@hed-hog/core 0.0.360 → 0.0.361

package/dist/user/user.service.d.ts

@@ -22,13 +22,13 @@ export declare class UserService {
     private validateRoleExists;
     private validateEmailAvailable;
     verifyIdentifier(locale: string, userId: number, identifierId: number): Promise<{
-        type: import("@prisma/client").$Enums.user_identifier_type_e66d505520_enum;
         id: number;
-        value: string;
-        enabled: boolean;
         user_id: number;
         created_at: Date;
         updated_at: Date;
+        type: import("@prisma/client").$Enums.user_identifier_type_e66d505520_enum;
+        value: string;
+        enabled: boolean;
         verified_at: Date | null;
     }>;
     list(paginationParams: any): Promise<{
@@ -46,16 +46,6 @@ export declare class UserService {
         };
     }>;
     get(locale: string, userId: number): Promise<{
-        user_identifier: {
-            type: import("@prisma/client").$Enums.user_identifier_type_e66d505520_enum;
-            id: number;
-            value: string;
-            enabled: boolean;
-            user_id: number;
-            created_at: Date;
-            updated_at: Date;
-            verified_at: Date | null;
-        }[];
         role_user: ({
             role: {
                 id: number;
@@ -72,82 +62,92 @@ export declare class UserService {
         })[];
         user_account: {
             id: number;
-            email: string | null;
-            provider: import("@prisma/client").$Enums.user_account_provider_52222e2ecb_enum;
             user_id: number;
             created_at: Date;
             updated_at: Date;
-            provider_user_id: string;
-            scopes: string | null;
+            email: string | null;
             refresh_token: import("@prisma/client/runtime/library").Bytes | null;
+            provider: import("@prisma/client").$Enums.user_account_provider_52222e2ecb_enum;
+            scopes: string | null;
+            provider_user_id: string;
             token_expires_at: Date | null;
         }[];
         user_activity: {
             id: number;
-            action: string;
             user_id: number;
             created_at: Date;
             updated_at: Date;
+            action: string;
         }[];
         user_credential: {
-            type: import("@prisma/client").$Enums.user_credential_type_4466d7f008_enum;
             id: number;
-            hash: string;
             user_id: number;
             created_at: Date;
             updated_at: Date;
-            expires_at: Date | null;
+            type: import("@prisma/client").$Enums.user_credential_type_4466d7f008_enum;
+            hash: string;
             revoked_at: Date | null;
+            expires_at: Date | null;
             requires_reset: boolean;
         }[];
+        user_identifier: {
+            id: number;
+            user_id: number;
+            created_at: Date;
+            updated_at: Date;
+            type: import("@prisma/client").$Enums.user_identifier_type_e66d505520_enum;
+            value: string;
+            enabled: boolean;
+            verified_at: Date | null;
+        }[];
         user_session: {
             id: number;
-            hash: string;
             user_id: number;
             user_agent: string;
             created_at: Date;
             updated_at: Date;
+            hash: string;
             ip_address: string;
-            expires_at: Date;
             revoked_at: Date | null;
+            expires_at: Date;
         }[];
     } & {
-        name: string;
         id: number;
         created_at: Date;
-        updated_at: Date;
+        name: string;
         photo_id: number | null;
         suspended_until: Date | null;
         last_login_at: Date | null;
         suspended_reason: string | null;
         deactivated_at: Date | null;
+        updated_at: Date;
     }>;
     createWithEmailAndPassword(locale: string, { email, name, password }: CreateWithEmailAndPasswordDTO): Promise<{
         user: {
-            name: string;
             id: number;
             created_at: Date;
-            updated_at: Date;
+            name: string;
             photo_id: number | null;
             suspended_until: Date | null;
             last_login_at: Date | null;
             suspended_reason: string | null;
             deactivated_at: Date | null;
+            updated_at: Date;
         };
         challenge: {
             challengeId: number;
         };
     }>;
     update(locale: string, userId: number, { name }: UpdateDTO): Promise<{
-        name: string;
         id: number;
         created_at: Date;
-        updated_at: Date;
+        name: string;
         photo_id: number | null;
         suspended_until: Date | null;
         last_login_at: Date | null;
         suspended_reason: string | null;
         deactivated_at: Date | null;
+        updated_at: Date;
     }>;
     resetPassword(locale: string, userId: number, { password }: ResetPasswordDTO): Promise<{
         password: string;
@@ -160,16 +160,6 @@ export declare class UserService {
     }>;
     openPublicAvatar(locale: string, fileId: number, ifNoneMatch: string | undefined, res: any): Promise<void>;
     findUserById(locale: string, id: number): Promise<{
-        user_identifier: {
