@gemeentenijmegen/webapp 0.0.1

package/lib/webapp/login/login-function.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginFunction = void 0;
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+const path = require("path");
+const lambda = require("aws-cdk-lib/aws-lambda");
+/**
+ * An AWS Lambda function which executes src/webapp/login/login.
+ */
+class LoginFunction extends lambda.Function {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            description: 'src/webapp/login/login.lambda.ts',
+            ...props,
+            runtime: new lambda.Runtime('nodejs18.x', lambda.RuntimeFamily.NODEJS),
+            handler: 'index.handler',
+            code: lambda.Code.fromAsset(path.join(__dirname, '../../../assets/webapp/login/login.lambda')),
+        });
+        this.addEnvironment('AWS_NODEJS_CONNECTION_REUSE_ENABLED', '1', { removeInEdge: true });
+    }
+}
+exports.LoginFunction = LoginFunction;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/login/login.lambda.d.ts

@@ -0,0 +1,2 @@
+import { ApiGatewayV2Response } from '@gemeentenijmegen/apigateway-http/lib/V2/Response';
+export declare function handler(event: any, _context: any): Promise<ApiGatewayV2Response>;

package/lib/webapp/login/login.lambda.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const Response_1 = require("@gemeentenijmegen/apigateway-http/lib/V2/Response");
+const loginRequestHandler_1 = require("./loginRequestHandler");
+const Files_1 = require("../util/Files");
+const dynamoDBClient = new client_dynamodb_1.DynamoDBClient({ region: process.env.AWS_REGION });
+const loginRequestHandler = new loginRequestHandler_1.LoginRequestHandler({
+    oidcProfiles: Files_1.Files.getAuthenticationProfiles(),
+    templateOverwrite: Files_1.Files.getTemplateOverwrite('/opt/login.mustache'),
+});
+function parseEvent(event) {
+    return { cookies: event?.cookies?.join(';') };
+}
+async function handler(event, _context) {
+    try {
+        const params = parseEvent(event);
+        const response = await loginRequestHandler.handleRequest(params.cookies, dynamoDBClient);
+        return response;
+    }
+    catch (err) {
+        console.error(err);
+        return Response_1.Response.error(500);
+    }
+}
+exports.handler = handler;
+;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/login/loginRequestHandler.d.ts

@@ -0,0 +1,19 @@
+import { DynamoDBClient } from '@aws-sdk/client-dynamodb';
+import { ApiGatewayV2Response } from '@gemeentenijmegen/apigateway-http/lib/V2/Response';
+interface LoginRequestHandlerProps {
+    /**
+     * Provide an object that is used to create the authentication urls
+     * and render the buttons
+     */
+    oidcProfiles: any[];
+    /**
+     * Optionally overwrite the packaged default template
+     */
+    templateOverwrite?: string;
+}
+export declare class LoginRequestHandler {
+    private config;
+    constructor(props: LoginRequestHandlerProps);
+    handleRequest(cookies: string, dynamoDBClient: DynamoDBClient): Promise<ApiGatewayV2Response>;
+}
+export {};

package/lib/webapp/login/loginRequestHandler.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginRequestHandler = void 0;
+const Response_1 = require("@gemeentenijmegen/apigateway-http/lib/V2/Response");
+const session_1 = require("@gemeentenijmegen/session");
+const loginTemplate = require("./templates/login.mustache");
+const OpenIDConnect_1 = require("../util/OpenIDConnect");
+const render_1 = require("../util/render");
+class LoginRequestHandler {
+    constructor(props) {
+        this.config = props;
+    }
+    async handleRequest(cookies, dynamoDBClient) {
+        // Check if loggedin
+        let session = new session_1.Session(cookies, dynamoDBClient, {
+            ttlInMinutes: parseInt(process.env.SESSION_TTL_MIN ?? '15'),
+        });
+        await session.init();
+        if (session.isLoggedIn() === true) {
+            console.debug('redirect to default page');
+            return Response_1.Response.redirect('/');
+        }
+        // Construct new sesssion and redirect urls
+        const states = {};
+        const authenticationOptions = [];
+        for (const profile of this.config.oidcProfiles) {
+            let OIDC = new OpenIDConnect_1.OpenIDConnect({
+                clientId: profile.clientId,
+                clientSecretArn: '',
+                applicationBaseUrl: profile.applicationBaseUrl,
+                authenticationBaseUrl: profile.authenticationBaseUrl,
+            });
+            // Create a state & store it in the session store
+            const state = OpenIDConnect_1.OpenIDConnect.generateState();
+            states[state] = profile.name;
+            const authUrl = OIDC.getLoginUrl(state, profile.scope);
+            if (profile.immediateRedirect) {
+                const newCookies = [session.getCookie()];
+                return Response_1.Response.redirect(authUrl, 302, newCookies);
+            }
+            authenticationOptions.push({
+                title: profile.title,
+                class: profile.cssClass,
+                authUrl: authUrl,
+            });
+        }
+        await session.createSession({
+            loggedin: { BOOL: false },
+            states: { S: JSON.stringify(states) },
+        });
+        // Show the page
+        const data = {
+            title: 'Inloggen',
+            authenticationOptions: authenticationOptions,
+        };
+        const template = this.config.templateOverwrite ?? loginTemplate.default;
+        const html = await render_1.render(data, template);
+        const newCookies = [session.getCookie()];
+        return Response_1.Response.html(html, 200, newCookies);
+    }
+}
+exports.LoginRequestHandler = LoginRequestHandler;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/logout/handleLogoutRequest.d.ts

