@fonoster/identity 0.8.25 → 0.8.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/apikeys/{createApiKey.d.ts → createCreateApiKey.d.ts} +2 -2
- package/dist/apikeys/{createApiKey.js → createCreateApiKey.js} +5 -6
- package/dist/apikeys/createDeleteApiKey.d.ts +6 -0
- package/dist/apikeys/{deleteApiKey.js → createDeleteApiKey.js} +4 -4
- package/dist/apikeys/createListApiKeys.d.ts +6 -0
- package/dist/apikeys/{listApiKeys.js → createListApiKeys.js} +5 -6
- package/dist/apikeys/createRegenerateApiKey.d.ts +6 -0
- package/dist/apikeys/{regenerateApiKey.js → createRegenerateApiKey.js} +4 -4
- package/dist/apikeys/index.d.ts +4 -4
- package/dist/apikeys/index.js +4 -4
- package/dist/exchanges/{exchangeRefreshToken.d.ts → createExchangeApiKey.d.ts} +2 -2
- package/dist/exchanges/{exchangeApiKey.js → createExchangeApiKey.js} +6 -6
- package/dist/exchanges/{exchangeOauth2Code.d.ts → createExchangeCredentials.d.ts} +2 -2
- package/dist/exchanges/{exchangeCredentials.js → createExchangeCredentials.js} +6 -6
- package/dist/exchanges/{exchangeCredentials.d.ts → createExchangeOauth2Code.d.ts} +2 -2
- package/dist/exchanges/{exchangeOauth2Code.js → createExchangeOauth2Code.js} +6 -6
- package/dist/exchanges/{exchangeApiKey.d.ts → createExchangeRefreshToken.d.ts} +2 -2
- package/dist/exchanges/{exchangeRefreshToken.js → createExchangeRefreshToken.js} +4 -4
- package/dist/exchanges/exchangeTokens.js +5 -5
- package/dist/exchanges/index.d.ts +4 -5
- package/dist/exchanges/index.js +4 -5
- package/dist/exchanges/payloads/apikeys/createGetAccessTokenPayload.d.ts +5 -0
- package/dist/exchanges/payloads/apikeys/createGetAccessTokenPayload.js +46 -0
- package/dist/exchanges/payloads/apikeys/createGetRefreshTokenPayload.d.ts +5 -0
- package/dist/exchanges/payloads/apikeys/{getRefreshTokenPayload.js → createGetRefreshTokenPayload.js} +18 -16
- package/dist/exchanges/payloads/apikeys/index.d.ts +2 -2
- package/dist/exchanges/payloads/apikeys/index.js +2 -2
- package/dist/exchanges/payloads/buildRefreshTokenPayload.d.ts +2 -1
- package/dist/exchanges/payloads/buildRefreshTokenPayload.js +2 -2
- package/dist/exchanges/payloads/users/createGetAccessTokenPayload.d.ts +5 -0
- package/dist/exchanges/payloads/users/createGetAccessTokenPayload.js +75 -0
- package/dist/exchanges/payloads/users/createGetIdTokenPayload.d.ts +5 -0
- package/dist/exchanges/payloads/users/createGetIdTokenPayload.js +40 -0
- package/dist/exchanges/payloads/users/createGetRefreshTokenPayload.d.ts +5 -0
- package/dist/exchanges/payloads/users/{getRefreshTokenPayload.js → createGetRefreshTokenPayload.js} +22 -20
- package/dist/exchanges/payloads/users/index.d.ts +3 -3
- package/dist/exchanges/payloads/users/index.js +3 -3
- package/dist/exchanges/types.d.ts +1 -36
- package/dist/getPublicKey.d.ts +2 -2
- package/dist/getPublicKey.js +8 -6
- package/dist/index.d.ts +0 -2
- package/dist/index.js +0 -2
- package/dist/service.js +22 -22
- package/dist/{apikeys/listApiKeys.d.ts → users/createCreateUser.d.ts} +2 -2
- package/dist/users/{createUser.js → createCreateUser.js} +4 -4
- package/dist/users/{createUser.d.ts → createDeleteUser.d.ts} +2 -2
- package/dist/users/{deleteUser.js → createDeleteUser.js} +5 -6
- package/dist/{apikeys/deleteApiKey.d.ts → users/createGetUser.d.ts} +2 -2
- package/dist/users/{getUser.js → createGetUser.js} +5 -6
- package/dist/{apikeys/regenerateApiKey.d.ts → users/createUpdateUser.d.ts} +2 -2
- package/dist/users/{updateUser.js → createUpdateUser.js} +5 -6
- package/dist/users/index.d.ts +4 -4
- package/dist/users/index.js +4 -4
- package/dist/utils/createGenerateCallAccessToken.d.ts +6 -0
- package/dist/utils/{createCallAccessToken.js → createGenerateCallAccessToken.js} +29 -28
- package/dist/utils/{createWorkspaceInviteToken.d.ts → createGenerateWorkspaceInviteToken.d.ts} +2 -2
