@memberjunction/server 6.1.0-edge.3 → 6.1.0-edge.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agentSessions/SessionManager.d.ts +19 -5
- package/dist/agentSessions/SessionManager.d.ts.map +1 -1
- package/dist/agentSessions/SessionManager.js +27 -9
- package/dist/agentSessions/SessionManager.js.map +1 -1
- package/dist/auth/index.d.ts +1 -0
- package/dist/auth/index.d.ts.map +1 -1
- package/dist/auth/index.js +1 -0
- package/dist/auth/index.js.map +1 -1
- package/dist/auth/scopeLimitedPrincipal.d.ts +39 -0
- package/dist/auth/scopeLimitedPrincipal.d.ts.map +1 -0
- package/dist/auth/scopeLimitedPrincipal.js +49 -0
- package/dist/auth/scopeLimitedPrincipal.js.map +1 -0
- package/dist/context.d.ts.map +1 -1
- package/dist/context.js +21 -1
- package/dist/context.js.map +1 -1
- package/dist/entitySubclasses/MJEntityPermissionEntityServer.server.d.ts.map +1 -1
- package/dist/entitySubclasses/MJEntityPermissionEntityServer.server.js +8 -7
- package/dist/entitySubclasses/MJEntityPermissionEntityServer.server.js.map +1 -1
- package/dist/generated/generated.d.ts +118 -0
- package/dist/generated/generated.d.ts.map +1 -1
- package/dist/generated/generated.js +630 -0
- package/dist/generated/generated.js.map +1 -1
- package/dist/generic/ResolverBase.d.ts +27 -0
- package/dist/generic/ResolverBase.d.ts.map +1 -1
- package/dist/generic/ResolverBase.js +50 -4
- package/dist/generic/ResolverBase.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +49 -1
- package/dist/index.js.map +1 -1
- package/dist/integration/CustomColumnPromoter.d.ts +79 -15
- package/dist/integration/CustomColumnPromoter.d.ts.map +1 -1
- package/dist/integration/CustomColumnPromoter.js +472 -97
- package/dist/integration/CustomColumnPromoter.js.map +1 -1
- package/dist/integration/InactiveRowWarnings.d.ts +48 -0
- package/dist/integration/InactiveRowWarnings.d.ts.map +1 -0
- package/dist/integration/InactiveRowWarnings.js +57 -0
- package/dist/integration/InactiveRowWarnings.js.map +1 -0
- package/dist/integration/SchemaRefreshLaunch.d.ts +10 -0
- package/dist/integration/SchemaRefreshLaunch.d.ts.map +1 -1
- package/dist/integration/SchemaRefreshLaunch.js +17 -0
- package/dist/integration/SchemaRefreshLaunch.js.map +1 -1
- package/dist/resolvers/AdhocQueryResolver.d.ts +4 -0
- package/dist/resolvers/AdhocQueryResolver.d.ts.map +1 -1
- package/dist/resolvers/AdhocQueryResolver.js +20 -6
- package/dist/resolvers/AdhocQueryResolver.js.map +1 -1
- package/dist/resolvers/IdentityClaimRedemptionResolver.d.ts +37 -0
- package/dist/resolvers/IdentityClaimRedemptionResolver.d.ts.map +1 -0
- package/dist/resolvers/IdentityClaimRedemptionResolver.js +220 -0
- package/dist/resolvers/IdentityClaimRedemptionResolver.js.map +1 -0
- package/dist/resolvers/IntegrationDiscoveryResolver.d.ts +35 -3
- package/dist/resolvers/IntegrationDiscoveryResolver.d.ts.map +1 -1
- package/dist/resolvers/IntegrationDiscoveryResolver.js +86 -17
- package/dist/resolvers/IntegrationDiscoveryResolver.js.map +1 -1
- package/dist/resolvers/meetingRecordingRegistration.d.ts.map +1 -1
- package/dist/resolvers/meetingRecordingRegistration.js +3 -6
- package/dist/resolvers/meetingRecordingRegistration.js.map +1 -1
- package/dist/types.d.ts +8 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +91 -91
- package/src/__tests__/AdhocQueryResolver.scopeGuard.test.ts +84 -0
- package/src/__tests__/CustomColumnPromoterOnePass.test.ts +387 -0
- package/src/__tests__/InactiveRowWarnings.test.ts +87 -0
- package/src/__tests__/ReactivateRefreshMessage.test.ts +85 -0
- package/src/__tests__/ResolverBase.filterEscaping.test.ts +147 -0
- package/src/__tests__/SessionManager.test.ts +55 -0
- package/src/agentSessions/SessionManager.ts +27 -9
- package/src/auth/index.ts +1 -0
- package/src/auth/scopeLimitedPrincipal.ts +50 -0
- package/src/context.ts +26 -2
- package/src/entitySubclasses/MJEntityPermissionEntityServer.server.ts +8 -7
- package/src/generated/generated.ts +437 -1
- package/src/generic/ResolverBase.ts +56 -4
- package/src/index.ts +57 -1
- package/src/integration/CustomColumnPromoter.ts +520 -98
- package/src/integration/InactiveRowWarnings.ts +85 -0
- package/src/integration/SchemaRefreshLaunch.ts +16 -0
- package/src/resolvers/AdhocQueryResolver.ts +21 -6
- package/src/resolvers/IdentityClaimRedemptionResolver.ts +184 -0
- package/src/resolvers/IntegrationDiscoveryResolver.ts +82 -11
- package/src/resolvers/meetingRecordingRegistration.ts +3 -7
- package/src/types.ts +8 -0
