@friggframework/core 2.0.0-next.8 → 2.0.0-next.80

package/database/models/Token.js

@@ -1,70 +0,0 @@
-const { mongoose } = require('../mongoose');
-const bcrypt = require('bcryptjs');
-
-const collectionName = 'Token';
-const decimals = 10;
-
-const schema = new mongoose.Schema({
-    token: { type: String, required: true },
-    created: { type: Date, default: Date.now },
-    expires: { type: Date },
-    user: { type: mongoose.Schema.Types.ObjectId, ref: 'User', required: true },
-});
-
-schema.static({
-    createTokenWithExpire: async function (userId, rawToken, minutes) {
-        // Create user token
-        let tokenHash = await bcrypt.hashSync(rawToken, parseInt(decimals));
-
-        let session = {
-            token: tokenHash,
-            expires: new Date(Date.now() + minutes * 60000).toISOString(),
-            user: userId,
-        };
-
-        return this.create(session);
-    },
-    // Takes in a token object and  that has been created in the database and the raw token value.
-    // Returns a json of just the token and id to return to the browser
-    createJSONToken: function (token, rawToken) {
-        let returnArr = {
-            id: token.id,
-            token: rawToken,
-        };
-        return JSON.stringify(returnArr);
-    },
-    // Takes in a token object and  that has been created in the database and the raw token value.
-    // Returns a base64 buffer of just the token and id to return to the browser
-    createBase64BufferToken: function (token, rawToken) {
-        let jsonVal = Token.createJSONToken(token, rawToken);
-        return Buffer.from(jsonVal).toString('base64');
-    },
-    getJSONTokenFromBase64BufferToken: function (buffer) {
-        let tokenStr = Buffer.from(buffer.trim(), 'base64').toString('ascii');
-        return JSON.parse(tokenStr);
-    },
-
-    // Takes in a JSON Token with id and token in it and verifies the token
-    // is valid from the database. If it is not va
-    validateAndGetTokenFromJSONToken: async function (tokenObj) {
-        let sessionToken = await this.findById(tokenObj.id);
-        if (sessionToken) {
-            if (
-                !(await bcrypt.compareSync(tokenObj.token, sessionToken.token))
-            ) {
-                throw new Error('Invalid Token: Token does not match');
-            }
-            if (new Date(sessionToken.expires) < new Date()) {
-                throw new Error('Invalid Token: Token is expired');
-            }
-
-            return sessionToken;
-        } else {
-            throw new Error('Invalid Token: Token does not exist');
-        }
-    }
-})
-
-const Token = mongoose.models.Token || mongoose.model(collectionName, schema);
-
-module.exports = { Token };

package/database/models/UserModel.js

@@ -1,7 +0,0 @@
-const { mongoose } = require('../mongoose');
-
-const schema = new mongoose.Schema({}, {timestamps: true})
-
-const UserModel = mongoose.models.User || mongoose.model('User',schema)
-
-module.exports = { UserModel: UserModel };

package/database/models/WebsocketConnection.js

@@ -1,49 +0,0 @@
-const { mongoose } = require('../mongoose');
-const AWS = require('aws-sdk');
-
-const schema = new mongoose.Schema({
-    connectionId: { type: mongoose.Schema.Types.String },
-});
-
-// Add a static method to get active connections
-schema.statics.getActiveConnections = async function () {
-    try {
-        const connections = await this.find({}, 'connectionId');
-        return connections.map((conn) => ({
-            connectionId: conn.connectionId,
-            send: async (data) => {
-                const apigwManagementApi = new AWS.ApiGatewayManagementApi({
-                    apiVersion: '2018-11-29',
-                    endpoint: process.env.WEBSOCKET_API_ENDPOINT,
-                });
-
-                try {
-                    await apigwManagementApi
-                        .postToConnection({
-                            ConnectionId: conn.connectionId,
-                            Data: JSON.stringify(data),
-                        })
-                        .promise();
-                } catch (error) {
-                    if (error.statusCode === 410) {
-                        console.log(`Stale connection ${conn.connectionId}`);
-                        await this.deleteOne({
-                            connectionId: conn.connectionId,
-                        });
-                    } else {
-                        throw error;
-                    }
-                }
-            },
-        }));
-    } catch (error) {
-        console.error('Error getting active connections:', error);
-        throw error;
-    }
-};
-
-const WebsocketConnection =
-    mongoose.models.WebsocketConnection ||
-    mongoose.model('WebsocketConnection', schema);
-
-module.exports = { WebsocketConnection };

