@plusscommunities/pluss-core-aws 2.0.8 → 2.0.9-auth.0

package/db/notifications/deleteNotificationsByEntity.js

@@ -0,0 +1,29 @@
+const indexQuery = require("../common/indexQuery");
+const deleteRef = require("../common/deleteRef");
+
+module.exports = async (entityId, type = null, site = null) => {
+  const query = {
+    IndexName: "NotificationsIdIndex",
+    KeyConditionExpression: "Id = :entityId",
+    ExpressionAttributeValues: {
+      ":entityId": entityId,
+    },
+  };
+
+  let toDelete = [];
+  const { Items } = await indexQuery("notifications", query);
+  if (type || site) {
+    toDelete = Items.filter(
+      (i) => (!type || i.Type === type) && (!site || i.Site === site)
+    );
+  } else {
+    toDelete = Items;
+  }
+
+  const promises = [];
+  toDelete.forEach((i) => {
+    promises.push(deleteRef("notifications", "RowId", i.RowId));
+  });
+
+  return Promise.all(promises);
+};

package/helper/auth/context/AuthenticationContext.js

@@ -0,0 +1,50 @@
+const Auth0Strategy = require("./auth0/Strategy");
+const CognitoStrategy = require("./cognito/Strategy");
+const BoltonClarkeStrategy = require("./boltonclarke/Strategy");
+const { getConfig } = require("../../../config");
+
+class AuthenticationContext {
+  static strategy = null;
+
+  static initialiseStrategy() {
+    switch (getConfig().authConfig.provider) {
+      case "auth0":
+        AuthenticationContext.strategy = new Auth0Strategy();
+        break;
+      case "boltonclarke":
+        AuthenticationContext.strategy = new BoltonClarkeStrategy();
+        break;
+      case "cognito":
+        AuthenticationContext.strategy = new CognitoStrategy();
+        break;
+      default:
+        throw new Error("Invalid authentication provider specified");
+    }
+  }
+
+  static getSessionUser = async (token) => {
+    if (!AuthenticationContext.strategy) {
+      AuthenticationContext.initialiseStrategy();
+    }
+    return AuthenticationContext.strategy.getSessionUser(token);
+  };
+
+  static populateUser = async (token) => {
+    if (!AuthenticationContext.strategy) {
+      AuthenticationContext.initialiseStrategy();
+    }
+    return AuthenticationContext.strategy.populateUser(token);
+  };
+
+  static updateIdentityAttributes = async (input, userId) => {
+    if (!AuthenticationContext.strategy) {
+      AuthenticationContext.initialiseStrategy();
+    }
+    return AuthenticationContext.strategy.updateIdentityAttributes(
+      input,
+      userId
+    );
+  };
+}
+
+module.exports = AuthenticationContext;

package/helper/auth/context/AuthenticationStrategy.js

@@ -0,0 +1,20 @@
+// Authentication Strategy Interface
+class AuthenticationStrategy {
+  constructor() {}
+
+  getSessionUser(token) {
+    throw new Error("Method 'getSessionUser()' must be implemented.");
+  }
+
+  // optional function to populate user data based on a token
+  populateUser(token) {
+    return;
+  }
+
+  // optional function to save attributes to identity provider
+  updateIdentityAttributes = async (input, userId) => {
+    return;
+  };
+}
+
+module.exports = AuthenticationStrategy;

package/helper/auth/context/auth0/Strategy.js

@@ -0,0 +1,12 @@
+// auth0Strategy.js
+const AuthenticationStrategy = require("../AuthenticationStrategy");
+const getSessionUser = require("./functions/getSessionUser");
+
+class Auth0Strategy extends AuthenticationStrategy {
+  constructor() {
+    super();
+    this.getSessionUser = getSessionUser;
+  }
+}
+
+module.exports = Auth0Strategy;

package/helper/auth/context/auth0/functions/decodeAccessToken.js

@@ -0,0 +1,45 @@
+const jwt = require("jsonwebtoken");
+const jwksClient = require("jwks-rsa");
+
+const { getConfig } = require("../../../../../config");
+
+// Function to retrieve the signing key from Auth0 JWKS
+const getKey = (header, callback) => {
+  // Initialize JWKS client
+  const client = jwksClient({
+    jwksUri: `https://${getConfig().auth0Config.domain}/.well-known/jwks.json`,
+  });
+
+  client.getSigningKey(header.kid, (err, key) => {
+    if (err) {
+      callback(err, null);
+    } else {
+      const signingKey = key.publicKey || key.rsaPublicKey;
+      callback(null, signingKey);
+    }
+  });
+};
+
+// Function to validate the token and extract user information
+const decodeAccessToken = async (token) => {
+  return new Promise((resolve, reject) => {
+    jwt.verify(
+      token,
+      getKey,
+      {
+        audience: getConfig().auth0Config.audience,
+        issuer: `https://${getConfig().auth0Config.domain}/`,
+        algorithms: ["RS256"],
+      },
+      (err, decoded) => {
+        if (err) {
+          reject(err);
+        } else {
+          resolve(decoded); // 'sub' contains the user ID
+        }
+      }
+    );
+  });
+};
+
+module.exports = decodeAccessToken;