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"meetingRecordingRegistration.d.ts","sourceRoot":"","sources":["../../src/resolvers/meetingRecordingRegistration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAgC,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"meetingRecordingRegistration.d.ts","sourceRoot":"","sources":["../../src/resolvers/meetingRecordingRegistration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAgC,MAAM,sBAAsB,CAAC;AASjG,2GAA2G;AAC3G,MAAM,WAAW,4BAA4B;IAC3C,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,QAAQ,EAAE,MAAM,CAAC;IACjB,8HAA8H;IAC9H,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,sDAAsD;AACtD,MAAM,WAAW,kCAAkC;IACjD,uFAAuF;IACvF,OAAO,EAAE,OAAO,CAAC;IACjB,kHAAkH;IAClH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,4GAA4G;AAC5G,MAAM,WAAW,kCAAkC;IACjD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;;;GASG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,4BAA4B,EACpC,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,CAAC,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC,CAoE7C;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBtJ;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,4BAA4B,EACpC,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAUxB;AAiGD,kCAAkC;AAClC,UAAU,mBAAmB;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,EACrB,mBAAmB,EAAE,MAAM,EAC3B,WAAW,EAAE,QAAQ,GACpB,OAAO,CAAC,mBAAmB,CAAC,CAwB9B"}
|
|
@@ -42,6 +42,7 @@
|
|
|
42
42
|
* @author MemberJunction.com
|
|
43
43
|
*/
|
|
44
44
|
import { RunView, LogError, LogStatus } from '@memberjunction/core';
|
|
45
|
+
import { EscapeSQLString } from '@memberjunction/global';
|
|
45
46
|
import { FileStorageEngine } from '@memberjunction/storage';
|
|
46
47
|
const CONVERSATION_ENTITY = 'MJ: Conversations';
|
|
47
48
|
const FILES_ENTITY = 'MJ: Files';
|
|
@@ -174,7 +175,7 @@ async function findConversationByEgressID(egressID, contextUser, provider) {
|
|
|
174
175
|
const rv = RunView.FromMetadataProvider(provider);
|
|
175
176
|
const found = await rv.RunView({
|
|
176
177
|
EntityName: CONVERSATION_ENTITY,
|
|
177
|
-
ExtraFilter: `EgressID='${
|
|
178
|
+
ExtraFilter: `EgressID='${EscapeSQLString(egressID)}' AND Type='${EscapeSQLString(MEETING_ROOM_CONVERSATION_TYPE)}' AND (IsArchived IS NULL OR IsArchived=0)`,
|
|
178
179
|
Fields: ['ID'],
|
|
179
180
|
OrderBy: '__mj_CreatedAt DESC',
|
|
180
181
|
MaxRows: 1,
|
|
@@ -190,7 +191,7 @@ async function findConversationByRoomName(roomName, contextUser, provider) {
|
|
|
190
191
|
const rv = RunView.FromMetadataProvider(provider);
|
|
191
192
|
const found = await rv.RunView({
|
|
192
193
|
EntityName: CONVERSATION_ENTITY,
|
|
193
|
-
ExtraFilter: `ExternalID='${
|
|
194
|
+
ExtraFilter: `ExternalID='${EscapeSQLString(roomName)}' AND Type='${EscapeSQLString(MEETING_ROOM_CONVERSATION_TYPE)}' AND (IsArchived IS NULL OR IsArchived=0)`,
|
|
194
195
|
Fields: ['ID'],
|
|
195
196
|
OrderBy: '__mj_CreatedAt DESC',
|
|
196
197
|
MaxRows: 1,
|
|
@@ -304,8 +305,4 @@ function resolveStorageAccountForProvider(providerID) {
|
|
|
304
305
|
const accounts = FileStorageEngine.Instance.GetAccountsByProviderID(providerID);
|
|
305
306
|
return accounts.length > 0 ? accounts[0].ID : null;
|
|
306
307
|
}
|
|
307
|
-
/** Escapes single quotes for safe embedding in an `ExtraFilter` literal. */
|
|
308
|
-
function escapeSql(value) {
|
|
309
|
-
return value.replace(/'/g, "''");
|
|
310
|
-
}
|
|
311
308
|
//# sourceMappingURL=meetingRecordingRegistration.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"meetingRecordingRegistration.js","sourceRoot":"","sources":["../../src/resolvers/meetingRecordingRegistration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAA+B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"meetingRecordingRegistration.js","sourceRoot":"","sources":["../../src/resolvers/meetingRecordingRegistration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAA+B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAChD,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,8BAA8B,GAAG,cAAc,CAAC;AAyCtD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAoC,EACpC,WAAqB,EACrB,QAA2B,EAC3B,MAA2C;IAE3C,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,YAAY,EACV,oFAAoF,GAAG,uDAAuD;aACjJ,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,EAAE,qBAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC;QAC1G,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,YAAY,EACV,iGAAiG;oBACjG,+FAA+F;oBAC/F,+DAA+D;aAClE,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAEtE,MAAM,aAAa,GAAG,gCAAgC,CAAC,cAAc,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,YAAY,EACV,uFAAuF,cAAc,KAAK;oBAC1G,+FAA+F;aAClG,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,8EAA8E,EAAE,CAAC;QAC1H,CAAC;QAED,gGAAgG;QAChG,6FAA6F;QAC7F,0BAA0B;QAC1B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC3G,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;QACrG,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC9H,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,uDAAuD,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;QACnI,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,0EAA0E;gBACxF,cAAc,EAAE,cAAc;gBAC9B,eAAe,EAAE,MAAM;aACxB,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,sDAAsD,MAAM,cAAc,MAAM,CAAC,QAAQ,qBAAqB,cAAc,GAAG,CAAC,CAAC;QAC3I,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,QAAQ,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAgB,EAAE,QAAgB,EAAE,WAAqB,EAAE,QAA2B;IAClI,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACzF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,CAAC,kDAAkD;QAClE,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,WAAW,CAAC,CAAC;QAC5G,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACjC,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,CAAC,sDAAsD,YAAY,CAAC,YAAY,EAAE,eAAe,IAAI,eAAe,EAAE,CAAC,CAAC;QAChI,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iDAAiD;QACjD,QAAQ,CAAC,iDAAiD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpH,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAoC,EACpC,WAAqB,EACrB,QAA2B;IAE3B,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1F,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,0BAA0B,CAAC,QAAgB,EAAE,WAAqB,EAAE,QAA2B;IAC5G,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAC5B;QACE,UAAU,EAAE,mBAAmB;QAC/B,WAAW,EAAE,aAAa,eAAe,CAAC,QAAQ,CAAC,eAAe,eAAe,CAAC,8BAA8B,CAAC,4CAA4C;QAC7J,MAAM,EAAE,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,QAAQ;KACrB,EACD,WAAW,CACZ,CAAC;IACF,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,0BAA0B,CAAC,QAAgB,EAAE,WAAqB,EAAE,QAA2B;IAC5G,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAC5B;QACE,UAAU,EAAE,mBAAmB;QAC/B,WAAW,EAAE,eAAe,eAAe,CAAC,QAAQ,CAAC,eAAe,eAAe,CAAC,8BAA8B,CAAC,4CAA4C;QAC/J,MAAM,EAAE,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,QAAQ;KACrB,EACD,WAAW,CACZ,CAAC;IACF,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,+HAA+H;AAC/H,KAAK,UAAU,yBAAyB,CAAC,QAAgB,EAAE,WAAqB,EAAE,QAA2B;IAC3G,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,WAAW,CAAC,CAAC;IAC5G,YAAY,CAAC,SAAS,EAAE,CAAC;IACzB,YAAY,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC;IACrC,YAAY,CAAC,IAAI,GAAG,gBAAgB,QAAQ,EAAE,CAAC;IAC/C,YAAY,CAAC,IAAI,GAAG,8BAA8B,CAAC;IACnD,YAAY,CAAC,UAAU,GAAG,QAAQ,CAAC;IACnC,YAAY,CAAC,gBAAgB,GAAG,aAAa,CAAC;IAC9C,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,QAAQ,CACN,sFAAsF,QAAQ,MAAM,YAAY,CAAC,YAAY,EAAE,eAAe,IAAI,eAAe,EAAE,CACpK,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,MAAoC,EACpC,cAAsB,EACtB,aAAqB,EACrB,WAAqB,EACrB,MAA2C;IAE3C,MAAM,cAAc,GAAG,MAAM,CAAC,cAAe,CAAC;IAC9C,MAAM,mBAAmB,GAAG,MAAM,EAAE,0BAA0B,IAAI,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC;IAE9H,qGAAqG;IACrG,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,KAAK,cAAc,EAAE,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACpF,CAAC;IAED,oGAAoG;IACpG,8FAA8F;IAC9F,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC;IACxH,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC;AACnG,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,cAAsB,EACtB,aAAqB,EACrB,mBAA2B,EAC3B,WAAqB;IAErB,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC;IAC1C,MAAM,kBAAkB,GAAG,gCAAgC,CAAC,mBAAmB,CAAC,CAAC;IACjF,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,+EAA+E,mBAAmB,IAAI;YACpH,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,aAAa,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAClF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC;QACvC,OAAO,EAAE,KAAK;QACd,QAAQ;QACR,QAAQ,EAAE,WAAW;QACrB,WAAW;QACX,gBAAgB,EAAE,kBAAkB;QACpC,UAAU,EAAE,sBAAsB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;KAC1E,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,mGAAmG;AACnG,KAAK,UAAU,sBAAsB,CACnC,MAAoC,EACpC,UAAkB,EAClB,WAAmB,EACnB,WAAqB,EACrB,QAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAe,YAAY,EAAE,WAAW,CAAC,CAAC;IACrF,IAAI,CAAC,SAAS,EAAE,CAAC;IACjB,IAAI,CAAC,IAAI,GAAG,uBAAuB,MAAM,CAAC,QAAQ,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAChG,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAC/B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;IACzB,wGAAwG;IACxG,+FAA+F;IAC/F,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,QAAQ,CAAC,+DAA+D,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,eAAe,EAAE,CAAC,CAAC;IACjI,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,0BAA0B,CACvC,cAAsB,EACtB,MAAc,EACd,QAAgB,EAChB,WAAqB,EACrB,QAA2B;IAE3B,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,WAAW,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAC/C,QAAQ,CAAC,6DAA6D,cAAc,0BAA0B,CAAC,CAAC;QAChH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,YAAY,CAAC,eAAe,GAAG,MAAM,CAAC;IACtC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC3B,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,CAAC,mEAAmE,YAAY,CAAC,YAAY,EAAE,eAAe,IAAI,eAAe,EAAE,CAAC,CAAC;IAC7I,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,gCAAgC,CAAC,UAAkB;IAC1D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAChF,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC"}
|
package/dist/types.d.ts
CHANGED
|
@@ -21,6 +21,14 @@ export type UserPayload = {
|
|
|
21
21
|
apiKeyId?: string;
|
|
22
22
|
/** SHA-256 hash of the MJ API key (used for scope authorization) */
|
|
23
23
|
apiKeyHash?: string;
|
|
24
|
+
/**
|
|
25
|
+
* The IdP's OIDC `email_verified` assertion from the verified JWT, when present.
