@lifeready/core 8.0.14 → 8.0.15

package/bundles/lifeready-core.umd.js

@@ -1409,18 +1409,21 @@
     var KC_CONFIG = new i0.InjectionToken('KC_CONFIG');
     var RETRY_ERROR_CODES = [exports.KcErrorCode.CONCURRENT_ACCESS];
     function httpOptions(auth, config) {
-        var _a;
+        var _a, _b;
         return __awaiter(this, void 0, void 0, function () {
-            var token, debugUsername;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var token, debugUsername, debugRbacCacheMode;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0: return [4 /*yield*/, getAccessJwtToken(auth)];
                     case 1:
-                        token = _b.sent();
+                        token = _c.sent();
                         debugUsername = (_a = config.debug) === null || _a === void 0 ? void 0 : _a.username;
+                        debugRbacCacheMode = (_b = config.debug) === null || _b === void 0 ? void 0 : _b.rbacCacheMode;
                         return [2 /*return*/, {
                                 withCredentials: true,
-                                headers: Object.assign(Object.assign({}, (token && { authorization: "Bearer " + token })), (debugUsername && { 'x-kc-dev-user': debugUsername })),
+                                headers: Object.assign(Object.assign(Object.assign({}, (token && { authorization: "Bearer " + token })), (debugUsername && { 'x-kc-dev-user': debugUsername })), (debugRbacCacheMode && {
+                                    'x-kc-dev-rbac-cache-mode': debugRbacCacheMode,
+                                })),
                             }];
                 }
             });
@@ -1441,15 +1444,15 @@
                 errorPolicy: 'all',
             },
         };
-        var authLink = context.setContext(function (_, _b) {
-            var headers = _b.headers;
+        var authLink = context.setContext(function (_, _c) {
+            var headers = _c.headers;
             return __awaiter(void 0, void 0, void 0, function () {
                 var options;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
+                return __generator(this, function (_c) {
+                    switch (_c.label) {
                         case 0: return [4 /*yield*/, httpOptions(auth, config)];
                         case 1:
-                            options = _b.sent();
+                            options = _c.sent();
                             return [2 /*return*/, Object.assign(Object.assign({}, options), { headers: Object.assign(Object.assign({}, headers), options.headers) })];
                     }
                 });
@@ -3099,6 +3102,16 @@
                     plainFieldName: 'plain',
                 }),
             ]));
+            this.registerProcessor('DirectoryShareNode', common.series([
+                common.makeJsonParseProcessor({
+                    plainFieldName: 'plainMeta',
+                }),
+            ]));
+            this.registerProcessor('FileShareNode', common.series([
+                common.makeJsonParseProcessor({
+                    plainFieldName: 'plainMeta',
+                }),
+            ]));
         }
         QueryProcessorService.prototype.processQuery = function (fields, options) {
             return __awaiter(this, void 0, void 0, function () {
@@ -6875,6 +6888,8 @@
                             // This will fail if debug is null. But when debug is null, this function
                             // should not be called.
                             this.kcConfig.debug.username = username;
+                            // Reset it so we don't get surprises.
+                            this.kcConfig.debug.rbacCacheMode = null;
                             // This mechanism only works in a browser session because it needs to set cookies etc.
                             // But it sets the last_login field for the users which we need in some tests.