package/helper/auth/context/auth0/functions/getSessionUser.js

@@ -0,0 +1,21 @@
+const decodeAccessToken = require("./decodeAccessToken");
+const { getConfig } = require("../../../../../config");
+
+// Function to validate the token and extract user information
+const getSessionUser = async (token) => {
+  return new Promise((resolve, reject) => {
+    decodeAccessToken(token)
+      .then((claims) => {
+        return resolve(
+          claims[getConfig().auth0Config.residentIdClaim] ||
+            claims[getConfig().auth0Config.staffIdClaim] ||
+            claims[getConfig().auth0Config.userIdClaim]
+        );
+      })
+      .catch((err) => {
+        reject(err);
+      });
+  });
+};
+
+module.exports = getSessionUser;

package/helper/auth/context/boltonclarke/Strategy.js

@@ -0,0 +1,10 @@
+// auth0Strategy.js
+const Auth0Strategy = require("../auth0/Strategy");
+
+class BoltonClarkeStrategy extends Auth0Strategy {
+  constructor() {
+    super();
+  }
+}
+
+module.exports = BoltonClarkeStrategy;

package/helper/auth/context/cognito/Strategy.js

@@ -0,0 +1,12 @@
+// cognitoStrategy.js
+const AuthenticationStrategy = require("../AuthenticationStrategy");
+const getSessionUser = require("./functions/getSessionUser");
+
+class CognitoStrategy extends AuthenticationStrategy {
+  constructor() {
+    super();
+    this.getSessionUser = getSessionUser;
+  }
+}
+
+module.exports = CognitoStrategy;

package/helper/auth/context/cognito/functions/getSessionUser.js

@@ -0,0 +1,76 @@
+const https = require("https");
+const jose = require("node-jose");
+
+const { getConfig } = require("../../../../../config");
+
+module.exports = async (token) => {
+  return new Promise((resolve, reject) => {
+    if (!token) {
+      return resolve(null);
+    }
+    var sections = token.split(".");
+    // get the kid from the headers prior to verification
+    var header = jose.util.base64url.decode(sections[0]);
+    header = JSON.parse(header);
+    var kid = header.kid;
+    // download the public keys
+    https.get(getConfig().keys_url, async (response) => {
+      if (response.statusCode == 200) {
+        response.on("data", async (body) => {
+          var keys = JSON.parse(body)["keys"];
+          // search for the kid in the downloaded public keys
+          var key_index = -1;
+          for (var i = 0; i < keys.length; i++) {
+            if (kid == keys[i].kid) {
+              key_index = i;
+              break;
+            }
+          }
+          if (key_index == -1) {
+            reject();
+            return;
+          }
+          // construct the public key
+          jose.JWK.asKey(keys[key_index])
+            .then(async (result) => {
+              // verify the signature
+              jose.JWS.createVerify(result)
+                .verify(token)
+                .then(async (result2) => {
+                  // now we can use the claims
+                  var claims = JSON.parse(result2.payload);
+                  // additionally we can verify the token expiration
+                  var current_ts = Math.floor(new Date() / 1000);
+                  if (current_ts > claims.exp) {
+                    console.log("Token is expired");
+                    reject("Token is expired");
+                    return;
+                  }
+
+                  // const isDisabled = await isUserDisabled(claims.username);
+
+                  // if (isDisabled) {
+                  //   console.log("User is disabled");
+                  //   reject("User is disabled");
+                  //   return;
+                  // }
+
+                  resolve(claims.username);
+                })
+                .catch(async (error) => {
+                  console.log("Signature verification failed", error);
+                  reject("Signature verification failed");
+                });
+            })
+            .catch(async (error) => {
+              console.log("failed JWK.asKey", error);
+              reject(error);
+            });
+        });
+      } else {
+        console.log("failed on response", response);
+        reject(response);
+      }
+    });
+  });
+};

package/helper/auth/getApiKeyFromReq.js

@@ -0,0 +1,6 @@
+const getRef = require("../../db/common/getRef");
+
+module.exports = async (event) => {
+  if (!event?.headers?.apikey) return null;
+  return await getRef("accesskeys", "Key", event.headers.apikey);
+};

