@izara_project/izara-core-generate-service-code 1.0.78 → 1.0.79

package/src/emit/crud/templates/FlowEndpointRbacCallback_Main.ejs

@@ -0,0 +1,217 @@
+/*
+Copyright (C) 2021 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+import {
+  objectHash as hash,
+  identifierUuid
+} from '@izara_project/izara-shared-core';
+import asyncFlowSharedLib from '@izara_project/izara-core-library-asynchronous-flow';
+import {
+  utils,
+  uploadUseCase,
+  getObjectSchema
+} from '@izara_project/izara-core-library-service-schemas';
+import snsSharedLib from '@izara_project/izara-core-library-sns';
+import { sns } from '@izara_project/izara-core-library-external-request';
+
+const { createObjType } = utils;
+
+import { <%- flowTag %>LogicalLib } from './<%- upperCaseFlowTag %>LogicalLib.js';
+
+//(<optionalRequire>)
+//(</optionalRequire>)
+
+/**
+ * Handles callback after RbacCallback phase — verifies awaitingStep then proceeds to next phase
+ * @param {Object} _izContext - Context object with logger
+ * @param {Object} requestParams - { fieldNames, relationships[] }
+ * @param {Object} callingFlowConfig - Calling flow configuration
+ * @returns {Promise<Object>}
+ */
+export default async function <%- flowTag %>RbacCallbackMain(
+  _izContext,
+  requestParams,
+  flowTag,
+  callingFlowConfig = {}
+) {
+  try {
+    _izContext.logger.debug('[<%- flowTag %>RbacCallbackMain] Started with params:', {
+      requestParams,
+      flowTag,
+      callingFlowConfig
+    });
+
+    const parts = requestParams.parentFlowId.split('_');
+    const rbacType = parts.pop();
+    const rbacPendingStepId = '<%- flowTag %>RbacCallback_' + parts.join('_');
+    const currentAwaitingStepId = requestParams.parentFlowId;
+
+    _izContext.logger.debug(
+      '[<%- flowTag %>RbacCallbackMain] Parsed RBAC pending details:',
+      {
+        rbacType,
+        rbacPendingStepId,
+        currentAwaitingStepId,
+        parentFlowId: requestParams.parentFlowId
+      }
+    );
+
+    const rbacAwaitingStepsResult =
+      await asyncFlowSharedLib.checkAllAwaitingStepsFinishedWithReturnParams(
+        _izContext,
+        rbacPendingStepId,
+        currentAwaitingStepId,
+        requestParams.errorsFound,
+        {
+          returnValue: requestParams.returnValue,
+          rbacType
+        }
+      );
+
+    _izContext.logger.debug(
+      '[<%- flowTag %>RbacCallbackMain] checkAllAwaitingStepsFinishedWithReturnParams result:',
+      {
+        rbacAwaitingStepsResult
+      }
+    );
+
+    const {
+      isComplete,
+      collectedReturnValueByAwaitingStepId,
+      collectedErrors: errorsFound = [],
+      additionalAttributes
+    } = rbacAwaitingStepsResult;
+
+    if (isComplete === false) {
+      _izContext.logger.debug(
+        '[<%- flowTag %>RbacCallbackMain] Awaiting steps still pending completion:',
+        {
+          rbacPendingStepId,
+          isComplete
+        }
+      );
+
+      return 'all task not completed';
+    }
+
+    _izContext.logger.debug(
+      '[<%- flowTag %>RbacCallbackMain] All awaiting steps completed — clearing awaiting steps:',
+      {
+        rbacPendingStepId
+      }
+    );
+
+    await asyncFlowSharedLib.clearAllAwaitingSteps(
+      _izContext,
+      rbacPendingStepId
+    );
+
+    const originalRequestParams = additionalAttributes?.requestParams || {};
+
+    _izContext.logger.debug(
+      '[<%- flowTag %>RbacCallbackMain] Retrieved originalRequestParams:',
+      {
+        originalRequestParams
+      }
+    );
+
+    const rbacResults = Object.fromEntries(
+      Object.entries(collectedReturnValueByAwaitingStepId || {}).map(
+        ([stepId, attrs]) => {
+          const type = stepId.split('_').pop();
+          return [type, attrs];
+        }
+      )
+    );
+
+    const rbacCallbackResults = {};
+    const hasError = Object.entries(rbacResults).some(([type, result]) => {
+      if (result && result.error) {
+        errorsFound.push(result.error);
+        return true;
+      }
+      rbacCallbackResults[type] = result;
+      return false;
+    });
+
+    const isAllowed = Object.values(rbacCallbackResults).some(
+      item => item?.returnValue?.permission === true
+    );
+
+    if (!isAllowed) {
+      errorsFound.push('Permission denied');
+    }
+
+    _izContext.logger.debug(
+      '[<%- flowTag %>RbacCallbackMain] Final rbacCallbackResults before calling <%- flowTag %>MainLogical:',
+      {
+        rbacCallbackResults,
+        isAllowed,
+        errorsFound
+      }
+    );
+
+    if (hasError || errorsFound.length > 0) {
+      const errorResult = {
+        errorsFound,
+        status: 'rejected',
+        requestParams: originalRequestParams
+      };
+
+      _izContext.logger.debug(
+        '[<%- flowTag %>RbacCallbackMain] RBAC check failed, publishing rejected status:',
+        errorResult
+      );
+
+      await sns.publishAsync(_izContext, {
+        TopicArn: snsSharedLib.snsTopicArnByFlowSchema(
+          _izContext,
+          '<%- upperCaseFlowTag %>_Out',
+          process.env.iz_serviceTag
+        ),
+        Message: JSON.stringify(errorResult)
+      });
+
+      return errorResult;
+    }
+
+    //(<rbacCallbackMain>)
+    //(</rbacCallbackMain>)
+
+    const logicalResult = await <%- flowTag %>LogicalLib(
+      _izContext,
+      originalRequestParams,
+      callingFlowConfig,
+      errorsFound,
+      rbacCallbackResults
+    );
+
+    _izContext.logger.debug(
+      '[<%- flowTag %>RbacCallbackMain] <%- flowTag %>LogicalLib completed successfully:',
+      {
+        logicalResult
+      }
+    );
+
+    return logicalResult;
+  } catch (err) {
+    _izContext.logger.error('[<%- flowTag %>RbacCallbackMain] Error caught:', {
+      error: err
+    });
+    throw err;
+  }
+}

