@izara_project/izara-core-generate-service-code 1.0.67 → 1.0.69

package/src/emit/rbac/templates/ListRbac_Main.ejs

@@ -1,18 +1,35 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
 import dynamodbSharedLib from '@izara_project/izara-core-library-dynamodb';
 import snsSharedLib from '@izara_project/izara-core-library-sns';
 import { sns } from '@izara_project/izara-core-library-external-request';
 import { consts, NoRetryError } from '@izara_project/izara-core-library-core';
 
-export default async function Process<%- flowTag %>(_izContext, requestParams) {
+export default async function <%- flowTag %>(_izContext, requestParams) {
   try {
-<% if (useContextUserId) { -%>
+    <% if (useContextUserId) { -%>
     const userId = _izContext.correlationIds.get(consts.BASE_USER_ID);
     if (!userId) throw new NoRetryError('User Id not found.');
     const queryParams = { userId };
-<% } else { -%>
+    <% } else { -%>
     const { <%- requestProperty %> } = requestParams;
     const queryParams = { <%- requestProperty %> };
-<% } -%>
+    <% } -%>
     const resultQuery = await dynamodbSharedLib.query(
       _izContext,
       dynamodbSharedLib.tableName(_izContext, '<%- tableName %>'),
@@ -20,10 +37,13 @@ export default async function Process<%- flowTag %>(_izContext, requestParams) {
     );
     await sns.publishMessage(_izContext, {
       message: { returnResult: { records: resultQuery.Items || [] } },
-      TopicArn: snsSharedLib.snsTopicArnByFlowSchema(_izContext, '<%- flowTag %>_Out')
+      TopicArn: snsSharedLib.snsTopicArnByFlowSchema(
+        _izContext,
+        '<%- flowTag %>_Out'
+      )
     });
   } catch (error) {
-    _izContext.logger.error('[Rbac:Process<%- flowTag %>] error:', error);
+    _izContext.logger.error('[Rbac:<%- flowTag %>] error:', error);
     throw error;
   }
 }

package/src/emit/rbac/templates/RbacMutation_Main.ejs

@@ -1,9 +1,26 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
 <% const fieldList = fields.join(', '); -%>
 import dynamodbSharedLib from '@izara_project/izara-core-library-dynamodb';
 import snsSharedLib from '@izara_project/izara-core-library-sns';
 import { sns } from '@izara_project/izara-core-library-external-request';
 
-export default async function Process<%- flowTag %>(_izContext, requestParams) {
+export default async function <%- flowTag %>(_izContext, requestParams) {
   try {
     const { <%- fieldList %> } = requestParams;
     await dynamodbSharedLib.<%- method %>(
@@ -13,10 +30,13 @@ export default async function Process<%- flowTag %>(_izContext, requestParams) {
     );
     await sns.publishMessage(_izContext, {
       message: { returnResult: { <%- fieldList %> } },
-      TopicArn: snsSharedLib.snsTopicArnByFlowSchema(_izContext, '<%- flowTag %>_Out')
+      TopicArn: snsSharedLib.snsTopicArnByFlowSchema(
+        _izContext,
+        '<%- flowTag %>_Out'
+      )
     });
   } catch (error) {
-    _izContext.logger.error('[Rbac:Process<%- flowTag %>] error:', error);
+    _izContext.logger.error('[Rbac:<%- flowTag %>] error:', error);
     throw error;
   }
 }

package/src/emit/rbac/templates/UserRbacFlow_HdrSqs.ejs

@@ -0,0 +1,46 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+import { middlewareHandler as middleware } from '@izara_project/izara-middleware';
+import { recordHandlerSharedLib } from '@izara_project/izara-core-library-record-handler';
+import callingFlowSharedLib from '@izara_project/izara-core-library-calling-flow';
+import <%- flowTag %> from './<%- flowTag %>_Main.js';
+
+middleware.setValidatorSchema(recordHandlerSharedLib.baseValidatorSchema());
+export const main = middleware.wrap(async (event) =>
+  Promise.all(
+    event.Records.map(async (record) => {
+      await recordHandlerSharedLib.validateRecord(
+        record,
+        '<%- flowTag %>HdrSqs',
+        {},
+        null
+      );
+      return recordHandlerSharedLib.recordHandler(
+        record,
+        <%- flowTag %>,
+        '<%- flowTag %>HdrSqs',
+        [
+          record.body.Message,
+          callingFlowSharedLib.addCallingFlowToPassOnProperties(
+            record.body.Message
+          )
+        ]
+      );
+    })
+  )
+);

package/src/emit/rbac/templates/UserRbacFlow_Main.ejs

@@ -1,44 +1,163 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
 import dynamodbSharedLib from '@izara_project/izara-core-library-dynamodb';
 import { coreConsts } from '@izara_project/izara-core-library-core';
+import { sns } from '@izara_project/izara-core-library-external-request';
+import snsSharedLib from '@izara_project/izara-core-library-sns';
+
+export default async function <%- flowTag %>(_izContext, requestParams = {}) {
+  const userId = _izContext.correlationIds.get(coreConsts.BASE_USER_ID);
+  const targetId = _izContext.correlationIds.get(coreConsts.TARGET_ID);
+  if (!userId || !targetId) {
+    throw new Error('Missing required request parameters: userId or targetId');
+  }
+
+  const { flowTypeConcat, inputParameterGroups } = requestParams;
+  if (!flowTypeConcat) {
+    throw new Error('Missing flowTypeConcat in requestParams');
+  }
 
