@modular-rest/server 1.11.13 → 1.11.15

package/src/services/functions/service.js

@@ -1,74 +0,0 @@
-const functions = [];
-
-/**
- * @typedef {import('../../class/security.js').PermissionType} PermissionType
- */
-
-/**
- * Defines a function with a given name, permission types, and callback.
- *
- * @param {Object} params - The parameters for the function.
- * @param {string} params.name - The name of the function.
- * @param {[PermissionType]} params.permissionTypes - The permission types for the function.
- * @param {Function} params.callback - The callback to be executed by the function.
- */
-function defineFunction({ name, permissionTypes, callback }) {
-  // Check if the function already exists
-  const existingFunction = functions.find((f) => f.name === name);
-  if (existingFunction) {
-    throw new Error(`Function with name ${name} already exists`);
-  }
-
-  // Check if the permission types provided
-  if (!permissionTypes || !permissionTypes.length) {
-    throw new Error(`Permission types not provided for function ${name}`);
-  }
-
-  // Check if the callback is a function
-  if (typeof callback !== "function") {
-    throw new Error(`Callback is not a function for function ${name}`);
-  }
-
-  // Add the function to the list of functions
-  return { name, permissionTypes, callback };
-}
-
-function runFunction(name, args, user) {
-  return new Promise((resolve, reject) => {
-    const func = functions.find((f) => f.name === name);
-    if (!func) {
-      reject(new Error(`Function with name ${name} not found`));
-    }
-
-    const hasPermission = func.permissionTypes.some((permissionType) =>
-      user.hasPermission(permissionType)
-    );
-
-    if (hasPermission == false) {
-      reject(
-        new Error(`User does not have permission to run function ${name}:
-        Function permissions: ${func.permissionTypes}
-        User permissions: ${
-          user.getBrief().permissionGroup.validPermissionTypes
-        }
-        `)
-      );
-    } else {
-      try {
-        resolve(func.callback(args));
-      } catch (e) {
-        reject(e);
-      }
-    }
-  });
-}
-
-function addFunction(func) {
-  functions.push(func);
-}
-
-module.exports = {
-  defineFunction,
-  runFunction,
-  addFunction,
-};

package/src/services/jwt/router.js

@@ -1,82 +0,0 @@
-let Router = require('koa-router');
-let validateObject = require('../../class/validator')
-let reply = require('../../class/reply').create;
-
-let name = 'verify';
-let verify = new Router();
-
-let service = require('./service').main;
-
-verify.post('/token', async (ctx) => {
-	let body = ctx.request.body;
-
-	// validate result
-	let bodyValidate = validateObject(body, 'token');
-
-	// fields validation
-	if (!bodyValidate.isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', {
-			'e': bodyValidate.requires
-		});
-		return;
-	}
-
-	await service.verify(body.token)
-		.then((payload) => ctx.body = reply('s', {
-			'user': payload
-		}))
-		.catch(err => {
-			ctx.status = 412;
-			ctx.body = reply('e', {
-				'e': err
-			});
-		});
-});
-
-verify.post('/checkAccess', async (ctx) => {
-	let body = ctx.request.body;
-
-	// validate result
-	let bodyValidate = validateObject(body, 'token permissionField');
-
-	// fields validation
-	if (!bodyValidate.isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', {
-			'e': bodyValidate.requires
-		});
-		return;
-	}
-
-	let payload = await service.verify(body.token)
-		.catch(err => {
-			console.log(err);
-			ctx.throw(412, err.message);
-		});
-
-
-	let userid = payload.id;
-
-	await global.services.userManager.main.getUserById(userid)
-		.then((user) => {
-			let key = user.hasPermission(body.permissionField);
-			ctx.body = reply('s', {
-				'access': key
-			});
-		})
-		.catch(err => {
-			ctx.status = 412;
-			ctx.body = reply('e', {
-				'e': err
-			});
-		});
-});
-
-verify.get('/ready', async (ctx) => {
-	// it's health check, so return success
-	ctx.body = reply('s', {});
-});
-
-module.exports.name = name;
-module.exports.main = verify;

package/src/services/jwt/service.js

@@ -1,37 +0,0 @@
-const jwt = require("jsonwebtoken");
-
-class JWT {
-  setKies(privateKey, publicKey) {
-    this.privateKey = privateKey;
-    this.publicKey = publicKey;
-  }
-
-  sign(payload) {
-    return new Promise((done, reject) => {
-      let option = { algorithm: "RS256" };
-
-      try {
-        let token = jwt.sign(payload, this.privateKey, option);
-        done(token);
-      } catch (error) {
-        reject(error.message);
-      }
-    });
-  }
-
-  verify(token) {
-    return new Promise((done, reject) => {
-      let option = { algorithm: "RS256" };
-
-      try {
-        let decoded = jwt.verify(token, this.publicKey, option);
-        done(decoded);
-      } catch (error) {
-        reject(error);
-      }
-    });
-  }
-}
-
-module.exports.name = "jwt";
-module.exports.main = new JWT();

package/src/services/user_manager/db.js

@@ -1,83 +0,0 @@
-var mongoose = require("mongoose");
-var Schema = mongoose.Schema;
-
-let CollectionDefinition = require("../../class/collection_definition");
-let { Permission, PermissionTypes } = require("../../class/security");
-const { config } = require("../../config");
-const triggerOperator = require("./../../class/trigger_operator");
-
-let authSchema = new Schema(
-  {
-    permissionGroup: String,
-    email: String,
-    phone: String,
-    password: String,
-    type: { type: String, default: "user", enum: ["user", "anonymous"] },
-  },
-  { timestamps: true }
-);
-
-authSchema.index({ email: 1 }, { unique: true });
-authSchema.pre(["save", "updateOne"], function (next) {
-  // Encode the password before saving
-  if (this.isModified("password")) {
-    this.password = Buffer.from(this.password).toString("base64");
-  }
-  next();
-});
-
-authSchema.post("save", function (doc, next) {
-  triggerOperator.call("insert-one", "cms", "auth", {
-    query: null,
-    queryResult: doc._doc,
-  });
-  next();
-});
-
-authSchema.post("findOneAndUpdate", function (doc, next) {
-  triggerOperator.call("update-one", "cms", "auth", {
-    query: null,
-    queryResult: doc._doc,
-  });
-  next();
-});
-
-authSchema.post("updateOne", function (result, next) {
-  triggerOperator.call("update-one", "cms", "auth", {
-    query: null,
-    queryResult: doc._doc,
-  });
-  next();
-});
-
-authSchema.post("findOneAndDelete", function (doc, next) {
-  triggerOperator.call("remove-one", "cms", "auth", {
-    query: null,
-    queryResult: doc._doc,
-  });
-  next();
-});
-
-authSchema.post("deleteOne", function (result, next) {
-  triggerOperator.call("remove-one", "cms", "auth", {
-    query: null,
-    queryResult: doc._doc,
-  });
-  next();
-});
-
-module.exports = [
-  new CollectionDefinition({
-    db: "cms",
-    collection: "auth",
-    schema: authSchema,
-    permissions: [
-      new Permission({
-        type: PermissionTypes.advanced_settings,
-        read: true,
-        write: true,
-      }),
-    ],
-    triggers: config.authTriggers || [],
-  }),
-];

package/src/services/user_manager/permissionManager.js

@@ -1,43 +0,0 @@
-const { config } = require("../../config");
-
-function getDefaultPermissionGroups() {
-  const defaultPermissionGroups = config.permissionGroups.find(
-    (group) => group.isDefault
-  );
-
-  if (defaultPermissionGroups == null) {
-    throw new Error("Default permission group not found");
-  }
-
-  return defaultPermissionGroups;
-}
-
-function getDefaultAnonymousPermissionGroup() {
-  const anonymousPermission = config.permissionGroups.find(
-    (group) => group.isAnonymous
-  );
-
-  if (anonymousPermission == null) {
-    throw new Error("Anonymous permission group not found");
-  }
-
-  return anonymousPermission;
-}
-
-function getDefaultAdministratorPermissionGroup() {
-  const administratorPermission = config.permissionGroups.find(
-    (group) => group.title.toString() == "administrator"
-  );
-
-  if (administratorPermission == null) {
-    throw new Error("Administrator permission group not found");
-  }
-
-  return administratorPermission;
-}
-
-module.exports = {
-  getDefaultPermissionGroups,
-  getDefaultAnonymousPermissionGroup,
-  getDefaultAdministratorPermissionGroup,
-};

package/src/services/user_manager/router.js

@@ -1,176 +0,0 @@
-let Router = require('koa-router');
-let validateObject = require('../../class/validator')
-let reply = require('../../class/reply').create;
-
-let name = 'user';
-let userManager = new Router();
-
-let service = require('./service').main;
-
-userManager.post('/register_id', async (ctx) => {
-	let body = ctx.request.body;
-
-	let validateOption = {
-		id: '',
-		idType: 'phone email'
-	};
-
-	// validate result
-	let bodyValidate = validateObject(body, validateOption);
-
-	// fields validation
-	if (!bodyValidate.isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', { 'e': bodyValidate.requires });
-		return;
-	}
-
-	let serial = service.generateVerificationCode(body.id, body.idType);
-
-	if (serial) {
-		service.registerTemporaryID(body.id, body.idType, serial);
-		ctx.body = reply('s');
-	}
-	else {
-		ctx.status = 412;
-		ctx.body = reply('e', { 'e': 'Could not generate verification code.' });
-	}
-
-});
-
-userManager.post('/validateCode', async (ctx) => {
-	let body = ctx.request.body;
-
-	// validate result
-	let bodyValidate = validateObject(body, 'id code');
-
-	// fields validation
-	if (!bodyValidate.isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', { 'e': bodyValidate.requires });
-		return;
-	}
-
-	let isValid = service.isCodeValid(body.id, body.code);
-
-	if (!isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', {
-			'e': 'Verification code is wrong',
-			'isValid': isValid
-		});
-		return;
-	}
-
-	ctx.body = reply('s', { 'isValid': isValid });
-});
-
-userManager.post('/submit_password', async (ctx) => {
-	let body = ctx.request.body;
-
-	// validate result
-	let bodyValidate = validateObject(body, 'id password code');
-
-	// fields validation
-	if (!bodyValidate.isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', { 'e': bodyValidate.requires });
-		return;
-	}
-
-	let registerResult = await service
-		.submitPasswordForTemporaryID(body.id, body.password, body.code).then();
-
-	if (registerResult == true) ctx.body = reply('s');
-	else {
-		ctx.status = 412;
-		ctx.body = reply('f');
-	}
-});
-
-userManager.post('/change_password', async (ctx) => {
-	let body = ctx.request.body;
-
-	// validate result
-	let bodyValidate = validateObject(body, 'id password code');
-
-	// fields validation
-	if (!bodyValidate.isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', { 'e': bodyValidate.requires });
-		return;
-	}
-
-	let registerResult = await service
-		.changePasswordForTemporaryID(body.id, body.password, body.code).then();
-
-	if (registerResult == true) ctx.body = reply('s');
-	else {
-		ctx.status = 412;
-		ctx.body = reply('f');
-	}
-});
-
-userManager.post('/login', async (ctx) => {
-	let body = ctx.request.body;
-
-	let validateOption = {
-		id: '',
-		password: '',
-		idType: 'phone email'
-	}
-
-	// validate result
-	let bodyValidate = validateObject(body, validateOption);
-
-	// fields validation
-	if (!bodyValidate.isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', { 'e': bodyValidate.requires });
-		return;
-	}
-
-	await service.loginUser(body.id, body.idType, body.password)
-		.then((token) => ctx.body = reply('s', { 'token': token }))
-		.catch(err => {
-			ctx.status = 412;
-			ctx.body = reply('e', { 'e': err });
-		});
-});
-
-userManager.get('/loginAnonymous', async (ctx) => {
-	await service.loginAnonymous()
-		.then((token) => ctx.body = reply('s', { 'token': token }))
-		.catch(err => {
-			ctx.status = 412;
-			ctx.body = reply('e', { 'e': err });
-		});
-});
-
-userManager.post('/getPermission', async (ctx) => {
-	let body = ctx.request.body;
-
-	// validate result
-	let bodyValidate = validateObject(body, 'id');
-
-	// fields validation
-	if (!bodyValidate.isValid) {
-		ctx.status = 412;
-		ctx.body = reply('e', { 'e': bodyValidate.requires });
-		return;
-	}
-
-	let query = { _id: body.id };
-
-	let permission = await global.services.dataProvider.getCollection('cms', 'permission')
-		.findOne(query)
-		.catch(err => {
-			ctx.status = 412;
-			ctx.body = reply('e', { 'e': err });
-		});
-
-	ctx.body = reply('s', { 'permission': permission });
-});
-
-module.exports.name = name;
-module.exports.main = userManager;