@openstax/ts-utils 1.35.3 → 1.35.5

package/dist/esm/services/authProvider/launchToken.d.ts

@@ -0,0 +1,11 @@
+import { AccountsGateway } from '../accountsGateway';
+import { LaunchVerifier } from '../launchParams/verifier';
+import type { Logger } from '../logger';
+import { AuthProvider } from '.';
+export declare const launchTokenAuthMiddleware: () => <M extends {
+    logger: Logger;
+    accountsGateway: AccountsGateway;
+    launchVerifier: LaunchVerifier;
+}>(middleware: M) => M & {
+    authProvider: AuthProvider;
+};

package/dist/esm/services/authProvider/launchToken.js

@@ -0,0 +1,27 @@
+import { assertDefined } from '../../assertions';
+import { once } from '../../misc/helpers';
+const stubAuthProvider = (services) => {
+    const getUserUuid = once(async () => {
+        const token = await services.launchVerifier.verify();
+        return assertDefined(token.sub, new Error('Launch token does not contain a user UUID'));
+    });
+    const getUser = once(async () => {
+        const uuid = await getUserUuid();
+        const { items } = await services.accountsGateway.searchUsers({ q: `uuid:${uuid}` });
+        return assertDefined(items[0], new Error(`User with UUID ${uuid} not found`));
+    });
+    return {
+        getAuthToken: () => {
+            throw new Error('Auth token not available when authenticated via JWT');
+        },
+        getAuthorizedFetchConfig: () => {
+            throw new Error('Authorized subrequest not available when authenticated via JWT');
+        },
+        getUser,
+        loadUserData: getUser,
+    };
+};
+export const launchTokenAuthMiddleware = () => (middleware) => ({
+    ...middleware,
+    authProvider: stubAuthProvider(middleware),
+});

package/dist/esm/services/fileServer/s3FileServer.js

@@ -62,7 +62,8 @@ export const s3FileServer = (initializer) => (configProvider) => {
         const Conditions = [
             { acl: 'private' },
             { bucket },
-            ['starts-with', '$key', prefix]
+            ['starts-with', '$key', prefix],
+            ['starts-with', '$Content-Type', ''],
         ];
         const defaultFields = {
             acl: 'private',