-export default async function Process<%- flowTag %>(_izContext, requestParams) {
-  try {
-    const userId = _izContext.correlationIds.get(coreConsts.BASE_USER_ID);
-    const targetId = _izContext.correlationIds.get(coreConsts.TARGET_ID);
-    if (!userId && !targetId) throw new Error('Missing required request parameters: userId or targetId');
-    const { flowTypeConcat, inputParameterGroups } = requestParams;
-    if (!flowTypeConcat) throw new Error('Missing flowTypeConcat in requestParams');
-    const userRoles = (await dynamodbSharedLib.query(
-      _izContext,
-      dynamodbSharedLib.tableName(_izContext, 'UserRoles'),
-      { userId }
-    )).Items || [];
-    const targetRoles = userRoles.filter(role => role.roleIdKey?.startsWith(targetId + '_'));
-    for (const role of targetRoles) {
-      const permission = await dynamodbSharedLib.getItem(
-        _izContext,
-        dynamodbSharedLib.tableName(_izContext, 'RolePermissions'),
-        { roleIdKey: role.roleIdKey, flowTypeConcat }
+  const userRolesResult = await dynamodbSharedLib.query(
+    _izContext,
+    dynamodbSharedLib.tableName(_izContext, 'UserRoles'),
+    { userId }
+  );
+
+  let userRoles = [];
+  if (Array.isArray(userRolesResult)) {
+    userRoles = userRolesResult;
+  } else if (userRolesResult && userRolesResult.Items) {
+    userRoles = userRolesResult.Items;
+  }
+
+  const targetIdPrefix = `${targetId}_`;
+  const targetRoles = [];
+  for (const role of userRoles) {
+    if (role && role.roleIdKey && role.roleIdKey.startsWith(targetIdPrefix)) {
+      targetRoles.push(role);
+    }
+  }
+
+  if (targetRoles.length === 0) {
+    await _publicMessageOut(_izContext, {
+      permission: false,
+      roleIdKey: ''
+    });
+    return;
+  }
+
+  const rolePermissionsTable = dynamodbSharedLib.tableName(
+    _izContext,
+    'RolePermissions'
+  );
+  const rolePermissions = await Promise.all(
+    targetRoles.map(async (role) => {
+      return await dynamodbSharedLib.getItem(_izContext, rolePermissionsTable, {
+        roleIdKey: role.roleIdKey,
+        flowTypeConcat
+      });
+    })
+  );
+
+  let matched = null;
+  for (const permission of rolePermissions) {
+    if (permission && permission.permission === true) {
+      const isMatched = _matchesParameterGroups(
+        permission.parameterGroups,
+        inputParameterGroups
       );
-      if (permission?.permission === true && matchesParameterGroups(permission.parameterGroups, inputParameterGroups)) {
-        return { permission: true, roleIdKey: permission.roleIdKey };
+      if (isMatched) {
+        matched = permission;
+        break;
       }
     }
-    return { permission: false, roleIdKey: '' };
-  } catch (error) {
-    _izContext.logger.error('error Process<%- flowTag %>:', error);
-    throw error;
+  }
+
+  if (matched) {
+    await _publicMessageOut(_izContext, {
+      permission: true,
+      roleIdKey: matched.roleIdKey
+    });
+  } else {
+    await _publicMessageOut(_izContext, {
+      permission: false,
+      roleIdKey: ''
+    });
   }
 }
 
-function matchesParameterGroups(groups, input) {
-  if (!groups || typeof groups !== 'object' || Array.isArray(groups) || Object.keys(groups).length === 0) return true;
-  return Object.values(groups).some(group => Array.isArray(group) && group.every(check => {
-    let value = input || {};
-    for (const name of check.parameterNames || []) {
-      if (!value || typeof value !== 'object' || !(name in value)) return false;
-      value = value[name];
+async function _publicMessageOut(_izContext, message) {
+  const topicOut = snsSharedLib.snsTopicArnByFlowSchema(
+    _izContext,
+    process.env.iz_flowTag + '_Out'
+  );
+
+  await sns.publishAsync(_izContext, {
+    topicArn: topicOut,
+    message: JSON.stringify(message)
+  });
+}
+
+function _matchesParameterGroups(groups, input) {
+  if (!groups || typeof groups !== 'object' || Array.isArray(groups)) {
+    return true;
+  }
+
+  const groupValues = Object.values(groups);
+  if (groupValues.length === 0) {
+    return true;
+  }
+
+  for (const group of groupValues) {
+    if (!Array.isArray(group)) {
+      continue;
+    }
+
+    let isGroupMatched = true;
+    for (const check of group) {
+      if (
+        !Array.isArray(check.parameterNames) ||
+        !Array.isArray(check.parameterValues)
+      ) {
+        isGroupMatched = false;
+        break;
+      }
+
+      let val = input || {};
+      for (const key of check.parameterNames) {
+        if (val && typeof val === 'object') {
+          val = val[key];
+        } else {
+          val = null;
+          break;
+        }
+      }
+
+      if (!check.parameterValues.includes(val)) {
+        isGroupMatched = false;
+        break;
+      }
     }
-    return Array.isArray(check.parameterValues) && check.parameterValues.includes(value);
-  }));
+
+    if (isGroupMatched) {
+      return true;
+    }
+  }
+
+  return false;
 }

