@magda/typescript-common 1.1.0-alpha.2 → 1.1.0-alpha.3

package/dist/authorization-api/ApiClient.js

@@ -0,0 +1,335 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const isomorphic_fetch_1 = __importDefault(require("isomorphic-fetch"));
+const tsmonad_1 = require("tsmonad");
+const lodash_1 = __importDefault(require("lodash"));
+const buildJwt_1 = __importDefault(require("../session/buildJwt"));
+const GenericError_1 = __importDefault(require("./GenericError"));
+const addTrailingSlash_1 = __importDefault(require("../addTrailingSlash"));
+const urijs_1 = __importDefault(require("urijs"));
+class ApiClient {
+    constructor(
+    // e.g. http://authorization-api/v0
+    baseUrl, jwtSecret = null, userId = null) {
+        this.jwt = null;
+        this.requestInitOption = null;
+        this.baseUrl = "";
+        this.baseUrl = addTrailingSlash_1.default(baseUrl);
+        if (jwtSecret && userId) {
+            this.jwt = buildJwt_1.default(jwtSecret, userId);
+        }
+        this.requestInitOption = {
+            headers: {
+                "X-Magda-Session": this.jwt
+            }
+        };
+    }
+    getMergeRequestInitOption(extraOptions = null) {
+        return lodash_1.default.merge({}, this.requestInitOption, extraOptions);
+    }
+    processJsonResponse(res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (res.status >= 200 && res.status < 300) {
+                return (yield res.json());
+            }
+            else {
+                const responseText = (yield res.text()).replace(/<(.|\n)*?>/g, "");
+                throw new GenericError_1.default(responseText, res.status);
+            }
+        });
+    }
+    /**
+     * Get the data of a user.
+     *
+     * @param {string} userId
+     * @returns {Promise<Maybe<User>>}
+     * @memberof ApiClient
+     */
+    getUser(userId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.handleGetResult(isomorphic_fetch_1.default(`${this.baseUrl}private/users/${userId}`, this.getMergeRequestInitOption()));
+        });
+    }
+    /**
+     * Get the data of a user.
+     * (Deprecated) This is the public facing API and will return less fields.
+     *
+     * @param {string} userId
+     * @returns {Promise<Maybe<User>>}
+     * @memberof ApiClient
+     */
+    getUserPublic(userId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.handleGetResult(isomorphic_fetch_1.default(`${this.baseUrl}public/users/${userId}`, this.getMergeRequestInitOption()));
+        });
+    }
+    /**
+     * Lookup user by source (identity provider) & sourceId (identity ID)
+     *
+     * @param {string} source
+     * @param {string} sourceId
+     * @returns {Promise<Maybe<User>>}
+     * @memberof ApiClient
+     */
+    lookupUser(source, sourceId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.handleGetResult(isomorphic_fetch_1.default(`${this.baseUrl}private/users/lookup?source=${source}&sourceId=${sourceId}`, this.getMergeRequestInitOption()));
+        });
+    }
+    /**
+     * create a user
+     *
+     * @param {User} user
+     * @returns {Promise<User>}
+     * @memberof ApiClient
+     */
+    createUser(user) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const res = yield isomorphic_fetch_1.default(`${this.baseUrl}private/users`, this.getMergeRequestInitOption({
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json"
+                    },
+                    body: JSON.stringify(user)
+                }));
+                if (res.status >= 400) {
+                    throw new Error(`Encountered error ${res.status} when POSTing new user to ${this.baseUrl}/private/users`);
+                }
+                const resData = yield res.json();
+                return Object.assign(Object.assign({}, user), resData);
+            }
+            catch (e) {
+                console.error(e);