- package/dist/utils/{createWorkspaceInviteToken.js → createGenerateWorkspaceInviteToken.js} +21 -19
- package/dist/utils/createGetAccessKeyIdFromEmail.d.ts +3 -0
- package/dist/utils/{getAccessKeyIdFromEmail.js → createGetAccessKeyIdFromEmail.js} +8 -6
- package/dist/utils/{getApiKeyByAccessKeyId.d.ts → createGetApiKeyByAccessKeyId.d.ts} +5 -5
- package/dist/utils/{getApiKeyByAccessKeyId.js → createGetApiKeyByAccessKeyId.js} +13 -11
- package/dist/utils/{getUserByEmail.d.ts → createGetUserByEmail.d.ts} +2 -2
- package/dist/utils/{getUserByEmail.js → createGetUserByEmail.js} +10 -8
- package/dist/utils/createUpdateMembershipStatus.d.ts +3 -0
- package/dist/utils/{updateMembershipStatus.js → createUpdateMembershipStatus.js} +18 -16
- package/dist/utils/getAccessKeyIdFromToken.js +3 -4
- package/dist/utils/getUserRefFromToken.js +3 -4
- package/dist/utils/hasAccessToResource.js +3 -4
- package/dist/utils/index.d.ts +2 -8
- package/dist/utils/index.js +2 -8
- package/dist/verification/createVerifyCode.js +2 -2
- package/dist/workspaces/createCreateWorkspace.d.ts +6 -0
- package/dist/workspaces/{createWorkspace.js → createCreateWorkspace.js} +5 -6
- package/dist/workspaces/createDeleteWorkspace.d.ts +6 -0
- package/dist/workspaces/{deleteWorkspace.js → createDeleteWorkspace.js} +5 -6
- package/dist/workspaces/createGetWorkspace.d.ts +6 -0
- package/dist/workspaces/{getWorkspace.js → createGetWorkspace.js} +5 -6
- package/dist/workspaces/{inviteUserToWorkspace.d.ts → createInviteUserToWorkspace.d.ts} +2 -2
- package/dist/workspaces/{inviteUserToWorkspace.js → createInviteUserToWorkspace.js} +26 -25
- package/dist/workspaces/createIsAdminMember.d.ts +3 -0
- package/dist/workspaces/{isAdminMember.js → createIsAdminMember.js} +21 -19
- package/dist/workspaces/createIsWorkspaceMember.d.ts +3 -0
- package/dist/workspaces/createIsWorkspaceMember.js +33 -0
- package/dist/workspaces/createListWorkspaces.d.ts +6 -0
- package/dist/workspaces/{listWorkspaces.js → createListWorkspaces.js} +6 -8
- package/dist/workspaces/createRemoveUserFromWorkspace.d.ts +6 -0
- package/dist/workspaces/{removeUserFromWorkspace.js → createRemoveUserFromWorkspace.js} +8 -10
- package/dist/workspaces/{resendWorkspaceMembershipInvitation.d.ts → createResendWorkspaceMembershipInvitation.d.ts} +2 -2
- package/dist/workspaces/{resendWorkspaceMembershipInvitation.js → createResendWorkspaceMembershipInvitation.js} +10 -11
- package/dist/workspaces/createUpdateWorkspace.d.ts +6 -0
- package/dist/workspaces/{updateWorkspace.js → createUpdateWorkspace.js} +7 -8
- package/dist/workspaces/index.d.ts +8 -8
- package/dist/workspaces/index.js +8 -8
- package/package.json +5 -5
- package/dist/JsonWebErrorEnum.d.ts +0 -5
- package/dist/JsonWebErrorEnum.js +0 -26
- package/dist/createAuthInterceptor.d.ts +0 -15
- package/dist/createAuthInterceptor.js +0 -74
- package/dist/errors.d.ts +0 -4
- package/dist/errors.js +0 -35
- package/dist/exchanges/TokenUseEnum.d.ts +0 -6
- package/dist/exchanges/TokenUseEnum.js +0 -27
- package/dist/exchanges/payloads/apikeys/getAccessTokenPayload.d.ts +0 -4
- package/dist/exchanges/payloads/apikeys/getAccessTokenPayload.js +0 -44
- package/dist/exchanges/payloads/apikeys/getRefreshTokenPayload.d.ts +0 -4
- package/dist/exchanges/payloads/users/getAccessTokenPayload.d.ts +0 -4
- package/dist/exchanges/payloads/users/getAccessTokenPayload.js +0 -73
- package/dist/exchanges/payloads/users/getIdTokenPayload.d.ts +0 -4
- package/dist/exchanges/payloads/users/getIdTokenPayload.js +0 -38
- package/dist/exchanges/payloads/users/getRefreshTokenPayload.d.ts +0 -4
- package/dist/getPublicKeyClient.d.ts +0 -5
- package/dist/getPublicKeyClient.js +0 -71
- package/dist/roles.d.ts +0 -5
- package/dist/roles.js +0 -129
- package/dist/users/deleteUser.d.ts +0 -6
