@furystack/rest-service 12.3.5 → 14.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +55 -0
- package/README.md +47 -28
- package/esm/actions/get-current-user.spec.js +10 -6
- package/esm/actions/get-current-user.spec.js.map +1 -1
- package/esm/actions/index.d.ts +0 -1
- package/esm/actions/index.d.ts.map +1 -1
- package/esm/actions/index.js +0 -1
- package/esm/actions/index.js.map +1 -1
- package/esm/actions/is-authenticated.spec.js +10 -6
- package/esm/actions/is-authenticated.spec.js.map +1 -1
- package/esm/actions/logout-action.spec.js +11 -9
- package/esm/actions/logout-action.spec.js.map +1 -1
- package/esm/actions/logout.js +1 -1
- package/esm/actions/logout.js.map +1 -1
- package/esm/actions/password-login-action.js +1 -1
- package/esm/actions/password-login-action.js.map +1 -1
- package/esm/actions/password-login-action.spec.js +23 -28
- package/esm/actions/password-login-action.spec.js.map +1 -1
- package/esm/authenticate.js +1 -1
- package/esm/authenticate.js.map +1 -1
- package/esm/authenticate.spec.js +41 -33
- package/esm/authenticate.spec.js.map +1 -1
- package/esm/authorize.spec.js +34 -29
- package/esm/authorize.spec.js.map +1 -1
- package/esm/endpoint-generators/create-delete-endpoint.d.ts +6 -11
- package/esm/endpoint-generators/create-delete-endpoint.d.ts.map +1 -1
- package/esm/endpoint-generators/create-delete-endpoint.js +7 -11
- package/esm/endpoint-generators/create-delete-endpoint.js.map +1 -1
- package/esm/endpoint-generators/create-delete-endpoint.spec.js +14 -21
- package/esm/endpoint-generators/create-delete-endpoint.spec.js.map +1 -1
- package/esm/endpoint-generators/create-get-collection-endpoint.d.ts +11 -11
- package/esm/endpoint-generators/create-get-collection-endpoint.d.ts.map +1 -1
- package/esm/endpoint-generators/create-get-collection-endpoint.js +13 -12
- package/esm/endpoint-generators/create-get-collection-endpoint.js.map +1 -1
- package/esm/endpoint-generators/create-get-collection-endpoint.spec.js +43 -70
- package/esm/endpoint-generators/create-get-collection-endpoint.spec.js.map +1 -1
- package/esm/endpoint-generators/create-get-entity-endpoint.d.ts +6 -11
- package/esm/endpoint-generators/create-get-entity-endpoint.d.ts.map +1 -1
- package/esm/endpoint-generators/create-get-entity-endpoint.js +7 -11
- package/esm/endpoint-generators/create-get-entity-endpoint.js.map +1 -1
- package/esm/endpoint-generators/create-get-entity-endpoint.spec.js +16 -33
- package/esm/endpoint-generators/create-get-entity-endpoint.spec.js.map +1 -1
- package/esm/endpoint-generators/create-get-openapi-document-action.d.ts +1 -15
- package/esm/endpoint-generators/create-get-openapi-document-action.d.ts.map +1 -1
- package/esm/endpoint-generators/create-get-openapi-document-action.js +1 -24
- package/esm/endpoint-generators/create-get-openapi-document-action.js.map +1 -1
- package/esm/endpoint-generators/create-get-schema-action.d.ts +1 -1
- package/esm/endpoint-generators/create-get-schema-action.d.ts.map +1 -1
- package/esm/endpoint-generators/create-get-schema-action.js.map +1 -1
- package/esm/endpoint-generators/create-patch-endpoint.d.ts +7 -13
- package/esm/endpoint-generators/create-patch-endpoint.d.ts.map +1 -1
- package/esm/endpoint-generators/create-patch-endpoint.js +8 -13
- package/esm/endpoint-generators/create-patch-endpoint.js.map +1 -1
- package/esm/endpoint-generators/create-patch-endpoint.spec.js +10 -17