-            type: import("@prisma/client").$Enums.user_identifier_type_e66d505520_enum;
-            id: number;
-            value: string;
-            enabled: boolean;
-            user_id: number;
-            created_at: Date;
-            updated_at: Date;
-            verified_at: Date | null;
-        }[];
         role_user: ({
             role: {
                 id: number;
@@ -186,99 +176,109 @@ export declare class UserService {
         })[];
         user_account: {
             id: number;
-            email: string | null;
-            provider: import("@prisma/client").$Enums.user_account_provider_52222e2ecb_enum;
             user_id: number;
             created_at: Date;
             updated_at: Date;
-            provider_user_id: string;
-            scopes: string | null;
+            email: string | null;
             refresh_token: import("@prisma/client/runtime/library").Bytes | null;
+            provider: import("@prisma/client").$Enums.user_account_provider_52222e2ecb_enum;
+            scopes: string | null;
+            provider_user_id: string;
             token_expires_at: Date | null;
         }[];
         user_activity: {
             id: number;
-            action: string;
             user_id: number;
             created_at: Date;
             updated_at: Date;
+            action: string;
         }[];
         user_credential: {
-            type: import("@prisma/client").$Enums.user_credential_type_4466d7f008_enum;
             id: number;
-            hash: string;
             user_id: number;
             created_at: Date;
             updated_at: Date;
-            expires_at: Date | null;
+            type: import("@prisma/client").$Enums.user_credential_type_4466d7f008_enum;
+            hash: string;
             revoked_at: Date | null;
+            expires_at: Date | null;
             requires_reset: boolean;
         }[];
+        user_identifier: {
+            id: number;
+            user_id: number;
+            created_at: Date;
+            updated_at: Date;
+            type: import("@prisma/client").$Enums.user_identifier_type_e66d505520_enum;
+            value: string;
+            enabled: boolean;
+            verified_at: Date | null;
+        }[];
         user_session: {
             id: number;
-            hash: string;
             user_id: number;
             user_agent: string;
             created_at: Date;
             updated_at: Date;
+            hash: string;
             ip_address: string;
-            expires_at: Date;
             revoked_at: Date | null;
+            expires_at: Date;
         }[];
     } & {
-        name: string;
         id: number;
         created_at: Date;
-        updated_at: Date;
+        name: string;
         photo_id: number | null;
         suspended_until: Date | null;
         last_login_at: Date | null;
         suspended_reason: string | null;
         deactivated_at: Date | null;
+        updated_at: Date;
     }>;
     findUserByEmail(_locale: string, email: string): Promise<{
-        user_identifier: {
-            type: import("@prisma/client").$Enums.user_identifier_type_e66d505520_enum;
+        user_credential: {
             id: number;
-            value: string;
-            enabled: boolean;
             user_id: number;
             created_at: Date;
             updated_at: Date;
-            verified_at: Date | null;
-        }[];
-        user_credential: {
             type: import("@prisma/client").$Enums.user_credential_type_4466d7f008_enum;
-            id: number;
             hash: string;
+            revoked_at: Date | null;
+            expires_at: Date | null;
+            requires_reset: boolean;
+        }[];
+        user_identifier: {
+            id: number;
             user_id: number;
             created_at: Date;
             updated_at: Date;
-            expires_at: Date | null;
-            revoked_at: Date | null;
-            requires_reset: boolean;
+            type: import("@prisma/client").$Enums.user_identifier_type_e66d505520_enum;
+            value: string;
+            enabled: boolean;
+            verified_at: Date | null;
         }[];
         user_session: {
             id: number;
-            hash: string;
             user_id: number;
             user_agent: string;
             created_at: Date;
             updated_at: Date;
+            hash: string;
             ip_address: string;
-            expires_at: Date;
             revoked_at: Date | null;
+            expires_at: Date;
         }[];
     } & {
-        name: string;
         id: number;
         created_at: Date;
-        updated_at: Date;
+        name: string;
         photo_id: number | null;
         suspended_until: Date | null;
         last_login_at: Date | null;
         suspended_reason: string | null;
         deactivated_at: Date | null;
+        updated_at: Date;
     }>;
     getUserRoles(userId: number): Promise<{
         id: any;
@@ -314,10 +314,10 @@ export declare class UserService {
     }>;
     registerUserActivity(userId: number | null | undefined, action: string): Promise<{
         id: number;
-        action: string;
         user_id: number;
         created_at: Date;
         updated_at: Date;
+        action: string;
     }>;
     private validateDeleteIds;
     private deleteOldAvatar;

