@openinc/parse-server-opendash 3.6.2 → 3.7.0

package/dist/functions/openinc-auth-login-microsoft.d.ts

@@ -0,0 +1 @@
+export declare function init(name: string): Promise<void>;

package/dist/functions/openinc-auth-login-microsoft.js

@@ -0,0 +1,65 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = init;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const jwks_rsa_1 = __importDefault(require("jwks-rsa"));
+const crypto_1 = require("crypto");
+const tenantId = process.env.MICROSOFT_TENANT_ID;
+const appId = process.env.MICROSOFT_APP_ID;
+// Setup JWKS client for Microsoft (replace TENANT_ID)
+const client = (0, jwks_rsa_1.default)({
+    jwksUri: `https://login.microsoftonline.com/${tenantId}/discovery/v2.0/keys`,
+});
+function getKey(header, callback) {
+    if (!header.kid) {
+        return callback(new Error("No kid found in token header"));
+    }
+    client.getSigningKey(header.kid, (err, key) => {
+        if (err || !key) {
+            return callback(err || new Error("Key not found"));
+        }
+        const signingKey = key.getPublicKey();
+        callback(null, signingKey);
+    });
+}
+async function init(name) {
+    Parse.Cloud.define(name, async (request) => {
+        const token = request.params.token;
+        const account = request.params.account;
+        if (!token) {
+            throw new Parse.Error(Parse.Error.INVALID_JSON, "Token missing");
+        }
+        const verifiedPayload = await new Promise((resolve, reject) => {
+            jsonwebtoken_1.default.verify(token, getKey, {
+                audience: appId,
+                issuer: `https://login.microsoftonline.com/${tenantId}/v2.0`,
+            }, (err, decoded) => {
+                if (err)
+                    return reject(err);
+                resolve(decoded);
+            });
+        });
+        let user = await new Parse.Query(Parse.User)
+            .equalTo("username", verifiedPayload.oid)
+            .first({ useMasterKey: true });
+        if (!user) {
+            user = new Parse.User();
+            user.set("username", verifiedPayload.oid);
+            user.set("email", account.username);
+            user.set("password", (0, crypto_1.randomBytes)(16).toString("hex")); // Generate a random password
+            user.set("name", verifiedPayload.name || verifiedPayload.preferred_username);
+            user = await user.signUp(null, { useMasterKey: true });
+            return user.getSessionToken();
+        }
+        const sessionToken = "r:" + (0, crypto_1.randomBytes)(16).toString("hex");
+        const session = new Parse.Object("_Session");
+        session.set("user", user);
+        session.set("sessionToken", sessionToken);
+        session.set("expiresAt", new Date(Date.now() + 24 * 60 * 60 * 1000 * 7)); // 7 day expiration
+        const savedSession = await session.save(null, { useMasterKey: true });
+        return savedSession.get("sessionToken");
+    });
+}

package/dist/index.js

@@ -540,7 +540,6 @@ async function autoloadCloudCode(path, regex = /^[a-zA-Z0-9]+(?:-[a-zA-Z0-9]+)*$
     for (const name of fns) {
         const { init } = require((0, path_1.join)(path, name));
         if (!init || typeof init !== "function") {
-            console.warn(`[@openinc/parse-server-opendash] No init() function found in ${name}.js`);
             continue;
         }
         console.log(`[@openinc/parse-server-opendash] Autoloading ${name}.js`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openinc/parse-server-opendash",
-  "version": "3.6.2",
+  "version": "3.7.0",
   "description": "Parse Server Cloud Code for open.INC Stack.",
   "packageManager": "pnpm@10.11.0",
   "keywords": [
@@ -68,6 +68,7 @@
     "dayjs": "^1.11.13",
     "fast-equals": "^5.2.2",
     "jsonwebtoken": "^9.0.2",
+    "jwks-rsa": "^3.2.0",
     "nodemailer": "^6.10.1",
     "nunjucks": "^3.2.4",
     "parse-server": "^8.2.0",