package/src/emit/rbac/templates/UserRoleMutation_Main.ejs

@@ -1,11 +1,28 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
 <%
 const itemType = operation === 'Put' ? 'Item' : 'Key';
 const roleUsersKey = operation === 'Put' ? 'userId, roleIdKey' : 'roleIdKey, userId';
--%>import dynamodbSharedLib from '@izara_project/izara-core-library-dynamodb';
+-%> import dynamodbSharedLib from '@izara_project/izara-core-library-dynamodb';
 import snsSharedLib from '@izara_project/izara-core-library-sns';
 import { sns } from '@izara_project/izara-core-library-external-request';
 
-export default async function Process<%- flowTag %>(_izContext, requestParams) {
+export default async function <%- flowTag %>(_izContext, requestParams) {
   try {
     const { roleIdKey, userId } = requestParams;
     await dynamodbSharedLib.transactWriteItems(_izContext, [
@@ -24,10 +41,13 @@ export default async function Process<%- flowTag %>(_izContext, requestParams) {
     ]);
     await sns.publishMessage(_izContext, {
       message: { returnResult: { userId, roleIdKey } },
-      TopicArn: snsSharedLib.snsTopicArnByFlowSchema(_izContext, '<%- flowTag %>_Out')
+      TopicArn: snsSharedLib.snsTopicArnByFlowSchema(
+        _izContext,
+        '<%- flowTag %>_Out'
+      )
     });
   } catch (error) {
-    _izContext.logger.error('[Rbac:Process<%- flowTag %>] error:', error);
+    _izContext.logger.error('[Rbac:<%- flowTag %>] error:', error);
     throw error;
   }
 }

package/src/emit/relationship/emitDynamicRelationshipFlowSchemas.js

@@ -1,5 +1,3 @@
-import { renderDynamicRelationshipFlowSchema } from './dynamicRelationshipFlowSchemaTemplate.js';
-
 const ACTIONS = [
   'CreateRelationship',
   'UpdateRelationship',
@@ -11,17 +9,33 @@ const ACTIONS = [
 const MESSAGE_ATTRIBUTES = ['userId', 'correlationId'];
 
 export const dynamicRelationshipFlowSchemaPaths = ACTIONS.map(
-  action => `app/src/schemas/FlowSchemas/generateCode/${action}.js`
+  (action) =>
+    `app/src/schemas/FlowSchemas/generateCode/FlowRelationship/${action}.js`
 );
 
 export function emitDynamicRelationshipFlowSchemas() {
   // Keep legacy compatibility: relationship flow endpoints exist even before a relationship is declared.
   return ACTIONS.map((action, index) => ({
     path: dynamicRelationshipFlowSchemaPaths[index],
-    content: renderDynamicRelationshipFlowSchema(action, createDynamicRelationshipFlow(action))
+    content: _renderDynamicRelationshipFlowSchema(
+      action,
+      createDynamicRelationshipFlow(action)
+    )
   }));
 }
 
+function _renderDynamicRelationshipFlowSchema(action, flow) {
+  return [
+    '/**',
+    ' * GENERATED DYNAMIC RELATIONSHIP FLOW SCHEMA',
+    ` * Action: ${action}`,
+    ' * Description: Handles dynamic relationship actions for all allowed RelationshipTypes via SQS/DSQ',
+    ' */',
+    `export default ${JSON.stringify(flow, null, 2)};`,
+    ''
+  ].join('\n');
+}
+
 function createDynamicRelationshipFlow(action) {
   const outputTopic = action !== 'GetRelationship';
   const flowSteps = [
@@ -29,12 +43,14 @@ function createDynamicRelationshipFlow(action) {
       stepName: 'start',
       properties: [],
       messageAttributes: MESSAGE_ATTRIBUTES,
-      ...(outputTopic ? {
-        returnValues: {
-          properties: [],
-          messageAttributes: MESSAGE_ATTRIBUTES
-        }
-      } : {})
+      ...(outputTopic
+        ? {
+            returnValues: {
+              properties: [],
+              messageAttributes: MESSAGE_ATTRIBUTES
+            }
+          }
+        : {})
     }
   ];
 
@@ -49,7 +65,6 @@ function createDynamicRelationshipFlow(action) {
 
   return {
     flowTag: action,
-    isDynamicRelationshipType: true,
     initiateBy: 'system',
     handleObj: 'one',
     statusType: 'none',