@fraym/auth 0.4.0 → 0.5.0

package/README.md

@@ -21,6 +21,11 @@ Use the `auth` cli command to automatically apply your permissions to the auth s
 
 You can specify the address (and port) of the auth service instance you use in the `AUTH_SERVER_ADDRESS` env variable (default: `127.0.0.1:9000`).
 
+In case of scopes api you need to configure the HTTP api:
+
+-   `AUTH_HTTP_SERVER_ADDRESS`: Http api url of the auth service (default: `http://127.0.0.1`)
+-   `AUTH_HTTP_API_TOKEN`: The value of that token has to match the token configured in the auth service
+
 The needed schema for auth is a simple enum containing all your permissions. Example:
 
 ```graphql
@@ -36,6 +41,8 @@ Use a `.env` file or env variables to configure cte clients and the command:
 
 ```env
 AUTH_SERVER_ADDRESS=127.0.0.1:9000
+AUTH_HTTP_SERVER_ADDRESS=http://127.0.0.1
+AUTH_HTTP_API_TOKEN=
 ```
 
 ## JWT functions
@@ -100,6 +107,8 @@ The `clientId` paramenter is optional. If none is given the default client will
 const scopes = await managementClient.getScopes();
 ```
 
+Note: you need to configure `AUTH_HTTP_SERVER_ADDRESS` and `AUTH_HTTP_API_TOKEN` to use this function.
+
 ## Create a scope (permission)
 
 The `clientId` paramenter is optional. If none is given the default client will be used.
@@ -108,6 +117,8 @@ The `clientId` paramenter is optional. If none is given the default client will
 await managementClient.createScope("PERMISSION_NAME");
 ```
 
+Note: you need to configure `AUTH_HTTP_SERVER_ADDRESS` and `AUTH_HTTP_API_TOKEN` to use this function.
+
 ## Delete a scope (permission)
 
 The `clientId` paramenter is optional. If none is given the default client will be used.
@@ -116,6 +127,8 @@ The `clientId` paramenter is optional. If none is given the default client will
 await managementClient.deleteScope("PERMISSION_NAME");
 ```
 