@@ -0,0 +1,2 @@
+import { DynamoDBClient } from '@aws-sdk/client-dynamodb';
+export declare function handleLogoutRequest(cookies: string, dynamoDBClient: DynamoDBClient, templateOverwrite?: string): Promise<import("@gemeentenijmegen/apigateway-http/lib/V2/Response").ApiGatewayV2Response>;

package/lib/webapp/logout/handleLogoutRequest.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleLogoutRequest = void 0;
+const Response_1 = require("@gemeentenijmegen/apigateway-http/lib/V2/Response");
+const session_1 = require("@gemeentenijmegen/session");
+const cookie_1 = require("cookie");
+const logoutTemplate = require("./templates/logout.mustache");
+const render_1 = require("../util/render");
+async function handleLogoutRequest(cookies, dynamoDBClient, templateOverwrite) {
+    let session = new session_1.Session(cookies, dynamoDBClient, {
+        ttlInMinutes: parseInt(process.env.SESSION_TTL_MIN ?? '15'),
+    });
+    if (await session.init()) {
+        await session.updateSession({
+            loggedin: { BOOL: false },
+        });
+    }
+    const template = templateOverwrite ?? logoutTemplate.default;
+    const html = await render_1.render({ title: 'Uitgelogd' }, template);
+    const emptyCookie = cookie_1.default.serialize('session', '', {
+        httpOnly: true,
+        secure: true,
+    });
+    return Response_1.Response.html(html, 200, [emptyCookie]);
+}
+exports.handleLogoutRequest = handleLogoutRequest;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/logout/logout-function.d.ts

@@ -0,0 +1,13 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { Construct } from 'constructs';
+/**
+ * Props for LogoutFunction
+ */
+export interface LogoutFunctionProps extends lambda.FunctionOptions {
+}
+/**
+ * An AWS Lambda function which executes src/webapp/logout/logout.
+ */
+export declare class LogoutFunction extends lambda.Function {
+    constructor(scope: Construct, id: string, props?: LogoutFunctionProps);
+}

package/lib/webapp/logout/logout-function.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LogoutFunction = void 0;
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+const path = require("path");
+const lambda = require("aws-cdk-lib/aws-lambda");
+/**
+ * An AWS Lambda function which executes src/webapp/logout/logout.
+ */
+class LogoutFunction extends lambda.Function {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            description: 'src/webapp/logout/logout.lambda.ts',
+            ...props,
+            runtime: new lambda.Runtime('nodejs18.x', lambda.RuntimeFamily.NODEJS),
+            handler: 'index.handler',
+            code: lambda.Code.fromAsset(path.join(__dirname, '../../../assets/webapp/logout/logout.lambda')),
+        });
+        this.addEnvironment('AWS_NODEJS_CONNECTION_REUSE_ENABLED', '1', { removeInEdge: true });
+    }
+}
+exports.LogoutFunction = LogoutFunction;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/logout/logout.lambda.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/webapp/logout/logout.lambda.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const Response_1 = require("@gemeentenijmegen/apigateway-http/lib/V2/Response");
+const handleLogoutRequest_1 = require("./handleLogoutRequest");
+const Files_1 = require("../util/Files");
+const dynamoDBClient = new client_dynamodb_1.DynamoDBClient({ region: process.env.AWS_REGION });
+const templateOverwrite = Files_1.Files.getTemplateOverwrite('/opt/logout.mustache');
+function parseEvent(event) {
+    return {
+        cookies: event?.cookies?.join(';'),
+    };
+}
+exports.handler = async (event, _context) => {
+    try {
+        const params = parseEvent(event);
+        return await handleLogoutRequest_1.handleLogoutRequest(params.cookies, dynamoDBClient, templateOverwrite);
+    }
+    catch (err) {
+        console.error(err);
+        return Response_1.Response.error(500);
+    }
+};
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/util/Files.d.ts