- package/dist/users/getUser.d.ts +0 -6
- package/dist/users/updateUser.d.ts +0 -6
- package/dist/utils/createCallAccessToken.d.ts +0 -6
- package/dist/utils/decodeToken.d.ts +0 -4
- package/dist/utils/decodeToken.js +0 -25
- package/dist/utils/getAccessKeyIdFromCall.d.ts +0 -3
- package/dist/utils/getAccessKeyIdFromCall.js +0 -8
- package/dist/utils/getAccessKeyIdFromEmail.d.ts +0 -3
- package/dist/utils/getTokenFromCall.d.ts +0 -3
- package/dist/utils/getTokenFromCall.js +0 -8
- package/dist/utils/hasAccess.d.ts +0 -3
- package/dist/utils/hasAccess.js +0 -9
- package/dist/utils/isValidToken.d.ts +0 -2
- package/dist/utils/isValidToken.js +0 -51
- package/dist/utils/tokenHasAccessKeyId.d.ts +0 -2
- package/dist/utils/tokenHasAccessKeyId.js +0 -28
- package/dist/utils/updateMembershipStatus.d.ts +0 -3
- package/dist/workspaces/createWorkspace.d.ts +0 -6
- package/dist/workspaces/deleteWorkspace.d.ts +0 -6
- package/dist/workspaces/getWorkspace.d.ts +0 -6
- package/dist/workspaces/isAdminMember.d.ts +0 -3
- package/dist/workspaces/isWorkspaceMember.d.ts +0 -3
- package/dist/workspaces/isWorkspaceMember.js +0 -31
- package/dist/workspaces/listWorkspaces.d.ts +0 -6
- package/dist/workspaces/removeUserFromWorkspace.d.ts +0 -6
- package/dist/workspaces/updateWorkspace.d.ts +0 -6
package/dist/errors.js
DELETED
|
@@ -1,35 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.unauthenticatedError = exports.permissionDeniedError = void 0;
|
|
4
|
-
/*
|
|
5
|
-
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
6
|
-
* http://github.com/fonoster/fonoster
|
|
7
|
-
*
|
|
8
|
-
* This file is part of Fonoster
|
|
9
|
-
*
|
|
10
|
-
* Licensed under the MIT License (the "License");
|
|
11
|
-
* you may not use this file except in compliance with
|
|
12
|
-
* the License. You may obtain a copy of the License at
|
|
13
|
-
*
|
|
14
|
-
* https://opensource.org/licenses/MIT
|
|
15
|
-
*
|
|
16
|
-
* Unless required by applicable law or agreed to in writing, software
|
|
17
|
-
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
18
|
-
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
19
|
-
* See the License for the specific language governing permissions and
|
|
20
|
-
* limitations under the License.
|
|
21
|
-
*/
|
|
22
|
-
const common_1 = require("@fonoster/common");
|
|
23
|
-
const grpc_js_1 = require("@grpc/grpc-js");
|
|
24
|
-
const unauthenticatedError = (call) => (0, common_1.createInterceptingCall)({
|
|
25
|
-
call,
|
|
26
|
-
code: grpc_js_1.status.UNAUTHENTICATED,
|
|
27
|
-
details: "Invalid or expired token"
|
|
28
|
-
});
|
|
29
|
-
exports.unauthenticatedError = unauthenticatedError;
|
|
30
|
-
const permissionDeniedError = (call) => (0, common_1.createInterceptingCall)({
|
|
31
|
-
call,
|
|
32
|
-
code: grpc_js_1.status.PERMISSION_DENIED,
|
|
33
|
-
details: "Permission denied"
|
|
34
|
-
});
|
|
35
|
-
exports.permissionDeniedError = permissionDeniedError;
|
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.TokenUseEnum = void 0;
|
|
4
|
-
/*
|
|
5
|
-
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
6
|
-
* http://github.com/fonoster/fonoster
|
|
7
|
-
*
|
|
8
|
-
* This file is part of Fonoster
|
|
9
|
-
*
|
|
10
|
-
* Licensed under the MIT License (the "License");
|
|
11
|
-
* you may not use this file except in compliance with
|
|
12
|
-
* the License. You may obtain a copy of the License at
|
|
13
|
-
*
|
|
14
|
-
* https://opensource.org/licenses/MIT
|
|
15
|
-
*
|
|
16
|
-
* Unless required by applicable law or agreed to in writing, software
|
|
17
|
-
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
18
|
-
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
19
|
-
* See the License for the specific language governing permissions and
|
|
20
|
-
* limitations under the License.