+Note: you need to configure `AUTH_HTTP_SERVER_ADDRESS` and `AUTH_HTTP_API_TOKEN` to use this function.
+
 ## Get all roles
 
 ```typescript

package/dist/cmd/auth.js

@@ -17,21 +17,31 @@ const run = async () => {
         .config({
         schemaGlob: "./src/**/*.graphql",
         serverAddress: "127.0.0.1:9000",
+        httpServerAddress: "http://127.0.0.1",
+        httpApiToken: "",
     })
         .pkgConf("auth").argv;
     let schemaGlob = argv.schemaGlob;
     let serverAddress = argv.serverAddress;
+    let httpServerAddress = argv.httpServerAddress;
+    let httpApiToken = argv.httpApiToken;
     if (process.env.AUTH_SCHEMA_GLOB) {
         schemaGlob = process.env.AUTH_SCHEMA_GLOB;
     }
     if (process.env.AUTH_SERVER_ADDRESS) {
         serverAddress = process.env.AUTH_SERVER_ADDRESS;
     }
+    if (process.env.AUTH_HTTP_SERVER_ADDRESS) {
+        httpServerAddress = process.env.AUTH_HTTP_SERVER_ADDRESS;
+    }
+    if (process.env.AUTH_HTTP_API_TOKEN) {
+        httpApiToken = process.env.AUTH_HTTP_API_TOKEN;
+    }
     const schema = await (0, load_1.loadSchema)(`${schemaGlob}`, {
         loaders: [new graphql_file_loader_1.GraphQLFileLoader()],
     });
     const permissions = getSchemaPermissions(schema);
-    await migratePermissions(permissions, serverAddress);
+    await migratePermissions(permissions, serverAddress, httpServerAddress, httpApiToken);
 };
 const getSchemaPermissions = (schema) => {
     const permissions = [];
@@ -50,8 +60,12 @@ const getSchemaPermissions = (schema) => {
     });
     return permissions;
 };
-const migratePermissions = async (permissions, serverAddress) => {
-    const managementClient = await (0, client_1.newManagementClient)({ serverAddress });
+const migratePermissions = async (permissions, serverAddress, httpServerAddress, httpApiToken) => {
+    const managementClient = await (0, client_1.newManagementClient)({
+        serverAddress,
+        httpServerAddress,
+        httpApiToken,
+    });
     const existingPermissions = (await managementClient.getScopes()).filter(permission => !permission.startsWith("FRAYM_"));
     console.log("existingPermissions", existingPermissions);
     const permissionsToCreate = permissions.filter(permission => !existingPermissions.includes(permission));

package/dist/config/config.d.ts

@@ -1,5 +1,7 @@
 export interface ClientConfig {
     serverAddress: string;
+    httpServerAddress: string;
+    httpApiToken: string;
     keepaliveInterval?: number;
     keepaliveTimeout?: number;
 }

package/dist/config/config.js

@@ -3,9 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.useConfigDefaults = exports.getEnvConfig = void 0;
 const dotenv_1 = require("dotenv");
 const getEnvConfig = () => {
-    var _a;
+    var _a, _b, _c;
     (0, dotenv_1.config)();
     const serverAddress = (_a = process.env.AUTH_SERVER_ADDRESS) !== null && _a !== void 0 ? _a : "";
+    const httpServerAddress = (_b = process.env.AUTH_HTTP_SERVER_ADDRESS) !== null && _b !== void 0 ? _b : "";
+    const httpApiToken = (_c = process.env.AUTH_HTTP_API_TOKEN) !== null && _c !== void 0 ? _c : "";
     let keepaliveInterval;
     let keepaliveTimeout;
     const keepaliveIntervalString = process.env.AUTH_CONNECTION_KEEPALIVE_INTERVAL;
@@ -18,6 +20,8 @@ const getEnvConfig = () => {
     }
     return {
         serverAddress,
+        httpServerAddress,
+        httpApiToken,
         keepaliveInterval,
         keepaliveTimeout,
     };
@@ -30,6 +34,8 @@ const useConfigDefaults = (config) => {
     }
     return {
         serverAddress: config.serverAddress,
+        httpServerAddress: config.httpServerAddress,
+        httpApiToken: config.httpApiToken,
         keepaliveTimeout: (_a = config.keepaliveTimeout) !== null && _a !== void 0 ? _a : 3 * 1000,
         keepaliveInterval: (_b = config.keepaliveInterval) !== null && _b !== void 0 ? _b : 40 * 1000,
     };

package/dist/index.d.ts

@@ -1,3 +1,2 @@
 export * from "./management/client";
 export { ClientConfig } from "./config/config";
-export * from "./util/token";

package/dist/index.js

@@ -15,4 +15,3 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./management/client"), exports);
-__exportStar(require("./util/token"), exports);

package/dist/management/client.js

@@ -15,20 +15,20 @@ const getUsers_1 = require("./getUsers");
 const updateUser_1 = require("./updateUser");
 const upsertRole_1 = require("./upsertRole");
 const newManagementClient = async (config) => {
-    config = (0, config_1.useConfigDefaults)(config);
-    const serviceClient = new auth_proto_1.ManagementServiceClient(config.serverAddress, grpc_js_1.credentials.createInsecure(), {
-        "grpc.keepalive_time_ms": config.keepaliveInterval,
-        "grpc.keepalive_timeout_ms": config.keepaliveTimeout,
+    const currentConfig = (0, config_1.useConfigDefaults)(config);
+    const serviceClient = new auth_proto_1.ManagementServiceClient(currentConfig.serverAddress, grpc_js_1.credentials.createInsecure(), {
+        "grpc.keepalive_time_ms": currentConfig.keepaliveInterval,