+                throw e;
+            }
+        });
+    }
+    /**
+     * Add Roles to a user.
+     * Returns a list of current role ids of the user.
+     *
+     * @param {string} userId
+     * @param {string[]} roleIds
+     * @returns {Promise<string[]>}
+     * @memberof ApiClient
+     */
+    addUserRoles(userId, roleIds) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const res = yield isomorphic_fetch_1.default(`${this.baseUrl}public/user/${userId}/roles`, this.getMergeRequestInitOption({
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json"
+                },
+                body: JSON.stringify(roleIds)
+            }));
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Remove a list roles from a user.
+     *
+     * @param {string} userId
+     * @param {string[]} roleIds
+     * @returns {Promise<void>}
+     * @memberof ApiClient
+     */
+    deleteUserRoles(userId, roleIds) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const res = yield isomorphic_fetch_1.default(`${this.baseUrl}public/user/${userId}/roles`, this.getMergeRequestInitOption({
+                method: "DELETE",
+                headers: {
+                    "Content-Type": "application/json"
+                },
+                body: JSON.stringify(roleIds)
+            }));
+            yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Get all roles of a user
+     *
+     * @param {string} userId
+     * @returns {Promise<Role[]>}
+     * @memberof ApiClient
+     */
+    getUserRoles(userId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const res = yield isomorphic_fetch_1.default(`${this.baseUrl}public/user/${userId}/roles`, this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Get all permissions of a user
+     *
+     * @param {string} userId
+     * @returns {Promise<Permission[]>}
+     * @memberof ApiClient
+     */
+    getUserPermissions(userId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const res = yield isomorphic_fetch_1.default(`${this.baseUrl}public/user/${userId}/permissions`, this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Get all permissions of a role
+     *
+     * @param {string} roleId
+     * @returns {Promise<Permission[]>}
+     * @memberof ApiClient
+     */
+    getRolePermissions(roleId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const res = yield isomorphic_fetch_1.default(`${this.baseUrl}public/role/${roleId}/permissions`, this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * List OrgUnits at certain org tree level.
+     * Optionally provide a test Org Unit Id that will be used to test the relationship with each of returned orgUnit item.
+     * Possible Value: 'ancestor', 'descendant', 'equal', 'unrelated'
+     *
+     * @param {string} orgLevel The level number (starts from 1) where org Units of the tree are taken horizontally.
+     * @param {string} [relationshipOrgUnitId] Optional; The org unit id that is used to test the relationship with each of returned orgUnit item.
+     * @returns {Promise<OrgUnit[]>}
+     * @memberof ApiClient
+     */
+    getOrgUnitsByLevel(orgLevel, relationshipOrgUnitId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const uri = urijs_1.default(`${this.baseUrl}public/orgunits/bylevel`).segmentCoded(`${orgLevel}`);
+            const queries = {};
+            if (relationshipOrgUnitId) {
+                queries["relationshipOrgUnitId"] = relationshipOrgUnitId;
+            }
+            const res = yield isomorphic_fetch_1.default(Object.keys(queries).length
+                ? uri.search(queries).toString()
+                : uri.toString(), this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Get orgunits by name
+     *
+     * @param {string} nodeName
+     * @param {boolean} [leafNodesOnly=false] Whether only leaf nodes should be returned
