@fonoster/identity 0.8.25 → 0.8.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (141) hide show
  1. package/dist/apikeys/{createApiKey.d.ts → createCreateApiKey.d.ts} +2 -2
  2. package/dist/apikeys/{createApiKey.js → createCreateApiKey.js} +5 -6
  3. package/dist/apikeys/createDeleteApiKey.d.ts +6 -0
  4. package/dist/apikeys/{deleteApiKey.js → createDeleteApiKey.js} +4 -4
  5. package/dist/apikeys/createListApiKeys.d.ts +6 -0
  6. package/dist/apikeys/{listApiKeys.js → createListApiKeys.js} +5 -6
  7. package/dist/apikeys/createRegenerateApiKey.d.ts +6 -0
  8. package/dist/apikeys/{regenerateApiKey.js → createRegenerateApiKey.js} +4 -4
  9. package/dist/apikeys/index.d.ts +4 -4
  10. package/dist/apikeys/index.js +4 -4
  11. package/dist/exchanges/{exchangeRefreshToken.d.ts → createExchangeApiKey.d.ts} +2 -2
  12. package/dist/exchanges/{exchangeApiKey.js → createExchangeApiKey.js} +6 -6
  13. package/dist/exchanges/{exchangeOauth2Code.d.ts → createExchangeCredentials.d.ts} +2 -2
  14. package/dist/exchanges/{exchangeCredentials.js → createExchangeCredentials.js} +6 -6
  15. package/dist/exchanges/{exchangeCredentials.d.ts → createExchangeOauth2Code.d.ts} +2 -2
  16. package/dist/exchanges/{exchangeOauth2Code.js → createExchangeOauth2Code.js} +6 -6
  17. package/dist/exchanges/{exchangeApiKey.d.ts → createExchangeRefreshToken.d.ts} +2 -2
  18. package/dist/exchanges/{exchangeRefreshToken.js → createExchangeRefreshToken.js} +4 -4
  19. package/dist/exchanges/exchangeTokens.js +5 -5
  20. package/dist/exchanges/index.d.ts +4 -5
  21. package/dist/exchanges/index.js +4 -5
  22. package/dist/exchanges/payloads/apikeys/createGetAccessTokenPayload.d.ts +5 -0
  23. package/dist/exchanges/payloads/apikeys/createGetAccessTokenPayload.js +46 -0
  24. package/dist/exchanges/payloads/apikeys/createGetRefreshTokenPayload.d.ts +5 -0
  25. package/dist/exchanges/payloads/apikeys/{getRefreshTokenPayload.js → createGetRefreshTokenPayload.js} +18 -16
  26. package/dist/exchanges/payloads/apikeys/index.d.ts +2 -2
  27. package/dist/exchanges/payloads/apikeys/index.js +2 -2
  28. package/dist/exchanges/payloads/buildRefreshTokenPayload.d.ts +2 -1
  29. package/dist/exchanges/payloads/buildRefreshTokenPayload.js +2 -2
  30. package/dist/exchanges/payloads/users/createGetAccessTokenPayload.d.ts +5 -0
  31. package/dist/exchanges/payloads/users/createGetAccessTokenPayload.js +75 -0
  32. package/dist/exchanges/payloads/users/createGetIdTokenPayload.d.ts +5 -0
  33. package/dist/exchanges/payloads/users/createGetIdTokenPayload.js +40 -0
  34. package/dist/exchanges/payloads/users/createGetRefreshTokenPayload.d.ts +5 -0
  35. package/dist/exchanges/payloads/users/{getRefreshTokenPayload.js → createGetRefreshTokenPayload.js} +22 -20
  36. package/dist/exchanges/payloads/users/index.d.ts +3 -3
  37. package/dist/exchanges/payloads/users/index.js +3 -3
  38. package/dist/exchanges/types.d.ts +1 -36
  39. package/dist/getPublicKey.d.ts +2 -2
  40. package/dist/getPublicKey.js +8 -6
  41. package/dist/index.d.ts +0 -2
  42. package/dist/index.js +0 -2
  43. package/dist/service.js +22 -22
  44. package/dist/{apikeys/listApiKeys.d.ts → users/createCreateUser.d.ts} +2 -2
  45. package/dist/users/{createUser.js → createCreateUser.js} +4 -4
  46. package/dist/users/{createUser.d.ts → createDeleteUser.d.ts} +2 -2
  47. package/dist/users/{deleteUser.js → createDeleteUser.js} +5 -6
  48. package/dist/{apikeys/deleteApiKey.d.ts → users/createGetUser.d.ts} +2 -2
  49. package/dist/users/{getUser.js → createGetUser.js} +5 -6
  50. package/dist/{apikeys/regenerateApiKey.d.ts → users/createUpdateUser.d.ts} +2 -2
  51. package/dist/users/{updateUser.js → createUpdateUser.js} +5 -6
  52. package/dist/users/index.d.ts +4 -4
  53. package/dist/users/index.js +4 -4
  54. package/dist/utils/createGenerateCallAccessToken.d.ts +6 -0
  55. package/dist/utils/{createCallAccessToken.js → createGenerateCallAccessToken.js} +29 -28