package/dist/webhook-integration/webhook-integration.controller.d.ts

@@ -20,10 +20,10 @@ export declare class WebhookIntegrationController {
         name: string;
     }): Promise<{
         rawToken: string;
-        name: string;
-        type: string;
         id: number;
         created_at: Date;
+        name: string;
+        type: string;
         token_prefix: string;
     }>;
     listInternalRoutes(): Promise<any>;

package/dist/webhook-integration/webhook-integration.service.d.ts

@@ -53,10 +53,10 @@ export declare class WebhookIntegrationService {
     listUserApiTokens(userId: number): Promise<any>;
     createUserApiToken(userId: number, name: string): Promise<{
         rawToken: string;
-        name: string;
-        type: string;
         id: number;
         created_at: Date;
+        name: string;
+        type: string;
         token_prefix: string;
     }>;
     listInternalRoutes(): Promise<any>;

package/hedhog/data/setting_group.yaml

@@ -417,32 +417,6 @@
         subgroup_id:
           where:
             slug: session-management
-      - slug: admin-login-page-oauth-providers
-        type: array
-        component: checkbox
-        name:
-          en: Administration Login Page
-          pt: Página de Login da Administração
-        description:
-          en: Select which enabled OAuth providers are shown on the Admin login page
-          pt: Selecione quais provedores OAuth habilitados serão exibidos na página de login do Admin
-        value: '["facebook","github","google","microsoft","microsoft-entra-id"]'
-        user_override: false
-        relations:
-          setting_list:
-            - value: facebook
-              order: 0
-            - value: github
-              order: 1
-            - value: google
-              order: 2
-            - value: microsoft
-              order: 3
-            - value: microsoft-entra-id
-              order: 4
-        subgroup_id:
-          where:
-            slug: admin-login-page
 - slug: localization
   icon: world
   name:

package/hedhog/frontend/app/configurations/[slug]/components/setting-field.tsx.ejs

