@openforis/arena-server 2.4.2

package/dist/api/message/update.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MessageUpdate = void 0;
+const arena_core_1 = require("@openforis/arena-core");
+const serverServiceType_1 = require("../../server/arenaServer/serverServiceType");
+const endpoint_1 = require("../endpoint");
+const middleware_1 = require("../middleware");
+const utils_1 = require("../../utils");
+const { requireAdminPermission } = middleware_1.ApiAuthMiddleware;
+const getService = () => arena_core_1.ServiceRegistry.getInstance().getService(serverServiceType_1.ServerServiceType.message);
+exports.MessageUpdate = {
+    init: (express) => {
+        express.put(endpoint_1.ApiEndpoint.message.message(':uuid'), requireAdminPermission, async (req, res, next) => {
+            try {
+                const { uuid } = utils_1.Requests.getParams(req);
+                const message = req.body;
+                if (!message || typeof message !== 'object' || Array.isArray(message)) {
+                    res.status(400).json({ error: 'Invalid message payload' });
+                    return;
+                }
+                const service = getService();
+                const messageUpdated = await service.update(uuid, message);
+                res.json(messageUpdated);
+            }
+            catch (error) {
+                next(error);
+            }
+        });
+    },
+};
+//# sourceMappingURL=update.js.map

package/dist/api/message/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/api/message/update.ts"],"names":[],"mappings":";;;AAEA,sDAAuD;AAGvD,kFAA8E;AAG9E,0CAAyC;AACzC,8CAAiD;AACjD,uCAAsC;AAEtC,MAAM,EAAE,sBAAsB,EAAE,GAAG,8BAAiB,CAAA;AAEpD,MAAM,UAAU,GAAG,GAAmB,EAAE,CAAC,4BAAe,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,qCAAiB,CAAC,OAAO,CAAC,CAAA;AAE/F,QAAA,aAAa,GAAuB;IAC/C,IAAI,EAAE,CAAC,OAAgB,EAAQ,EAAE;QAC/B,OAAO,CAAC,GAAG,CAAC,sBAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACjG,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAA;gBAExB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAA;oBAC1D,OAAM;gBACR,CAAC;gBAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;gBAE5B,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;gBAE1D,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist/api/middleware/auth.d.ts

@@ -0,0 +1,34 @@
+import { NextFunction, Request, Response } from 'express';
+export declare const ApiAuthMiddleware: {
+    requireLoggedInUser: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireAdminPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireSurveyViewPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireSurveyEditPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordCleansePermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireSurveyConfigEditPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireSurveyOwnerEditPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireSurveyRdbRefreshPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireCanExportSurveysList: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordListViewPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordCreatePermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordEditPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordsEditPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordViewPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordAnalysisPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordListExportPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordOwnerChangePermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordStepEditPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireRecordsExportPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireMapUsePermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireUserNameViewPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireUsersAllViewPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireUserCreatePermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireUserInvitePermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireUserViewPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireUserEditPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireUserRemovePermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireCanViewAccessRequestsPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireCanEditAccessRequestsPermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireUserGroupManagePermission: (req: Request, _res: Response, next: NextFunction) => Promise<void>;
+    requireDownloadToken: (req: Request, res: Response, next: NextFunction) => void;
+};

