@m5kdev/backend 0.7.0 → 0.8.2

package/dist/src/utils/trpc.js

@@ -1,158 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createAuthContext = createAuthContext;
-exports.handleAsyncTRPCResult = handleAsyncTRPCResult;
-exports.handleTRPCResult = handleTRPCResult;
-exports.verifyProtectedProcedureContext = verifyProtectedProcedureContext;
-exports.verifyOrganizationProcedureContext = verifyOrganizationProcedureContext;
-exports.verifyTeamProcedureContext = verifyTeamProcedureContext;
-exports.verifyAdminProcedureContext = verifyAdminProcedureContext;
-exports.requireRequestUser = requireRequestUser;
-exports.requireRequestActor = requireRequestActor;
-const node_1 = require("better-auth/node");
-const base_actor_1 = require("../modules/base/base.actor");
-const errors_1 = require("./errors");
-const logger_1 = require("./logger");
-function createAuthContext(auth) {
-    return async function createContext({ req }) {
-        const data = await auth.api.getSession({
-            headers: (0, node_1.fromNodeHeaders)(req.headers),
-        });
-        const user = data?.user || null;
-        const session = data?.session || null;
-        const actor = user && session ? (0, base_actor_1.createActorFromContext)({ user, session }, "user") : null;
-        return {
-            session,
-            user,
-            actor,
-        };
-    };
-}
-async function handleAsyncTRPCResult(result) {
-    return handleTRPCResult(await result);
-}
-function handleTRPCResult(result) {
-    if (result.isErr()) {
-        logger_1.logger.debug("Is tRPC Error");
-        logger_1.logger.error({
-            layer: result.error.layer,
-            layerName: result.error.layerName,
-            error: result.error.toJSON(),
-        });
-        throw result.error.toTRPC();
-    }
-    return result.value;
-}
-function verifyProtectedProcedureContext(ctx) {
-    if (!ctx.user || !ctx.session || !ctx.actor) {
-        throw new errors_1.ServerError({
-            code: "UNAUTHORIZED",
-            layer: "controller",
-            layerName: "TRPCController",
-        }).toTRPC();
-    }
-    return ctx;
-}
-function verifyOrganizationProcedureContext(ctx) {
-    if (!ctx.user || !ctx.session) {
-        throw new errors_1.ServerError({
-            code: "UNAUTHORIZED",
-            layer: "controller",
-            layerName: "TRPCController",
-        }).toTRPC();
-    }
-    try {
-        const actor = (0, base_actor_1.createActorFromContext)({ user: ctx.user, session: ctx.session }, "organization");
-        return { ...ctx, actor };
-    }
-    catch (e) {
-        if (e instanceof errors_1.ServerError)
-            throw e.toTRPC();
-        throw e;
-    }
-}
-function verifyTeamProcedureContext(ctx) {
-    if (!ctx.user || !ctx.session) {
-        throw new errors_1.ServerError({
-            code: "UNAUTHORIZED",
-            layer: "controller",
-            layerName: "TRPCController",
-        }).toTRPC();
-    }
-    try {
-        const actor = (0, base_actor_1.createActorFromContext)({ user: ctx.user, session: ctx.session }, "team");
-        return { ...ctx, actor };
-    }
-    catch (e) {
-        if (e instanceof errors_1.ServerError)
-            throw e.toTRPC();
-        throw e;
-    }
-}
-function verifyAdminProcedureContext(ctx) {
-    if (!ctx.user || !ctx.session) {
-        throw new errors_1.ServerError({
-            code: "UNAUTHORIZED",
-            layer: "controller",
-            layerName: "TRPCController",
-        }).toTRPC();
-    }
-    if (ctx.user.role !== "admin") {
-        throw new errors_1.ServerError({
-            code: "FORBIDDEN",
-            layer: "controller",
-            layerName: "TRPCController",
-        }).toTRPC();
-    }
-    if (!ctx.actor) {
-        throw new errors_1.ServerError({
-            code: "UNAUTHORIZED",
-            layer: "controller",
-            layerName: "TRPCController",
-        }).toTRPC();
-    }
-    return ctx;
-}
-function requireRequestUser(ctx) {
-    return verifyProtectedProcedureContext(ctx).user;
-}
-function requireRequestActor(ctx, scope = "user") {
-    const verified = verifyProtectedProcedureContext(ctx);
-    if (scope === "user") {
-        if (!(0, base_actor_1.validateActor)(verified.actor, "user")) {
-            throw new errors_1.ServerError({
-                code: "FORBIDDEN",
-                layer: "controller",
-                layerName: "TRPCController",
-            }).toTRPC();
-        }
-        return verified.actor;
-    }
-    try {
-        if (scope === "organization") {
-            const actor = (0, base_actor_1.createActorFromContext)({ user: verified.user, session: verified.session }, "organization");
-            if (!(0, base_actor_1.validateActor)(actor, "organization")) {
-                throw new errors_1.ServerError({
-                    code: "FORBIDDEN",
-                    layer: "controller",
-                    layerName: "TRPCController",
-                }).toTRPC();
-            }
-            return actor;
-        }
-        const actor = (0, base_actor_1.createActorFromContext)({ user: verified.user, session: verified.session }, "team");
-        if (!(0, base_actor_1.validateActor)(actor, "team")) {
-            throw new errors_1.ServerError({
-                code: "FORBIDDEN",
-                layer: "controller",
-                layerName: "TRPCController",
-            }).toTRPC();
-        }
-        return actor;
-    }
-    catch (e) {
-        if (e instanceof errors_1.ServerError)
-            throw e.toTRPC();
-        throw e;
-    }
-}