@@ -103,14 +103,6 @@ const OAUTH_PROFILE_SLUG_TO_PROVIDER: Record<string, string> = {
   'oauth-microsoft-profile-id': 'microsoft-oauth',
   'oauth-microsoft-entra-id-profile-id': 'microsoft-entra-id-oauth',
 };
-const ADMIN_LOGIN_OAUTH_SETTING_SLUG = 'admin-login-page-oauth-providers';
-const ADMIN_LOGIN_PROVIDER_ENABLED_SLUG_BY_PROVIDER: Record<string, string> = {
-  facebook: 'oauth-facebook-enabled',
-  github: 'oauth-github-enabled',
-  google: 'oauth-google-enabled',
-  microsoft: 'oauth-microsoft-enabled',
-  'microsoft-entra-id': 'oauth-microsoft-entra-id-enabled',
-};
 const INTEGRATION_PROFILE_PICKER_SLUGS = [
   'file-storage-profile-id',
   ...AI_PROFILE_SETTING_SLUGS,
@@ -524,8 +516,6 @@ export const SettingField = ({ setting, className }: SettingFieldProps) => {
         const selectedValues: string[] = Array.isArray(parsedValue)
           ? parsedValue
           : [];
-        const isAdminLoginOAuthSetting =
-          setting.slug === ADMIN_LOGIN_OAUTH_SETTING_SLUG;
 
         return (
           <div
@@ -535,25 +525,12 @@ export const SettingField = ({ setting, className }: SettingFieldProps) => {
             )}
           >
             {options.map((option) => {
-              const enabledSettingSlug =
-                ADMIN_LOGIN_PROVIDER_ENABLED_SLUG_BY_PROVIDER[option.value];
-              const isProviderGloballyEnabled = enabledSettingSlug
-                ? getSettingValue(enabledSettingSlug) === true
-                : true;
-              const isOptionDisabled =
-                isAdminLoginOAuthSetting && !isProviderGloballyEnabled;
-
               return (
                 <div key={option.id} className="flex items-center space-x-2">
                   <Checkbox
                     className="bg-background"
                     checked={selectedValues.includes(option.value)}
-                    disabled={isOptionDisabled}
                     onCheckedChange={(checked) => {
-                      if (isOptionDisabled) {
-                        return;
-                      }
-
                       let newValues = [...selectedValues];
                       if (checked) {
                         newValues.push(option.value);
@@ -565,19 +542,10 @@ export const SettingField = ({ setting, className }: SettingFieldProps) => {
                       handleChangeValue(formatValue(newValues), true);
                     }}
                   />
-                  <Label className={cn(isOptionDisabled && 'opacity-60')}>
-                    {option.value}
-                  </Label>
+                  <Label>{option.value}</Label>
                 </div>
               );
             })}
-            {isAdminLoginOAuthSetting && (
-              <p className="text-xs text-muted-foreground">
-                {currentLocaleCode.startsWith('pt')
-                  ? 'Providers desabilitados globalmente (oauth-*-enabled = false) ficam indisponíveis nesta lista.'
-                  : 'Providers disabled globally (oauth-*-enabled = false) are unavailable in this list.'}
-              </p>
-            )}
           </div>
         );
       }

package/hedhog/table/setting_runtime_state.yaml

@@ -0,0 +1,9 @@
+columns:
+  - name: scope
+    type: VARCHAR
+    length: 64
+    isPrimaryKey: true
+  - name: version
+    type: BIGINT
+    default: 0
+  - type: updated_at

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "@hed-hog/core",
-  "version": "0.0.360",
+  "version": "0.0.361",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "dependencies": {
     "@aws-sdk/client-s3": "^3.1014.0",
+    "@aws-sdk/client-sts": "3.1014.0",
     "@aws-sdk/s3-request-presigner": "^3.1014.0",
     "@azure/storage-blob": "^12.27.0",
     "@google-cloud/storage": "^7.16.0",
@@ -35,9 +36,9 @@
     "@modelcontextprotocol/sdk": "^1.12.0",
     "@hed-hog/api-locale": "0.0.14",
     "@hed-hog/api-mail": "0.0.9",
-    "@hed-hog/api-pagination": "0.0.7",
-    "@hed-hog/api-prisma": "0.0.6",
     "@hed-hog/api": "0.0.8",
+    "@hed-hog/api-prisma": "0.0.6",
+    "@hed-hog/api-pagination": "0.0.7",
     "@hed-hog/api-types": "0.0.1"
   },
   "exports": {