package/helper/auth/getSessionUser.js

@@ -1,63 +1,90 @@
-const https = require("https");
-const jose = require("node-jose");
-const { getConfig } = require("../../config");
+// const https = require("https");
+// const jose = require("node-jose");
+// const { app_client_id, keys_url } = require("../../../config");
+// const isUserDisabled = require("./isUserDisabled");
+const { log } = require("..");
+const AuthenticationContext = require("./context/AuthenticationContext");
 
 module.exports = async (token) => {
-  return new Promise((resolve, reject) => {
-    var sections = token.split(".");
-    // get the kid from the headers prior to verification
-    var header = jose.util.base64url.decode(sections[0]);
-    header = JSON.parse(header);
-    var kid = header.kid;
-    // download the public keys
-    https.get(getConfig().keys_url, function (response) {
-      if (response.statusCode == 200) {
-        response.on("data", function (body) {
-          var keys = JSON.parse(body)["keys"];
-          // search for the kid in the downloaded public keys
-          var key_index = -1;
-          for (var i = 0; i < keys.length; i++) {
-            if (kid == keys[i].kid) {
-              key_index = i;
-              break;
-            }
-          }
-          if (key_index == -1) {
-            reject();
-            return;
-          }
-          // construct the public key
-          jose.JWK.asKey(keys[key_index])
-            .then(function (result) {
-              // verify the signature
-              jose.JWS.createVerify(result)
-                .verify(token)
-                .then(function (result2) {
-                  // now we can use the claims
-                  var claims = JSON.parse(result2.payload);
-                  // additionally we can verify the token expiration
-                  var current_ts = Math.floor(new Date() / 1000);
-                  if (current_ts > claims.exp) {
-                    console.log("Token is expired");
-                    reject("Token is expired");
-                    return;
-                  }
-                  resolve(claims.username);
-                })
-                .catch(function (error) {
-                  console.log("Signature verification failed", error);
-                  reject("Signature verification failed");
-                });
-            })
-            .catch(function (error) {
-              console.log("failed JWK.asKey", error);
-              reject(error);
-            });
-        });
-      } else {
-        console.log("failed on response", response);
-        reject(response);
-      }
-    });
-  });
+  const logId = log("getSessionUser", "Start", true);
+  const userId = await AuthenticationContext.getSessionUser(token);
+  log("getSessionUser", "Result", userId, logId);
+  return userId;
+  // return new Promise((resolve, reject) => {
+  //   if (!token) {
+  //     return resolve(null);
+  //   }
+  //   var sections = token.split(".");
+  //   // get the kid from the headers prior to verification
+  //   var header = jose.util.base64url.decode(sections[0]);
+  //   header = JSON.parse(header);
+  //   var kid = header.kid;
+  //   // download the public keys
+  //   https.get(keys_url, async (response) => {
+  //     if (response.statusCode == 200) {
+  //       response.on("data", async (body) => {
+  //         var keys = JSON.parse(body)["keys"];
+  //         // search for the kid in the downloaded public keys
+  //         var key_index = -1;
+  //         for (var i = 0; i < keys.length; i++) {
+  //           if (kid == keys[i].kid) {
+  //             key_index = i;
+  //             break;
+  //           }
+  //         }
+  //         if (key_index == -1) {
+  //           reject();
+  //           return;
+  //         }
+  //         // construct the public key
+  //         jose.JWK.asKey(keys[key_index])
+  //           .then(async (result) => {
+  //             // verify the signature
+  //             jose.JWS.createVerify(result)
+  //               .verify(token)
+  //               .then(async (result2) => {
+  //                 // now we can use the claims
+  //                 var claims = JSON.parse(result2.payload);
+  //                 // additionally we can verify the token expiration
+  //                 var current_ts = Math.floor(new Date() / 1000);
+  //                 if (current_ts > claims.exp) {
+  //                   console.log("Token is expired");
+  //                   reject("Token is expired");
+  //                   return;
+  //                 }
+
+  //                 /*  --=- Optional audience stuff we dont use.
+  //                                   // and the Audience (use claims.client_id if verifying an access token)
+  //                                   if (claims.aud != app_client_id) {
+  //                                       console.log('Token was not issued for this audience')
+  //                                       return;
+  //                                   }
+  //                                    */
+
+  //                 const isDisabled = await isUserDisabled(claims.username);
+
+  //                 if (isDisabled) {
+  //                   console.log("User is disabled");
+  //                   reject("User is disabled");
+  //                   return;
+  //                 }
+
+  //                 resolve(claims.username);
+  //               })
+  //               .catch(async (error) => {
+  //                 console.log("Signature verification failed", error);
+  //                 reject("Signature verification failed");
+  //               });
+  //           })
+  //           .catch(async (error) => {
+  //             console.log("failed JWK.asKey", error);
+  //             reject(error);
+  //           });
+  //       });
+  //     } else {
+  //       console.log("failed on response", response);
+  //       reject(response);
+  //     }
+  //   });
+  // });
 };