package/dist/src/utils/trpc.test.js

@@ -1,154 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const server_1 = require("@trpc/server");
-const trpc_1 = require("./trpc");
-jest.mock("better-auth/node", () => ({
-    fromNodeHeaders: (headers) => headers,
-}));
-function expectTRPCCode(fn, code) {
-    try {
-        fn();
-        throw new Error(`Expected TRPC error with code ${code}`);
-    }
-    catch (error) {
-        expect(error).toBeInstanceOf(server_1.TRPCError);
-        expect(error.code).toBe(code);
-    }
-}
-function createUser(overrides = {}) {
-    return {
-        id: "user-1",
-        role: "member",
-        email: "user@example.com",
-        emailVerified: true,
-        name: "User One",
-        createdAt: new Date(),
-        updatedAt: new Date(),
-        onboarding: null,
-        preferences: null,
-        flags: null,
-        stripeCustomerId: null,
-        paymentCustomerId: null,
-        paymentPlanTier: null,
-        paymentPlanExpiresAt: null,
-        ...overrides,
-    };
-}
-function createSession(overrides = {}) {
-    return {
-        id: "session-1",
-        userId: "user-1",
-        expiresAt: new Date(Date.now() + 60_000),
-        createdAt: new Date(),
-        updatedAt: new Date(),
-        token: "token",
-        ipAddress: null,
-        userAgent: null,
-        activeOrganizationId: null,
-        activeOrganizationRole: null,
-        activeTeamId: null,
-        activeTeamRole: null,
-        ...overrides,
-    };
-}
-function createRequestContext(overrides = {}) {
-    const user = overrides.user ?? createUser();
-    const session = overrides.session ?? createSession();
-    const actor = overrides.actor ??
-        (user && session
-            ? {
-                userId: user.id,
-                userRole: user.role,
-                organizationId: session.activeOrganizationId,
-                organizationRole: session.activeOrganizationRole,
-                teamId: session.activeTeamId,
-                teamRole: session.activeTeamRole,
-            }
-            : null);
-    return {
-        user,
-        session,
-        actor,
-        ...overrides,
-    };
-}
-describe("trpc auth helpers", () => {
-    it("stores a user-scoped actor on the request context while copying session ids", async () => {
-        const user = createUser();
-        const session = createSession({
-            activeOrganizationId: "org-1",
-            activeOrganizationRole: "owner",
-            activeTeamId: "team-1",
-            activeTeamRole: "manager",
-        });
-        const auth = {
-            api: {
-                getSession: jest.fn().mockResolvedValue({ user, session }),
-            },
-        };
-        const createContext = (0, trpc_1.createAuthContext)(auth);
-        const ctx = await createContext({
-            req: { headers: {} },
-        });
-        expect(ctx.actor).toEqual({
-            userId: "user-1",
-            userRole: "member",
-            organizationId: "org-1",
-            organizationRole: "owner",
-            teamId: "team-1",
-            teamRole: "manager",
-        });
-    });
-    it("throws FORBIDDEN when a broader actor scope is required than the session allows", () => {
-        const actor = (0, trpc_1.requireRequestActor)(createRequestContext({
-            user: createUser(),
-            session: createSession(),
-            actor: {
-                userId: "user-1",
-                userRole: "member",
-                organizationId: null,
-                organizationRole: null,
-                teamId: null,
-                teamRole: null,
-            },
-        }));
-        expect(actor.userId).toBe("user-1");
-        expectTRPCCode(() => (0, trpc_1.requireRequestActor)(createRequestContext({
-            user: createUser(),
-            session: createSession(),
-            actor: {
-                userId: "user-1",
-                userRole: "member",
-                organizationId: null,
-                organizationRole: null,
-                teamId: null,
-                teamRole: null,
-            },
-        }), "organization"), "FORBIDDEN");
-    });
-    it("throws UNAUTHORIZED when request user access is missing", () => {
-        expectTRPCCode(() => (0, trpc_1.requireRequestUser)({
-            user: null,
-            session: null,
-            actor: null,
-        }), "UNAUTHORIZED");
-    });
-    it("verifies admin access from the raw request user", () => {
-        const ctx = createRequestContext({
-            user: createUser({ role: "admin" }),
-            actor: {
-                userId: "user-1",
-                userRole: "admin",
-                organizationId: "org-1",
-                organizationRole: "owner",
-                teamId: null,
-                teamRole: null,
-            },
-        });
-        expect((0, trpc_1.verifyAdminProcedureContext)(ctx).user.role).toBe("admin");
-        expectTRPCCode(() => (0, trpc_1.verifyAdminProcedureContext)(createRequestContext({
-            user: createUser({ role: "member" }),
-            actor: ctx.actor,
-        })), "FORBIDDEN");
-    });
-});

package/dist/src/utils/types.d.ts

@@ -1,4 +0,0 @@
-import type { Result } from "neverthrow";
-import type { ServerError } from "./errors";
-export type ServerResult<T> = Result<T, ServerError>;
-export type ServerResultAsync<T> = Promise<ServerResult<T>>;

package/dist/src/utils/types.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });