@huynle/hub 0.9.1 → 0.10.0

package/src/central/agent/connect-routes.ts

@@ -0,0 +1,64 @@
+// (AF1) Settings → Agents management of connect-app: registered app clients (GET/POST /api/agent/app-clients,
+// PATCH/DELETE …/:id, POST …/:id/secret) and the user's connections (GET /api/agent/connections, DELETE …/:id).
+// User actors only (allow {}): an app or a session can never register a client, see a secret or list connections.
+// Rules (hub-wide clients by admins, personal ones by their owner only) live in connect.ts.
+import { CONNECT_PATHS } from "../../protocol"
+import { boundedJson } from "./body"
+import type { AppConnect } from "./connect"
+import { AgentError } from "./errors"
+import type { AgentRoute } from "./routes"
+
+const NO_STORE = { "cache-control": "no-store" }
+
+export function connectRoutes(connect: AppConnect): AgentRoute[] {
+  return [
+    {
+      method: "GET",
+      path: CONNECT_PATHS.clients,
+      allow: {},
+      handle: ({ user }) => Response.json({ clients: connect.clients(user) }, { headers: NO_STORE }),
+    },
+    {
+      method: "POST",
+      path: CONNECT_PATHS.clients,
+      allow: {},
+      handle: async ({ request, user }) => Response.json(await connect.register(user, await boundedJson(request)), { status: 201, headers: NO_STORE }),
+    },
+    {
+      method: "PATCH",
+      path: CONNECT_PATHS.client,
+      allow: {},
+      handle: async ({ request, params, user }) => Response.json({ client: await connect.update(user, params.id!, await boundedJson(request)) }, { headers: NO_STORE }),
+    },
+    {
+      method: "DELETE",
+      path: CONNECT_PATHS.client,
+      allow: {},
+      async handle({ params, user }) {
+        await connect.remove(user, params.id!)
+        return new Response(null, { status: 204, headers: NO_STORE })
+      },
+    },
+    {
+      method: "POST",
+      path: CONNECT_PATHS.clientSecret,
+      allow: {},
+      handle: async ({ params, user }) => Response.json(await connect.rotate(user, params.id!), { headers: NO_STORE }),
+    },
+    {
+      method: "GET",
+      path: CONNECT_PATHS.connections,
+      allow: {},
+      handle: ({ user }) => Response.json({ connections: connect.connections(user.id) }, { headers: NO_STORE }),
+    },
+    {
+      method: "DELETE",
+      path: CONNECT_PATHS.connection,
+      allow: {},
+      async handle({ params, user }) {
+        if (!(await connect.end(user.id, params.id!, { by: user.id, why: "revoked by the user" }))) throw new AgentError("not_found", "No such connection")
+        return new Response(null, { status: 204, headers: NO_STORE })
+      },
+    },
+  ]
+}