package/dist/api/middleware/auth.js

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiAuthMiddleware = void 0;
+const arena_core_1 = require("@openforis/arena-core");
+const error_1 = require("../../server/error");
+const utils_1 = require("../../utils");
+const authApiCommon_1 = require("../auth/authApiCommon");
+const sendUnauthorizedError = ({ req = null, next }) => {
+    const user = req ? utils_1.Requests.getUser(req) : null;
+    const userName = user?.name ?? 'anonymous';
+    next(new error_1.UnauthorizedError(userName));
+};
+const requireAdminPermission = async (req, _res, next) => {
+    const user = utils_1.Requests.getUser(req);
+    if (arena_core_1.Users.isSystemAdmin(user)) {
+        next();
+    }
+    else {
+        sendUnauthorizedError({ req, next });
+    }
+};
+const checkPermission = (req, next, permissionFn, ...args) => {
+    const user = utils_1.Requests.getUser(req);
+    if (permissionFn(user, ...args)) {
+        next();
+    }
+    else {
+        sendUnauthorizedError({ req, next });
+    }
+};
+const requirePermission = (permissionFn) => async (req, _res, next) => {
+    try {
+        checkPermission(req, next, permissionFn);
+    }
+    catch (error) {
+        next(error);
+    }
+};
+const requireSurveyPermission = (permissionFn) => async (req, _res, next) => {
+    try {
+        const { surveyId } = utils_1.Requests.getParams(req);
+        const service = arena_core_1.ServiceRegistry.getInstance().getService(arena_core_1.ServiceType.survey);
+        const survey = await service.get({ surveyId });
+        checkPermission(req, next, permissionFn, survey);
+    }
+    catch (error) {
+        next(error);
+    }
+};
+const requireRecordPermission = (permissionFn) => async (req, _res, next) => {
+    try {
+        const { surveyId, recordUuid } = utils_1.Requests.getParams(req);
+        const service = arena_core_1.ServiceRegistry.getInstance().getService(arena_core_1.ServiceType.record);
+        const record = await service.get({ surveyId, recordUuid });
+        checkPermission(req, next, permissionFn, record);
+    }
+    catch (error) {
+        next(error);
+    }
+};
+const requireRecordsPermission = (permissionFn) => async (req, _res, next) => {
+    try {
+        const { surveyId } = utils_1.Requests.getParams(req);
+        const recordUuids = utils_1.Requests.getArrayParam('recordUuids')(req);
+        const user = utils_1.Requests.getUser(req);
+        const service = arena_core_1.ServiceRegistry.getInstance().getService(arena_core_1.ServiceType.record);
+        const records = await service.getManyByUuids({ surveyId, uuids: recordUuids });
+        const hasPermission = records.every((record) => permissionFn(user, record));
+        if (hasPermission) {
+            next();
+        }
+        else {
+            sendUnauthorizedError({ req, next });
+        }
+    }
+    catch (error) {
+        next(error);
+    }
+};
+const requireUserPermission = (permissionFn) => async (req, _res, next) => {
+    try {
+        const { surveyId, userUuid } = utils_1.Requests.getParams(req);
+        const serviceRegistry = arena_core_1.ServiceRegistry.getInstance();
+        const surveyService = serviceRegistry.getService(arena_core_1.ServiceType.survey);
+        const userService = serviceRegistry.getService(arena_core_1.ServiceType.user);
+        const survey = surveyId ? await surveyService.get({ surveyId }) : undefined;
+        const userToEdit = await userService.get({ userUuid });
+        checkPermission(req, next, permissionFn, survey, userToEdit);
+    }
+    catch (error) {
+        next(error);
+    }
+};
+const canManageUserGroups = (user, surveyInfo) => {
+    if (!user)
+        return false;
+    if (arena_core_1.Users.isSystemAdmin(user))
+        return true;
+    if (!surveyInfo)
+        return false;
+    const authGroup = arena_core_1.Users.getAuthGroupBySurveyUuid(surveyInfo.uuid)(user);
+    return authGroup?.name === arena_core_1.AuthGroupName.surveyAdmin;
+};
+const requireLoggedInUser = async (req, _res, next) => {
+    try {