                             return [4 /*yield*/, this.http
@@ -6944,6 +6959,9 @@
                 });
             });
         };
+        AuthService.prototype.debugRetainRbacCache = function (b) {
+            this.kcConfig.debug.rbacCacheMode = b ? 'retain' : null;
+        };
         return AuthService;
     }(LrService));
     exports.AuthService.CHALLENGE_TIMEOUT = 1000 * 60 * 5;
@@ -11054,7 +11072,7 @@
                                     sharedCipherDataClearJson: existingDirectory.sharedCipherDataClearJson,
                                 });
                             });
-                            // Fill in any missing update directories
+                            // Fill in any missing update files
                             mapEdges(existingReceiver.receiverItems.receiverFiles).forEach(function (existingFile) {
                                 if (deleteFilesOptions.includes(existingFile.file.id)) {
                                     return;
@@ -12123,8 +12141,8 @@
     var templateObject_1$q, templateObject_2$k, templateObject_3$h, templateObject_4$d, templateObject_5$b, templateObject_6$6, templateObject_7$5, templateObject_8$5, templateObject_9$5, templateObject_10$2, templateObject_11$1, templateObject_12$1;
 
     var TpCurrentUserSharedKeyQuery = gqlTyped(templateObject_1$r || (templateObject_1$r = __makeTemplateObject(["\nquery TpCurrentUserSharedKeyQuery($id: LrRelayIdInput!) {\n  tp(id: $id){\n    currentUserSharedKey {\n      userSharedKey {\n        sharedKey {\n          id\n        }\n        mkSharedKey {\n          id\n        }\n        mkPxk {\n          id\n        }\n        mkReshareRequestCipher\n        mkReshareRequestSent\n        mkReshareResponseCipher\n        mkReshareResponseSent\n      }\n    }\n  }\n}\n"], ["\nquery TpCurrentUserSharedKeyQuery($id: LrRelayIdInput!) {\n  tp(id: $id){\n    currentUserSharedKey {\n      userSharedKey {\n        sharedKey {\n          id\n        }\n        mkSharedKey {\n          id\n        }\n        mkPxk {\n          id\n        }\n        mkReshareRequestCipher\n        mkReshareRequestSent\n        mkReshareResponseCipher\n        mkReshareResponseSent\n      }\n    }\n  }\n}\n"])));
-    var DirectoryShareQuery = gqlTyped(templateObject_2$l || (templateObject_2$l = __makeTemplateObject(["\nquery DirectoryShareQuery($id: LrRelayIdInput!) {\n  directoryShare(id: $id) {\n    item {\n      id\n    }\n    tp {\n      id\n    }\n  }\n}\n"], ["\nquery DirectoryShareQuery($id: LrRelayIdInput!) {\n  directoryShare(id: $id) {\n    item {\n      id\n    }\n    tp {\n      id\n    }\n  }\n}\n"])));
-    var FileShareQuery = gqlTyped(templateObject_3$i || (templateObject_3$i = __makeTemplateObject(["\nquery FileShareItemIdQuery($id: LrRelayIdInput!) {\n  fileShare(id: $id) {\n    item {\n      id\n    }\n    tp {\n      id\n    }\n  }\n}\n"], ["\nquery FileShareItemIdQuery($id: LrRelayIdInput!) {\n  fileShare(id: $id) {\n    item {\n      id\n    }\n    tp {\n      id\n    }\n  }\n}\n"])));
+    var DirectoryShareQuery = gqlTyped(templateObject_2$l || (templateObject_2$l = __makeTemplateObject(["\nquery DirectoryShareQuery($id: LrRelayIdInput!) {\n  directoryShare(id: $id) {\n    item {\n      id\n    }\n    tp {\n      id\n    }\n    shareType\n  }\n}\n"], ["\nquery DirectoryShareQuery($id: LrRelayIdInput!) {\n  directoryShare(id: $id) {\n    item {\n      id\n    }\n    tp {\n      id\n    }\n    shareType\n  }\n}\n"])));
+    var FileShareQuery = gqlTyped(templateObject_3$i || (templateObject_3$i = __makeTemplateObject(["\nquery FileShareItemIdQuery($id: LrRelayIdInput!) {\n  fileShare(id: $id) {\n    item {\n      id\n    }\n    tp {\n      id\n    }\n    shareType\n  }\n}\n"], ["\nquery FileShareItemIdQuery($id: LrRelayIdInput!) {\n  fileShare(id: $id) {\n    item {\n      id\n    }\n    tp {\n      id\n    }\n    shareType\n  }\n}\n"])));
     var templateObject_1$r, templateObject_2$l, templateObject_3$i;
 
     exports.TrustedPartyService = /** @class */ (function (_super) {
@@ -12203,12 +12221,13 @@
         };
         TrustedPartyService.prototype.prepareCreateItemShareMutation = function (options) {
             return __awaiter(this, void 0, void 0, function () {
-                var itemId, itemKeyId, tpId, tpSharedKeyId, accessRole, isDirectory, shareType, itemKey, wrappingKey, wrappedItemKey;
+                var itemId, itemKeyId, tpId, tpSharedKeyId, accessRole, isDirectory, shareType, plainMetaJson, plainMeta, itemKey, wrappingKey, wrappedItemKey;
                 var _this = this;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            itemId = options.itemId, itemKeyId = options.itemKeyId, tpId = options.tpId, tpSharedKeyId = options.tpSharedKeyId, accessRole = options.accessRole, isDirectory = options.isDirectory, shareType = options.shareType;