+     * @param {string} [relationshipOrgUnitId] Optional; The org unit id that is used to test the relationship with each of returned orgUnit item.
+     * @returns {Promise<OrgUnit[]>}
+     * @memberof ApiClient
+     */
+    getOrgUnitsByName(nodeName, leafNodesOnly = false, relationshipOrgUnitId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const uri = urijs_1.default(`${this.baseUrl}public/orgunits`);
+            const queries = {
+                nodeName,
+                leafNodesOnly
+            };
+            if (relationshipOrgUnitId) {
+                queries["relationshipOrgUnitId"] = relationshipOrgUnitId;
+            }
+            const res = yield isomorphic_fetch_1.default(uri.search(queries).toString(), this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Gets the root organisation unit (top of the tree).
+     *
+     * @returns {Promise<OrgUnit>}
+     * @memberof ApiClient
+     */
+    getRootOrgUnit() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const res = yield isomorphic_fetch_1.default(`${this.baseUrl}public/orgunits/root`, this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Gets the details of the node with its id.
+     *
+     * @param {string} nodeId
+     * @returns {Promise<OrgUnit>}
+     * @memberof ApiClient
+     */
+    getOrgUnitById(nodeId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const uri = urijs_1.default(`${this.baseUrl}public/orgunits`).segmentCoded(nodeId);
+            const res = yield isomorphic_fetch_1.default(uri.toString(), this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Gets all the children immediately below the requested node. If the node doesn't exist, returns an empty list.
+     *
+     * @param {string} nodeId
+     * @returns {Promise<OrgUnit[]>}
+     * @memberof ApiClient
+     */
+    getImmediateOrgUnitChildren(nodeId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const uri = urijs_1.default(`${this.baseUrl}public/orgunits`)
+                .segmentCoded(nodeId)
+                .segmentCoded("children")
+                .segmentCoded("immediate");
+            const res = yield isomorphic_fetch_1.default(uri.toString(), this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    /**
+     * Gets all the children below the requested node recursively. If node doesn't exist, returns an empty list.
+     *
+     * @param {string} nodeId
+     * @returns {Promise<OrgUnit[]>}
+     * @memberof ApiClient
+     */
+    getAllOrgUnitChildren(nodeId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const uri = urijs_1.default(`${this.baseUrl}public/orgunits`)
+                .segmentCoded(nodeId)
+                .segmentCoded("children")
+                .segmentCoded("all");
+            const res = yield isomorphic_fetch_1.default(uri.toString(), this.getMergeRequestInitOption());
+            return yield this.processJsonResponse(res);
+        });
+    }
+    handleGetResult(promise) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return promise
+                .then((res) => {
+                if (res.status === 404) {
+                    return Promise.resolve(tsmonad_1.Maybe.nothing());
+                }
+                else {
+                    return res
+                        .text()
+                        .then((resText) => {
+                        try {
+                            return JSON.parse(resText);
+                        }
+                        catch (e) {
+                            throw new Error(resText);
+                        }
+                    })
+                        .then((user) => tsmonad_1.Maybe.just(user));
+                }
+            })
+                .catch((e) => {
+                console.error(e);
+                throw e;
+            });
+        });
+    }
+}
+exports.default = ApiClient;
+//# sourceMappingURL=ApiClient.js.map