package/src/file/file.service.ts

@@ -1,3 +1,9 @@
+import { HeadObjectCommand, S3Client } from '@aws-sdk/client-s3';
+import {
+  AssumeRoleCommand,
+  GetSessionTokenCommand,
+  STSClient,
+} from '@aws-sdk/client-sts';
 import { getLocaleText } from '@hed-hog/api-locale';
 import { PaginationDTO, PaginationService } from '@hed-hog/api-pagination';
 import { PrismaService } from '@hed-hog/api-prisma';
@@ -666,6 +672,88 @@ export class FileService implements OnModuleInit {
     return url;
   }
 
+  async getTemporaryCredentials(params: {
+    accessKeyId: string;
+    secretAccessKey: string;
+    sessionToken?: string;
+    region: string;
+    roleArn?: string;
+    externalId?: string;
+    durationSeconds: number;
+    sessionName: string;
+  }): Promise<{
+    AccessKeyId: string;
+    SecretAccessKey: string;
+    SessionToken: string;
+    Expiration?: Date;
+  }> {
+    const stsClient = new STSClient({
+      region: params.region,
+      credentials: {
+        accessKeyId: params.accessKeyId,
+        secretAccessKey: params.secretAccessKey,
+        ...(params.sessionToken ? { sessionToken: params.sessionToken } : {}),
+      },
+    });
+
+    let creds: { AccessKeyId?: string; SecretAccessKey?: string; SessionToken?: string; Expiration?: Date } | undefined;
+
+    if (params.roleArn) {
+      const result = await stsClient.send(
+        new AssumeRoleCommand({
+          RoleArn: params.roleArn,
+          RoleSessionName: params.sessionName,
+          DurationSeconds: params.durationSeconds,
+          ...(params.externalId ? { ExternalId: params.externalId } : {}),
+        }),
+      );
+      creds = result.Credentials;
+    } else {
+      const result = await stsClient.send(
+        new GetSessionTokenCommand({ DurationSeconds: params.durationSeconds }),
+      );
+      creds = result.Credentials;
+    }
+
+    if (!creds?.AccessKeyId || !creds.SecretAccessKey || !creds.SessionToken) {
+      throw new BadRequestException('Could not generate temporary AWS credentials.');
+    }
+
+    return {
+      AccessKeyId: creds.AccessKeyId,
+      SecretAccessKey: creds.SecretAccessKey,
+      SessionToken: creds.SessionToken,
+      Expiration: creds.Expiration,
+    };
+  }
+
+  async headS3Object(params: {
+    accessKeyId: string;
+    secretAccessKey: string;
+    sessionToken?: string;
+    region: string;
+    bucket: string;
+    key: string;
+  }): Promise<{ ContentLength?: number; ETag?: string }> {
+    const s3 = new S3Client({
+      region: params.region,
+      credentials: {
+        accessKeyId: params.accessKeyId,
+        secretAccessKey: params.secretAccessKey,
+        ...(params.sessionToken ? { sessionToken: params.sessionToken } : {}),
+      },
+    });
+
+    const result = await s3.send(
+      new HeadObjectCommand({ Bucket: params.bucket, Key: params.key }),
+    );
+
+    return {
+      ContentLength: result.ContentLength,
+      ETag: result.ETag,
+    };
+  }
+
   createDownloadToken(filepath: string, expires = 3600) {
     if (!filepath) {
       throw new BadRequestException(`No file path provided`);

package/src/setting/setting.service.ts

@@ -471,7 +471,6 @@ export class SettingService implements OnModuleInit, OnModuleDestroy {
       'oauth-google-enabled',
       'oauth-microsoft-enabled',
       'oauth-microsoft-entra-id-enabled',
-      'admin-login-page-oauth-providers',
       'disable-authentication-with-email-and-password',
       'contact-allow-company-registration',
       'operations.comment-edit-window',