+                            itemId = options.itemId, itemKeyId = options.itemKeyId, tpId = options.tpId, tpSharedKeyId = options.tpSharedKeyId, accessRole = options.accessRole, isDirectory = options.isDirectory, shareType = options.shareType, plainMetaJson = options.plainMetaJson;
+                            plainMeta = plainMetaJson && JSON.stringify(plainMetaJson);
                             if (accessRole == exports.AccessRoleChoice.DENY) {
                                 if (itemKeyId || tpSharedKeyId) {
                                     throw new KcBadArgumentException('If accessRole is AccessRoleChoice.DENY, must not specify any of itemId, itemKeyId, or tpSharedKeyId parameters');
@@ -12222,6 +12241,7 @@
                                             wrappingKeyId: null,
                                             wrappedItemKey: null,
                                             shareType: shareType,
+                                            plainMeta: plainMeta,
                                         },
                                     }];
                             }
@@ -12245,6 +12265,7 @@
                                         wrappingKeyId: wrappingKey.id,
                                         wrappedItemKey: wrappedItemKey,
                                         shareType: shareType,
+                                        plainMeta: plainMeta,
                                     },
                                 }];
                     }
@@ -12275,6 +12296,30 @@
                 });
             });
         };
+        TrustedPartyService.prototype.updateDetachedDirectoryShare = function (options) {
+            return __awaiter(this, void 0, void 0, function () {
+                return __generator(this, function (_a) {
+                    return [2 /*return*/, this.mutate(this.updateDetachedDirectoryShareMutation(options))];
+                });
+            });
+        };
+        TrustedPartyService.prototype.updateDetachedDirectoryShareMutation = function (options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var _a, _b;
+                return __generator(this, function (_c) {
+                    switch (_c.label) {
+                        case 0:
+                            _a = LrMutation.bind;
+                            _b = {
+                                mutation: UpdateDirectoryShareMutation
+                            };
+                            return [4 /*yield*/, this.prepareUpdateDetachedItemShareMutation(options)];
+                        case 1: return [2 /*return*/, new (_a.apply(LrMutation, [void 0, (_b.variables = _c.sent(),
+                                    _b)]))()];
+                    }
+                });
+            });
+        };
         TrustedPartyService.prototype.updateFileShare = function (options) {
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_a) {
@@ -12299,6 +12344,30 @@
                 });
             });
         };
+        TrustedPartyService.prototype.updateDetachedFileShare = function (options) {
+            return __awaiter(this, void 0, void 0, function () {
+                return __generator(this, function (_a) {
+                    return [2 /*return*/, this.mutate(this.updateDetachedFileShareMutation(options))];
+                });
+            });
+        };
+        TrustedPartyService.prototype.updateDetachedFileShareMutation = function (options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var _a, _b;
+                return __generator(this, function (_c) {
+                    switch (_c.label) {
+                        case 0:
+                            _a = LrMutation.bind;
+                            _b = {
+                                mutation: UpdateFileShareMutation
+                            };
+                            return [4 /*yield*/, this.prepareUpdateDetachedItemShareMutation(options)];
+                        case 1: return [2 /*return*/, new (_a.apply(LrMutation, [void 0, (_b.variables = _c.sent(),
+                                    _b)]))()];
+                    }
+                });
+            });
+        };
         TrustedPartyService.prototype.getDirectoryShare = function (itemShareId) {
             return this.lrGraphQL.query({
                 query: DirectoryShareQuery,
@@ -12317,13 +12386,15 @@
         };
         TrustedPartyService.prototype.prepareUpdateItemShareMutation = function (options) {
             return __awaiter(this, void 0, void 0, function () {
-                var itemShareId, accessRole, isDirectory, itemId, itemKeyId, tpId, tpSharedKeyId, itemShare, getItemShare, itemKey, wrappingKey, wrappedItemKey;
+                var itemShareId, accessRole, isDirectory, itemId, itemKeyId, tpId, tpSharedKeyId, plainMetaJson, plainMeta, itemShare, getItemShare, itemKey, wrappingKey, wrappedItemKey;