- package/esm/endpoint-generators/create-patch-endpoint.spec.js.map +1 -1
- package/esm/endpoint-generators/create-post-endpoint.d.ts +7 -13
- package/esm/endpoint-generators/create-post-endpoint.d.ts.map +1 -1
- package/esm/endpoint-generators/create-post-endpoint.js +8 -13
- package/esm/endpoint-generators/create-post-endpoint.js.map +1 -1
- package/esm/endpoint-generators/create-post-endpoint.spec.js +41 -14
- package/esm/endpoint-generators/create-post-endpoint.spec.js.map +1 -1
- package/esm/endpoint-generators/utils.d.ts +17 -2
- package/esm/endpoint-generators/utils.d.ts.map +1 -1
- package/esm/endpoint-generators/utils.js +33 -20
- package/esm/endpoint-generators/utils.js.map +1 -1
- package/esm/endpoint-generators/with-schema-and-openapi-action.d.ts +0 -2
- package/esm/endpoint-generators/with-schema-and-openapi-action.d.ts.map +1 -1
- package/esm/get-schema-from-api.d.ts +1 -1
- package/esm/get-schema-from-api.d.ts.map +1 -1
- package/esm/get-schema-from-api.spec.js.map +1 -1
- package/esm/helpers.d.ts +53 -87
- package/esm/helpers.d.ts.map +1 -1
- package/esm/helpers.js +91 -92
- package/esm/helpers.js.map +1 -1
- package/esm/helpers.spec.d.ts +2 -1
- package/esm/helpers.spec.d.ts.map +1 -1
- package/esm/helpers.spec.js +41 -38
- package/esm/helpers.spec.js.map +1 -1
- package/esm/http-authentication-settings.d.ts +35 -12
- package/esm/http-authentication-settings.d.ts.map +1 -1
- package/esm/http-authentication-settings.js +21 -29
- package/esm/http-authentication-settings.js.map +1 -1
- package/esm/http-server-pool.d.ts +64 -0
- package/esm/http-server-pool.d.ts.map +1 -0
- package/esm/http-server-pool.js +95 -0
- package/esm/http-server-pool.js.map +1 -0
- package/esm/http-server-pool.spec.d.ts +2 -0
- package/esm/http-server-pool.spec.d.ts.map +1 -0
- package/esm/http-server-pool.spec.js +193 -0
- package/esm/http-server-pool.spec.js.map +1 -0
- package/esm/http-user-context.d.ts +31 -44
- package/esm/http-user-context.d.ts.map +1 -1
- package/esm/http-user-context.js +76 -95
- package/esm/http-user-context.js.map +1 -1
- package/esm/http-user-context.spec.d.ts +8 -2
- package/esm/http-user-context.spec.d.ts.map +1 -1
- package/esm/http-user-context.spec.js +189 -337
- package/esm/http-user-context.spec.js.map +1 -1
- package/esm/index.d.ts +6 -4
- package/esm/index.d.ts.map +1 -1
- package/esm/index.js +6 -4
- package/esm/index.js.map +1 -1
- package/esm/login-response-strategy.d.ts +11 -10
- package/esm/login-response-strategy.d.ts.map +1 -1
- package/esm/login-response-strategy.js +7 -6
- package/esm/login-response-strategy.js.map +1 -1
- package/esm/login-response-strategy.spec.js +25 -29
- package/esm/login-response-strategy.spec.js.map +1 -1
- package/esm/openapi/generate-openapi-document.d.ts +0 -8
- package/esm/openapi/generate-openapi-document.d.ts.map +1 -1
- package/esm/openapi/generate-openapi-document.js +0 -2
- package/esm/openapi/generate-openapi-document.js.map +1 -1
- package/esm/proxy-manager.spec.js +152 -176
- package/esm/proxy-manager.spec.js.map +1 -1
- package/esm/proxy-runtime.d.ts +27 -0
- package/esm/proxy-runtime.d.ts.map +1 -0
- package/esm/proxy-runtime.js +45 -0
- package/esm/proxy-runtime.js.map +1 -0
- package/esm/proxy-runtime.spec.d.ts +2 -0
- package/esm/proxy-runtime.spec.d.ts.map +1 -0
- package/esm/proxy-runtime.spec.js +39 -0
- package/esm/proxy-runtime.spec.js.map +1 -0
- package/esm/rest-api-runtime.d.ts +76 -0
- package/esm/rest-api-runtime.d.ts.map +1 -0