  56. package/dist/utils/{createWorkspaceInviteToken.d.ts → createGenerateWorkspaceInviteToken.d.ts} +2 -2
  57. package/dist/utils/{createWorkspaceInviteToken.js → createGenerateWorkspaceInviteToken.js} +21 -19
  58. package/dist/utils/createGetAccessKeyIdFromEmail.d.ts +3 -0
  59. package/dist/utils/{getAccessKeyIdFromEmail.js → createGetAccessKeyIdFromEmail.js} +8 -6
  60. package/dist/utils/{getApiKeyByAccessKeyId.d.ts → createGetApiKeyByAccessKeyId.d.ts} +5 -5
  61. package/dist/utils/{getApiKeyByAccessKeyId.js → createGetApiKeyByAccessKeyId.js} +13 -11
  62. package/dist/utils/{getUserByEmail.d.ts → createGetUserByEmail.d.ts} +2 -2
  63. package/dist/utils/{getUserByEmail.js → createGetUserByEmail.js} +10 -8
  64. package/dist/utils/createUpdateMembershipStatus.d.ts +3 -0
  65. package/dist/utils/{updateMembershipStatus.js → createUpdateMembershipStatus.js} +18 -16
  66. package/dist/utils/getAccessKeyIdFromToken.js +3 -4
  67. package/dist/utils/getUserRefFromToken.js +3 -4
  68. package/dist/utils/hasAccessToResource.js +3 -4
  69. package/dist/utils/index.d.ts +2 -8
  70. package/dist/utils/index.js +2 -8
  71. package/dist/verification/createVerifyCode.js +2 -2
  72. package/dist/workspaces/createCreateWorkspace.d.ts +6 -0
  73. package/dist/workspaces/{createWorkspace.js → createCreateWorkspace.js} +5 -6
  74. package/dist/workspaces/createDeleteWorkspace.d.ts +6 -0
  75. package/dist/workspaces/{deleteWorkspace.js → createDeleteWorkspace.js} +5 -6
  76. package/dist/workspaces/createGetWorkspace.d.ts +6 -0
  77. package/dist/workspaces/{getWorkspace.js → createGetWorkspace.js} +5 -6
  78. package/dist/workspaces/{inviteUserToWorkspace.d.ts → createInviteUserToWorkspace.d.ts} +2 -2
  79. package/dist/workspaces/{inviteUserToWorkspace.js → createInviteUserToWorkspace.js} +26 -25
  80. package/dist/workspaces/createIsAdminMember.d.ts +3 -0
  81. package/dist/workspaces/{isAdminMember.js → createIsAdminMember.js} +21 -19
  82. package/dist/workspaces/createIsWorkspaceMember.d.ts +3 -0
  83. package/dist/workspaces/createIsWorkspaceMember.js +33 -0
  84. package/dist/workspaces/createListWorkspaces.d.ts +6 -0
  85. package/dist/workspaces/{listWorkspaces.js → createListWorkspaces.js} +6 -8
  86. package/dist/workspaces/createRemoveUserFromWorkspace.d.ts +6 -0
  87. package/dist/workspaces/{removeUserFromWorkspace.js → createRemoveUserFromWorkspace.js} +8 -10
  88. package/dist/workspaces/{resendWorkspaceMembershipInvitation.d.ts → createResendWorkspaceMembershipInvitation.d.ts} +2 -2
  89. package/dist/workspaces/{resendWorkspaceMembershipInvitation.js → createResendWorkspaceMembershipInvitation.js} +10 -11
  90. package/dist/workspaces/createUpdateWorkspace.d.ts +6 -0
  91. package/dist/workspaces/{updateWorkspace.js → createUpdateWorkspace.js} +7 -8
  92. package/dist/workspaces/index.d.ts +8 -8
  93. package/dist/workspaces/index.js +8 -8
  94. package/package.json +5 -5
  95. package/dist/JsonWebErrorEnum.d.ts +0 -5
  96. package/dist/JsonWebErrorEnum.js +0 -26
  97. package/dist/createAuthInterceptor.d.ts +0 -15
  98. package/dist/createAuthInterceptor.js +0 -74
  99. package/dist/errors.d.ts +0 -4
  100. package/dist/errors.js +0 -35
  101. package/dist/exchanges/TokenUseEnum.d.ts +0 -6
  102. package/dist/exchanges/TokenUseEnum.js +0 -27
  103. package/dist/exchanges/payloads/apikeys/getAccessTokenPayload.d.ts +0 -4
  104. package/dist/exchanges/payloads/apikeys/getAccessTokenPayload.js +0 -44
  105. package/dist/exchanges/payloads/apikeys/getRefreshTokenPayload.d.ts +0 -4
  106. package/dist/exchanges/payloads/users/getAccessTokenPayload.d.ts +0 -4
  107. package/dist/exchanges/payloads/users/getAccessTokenPayload.js +0 -73
  108. package/dist/exchanges/payloads/users/getIdTokenPayload.d.ts +0 -4
  109. package/dist/exchanges/payloads/users/getIdTokenPayload.js +0 -38
  110. package/dist/exchanges/payloads/users/getRefreshTokenPayload.d.ts +0 -4
  111. package/dist/getPublicKeyClient.d.ts +0 -5