package/dist/authorization-api/ApiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiClient.js","sourceRoot":"","sources":["../../src/authorization-api/ApiClient.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,wEAAqC;AAErC,qCAAgC;AAChC,oDAA4B;AAC5B,mEAA2C;AAC3C,kEAA0C;AAC1C,2EAAmD;AACnD,kDAA0B;AAG1B,MAAqB,SAAS;IAK1B;IACI,mCAAmC;IACnC,OAAe,EACf,YAAoB,IAAI,EACxB,SAAiB,IAAI;QARjB,QAAG,GAAW,IAAI,CAAC;QACnB,sBAAiB,GAAgB,IAAI,CAAC;QACtC,YAAO,GAAW,EAAE,CAAC;QAQzB,IAAI,CAAC,OAAO,GAAG,0BAAgB,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,SAAS,IAAI,MAAM,EAAE;YACrB,IAAI,CAAC,GAAG,GAAG,kBAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;SAC1C;QACD,IAAI,CAAC,iBAAiB,GAAG;YACrB,OAAO,EAAE;gBACL,iBAAiB,EAAE,IAAI,CAAC,GAAG;aAC9B;SACJ,CAAC;IACN,CAAC;IAED,yBAAyB,CAAC,eAA4B,IAAI;QACtD,OAAO,gBAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IAEK,mBAAmB,CAAU,GAAa;;YAC5C,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE;gBACvC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;aAClC;iBAAM;gBACH,MAAM,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBACnE,MAAM,IAAI,sBAAY,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;aACpD;QACL,CAAC;KAAA;IAED;;;;;;OAMG;IACG,OAAO,CAAC,MAAc;;YACxB,OAAO,MAAM,IAAI,CAAC,eAAe,CAC7B,0BAAK,CACD,GAAG,IAAI,CAAC,OAAO,iBAAiB,MAAM,EAAE,EACxC,IAAI,CAAC,yBAAyB,EAAE,CACnC,CACJ,CAAC;QACN,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,aAAa,CACf,MAAc;;YAEd,OAAO,MAAM,IAAI,CAAC,eAAe,CAC7B,0BAAK,CACD,GAAG,IAAI,CAAC,OAAO,gBAAgB,MAAM,EAAE,EACvC,IAAI,CAAC,yBAAyB,EAAE,CACnC,CACJ,CAAC;QACN,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,UAAU,CACZ,MAAc,EACd,QAAgB;;YAEhB,OAAO,IAAI,CAAC,eAAe,CACvB,0BAAK,CACD,GAAG,IAAI,CAAC,OAAO,+BAA+B,MAAM,aAAa,QAAQ,EAAE,EAC3E,IAAI,CAAC,yBAAyB,EAAE,CACnC,CACJ,CAAC;QACN,CAAC;KAAA;IAED;;;;;;OAMG;IACG,UAAU,CAAC,IAAU;;YACvB,IAAI;gBACA,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,IAAI,CAAC,OAAO,eAAe,EAC9B,IAAI,CAAC,yBAAyB,CAAC;oBAC3B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACL,cAAc,EAAE,kBAAkB;qBACrC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;iBAC7B,CAAC,CACL,CAAC;gBACF,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE;oBACnB,MAAM,IAAI,KAAK,CACX,qBAAqB,GAAG,CAAC,MAAM,6BAA6B,IAAI,CAAC,OAAO,gBAAgB,CAC3F,CAAC;iBACL;gBACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjC,uCAAY,IAAI,GAAK,OAAO,EAAG;aAClC;YAAC,OAAO,CAAC,EAAE;gBACR,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjB,MAAM,CAAC,CAAC;aACX;QACL,CAAC;KAAA;IAED;;;;;;;;OAQG;IACG,YAAY,CAAC,MAAc,EAAE,OAAiB;;YAChD,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,IAAI,CAAC,OAAO,eAAe,MAAM,QAAQ,EAC5C,IAAI,CAAC,yBAAyB,CAAC;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;iBACrC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAChC,CAAC,CACL,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAW,GAAG,CAAC,CAAC;QACzD,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,eAAe,CAAC,MAAc,EAAE,OAAiB;;YACnD,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,IAAI,CAAC,OAAO,eAAe,MAAM,QAAQ,EAC5C,IAAI,CAAC,yBAAyB,CAAC;gBAC3B,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;iBACrC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAChC,CAAC,CACL,CAAC;YACF,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;KAAA;IAED;;;;;;OAMG;IACG,YAAY,CAAC,MAAc;;YAC7B,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,IAAI,CAAC,OAAO,eAAe,MAAM,QAAQ,EAC5C,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAS,GAAG,CAAC,CAAC;QACvD,CAAC;KAAA;IAED;