+        const user = utils_1.Requests.getUser(req);
+        return user ? next() : sendUnauthorizedError({ req, next });
+    }
+    catch (error) {
+        next(error);
+    }
+};
+const requireDownloadToken = (req, res, next) => {
+    const params = utils_1.Requests.getParams(req);
+    const token = params[authApiCommon_1.jwtDownloadTokenParamName];
+    if (!token) {
+        res.status(401).json({ error: 'Download token is missing' });
+        return;
+    }
+    try {
+        const serviceRegistry = arena_core_1.ServiceRegistry.getInstance();
+        const userAuthTokenService = serviceRegistry.getService(arena_core_1.ServiceType.userAuthToken);
+        const payload = userAuthTokenService.verifyAuthToken(token);
+        const { fileName } = payload;
+        if (!fileName) {
+            res.status(403).json({ error: 'Invalid token: missing fileName in payload' });
+            return;
+        }
+        req.downloadFileName = fileName;
+        next();
+    }
+    catch {
+        res.status(403).json({ error: 'Download link expired or invalid' });
+    }
+};
+exports.ApiAuthMiddleware = {
+    requireLoggedInUser,
+    requireAdminPermission,
+    requireSurveyViewPermission: requireSurveyPermission(arena_core_1.Authorizer.canViewSurvey),
+    requireSurveyEditPermission: requireSurveyPermission(arena_core_1.Authorizer.canEditSurvey),
+    requireRecordCleansePermission: requireSurveyPermission(arena_core_1.Authorizer.canCleanseRecords),
+    requireSurveyConfigEditPermission: requireSurveyPermission(arena_core_1.Authorizer.canEditSurveyConfig),
+    requireSurveyOwnerEditPermission: requireSurveyPermission(arena_core_1.Authorizer.canEditSurveyOwner),
+    requireSurveyRdbRefreshPermission: requirePermission(arena_core_1.Authorizer.canRefreshAllSurveyRdbs),
+    requireCanExportSurveysList: requirePermission(arena_core_1.Authorizer.canExportSurveysList),
+    requireRecordListViewPermission: requireSurveyPermission(arena_core_1.Authorizer.canViewSurvey),
+    requireRecordCreatePermission: requireSurveyPermission(arena_core_1.Authorizer.canCreateRecord),
+    requireRecordEditPermission: requireRecordPermission(arena_core_1.Authorizer.canEditRecord),
+    requireRecordsEditPermission: requireRecordsPermission(arena_core_1.Authorizer.canEditRecord),
+    requireRecordViewPermission: requireSurveyPermission(arena_core_1.Authorizer.canViewRecord),
+    requireRecordAnalysisPermission: requireSurveyPermission(arena_core_1.Authorizer.canAnalyzeRecords),
+    requireRecordListExportPermission: requireSurveyPermission(arena_core_1.Authorizer.canExportRecordsList),
+    requireRecordOwnerChangePermission: requireRecordPermission(arena_core_1.Authorizer.canChangeRecordOwner),
+    requireRecordStepEditPermission: requireRecordPermission(arena_core_1.Authorizer.canChangeRecordStep),
+    requireRecordsExportPermission: requireSurveyPermission(arena_core_1.Authorizer.canExportRecords),
+    requireMapUsePermission: requireSurveyPermission(arena_core_1.Authorizer.canUseMap),
+    requireUserNameViewPermission: requireUserPermission(arena_core_1.Authorizer.canViewOtherUsersNameInSameSurvey),
+    requireUsersAllViewPermission: requirePermission(arena_core_1.Authorizer.canViewAllUsers),
+    requireUserCreatePermission: requireUserPermission(arena_core_1.Authorizer.canCreateUsers),
+    requireUserInvitePermission: requireSurveyPermission(arena_core_1.Authorizer.canInviteUsers),
+    requireUserViewPermission: requireUserPermission(arena_core_1.Authorizer.canViewUser),
+    requireUserEditPermission: requireUserPermission(arena_core_1.Authorizer.canEditUser),
+    requireUserRemovePermission: requireUserPermission(arena_core_1.Authorizer.canRemoveUser),
+    requireCanViewAccessRequestsPermission: requirePermission(arena_core_1.Authorizer.canViewUsersAccessRequests),
+    requireCanEditAccessRequestsPermission: requirePermission(arena_core_1.Authorizer.canEditUsersAccessRequests),
+    requireUserGroupManagePermission: requireSurveyPermission(canManageUserGroups),
+    requireDownloadToken,
+};
+//# sourceMappingURL=auth.js.map