@@ -0,0 +1,13 @@
+export declare class Files {
+    /**
+     * Check if the template is found in the file system
+     * @param path to template should start with /opt/
+     * @returns template as string or undefined
+     */
+    static getTemplateOverwrite(path: string): undefined | string;
+    /**
+     * Get the authentication JSON file and parse it
+     * @returns the list of profiles
+     */
+    static getAuthenticationProfiles(): any;
+}

package/lib/webapp/util/Files.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Files = void 0;
+const fs = require("fs");
+class Files {
+    /**
+     * Check if the template is found in the file system
+     * @param path to template should start with /opt/
+     * @returns template as string or undefined
+     */
+    static getTemplateOverwrite(path) {
+        if (fs.existsSync(path)) {
+            console.info(`${path} template overwrite found!`);
+            return fs.readFileSync(path).toString('utf8');
+        }
+        return undefined;
+    }
+    /**
+     * Get the authentication JSON file and parse it
+     * @returns the list of profiles
+     */
+    static getAuthenticationProfiles() {
+        const profiles = JSON.parse(fs.readFileSync('/opt/authentication.json').toString('utf8'));
+        console.info('Initializing authentication profiles', profiles);
+        return profiles;
+    }
+}
+exports.Files = Files;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/util/OpenIDConnect.d.ts

@@ -0,0 +1,46 @@
+import { IdTokenClaims, Issuer } from 'openid-client';
+export interface OpenIDConnectOptions {
+    readonly clientId: string;
+    readonly clientSecretArn: string;
+    readonly authenticationBaseUrl: string;
+    readonly applicationBaseUrl: string;
+}
+export declare class OpenIDConnect {
+    static generateState(): string;
+    issuer: Issuer;
+    clientSecret?: string;
+    private options;
+    /**
+     * Helper class for our OIDC auth flow
+     */
+    constructor(options: OpenIDConnectOptions);
+    /**
+     * Retrieve client secret from secrets manager
+     * @returns string the client secret
+     */
+    getOidcClientSecret(): Promise<string | undefined>;
+    /**
+     * setup the oidc issuer. For now using env. parameters & hardcoded urls
+     * Issuer could also be discovered based on file in .well-known, this
+     * should be cached somehow.
+     *
+     * @returns openid-client Issuer
+     */
+    getIssuer(authenticationBaseUrl: string): Issuer;
+    /**
+     * Get the login url for the OIDC-provider.
+     * @param {string} state A string parameter that gets returned in the auth callback.
+     * This should be checked before accepting the login response.
+     * @returns {string} the login url
+     */
+    getLoginUrl(state: string, scope?: string): string;
+    /**
+       * Use the returned code from the OIDC-provider and stored state param
+       * to complete the login flow.
+       *
+       * @param {string} code
+       * @param {string} states
+       * @returns {IdTokenClaims} returns a claims object on succesful auth
+       */
+    authorize(code: string, states: string[], returnedState: string): Promise<IdTokenClaims>;
+}

