@opexa/portal-components 0.0.280 → 0.0.281

package/dist/handlers.js

@@ -0,0 +1,297 @@
+import { addDays, addMinutes, subMinutes } from 'date-fns';
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { ACCESS_TOKEN_COOKIE_NAME, DOMAIN_COOKIE_NAME, DOMAIN_HEADER_KEY, RECAPTCHA_HEADER_KEY, REFRESH_TOKEN_COOKIE_NAME, } from './constants/index.js';
+import { authenticate, createSession, destroySession, refreshSession, } from './services/auth.js';
+const CreateSessionDefinition = z.union([
+    z.object({
+        type: z.literal('NAME_AND_PASSWORD'),
+        name: z.string(),
+        password: z.string(),
+    }),
+    z.object({
+        type: z.literal('MOBILE_NUMBER'),
+        mobileNumber: z.string(),
+        verificationCode: z.string(),
+    }),
+    z.object({
+        type: z.literal('MAYA'),
+        session: z.string(),
+    }),
+    z.object({
+        type: z.union([
+            z.literal('SOCIALS'),
+            z.literal('CABINET'),
+            z.literal('SINGLE_USE_TOKEN'),
+        ]),
+        token: z.string(),
+    }),
+]);
+const AuthenticateDefinition = z.object({
+    type: z.literal('SECURITY_QUESTION'),
+    token: z.string(),
+    secretAnswer: z.string(),
+});
+export const GET = async (request, { params }) => {
+    const { auth } = await params;
+    const path = auth[0];
+    /*
+     *
+     * GET -> /api/health
+     * GET -> /api/healthcheck
+     * GET -> /api/health-check
+     *
+     */
+    if (/^health(-?check)?$/i.test(path)) {
+        return NextResponse.json({
+            ok: true,
+        }, {
+            headers: {
+                'Access-Control-Allow-Origin': '*',
+                'Cache-Control': 'no-cache, no-store, must-revalidate',
+                Pragma: 'no-cache',
+                Expires: '0',
+            },
+        });
+    }
+    /*
+     *
+     * GET -> /api/sessions
+     *
+     */
+    if (path === 'sessions') {
+        const accessToken = request.cookies.get(ACCESS_TOKEN_COOKIE_NAME)?.value;
+        const refreshToken = request.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value;
+        const domain = request.cookies.get(DOMAIN_COOKIE_NAME)?.value;
+        if (!refreshToken) {
+            const response = NextResponse.json({
+                ok: true,
+                data: {
+                    domain,
+                    status: 'unauthenticated',
+                },
+            });
+            response.cookies.delete(ACCESS_TOKEN_COOKIE_NAME);
+            response.cookies.delete(REFRESH_TOKEN_COOKIE_NAME);
+            return response;
+        }
+        if (!accessToken) {
+            try {
+                const data = await refreshSession({
+                    headers: {
+                        Authorization: `Bearer ${refreshToken}`,
+                    },
+                });
+                const response = NextResponse.json({
+                    ok: true,
+                    data: {
+                        status: 'authenticated',
+                        domain,
+                        token: data.accessToken,
+                    },
+                });
+                response.cookies.set(ACCESS_TOKEN_COOKIE_NAME, data.accessToken, {
+                    expires: addMinutes(new Date(), 9),
+                    httpOnly: true,
+                    sameSite: 'strict',
+                });
+                return response;
+            }
+            catch {
+                const response = NextResponse.json({
+                    ok: true,
+                    data: {
+                        status: 'unauthenticated',
+                        domain,
+                    },
+                });
+                response.cookies.delete(REFRESH_TOKEN_COOKIE_NAME);
+                return response;
+            }
+        }
+        return NextResponse.json({
+            ok: true,
+            data: {
+                status: 'authenticated',
+                domain,
+                token: accessToken,
+            },
+        });
+    }
+    return NextResponse.json({
+        ok: false,
+        message: 'Not found',
+    }, { status: 404 });
+};
+export const DELETE = async (request, { params }) => {
+    const { auth } = await params;
+    const path = auth[0];
+    /*
+     *
+     * DELETE -> /api/sessions
+     *
+     */
+    if (path === 'sessions') {
+        const accessToken = request.cookies.get(ACCESS_TOKEN_COOKIE_NAME)?.value;
+        if (accessToken) {
+            await destroySession({
+                headers: {
+                    Authorization: `Bearer ${accessToken}`,
+                },
+            });
+        }
+        const response = NextResponse.json({
+            ok: true,
+        });
+        response.cookies.delete(ACCESS_TOKEN_COOKIE_NAME);
+        response.cookies.delete(REFRESH_TOKEN_COOKIE_NAME);
+        return response;
+    }
+    return NextResponse.json({
+        ok: false,