|
|
26
|
+
* Three-state: `true` (IdP vouched for the email), `false` (IdP explicitly says the email is
|
|
27
|
+
* unverified — security-sensitive flows must not trust an email match), `undefined` (the IdP
|
|
28
|
+
* omits the claim, or auth was via API key / magic link). Consumed by identity-claim
|
|
29
|
+
* redemption; do not treat `undefined` as `false`.
|
|
30
|
+
*/
|
|
31
|
+
emailVerified?: boolean;
|
|
24
32
|
};
|
|
25
33
|
/**
|
|
26
34
|
* AppContext is the context object that is passed to all resolvers.
|
package/dist/types.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,GAAG,MAAM,OAAO,CAAC;AAIxB;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,OAAO;QACf,yEAAyE;QACzE,WAAW,CAAC,EAAE,WAAW,CAAC;KAC3B;CACF;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,GAAG,MAAM,OAAO,CAAC;AAIxB;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,OAAO;QACf,yEAAyE;QACzE,WAAW,CAAC,EAAE,WAAW,CAAC;KAC3B;CACF;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC;IAC1B;;OAEG;IACH,WAAW,EAAE,cAAc,EAAE,CAAC;IAE9B;;OAEG;IACH,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;CAChC,CAAC;AAEF,qBAAa,YAAY;IACvB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;CACtD;AAED,qBAAa,cAAc;IACzB,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;gBAEzC,IAAI,EAAE;QAAC,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAC;CAQzK;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,aAAa,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,wBAAwB,CAAC;IACnC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,+BAA+B,CAAC,EAAE,OAAO,CAAC;IAC1C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;CACtC,CAAC;AAGF,qBAAa,aAAa;IACxB,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,eAAe,CAAC;IACjF,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,QAAQ,CAAC;CACtB;AAED,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD,wBAAsB,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,GAAG,iBAarI"}
|
package/dist/types.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAqDxE,MAAM,OAAO,YAAY;CAGxB;AAED,MAAM,OAAO,cAAc;IASzB,YAAY,IAA4J;QACtK,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AAAA,CAAC;AA8CF,MAAM,OAAO,aAAa;CAKzB;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA2B,EAAE,WAA6B,EAAE,WAAwB,EAAE,SAAe;IACpI,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAClC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,KAAK,CAAC,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IAEzC,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC;IACjB,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;IAC1B,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC;IACvC,GAAG,CAAC,SAAS,GAAG,oBAAoB,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@memberjunction/server",
|
|
3
|
-
"version": "6.1.0-edge.
|
|
3
|
+
"version": "6.1.0-edge.4",
|
|
4
4
|
"description": "MemberJunction: This project provides API access via GraphQL to the common data store.",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./src/index.ts",
|
|
@@ -19,95 +19,96 @@
|
|
|
19
19
|
"@as-integrations/express5": "^1.0.0",
|
|
20
20
|
"@graphql-tools/schema": "^10.0.38",
|
|
21
21
|
"@graphql-tools/utils": "^11.0.0",
|
|
22
|
-
"@memberjunction/actions": "6.1.0-edge.
|
|
23
|
-
"@memberjunction/actions-apollo": "6.1.0-edge.
|
|
24
|
-
"@memberjunction/actions-base": "6.1.0-edge.
|
|
25
|
-
"@memberjunction/actions-bizapps-accounting": "6.1.0-edge.
|
|
26
|
-
"@memberjunction/actions-bizapps-crm": "6.1.0-edge.
|
|
27
|
-
"@memberjunction/actions-bizapps-formbuilders": "6.1.0-edge.
|
|
28
|
-
"@memberjunction/actions-bizapps-lms": "6.1.0-edge.
|
|
29
|
-
"@memberjunction/actions-bizapps-social": "6.1.0-edge.
|
|
30
|
-
"@memberjunction/ai": "6.1.0-edge.
|
|
31
|
-
"@memberjunction/ai-agent-manager": "6.1.0-edge.
|
|
32
|
-
"@memberjunction/ai-agent-manager-actions": "6.1.0-edge.
|
|
33
|
-
"@memberjunction/ai-agents": "6.1.0-edge.
|
|
34
|
-
"@memberjunction/ai-bridge-base": "6.1.0-edge.
|
|
35
|
-
"@memberjunction/ai-bridge-ringcentral": "6.1.0-edge.
|
|
36
|
-
"@memberjunction/ai-bridge-server": "6.1.0-edge.
|
|
37
|
-
"@memberjunction/ai-bridge-teams": "6.1.0-edge.
|
|
38
|
-
"@memberjunction/ai-bridge-twilio": "6.1.0-edge.
|
|
39
|
-
"@memberjunction/ai-bridge-vonage": "6.1.0-edge.
|
|
40
|
-
"@memberjunction/ai-core-plus": "6.1.0-edge.
|
|
41
|
-
"@memberjunction/ai-engine-base": "6.1.0-edge.
|
|
42
|
-
"@memberjunction/ai-mcp-client": "6.1.0-edge.
|
|
43
|
-
"@memberjunction/ai-prompts": "6.1.0-edge.
|
|
44
|
-
"@memberjunction/ai-provider-bundle": "6.1.0-edge.
|
|
45
|
-
"@memberjunction/ai-vector-sync": "6.1.0-edge.
|
|
46
|
-
"@memberjunction/ai-vectordb": "6.1.0-edge.
|
|
47
|
-
"@memberjunction/ai-vectors-pinecone": "6.1.0-edge.
|
|
48
|
-
"@memberjunction/aiengine": "6.1.0-edge.
|
|
49
|
-
"@memberjunction/api-keys": "6.1.0-edge.
|
|
50
|
-
"@memberjunction/auth-providers": "6.1.0-edge.
|
|
51
|
-
"@memberjunction/clustering-engine": "6.1.0-edge.
|
|
52
|
-
"@memberjunction/codegen-lib": "6.1.0-edge.
|
|
53
|
-
"@memberjunction/communication-engine": "6.1.0-edge.
|
|
54
|
-
"@memberjunction/communication-ms-graph": "6.1.0-edge.
|
|
55
|
-
"@memberjunction/communication-sendgrid": "6.1.0-edge.
|
|
56
|
-
"@memberjunction/communication-types": "6.1.0-edge.
|
|
57
|
-
"@memberjunction/component-registry-client-sdk": "6.1.0-edge.
|
|
58
|
-
"@memberjunction/computer-use": "6.1.0-edge.
|
|
59
|
-
"@memberjunction/computer-use-engine": "6.1.0-edge.
|
|
60
|
-
"@memberjunction/config": "6.1.0-edge.
|
|
61
|
-
"@memberjunction/core": "6.1.0-edge.
|
|
62
|
-
"@memberjunction/core-actions": "6.1.0-edge.
|
|
63
|
-
"@memberjunction/core-entities": "6.1.0-edge.
|
|
64
|
-
"@memberjunction/core-entities-server": "6.1.0-edge.
|
|
65
|
-
"@memberjunction/credentials": "6.1.0-edge.
|
|
66
|
-
"@memberjunction/data-context": "6.1.0-edge.
|
|
67
|
-
"@memberjunction/data-context-server": "6.1.0-edge.
|
|
68
|
-
"@memberjunction/doc-utils": "6.1.0-edge.
|
|
69
|
-
"@memberjunction/encryption": "6.1.0-edge.
|
|
70
|
-
"@memberjunction/entity-communications-base": "6.1.0-edge.
|
|
71
|
-
"@memberjunction/entity-communications-server": "6.1.0-edge.
|
|
72
|
-
"@memberjunction/esignature": "6.1.0-edge.
|
|
73
|
-
"@memberjunction/external-change-detection": "6.1.0-edge.
|
|
74
|
-
"@memberjunction/generic-database-provider": "6.1.0-edge.
|
|
75
|
-
"@memberjunction/global": "6.1.0-edge.
|
|
76
|
-
"@memberjunction/graphql-dataprovider": "6.1.0-edge.
|
|
77
|
-
"@memberjunction/integration-engine": "6.1.0-edge.
|
|
78
|
-
"@memberjunction/integration-engine-base": "6.1.0-edge.
|
|
79
|
-
"@memberjunction/integration-progress-artifacts": "6.1.0-edge.
|
|
80
|
-
"@memberjunction/integration-schema-builder": "6.1.0-edge.
|
|
81
|
-
"@memberjunction/interactive-component-types": "6.1.0-edge.
|
|
82
|
-
"@memberjunction/lists": "6.1.0-edge.
|
|
83
|
-
"@memberjunction/lists-base": "6.1.0-edge.
|
|
84
|
-
"@memberjunction/livekit-room-server": "6.1.0-edge.
|
|
85
|
-
"@memberjunction/
|
|
86
|
-
"@memberjunction/
|
|
87
|
-
"@memberjunction/
|
|
88
|
-
"@memberjunction/
|
|
89
|
-
"@memberjunction/
|
|
90
|
-
"@memberjunction/
|
|
91
|
-
"@memberjunction/remote-browser-
|
|
92
|
-
"@memberjunction/remote-browser-
|
|
93
|
-
"@memberjunction/remote-browser-
|
|
94
|
-
"@memberjunction/
|
|
95
|
-
"@memberjunction/scheduling-
|
|
96
|
-
"@memberjunction/scheduling-
|
|
97
|
-
"@memberjunction/scheduling-engine
|
|
98
|
-
"@memberjunction/
|
|
99
|
-
"@memberjunction/
|
|
100
|
-
"@memberjunction/
|
|
101
|
-
"@memberjunction/
|
|
102
|
-
"@memberjunction/
|
|
103
|
-
"@memberjunction/
|
|
104
|
-
"@memberjunction/
|
|
105
|
-
"@memberjunction/tag-engine
|
|
106
|
-
"@memberjunction/
|
|
107
|
-
"@memberjunction/
|
|
108
|
-
"@memberjunction/
|
|
109
|
-
"@memberjunction/testing-engine
|
|
110
|
-
"@memberjunction/
|
|
22
|
+
"@memberjunction/actions": "6.1.0-edge.4",
|
|
23
|
+
"@memberjunction/actions-apollo": "6.1.0-edge.4",
|
|
24
|
+
"@memberjunction/actions-base": "6.1.0-edge.4",
|
|
25
|
+
"@memberjunction/actions-bizapps-accounting": "6.1.0-edge.4",
|
|
26
|
+
"@memberjunction/actions-bizapps-crm": "6.1.0-edge.4",
|
|
27
|
+
"@memberjunction/actions-bizapps-formbuilders": "6.1.0-edge.4",
|
|
28
|
+
"@memberjunction/actions-bizapps-lms": "6.1.0-edge.4",
|
|
29
|
+
"@memberjunction/actions-bizapps-social": "6.1.0-edge.4",
|
|
30
|
+
"@memberjunction/ai": "6.1.0-edge.4",
|
|
31
|
+
"@memberjunction/ai-agent-manager": "6.1.0-edge.4",
|
|
32
|
+
"@memberjunction/ai-agent-manager-actions": "6.1.0-edge.4",
|
|
33
|
+
"@memberjunction/ai-agents": "6.1.0-edge.4",
|
|
34
|
+
"@memberjunction/ai-bridge-base": "6.1.0-edge.4",
|
|
35
|
+
"@memberjunction/ai-bridge-ringcentral": "6.1.0-edge.4",
|
|
36
|
+
"@memberjunction/ai-bridge-server": "6.1.0-edge.4",
|
|
37
|
+
"@memberjunction/ai-bridge-teams": "6.1.0-edge.4",
|
|
38
|
+
"@memberjunction/ai-bridge-twilio": "6.1.0-edge.4",
|
|
39
|
+
"@memberjunction/ai-bridge-vonage": "6.1.0-edge.4",
|
|
40
|
+
"@memberjunction/ai-core-plus": "6.1.0-edge.4",
|
|
41
|
+
"@memberjunction/ai-engine-base": "6.1.0-edge.4",
|
|
42
|
+
"@memberjunction/ai-mcp-client": "6.1.0-edge.4",
|
|
43
|
+
"@memberjunction/ai-prompts": "6.1.0-edge.4",
|
|
44
|
+
"@memberjunction/ai-provider-bundle": "6.1.0-edge.4",
|
|
45
|
+
"@memberjunction/ai-vector-sync": "6.1.0-edge.4",
|
|
46
|
+
"@memberjunction/ai-vectordb": "6.1.0-edge.4",
|
|
47
|
+
"@memberjunction/ai-vectors-pinecone": "6.1.0-edge.4",
|
|
48
|
+
"@memberjunction/aiengine": "6.1.0-edge.4",
|
|
49
|
+
"@memberjunction/api-keys": "6.1.0-edge.4",
|
|
50
|
+
"@memberjunction/auth-providers": "6.1.0-edge.4",
|
|
51
|
+
"@memberjunction/clustering-engine": "6.1.0-edge.4",
|
|
52
|
+
"@memberjunction/codegen-lib": "6.1.0-edge.4",
|
|
53
|
+
"@memberjunction/communication-engine": "6.1.0-edge.4",
|
|
54
|
+
"@memberjunction/communication-ms-graph": "6.1.0-edge.4",
|
|
55
|
+
"@memberjunction/communication-sendgrid": "6.1.0-edge.4",
|
|
56
|
+
"@memberjunction/communication-types": "6.1.0-edge.4",
|
|
57
|
+
"@memberjunction/component-registry-client-sdk": "6.1.0-edge.4",
|
|
58
|
+
"@memberjunction/computer-use": "6.1.0-edge.4",
|
|
59
|
+
"@memberjunction/computer-use-engine": "6.1.0-edge.4",
|
|
60
|
+
"@memberjunction/config": "6.1.0-edge.4",
|
|
61
|
+
"@memberjunction/core": "6.1.0-edge.4",
|
|
62
|
+
"@memberjunction/core-actions": "6.1.0-edge.4",
|
|
63
|
+
"@memberjunction/core-entities": "6.1.0-edge.4",
|
|
64
|
+
"@memberjunction/core-entities-server": "6.1.0-edge.4",
|
|
65
|
+
"@memberjunction/credentials": "6.1.0-edge.4",
|
|
66
|
+
"@memberjunction/data-context": "6.1.0-edge.4",
|
|
67
|
+
"@memberjunction/data-context-server": "6.1.0-edge.4",
|
|
68
|
+