package/dist/api/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/api/middleware/auth.ts"],"names":[],"mappings":";;;AACA,sDAY8B;AAC9B,8CAAsD;AACtD,uCAAsC;AACtC,yDAAiE;AAIjE,MAAM,qBAAqB,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,EAAE,IAAI,EAAgD,EAAE,EAAE;IACnG,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/C,MAAM,QAAQ,GAAG,IAAI,EAAE,IAAI,IAAI,WAAW,CAAA;IAC1C,IAAI,CAAC,IAAI,yBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAA;AACvC,CAAC,CAAA;AAGD,MAAM,sBAAsB,GAAG,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;IACxF,MAAM,IAAI,GAAG,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,kBAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,EAAE,CAAA;IACR,CAAC;SAAM,CAAC;QACN,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,GAAY,EAAE,IAAkB,EAAE,YAA0B,EAAE,GAAG,IAAgB,EAAE,EAAE;IAC5G,MAAM,IAAI,GAAG,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAElC,IAAI,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAChC,IAAI,EAAE,CAAA;IACR,CAAC;SAAM,CAAC;QACN,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,YAA0B,EAAE,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;IACnH,IAAI,CAAC;QACH,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,MAAM,uBAAuB,GAC3B,CAAC,YAA0B,EAAE,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;IACzF,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,4BAAe,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,wBAAW,CAAC,MAAM,CAAkB,CAAA;QAC7F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QAE9C,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAEH,MAAM,uBAAuB,GAC3B,CAAC,YAA0B,EAAE,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;IACzF,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,4BAAe,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,wBAAW,CAAC,MAAM,CAAkB,CAAA;QAC7F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAA;QAE1D,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAEH,MAAM,wBAAwB,GAC5B,CAAC,YAA0B,EAAE,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;IACzF,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAC5C,MAAM,WAAW,GAAa,gBAAQ,CAAC,aAAa,CAAS,aAAa,CAAC,CAAC,GAAG,CAAC,CAAA;QAChF,MAAM,IAAI,GAAG,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,4BAAe,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,wBAAW,CAAC,MAAM,CAAkB,CAAA;QAC7F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QAC9E,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QAC3E,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,EAAE,CAAA;QACR,CAAC;aAAM,CAAC;YACN,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAEH,MAAM,qBAAqB,GACzB,CAAC,YAA0B,EAAE,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;IACzF,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QACtD,MAAM,eAAe,GAAG,4BAAe,CAAC,WAAW,EAAE,CAAA;QACrD,MAAM,aAAa,GAAG,eAAe,CAAC,UAAU,CAAC,wBAAW,CAAC,MAAM,CAAkB,CAAA;QACrF,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,wBAAW,CAAC,IAAI,CAAgB,CAAA;QAC/E,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3E,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QAEtD,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAMH,MAAM,mBAAmB,GAAG,CAAC,IAAU,EAAE,UAAgB,EAAE,EAAE;IAC3D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,IAAI,kBAAK,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7B,MAAM,SAAS,GAAG,kBAAK,CAAC,wBAAwB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAA;IACvE,OAAO,SAAS,EAAE,IAAI,KAAK,0BAAa,CAAC,WAAW,CAAA;AACtD,CAAC,CAAA;AAED,MAAM,mBAAmB,GAAG,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;IACrF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;IAC/E,MAAM,MAAM,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,yCAAyB,CAAC,CAAA;IAE/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAA;QAC5D,OAAM;IACR,CAAC;IAED,IAAI,CAAC;QAEH,MAAM,eAAe,GAAG,4BAAe,CAAC,WAAW,EAAE,CAAA;QACrD,MAAM,oBAAoB,GAAyB,eAAe,CAAC,UAAU,CAAC,wBAAW,CAAC,aAAa,CAAC,CAAA;QACxG,MAAM,OAAO,GAA6B,oBAAoB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;QAErF,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;QAG5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAA;YAC7E,OAAM;QACR,CAAC;QAED,GAAG,CAAC,gBAAgB,GAAG,QAAQ,CAAA;QAC/B,IAAI,EAAE,CAAA;IACR,CAAC;IAAC,MAAM,CAAC;QAEP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAA;IACrE,CAAC;AACH,CAAC,CAAA;AAEY,QAAA,iBAAiB,GAAG;IAC/B,mBAAmB;IAGnB,sBAAsB;IAGtB,2BAA2B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,aAAa,CAAC;IAC9E,2BAA2B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,aAAa,CAAC;IAC9E,8BAA8B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,iBAAiB,CAAC;IAErF,iCAAiC,EAAE,uBAAuB,CAAC,uBAAU,CAAC,mBAAmB,CAAC;IAC1F,gCAAgC,EAAE,uBAAuB,CAAC,uBAAU,CAAC,kBAAkB,CAAC;IACxF,iCAAiC,EAAE,iBAAiB,CAAC,uBAAU,CAAC,uBAAuB,CAAC;IACxF,2BAA2B,EAAE,iBAAiB,CAAC,uBAAU,CAAC,oBAAoB,CAAC;IAG/E,+BAA+B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,aAAa,CAAC;IAClF,6BAA6B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,eAAe,CAAC;IAClF,2BAA2B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,aAAa,CAAC;IAC9E,4BAA4B,EAAE,wBAAwB,CAAC,uBAAU,CAAC,aAAa,CAAC;IAChF,2BAA2B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,aAAa,CAAC;IAC9E,+BAA+B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,iBAAiB,CAAC;IACtF,iCAAiC,EAAE,uBAAuB,CAAC,uBAAU,CAAC,oBAAoB,CAAC;IAC3F,kCAAkC,EAAE,uBAAuB,CAAC,uBAAU,CAAC,oBAAoB,CAAC;IAC5F,+BAA+B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,mBAAmB,CAAC;IACxF,8BAA8B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,gBAAgB,CAAC;IAGpF,uBAAuB,EAAE,uBAAuB,CAAC,uBAAU,CAAC,SAAS,CAAC;IAGtE,6BAA6B,EAAE,qBAAqB,CAAC,uBAAU,CAAC,iCAAiC,CAAC;IAClG,6BAA6B,EAAE,iBAAiB,CAAC,uBAAU,CAAC,eAAe,CAAC;IAC5E,2BAA2B,EAAE,qBAAqB,CAAC,uBAAU,CAAC,cAAc,CAAC;IAC7E,2BAA2B,EAAE,uBAAuB,CAAC,uBAAU,CAAC,cAAc,CAAC;IAC/E,yBAAyB,EAAE,qBAAqB,CAAC,uBAAU,CAAC,WAAW,CAAC;IACxE,yBAAyB,EAAE,qBAAqB,CAAC,uBAAU,CAAC,WAAW,CAAC;IACxE,2BAA2B,EAAE,qBAAqB,CAAC,uBAAU,CAAC,aAAa,CAAC;IAG5E,sCAAsC,EAAE,iBAAiB,CAAC,uBAAU,CAAC,0BAA0B,CAAC;IAChG,sCAAsC,EAAE,iBAAiB,CAAC,uBAAU,CAAC,0BAA0B,CAAC;IAGhG,gCAAgC,EAAE,uBAAuB,CAAC,mBAAmB,CAAC;IAE9E,oBAAoB;CACrB,CAAA"}