+        message: 'Not found',
+    }, { status: 404 });
+};
+export const POST = async (request, { params }) => {
+    const { auth } = await params;
+    const path = auth[0];
+    /*
+     *
+     * POST -> /api/sessions
+     *
+     */
+    if (path === 'sessions') {
+        const body = await request.json();
+        const parsed = CreateSessionDefinition.safeParse(body);
+        if (!parsed.success) {
+            return NextResponse.json({
+                ok: false,
+                message: parsed.error.issues[0].message,
+            }, { status: 400 });
+        }
+        const recaptcha = request.headers.get(RECAPTCHA_HEADER_KEY);
+        const domain = request.headers.get(DOMAIN_HEADER_KEY);
+        try {
+            const res = await createSession(parsed.data, {
+                headers: {
+                    ...(recaptcha && {
+                        [RECAPTCHA_HEADER_KEY]: recaptcha,
+                    }),
+                    ...(domain && {
+                        [DOMAIN_HEADER_KEY]: domain,
+                    }),
+                },
+            });
+            if (res.authenticator) {
+                return NextResponse.json({
+                    ok: true,
+                    data: res.authenticator,
+                });
+            }
+            const response = NextResponse.json({ ok: true, data: null }, { status: 201 });
+            response.cookies.set(ACCESS_TOKEN_COOKIE_NAME, res.accessToken, {
+                expires: addMinutes(new Date(), 9),
+                httpOnly: true,
+                sameSite: 'strict',
+            });
+            response.cookies.set(REFRESH_TOKEN_COOKIE_NAME, res.refreshToken, {
+                expires: subMinutes(addDays(new Date(), 30), 1),
+                httpOnly: true,
+                sameSite: 'strict',
+            });
+            return response;
+        }
+        catch (e) {
+            return NextResponse.json({
+                ok: false,
+                message: 'Unauthorized',
+                __error: e,
+            }, { status: 401 });
+        }
+    }
+    /*
+     *
+     * POST -> /api/authenticate
+     *
+     */
+    if (path === 'authenticate') {
+        const body = await request.json();
+        const parsed = AuthenticateDefinition.safeParse(body);
+        if (!parsed.success) {
+            return NextResponse.json({
+                ok: false,
+                message: parsed.error.issues[0].message,
+            }, { status: 400 });
+        }
+        const recaptcha = request.headers.get(RECAPTCHA_HEADER_KEY);
+        const domain = request.headers.get(DOMAIN_HEADER_KEY);
+        try {
+            const res = await authenticate(parsed.data, {
+                headers: {
+                    ...(recaptcha && {
+                        [RECAPTCHA_HEADER_KEY]: recaptcha,
+                    }),
+                    ...(domain && {
+                        [DOMAIN_HEADER_KEY]: domain,
+                    }),
+                },
+            });
+            const response = NextResponse.json({ ok: true }, { status: 201 });
+            response.cookies.set(ACCESS_TOKEN_COOKIE_NAME, res.accessToken, {
+                expires: addMinutes(new Date(), 9),
+                httpOnly: true,
+            });
+            response.cookies.set(REFRESH_TOKEN_COOKIE_NAME, res.refreshToken, {
+                expires: subMinutes(addDays(new Date(), 30), 1),
+                httpOnly: true,
+            });
+            return response;
+        }
+        catch (e) {
+            return NextResponse.json({
+                ok: false,
+                message: 'Unauthorized',
+                __error: e,
+            }, { status: 401 });
+        }
+    }
+    return NextResponse.json({
+        ok: false,
+        message: 'Not found',
+    }, { status: 404 });
+};
+const UpdateSessionDefinition = z.object({
+    domain: z.string().optional().nullable(),
+});
+export const PATCH = async (request, { params }) => {
+    const { auth } = await params;
+    const path = auth[0];
+    /*
+     *
+     * PATCH -> /api/sessions
+     *
+     */
+    if (path === 'sessions') {
+        const body = await request.json();
+        const parsed = UpdateSessionDefinition.safeParse(body);
+        if (!parsed.success) {
+            return NextResponse.json({
+                ok: false,
+                message: parsed.error.issues[0].message,
+            }, { status: 400 });
+        }
+        const response = NextResponse.json({ ok: true });
+        if (parsed.data.domain) {
+            response.cookies.set(DOMAIN_COOKIE_NAME, parsed.data.domain, {
+                expires: addDays(new Date(), 30),
+                httpOnly: true,
+                sameSite: 'strict',
+            });
+        }
+        return response;
+    }
+    return NextResponse.json({
+        ok: false,
+        message: 'Not found',
+    }, { status: 404 });
+};