;;;;;OAMG;IACG,kBAAkB,CAAC,MAAc;;YACnC,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,IAAI,CAAC,OAAO,eAAe,MAAM,cAAc,EAClD,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAe,GAAG,CAAC,CAAC;QAC7D,CAAC;KAAA;IAED;;;;;;OAMG;IACG,kBAAkB,CAAC,MAAc;;YACnC,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,IAAI,CAAC,OAAO,eAAe,MAAM,cAAc,EAClD,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAe,GAAG,CAAC,CAAC;QAC7D,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,kBAAkB,CACpB,QAAgB,EAChB,qBAA8B;;YAE9B,MAAM,GAAG,GAAG,eAAK,CACb,GAAG,IAAI,CAAC,OAAO,yBAAyB,CAC3C,CAAC,YAAY,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC;YAE9B,MAAM,OAAO,GAAG,EAAS,CAAC;YAC1B,IAAI,qBAAqB,EAAE;gBACvB,OAAO,CAAC,uBAAuB,CAAC,GAAG,qBAAqB,CAAC;aAC5D;YAED,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;gBACvB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;gBAChC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EACpB,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAY,GAAG,CAAC,CAAC;QAC1D,CAAC;KAAA;IAED;;;;;;;;OAQG;IACG,iBAAiB,CACnB,QAAgB,EAChB,gBAAyB,KAAK,EAC9B,qBAA8B;;YAE9B,MAAM,GAAG,GAAG,eAAK,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,CAAC,CAAC;YAEpD,MAAM,OAAO,GAAG;gBACZ,QAAQ;gBACR,aAAa;aACT,CAAC;YACT,IAAI,qBAAqB,EAAE;gBACvB,OAAO,CAAC,uBAAuB,CAAC,GAAG,qBAAqB,CAAC;aAC5D;YAED,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAC9B,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAY,GAAG,CAAC,CAAC;QAC1D,CAAC;KAAA;IAED;;;;;OAKG;IACG,cAAc;;YAChB,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,IAAI,CAAC,OAAO,sBAAsB,EACrC,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAU,GAAG,CAAC,CAAC;QACxD,CAAC;KAAA;IAED;;;;;;OAMG;IACG,cAAc,CAAC,MAAc;;YAC/B,MAAM,GAAG,GAAG,eAAK,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,CAAC,CAAC,YAAY,CAC5D,MAAM,CACT,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,CAAC,QAAQ,EAAE,EACd,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAU,GAAG,CAAC,CAAC;QACxD,CAAC;KAAA;IAED;;;;;;OAMG;IACG,2BAA2B,CAAC,MAAc;;YAC5C,MAAM,GAAG,GAAG,eAAK,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,CAAC;iBAC9C,YAAY,CAAC,MAAM,CAAC;iBACpB,YAAY,CAAC,UAAU,CAAC;iBACxB,YAAY,CAAC,WAAW,CAAC,CAAC;YAE/B,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,CAAC,QAAQ,EAAE,EACd,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAY,GAAG,CAAC,CAAC;QAC1D,CAAC;KAAA;IAED;;;;;;OAMG;IACG,qBAAqB,CAAC,MAAc;;YACtC,MAAM,GAAG,GAAG,eAAK,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,CAAC;iBAC9C,YAAY,CAAC,MAAM,CAAC;iBACpB,YAAY,CAAC,UAAU,CAAC;iBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YAEzB,MAAM,GAAG,GAAG,MAAM,0BAAK,CACnB,GAAG,CAAC,QAAQ,EAAE,EACd,IAAI,CAAC,yBAAyB,EAAE,CACnC,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAY,GAAG,CAAC,CAAC;QAC1D,CAAC;KAAA;IAEa,eAAe,CACzB,OAA0B;;YAE1B,OAAO,OAAO;iBACT,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACV,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE;oBACpB,OAAO,OAAO,CAAC,OAAO,CAAC,eAAK,CAAC,OAAO,EAAQ,CAAC,CAAC;iBACjD;qBAAM;oBACH,OAAO,GAAG;yBACL,IAAI,EAAE;yBACN,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;wBACd,IAAI;4BACA,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;yBAC9B;wBAAC,OAAO,CAAC,EAAE;4BACR,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;yBAC5B;oBACL,CAAC,CAAC;yBACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;iBACzC;YACL,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjB,MAAM,CAAC,CAAC;YACZ,CAAC,CAAC,CAAC;QACX,CAAC;KAAA;CACJ;AArXD,4BAqXC"}