package/dist/api/middleware/index.d.ts

@@ -0,0 +1 @@
+export { ApiAuthMiddleware } from './auth';

package/dist/api/middleware/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiAuthMiddleware = void 0;
+var auth_1 = require("./auth");
+Object.defineProperty(exports, "ApiAuthMiddleware", { enumerable: true, get: function () { return auth_1.ApiAuthMiddleware; } });
+//# sourceMappingURL=index.js.map

package/dist/api/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/middleware/index.ts"],"names":[],"mappings":";;;AAAA,+BAA0C;AAAjC,yGAAA,iBAAiB,OAAA"}

package/dist/api/user2FAAuth/index.d.ts

@@ -0,0 +1,2 @@
+import { ExpressInitializer } from '../../server';
+export declare const User2FAAuthApi: ExpressInitializer;

package/dist/api/user2FAAuth/index.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.User2FAAuthApi = void 0;
+const arena_core_1 = require("@openforis/arena-core");
+const server_1 = require("../../server");
+const service_1 = require("../../service");
+const utils_1 = require("../../utils");
+const endpoint_1 = require("../endpoint");
+const getUser2FAService = () => arena_core_1.ServiceRegistry.getInstance().getService(server_1.ServerServiceType.user2FA);
+const checkDeviceUuid = async (req, res) => {
+    const { deviceUuid } = utils_1.Requests.getParams(req);
+    if (!deviceUuid) {
+        res.status(400).json({ message: 'Device UUID is required' });
+        return false;
+    }
+    return true;
+};
+exports.User2FAAuthApi = {
+    init: (express) => {
+        express.get(endpoint_1.ApiEndpoint.user2FAAuth.devices(), async (req, res) => {
+            try {
+                const user = utils_1.Requests.getUser(req);
+                const service = getUser2FAService();
+                const list = await service.getDevices({ userUuid: user.uuid });
+                return res.json({ list });
+            }
+            catch (error) {
+                return utils_1.Responses.sendError(res, error);
+            }
+        });
+        express.get(endpoint_1.ApiEndpoint.user2FAAuth.devicesCount(), async (req, res) => {
+            try {
+                const user = utils_1.Requests.getUser(req);
+                const service = getUser2FAService();
+                const count = await service.countDevices({ userUuid: user.uuid });
+                return res.json({ count });
+            }
+            catch (error) {
+                return utils_1.Responses.sendError(res, error);
+            }
+        });
+        express.get(endpoint_1.ApiEndpoint.user2FAAuth.device(), async (req, res) => {
+            try {
+                const user = utils_1.Requests.getUser(req);
+                const { deviceUuid } = utils_1.Requests.getParams(req);
+                if (!(await checkDeviceUuid(req, res)))
+                    return;
+                const service = getUser2FAService();
+                const device = await service.getDevice({ deviceUuid, userUuid: user.uuid });
+                return res.json(device);
+            }
+            catch (error) {
+                return utils_1.Responses.sendError(res, error);
+            }
+        });
+        express.post(endpoint_1.ApiEndpoint.user2FAAuth.addDevice(), async (req, res) => {
+            try {
+                const user = utils_1.Requests.getUser(req);
+                const { deviceName } = utils_1.Requests.getParams(req);
+                if (!deviceName) {
+                    return res.status(400).json({ message: 'Device name is required' });
+                }
+                const { uuid: userUuid, email: userEmail } = user;
+                const service = getUser2FAService();
+                const device = await service.addDevice({ userUuid, userEmail, deviceName });
+                return res.json(device);
+            }
+            catch (error) {
+                return utils_1.Responses.sendError(res, error);
+            }
+        });
+        express.post(endpoint_1.ApiEndpoint.user2FAAuth.verifyDevice(), async (req, res) => {
+            try {
+                const user = utils_1.Requests.getUser(req);
+                const { deviceUuid, token1, token2 } = utils_1.Requests.getParams(req);
+                if (!deviceUuid || !token1 || !token2) {
+                    return res.status(400).json({ message: 'Device UUID and tokens are required' });
+                }
+                const service = getUser2FAService();
+                const device = await service.verifyDevice({ deviceUuid, userUuid: user.uuid, token1, token2 });
+                return res.json(device);
+            }
+            catch (error) {
+                if (error.message === service_1.User2FAServiceErrorMessageKeys.invalidVerificationCode ||
+                    error.message === service_1.User2FAServiceErrorMessageKeys.deviceNotFound) {
+                    return res.status(400).json({ message: error.message });
+                }
+                return utils_1.Responses.sendError(res, error);
+            }
+        });
+        express.delete(endpoint_1.ApiEndpoint.user2FAAuth.removeDevice(), async (req, res) => {
+            try {
+                const user = utils_1.Requests.getUser(req);
+                const { deviceUuid } = utils_1.Requests.getParams(req);
+                if (!(await checkDeviceUuid(req, res)))
+                    return;
+                const service = getUser2FAService();
+                await service.removeDevice({ deviceUuid, userUuid: user.uuid });
+                return res.json({ success: true });
+            }
+            catch (error) {
+                return utils_1.Responses.sendError(res, error);
+            }
+        });
+        express.post(endpoint_1.ApiEndpoint.user2FAAuth.disableAll(), async (req, res) => {
+            try {
+                const user = utils_1.Requests.getUser(req);
+                const service = getUser2FAService();
+                await service.disableAll({ userUuid: user.uuid });
+                return res.json({ success: true });
+            }
+            catch (error) {
+                return utils_1.Responses.sendError(res, error);