|
|
21
|
-
*/
|
|
22
|
-
var TokenUseEnum;
|
|
23
|
-
(function (TokenUseEnum) {
|
|
24
|
-
TokenUseEnum["ID"] = "id";
|
|
25
|
-
TokenUseEnum["ACCESS"] = "access";
|
|
26
|
-
TokenUseEnum["REFRESH"] = "refresh";
|
|
27
|
-
})(TokenUseEnum || (exports.TokenUseEnum = TokenUseEnum = {}));
|
|
@@ -1,44 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
-
});
|
|
10
|
-
};
|
|
11
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
-
exports.getAccessTokenPayload = getAccessTokenPayload;
|
|
13
|
-
const TokenUseEnum_1 = require("../../TokenUseEnum");
|
|
14
|
-
function getAccessTokenPayload(prisma, identityConfig) {
|
|
15
|
-
return (accessKeyId) => __awaiter(this, void 0, void 0, function* () {
|
|
16
|
-
const apiKey = yield prisma.apiKey.findFirst({
|
|
17
|
-
where: {
|
|
18
|
-
accessKeyId
|
|
19
|
-
},
|
|
20
|
-
include: {
|
|
21
|
-
workspace: true
|
|
22
|
-
}
|
|
23
|
-
});
|
|
24
|
-
if (!apiKey) {
|
|
25
|
-
return null;
|
|
26
|
-
}
|
|
27
|
-
const { issuer, audience } = identityConfig;
|
|
28
|
-
const { ref, workspace } = apiKey;
|
|
29
|
-
const access = [
|
|
30
|
-
{
|
|
31
|
-
accessKeyId: workspace.accessKeyId,
|
|
32
|
-
role: apiKey.role
|
|
33
|
-
}
|
|
34
|
-
];
|
|
35
|
-
return {
|
|
36
|
-
iss: issuer,
|
|
37
|
-
sub: ref,
|
|
38
|
-
aud: audience,
|
|
39
|
-
tokenUse: TokenUseEnum_1.TokenUseEnum.ACCESS,
|
|
40
|
-
accessKeyId,
|
|
41
|
-
access
|
|
42
|
-
};
|
|
43
|
-
});
|
|
44
|
-
}
|
|
@@ -1,4 +0,0 @@
|
|
|
1
|
-
import { Prisma } from "../../../db";
|
|
2
|
-
import { IdentityConfig, RefreshToken } from "../../types";
|
|
3
|
-
declare function getRefreshTokenPayload(prisma: Prisma, identityConfig: IdentityConfig): (accessKeyId: string) => Promise<RefreshToken>;
|
|
4
|
-
export { getRefreshTokenPayload };
|
|
@@ -1,73 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
-
});
|
|
10
|
-
};
|
|
11
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
-
exports.getAccessTokenPayload = getAccessTokenPayload;
|
|
13
|
-
/*
|
|
14
|
-
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
15
|
-
* http://github.com/fonoster/fonoster
|
|
16
|
-
*
|
|
17
|
-
* This file is part of Fonoster
|
|
18
|
-
*
|
|
19
|
-
* Licensed under the MIT License (the "License");
|
|
20
|
-
* you may not use this file except in compliance with
|
|
21
|
-
* the License. You may obtain a copy of the License at
|
|
22
|
-
*
|
|
23
|
-
* https://opensource.org/licenses/MIT
|
|
24
|
-
*
|
|
25
|
-
* Unless required by applicable law or agreed to in writing, software
|
|
26
|
-
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
27
|
-
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
28
|
-
* See the License for the specific language governing permissions and
|
|
29
|
-
* limitations under the License.
|
|
30
|
-
*/
|
|
31
|
-
const types_1 = require("@fonoster/types");
|
|
32
|
-
const TokenUseEnum_1 = require("../../TokenUseEnum");
|
|
33
|
-
function getAccessTokenPayload(prisma, identityConfig) {
|
|
34
|
-
return (accessKeyId) => __awaiter(this, void 0, void 0, function* () {
|
|
35
|
-
const user = yield prisma.user.findFirst({
|
|
36
|
-
where: {
|
|
37
|
-
accessKeyId
|
|
38
|
-
},
|
|
39
|
-
include: {
|
|
40
|
-
ownedWorkspaces: true,
|
|
41
|
-
memberships: {
|
|
42
|
-
include: {
|
|
43
|
-
workspace: true
|
|
44
|
-
}
|
|
45
|
-
}
|
|
46
|
-
}
|
|
47
|
-
});
|
|
48
|
-
if (!user) {
|
|
49
|
-
return null;
|
|
50
|
-
}
|
|
51
|
-
const { issuer, audience } = identityConfig;
|
|
52
|
-
const { ref, ownedWorkspaces, memberships } = user;
|
|
53
|
-
const access = ownedWorkspaces.map((workspace) => ({
|
|
54
|
-
accessKeyId: workspace.accessKeyId,
|
|
55
|
-
role: types_1.WorkspaceRoleEnum.OWNER
|
|
56
|
-
}));
|
|
57
|
-
memberships.forEach((membership) => {
|
|
58
|
-
membership.status === types_1.WorkspaceMemberStatus.ACTIVE &&
|
|
59
|
-
access.push({
|
|
60
|
-
accessKeyId: membership.workspace.accessKeyId,
|
|
61
|
-
role: membership.role
|
|
62
|
-
});
|
|
63
|
-
});
|
|
64
|
-
return {
|
|
65
|
-
iss: issuer,
|
|
66
|
-
sub: ref,
|
|
67
|
-
aud: audience,
|
|
68
|
-
tokenUse: TokenUseEnum_1.TokenUseEnum.ACCESS,
|
|
69
|
-
accessKeyId,
|
|
70
|
-
access
|
|
71
|
-
};
|
|
72
|
-
});
|
|
73
|
-
}
|
|
@@ -1,38 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
-
});
|
|
10
|
-
};
|
|
11
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
-
exports.getIdTokenPayload = getIdTokenPayload;
|
|
13
|
-
const TokenUseEnum_1 = require("../../TokenUseEnum");
|
|
14
|
-
function getIdTokenPayload(prisma, identityConfig) {
|
|
15
|
-
return (accessKeyId) => __awaiter(this, void 0, void 0, function* () {
|
|
16
|
-
const user = yield prisma.user.findFirst({
|
|
17
|
-
where: {
|
|
18
|
-
accessKeyId
|
|
19
|
-
}
|
|
20
|
-
});
|
|
21
|
-
if (!user) {