package/dist/services/auth.js

@@ -128,11 +128,12 @@ export async function destroySession(options) {
 }
 export async function getSessionHealth(options) {
     try {
-        await httpRequest(`${AUTH_ENDPOINT}/session`, options);
-        return true;
+        const res = await fetch(`${AUTH_ENDPOINT}/session`, options);
+        return res.ok;
     }
     catch {
-        return false;
+        /* Network errors should not be logged out */
+        return true;
     }
 }
 export async function sendVerificationCode(input, options) {

package/dist/services/cmsPortal.js

@@ -7,7 +7,7 @@ export const getSite = cache(async (options) => {
             cache: 'force-cache',
             ...options,
             next: {
-                revalidate: 60 * 5,
+                revalidate: 60 * 5 /* 5mins */,
                 tags: ['site', SITE_ID],
                 ...options?.next,
             },
@@ -144,7 +144,7 @@ export const getGames__next = cache(async (input, options) => {
             cache: 'force-cache',
             ...options,
             next: {
-                revalidate: 60 * 5,
+                revalidate: 60 * 60 * 4 /* 4hr */,
                 tags: ['games', qs],
                 ...options?.next,
             },

package/dist/services/queries.d.ts

@@ -20,7 +20,7 @@ export declare const CREATE_MAYA_WITHDRAWAL = "\n  mutation CreateMayaWithdrawal
 export declare const CREATE_MAYA_APP_WITHDRAWAL = "\n  mutation CreateMayaAppWithdrawal($input: CreateMayaAppWithdrawalInput!) {\n    createMayaAppWithdrawal(input: $input) {\n      ... on AccountNotVerifiedError {\n        name: __typename\n        message\n      }\n      ... on InvalidTransactionPasswordError {\n        name: __typename\n        message\n      }\n      ... on InvalidWithdrawalAmountError {\n        name: __typename\n        message\n      }\n      ... on NotEnoughBalanceError {\n        name: __typename\n        message\n      }\n      ... on WithdrawalDailyLimitExceededError {\n        name: __typename\n        message\n      }\n      ... on WalletDoesNotExistError {\n        name: __typename\n        message\n      }\n      ... on TransactionPasswordNotSetError {\n        name: __typename\n        message\n      }\n    }\n  }\n";
 export declare const CREATE_BANK_WITHDRAWAL = "\n  mutation CreateBankWithdrawal($input: CreateBankWithdrawalInput!) {\n    createBankWithdrawal(input: $input) {\n      ... on MobileNumberNotVerifiedError {\n        name: __typename\n        message\n      }\n    }\n  }\n";
 export declare const CREATE_AIO_INSTAPAY_WITHDRAWAL = "\n  mutation CreateAIOInstapayWithdrawal(\n    $input: CreateAIOInstapayWithdrawalInput!\n  ) {\n    createAIOInstapayWithdrawal(input: $input) {\n      ... on AccountNotVerifiedError {\n        name: __typename\n        message\n      }\n      ... on InvalidWithdrawalAmountError {\n        name: __typename\n        message\n      }\n      ... on WithdrawalDailyLimitExceededError {\n        name: __typename\n        message\n      }\n      ... on InvalidTransactionPasswordError {\n        name: __typename\n        message\n      }\n      ... on NotEnoughBalanceError {\n        name: __typename\n        message\n      }\n      ... on WalletDoesNotExistError {\n        name: __typename\n        message\n      }\n      ... on TransactionPasswordNotSetError {\n        name: __typename\n        message\n      }\n    }\n  }\n";