+            }
+        });
+        express.post(endpoint_1.ApiEndpoint.user2FAAuth.regenerateBackupCodes(), async (req, res) => {
+            try {
+                const user = utils_1.Requests.getUser(req);
+                const { deviceUuid } = utils_1.Requests.getParams(req);
+                if (!(await checkDeviceUuid(req, res)))
+                    return;
+                const service = getUser2FAService();
+                const backupCodes = await service.regenerateBackupCodes({ deviceUuid, userUuid: user.uuid });
+                return res.json({ backupCodes });
+            }
+            catch (error) {
+                const { message } = error;
+                if (message === service_1.User2FAServiceErrorMessageKeys.deviceNotFound) {
+                    return res.status(400).json({ message });
+                }
+                return utils_1.Responses.sendError(res, error);
+            }
+        });
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/api/user2FAAuth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/user2FAAuth/index.ts"],"names":[],"mappings":";;;AAEA,sDAA6D;AAE7D,yCAAoE;AACpE,2CAA8E;AAC9E,uCAAiD;AACjD,0CAAyC;AAEzC,MAAM,iBAAiB,GAAG,GAAmB,EAAE,CAC7C,4BAAe,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,0BAAiB,CAAC,OAAO,CAAmB,CAAA;AAEvF,MAAM,eAAe,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAoB,EAAE;IAC9E,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAA;QAC5D,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAEY,QAAA,cAAc,GAAuB;IAChD,IAAI,EAAE,CAAC,OAAgB,EAAQ,EAAE;QAE/B,OAAO,CAAC,GAAG,CAAC,sBAAW,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YACnF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAS,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;gBACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC9D,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3B,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,iBAAS,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QAGF,OAAO,CAAC,GAAG,CAAC,sBAAW,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YACxF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAS,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;gBACnC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBACjE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5B,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,iBAAS,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QAGF,OAAO,CAAC,GAAG,CAAC,sBAAW,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YAClF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAS,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAE9C,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAAE,OAAM;gBAE9C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;gBACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBAE3E,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACzB,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,iBAAS,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QAGF,OAAO,CAAC,IAAI,CAAC,sBAAW,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YACtF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAS,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAE9C,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAA;gBACrE,CAAC;gBAED,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;gBAEjD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;gBACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;gBAE3E,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACzB,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,iBAAS,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QAGF,OAAO,CAAC,IAAI,CAAC,sBAAW,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YACzF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAS,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAE9D,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;oBACtC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAA;gBACjF,CAAC;gBAED,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;gBACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;gBAE9F,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACzB,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,IACE,KAAK,CAAC,OAAO,KAAK,wCAA8B,CAAC,uBAAuB;oBACxE,KAAK,CAAC,OAAO,KAAK,wCAA8B,CAAC,cAAc,EAC/D,CAAC;oBACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBACzD,CAAC;gBACD,OAAO,iBAAS,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QAGF,OAAO,CAAC,MAAM,CAAC,sBAAW,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YAC3F,IAAI,CAAC;gBACH,MAAM,IAAI,GAAS,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAE9C,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAAE,OAAM;gBAE9C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;gBACnC,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC/D,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YACpC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,iBAAS,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QAGF,OAAO,CAAC,IAAI,CAAC,sBAAW,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YACvF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAS,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;gBACnC,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBACjD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YACpC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,iBAAS,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;QAGF,OAAO,CAAC,IAAI,CAAC,sBAAW,CAAC,WAAW,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YAClG,IAAI,CAAC;gBACH,MAAM,IAAI,GAAS,gBAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBACxC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAE9C,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAAE,OAAM;gBAE9C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;gBACnC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC5F,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;YAClC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;gBACzB,IAAI,OAAO,KAAK,wCAA8B,CAAC,cAAc,EAAE,CAAC;oBAC9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC1C,CAAC;gBACD,OAAO,iBAAS,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist/api/userGroup/common.d.ts