package/dist/authorization-api/AuthError.d.ts

@@ -0,0 +1,4 @@
+import GenericError from "./GenericError";
+export default class AuthError extends GenericError {
+    constructor(message?: string, statusCode?: number);
+}

package/dist/authorization-api/AuthError.js

@@ -0,0 +1,13 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const GenericError_1 = __importDefault(require("./GenericError"));
+class AuthError extends GenericError_1.default {
+    constructor(message = "Not authorized", statusCode = 401) {
+        super(message, statusCode);
+    }
+}
+exports.default = AuthError;
+//# sourceMappingURL=AuthError.js.map

package/dist/authorization-api/AuthError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthError.js","sourceRoot":"","sources":["../../src/authorization-api/AuthError.ts"],"names":[],"mappings":";;;;;AAAA,kEAA0C;AAC1C,MAAqB,SAAU,SAAQ,sBAAY;IAC/C,YAAY,UAAkB,gBAAgB,EAAE,aAAqB,GAAG;QACpE,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;CACJ;AAJD,4BAIC"}

package/dist/authorization-api/GenericError.d.ts

@@ -0,0 +1,9 @@
+export default class GenericError extends Error {
+    statusCode: number;
+    constructor(message?: string, statusCode?: number);
+    toData(): {
+        isError: boolean;
+        errorCode: number;
+        errorMessage: string;
+    };
+}

package/dist/authorization-api/GenericError.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+class GenericError extends Error {
+    constructor(message = "Unknown Error", statusCode = 500) {
+        super(message);
+        this.statusCode = statusCode;
+    }
+    toData() {
+        return {
+            isError: true,
+            errorCode: this.statusCode,
+            errorMessage: this.message
+        };
+    }
+}
+exports.default = GenericError;
+//# sourceMappingURL=GenericError.js.map

package/dist/authorization-api/GenericError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericError.js","sourceRoot":"","sources":["../../src/authorization-api/GenericError.ts"],"names":[],"mappings":";;AAAA,MAAqB,YAAa,SAAQ,KAAK;IAG3C,YAAY,UAAkB,eAAe,EAAE,aAAqB,GAAG;QACnE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IAED,MAAM;QACF,OAAO;YACH,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,YAAY,EAAE,IAAI,CAAC,OAAO;SAC7B,CAAC;IACN,CAAC;CACJ;AAfD,+BAeC"}

package/dist/authorization-api/authMiddleware.d.ts

@@ -0,0 +1,7 @@
+import { Request, Response } from "express";
+export declare const mustBeLoggedIn: (jwtSecret: string) => (this: any, req: Request, res: Response, next: () => void) => void;
+/**
+ * Find the user making the request. Assign it to req passport style.
+ */
+export declare const getUser: (baseAuthUrl: string, jwtSecret: string) => (req: Request, res: Response, next: () => void) => void;
+export declare const mustBeAdmin: (baseAuthUrl: string, jwtSecret: string) => (req: Request, res: Response, next: () => void) => void;

package/dist/authorization-api/authMiddleware.js

@@ -0,0 +1,52 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mustBeAdmin = exports.getUser = exports.mustBeLoggedIn = void 0;
+const GetUserId_1 = require("../session/GetUserId");
+const ApiClient_1 = __importDefault(require("./ApiClient"));
+exports.mustBeLoggedIn = (jwtSecret) => function (req, res, next) {
+    GetUserId_1.getUserIdHandling(req, res, jwtSecret, (userId) => {
+        this.userId = userId;
+        next();
+    });
+};
+/**
+ * Find the user making the request. Assign it to req passport style.
+ */
+exports.getUser = (baseAuthUrl, jwtSecret) => (req, res, next) => {
+    GetUserId_1.getUserId(req, jwtSecret).caseOf({
+        just: (userId) => {
+            const apiClient = new ApiClient_1.default(baseAuthUrl, jwtSecret, userId);
+            apiClient
+                .getUser(userId)
+                .then((maybeUser) => {
+                maybeUser.caseOf({
+                    just: (user) => {
+                        req.user = Object.assign(Object.assign({}, (req.user ? req.user : {})), user);
+                        next();
+                    },
+                    nothing: next
+                });
+            })
+                .catch(() => next());
+        },
+        nothing: next
+    });
+};
+exports.mustBeAdmin = (baseAuthUrl, jwtSecret) => {
+    const getUserInstance = exports.getUser(baseAuthUrl, jwtSecret);
+    return (req, res, next) => {
+        getUserInstance(req, res, () => {
+            if (req.user && req.user.isAdmin) {
+                next();
+            }
+            else {
+                console.warn("Rejecting because user is not an admin");
+                res.status(401).send("Not authorized.");
+            }
+        });
+    };
+};
+//# sourceMappingURL=authMiddleware.js.map