-export declare const CREATE_VENTAJA_WITHDRAWAL = "\n  mutation CreateVentajaDisbursementWithdrawal(\n    $input: CreateVentajaDisbursementWithdrawalInput!\n  ) {\n    createVentajaDisbursementWithdrawal(input: $input) {\n      ... on AccountNotVerifiedError {\n        name: __typename\n        message\n      }\n      ... on InvalidWithdrawalAmountError {\n        name: __typename\n        message\n      }\n      ... on WithdrawalDailyLimitExceededError {\n        name: __typename\n        message\n      }\n      ... on NotEnoughBalanceError {\n        name: __typename\n        message\n      }\n      ... on WalletDoesNotExistError {\n        name: __typename\n        message\n      }\n    }\n  }\n";
+export declare const CREATE_VENTAJA_WITHDRAWAL = "\n  mutation CreateVentajaDisbursementWithdrawal(\n    $input: CreateVentajaDisbursementWithdrawalInput!\n    $transactionPassword: String!\n  ) {\n    createVentajaDisbursementWithdrawal(\n      input: $input\n      transactionPassword: $transactionPassword\n    ) {\n      ... on AccountNotVerifiedError {\n        name: __typename\n        message\n      }\n      ... on InvalidWithdrawalAmountError {\n        name: __typename\n        message\n      }\n      ... on WithdrawalDailyLimitExceededError {\n        name: __typename\n        message\n      }\n      ... on NotEnoughBalanceError {\n        name: __typename\n        message\n      }\n      ... on WalletDoesNotExistError {\n        name: __typename\n        message\n      }\n    }\n  }\n";
 export declare const CREATE_PISO_PAY_WITHDRAWAL = "\n  mutation CreatePisopayWithdrawal(\n    $input: CreatePisoPayRemittanceWithdrawalInput!\n    $transactionPassword: String!\n  ) {\n    createPisoPayRemittanceWithdrawal(\n      input: $input\n      transactionPassword: $transactionPassword\n    ) {\n      ... on AccountNotVerifiedError {\n        name: __typename\n        message\n      }\n      ... on InvalidWithdrawalAmountError {\n        name: __typename\n        message\n      }\n      ... on WithdrawalDailyLimitExceededError {\n        name: __typename\n        message\n      }\n      ... on InvalidTransactionPasswordError {\n        name: __typename\n        message\n      }\n      ... on NotEnoughBalanceError {\n        name: __typename\n        message\n      }\n      ... on WalletDoesNotExistError {\n        name: __typename\n        message\n      }\n      ... on TransactionPasswordNotSetError {\n        name: __typename\n        message\n      }\n    }\n  }\n";
 export declare const CREATE_MANUAL_UPI_WITHDRAWAL = "\n  mutation CreateManualUPIWithdrawal($input: CreateManualUPIWithdrawalInput!) {\n    createManualUPIWithdrawal(input: $input) {\n      ... on AccountNotVerifiedError {\n        name: __typename\n        message\n      }\n      ... on InvalidWithdrawalAmountError {\n        name: __typename\n        message\n      }\n      ... on WithdrawalDailyLimitExceededError {\n        name: __typename\n        message\n      }\n      ... on NotEnoughBalanceError {\n        name: __typename\n        message\n      }\n      ... on WalletDoesNotExistError {\n        name: __typename\n        message\n      }\n    }\n  }\n";
 export declare const CREATE_MANUAL_BANK_WITHDRAWAL = "\n  mutation CreateManualBankWithdrawal(\n    $input: CreateManualBankWithdrawalInput!\n  ) {\n    createManualBankWithdrawal(input: $input) {\n      ... on AccountNotVerifiedError {\n        name: __typename\n        message\n      }\n      ... on InvalidWithdrawalAmountError {\n        name: __typename\n        message\n      }\n      ... on WithdrawalDailyLimitExceededError {\n        name: __typename\n        message\n      }\n      ... on NotEnoughBalanceError {\n        name: __typename\n        message\n      }\n      ... on WalletDoesNotExistError {\n        name: __typename\n        message\n      }\n    }\n  }\n";