- package/esm/rest-api-runtime.js +131 -0
- package/esm/rest-api-runtime.js.map +1 -0
- package/esm/rest-api-runtime.spec.d.ts +2 -0
- package/esm/rest-api-runtime.spec.d.ts.map +1 -0
- package/esm/rest-api-runtime.spec.js +58 -0
- package/esm/rest-api-runtime.spec.js.map +1 -0
- package/esm/rest-service.integration.spec.d.ts +1 -1
- package/esm/rest-service.integration.spec.d.ts.map +1 -1
- package/esm/rest-service.integration.spec.js +60 -82
- package/esm/rest-service.integration.spec.js.map +1 -1
- package/esm/rest.integration.test.js +26 -84
- package/esm/rest.integration.test.js.map +1 -1
- package/esm/server-telemetry.d.ts +57 -0
- package/esm/server-telemetry.d.ts.map +1 -0
- package/esm/server-telemetry.js +26 -0
- package/esm/server-telemetry.js.map +1 -0
- package/esm/server-telemetry.spec.d.ts +2 -0
- package/esm/server-telemetry.spec.d.ts.map +1 -0
- package/esm/server-telemetry.spec.js +52 -0
- package/esm/server-telemetry.spec.js.map +1 -0
- package/esm/static-server-manager.spec.js +60 -125
- package/esm/static-server-manager.spec.js.map +1 -1
- package/esm/static-site-runtime.d.ts +21 -0
- package/esm/static-site-runtime.d.ts.map +1 -0
- package/esm/static-site-runtime.js +48 -0
- package/esm/static-site-runtime.js.map +1 -0
- package/esm/static-site-runtime.spec.d.ts +2 -0
- package/esm/static-site-runtime.spec.d.ts.map +1 -0
- package/esm/static-site-runtime.spec.js +30 -0
- package/esm/static-site-runtime.spec.js.map +1 -0
- package/esm/user-store.d.ts +39 -0
- package/esm/user-store.d.ts.map +1 -0
- package/esm/user-store.js +62 -0
- package/esm/user-store.js.map +1 -0
- package/esm/user-store.spec.d.ts +2 -0
- package/esm/user-store.spec.d.ts.map +1 -0
- package/esm/user-store.spec.js +72 -0
- package/esm/user-store.spec.js.map +1 -0
- package/esm/validate.integration.spec.js +26 -83
- package/esm/validate.integration.spec.js.map +1 -1
- package/package.json +8 -8
- package/src/actions/get-current-user.spec.ts +11 -10
- package/src/actions/index.ts +0 -1
- package/src/actions/is-authenticated.spec.ts +12 -7
- package/src/actions/logout-action.spec.ts +12 -12
- package/src/actions/logout.ts +1 -1
- package/src/actions/password-login-action.spec.ts +30 -30
- package/src/actions/password-login-action.ts +1 -1
- package/src/authenticate.spec.ts +45 -51
- package/src/authenticate.ts +1 -1
- package/src/authorize.spec.ts +37 -39
- package/src/endpoint-generators/create-delete-endpoint.spec.ts +16 -24
- package/src/endpoint-generators/create-delete-endpoint.ts +11 -17
- package/src/endpoint-generators/create-get-collection-endpoint.spec.ts +45 -78
- package/src/endpoint-generators/create-get-collection-endpoint.ts +17 -19
- package/src/endpoint-generators/create-get-entity-endpoint.spec.ts +17 -33
- package/src/endpoint-generators/create-get-entity-endpoint.ts +11 -17
- package/src/endpoint-generators/create-get-openapi-document-action.ts +2 -38
- package/src/endpoint-generators/create-get-schema-action.ts +1 -1
- package/src/endpoint-generators/create-patch-endpoint.spec.ts +11 -18
- package/src/endpoint-generators/create-patch-endpoint.ts +12 -23
- package/src/endpoint-generators/create-post-endpoint.spec.ts +45 -14
- package/src/endpoint-generators/create-post-endpoint.ts +13 -23
- package/src/endpoint-generators/utils.ts +36 -28
- package/src/endpoint-generators/with-schema-and-openapi-action.ts +0 -3
- package/src/get-schema-from-api.spec.ts +1 -1
- package/src/get-schema-from-api.ts +1 -1
- package/src/helpers.spec.ts +51 -41
- package/src/helpers.ts +140 -109
- package/src/http-authentication-settings.ts +51 -25
- package/src/http-server-pool.spec.ts +220 -0
- package/src/http-server-pool.ts +169 -0
- package/src/http-user-context.spec.ts +203 -383
- package/src/http-user-context.ts +114 -91
- package/src/index.ts +6 -4
- package/src/login-response-strategy.spec.ts +32 -31
- package/src/login-response-strategy.ts +13 -12
- package/src/openapi/generate-openapi-document.ts +0 -3
- package/src/proxy-manager.spec.ts +152 -182
- package/src/proxy-runtime.spec.ts +50 -0
- package/src/proxy-runtime.ts +75 -0
- package/src/rest-api-runtime.spec.ts +77 -0
- package/src/rest-api-runtime.ts +204 -0
- package/src/rest-service.integration.spec.ts +68 -87
- package/src/rest.integration.test.ts +27 -87
- package/src/server-telemetry.spec.ts +56 -0
- package/src/server-telemetry.ts +51 -0
- package/src/static-server-manager.spec.ts +63 -151
- package/src/static-site-runtime.spec.ts +39 -0
- package/src/static-site-runtime.ts +75 -0
- package/src/user-store.spec.ts +86 -0
- package/src/user-store.ts +68 -0
- package/src/validate.integration.spec.ts +39 -97
- package/esm/actions/login-action.spec.d.ts +0 -2
- package/esm/actions/login-action.spec.d.ts.map +0 -1
- package/esm/actions/login-action.spec.js +0 -34
- package/esm/actions/login-action.spec.js.map +0 -1
- package/esm/actions/login.d.ts +0 -19
- package/esm/actions/login.d.ts.map +0 -1
- package/esm/actions/login.js +0 -27
- package/esm/actions/login.js.map +0 -1
- package/esm/api-manager.d.ts +0 -104
- package/esm/api-manager.d.ts.map +0 -1
- package/esm/api-manager.js +0 -180
- package/esm/api-manager.js.map +0 -1
- package/esm/proxy-manager.d.ts +0 -53
- package/esm/proxy-manager.d.ts.map +0 -1
- package/esm/proxy-manager.js +0 -84
- package/esm/proxy-manager.js.map +0 -1
- package/esm/server-manager.d.ts +0 -48
- package/esm/server-manager.d.ts.map +0 -1
- package/esm/server-manager.js +0 -100
- package/esm/server-manager.js.map +0 -1
- package/esm/static-server-manager.d.ts +0 -19
- package/esm/static-server-manager.d.ts.map +0 -1
- package/esm/static-server-manager.js +0 -65
- package/esm/static-server-manager.js.map +0 -1
- package/esm/swagger/generate-swagger-json.spec.d.ts +0 -2
- package/esm/swagger/generate-swagger-json.spec.d.ts.map +0 -1
- package/esm/swagger/generate-swagger-json.spec.js +0 -215
- package/esm/swagger/generate-swagger-json.spec.js.map +0 -1
- package/src/actions/login-action.spec.ts +0 -42
- package/src/actions/login.ts +0 -32
- package/src/api-manager.ts +0 -308
- package/src/proxy-manager.ts +0 -102
- package/src/server-manager.ts +0 -135
- package/src/static-server-manager.ts +0 -90
- package/src/swagger/generate-swagger-json.spec.ts +0 -250
package/esm/http-user-context.js
CHANGED
|
@@ -1,53 +1,47 @@
|
|
|
1
|
-
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
2
|
-
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
3
|
-
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
4
|
-
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
5
|
-
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
6
|
-
};
|
|
7
|
-
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
8
|
-
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
9
|
-
};
|
|
10
1
|
import { useSystemIdentityContext } from '@furystack/core';
|
|
11
|
-
import {
|
|
2
|
+
import { defineService } from '@furystack/inject';
|
|
12
3
|
import { PasswordAuthenticator, UnauthenticatedError } from '@furystack/security';
|
|
13
4
|
import { EventHub } from '@furystack/utils';
|
|
14
5
|
import { randomBytes } from 'crypto';
|
|
15
6
|
import { extractSessionIdFromCookies } from './authentication-providers/helpers.js';
|
|
16
7
|
import { HttpAuthenticationSettings } from './http-authentication-settings.js';
|
|
17
8
|
/**
|
|
18
|
-
*
|
|
9
|
+
* Internal concrete EventHub-backed {@link HttpUserContext}. Exposed via
|
|
10
|
+
* the {@link HttpUserContextToken} token; constructed by its factory.
|
|
19
11
|
*/
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
const userDataSet = this.getUserDataSet();
|
|
25
|
-
const users = await userDataSet.find(this.systemInjector, { filter: { username: { $eq: userName } }, top: 2 });
|
|
26
|
-
if (users.length !== 1) {
|
|
27
|
-
throw new UnauthenticatedError();
|
|
28
|
-
}
|
|
29
|
-
return users[0];
|
|
30
|
-
};
|
|
31
|
-
user;
|
|
12
|
+
class HttpUserContextImpl extends EventHub {
|
|
13
|
+
authentication;
|
|
14
|
+
resolveAuthenticator;
|
|
15
|
+
systemInjector;
|
|
32
16
|
/**
|
|
33
|
-
*
|
|
34
|
-
*
|
|
17
|
+
* Per-request user cache keyed by the request's `headers` object identity.
|
|
18
|
+
* Each incoming HTTP/WS message allocates its own `headers` object, so
|
|
19
|
+
* entries here never leak between requests — even when this
|
|
20
|
+
* `HttpUserContext` instance happens to be cached by an ancestor scope
|
|
21
|
+
* (e.g. because setup code resolved it on the root injector before any
|
|
22
|
+
* per-request child scope existed).
|
|
35
23
|
*/
|
|
24
|
+
userCache = new WeakMap();
|
|
25
|
+
/**
|
|
26
|
+
* `authenticator` is resolved lazily so that tests (and applications) that
|
|
27
|
+
* never invoke `authenticateUser` don't need to bind password-credential
|
|
28
|
+
* stores.
|
|
29
|
+
*/
|
|
30
|
+
constructor(authentication, resolveAuthenticator, systemInjector) {
|
|
31
|
+
super();
|
|
32
|
+
this.authentication = authentication;
|
|
33
|
+
this.resolveAuthenticator = resolveAuthenticator;
|
|
34
|
+
this.systemInjector = systemInjector;
|
|
35
|
+
}
|
|
36
36
|
async isAuthenticated(request) {
|
|
37
37
|
try {
|
|
38
38
|
const currentUser = await this.getCurrentUser(request);
|
|
39
39
|
return currentUser !== null;
|
|
40
40
|
}
|
|
41
|
-
catch
|
|
41
|
+
catch {
|
|
42
42
|
return false;
|
|
43
43
|
}
|
|
44
44
|
}
|
|
45
|
-
/**
|
|
46
|
-
* Returns whether the current user can be authorized with ALL of the specified roles
|
|
47
|
-
* @param request The request to be authenticated
|
|
48
|
-
* @param roles The list of roles to authorize
|
|
49
|
-
* @returns a boolean value that indicates whether the user is authorized
|
|
50
|
-
*/
|
|
51
45
|
async isAuthorized(request, ...roles) {
|
|
52
46
|
const currentUser = await this.getCurrentUser(request);
|
|
53
47
|
for (const role of roles) {
|
|
@@ -57,14 +51,8 @@ let HttpUserContext = class HttpUserContext extends EventHub {
|
|
|
57
51
|
}
|
|
58
52
|
return true;
|
|
59
53
|
}
|
|
60
|
-
/**
|
|
61
|
-
* Checks if the system contains a user with the provided name and password, throws an error otherwise
|
|
62
|
-
* @param userName The username
|
|
63
|
-
* @param password The password
|
|
64
|
-
* @returns the authenticated User
|
|
65
|
-
*/
|
|
66
54
|
async authenticateUser(userName, password) {
|
|
67
|
-
const result = await this.
