@oondemand/oon-core-back 0.4.21 → 0.4.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oondemand/oon-core-back",
-  "version": "0.4.21",
+  "version": "0.4.23",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/oondemand/oon-platform.git",

package/src/api/auth.routes.js

@@ -60,6 +60,7 @@ function configuredSessionScope() {
 function tenantForLogin(req, instance) {
   const tenancyModel =
     ctx.config.tenancyModel || ctx.config.ecosystem?.tenancyModel;
+  if (tenancyModel === "none") return undefined;
   if (tenancyModel === "multi_tenant") {
     // Uma instância compartilhada não pertence ao tenant que a ativou
     // originalmente. Sem seleção explícita, a Central de Ativações resolve o

package/src/core/define.js

@@ -47,8 +47,10 @@ function addDataScopeFields(schema, definition) {
   if (!["tenant", "user"].includes(scope)) return schema;
 
   const fields = {};
+  const tenantScoped = scope === "tenant"
+    || (scope === "user" && (ctx.config.tenancyModel || ctx.config.ecosystem?.tenancyModel) !== "none");
   const scopedTenantField = tenantField(definition);
-  if (!schema.path(scopedTenantField)) {
+  if (tenantScoped && !schema.path(scopedTenantField)) {
     fields[scopedTenantField] = {
       type: String,
       required: true,

package/src/core/middlewares/auth.js

@@ -17,7 +17,10 @@ const {
 async function defaultVerifyToken(token, { req } = {}) {
   const baseUrl = getBaseUrl(req);
   const appCode = getAppCode();
-  const requestedTenantId = readRequestedTenantId(req);
+  const requestedTenantId =
+    (ctx.config.tenancyModel || ctx.config.ecosystem?.tenancyModel) === "none"
+      ? undefined
+      : readRequestedTenantId(req);
 
   let response;
   try {

package/src/core/rbac/storage.js

@@ -178,6 +178,20 @@ async function resolveUserAccess(user, { touch = true } = {}) {
   }
 
   let access = await findAccessForUser(user);
+  const authenticatedAdmission =
+    (ctx.config.accessMode || ctx.config.ecosystem?.accessMode) === "authenticated_users";
+  if (!access && authenticatedAdmission) {
+    const globalPermissions = Array.isArray(user?.globalPermissions)
+      ? [...new Set(user.globalPermissions.map(String))]
+      : [];
+    return {
+      mode: "authenticated_users",
+      status: "active",
+      roleCode: "authenticated_user",
+      permissions: globalPermissions,
+      mustChangePassword: Boolean(user?.mustChangePassword || user?.firstAccessPending),
+    };
+  }
   if (!access) access = await migrateLegacyAccess(user);
   if (!access) {
     throw accessError("Usuário autenticado sem perfil local nesta Central.", "RBAC_LOCAL_ACCESS_REQUIRED");

package/src/core/tenancy.js

@@ -1,6 +1,7 @@
 const GenericError = require("./errors/GenericError");
 
 const TENANT_HEADER = "x-oon-tenant-id";
+const TARGET_TENANT_HEADER = "x-oon-target-tenant-id";
 const TENANCY_MODELS = Object.freeze(["none", "single_tenant", "multi_tenant"]);
 const DATA_SCOPES = Object.freeze(["legacy", "system", "tenant", "user"]);
 
@@ -21,6 +22,21 @@ function readRequestedTenantId(req) {
   return stringId(req?.headers?.[TENANT_HEADER]);
 }
 
+function readTargetTenantId(req) {
+  return stringId(req?.headers?.[TARGET_TENANT_HEADER]);
+}
+
+function requireTargetTenantId(req) {
+  const targetTenantId = readTargetTenantId(req);
+  if (!targetTenantId) {
+    throw new GenericError("Informe o tenant-alvo da operação.", {
+      statusCode: 400,
+      code: "TARGET_TENANT_REQUIRED",
+    });
+  }
+  return targetTenantId;
+}
+
 function inferVerifiedTenantId(usuario) {
   return stringId(
     usuario?.tenantId ||
@@ -124,6 +140,16 @@ function scopeFilter(entryOrDefinition, accessContext) {
   const scope = dataScope(entryOrDefinition);
   if (scope === "legacy" || scope === "system") return {};
 
+  if (scope === "user" && accessContext?.tenancyModel === "none") {
+    return {
+      [userField(entryOrDefinition)]: requireContextValue(
+        accessContext?.userId,
+        "USER_CONTEXT_REQUIRED",
+        "Contexto de usuário obrigatório para este recurso.",
+      ),
+    };
+  }
+
   const tenantId = requireContextValue(
     accessContext?.tenantId,
     "TENANT_CONTEXT_REQUIRED",
@@ -144,6 +170,9 @@ function scopeFilter(entryOrDefinition, accessContext) {
 
 function mergeScopedFilter(entryOrDefinition, filter = {}, accessContext) {
   const clean = { ...(filter || {}) };
+  if (dataScope(entryOrDefinition) === "user" && accessContext?.tenancyModel === "none") {
+    delete clean[tenantField(entryOrDefinition)];
+  }
   const enforced = scopeFilter(entryOrDefinition, accessContext);
 