|
|
22
|
-
return null;
|
|
23
|
-
}
|
|
24
|
-
const { issuer, audience } = identityConfig;
|
|
25
|
-
const { ref, email, phoneNumber, emailVerified, phoneNumberVerified } = user;
|
|
26
|
-
return {
|
|
27
|
-
iss: issuer,
|
|
28
|
-
sub: ref,
|
|
29
|
-
aud: audience,
|
|
30
|
-
tokenUse: TokenUseEnum_1.TokenUseEnum.ID,
|
|
31
|
-
accessKeyId,
|
|
32
|
-
email,
|
|
33
|
-
emailVerified,
|
|
34
|
-
phoneNumber,
|
|
35
|
-
phoneNumberVerified
|
|
36
|
-
};
|
|
37
|
-
});
|
|
38
|
-
}
|
|
@@ -1,4 +0,0 @@
|
|
|
1
|
-
import { Prisma } from "../../../db";
|
|
2
|
-
import { IdentityConfig, RefreshToken } from "../../types";
|
|
3
|
-
declare function getRefreshTokenPayload(prisma: Prisma, identityConfig: IdentityConfig): (accessKeyId: string) => Promise<RefreshToken>;
|
|
4
|
-
export { getRefreshTokenPayload };
|
|
@@ -1,71 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
-
if (k2 === undefined) k2 = k;
|
|
4
|
-
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
-
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
-
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
-
}
|
|
8
|
-
Object.defineProperty(o, k2, desc);
|
|
9
|
-
}) : (function(o, m, k, k2) {
|
|
10
|
-
if (k2 === undefined) k2 = k;
|
|
11
|
-
o[k2] = m[k];
|
|
12
|
-
}));
|
|
13
|
-
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
-
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
-
}) : function(o, v) {
|
|
16
|
-
o["default"] = v;
|
|
17
|
-
});
|
|
18
|
-
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
-
var ownKeys = function(o) {
|
|
20
|
-
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
-
var ar = [];
|
|
22
|
-
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
-
return ar;
|
|
24
|
-
};
|
|
25
|
-
return ownKeys(o);
|
|
26
|
-
};
|
|
27
|
-
return function (mod) {
|
|
28
|
-
if (mod && mod.__esModule) return mod;
|
|
29
|
-
var result = {};
|
|
30
|
-
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
-
__setModuleDefault(result, mod);
|
|
32
|
-
return result;
|
|
33
|
-
};
|
|
34
|
-
})();
|
|
35
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
-
exports.getPublicKeyClient = getPublicKeyClient;
|
|
37
|
-
/*
|
|
38
|
-
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
39
|
-
* http://github.com/fonoster/fonoster
|
|
40
|
-
*
|
|
41
|
-
* This file is part of Fonoster
|
|
42
|
-
*
|
|
43
|
-
* Licensed under the MIT License (the "License");
|
|
44
|
-
* you may not use this file except in compliance with
|
|
45
|
-
* the License. You may obtain a copy of the License at
|
|
46
|
-
*
|
|
47
|
-
* https://opensource.org/licenses/MIT
|
|
48
|
-
*
|
|
49
|
-
* Unless required by applicable law or agreed to in writing, software
|
|
50
|
-
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
51
|
-
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
52
|
-
* See the License for the specific language governing permissions and
|
|
53
|
-
* limitations under the License.
|
|
54
|
-
*/
|
|
55
|
-
const common_1 = require("@fonoster/common");
|
|
56
|
-
const grpc = __importStar(require("@grpc/grpc-js"));
|
|
57
|
-
const service_1 = require("./service");
|
|
58
|
-
const IdentityServiceClient = grpc.makeGenericClientConstructor((0, common_1.createServiceDefinition)(service_1.serviceDefinitionParams), "", {});
|
|
59
|
-
function getPublicKeyClient(endpoint) {
|
|
60
|
-
return new Promise((resolve, reject) => {
|
|
61
|
-
const client = new IdentityServiceClient(endpoint, grpc.credentials.createInsecure());
|
|
62
|
-
client.getPublicKey({}, (error, response) => {
|
|
63
|
-
if (error) {
|
|
64
|
-
reject(error);
|
|
65
|
-
}
|
|
66
|
-
else {
|
|
67
|
-
resolve(response);
|
|
68
|
-
}
|
|
69
|
-
});
|
|
70
|
-
});
|
|
71
|
-
}
|
package/dist/roles.d.ts
DELETED
package/dist/roles.js
DELETED
|
@@ -1,129 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.workspaceAccess = exports.roles = exports.VOICE_SERVICE_ROLE = void 0;
|
|
4
|
-
/* eslint-disable sonarjs/no-duplicate-string */
|
|
5
|
-
/*
|
|
6
|
-
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
7
|
-
* http://github.com/fonoster/fonoster
|
|
8
|
-
*
|
|
9
|
-
* This file is part of Fonoster
|
|
10
|
-
*
|
|
11
|
-
* Licensed under the MIT License (the "License");
|
|
12
|
-
* you may not use this file except in compliance with
|
|
13
|
-
* the License. You may obtain a copy of the License at
|
|
14
|
-
*
|
|
15
|
-
* https://opensource.org/licenses/MIT
|
|
16
|
-
*
|
|
17
|
-
* Unless required by applicable law or agreed to in writing, software
|
|
18
|
-
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
19
|
-
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
20
|
-
* See the License for the specific language governing permissions and
|
|
21
|
-
* limitations under the License.