  112. package/dist/getPublicKeyClient.js +0 -71
  113. package/dist/roles.d.ts +0 -5
  114. package/dist/roles.js +0 -129
  115. package/dist/users/deleteUser.d.ts +0 -6
  116. package/dist/users/getUser.d.ts +0 -6
  117. package/dist/users/updateUser.d.ts +0 -6
  118. package/dist/utils/createCallAccessToken.d.ts +0 -6
  119. package/dist/utils/decodeToken.d.ts +0 -4
  120. package/dist/utils/decodeToken.js +0 -25
  121. package/dist/utils/getAccessKeyIdFromCall.d.ts +0 -3
  122. package/dist/utils/getAccessKeyIdFromCall.js +0 -8
  123. package/dist/utils/getAccessKeyIdFromEmail.d.ts +0 -3
  124. package/dist/utils/getTokenFromCall.d.ts +0 -3
  125. package/dist/utils/getTokenFromCall.js +0 -8
  126. package/dist/utils/hasAccess.d.ts +0 -3
  127. package/dist/utils/hasAccess.js +0 -9
  128. package/dist/utils/isValidToken.d.ts +0 -2
  129. package/dist/utils/isValidToken.js +0 -51
  130. package/dist/utils/tokenHasAccessKeyId.d.ts +0 -2
  131. package/dist/utils/tokenHasAccessKeyId.js +0 -28
  132. package/dist/utils/updateMembershipStatus.d.ts +0 -3
  133. package/dist/workspaces/createWorkspace.d.ts +0 -6
  134. package/dist/workspaces/deleteWorkspace.d.ts +0 -6
  135. package/dist/workspaces/getWorkspace.d.ts +0 -6
  136. package/dist/workspaces/isAdminMember.d.ts +0 -3
  137. package/dist/workspaces/isWorkspaceMember.d.ts +0 -3
  138. package/dist/workspaces/isWorkspaceMember.js +0 -31
  139. package/dist/workspaces/listWorkspaces.d.ts +0 -6
  140. package/dist/workspaces/removeUserFromWorkspace.d.ts +0 -6
  141. package/dist/workspaces/updateWorkspace.d.ts +0 -6
package/dist/errors.js DELETED
@@ -1,35 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.unauthenticatedError = exports.permissionDeniedError = void 0;
4
- /*
5
- * Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
6
- * http://github.com/fonoster/fonoster
7
- *
8
- * This file is part of Fonoster
9
- *
10
- * Licensed under the MIT License (the "License");
11
- * you may not use this file except in compliance with
12
- * the License. You may obtain a copy of the License at
13
- *
14
- * https://opensource.org/licenses/MIT
15
- *
16
- * Unless required by applicable law or agreed to in writing, software
17
- * distributed under the License is distributed on an "AS IS" BASIS,
18
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19
- * See the License for the specific language governing permissions and
20
- * limitations under the License.
21
- */
22
- const common_1 = require("@fonoster/common");
23
- const grpc_js_1 = require("@grpc/grpc-js");
24
- const unauthenticatedError = (call) => (0, common_1.createInterceptingCall)({
25
- call,
26
- code: grpc_js_1.status.UNAUTHENTICATED,
27
- details: "Invalid or expired token"
28
- });
29
- exports.unauthenticatedError = unauthenticatedError;
30
- const permissionDeniedError = (call) => (0, common_1.createInterceptingCall)({
31
- call,
32
- code: grpc_js_1.status.PERMISSION_DENIED,
33
- details: "Permission denied"
34
- });
35
- exports.permissionDeniedError = permissionDeniedError;
@@ -1,6 +0,0 @@
1
- declare enum TokenUseEnum {
2
- ID = "id",
3
- ACCESS = "access",
4
- REFRESH = "refresh"
5
- }
6
- export { TokenUseEnum };
@@ -1,27 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.TokenUseEnum = void 0;
4
- /*
5
- * Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
6
- * http://github.com/fonoster/fonoster
7
- *
8
- * This file is part of Fonoster
9
- *
10
- * Licensed under the MIT License (the "License");
11
- * you may not use this file except in compliance with
12
- * the License. You may obtain a copy of the License at
13
- *
14
- * https://opensource.org/licenses/MIT
15
- *
16
- * Unless required by applicable law or agreed to in writing, software
17
- * distributed under the License is distributed on an "AS IS" BASIS,
18
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19
- * See the License for the specific language governing permissions and
20
- * limitations under the License.
