnum_1 = require("./WorkspaceRoleEnum");
|
|
32
|
+
function isAdminMember(prisma) {
|
|
33
|
+
return (workspaceRef, adminRef) => __awaiter(this, void 0, void 0, function* () {
|
|
34
|
+
var _a;
|
|
35
|
+
if (!workspaceRef || !adminRef) {
|
|
36
|
+
return false;
|
|
37
|
+
}
|
|
38
|
+
const workspace = yield prisma.workspace.findUnique({
|
|
39
|
+
where: {
|
|
40
|
+
ref: workspaceRef
|
|
41
|
+
},
|
|
42
|
+
include: {
|
|
43
|
+
members: true
|
|
44
|
+
}
|
|
45
|
+
});
|
|
46
|
+
if ((workspace === null || workspace === void 0 ? void 0 : workspace.ownerRef) === adminRef) {
|
|
47
|
+
return true;
|
|
48
|
+
}
|
|
49
|
+
const role = (_a = workspace === null || workspace === void 0 ? void 0 : workspace.members.find((member) => member.ref === adminRef)) === null || _a === void 0 ? void 0 : _a.role;
|
|
50
|
+
return role === WorkspaceRoleEnum_1.WorkspaceRoleEnum.ADMIN || role === WorkspaceRoleEnum_1.WorkspaceRoleEnum.OWNER;
|
|
51
|
+
});
|
|
52
|
+
}
|
|
53
|
+
exports.isAdminMember = isAdminMember;
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.isWorkspaceMember = void 0;
|
|
13
|
+
function isWorkspaceMember(prisma) {
|
|
14
|
+
return (workspaceRef, userRef) => __awaiter(this, void 0, void 0, function* () {
|
|
15
|
+
const workspace = yield prisma.workspace.findUnique({
|
|
16
|
+
where: {
|
|
17
|
+
ref: workspaceRef
|
|
18
|
+
}
|
|
19
|
+
});
|
|
20
|
+
const isMember = yield prisma.workspaceMember.findFirst({
|
|
21
|
+
where: {
|
|
22
|
+
// Force userId to be an empty string to ensure that the query is not
|
|
23
|
+
// fillter by workspaceRef only
|
|
24
|
+
userRef: userRef || "",
|
|
25
|
+
workspaceRef
|
|
26
|
+
}
|
|
27
|
+
});
|
|
28
|
+
const isOwner = (workspace === null || workspace === void 0 ? void 0 : workspace.ownerRef) === userRef;
|
|
29
|
+
return !!(isMember || isOwner);
|
|
30
|
+
});
|
|
31
|
+
}
|
|
32
|
+
exports.isWorkspaceMember = isWorkspaceMember;
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import { GrpcErrorMessage } from "@fonoster/common";
|
|
2
|
+
import { Prisma } from "../db";
|
|
3
|
+
type Workspace = {
|
|
4
|
+
ref: string;
|
|
5
|
+
name: string;
|
|
6
|
+
ownerRef: string;
|
|
7
|
+
createdAt: Date;
|
|
8
|
+
updatedAt: Date;
|
|
9
|
+
};
|
|
10
|
+
type ListWorkspacesResponse = {
|
|
11
|
+
workspaces: Workspace[];
|
|
12
|
+
};
|
|
13
|
+
declare function listWorkspaces(prisma: Prisma): (call: {
|
|
14
|
+
request: unknown;
|
|
15
|
+
}, callback: (error: GrpcErrorMessage, response?: ListWorkspacesResponse) => void) => Promise<any[]>;
|
|
16
|
+
export { listWorkspaces };
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.listWorkspaces = void 0;
|
|
13
|
+
const logger_1 = require("@fonoster/logger");
|
|
14
|
+
const utils_1 = require("../utils");
|
|
15
|
+
const getTokenFromCall_1 = require("../utils/getTokenFromCall");
|
|
16
|
+