package/database/mongo.js

@@ -1,45 +0,0 @@
-// Best Practices Connecting from AWS Lambda:
-// https://dev.to/adnanrahic/building-a-serverless-rest-api-with-nodejs-and-mongodb-43db
-// https://mongoosejs.com/docs/lambda.html
-// https://www.mongodb.com/blog/post/optimizing-aws-lambda-performance-with-mongodb-atlas-and-nodejs
-const { Encrypt } = require('../encrypt');
-const { mongoose } = require('./mongoose');
-const { debug, flushDebugLog } = require('../logs');
-
-mongoose.plugin(Encrypt);
-mongoose.set('applyPluginsToDiscriminators', true); // Needed for LHEncrypt
-
-// Buffering means mongoose will queue up operations if it gets
-// With serverless, better to fail fast if not connected.
-// disconnected from MongoDB and send them when it reconnects.
-const mongoConfig = {
-    useNewUrlParser: true,
-    bufferCommands: false, // Disable mongoose buffering
-    autoCreate: false, // Disable because auto creation does not work without buffering
-    useUnifiedTopology: true,
-    serverSelectionTimeoutMS: 5000,
-};
-
-const checkIsConnected = () => mongoose.connection?.readyState > 0;
-
-const connectToDatabase = async () => {
-    if (checkIsConnected()) {
-        debug('=> using existing database connection');
-        return;
-    }
-
-    debug('=> using new database connection');
-    await mongoose.connect(process.env.MONGO_URI, mongoConfig);
-    debug('Connection state:',  mongoose.STATES[mongoose.connection.readyState]);
-    mongoose.connection.on('error', (error) => flushDebugLog(error));
-};
-
-const disconnectFromDatabase = async () => mongoose.disconnect();
-
-const createObjectId = () => new mongoose.Types.ObjectId();
-
-module.exports = {
-    connectToDatabase,
-    disconnectFromDatabase,
-    createObjectId,
-};

package/database/mongoose.js

@@ -1,5 +0,0 @@
-const mongoose = require('mongoose');
-mongoose.set('strictQuery', false);
-module.exports = {
-    mongoose
-}

package/encrypt/Cryptor.test.js

@@ -1,32 +0,0 @@
-const { Cryptor } = require('./Cryptor');
-
-describe('Cryptor', () => {
-    describe('Permutations', () => {
-        it('calculates permutations correctly', async () => {
-            // Given a nested field, we want all possible paths that could access it.
-            const cryptor = new Cryptor({ fields: ['a.b.c.d', 'e'] });
-            expect(cryptor.permutationsByField).toEqual({
-                'a.b.c.d': [
-                    ['a', 'b', 'c', 'd'],
-                    ['a', 'b', 'c.d'],
-                    ['a', 'b.c', 'd'],
-                    ['a', 'b.c.d'],
-                    ['a.b', 'c', 'd'],
-                    ['a.b', 'c.d'],
-                    ['a.b.c', 'd'],
-                    ['a.b.c.d'],
-                ],
-                e: [['e']],
-            });
-        });
-    });
-
-    describe('Keys', () => {
-        it('raises error on missing environment', () => {
-            const cryptor = new Cryptor({ fields: ['a.b.c.d', 'e'] });
-            expect(cryptor.getKeyFromEnvironment).toThrow(
-                'No encryption key found with ID "undefined"'
-            );
-        });
-    });
-});