21
- */
22
- var TokenUseEnum;
23
- (function (TokenUseEnum) {
24
- TokenUseEnum["ID"] = "id";
25
- TokenUseEnum["ACCESS"] = "access";
26
- TokenUseEnum["REFRESH"] = "refresh";
27
- })(TokenUseEnum || (exports.TokenUseEnum = TokenUseEnum = {}));
@@ -1,4 +0,0 @@
1
- import { Prisma } from "../../../db";
2
- import { AccessToken, IdentityConfig } from "../../types";
3
- declare function getAccessTokenPayload(prisma: Prisma, identityConfig: IdentityConfig): (accessKeyId: string) => Promise<AccessToken>;
4
- export { getAccessTokenPayload };
@@ -1,44 +0,0 @@
1
- "use strict";
2
- var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
- function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
- return new (P || (P = Promise))(function (resolve, reject) {
5
- function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
- function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
- function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
- step((generator = generator.apply(thisArg, _arguments || [])).next());
9
- });
10
- };
11
- Object.defineProperty(exports, "__esModule", { value: true });
12
- exports.getAccessTokenPayload = getAccessTokenPayload;
13
- const TokenUseEnum_1 = require("../../TokenUseEnum");
14
- function getAccessTokenPayload(prisma, identityConfig) {
15
- return (accessKeyId) => __awaiter(this, void 0, void 0, function* () {
16
- const apiKey = yield prisma.apiKey.findFirst({
17
- where: {
18
- accessKeyId
19
- },
20
- include: {
21
- workspace: true
22
- }
23
- });
24
- if (!apiKey) {
25
- return null;
26
- }
27
- const { issuer, audience } = identityConfig;
28
- const { ref, workspace } = apiKey;
29
- const access = [
30
- {
31
- accessKeyId: workspace.accessKeyId,
32
- role: apiKey.role
33
- }
34
- ];
35
- return {
36
- iss: issuer,
37
- sub: ref,
38
- aud: audience,
39
- tokenUse: TokenUseEnum_1.TokenUseEnum.ACCESS,
40
- accessKeyId,
41
- access
42
- };
43
- });
44
- }
@@ -1,4 +0,0 @@
1
- import { Prisma } from "../../../db";
2
- import { IdentityConfig, RefreshToken } from "../../types";
3
- declare function getRefreshTokenPayload(prisma: Prisma, identityConfig: IdentityConfig): (accessKeyId: string) => Promise<RefreshToken>;
4
- export { getRefreshTokenPayload };
@@ -1,4 +0,0 @@
1
- import { Prisma } from "../../../db";
2
- import { AccessToken, IdentityConfig } from "../../types";
3
- declare function getAccessTokenPayload(prisma: Prisma, identityConfig: IdentityConfig): (accessKeyId: string) => Promise<AccessToken>;
4
- export { getAccessTokenPayload };
@@ -1,73 +0,0 @@
1
- "use strict";
2
- var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
- function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
- return new (P || (P = Promise))(function (resolve, reject) {
5
- function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
- function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
- function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
- step((generator = generator.apply(thisArg, _arguments || [])).next());
9
- });
10
- };
11
- Object.defineProperty(exports, "__esModule", { value: true });
12
- exports.getAccessTokenPayload = getAccessTokenPayload;
13
- /*
14
- * Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
15
- * http://github.com/fonoster/fonoster
16
- *
17
- * This file is part of Fonoster
18
- *
19
- * Licensed under the MIT License (the "License");
20
- * you may not use this file except in compliance with
21
- * the License. You may obtain a copy of the License at
22
- *
23
- * https://opensource.org/licenses/MIT
24
- *
25
- * Unless required by applicable law or agreed to in writing, software
26
- * distributed under the License is distributed on an "AS IS" BASIS,
27
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
28
- * See the License for the specific language governing permissions and
29
- * limitations under the License.