const getUserRefFromToken_1 = require("../utils/getUserRefFromToken");
|
|
17
|
+
const logger = (0, logger_1.getLogger)({ service: "identity", filePath: __filename });
|
|
18
|
+
function listWorkspaces(prisma) {
|
|
19
|
+
return (call, callback) => __awaiter(this, void 0, void 0, function* () {
|
|
20
|
+
var _a;
|
|
21
|
+
const token = (0, getTokenFromCall_1.getTokenFromCall)(call);
|
|
22
|
+
const userRef = (0, getUserRefFromToken_1.getUserRefFromToken)(token);
|
|
23
|
+
const access = (0, utils_1.decodeToken)(token);
|
|
24
|
+
const workspacesAccessKeyIds = (_a = access.access) === null || _a === void 0 ? void 0 : _a.map((a) => a.accessKeyId);
|
|
25
|
+
logger.verbose("list workspaces for user or apikey", {
|
|
26
|
+
userRef,
|
|
27
|
+
workspacesAccessKeyIds
|
|
28
|
+
});
|
|
29
|
+
const workspaces = yield prisma.workspace.findMany({
|
|
30
|
+
where: {
|
|
31
|
+
OR: [
|
|
32
|
+
{
|
|
33
|
+
accessKeyId: {
|
|
34
|
+
in: workspacesAccessKeyIds
|
|
35
|
+
}
|
|
36
|
+
},
|
|
37
|
+
{
|
|
38
|
+
members: {
|
|
39
|
+
some: {
|
|
40
|
+
userRef
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
},
|
|
44
|
+
{
|
|
45
|
+
ownerRef: userRef
|
|
46
|
+
}
|
|
47
|
+
]
|
|
48
|
+
}
|
|
49
|
+
});
|
|
50
|
+
if (!workspaces)
|
|
51
|
+
return [];
|
|
52
|
+
callback(null, { workspaces });
|
|
53
|
+
});
|
|
54
|
+
}
|
|
55
|
+
exports.listWorkspaces = listWorkspaces;
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { GrpcErrorMessage } from "@fonoster/common";
|
|
2
|
+
import { Prisma } from "../db";
|
|
3
|
+
type RemoveUserFromWorkspaceRequest = {
|
|
4
|
+
userRef: string;
|
|
5
|
+
};
|
|
6
|
+
type RemoveUserFromWorkspaceResponse = {
|
|
7
|
+
userRef: string;
|
|
8
|
+
};
|
|
9
|
+
declare function removeUserFromWorkspace(prisma: Prisma): (call: {
|
|
10
|
+
request: RemoveUserFromWorkspaceRequest;
|
|
11
|
+
}, callback: (error: GrpcErrorMessage, response?: RemoveUserFromWorkspaceResponse) => void) => Promise<void>;
|
|
12
|
+
export { removeUserFromWorkspace };
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.removeUserFromWorkspace = void 0;
|
|
13
|
+
/*
|
|
14
|
+
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
15
|
+
* http://github.com/fonoster/fonoster
|
|
16
|
+
*
|
|
17
|
+
* This file is part of Fonoster
|
|
18
|
+
*
|
|
19
|
+
* Licensed under the MIT License (the "License");
|
|
20
|
+
* you may not use this file except in compliance with
|
|
21
|
+
* the License. You may obtain a copy of the License at
|
|
22
|
+
*
|
|
23
|
+
* https://opensource.org/licenses/MIT
|
|
24
|
+
*
|
|
25
|
+
* Unless required by applicable law or agreed to in writing, software
|
|
26
|
+
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
27
|
+
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
28
|
+
* See the License for the specific language governing permissions and
|
|
29
|
+
* limitations under the License.