|
|
55
|
+
const result = await this.resolveAuthenticator().checkPasswordForUser(userName, password);
|
|
68
56
|
if (!result.isValid) {
|
|
69
57
|
throw new UnauthenticatedError();
|
|
70
58
|
}
|
|
@@ -75,21 +63,24 @@ let HttpUserContext = class HttpUserContext extends EventHub {
|
|
|
75
63
|
return user;
|
|
76
64
|
}
|
|
77
65
|
async getCurrentUser(request) {
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
66
|
+
const key = request.headers;
|
|
67
|
+
const cached = this.userCache.get(key);
|
|
68
|
+
if (cached) {
|
|
69
|
+
return cached;
|
|
70
|
+
}
|
|
71
|
+
const pending = this.authenticateRequest(request);
|
|
72
|
+
this.userCache.set(key, pending);
|
|
73
|
+
try {
|
|
74
|
+
return await pending;
|
|
75
|
+
}
|
|
76
|
+
catch (error) {
|
|
77
|
+
this.userCache.delete(key);
|
|
78
|
+
throw error;
|
|
81
79
|
}
|
|
82
|
-
return this.user;
|
|
83
80
|
}
|
|
84
81
|
getSessionIdFromRequest(request) {
|
|
85
82
|
return extractSessionIdFromCookies(request, this.authentication.cookieName);
|
|
86
83
|
}
|
|
87
|
-
/**
|
|
88
|
-
* Iterates registered authentication providers in order.
|
|
89
|
-
* - A provider returning `User` means authentication succeeded.
|
|
90
|
-
* - A provider returning `null` means it does not apply; try the next one.
|
|
91
|
-
* - A provider throwing means it owns the request but auth failed; propagate the error.
|
|
92
|
-
*/
|
|
93
84
|
async authenticateRequest(request) {
|
|
94
85
|
for (const provider of this.authentication.authenticationProviders) {
|
|
95
86
|
const user = await provider.authenticate(request);
|
|
@@ -98,63 +89,53 @@ let HttpUserContext = class HttpUserContext extends EventHub {
|
|
|
98
89
|
}
|
|
99
90
|
throw new UnauthenticatedError();
|
|
100
91
|
}
|
|
101
|
-
|
|
102
|
-
* Creates and sets up a cookie-based session for the provided user
|
|
103
|
-
* @param user The user to create a session for
|
|
104
|
-
* @param serverResponse A serverResponse to set the cookie
|
|
105
|
-
* @returns the current User
|
|
106
|
-
*/
|
|
107
|
-
async cookieLogin(user, serverResponse) {
|
|
92
|
+
async cookieLogin(user, response) {
|
|
108
93
|
const sessionId = randomBytes(32).toString('hex');
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
this.
|
|
94
|
+
const sessionDataSet = this.systemInjector.get(this.authentication.sessionDataSet);
|
|
95
|
+
await sessionDataSet.add(this.systemInjector, { sessionId, username: user.username });
|
|
96
|
+
response.setHeader('Set-Cookie', `${this.authentication.cookieName}=${sessionId}; Path=/; HttpOnly`);
|
|
112
97
|
this.emit('onLogin', { user });
|
|
113
98
|
return user;
|
|
114
99
|
}
|
|
115
100
|
async cookieLogout(request, response) {
|
|
116
|
-
this.