30
- */
31
- const types_1 = require("@fonoster/types");
32
- const TokenUseEnum_1 = require("../../TokenUseEnum");
33
- function getAccessTokenPayload(prisma, identityConfig) {
34
- return (accessKeyId) => __awaiter(this, void 0, void 0, function* () {
35
- const user = yield prisma.user.findFirst({
36
- where: {
37
- accessKeyId
38
- },
39
- include: {
40
- ownedWorkspaces: true,
41
- memberships: {
42
- include: {
43
- workspace: true
44
- }
45
- }
46
- }
47
- });
48
- if (!user) {
49
- return null;
50
- }
51
- const { issuer, audience } = identityConfig;
52
- const { ref, ownedWorkspaces, memberships } = user;
53
- const access = ownedWorkspaces.map((workspace) => ({
54
- accessKeyId: workspace.accessKeyId,
55
- role: types_1.WorkspaceRoleEnum.OWNER
56
- }));
57
- memberships.forEach((membership) => {
58
- membership.status === types_1.WorkspaceMemberStatus.ACTIVE &&
59
- access.push({
60
- accessKeyId: membership.workspace.accessKeyId,
61
- role: membership.role
62
- });
63
- });
64
- return {
65
- iss: issuer,
66
- sub: ref,
67
- aud: audience,
68
- tokenUse: TokenUseEnum_1.TokenUseEnum.ACCESS,
69
- accessKeyId,
70
- access
71
- };
72
- });
73
- }
@@ -1,4 +0,0 @@
1
- import { Prisma } from "../../../db";
2
- import { IdToken, IdentityConfig } from "../../types";
3
- declare function getIdTokenPayload(prisma: Prisma, identityConfig: IdentityConfig): (accessKeyId: string) => Promise<IdToken>;
4
- export { getIdTokenPayload };
@@ -1,38 +0,0 @@
1
- "use strict";
2
- var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
- function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
- return new (P || (P = Promise))(function (resolve, reject) {
5
- function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
- function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
- function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
- step((generator = generator.apply(thisArg, _arguments || [])).next());
9
- });
10
- };
11
- Object.defineProperty(exports, "__esModule", { value: true });
12
- exports.getIdTokenPayload = getIdTokenPayload;
13
- const TokenUseEnum_1 = require("../../TokenUseEnum");
14
- function getIdTokenPayload(prisma, identityConfig) {
15
- return (accessKeyId) => __awaiter(this, void 0, void 0, function* () {
16
- const user = yield prisma.user.findFirst({
17
- where: {
18
- accessKeyId
19
- }
20
- });
21
- if (!user) {
22
- return null;
23
- }
24
- const { issuer, audience } = identityConfig;
25
- const { ref, email, phoneNumber, emailVerified, phoneNumberVerified } = user;
26
- return {
27
- iss: issuer,
28
- sub: ref,
29
- aud: audience,
30
- tokenUse: TokenUseEnum_1.TokenUseEnum.ID,
31
- accessKeyId,
32
- email,
33
- emailVerified,
34
- phoneNumber,
35
- phoneNumberVerified
36
- };
37
- });
38
- }
@@ -1,4 +0,0 @@
1
- import { Prisma } from "../../../db";
2
- import { IdentityConfig, RefreshToken } from "../../types";
3
- declare function getRefreshTokenPayload(prisma: Prisma, identityConfig: IdentityConfig): (accessKeyId: string) => Promise<RefreshToken>;
4
- export { getRefreshTokenPayload };
@@ -1,5 +0,0 @@
1
- type GetPublicKeyResponse = {
2
- publicKey: string;
3
- };
4
- declare function getPublicKeyClient(endpoint: string): Promise<GetPublicKeyResponse>;
5
- export { getPublicKeyClient };
@@ -1,71 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || (function () {
19
- var ownKeys = function(o) {
20
- ownKeys = Object.getOwnPropertyNames || function (o) {
21
- var ar = [];
22
- for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
- return ar;
24
- };
25
- return ownKeys(o);
26
- };
27
- return function (mod) {
28
- if (mod && mod.__esModule) return mod;
29
- var result = {};
30
- if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
- __setModuleDefault(result, mod);
32
- return result;
33
- };
34
- })();
35
- Object.defineProperty(exports, "__esModule", { value: true });
36
- exports.getPublicKeyClient = getPublicKeyClient;
37
- /*
38
- * Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
39
- * http://github.com/fonoster/fonoster
40
- *
41
- * This file is part of Fonoster
42
- *
43
- * Licensed under the MIT License (the "License");
44
- * you may not use this file except in compliance with
45
- * the License. You may obtain a copy of the License at
46
- *
47
- * https://opensource.org/licenses/MIT
48
- *
49
- * Unless required by applicable law or agreed to in writing, software
50
- * distributed under the License is distributed on an "AS IS" BASIS,
51
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
52
- * See the License for the specific language governing permissions and
53
- * limitations under the License.
54
- */
55
- const common_1 = require("@fonoster/common");
56
- const grpc = __importStar(require("@grpc/grpc-js"));
57
- const service_1 = require("./service");
58
- const IdentityServiceClient = grpc.makeGenericClientConstructor((0, common_1.createServiceDefinition)(service_1.serviceDefinitionParams), "", {});
59
- function getPublicKeyClient(endpoint) {
60
- return new Promise((resolve, reject) => {
61
- const client = new IdentityServiceClient(endpoint, grpc.credentials.createInsecure());
62
- client.getPublicKey({}, (error, response) => {
63
- if (error) {
64
- reject(error);
65
- }
66
- else {
67
- resolve(response);
68
- }
69
- });
70
- });
71
- }
package/dist/roles.d.ts DELETED
@@ -1,5 +0,0 @@
1
- import { Role } from "./exchanges/types";
2
- declare const VOICE_SERVICE_ROLE = "VOICE_SERVICE";
3
- declare const workspaceAccess: string[];
4
- declare const roles: Role[];
5
- export { VOICE_SERVICE_ROLE, roles, workspaceAccess };
package/dist/roles.js DELETED
@@ -1,129 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.workspaceAccess = exports.roles = exports.VOICE_SERVICE_ROLE = void 0;
4
- /* eslint-disable sonarjs/no-duplicate-string */
5
- /*
6
- * Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
7
- * http://github.com/fonoster/fonoster
8
- *
9
- * This file is part of Fonoster
10
- *
11
- * Licensed under the MIT License (the "License");
12
- * you may not use this file except in compliance with
13
- * the License. You may obtain a copy of the License at
14
- *
15
- * https://opensource.org/licenses/MIT
16
- *
17
- * Unless required by applicable law or agreed to in writing, software
18
- * distributed under the License is distributed on an "AS IS" BASIS,
19
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
20
- * See the License for the specific language governing permissions and
21
- * limitations under the License.