package/src/emit/crud/templates/GetEndpoint_Main.ejs

@@ -58,7 +58,7 @@ import { sns } from '@izara_project/izara-core-library-external-request';
 export default async function <%- flowTag %>(
   _izContext,
   requestParams,
-  callingFlowConfig = {}
+  callingFlowConfig = {},
   //(<additionalParams>)
   //(</additionalParams>)
 ) {

package/src/emit/crud/templates/GetRangeEndpoint_Main.ejs

@@ -43,7 +43,7 @@ import dynamodbSharedLib from '@izara_project/izara-core-library-dynamodb';
 export default async function <%- mainFileName %>(
   _izContext,
   requestParams,
-  callingFlowConfig = {}
+  callingFlowConfig = {},
   //(<additionalParams>)
   //(</additionalParams>)
 ) {
@@ -97,7 +97,14 @@ export default async function <%- mainFileName %>(
             getDataDetail.serviceTag
           );
 
-          const pkName = getDataDetail.partitionKey || 'pk';
+          const pkIdentifier = objectSchema.identifiers?.find(
+            (id) => id.type === 'partitionKey'
+          );
+          const pkName =
+            getDataDetail.groupByPartitionKeyField ||
+            pkIdentifier?.fieldName ||
+            pkIdentifier?.name ||
+            'pk';
           const partitionKeyValue = { [pkName]: pk };
 
           //(<beforeGetRangeDynamoDb>)