package/encrypt/encrypt.js

@@ -1,132 +0,0 @@
-const { Cryptor } = require('./Cryptor');
-
-const updateOneEvents = [
-    'updateOne',
-    'replaceOne',
-    'findOneAndUpdate',
-    'findOneAndReplace',
-];
-const findOneEvents = [
-    'findOne',
-    'findOneAndDelete',
-    'findOneAndRemove',
-    'findOneAndUpdate',
-    'findOneAndReplace',
-];
-
-const shouldBypassEncryption = (STAGE) => {
-    const defaultBypassStages = ['dev', 'test', 'local'];
-    const bypassStageEnv = process.env.BYPASS_ENCRYPTION_STAGE;
-    // If the env is set to anything or an empty string, use the env. Otherwise, use the default array
-    const useEnv = !String(bypassStageEnv) || !!bypassStageEnv;
-    const bypassStages = useEnv
-        ? bypassStageEnv.split(',').map((stage) => stage.trim())
-        : defaultBypassStages;
-    return bypassStages.includes(STAGE);
-};
-
-// The Mongoose plug-in function
-function Encrypt(schema, options) {
-    const { STAGE, KMS_KEY_ARN, AES_KEY_ID } = process.env;
-
-    if (shouldBypassEncryption(STAGE)) {
-        return;
-    }
-
-    if (KMS_KEY_ARN && AES_KEY_ID) {
-        throw new Error(
-            'Local and AWS encryption keys are both set in the environment.'
-        );
-    }
-
-    const fields = Object.values(schema.paths)
-        .map(({ path, options }) => (options.lhEncrypt === true ? path : ''))
-        .filter(Boolean);
-
-    if (!fields.length) {
-        return;
-    }
-
-    const cryptor = new Cryptor({
-        // Use AWS if the CMK is present
-        shouldUseAws: !!KMS_KEY_ARN,
-        // Find all the fields in the schema with lhEncrypt === true
-        fields: fields,
-    });
-
-    // ---------------------------------------------
-    // ### Encrypt fields before save/update/insert.
-    // ---------------------------------------------
-
-    schema.pre('save', async function encryptionPreSave() {
-        // `this` will be a doc
-        await cryptor.encryptFieldsInDocuments([this]);
-    });
-
-    schema.pre(
-        'insertMany',
-        async function encryptionPreInsertMany(_, docs, options) {
-            // `this` will be the model
-            if (options?.rawResult) {
-                throw new Error(
-                    'Raw result not supported for insertMany with Encrypt plugin'
-                );
-            }
-
-            await cryptor.encryptFieldsInDocuments(docs);
-        }
-    );
-
-    schema.pre(updateOneEvents, async function encryptionPreUpdateOne() {
-        // `this` will be a query
-        await cryptor.encryptFieldsInQuery(this);
-    });
-
-    schema.pre('updateMany', async function encryptionPreUpdateMany() {
-        // `this` will be a query
-        cryptor.expectNotToUpdateManyEncrypted(this.getUpdate());
-    });
-
-    schema.pre('update', async function encryptionPreUpdate() {
-        // `this` will be a query
-        const { multiple } = this.getOptions();
-
-        if (multiple) {
-            cryptor.expectNotToUpdateManyEncrypted(this.getUpdate());
-            return;
-        }
-
-        await cryptor.encryptFieldsInQuery(this);
-    });
-
-    // --------------------------------------------
-    // ### Decrypt documents after they are loaded.
-    // --------------------------------------------
-    schema.post('save', async function encryptionPreSave() {
-        // `this` will be a doc
-        await cryptor.decryptFieldsInDocuments([this]);
-    });
-
-    schema.post(findOneEvents, async function encryptionPostFindOne(doc) {
-        // `this` will be a query
-        const { rawResult } = this.getOptions();
-
-        if (rawResult) {
-            return;
-        }
-
-        await cryptor.decryptFieldsInDocuments([doc]);
-    });
-
-    schema.post('find', async function encryptionPostFind(docs) {
-        // `this` will be a query
-        await cryptor.decryptFieldsInDocuments(docs);
-    });
-
-    schema.post('insertMany', async function encryptionPostInsertMany(docs) {
-        // `this` will be the model
-        await cryptor.decryptFieldsInDocuments(docs);
-    });
-}
-
-module.exports = { Encrypt };