+        "grpc.keepalive_timeout_ms": currentConfig.keepaliveTimeout,
         "grpc.keepalive_permit_without_calls": 1,
     });
     const createScope = async (name, clientId = "") => {
-        await (0, createScope_1.createNewScope)(name, clientId, serviceClient);
+        await (0, createScope_1.createNewScope)(name, clientId, currentConfig);
     };
     const deleteScope = async (name, clientId = "") => {
-        await (0, deleteScope_1.deleteExistingScope)(name, clientId, serviceClient);
+        await (0, deleteScope_1.deleteExistingScope)(name, clientId, currentConfig);
     };
     const getScopes = async (clientId = "") => {
-        return await (0, getScopes_1.getAllScopes)(clientId, serviceClient);
+        return await (0, getScopes_1.getAllScopes)(clientId, currentConfig);
     };
     const upsertRole = async (tenantId, allowedScopes, id = "") => {
         return await (0, upsertRole_1.createOrUpdateRole)(tenantId, id, allowedScopes, serviceClient);

package/dist/management/createScope.d.ts

@@ -1,2 +1,2 @@
-import { ManagementServiceClient } from "@fraym/auth-proto";
-export declare const createNewScope: (name: string, clientId: string, serviceClient: ManagementServiceClient) => Promise<void>;
+import { ClientConfig } from "config/config";
+export declare const createNewScope: (name: string, clientId: string, config: ClientConfig) => Promise<void>;

package/dist/management/createScope.js

@@ -1,18 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createNewScope = void 0;
-const createNewScope = async (name, clientId, serviceClient) => {
-    return new Promise((resolve, reject) => {
-        serviceClient.createScope({
-            name,
+const createNewScope = async (name, clientId, config) => {
+    await fetch(`${config.httpServerAddress}/management/scopes`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${config.httpApiToken}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
             clientId,
-        }, error => {
-            if (error) {
-                reject(error.message);
-                return;
-            }
-            resolve();
-        });
+            name,
+        }),
     });
 };
 exports.createNewScope = createNewScope;

package/dist/management/deleteScope.d.ts

@@ -1,2 +1,2 @@
-import { ManagementServiceClient } from "@fraym/auth-proto";
-export declare const deleteExistingScope: (name: string, clientId: string, serviceClient: ManagementServiceClient) => Promise<void>;
+import { ClientConfig } from "config/config";
+export declare const deleteExistingScope: (name: string, clientId: string, config: ClientConfig) => Promise<void>;

package/dist/management/deleteScope.js

@@ -1,18 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deleteExistingScope = void 0;
-const deleteExistingScope = async (name, clientId, serviceClient) => {
-    return new Promise((resolve, reject) => {
-        serviceClient.deleteScope({
-            name,
+const deleteExistingScope = async (name, clientId, config) => {
+    await fetch(`${config.httpServerAddress}/management/scopes`, {
+        method: "DELETE",
+        headers: {
+            Authorization: `Bearer ${config.httpApiToken}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
             clientId,
-        }, error => {
-            if (error) {
-                reject(error.message);
-                return;
-            }
-            resolve();
-        });
+            name,
+        }),
     });
 };
 exports.deleteExistingScope = deleteExistingScope;

package/dist/management/getScopes.d.ts

@@ -1,2 +1,2 @@
-import { ManagementServiceClient } from "@fraym/auth-proto";
-export declare const getAllScopes: (clientId: string, serviceClient: ManagementServiceClient) => Promise<string[]>;
+import { ClientConfig } from "config/config";
+export declare const getAllScopes: (clientId: string, config: ClientConfig) => Promise<string[]>;

package/dist/management/getScopes.js

@@ -1,17 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAllScopes = void 0;
-const getAllScopes = async (clientId, serviceClient) => {
-    return new Promise((resolve, reject) => {
-        serviceClient.getScopes({
+const getAllScopes = async (clientId, config) => {
+    const response = await fetch(`${config.httpServerAddress}/management/scopes/list`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${config.httpApiToken}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
             clientId,
-        }, (error, response) => {
-            if (error) {
-                reject(error.message);
-                return;
-            }
-            resolve(response.scopes);
-        });
+        }),
     });
+    const data = await response.json();
+    return data.scopes;
 };
 exports.getAllScopes = getAllScopes;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@fraym/auth",
-    "version": "0.4.0",
+    "version": "0.5.0",
     "license": "UNLICENSED",
     "homepage": "https://github.com/fraym/auth-nodejs",
     "repository": {