@@ -0,0 +1,11 @@
+import { UserGroup } from '@openforis/arena-core';
+import { UserGroupService } from '../../service';
+export declare const getUserGroupService: () => UserGroupService;
+export declare const getSurveyUuid: (surveyId: number) => Promise<string>;
+export declare const getUserGroupBelongingToSurvey: (params: {
+    surveyId: number;
+    groupUuid: string;
+}) => Promise<{
+    surveyUuid: string;
+    userGroup: UserGroup;
+}>;

package/dist/api/userGroup/common.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUserGroupBelongingToSurvey = exports.getSurveyUuid = exports.getUserGroupService = void 0;
+const arena_core_1 = require("@openforis/arena-core");
+const server_1 = require("../../server");
+const serverServiceType_1 = require("../../server/arenaServer/serverServiceType");
+const getUserGroupService = () => arena_core_1.ServiceRegistry.getInstance().getService(serverServiceType_1.ServerServiceType.userGroup);
+exports.getUserGroupService = getUserGroupService;
+const getSurveyUuid = async (surveyId) => {
+    const surveyService = arena_core_1.ServiceRegistry.getInstance().getService(arena_core_1.ServiceType.survey);
+    const survey = await surveyService.get({ surveyId });
+    return survey.uuid;
+};
+exports.getSurveyUuid = getSurveyUuid;
+const getUserGroupBelongingToSurvey = async (params) => {
+    const { surveyId, groupUuid } = params;
+    const surveyUuid = await (0, exports.getSurveyUuid)(surveyId);
+    const service = (0, exports.getUserGroupService)();
+    const userGroup = await service.getByUuid({ uuid: groupUuid });
+    if (userGroup?.surveyUuid !== surveyUuid) {
+        throw new server_1.ServerError('appErrors.userGroup.notFound', { groupUuid }, server_1.ServerErrorCode.NOT_FOUND);
+    }
+    return { surveyUuid, userGroup };
+};
+exports.getUserGroupBelongingToSurvey = getUserGroupBelongingToSurvey;
+//# sourceMappingURL=common.js.map

package/dist/api/userGroup/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/api/userGroup/common.ts"],"names":[],"mappings":";;;AAAA,sDAA8F;AAE9F,yCAA2D;AAC3D,kFAA8E;AAGvE,MAAM,mBAAmB,GAAG,GAAqB,EAAE,CACxD,4BAAe,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,qCAAiB,CAAC,SAAS,CAAqB,CAAA;AAD9E,QAAA,mBAAmB,uBAC2D;AAEpF,MAAM,aAAa,GAAG,KAAK,EAAE,QAAgB,EAAmB,EAAE;IACvE,MAAM,aAAa,GAAG,4BAAe,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,wBAAW,CAAC,MAAM,CAAkB,CAAA;IACnG,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACpD,OAAO,MAAM,CAAC,IAAI,CAAA;AACpB,CAAC,CAAA;AAJY,QAAA,aAAa,iBAIzB;AAOM,MAAM,6BAA6B,GAAG,KAAK,EAAE,MAGnD,EAAyD,EAAE;IAC1D,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,qBAAa,EAAC,QAAQ,CAAC,CAAA;IAEhD,MAAM,OAAO,GAAG,IAAA,2BAAmB,GAAE,CAAA;IACrC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAE9D,IAAI,SAAS,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,oBAAW,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,EAAE,wBAAe,CAAC,SAAS,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;AAClC,CAAC,CAAA;AAfY,QAAA,6BAA6B,iCAezC"}

package/dist/api/userGroup/create.d.ts

@@ -0,0 +1,2 @@
+import { ExpressInitializer } from '../../server';
+export declare const UserGroupCreate: ExpressInitializer;

package/dist/api/userGroup/create.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserGroupCreate = void 0;
+const utils_1 = require("../../utils");
+const endpoint_1 = require("../endpoint");
+const middleware_1 = require("../middleware");
+const common_1 = require("./common");
+const { requireUserGroupManagePermission } = middleware_1.ApiAuthMiddleware;
+exports.UserGroupCreate = {
+    init: (express) => {
+        express.post(endpoint_1.ApiEndpoint.userGroup.userGroups(':surveyId'), requireUserGroupManagePermission, async (req, res, next) => {
+            try {
+                const { surveyId } = utils_1.Requests.getParams(req);
+                const item = req.body;
+                const surveyUuid = await (0, common_1.getSurveyUuid)(surveyId);
+                const service = (0, common_1.getUserGroupService)();
+                const userGroupInserted = await service.insert({ surveyUuid, item });
+                res.json(userGroupInserted);
+            }
+            catch (error) {
+                next(error);
+            }
+        });
+        express.post(endpoint_1.ApiEndpoint.userGroup.userGroupMembers(':surveyId', ':groupUuid'), requireUserGroupManagePermission, async (req, res, next) => {
+            try {
+                const { surveyId, groupUuid } = utils_1.Requests.getParams(req);
+                const { userUuid } = req.body;
+                await (0, common_1.getUserGroupBelongingToSurvey)({ surveyId, groupUuid });
+                const service = (0, common_1.getUserGroupService)();
+                await service.addMember({ groupUuid, userUuid });
+                res.json({ groupUuid, userUuid });
+            }
+            catch (error) {
+                next(error);
+            }
+        });
+    },
+};
+//# sourceMappingURL=create.js.map

package/dist/api/userGroup/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/api/userGroup/create.ts"],"names":[],"mappings":";;;AAGA,uCAAsC;AAEtC,0CAAyC;AACzC,8CAAiD;AACjD,qCAA4F;AAE5F,MAAM,EAAE,gCAAgC,EAAE,GAAG,8BAAiB,CAAA;AAEjD,QAAA,eAAe,GAAuB;IACjD,IAAI,EAAE,CAAC,OAAgB,EAAQ,EAAE;QAC/B,OAAO,CAAC,IAAI,CACV,sBAAW,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,EAC7C,gCAAgC,EAChC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;gBAErB,MAAM,UAAU,GAAG,MAAM,IAAA,sBAAa,EAAC,QAAQ,CAAC,CAAA;gBAEhD,MAAM,OAAO,GAAG,IAAA,4BAAmB,GAAE,CAAA;gBACrC,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;gBAEpE,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CACF,CAAA;QAED,OAAO,CAAC,IAAI,CACV,sBAAW,CAAC,SAAS,CAAC,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,EACjE,gCAAgC,EAChC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAA;gBAE7B,MAAM,IAAA,sCAA6B,EAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;gBAE5D,MAAM,OAAO,GAAG,IAAA,4BAAmB,GAAE,CAAA;gBACrC,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;gBAEhD,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/api/userGroup/delete.d.ts