|
|
101
|
+
this.userCache.delete(request.headers);
|
|
117
102
|
const sessionId = this.getSessionIdFromRequest(request);
|
|
118
103
|
response.setHeader('Set-Cookie', `${this.authentication.cookieName}=; Path=/; HttpOnly`);
|
|
119
104
|
if (sessionId) {
|
|
120
|
-
const sessionDataSet = this.
|
|
121
|
-
const sessions = await sessionDataSet.find(this.systemInjector, {
|
|
122
|
-
|
|
105
|
+
const sessionDataSet = this.systemInjector.get(this.authentication.sessionDataSet);
|
|
106
|
+
const sessions = await sessionDataSet.find(this.systemInjector, {
|
|
107
|
+
filter: { sessionId: { $eq: sessionId } },
|
|
108
|
+
});
|
|
109
|
+
await sessionDataSet.remove(this.systemInjector, ...sessions.map((s) => s.sessionId));
|
|
123
110
|
}
|
|
124
111
|
this.emit('onLogout', undefined);
|
|
125
112
|
}
|
|
126
|
-
|
|
127
|
-
this.
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
});
|
|
132
|
-
this.getUserDataSet().addListener('onEntityRemoved', ({ key }) => {
|
|
133
|
-
if (this.user?.username === key) {
|
|
134
|
-
this.user = undefined;
|
|
135
|
-
this.emit('onSessionInvalidated', undefined);
|
|
136
|
-
}
|
|
137
|
-
});
|
|
138
|
-
this.getSessionDataSet().addListener('onEntityRemoved', () => {
|
|
139
|
-
this.user = undefined;
|
|
140
|
-
this.emit('onSessionInvalidated', undefined);
|
|
113
|
+
async getUserByName(userName) {
|
|
114
|
+
const userDataSet = this.systemInjector.get(this.authentication.userDataSet);
|
|
115
|
+
const users = await userDataSet.find(this.systemInjector, {
|
|
116
|
+
filter: { username: { $eq: userName } },
|
|
117
|
+
top: 2,
|
|
141
118
|
});
|
|
119
|
+
if (users.length !== 1) {
|
|
120
|
+
throw new UnauthenticatedError();
|
|
121
|
+
}
|
|
122
|
+
return users[0];
|
|
142
123
|
}
|
|
143
|
-
}
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
|
|
124
|
+
}
|
|
125
|
+
/**
|
|
126
|
+
* DI token for the per-request {@link HttpUserContext}. Scoped — each HTTP
|
|
127
|
+
* request resolves its own instance with a fresh `user` cache.
|
|
128
|
+
*/
|
|
129
|
+
export const HttpUserContext = defineService({
|
|
130
|
+
name: 'furystack/rest-service/HttpUserContext',
|
|
131
|
+
lifetime: 'scoped',
|
|
132
|
+
factory: ({ inject, injector, onDispose }) => {
|
|
133
|
+
const authentication = inject(HttpAuthenticationSettings);
|
|
134
|
+
const systemInjector = useSystemIdentityContext({ injector, username: 'HttpUserContext' });
|
|
135
|
+
onDispose(() => systemInjector[Symbol.asyncDispose]());
|
|
136
|
+
// Password authenticator resolution is deferred: tests that exercise only
|
|
137
|
+
// unauthenticated endpoints never have to bind credential stores.