package/dist/authorization-api/authMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.js","sourceRoot":"","sources":["../../src/authorization-api/authMiddleware.ts"],"names":[],"mappings":";;;;;;AACA,oDAAoE;AACpE,4DAAoC;AAEvB,QAAA,cAAc,GAAG,CAAC,SAAiB,EAAE,EAAE,CAChD,UAAqB,GAAY,EAAE,GAAa,EAAE,IAAgB;IAC9D,6BAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,MAAc,EAAE,EAAE;QACtD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEN;;GAEG;AACU,QAAA,OAAO,GAAG,CAAC,WAAmB,EAAE,SAAiB,EAAE,EAAE,CAAC,CAC/D,GAAY,EACZ,GAAa,EACb,IAAgB,EAClB,EAAE;IACA,qBAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC;QAC7B,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YACb,MAAM,SAAS,GAAG,IAAI,mBAAS,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAChE,SAAS;iBACJ,OAAO,CAAC,MAAM,CAAC;iBACf,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBAChB,SAAS,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;wBACX,GAAG,CAAC,IAAI,mCAID,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAC1B,IAAI,CACV,CAAC;wBACF,IAAI,EAAE,CAAC;oBACX,CAAC;oBACD,OAAO,EAAE,IAAI;iBAChB,CAAC,CAAC;YACP,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,IAAI;KAChB,CAAC,CAAC;AACP,CAAC,CAAC;AAEW,QAAA,WAAW,GAAG,CAAC,WAAmB,EAAE,SAAiB,EAAE,EAAE;IAClE,MAAM,eAAe,GAAG,eAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACxD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAgB,EAAE,EAAE;QACrD,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YAC3B,IAAI,GAAG,CAAC,IAAI,IAAK,GAAG,CAAC,IAAY,CAAC,OAAO,EAAE;gBACvC,IAAI,EAAE,CAAC;aACV;iBAAM;gBACH,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;aAC3C;QACL,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;AACN,CAAC,CAAC"}

package/dist/authorization-api/model.d.ts

@@ -0,0 +1,99 @@
+declare global {
+    namespace Express {
+        /**
+         * This defines magda session data type.
+         * the default session data type is `UserToken` (i.e. only user id field is available and is a compulsory field)
+         * But any auth plugin provider could choose to customise the session by adding more fields (e.g. `arcgis`).
+         * We also make sure it allows extra fields here.
+         */
+        interface User extends UserToken {
+            [key: string]: any;
+        }
+    }
+}
+export interface PublicUser {
+    id?: string;
+    displayName: string;
+    photoURL?: string;
+    isAdmin: boolean;
+    roles?: Role[];
+    permissions?: Permission[];
+    managingOrgUnitIds?: string[];
+    orgUnitId?: string;
+    orgUnit?: OrgUnit;
+}
+export declare type OrgUnitRelationshipType = "ancestor" | "descendant" | "equal" | "unrelated";
+export interface OrgUnit {
+    id?: string;
+    name?: string;
+    description?: string;
+    relationship?: OrgUnitRelationshipType;
+    left?: number;
+    right?: number;
+    createBy?: string;
+    createTime?: Date;
+    editBy?: string;
+    editTime?: Date;
+}
+export interface User extends PublicUser {
+    email: string;
+    source: string;
+    sourceId: string;
+}
+export interface APIKeyRecord {
+    id: string;
+    user_id: string;
+    created_timestamp: string;
+    hash: string;
+}
+export interface Role {
+    id: string;
+    name: string;
+    permissionIds: string[];
+    description?: string;
+    createBy?: string;
+    createTime?: Date;
+    editBy?: string;
+    editTime?: Date;
+}
+export interface Operation {
+    id: string;
+    uri: string;
+    name: string;
+    description?: string;
+}
+export interface Permission {
+    id: string;
+    name: string;
+    description?: string;
+    resourceId: string;
+    resourceUri: string;
+    userOwnershipConstraint: boolean;
+    orgUnitOwnershipConstraint: boolean;
+    preAuthorisedConstraint: boolean;
+    operations: Operation[];
+    createBy?: string;
+    createTime?: Date;
+    editBy?: string;
+    editTime?: Date;
+}
+export interface UserToken {
+    id: string;
+}
+/**
+ * This is the metadata model used by Opa policy
+ * You only need this when you try to figure out user characteristic (unknown) via Known information of a dataset.
+ * i.e. set `input.user` to unknown then calculate residual rules via partial evaluation.
+ */
+export interface DatasetAccessControlMetaData {
+    /**
+     * We do allow "archived" as defined in `publishing.schema.json`
+     * But we probably should avoid using it as there is no story behinds it.
+     */
+    publishingState: "draft" | "published" | "archived";
+    accessControl?: {
+        ownerId?: string;
+        orgUnitOwnerId?: string;
+        preAuthorisedPermissionIds?: string[];
+    };
+}