@@ -0,0 +1,2 @@
+import { ExpressInitializer } from '../../server';
+export declare const UserGroupDelete: ExpressInitializer;

package/dist/api/userGroup/delete.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserGroupDelete = void 0;
+const utils_1 = require("../../utils");
+const endpoint_1 = require("../endpoint");
+const middleware_1 = require("../middleware");
+const common_1 = require("./common");
+const { requireUserGroupManagePermission } = middleware_1.ApiAuthMiddleware;
+exports.UserGroupDelete = {
+    init: (express) => {
+        express.delete(endpoint_1.ApiEndpoint.userGroup.userGroup(':surveyId', ':groupUuid'), requireUserGroupManagePermission, async (req, res, next) => {
+            try {
+                const { surveyId, groupUuid } = utils_1.Requests.getParams(req);
+                await (0, common_1.getUserGroupBelongingToSurvey)({ surveyId, groupUuid });
+                const service = (0, common_1.getUserGroupService)();
+                const userGroupDeleted = await service.deleteItem({ uuid: groupUuid });
+                res.json(userGroupDeleted);
+            }
+            catch (error) {
+                next(error);
+            }
+        });
+        express.delete(endpoint_1.ApiEndpoint.userGroup.userGroupMember(':surveyId', ':groupUuid', ':userUuid'), requireUserGroupManagePermission, async (req, res, next) => {
+            try {
+                const { surveyId, groupUuid, userUuid } = utils_1.Requests.getParams(req);
+                await (0, common_1.getUserGroupBelongingToSurvey)({ surveyId, groupUuid });
+                const service = (0, common_1.getUserGroupService)();
+                await service.removeMember({ groupUuid, userUuid });
+                res.json({ groupUuid, userUuid });
+            }
+            catch (error) {
+                next(error);
+            }
+        });
+    },
+};
+//# sourceMappingURL=delete.js.map

package/dist/api/userGroup/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/api/userGroup/delete.ts"],"names":[],"mappings":";;;AAGA,uCAAsC;AAEtC,0CAAyC;AACzC,8CAAiD;AACjD,qCAA6E;AAE7E,MAAM,EAAE,gCAAgC,EAAE,GAAG,8BAAiB,CAAA;AAEjD,QAAA,eAAe,GAAuB;IACjD,IAAI,EAAE,CAAC,OAAgB,EAAQ,EAAE;QAC/B,OAAO,CAAC,MAAM,CACZ,sBAAW,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,EAC1D,gCAAgC,EAChC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAEvD,MAAM,IAAA,sCAA6B,EAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;gBAE5D,MAAM,OAAO,GAAG,IAAA,4BAAmB,GAAE,CAAA;gBACrC,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;gBAEtE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CACF,CAAA;QAED,OAAO,CAAC,MAAM,CACZ,sBAAW,CAAC,SAAS,CAAC,eAAe,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,EAC7E,gCAAgC,EAChC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,gBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAEjE,MAAM,IAAA,sCAA6B,EAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;gBAE5D,MAAM,OAAO,GAAG,IAAA,4BAAmB,GAAE,CAAA;gBACrC,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;gBAEnD,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/api/userGroup/index.d.ts

@@ -0,0 +1,2 @@
+import { ExpressInitializer } from '../../server';
+export declare const UserGroupApi: ExpressInitializer;

package/dist/api/userGroup/index.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserGroupApi = void 0;
+const create_1 = require("./create");
+const read_1 = require("./read");
+const update_1 = require("./update");
+const delete_1 = require("./delete");
+exports.UserGroupApi = {
+    init: (express) => {
+        create_1.UserGroupCreate.init(express);
+        read_1.UserGroupRead.init(express);
+        update_1.UserGroupUpdate.init(express);
+        delete_1.UserGroupDelete.init(express);
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/api/userGroup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/userGroup/index.ts"],"names":[],"mappings":";;;AAGA,qCAA0C;AAC1C,iCAAsC;AACtC,qCAA0C;AAC1C,qCAA0C;AAE7B,QAAA,YAAY,GAAuB;IAC9C,IAAI,EAAE,CAAC,OAAgB,EAAQ,EAAE;QAC/B,wBAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC7B,oBAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3B,wBAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC7B,wBAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC/B,CAAC;CACF,CAAA"}

package/dist/api/userGroup/read.d.ts

@@ -0,0 +1,2 @@
+import { ExpressInitializer } from '../../server';
+export declare const UserGroupRead: ExpressInitializer;