|
|
22
|
-
*/
|
|
23
|
-
const types_1 = require("@fonoster/types");
|
|
24
|
-
const VOICE_SERVICE_ROLE = "VOICE_SERVICE";
|
|
25
|
-
exports.VOICE_SERVICE_ROLE = VOICE_SERVICE_ROLE;
|
|
26
|
-
const workspaceAccess = [
|
|
27
|
-
"/fonoster.applications.v1beta2.Applications/CreateApplication",
|
|
28
|
-
"/fonoster.applications.v1beta2.Applications/UpdateApplication",
|
|
29
|
-
"/fonoster.applications.v1beta2.Applications/GetApplication",
|
|
30
|
-
"/fonoster.applications.v1beta2.Applications/DeleteApplication",
|
|
31
|
-
"/fonoster.applications.v1beta2.Applications/ListApplications",
|
|
32
|
-
"/fonoster.agents.v1beta2.Agents/CreateAgent",
|
|
33
|
-
"/fonoster.agents.v1beta2.Agents/UpdateAgent",
|
|
34
|
-
"/fonoster.agents.v1beta2.Agents/GetAgent",
|
|
35
|
-
"/fonoster.agents.v1beta2.Agents/DeleteAgent",
|
|
36
|
-
"/fonoster.agents.v1beta2.Agents/ListAgents",
|
|
37
|
-
"/fonoster.acls.v1beta2.Acls/CreateAcl",
|
|
38
|
-
"/fonoster.acls.v1beta2.Acls/UpdateAcl",
|
|
39
|
-
"/fonoster.acls.v1beta2.Acls/ListAcls",
|
|
40
|
-
"/fonoster.acls.v1beta2.Acls/GetAcl",
|
|
41
|
-
"/fonoster.acls.v1beta2.Acls/DeleteAcl",
|
|
42
|
-
"/fonoster.credentials.v1beta2.CredentialsService/CreateCredentials",
|
|
43
|
-
"/fonoster.credentials.v1beta2.CredentialsService/UpdateCredentials",
|
|
44
|
-
"/fonoster.credentials.v1beta2.CredentialsService/GetCredentials",
|
|
45
|
-
"/fonoster.credentials.v1beta2.CredentialsService/DeleteCredentials",
|
|
46
|
-
"/fonoster.credentials.v1beta2.CredentialsService/ListCredentials",
|
|
47
|
-
"/fonoster.domains.v1beta2.Domains/CreateDomain",
|
|
48
|
-
"/fonoster.domains.v1beta2.Domains/UpdateDomain",
|
|
49
|
-
"/fonoster.domains.v1beta2.Domains/GetDomain",
|
|
50
|
-
"/fonoster.domains.v1beta2.Domains/DeleteDomain",
|
|
51
|
-
"/fonoster.domains.v1beta2.Domains/ListDomains",
|
|
52
|
-
"/fonoster.trunks.v1beta2.Trunks/CreateTrunk",
|
|
53
|
-
"/fonoster.trunks.v1beta2.Trunks/UpdateTrunk",
|
|
54
|
-
"/fonoster.trunks.v1beta2.Trunks/GetTrunk",
|
|
55
|
-
"/fonoster.trunks.v1beta2.Trunks/DeleteTrunk",
|
|
56
|
-
"/fonoster.trunks.v1beta2.Trunks/ListTrunks",
|
|
57
|
-
"/fonoster.numbers.v1beta2.Numbers/CreateNumber",
|
|
58
|
-
"/fonoster.numbers.v1beta2.Numbers/UpdateNumber",
|
|
59
|
-
"/fonoster.numbers.v1beta2.Numbers/GetNumber",
|
|
60
|
-
"/fonoster.numbers.v1beta2.Numbers/DeleteNumber",
|
|
61
|
-
"/fonoster.numbers.v1beta2.Numbers/ListNumbers",
|
|
62
|
-
"/fonoster.secrets.v1beta2.Secrets/CreateSecret",
|
|
63
|
-
"/fonoster.secrets.v1beta2.Secrets/UpdateSecret",
|
|
64
|
-
"/fonoster.secrets.v1beta2.Secrets/GetSecret",
|
|
65
|
-
"/fonoster.secrets.v1beta2.Secrets/DeleteSecret",
|
|
66
|
-
"/fonoster.secrets.v1beta2.Secrets/ListSecrets",
|
|
67
|
-
"/fonoster.calls.v1beta2.Calls/CreateCall",
|
|
68
|
-
"/fonoster.calls.v1beta2.Calls/ListCalls",
|
|
69
|
-
"/fonoster.calls.v1beta2.Calls/GetCall",
|
|
70
|
-
"/fonoster.calls.v1beta2.Calls/TrackCall",
|
|
71
|
-
"/fonoster.voice.v1beta2.Voice/CreateSession"
|
|
72
|
-
];
|
|
73
|
-
exports.workspaceAccess = workspaceAccess;
|
|
74
|
-
const fullIdentityAccess = [
|
|
75
|
-
"/fonoster.identity.v1beta2.Identity/GetUser",
|
|
76
|
-
"/fonoster.identity.v1beta2.Identity/UpdateUser",
|
|
77
|
-
"/fonoster.identity.v1beta2.Identity/DeleteUser",
|
|
78
|
-
"/fonoster.identity.v1beta2.Identity/CreateWorkspace",
|
|
79
|
-
"/fonoster.identity.v1beta2.Identity/GetWorkspace",
|
|
80
|
-
"/fonoster.identity.v1beta2.Identity/UpdateWorkspace",
|
|
81
|
-
"/fonoster.identity.v1beta2.Identity/ListWorkspaces",
|
|
82
|
-
"/fonoster.identity.v1beta2.Identity/DeleteWorkspace",
|
|
83
|
-
"/fonoster.identity.v1beta2.Identity/InviteUserToWorkspace",
|
|
84
|
-
"/fonoster.identity.v1beta2.Identity/RemoveUserFromWorkspace",
|
|
85
|
-
"/fonoster.identity.v1beta2.Identity/ResendWorkspaceMembershipInvitation",
|
|
86
|
-
"/fonoster.identity.v1beta2.Identity/RefreshToken",
|
|
87
|
-
"/fonoster.identity.v1beta2.Identity/CreateApiKey",
|
|
88
|
-
"/fonoster.identity.v1beta2.Identity/DeleteApiKey",
|
|
89
|
-
"/fonoster.identity.v1beta2.Identity/ListApiKeys",
|
|
90
|
-
"/fonoster.identity.v1beta2.Identity/RegenerateApiKey"
|
|
91
|
-
];
|
|
92
|
-
const roles = [
|
|
93
|
-
{
|
|
94
|
-
name: types_1.WorkspaceRoleEnum.OWNER,
|
|
95
|
-
description: "Access to all endpoints",
|
|
96
|
-
access: [...fullIdentityAccess, ...workspaceAccess]
|
|
97
|
-
},
|
|
98
|
-
{
|
|
99
|
-
name: types_1.WorkspaceRoleEnum.ADMIN,
|
|
100
|
-
description: "Access to all endpoints",
|
|
101
|
-
access: [...fullIdentityAccess, ...workspaceAccess]
|
|
102
|
-
},
|
|
103
|
-
{
|
|
104
|
-
name: types_1.WorkspaceRoleEnum.USER,
|
|
105
|
-
description: "Access to User and Workspace endpoints",
|
|
106
|
-
access: [
|
|
107
|
-
"/fonoster.identity.v1beta2.Identity/GetUser",
|
|
108
|
-
"/fonoster.identity.v1beta2.Identity/UpdateUser",
|
|
109
|
-
"/fonoster.identity.v1beta2.Identity/DeleteUser",
|
|
110
|
-
"/fonoster.identity.v1beta2.Identity/CreateWorkspace",
|
|
111
|
-
"/fonoster.identity.v1beta2.Identity/GetWorkspace",
|
|
112
|
-
"/fonoster.identity.v1beta2.Identity/UpdateWorkspace",
|
|
113
|
-
"/fonoster.identity.v1beta2.Identity/ListWorkspaces",
|
|
114
|
-
"/fonoster.identity.v1beta2.Identity/RefreshToken",
|
|
115
|
-
...workspaceAccess
|
|
116
|
-
]
|
|
117
|
-
},
|
|
118
|
-
{
|
|
119
|
-
name: types_1.ApiRoleEnum.WORKSPACE_ADMIN,
|
|
120
|
-
description: "Access to all endpoints",
|
|
121
|
-
access: [...fullIdentityAccess, ...workspaceAccess]
|
|
122
|
-
},
|
|
123
|
-
{
|
|
124
|
-
name: VOICE_SERVICE_ROLE,
|
|
125
|
-
description: "Role with access only to the Voice service endpoint",
|
|
126
|
-
access: ["/fonoster.voice.v1beta2.Voice/CreateSession"]
|
|
127
|
-
}
|
|
128
|
-
];
|
|
129
|
-
exports.roles = roles;
|
|
@@ -1,6 +0,0 @@
|
|
|
1
|
-
import { GrpcErrorMessage } from "@fonoster/common";
|
|
2
|
-
import { Prisma } from "../db";
|
|
3
|
-
declare function deleteUser(prisma: Prisma): (call: {
|
|
4
|
-
request: unknown;
|
|
5
|
-
}, callback: (error?: import("@fonoster/common").GrpcErrorMessage, response?: unknown) => void) => Promise<void>;
|
|
6
|
-
export { deleteUser };
|
package/dist/users/getUser.d.ts
DELETED
|
@@ -1,6 +0,0 @@
|
|
|
1
|
-
import { GrpcErrorMessage } from "@fonoster/common";
|
|
2
|
-
import { Prisma } from "../db";
|
|
3
|
-
declare function getUser(prisma: Prisma): (call: {
|
|
4
|
-
request: unknown;
|
|
5
|
-
}, callback: (error?: import("@fonoster/common").GrpcErrorMessage, response?: unknown) => void) => Promise<void>;
|
|
6
|
-
export { getUser };
|
|
@@ -1,6 +0,0 @@
|
|
|
1
|
-
import { GrpcErrorMessage } from "@fonoster/common";
|
|
2
|
-
import { Prisma } from "../db";
|
|
3
|
-
declare function updateUser(prisma: Prisma): (call: {
|
|
4
|
-
request: unknown;
|
|
5
|
-
}, callback: (error?: import("@fonoster/common").GrpcErrorMessage, response?: unknown) => void) => Promise<void>;
|
|
6
|
-
export { updateUser };
|
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.decodeToken = decodeToken;
|
|
4
|
-
/*
|
|
5
|
-
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
6
|
-
* http://github.com/fonoster/fonoster
|
|
7
|
-
*
|
|
8
|
-
* This file is part of Fonoster
|
|
9
|
-
*
|
|
10
|
-
* Licensed under the MIT License (the "License");
|
|
11
|
-
* you may not use this file except in compliance with
|
|
12
|
-
* the License. You may obtain a copy of the License at
|
|
13
|
-
*
|
|
14
|
-
* https://opensource.org/licenses/MIT
|
|
15
|
-
*
|
|
16
|
-
* Unless required by applicable law or agreed to in writing, software
|
|
17
|
-
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
18
|
-
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
19
|
-
* See the License for the specific language governing permissions and
|
|
20
|
-
* limitations under the License.
|
|
21
|
-
*/
|
|
22
|
-
const jwt_decode_1 = require("jwt-decode");
|
|
23
|
-
function decodeToken(token) {
|
|
24
|
-
return (0, jwt_decode_1.jwtDecode)(token);
|
|
25
|
-
}
|
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.getAccessKeyIdFromCall = getAccessKeyIdFromCall;
|
|
4
|
-
function getAccessKeyIdFromCall(call) {
|
|
5
|
-
var _a;
|
|
6
|
-
const metadata = call.metadata.getMap();
|
|
7
|
-
return (_a = metadata["accesskeyid"]) === null || _a === void 0 ? void 0 : _a.toString();
|
|
8
|
-
}
|
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.getTokenFromCall = getTokenFromCall;
|
|
4
|
-
function getTokenFromCall(call) {
|
|
5
|
-
var _a;
|
|
6
|
-
const metadata = call.metadata.getMap();
|
|
7
|
-
return (_a = metadata["token"]) === null || _a === void 0 ? void 0 : _a.toString();
|
|
8
|
-
}
|
package/dist/utils/hasAccess.js
DELETED
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.hasAccess = hasAccess;
|
|
4
|
-
const roles_1 = require("../roles");
|
|
5
|
-
// This method only checks if the role has access to the path
|
|
6
|
-
function hasAccess(access, grpcPath) {
|
|
7
|
-
const roleList = access.map((a) => a.role);
|
|
8
|
-
return roleList.some((r) => roles_1.roles.find((role) => role.name === r && role.access.includes(grpcPath)));
|
|
9
|
-
}
|
|
@@ -1,51 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
exports.isValidToken = isValidToken;
|
|
7
|
-
/*
|
|
8
|
-
* Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
|
|
9
|
-
* http://github.com/fonoster/fonoster
|
|
10
|
-
*
|
|
11
|
-
* This file is part of Fonoster
|
|
12
|
-
*
|
|
13
|
-
* Licensed under the MIT License (the "License");
|
|
14
|
-
* you may not use this file except in compliance with
|
|
15
|
-
* the License. You may obtain a copy of the License at
|
|
16
|
-
*
|
|
17
|
-
* https://opensource.org/licenses/MIT
|
|
18
|
-
*
|
|
19
|
-
* Unless required by applicable law or agreed to in writing, software
|
|
20
|
-
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
21
|
-
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
22
|
-
* See the License for the specific language governing permissions and
|
|
23
|
-
* limitations under the License.
|
|
24
|
-
*/
|
|
25
|
-
const logger_1 = require("@fonoster/logger");
|
|
26
|
-
const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
|
|
27
|
-
const JsonWebErrorEnum_1 = require("../JsonWebErrorEnum");
|
|
28
|
-
const logger = (0, logger_1.getLogger)({ service: "identity", filePath: __filename });
|
|
29
|
-
function isValidToken(token, secret) {
|
|
30
|
-
try {
|
|
31
|
-
const decoded = jsonwebtoken_1.default.verify(token, secret);
|
|
32
|
-
const currentTime = Math.floor(Date.now() / 1000);
|
|
33
|
-
if (decoded.exp <= currentTime) {
|
|
34
|
-
logger.verbose("token expired", { exp: decoded.exp, currentTime });
|
|
35
|
-
return false;
|
|
36
|
-
}
|
|
37
|
-
return true;
|
|
38
|
-
}
|
|
39
|
-
catch (error) {
|
|
40
|
-
if (error.name === JsonWebErrorEnum_1.JsonWebErrorEnum.JsonWebTokenError) {
|
|
41
|
-
logger.verbose("invalid JWT token", { token });
|
|
42
|
-
}
|
|
43
|
-
else if (error.name === JsonWebErrorEnum_1.JsonWebErrorEnum.TokenExpiredError) {
|
|
44
|
-
logger.verbose("token expired", { token });
|
|
45
|
-
}
|
|
46
|
-
else {
|
|
47
|
-
logger.verbose("unexpected JWT error:", error);
|
|
48
|
-
}
|
|
49
|
-
return false;
|
|
50
|
-
}
|
|
51
|
-
}
|