@genoacms/adapter-gcp 0.3.13 → 0.4.1-fix.1

package/dist/config.d.ts

@@ -1,2 +1,2 @@
-declare const _default: Config<object, object, object>;
+declare const _default: Config<object, object, object, object>;
 export default _default;

package/dist/services/authorization/index.d.ts

@@ -0,0 +1,3 @@
+import type { isEmailAdmins as isEmailAdminsT } from '@genoacms/cloudabstraction/authorization';
+declare const isEmailAdmins: isEmailAdminsT;
+export { isEmailAdmins };

package/dist/services/authorization/index.js

@@ -0,0 +1,22 @@
+import { ProjectsClient } from '@google-cloud/resource-manager';
+import config from '../../config.js';
+const resourceManager = new ProjectsClient({
+    projectId: config.authorization.projectId,
+    credentials: config.authorization.credentials
+});
+const projectId = config.authorization.projectId;
+const isEmailAdmins = async (email) => {
+    const resource = `projects/${projectId}`;
+    const role = resource + '/roles/genoacms';
+    const data = await resourceManager.getIamPolicy({ resource });
+    const policy = data[0];
+    if ((policy.bindings) == null)
+        throw new Error('no-bindings');
+    const adminRole = policy.bindings.find(binding => binding.role === role);
+    if (adminRole == null)
+        throw new Error('no-admin-role');
+    if (adminRole.members == null)
+        throw new Error('no-principals');
+    return adminRole.members.includes(`user:${email}`);
+};
+export { isEmailAdmins };

package/dist/services/storage/index.js

@@ -25,7 +25,7 @@ const getSignedURL = async ({ bucket, name }) => {
     const bucketInstance = getBucket(bucket);
     const file = bucketInstance.file(name);
     const expires = new Date();
-    expires.setTime(expires.getTime() + 60 * 60);
+    expires.setTime(expires.getTime() + 60 * 60 * 1_000);
     const [url] = await file.getSignedUrl({
         action: 'read',
         expires

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@genoacms/adapter-gcp",
-  "version": "0.3.13",
+  "version": "0.4.1-fix.1",
   "description": "Implementation of abstraction layer of GenoaCMS for GCP",
   "repository": {
     "type": "git",
@@ -17,8 +17,9 @@
   "homepage": "https://github.com/GenoaCMS/adapter-gcp#readme",
   "type": "module",
   "dependencies": {
-    "@genoacms/cloudabstraction": "^0.3.13",
+    "@genoacms/cloudabstraction": "^0.4.0",
     "@google-cloud/firestore": "^7.1.0",
+    "@google-cloud/resource-manager": "^5.1.0",
     "@google-cloud/storage": "^7.7.0"
   },
   "devDependencies": {
@@ -37,9 +38,9 @@
     "dist"
   ],
   "exports": {
-    "./auth": {
-      "import": "./dist/services/auth/index.js",
-      "types": "./dist/services/auth/index.d.ts"
+    "./authorization": {
+      "import": "./dist/services/authorization/index.js",
+      "types": "./dist/services/authorization/index.d.ts"
     },
     "./database": {
       "import": "./dist/services/database/index.js",

package/src/services/authorization/index.ts

@@ -0,0 +1,25 @@
+import { ProjectsClient } from '@google-cloud/resource-manager'
+import config from '../../config.js'
+import type { isEmailAdmins as isEmailAdminsT } from '@genoacms/cloudabstraction/authorization'
+
+const resourceManager = new ProjectsClient({
+  projectId: config.authorization.projectId,
+  credentials: config.authorization.credentials
+})
+const projectId = config.authorization.projectId
+
+const isEmailAdmins: isEmailAdminsT = async (email: string) => {
+  const resource = `projects/${projectId}`
+  const role = resource + '/roles/genoacms'
+  const data = await resourceManager.getIamPolicy({ resource })
+  const policy = data[0]
+  if ((policy.bindings) == null) throw new Error('no-bindings')
+  const adminRole = policy.bindings.find(binding => binding.role === role)
+  if (adminRole == null) throw new Error('no-admin-role')
+  if (adminRole.members == null) throw new Error('no-principals')
+  return adminRole.members.includes(`user:${email}`)
+}
+
+export {
+  isEmailAdmins
+}

package/src/services/storage/index.ts

@@ -34,7 +34,7 @@ const getSignedURL: Adapter['getSignedURL'] = async ({ bucket, name }) => {
   const bucketInstance = getBucket(bucket)
   const file = bucketInstance.file(name)
   const expires = new Date()
-  expires.setTime(expires.getTime() + 60 * 60)
+  expires.setTime(expires.getTime() + 60 * 60 * 1_000)
   const [url] = await file.getSignedUrl({
     action: 'read',
     expires

package/dist/services/auth/index.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/services/auth/index.js

@@ -1 +0,0 @@
-export {};