|
|
138
|
+
return new HttpUserContextImpl(authentication, () => injector.get(PasswordAuthenticator), systemInjector);
|
|
139
|
+
},
|
|
140
|
+
});
|
|
160
141
|
//# sourceMappingURL=http-user-context.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"http-user-context.js","sourceRoot":"","sources":["../src/http-user-context.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"http-user-context.js","sourceRoot":"","sources":["../src/http-user-context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAE1D,OAAO,EAAE,aAAa,EAAc,MAAM,mBAAmB,CAAA;AAC7D,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AACjF,OAAO,EAAE,QAAQ,EAA6B,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAEpC,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAA;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAA;AA+C9E;;;GAGG;AACH,MAAM,mBAAoB,SAAQ,QAA+B;IAiB7C;IACC;IACA;IAlBnB;;;;;;;OAOG;IACc,SAAS,GAAG,IAAI,OAAO,EAAyB,CAAA;IAEjE;;;;OAIG;IACH,YACkB,cAA0C,EACzC,oBAAiD,EACjD,cAAwB;QAEzC,KAAK,EAAE,CAAA;QAJS,mBAAc,GAAd,cAAc,CAA4B;QACzC,yBAAoB,GAApB,oBAAoB,CAA6B;QACjD,mBAAc,GAAd,cAAc,CAAU;IAG3C,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,OAAyC;QACpE,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACtD,OAAO,WAAW,KAAK,IAAI,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,OAAyC,EAAE,GAAG,KAAe;QACrF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC/D,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,QAAgB;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACzF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,oBAAoB,EAAE,CAAA;QAClC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,oBAAoB,EAAE,CAAA;QAClC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,OAAyC;QACnE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAA;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;QACjD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAChC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC1B,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAEM,uBAAuB,CAAC,OAAyC;QACtE,OAAO,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;IAC7E,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,OAAyC;QACxE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,uBAAuB,EAAE,CAAC;YACnE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YACjD,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAA;QACvB,CAAC;QACD,MAAM,IAAI,oBAAoB,EAAE,CAAA;IAClC,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,IAAU,EACV,QAAgE;QAEhE,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACjD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAA;QAClF,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrF,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,IAAI,SAAS,oBAAoB,CAAC,CAAA;QACpG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,OAAyC,EACzC,QAAgE;QAEhE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAA;QACvD,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,qBAAqB,CAAC,CAAA;QAExF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAA;YAClF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC9D,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;aAC1C,CAAC,CAAA;YACF,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;QACvF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAClC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,QAAgB;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC5E,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YACxD,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACvC,GAAG,EAAE,CAAC;SACP,CAAC,CAAA;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,oBAAoB,EAAE,CAAA;QAClC,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqC,aAAa,CAAC;IAC7E,IAAI,EAAE,wCAAwC;IAC9C,QAAQ,EAAE,QAAQ;IAClB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAmB,EAAE;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAA;QACzD,MAAM,cAAc,GAAG,wBAAwB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAC1F,SAAS,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QACtD,0EAA0E;QAC1E,kEAAkE;QAClE,OAAO,IAAI,mBAAmB,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,cAAc,CAAC,CAAA;IAC3G,CAAC;CACF,CAAC,CAAA"}
|
|
@@ -1,5 +1,11 @@
|
|
|
1
|
-
import { Injector } from '@furystack/inject';
|
|
1
|
+
import { type Injector } from '@furystack/inject';
|
|
2
|
+
/**
|
|
3
|
+
* Binds in-memory implementations for every persistent token required by
|
|
4
|
+
* the authentication subsystem (users, sessions, credentials, reset tokens)
|
|
5
|
+
* on the provided injector, then installs the default password policy and
|
|
6
|
+
* HTTP-authentication stack.
|
|
7
|
+
*/
|
|
2
8
|
export declare const prepareInjector: (i: Injector, options?: {
|
|
3
9
|
enableBasicAuth?: boolean;
|
|
4
|
-
}) =>
|
|
10
|
+
}) => void;
|
|
5
11
|
//# sourceMappingURL=http-user-context.spec.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"http-user-context.spec.d.ts","sourceRoot":"","sources":["../src/http-user-context.spec.ts"],"names":[],"mappings":"AAEA,OAAO,
|
|
1
|
+
{"version":3,"file":"http-user-context.spec.d.ts","sourceRoot":"","sources":["../src/http-user-context.spec.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAkBjE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,GAAG,QAAQ,EAAE,UAAU;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,KAAG,IAQtF,CAAA"}
|