"@memberjunction/doc-utils": "6.1.0-edge.4",
|
|
69
|
+
"@memberjunction/encryption": "6.1.0-edge.4",
|
|
70
|
+
"@memberjunction/entity-communications-base": "6.1.0-edge.4",
|
|
71
|
+
"@memberjunction/entity-communications-server": "6.1.0-edge.4",
|
|
72
|
+
"@memberjunction/esignature": "6.1.0-edge.4",
|
|
73
|
+
"@memberjunction/external-change-detection": "6.1.0-edge.4",
|
|
74
|
+
"@memberjunction/generic-database-provider": "6.1.0-edge.4",
|
|
75
|
+
"@memberjunction/global": "6.1.0-edge.4",
|
|
76
|
+
"@memberjunction/graphql-dataprovider": "6.1.0-edge.4",
|
|
77
|
+
"@memberjunction/integration-engine": "6.1.0-edge.4",
|
|
78
|
+
"@memberjunction/integration-engine-base": "6.1.0-edge.4",
|
|
79
|
+
"@memberjunction/integration-progress-artifacts": "6.1.0-edge.4",
|
|
80
|
+
"@memberjunction/integration-schema-builder": "6.1.0-edge.4",
|
|
81
|
+
"@memberjunction/interactive-component-types": "6.1.0-edge.4",
|
|
82
|
+
"@memberjunction/lists": "6.1.0-edge.4",
|
|
83
|
+
"@memberjunction/lists-base": "6.1.0-edge.4",
|
|
84
|
+
"@memberjunction/livekit-room-server": "6.1.0-edge.4",
|
|
85
|
+
"@memberjunction/network-utils": "6.1.0-edge.4",
|
|
86
|
+
"@memberjunction/notifications": "6.1.0-edge.4",
|
|
87
|
+
"@memberjunction/postgresql-dataprovider": "6.1.0-edge.4",
|
|
88
|
+
"@memberjunction/queue": "6.1.0-edge.4",
|
|
89
|
+
"@memberjunction/record-comparison": "6.1.0-edge.4",
|
|
90
|
+
"@memberjunction/redis-provider": "6.1.0-edge.4",
|
|
91
|
+
"@memberjunction/remote-browser-base": "6.1.0-edge.4",
|
|
92
|
+
"@memberjunction/remote-browser-cdp": "6.1.0-edge.4",
|
|
93
|
+
"@memberjunction/remote-browser-selfhost": "6.1.0-edge.4",
|
|
94
|
+
"@memberjunction/remote-browser-server": "6.1.0-edge.4",
|
|
95
|
+
"@memberjunction/scheduling-actions": "6.1.0-edge.4",
|
|
96
|
+
"@memberjunction/scheduling-base-types": "6.1.0-edge.4",
|
|
97
|
+
"@memberjunction/scheduling-engine": "6.1.0-edge.4",
|
|
98
|
+
"@memberjunction/scheduling-engine-base": "6.1.0-edge.4",
|
|
99
|
+
"@memberjunction/schema-engine": "6.1.0-edge.4",
|
|
100
|
+
"@memberjunction/search-engine": "6.1.0-edge.4",
|
|
101
|
+
"@memberjunction/server-extensions-core": "6.1.0-edge.4",
|
|
102
|
+
"@memberjunction/sql-dialect": "6.1.0-edge.4",
|
|
103
|
+
"@memberjunction/sqlserver-dataprovider": "6.1.0-edge.4",
|
|
104
|
+
"@memberjunction/storage": "6.1.0-edge.4",
|
|
105
|
+
"@memberjunction/tag-engine": "6.1.0-edge.4",
|
|
106
|
+
"@memberjunction/tag-engine-base": "6.1.0-edge.4",
|
|
107
|
+
"@memberjunction/task-graph": "6.1.0-edge.4",
|
|
108
|
+
"@memberjunction/templates": "6.1.0-edge.4",
|
|
109
|
+
"@memberjunction/testing-engine": "6.1.0-edge.4",
|
|
110
|
+
"@memberjunction/testing-engine-base": "6.1.0-edge.4",
|
|
111
|
+
"@memberjunction/version-history": "6.1.0-edge.4",
|
|
111
112
|
"@octokit/auth-app": "^7.1.5",
|
|
112
113
|
"@octokit/rest": "^21.1.1",
|
|
113
114
|
"@types/compression": "^1.8.1",
|
|
@@ -116,7 +117,6 @@
|
|
|
116
117
|
"@types/node": "24.10.11",
|
|
117
118
|
"@types/pg": "^8.11.11",
|
|
118
119
|
"@types/ws": "8.18.1",
|
|
119
|
-
"axios": "^1.13.4",
|
|
120
120
|
"body-parser": "^2.2.2",
|
|
121
121
|
"class-validator": "^0.14.3",
|
|
122
122
|
"cloudevents": "^10.0.0",
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* `ExecuteAdhocQuery` runs a raw `SELECT` straight on the read-only pool: no `RunView`, no
|
|
3
|
+
* entity permissions, no row-level security, and therefore no magic-link scope. The
|
|
4
|
+
* confinement a scope-limited session relies on is expressed purely as RLS filter tokens
|
|
5
|
+
* substituted on the entity-read path, so on this path it simply does not exist — a
|
|
6
|
+
* scope-limited principal reaching it would read the whole database.