                 var _this = this;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            itemShareId = options.itemShareId, accessRole = options.accessRole, isDirectory = options.isDirectory, itemId = options.itemId, itemKeyId = options.itemKeyId, tpId = options.tpId, tpSharedKeyId = options.tpSharedKeyId;
-                            if (accessRole == exports.AccessRoleChoice.DENY) {
+                            itemShareId = options.itemShareId, accessRole = options.accessRole, isDirectory = options.isDirectory, itemId = options.itemId, itemKeyId = options.itemKeyId, tpId = options.tpId, tpSharedKeyId = options.tpSharedKeyId, plainMetaJson = options.plainMetaJson;
+                            plainMeta = plainMetaJson && JSON.stringify(plainMetaJson);
+                            // If not updating access role or updating to DENY role, then we don't need any key material.
+                            if (accessRole == null || accessRole == exports.AccessRoleChoice.DENY) {
                                 if (itemId || itemKeyId || tpId || tpSharedKeyId) {
                                     throw new KcBadArgumentException('If accessRole is AccessRoleChoice.DENY, must not specify any of itemId, itemKeyId, tpId, or tpSharedKeyId parameters');
                                 }
@@ -12331,9 +12402,7 @@
                                         input: {
                                             id: itemShareId,
                                             accessRole: accessRole,
-                                            itemKeyId: null,
-                                            wrappingKeyId: null,
-                                            wrappedItemKey: null,
+                                            plainMeta: plainMeta,
                                         },
                                     }];
                             }
@@ -12341,7 +12410,7 @@
                                 return __generator(this, function (_a) {
                                     switch (_a.label) {
                                         case 0:
-                                            if (!!itemShare) return [3 /*break*/, 4];
+                                            if (!!itemShare) return [3 /*break*/, 5];
                                             if (!isDirectory) return [3 /*break*/, 2];
                                             return [4 /*yield*/, this.getDirectoryShare(itemShareId)];
                                         case 1:
@@ -12352,7 +12421,12 @@
                                         case 3:
                                             itemShare = (_a.sent()).fileShare;
                                             _a.label = 4;
-                                        case 4: return [2 /*return*/, itemShare];
+                                        case 4:
+                                            if (itemShare.shareType == exports.ShareTypeChoice.DETACHED) {
+                                                throw new KcBadArgumentException('Use updateDetachedDirectoryShare() or updateDetachedFileShare() to updated DETACHED shares.');
+                                            }
+                                            _a.label = 5;
+                                        case 5: return [2 /*return*/, itemShare];
                                     }
                                 });
                             }); };
@@ -12411,12 +12485,28 @@
                                         itemKeyId: itemKey.id,
                                         wrappingKeyId: wrappingKey.id,
                                         wrappedItemKey: wrappedItemKey,
+                                        plainMeta: plainMeta,
                                     },
                                 }];
                     }
                 });
             });
         };
+        TrustedPartyService.prototype.prepareUpdateDetachedItemShareMutation = function (options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var itemShareId, accessRole, plainMetaJson;
+                return __generator(this, function (_a) {
+                    itemShareId = options.itemShareId, accessRole = options.accessRole, plainMetaJson = options.plainMetaJson;
+                    return [2 /*return*/, {
+                            input: {
+                                id: itemShareId,
+                                accessRole: accessRole,
+                                plainMeta: plainMetaJson && JSON.stringify(plainMetaJson),
+                            },
+                        }];
+                });
+            });
+        };
         TrustedPartyService.prototype.deleteDirectoryShare = function (id) {
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_a) {