|
|
30
|
+
*/
|
|
31
|
+
const common_1 = require("@fonoster/common");
|
|
32
|
+
const logger_1 = require("@fonoster/logger");
|
|
33
|
+
const grpc_js_1 = require("@grpc/grpc-js");
|
|
34
|
+
const isAdminMember_1 = require("./isAdminMember");
|
|
35
|
+
const utils_1 = require("../utils");
|
|
36
|
+
const getTokenFromCall_1 = require("../utils/getTokenFromCall");
|
|
37
|
+
const getUserRefFromToken_1 = require("../utils/getUserRefFromToken");
|
|
38
|
+
const logger = (0, logger_1.getLogger)({ service: "identity", filePath: __filename });
|
|
39
|
+
function removeUserFromWorkspace(prisma) {
|
|
40
|
+
return (call, callback) => __awaiter(this, void 0, void 0, function* () {
|
|
41
|
+
try {
|
|
42
|
+
const { userRef } = call.request;
|
|
43
|
+
const token = (0, getTokenFromCall_1.getTokenFromCall)(call);
|
|
44
|
+
const accessKeyId = (0, utils_1.getAccessKeyIdFromCall)(call);
|
|
45
|
+
const adminRef = (0, getUserRefFromToken_1.getUserRefFromToken)(token);
|
|
46
|
+
const workspace = yield prisma.workspace.findUnique({
|
|
47
|
+
where: {
|
|
48
|
+
accessKeyId
|
|
49
|
+
}
|
|
50
|
+
});
|
|
51
|
+
const workspaceRef = workspace === null || workspace === void 0 ? void 0 : workspace.ref;
|
|
52
|
+
logger.verbose("removing user from workspace", { workspaceRef, userRef });
|
|
53
|
+
const isAdmin = yield (0, isAdminMember_1.isAdminMember)(prisma)(workspaceRef, adminRef);
|
|
54
|
+
if (!isAdmin && adminRef !== userRef) {
|
|
55
|
+
return callback({
|
|
56
|
+
code: grpc_js_1.status.PERMISSION_DENIED,
|
|
57
|
+
message: "Only admins or owners can remove users from a workspace"
|
|
58
|
+
});
|
|
59
|
+
}
|
|
60
|
+
const memberRef = yield prisma.workspaceMember.findFirst({
|
|
61
|
+
where: {
|
|
62
|
+
workspaceRef,
|
|
63
|
+
userRef
|
|
64
|
+
}
|
|
65
|
+
});
|
|
66
|
+
if (!memberRef) {
|
|
67
|
+
return callback({
|
|
68
|
+
code: grpc_js_1.status.NOT_FOUND,
|
|
69
|
+
message: "User not found in workspace"
|
|
70
|
+
});
|
|
71
|
+
}
|
|
72
|
+
const response = yield prisma.workspaceMember.delete({
|
|
73
|
+
where: {
|
|
74
|
+
ref: memberRef === null || memberRef === void 0 ? void 0 : memberRef.ref
|
|
75
|
+
}
|
|
76
|
+
});
|
|
77
|
+
callback(null, response);
|
|
78
|
+
}
|
|
79
|
+
catch (error) {
|
|
80
|
+
(0, common_1.handleError)(error, callback);
|
|
81
|
+
}
|
|
82
|
+
});
|
|
83
|
+
}
|
|
84
|
+
exports.removeUserFromWorkspace = removeUserFromWorkspace;
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import { GrpcErrorMessage } from "@fonoster/common";
|
|
2
|
+
import { Prisma } from "../db";
|
|
3
|
+
import { IdentityConfig } from "../exchanges/types";
|
|
4
|
+
import { SendInvite } from "../invites/sendInvite";
|
|
5
|
+
type ResendWorkspaceMembershipInvitationRequest = {
|
|
6
|
+
userRef: string;
|
|
7
|
+
};
|
|
8
|
+
type ResendWorkspaceMembershipInvitationResponse = {
|
|
9
|
+
userRef: string;
|
|
10
|
+
};
|
|
11
|
+
declare function resendWorkspaceMembershipInvitation(prisma: Prisma, identityConfig: IdentityConfig, sendInvite: SendInvite): (call: {
|
|
12
|
+
request: ResendWorkspaceMembershipInvitationRequest;
|
|
13
|
+
}, callback: (error: GrpcErrorMessage, response?: ResendWorkspaceMembershipInvitationResponse) => void) => Promise<void>;
|
|
14
|
+
export { resendWorkspaceMembershipInvitation };
|