package/lib/webapp/util/OpenIDConnect.js

@@ -0,0 +1,120 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenIDConnect = void 0;
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+const openid_client_1 = require("openid-client");
+class OpenIDConnect {
+    /**
+     * Helper class for our OIDC auth flow
+     */
+    constructor(options) {
+        this.issuer = this.getIssuer(options.authenticationBaseUrl);
+        this.options = options;
+    }
+    static generateState() {
+        return openid_client_1.generators.state();
+    }
+    /**
+     * Retrieve client secret from secrets manager
+     * @returns string the client secret
+     */
+    async getOidcClientSecret() {
+        if (!this.clientSecret) {
+            const secretsManagerClient = new client_secrets_manager_1.SecretsManagerClient({});
+            const command = new client_secrets_manager_1.GetSecretValueCommand({ SecretId: this.options.clientSecretArn });
+            const data = await secretsManagerClient.send(command);
+            // Depending on whether the secret is a string or binary, one of these fields will be populated.
+            if (data.SecretString) {
+                this.clientSecret = data.SecretString;
+            }
+            else {
+                console.error('no secret value found');
+            }
+        }
+        return this.clientSecret;
+    }
+    /**
+     * setup the oidc issuer. For now using env. parameters & hardcoded urls
+     * Issuer could also be discovered based on file in .well-known, this
+     * should be cached somehow.
+     *
+     * @returns openid-client Issuer
+     */
+    getIssuer(authenticationBaseUrl) {
+        //Issuer.discover('https://authenticatie-accp.nijmegen.nl/broker/sp/oidc'); // TODO check for autodiscovery?
+        const issuer = new openid_client_1.Issuer({
+            issuer: `${authenticationBaseUrl}/broker/sp/oidc`,
+            authorization_endpoint: `${authenticationBaseUrl}/broker/sp/oidc/authenticate`,
+            token_endpoint: `${authenticationBaseUrl}/broker/sp/oidc/token`,
+            jwks_uri: `${authenticationBaseUrl}/broker/sp/oidc/certs`,
+            userinfo_endpoint: `${authenticationBaseUrl}/broker/sp/oidc/userinfo`,
+            revocation_endpoint: `${authenticationBaseUrl}/broker/sp/oidc/token/revoke`,
+            introspection_endpoint: `${authenticationBaseUrl}/broker/sp/oidc/token/introspect`,
+            end_session_endpoint: `${authenticationBaseUrl}/broker/sp/oidc/logout`,
+            token_endpoint_auth_methods_supported: ['client_secret_post', 'client_secret_basic'],
+            introspection_endpoint_auth_methods_supported: ['client_secret_post', 'client_secret_basic'],
+            revocation_endpoint_auth_methods_supported: ['client_secret_post', 'client_secret_basic'],
+            revocation_endpoint_auth_signing_alg_values_supported: ['RS256'],
+        });
+        return issuer;
+    }
+    /**
+     * Get the login url for the OIDC-provider.
+     * @param {string} state A string parameter that gets returned in the auth callback.
+     * This should be checked before accepting the login response.
+     * @returns {string} the login url
+     */
+    getLoginUrl(state, scope) {
+        const base_url = new URL(this.options.applicationBaseUrl);
+        const redirect_uri = new URL('/auth', base_url);
+        const client = new this.issuer.Client({
+            client_id: this.options.clientId,
+            redirect_uris: [redirect_uri.toString()],
+            response_types: ['code'],
+        });
+        const authUrl = client.authorizationUrl({
+            scope,
+            resource: this.options.authenticationBaseUrl,
+            state: state,
+        });
+        return authUrl;
+    }
+    /**
+       * Use the returned code from the OIDC-provider and stored state param
+       * to complete the login flow.
+       *
+       * @param {string} code
+       * @param {string} states
+       * @returns {IdTokenClaims} returns a claims object on succesful auth
+       */
+    async authorize(code, states, returnedState) {
+        const base_url = new URL(this.options.applicationBaseUrl);
+        const redirect_uri = new URL('/auth', base_url);
+        const client_secret = await this.getOidcClientSecret();
+        const client = new this.issuer.Client({
+            client_id: this.options.clientId,
+            redirect_uris: [redirect_uri.toString()],
+            client_secret: client_secret,
+            response_types: ['code'],
+        });
+        const params = client.callbackParams(redirect_uri + '/?code=' + code + '&state=' + returnedState);
+        if (!states.includes(returnedState)) {
+            throw new Error('state does not match session state');
+        }
+        let tokenSet;
+        try {
+            tokenSet = await client.callback(redirect_uri.toString(), params, { state: returnedState });
+        }
+        catch (err) {
+            const error = err;
+            throw new Error(`${error.error} ${error.error_description}`);
+        }
+        const claims = tokenSet.claims();
+        if (claims.aud != this.options.clientId) {
+            throw new Error('claims aud does not match client id');
+        }
+        return claims;
+    }
+}
+exports.OpenIDConnect = OpenIDConnect;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/util/render.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Render data in a mustache template
+ *
+ * @param {object} data An object of data to use in the template
+ * @param {string} template the main mustache template as a string
+ * @param {{[key:string] : string} | undefined} partials name and template string
+ * @returns string
+ */
+export declare function render(data: any, template: string, partials?: {
+    [key: string]: string;
+}): Promise<string>;

package/lib/webapp/util/render.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.render = void 0;
+const Mustache = require("mustache");
+const Files_1 = require("./Files");
+const footer = require("./footer.mustache");
+const header = require("./header.mustache");
+// Load from lambda layer
+const overwriteHeader = Files_1.Files.getTemplateOverwrite('/opt/header.mustache');
+const overwriteFooter = Files_1.Files.getTemplateOverwrite('/opt/footer.mustache');
+/**
+ * Render data in a mustache template
+ *
+ * @param {object} data An object of data to use in the template
+ * @param {string} template the main mustache template as a string
+ * @param {{[key:string] : string} | undefined} partials name and template string
+ * @returns string
+ */
+async function render(data, template, partials) {
+    const fullPartials = {
+        header: overwriteHeader ?? header.default,
+        footer: overwriteFooter ?? footer.default,
+        ...partials,
+    };
+    data = {
+        logos: false,
+        ...data,
+    };
+    return Mustache.render(template, data, fullPartials);
+}
+exports.render = render;
+;
+//# sourceMappingURL=data:application/json;base64,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