   // Remove tentativas de substituir escopo via query/body. O valor confiável
@@ -162,6 +191,9 @@ function scopeMutation(entryOrDefinition, data = {}, accessContext) {
 
   const scope = dataScope(entryOrDefinition);
   if (scope === "legacy" || scope === "system") return result;
+  if (scope === "user" && accessContext?.tenancyModel === "none") {
+    delete result[tenantField(entryOrDefinition)];
+  }
 
   const enforced = scopeFilter(entryOrDefinition, accessContext);
   Object.assign(result, enforced);
@@ -182,10 +214,13 @@ function assertScopedEntry(entryOrDefinition) {
 
 module.exports = {
   TENANT_HEADER,
+  TARGET_TENANT_HEADER,
   TENANCY_MODELS,
   DATA_SCOPES,
   stringId,
   readRequestedTenantId,
+  readTargetTenantId,
+  requireTargetTenantId,
   inferVerifiedTenantId,
   inferTenancyModel,
   createAccessContext,

package/src/core/utils/instanceActivation.js

@@ -114,6 +114,27 @@ function role() {
   return ctx.config.ecosystem?.role === "root" ? "root" : "member";
 }
 
+function deploymentBootstrap() {
+  const deploymentId = String(process.env.OON_DEPLOYMENT_ID || "").trim();
+  const token = String(process.env.OON_DEPLOYMENT_TOKEN || "").trim();
+  if (!deploymentId && !token) return null;
+  if (!deploymentId || !token) {
+    throw new GenericError(
+      "OON_DEPLOYMENT_ID e OON_DEPLOYMENT_TOKEN devem ser configurados juntos.",
+      { statusCode: 500, code: "DEPLOYMENT_BOOTSTRAP_INCOMPLETE" },
+    );
+  }
+  const tenancyModel =
+    ctx.config.tenancyModel || ctx.config.ecosystem?.tenancyModel;
+  if (tenancyModel !== "none") {
+    throw new GenericError(
+      "Bootstrap direto de deployment é permitido somente para Apps globais.",
+      { statusCode: 500, code: "DEPLOYMENT_BOOTSTRAP_TENANCY_INVALID" },
+    );
+  }
+  return { deploymentId, token };
+}
+
 function ambiente() {
   const value =
     process.env.APP_ENVIRONMENT || process.env.NODE_ENV || "desenvolvimento";
@@ -264,6 +285,38 @@ async function ensureInstance() {
     await instance.save();
   }
 
+  const bootstrap = deploymentBootstrap();
+  if (bootstrap) {
+    let currentToken = null;
+    try {
+      currentToken = decrypt(instance);
+    } catch {
+      currentToken = null;
+    }
+    if (
+      instance.deploymentId !== bootstrap.deploymentId ||
+      instance.credentialType !== "deployment" ||
+      currentToken !== bootstrap.token ||
+      instance.status !== "ativa"
+    ) {
+      clearInstanceIdentity(instance);
+      instance.deploymentId = bootstrap.deploymentId;
+      instance.credentialType = "deployment";
+      instance.status = "ativa";
+      instance.appCode = getAppCode();
+      instance.ambiente = ambiente();
+      instance.ecosystemUrl = process.env.CENTRAL_ATIVACAO_URL;
+      instance.publicUrl = process.env.PUBLIC_APP_URL;
+      instance.coreVersion = version();
+      instance.appVersion = version();
+      instance.ativadaEm = new Date();
+      instance.concluidaEm = new Date();
+      instance.credentialVersion = Number(instance.credentialVersion || 0) + 1;
+      Object.assign(instance, encrypt(bootstrap.token));
+      await instance.save();
+    }
+  }
+
   // Versões anteriores do Core marcavam a aplicação root como ativa sem criar
   // o App root e o grafo mínimo do ecossistema. Quando o domínio disponibiliza
   // o verificador, o App cadastrado passa a ser a fonte de verdade.
@@ -398,11 +451,13 @@ function decrypt(instance) {
 
 function instanceHeaders(instance) {
   if (instance.deploymentId) {
+    const tenantAware =
+      (ctx.config.tenancyModel || ctx.config.ecosystem?.tenancyModel) !== "none";
     return {
       "x-oon-deployment-id": instance.deploymentId,
       "x-oon-deployment-token": decrypt(instance),
       "x-app-code": getAppCode(),
-      ...(instance.tenantId ? { "x-oon-tenant-id": instance.tenantId } : {}),
+      ...(tenantAware && instance.tenantId ? { "x-oon-tenant-id": instance.tenantId } : {}),
     };
   }
   return {
@@ -426,11 +481,23 @@ async function operationalRequestHeaders(options = {}, dependencies = {}) {
       code: "OPERATIONAL_CREDENTIAL_REQUIRED",
     });
   }
-  return {
+  const tenancyModel = ctx.config.tenancyModel || ctx.config.ecosystem?.tenancyModel;
+  if (tenancyModel === "none" && options.tenantId) {
+    throw new GenericError("Apps globais devem usar targetTenantId, não tenantId.", {
+      statusCode: 400,
+      code: "TENANT_CONTEXT_NOT_ALLOWED",
+    });
+  }
+  const headers = {
     ...buildHeaders(instance),
     ...(options.tenantId ? { "x-oon-tenant-id": String(options.tenantId) } : {}),
+    ...(options.targetTenantId
+      ? { "x-oon-target-tenant-id": String(options.targetTenantId) }
+      : {}),
     ...(options.correlationId ? { "x-correlation-id": String(options.correlationId) } : {}),
   };
+  if (tenancyModel === "none") delete headers["x-oon-tenant-id"];
+  return headers;
 }
 
 function validateUrl(value) {
@@ -516,6 +583,7 @@ module.exports = {
   globalFields,
   rootFields,
   role,
+  deploymentBootstrap,
   ambiente,
   publicUrl,
   version,