|
|
7
|
+
*
|
|
8
|
+
* These tests pin the predicate that classifies such principals, and that the resolver
|
|
9
|
+
* consults it before it touches a data source. The resolver itself needs a very heavy mock
|
|
10
|
+
* graph to instantiate (type-graphql decorators, mssql, AppContext, config, providers), so
|
|
11
|
+
* the ordering assertion is a source-shape test — the same hybrid strategy the existing
|
|
12
|
+
* `AdhocQueryResolver.bugs.test.ts` uses for this resolver.
|
|
13
|
+
*/
|
|
14
|
+
import { describe, it, expect } from 'vitest';
|
|
15
|
+
import { readFileSync } from 'fs';
|
|
16
|
+
import { resolve } from 'path';
|
|
17
|
+
import { UserInfo } from '@memberjunction/core';
|
|
18
|
+
import { IsScopeLimitedPrincipal } from '../auth/scopeLimitedPrincipal.js';
|
|
19
|
+
|
|
20
|
+
const ADHOC_RESOLVER_PATH = resolve(__dirname, '../resolvers/AdhocQueryResolver.ts');
|
|
21
|
+
|
|
22
|
+
/** A principal with nothing set — the shape of an ordinary authenticated user. */
|
|
23
|
+
function plainUser(): UserInfo {
|
|
24
|
+
const u = new UserInfo();
|
|
25
|
+
u.ID = 'D1F1A0C4-0000-4000-8000-000000000001';
|
|
26
|
+
u.Email = 'user@example.com';
|
|
27
|
+
return u;
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
describe('IsScopeLimitedPrincipal', () => {
|
|
31
|
+
it('does not limit an ordinary authenticated user', () => {
|
|
32
|
+
expect(IsScopeLimitedPrincipal(plainUser())).toBe(false);
|
|
33
|
+
});
|
|
34
|
+
|
|
35
|
+
it('limits an anonymous magic-link guest', () => {
|
|
36
|
+
const guest = plainUser();
|
|
37
|
+
guest.IsMagicLinkAnonymous = true;
|
|
38
|
+
expect(IsScopeLimitedPrincipal(guest)).toBe(true);
|
|
39
|
+
});
|
|
40
|
+
|
|
41
|
+
it('limits a resource-scoped magic-link session (ResourceID)', () => {
|
|
42
|
+
const scoped = plainUser();
|
|
43
|
+
scoped.MagicLinkScope = { ResourceID: 'A0000000-0000-4000-8000-000000000009' };
|
|
44
|
+
expect(IsScopeLimitedPrincipal(scoped)).toBe(true);
|
|
45
|
+
});
|
|
46
|
+
|
|
47
|
+
it('limits a resource-scoped magic-link session carrying only a ResourceType', () => {
|
|
48
|
+
const scoped = plainUser();
|
|
49
|
+
scoped.MagicLinkScope = { ResourceType: 'Dashboards' };
|
|
50
|
+
expect(IsScopeLimitedPrincipal(scoped)).toBe(true);
|
|
51
|
+
});
|
|
52
|
+
|
|
53
|
+
it('does NOT limit a session whose scope object is empty', () => {
|
|
54
|
+
// An empty object carries no confinement. Testing the object's truthiness rather
|
|
55
|
+
// than its contents would lock out a session that is not actually scoped.
|
|
56
|
+
const notReallyScoped = plainUser();
|
|
57
|
+
notReallyScoped.MagicLinkScope = {};
|
|
58
|
+
expect(IsScopeLimitedPrincipal(notReallyScoped)).toBe(false);
|
|
59
|
+
});
|
|
60
|
+
|
|
61
|
+
it('fails closed when there is no principal at all', () => {
|
|
62
|
+
expect(IsScopeLimitedPrincipal(undefined)).toBe(true);
|
|
63
|
+
expect(IsScopeLimitedPrincipal(null)).toBe(true);
|
|
64
|
+
});
|
|
65
|
+
});
|
|
66
|
+
|
|
67
|
+
describe('AdhocQueryResolver scope guard placement', () => {
|
|
68
|
+
const src = readFileSync(ADHOC_RESOLVER_PATH, 'utf8');
|
|
69
|
+
|
|
70
|
+
it('consults IsScopeLimitedPrincipal', () => {
|
|
71
|
+
expect(/\bIsScopeLimitedPrincipal\s*\(/.test(src)).toBe(true);
|
|
72
|
+
});
|
|
73
|
+
|
|
74
|
+
it('refuses the principal BEFORE acquiring a data source', () => {
|
|
75
|
+
// Authorization must gate the work, not run alongside it: if the guard landed after
|
|
76
|
+
// the pool were acquired (or the SQL executed), a scope-limited caller would already
|
|
77
|
+
// have reached the database.
|
|
78
|
+
const guardAt = src.indexOf('IsScopeLimitedPrincipal(');
|
|
79
|
+
const dataSourceAt = src.indexOf('GetReadOnlyDataSource(');
|
|
80
|
+
expect(guardAt).toBeGreaterThan(-1);
|
|
81
|
+
expect(dataSourceAt).toBeGreaterThan(-1);
|
|
82
|
+
expect(guardAt).toBeLessThan(dataSourceAt);
|
|
83
|
+
});
|
|
84
|
+
});
|