package/dist/authorization-api/model.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=model.js.map

package/dist/authorization-api/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/authorization-api/model.ts"],"names":[],"mappings":""}

package/dist/coerceJson.d.ts

@@ -0,0 +1,2 @@
+declare const _default: (param: string) => (json?: string | object | any[]) => any;
+export default _default;

package/dist/coerceJson.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = (param) => (json) => {
+    if (typeof json !== "string") {
+        return json;
+    }
+    const data = JSON.parse(json);
+    if (!data || typeof data !== "object") {
+        throw new Error(`Invalid "${param}" parameter.`);
+    }
+    return data;
+};
+//# sourceMappingURL=coerceJson.js.map

package/dist/coerceJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coerceJson.js","sourceRoot":"","sources":["../src/coerceJson.ts"],"names":[],"mappings":";;AAAA,kBAAe,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,IAA8B,EAAE,EAAE;IACjE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;QAC1B,OAAO,IAAI,CAAC;KACf;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;QACnC,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,cAAc,CAAC,CAAC;KACpD;IACD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC"}

package/dist/createServiceError.d.ts

@@ -0,0 +1,19 @@
+import { ApiError } from "./generated/registry/api";
+export declare class ServiceError extends Error {
+    e: any;
+    constructor(message: string, e: any);
+}
+export declare class BadRequestError extends ServiceError {
+    constructor(statusCode: number, errorResponse: ApiError, e: any);
+}
+/**
+ * Creates a {@link ServiceError} from the result of a failed call to an API generated
+ * by swagger-codegen.  The result typically includes `response` (with a status code) and
+ * a `body` (the JSON the server returned with the error), but may be other things if,
+ * e.g., an exception occurred while attempting to invoke the service.
+ *
+ * @export
+ * @param {*} e The result of the failed call.
+ * @returns {Error} An Error created from the failed result.
+ */
+export default function createServiceError(e: any): Error;

package/dist/createServiceError.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BadRequestError = exports.ServiceError = void 0;
+class ServiceError extends Error {
+    constructor(message, e) {
+        super(message);
+        this.e = e;
+    }
+}
+exports.ServiceError = ServiceError;
+class BadRequestError extends ServiceError {
+    constructor(statusCode, errorResponse, e) {
+        super(`Status code: ${statusCode}, body:\n${JSON.stringify(errorResponse, null, "  ")}`, e);
+    }
+}
+exports.BadRequestError = BadRequestError;
+/**
+ * Creates a {@link ServiceError} from the result of a failed call to an API generated
+ * by swagger-codegen.  The result typically includes `response` (with a status code) and
+ * a `body` (the JSON the server returned with the error), but may be other things if,
+ * e.g., an exception occurred while attempting to invoke the service.
+ *
+ * @export
+ * @param {*} e The result of the failed call.
+ * @returns {Error} An Error created from the failed result.
+ */
+function createServiceError(e) {
+    if (e && e.response && e.response.statusCode && e.body) {
+        return new BadRequestError(e.response.statusCode, e.body, e);
+    }
+    else if (e && e instanceof Error) {
+        return e;
+    }
+    else if (e && e.toString() !== {}.toString()) {
+        return new ServiceError(e.toString(), e);
+    }
+    else if (e) {
+        return new ServiceError(`${JSON.stringify(e, null, "  ")}`, e);
+    }
+    else {
+        return new ServiceError("An undefined service error occurred.", undefined);
+    }
+}
+exports.default = createServiceError;
+//# sourceMappingURL=createServiceError.js.map