22
- */
23
- const types_1 = require("@fonoster/types");
24
- const VOICE_SERVICE_ROLE = "VOICE_SERVICE";
25
- exports.VOICE_SERVICE_ROLE = VOICE_SERVICE_ROLE;
26
- const workspaceAccess = [
27
- "/fonoster.applications.v1beta2.Applications/CreateApplication",
28
- "/fonoster.applications.v1beta2.Applications/UpdateApplication",
29
- "/fonoster.applications.v1beta2.Applications/GetApplication",
30
- "/fonoster.applications.v1beta2.Applications/DeleteApplication",
31
- "/fonoster.applications.v1beta2.Applications/ListApplications",
32
- "/fonoster.agents.v1beta2.Agents/CreateAgent",
33
- "/fonoster.agents.v1beta2.Agents/UpdateAgent",
34
- "/fonoster.agents.v1beta2.Agents/GetAgent",
35
- "/fonoster.agents.v1beta2.Agents/DeleteAgent",
36
- "/fonoster.agents.v1beta2.Agents/ListAgents",
37
- "/fonoster.acls.v1beta2.Acls/CreateAcl",
38
- "/fonoster.acls.v1beta2.Acls/UpdateAcl",
39
- "/fonoster.acls.v1beta2.Acls/ListAcls",
40
- "/fonoster.acls.v1beta2.Acls/GetAcl",
41
- "/fonoster.acls.v1beta2.Acls/DeleteAcl",
42
- "/fonoster.credentials.v1beta2.CredentialsService/CreateCredentials",
43
- "/fonoster.credentials.v1beta2.CredentialsService/UpdateCredentials",
44
- "/fonoster.credentials.v1beta2.CredentialsService/GetCredentials",
45
- "/fonoster.credentials.v1beta2.CredentialsService/DeleteCredentials",
46
- "/fonoster.credentials.v1beta2.CredentialsService/ListCredentials",
47
- "/fonoster.domains.v1beta2.Domains/CreateDomain",
48
- "/fonoster.domains.v1beta2.Domains/UpdateDomain",
49
- "/fonoster.domains.v1beta2.Domains/GetDomain",
50
- "/fonoster.domains.v1beta2.Domains/DeleteDomain",
51
- "/fonoster.domains.v1beta2.Domains/ListDomains",
52
- "/fonoster.trunks.v1beta2.Trunks/CreateTrunk",
53
- "/fonoster.trunks.v1beta2.Trunks/UpdateTrunk",
54
- "/fonoster.trunks.v1beta2.Trunks/GetTrunk",
55
- "/fonoster.trunks.v1beta2.Trunks/DeleteTrunk",
56
- "/fonoster.trunks.v1beta2.Trunks/ListTrunks",
57
- "/fonoster.numbers.v1beta2.Numbers/CreateNumber",
58
- "/fonoster.numbers.v1beta2.Numbers/UpdateNumber",
59
- "/fonoster.numbers.v1beta2.Numbers/GetNumber",
60
- "/fonoster.numbers.v1beta2.Numbers/DeleteNumber",
61
- "/fonoster.numbers.v1beta2.Numbers/ListNumbers",
62
- "/fonoster.secrets.v1beta2.Secrets/CreateSecret",
63
- "/fonoster.secrets.v1beta2.Secrets/UpdateSecret",
64
- "/fonoster.secrets.v1beta2.Secrets/GetSecret",
65
- "/fonoster.secrets.v1beta2.Secrets/DeleteSecret",
66
- "/fonoster.secrets.v1beta2.Secrets/ListSecrets",
67
- "/fonoster.calls.v1beta2.Calls/CreateCall",
68
- "/fonoster.calls.v1beta2.Calls/ListCalls",
69
- "/fonoster.calls.v1beta2.Calls/GetCall",
70
- "/fonoster.calls.v1beta2.Calls/TrackCall",
71
- "/fonoster.voice.v1beta2.Voice/CreateSession"
72
- ];
73
- exports.workspaceAccess = workspaceAccess;
74
- const fullIdentityAccess = [
75
- "/fonoster.identity.v1beta2.Identity/GetUser",
76
- "/fonoster.identity.v1beta2.Identity/UpdateUser",
77
- "/fonoster.identity.v1beta2.Identity/DeleteUser",
78
- "/fonoster.identity.v1beta2.Identity/CreateWorkspace",
79
- "/fonoster.identity.v1beta2.Identity/GetWorkspace",
80
- "/fonoster.identity.v1beta2.Identity/UpdateWorkspace",
81
- "/fonoster.identity.v1beta2.Identity/ListWorkspaces",
82
- "/fonoster.identity.v1beta2.Identity/DeleteWorkspace",
83
- "/fonoster.identity.v1beta2.Identity/InviteUserToWorkspace",
84
- "/fonoster.identity.v1beta2.Identity/RemoveUserFromWorkspace",
85
- "/fonoster.identity.v1beta2.Identity/ResendWorkspaceMembershipInvitation",
86
- "/fonoster.identity.v1beta2.Identity/RefreshToken",
87
- "/fonoster.identity.v1beta2.Identity/CreateApiKey",
88
- "/fonoster.identity.v1beta2.Identity/DeleteApiKey",
89
- "/fonoster.identity.v1beta2.Identity/ListApiKeys",
90
- "/fonoster.identity.v1beta2.Identity/RegenerateApiKey"
91
- ];
92
- const roles = [
93
- {
94
- name: types_1.WorkspaceRoleEnum.OWNER,
95
- description: "Access to all endpoints",
96
- access: [...fullIdentityAccess, ...workspaceAccess]
97
- },
98
- {
99
- name: types_1.WorkspaceRoleEnum.ADMIN,
100
- description: "Access to all endpoints",
101
- access: [...fullIdentityAccess, ...workspaceAccess]
102
- },
103
- {
104
- name: types_1.WorkspaceRoleEnum.USER,
105
- description: "Access to User and Workspace endpoints",
106
- access: [
107
- "/fonoster.identity.v1beta2.Identity/GetUser",
108
- "/fonoster.identity.v1beta2.Identity/UpdateUser",
109
- "/fonoster.identity.v1beta2.Identity/DeleteUser",
110
- "/fonoster.identity.v1beta2.Identity/CreateWorkspace",
111
- "/fonoster.identity.v1beta2.Identity/GetWorkspace",
112
- "/fonoster.identity.v1beta2.Identity/UpdateWorkspace",
113
- "/fonoster.identity.v1beta2.Identity/ListWorkspaces",
114
- "/fonoster.identity.v1beta2.Identity/RefreshToken",
115
- ...workspaceAccess
116
- ]
117
- },
118
- {
119
- name: types_1.ApiRoleEnum.WORKSPACE_ADMIN,
120
- description: "Access to all endpoints",
121
- access: [...fullIdentityAccess, ...workspaceAccess]
122
- },
123
- {
124
- name: VOICE_SERVICE_ROLE,
125
- description: "Role with access only to the Voice service endpoint",
126
- access: ["/fonoster.voice.v1beta2.Voice/CreateSession"]
127
- }
128
- ];
129
- exports.roles = roles;
@@ -1,6 +0,0 @@
1
- import { GrpcErrorMessage } from "@fonoster/common";
2
- import { Prisma } from "../db";
3
- declare function deleteUser(prisma: Prisma): (call: {
4
- request: unknown;
5
- }, callback: (error?: import("@fonoster/common").GrpcErrorMessage, response?: unknown) => void) => Promise<void>;
6
- export { deleteUser };
@@ -1,6 +0,0 @@
1
- import { GrpcErrorMessage } from "@fonoster/common";
2
- import { Prisma } from "../db";
3
- declare function getUser(prisma: Prisma): (call: {
4
- request: unknown;
5
- }, callback: (error?: import("@fonoster/common").GrpcErrorMessage, response?: unknown) => void) => Promise<void>;
6
- export { getUser };
@@ -1,6 +0,0 @@
1
- import { GrpcErrorMessage } from "@fonoster/common";
2
- import { Prisma } from "../db";
3
- declare function updateUser(prisma: Prisma): (call: {
4
- request: unknown;
5
- }, callback: (error?: import("@fonoster/common").GrpcErrorMessage, response?: unknown) => void) => Promise<void>;
6
- export { updateUser };
@@ -1,6 +0,0 @@
1
- import { IdentityConfig } from "../exchanges/types";
2
- declare function createCallAccessToken(identityConfig: IdentityConfig): (params: {
3
- accessKeyId: string;
4
- appRef: string;
5
- }) => Promise<string>;
6
- export { createCallAccessToken };
@@ -1,4 +0,0 @@
1
- import { TokenUseEnum } from "../exchanges/TokenUseEnum";
2
- import { DecodedToken } from "../exchanges/types";
3
- declare function decodeToken<T extends TokenUseEnum>(token: string): DecodedToken<T>;
4
- export { decodeToken };
@@ -1,25 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.decodeToken = decodeToken;
4
- /*
5
- * Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
6
- * http://github.com/fonoster/fonoster
7
- *
8
- * This file is part of Fonoster
9
- *
10
- * Licensed under the MIT License (the "License");
11
- * you may not use this file except in compliance with
12
- * the License. You may obtain a copy of the License at
13
- *
14
- * https://opensource.org/licenses/MIT
15
- *
16
- * Unless required by applicable law or agreed to in writing, software
17
- * distributed under the License is distributed on an "AS IS" BASIS,
18
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19
- * See the License for the specific language governing permissions and
20
- * limitations under the License.
21
- */
22
- const jwt_decode_1 = require("jwt-decode");
23
- function decodeToken(token) {
24
- return (0, jwt_decode_1.jwtDecode)(token);
25
- }
@@ -1,3 +0,0 @@
1
- import { ServerInterceptingCall } from "@grpc/grpc-js";
2
- declare function getAccessKeyIdFromCall(call: ServerInterceptingCall): string;
3
- export { getAccessKeyIdFromCall };
@@ -1,8 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.getAccessKeyIdFromCall = getAccessKeyIdFromCall;
4
- function getAccessKeyIdFromCall(call) {
5
- var _a;
6
- const metadata = call.metadata.getMap();
7
- return (_a = metadata["accesskeyid"]) === null || _a === void 0 ? void 0 : _a.toString();
8
- }
@@ -1,3 +0,0 @@
1
- import { Prisma } from "../db";
2
- declare function getAccessKeyIdFromEmail(prisma: Prisma): (email: string) => Promise<string>;
3
- export { getAccessKeyIdFromEmail };
@@ -1,3 +0,0 @@
1
- import { ServerInterceptingCall } from "@grpc/grpc-js";
2
- declare function getTokenFromCall(call: ServerInterceptingCall): string;
3
- export { getTokenFromCall };
@@ -1,8 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.getTokenFromCall = getTokenFromCall;
4
- function getTokenFromCall(call) {
5
- var _a;
6
- const metadata = call.metadata.getMap();
7
- return (_a = metadata["token"]) === null || _a === void 0 ? void 0 : _a.toString();
8
- }
@@ -1,3 +0,0 @@
1
- import { Access } from "../exchanges";
2
- declare function hasAccess(access: Access[], grpcPath: string): boolean;
3
- export { hasAccess };
@@ -1,9 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.hasAccess = hasAccess;
4
- const roles_1 = require("../roles");
5
- // This method only checks if the role has access to the path
6
- function hasAccess(access, grpcPath) {
7
- const roleList = access.map((a) => a.role);
8
- return roleList.some((r) => roles_1.roles.find((role) => role.name === r && role.access.includes(grpcPath)));
9
- }
@@ -1,2 +0,0 @@
1
- declare function isValidToken(token: string, secret: string): boolean;
2
- export { isValidToken };
@@ -1,51 +0,0 @@
1
- "use strict";
2
- var __importDefault = (this && this.__importDefault) || function (mod) {
3
- return (mod && mod.__esModule) ? mod : { "default": mod };
4
- };
5
- Object.defineProperty(exports, "__esModule", { value: true });
6
- exports.isValidToken = isValidToken;
7
- /*
8
- * Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
9
- * http://github.com/fonoster/fonoster
10
- *
11
- * This file is part of Fonoster
12
- *
13
- * Licensed under the MIT License (the "License");
14
- * you may not use this file except in compliance with
15
- * the License. You may obtain a copy of the License at
16
- *
17
- * https://opensource.org/licenses/MIT
18
- *
19
- * Unless required by applicable law or agreed to in writing, software
20
- * distributed under the License is distributed on an "AS IS" BASIS,
21
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
22
- * See the License for the specific language governing permissions and
23
- * limitations under the License.
24
- */
25
- const logger_1 = require("@fonoster/logger");
26
- const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
27
- const JsonWebErrorEnum_1 = require("../JsonWebErrorEnum");
28
- const logger = (0, logger_1.getLogger)({ service: "identity", filePath: __filename });
29
- function isValidToken(token, secret) {
30
- try {
31
- const decoded = jsonwebtoken_1.default.verify(token, secret);
32
- const currentTime = Math.floor(Date.now() / 1000);
33
- if (decoded.exp <= currentTime) {
34
- logger.verbose("token expired", { exp: decoded.exp, currentTime });
35
- return false;
36
- }
37
- return true;
38
- }
39
- catch (error) {
40
- if (error.name === JsonWebErrorEnum_1.JsonWebErrorEnum.JsonWebTokenError) {
41
- logger.verbose("invalid JWT token", { token });
42
- }
43
- else if (error.name === JsonWebErrorEnum_1.JsonWebErrorEnum.TokenExpiredError) {
44
- logger.verbose("token expired", { token });
45
- }
46
- else {
47
- logger.verbose("unexpected JWT error:", error);
48
- }
49
- return false;
50
- }
51
- }
@@ -1,2 +0,0 @@
1
- declare function tokenHasAccessKeyId(token: string, accessKeyId: string): boolean;
2
- export { tokenHasAccessKeyId };