@oondemand/oon-core-back 0.3.15 → 0.3.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oondemand/oon-core-back",
-  "version": "0.3.15",
+  "version": "0.3.16",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/oondemand/oon-platform.git",

package/src/api/auth.routes.js

@@ -4,6 +4,7 @@ const auth = require("../core/middlewares/auth");
 const ctx = require("../core/context");
 const GenericError = require("../core/errors/GenericError");
 const { asyncHandler, sendResponse } = require("../core/utils/helpers");
+const { ensureInstance } = require("../core/utils/instanceActivation");
 const {
   LOGIN_PATH,
   getBaseUrl,
@@ -55,17 +56,18 @@ function translateProviderError(error) {
   return new GenericError(message, { statusCode });
 }
 
-async function authenticateLocal(req, res, authorization) {
+async function authenticateRoot(req, res, authorization, instance) {
   const authenticate = ctx.config.auth?.authenticate;
-  if (typeof authenticate !== "function") return false;
-
-  const result = await authenticate({ authorization, req });
-  const statusCode = result?.statusCode || 200;
-  const data = result?.data || result;
-
-  res.set("Cache-Control", "no-store");
-  res.status(statusCode).json(data);
-  return true;
+  if (instance.ecosystemRole === "root" && typeof authenticate === "function") {
+    const result = await authenticate({ authorization, req });
+    const statusCode = result?.statusCode || 200;
+    const data = result?.data || result;
+
+    res.set("Cache-Control", "no-store");
+    res.status(statusCode).json(data);
+    return true;
+  }
+  return false;
 }
 
 router.post(
@@ -73,7 +75,8 @@ router.post(
   asyncHandler(async (req, res) => {
     const authorization = readBasicAuthorization(req);
 
-    if (await authenticateLocal(req, res, authorization)) return;
+    const instance = await ensureInstance();
+    if (await authenticateRoot(req, res, authorization, instance)) return;
 
     const baseUrl = getBaseUrl(req);
     const appCode = getAppCode();
@@ -81,10 +84,7 @@ router.post(
     try {
       const response = await axios.post(
         `${baseUrl}${LOGIN_PATH}`,
-        {
-          codigoApp: appCode,
-          codigo: appCode,
-        },
+        {}, // codigoApp: appCode é enviado no header x-app-code.
         {
           timeout: getTimeout(),
           maxRedirects: 0,

package/src/core/middlewares/auth.js

@@ -17,14 +17,25 @@ async function defaultVerifyToken(token, { req } = {}) {
   const baseUrl = getBaseUrl(req);
   const appCode = getAppCode();
 
-  const response = await axios.get(`${baseUrl}${PERMISSION_PATH}`, {
-    timeout: getTimeout(),
-    maxRedirects: 0,
-    headers: {
-      Authorization: `Bearer ${token}`,
-      "x-app-code": appCode,
-    },
-  });
+  let response;
+  try {
+    response = await axios.get(`${baseUrl}${PERMISSION_PATH}`, {
+      timeout: getTimeout(),
+      maxRedirects: 0,
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "x-app-code": appCode,
+      },
+    });
+  } catch (error) {
+    const err = new Error(
+      error.response?.data?.message ||
+        error.message ||
+        "Token inválido ou erro na autenticação.",
+    );
+    err.statusCode = error.response?.status || error.statusCode || 401;
+    throw err;
+  }
 
   const data = response.data.usuario;
   if (!data) {
@@ -34,7 +45,7 @@ async function defaultVerifyToken(token, { req } = {}) {
   }
 
   const tipoAcesso =
-    data.aplicativo?.tipoAcesso || data.tipoAcesso || data.perfil || data.tipo;
+    data.aplicativo?.tipoAcesso || data.tipoAcesso || data.tipo || data.perfil;
 
   return {
     ...data,

package/src/core/utils/activationProvider.js

@@ -68,6 +68,7 @@ function readCentralActivationApiUrl() {
     process.env.CENTRAL_ATIVACAO_API_URL ||
     process.env.CENTRAL_ATIVACAO_BACKEND_URL ||
     process.env.MEUS_APPS_BACKEND_URL ||
+    process.env.CENTRAL_ATIVACAO_URL ||
     DEFAULT_CENTRAL_ATIVACAO_API_URL
   );
 }