package/helper/auth/getSessionUserFromReqAuthKey.js

@@ -1,13 +1,13 @@
-const getRef = require("../../db/common/getRef");
 const getSessionUser = require("./getSessionUser");
+const getApiKeyFromReq = require("./getApiKeyFromReq");
 
 module.exports = async (event) => {
   if (!event.headers) {
     return null;
   }
   if (event.headers.apikey) {
-    const key = await getRef("accesskeys", "Key", event.headers.apikey);
-    return key.UserId;
+    const key = await getApiKeyFromReq(event);
+    return key?.UserId;
   }
   if (!event.headers.authkey) {
     return null;

package/helper/auth/validateApiKey.js

@@ -1,12 +1,12 @@
 const _ = require("lodash");
 const { log, generateLogId } = require("../");
-const getRef = require("../../db/common/getRef");
+const getApiKeyFromReq = require("./getApiKeyFromReq");
 
 module.exports = async (req, actionType, site) => {
   const logId = generateLogId();
   try {
     log("ApiKey", "Input", req.headers.apikey, logId);
-    const key = await getRef("accesskeys", "Key", req.headers.apikey);
+    const key = await getApiKeyFromReq(req);
     log("ApiKey", "Key", key, logId);
 
     if (key.UserId) {

package/notification/prepNotification.js

@@ -3,155 +3,125 @@ const { getConfig } = require("../config");
 
 module.exports = (noti) => {
   const thisNoti = { ...noti };
-  switch (noti.Type) {
-    case "MaintenanceJobStatusChanged":
-      thisNoti.Text = `Your request is ${noti.Data.status}`;
-      thisNoti.Subtext = noti.Data.title || noti.Data.description;
-      thisNoti.Icon = "wrench";
-      break;
-    case "MaintenanceJobAssigned":
-      thisNoti.Text = `You have been assigned a request`;
-      thisNoti.Subtext = noti.Data.title || noti.Data.description;
-      thisNoti.Icon = "wrench";
-      break;
-    case "MaintenanceJobUnassigned":
-      thisNoti.Text = `A request you were assigned has been reassigned`;
-      thisNoti.Subtext = noti.Data.title || noti.Data.description;
-      thisNoti.Icon = "wrench";
-      break;
-    case "MaintenanceJobCommented":
-      thisNoti.Text = noti.Data.comment;
-      thisNoti.Subtext = noti.Data.title || noti.Data.description;
-      thisNoti.Icon = "wrench";
-      break;
-    case "EntityCommented":
-      thisNoti.Text = noti.Data.comment;
-      thisNoti.Subtext = noti.Data.title || noti.Data.description;
-      thisNoti.Icon = "commenting";
-      break;
-    case "EventRepChange":
-      let eventChangeText = "";
-      if (noti.Data.LocationChanged && noti.Data.TimeChanged) {
-        eventChangeText = "time and location";
-      } else if (noti.Data.LocationChanged) {
-        eventChangeText = "location";
-      } else if (noti.Data.TimeChanged) {
-        eventChangeText = "time";
-      }
-      thisNoti.Text = `An event you are attending has changed ${eventChangeText}`;
-      thisNoti.Subtext = noti.Data.Title;
-      thisNoti.Icon = "calendar";
-      break;
-    case "EventRepRemoved":
-      thisNoti.Text = "An event you are attending has been cancelled";
-      thisNoti.Subtext = noti.Data.Title;
-      thisNoti.TimeText = noti.Data.Time;
-      thisNoti.Icon = "calendar-times-o";
-      break;
-    case "ApproveNewsSubmission":
-      thisNoti.Text = "A story you submitted has been approved";
-      thisNoti.Subtext = noti.Data.Title;
-      thisNoti.Icon = "newspaper-o";
-      break;
-    case "ApproveEventSubmission":
-      thisNoti.Text = "An event you submitted has been approved";
-      thisNoti.Subtext = noti.Data.Title;
-      thisNoti.Icon = "calendar-check-o";
-      break;
-    case "EventRegisterFromWaitlist":
-      thisNoti.Text =
-        "A spot has opened up on an event you were on the waitlist for";
-      thisNoti.Subtext = noti.Data.Title;
-      thisNoti.Icon = "calendar-plus-o";
-      break;
-    case "NewsletterPublished":
-      thisNoti.Text = `News: ${noti.Data.Title}`;
-      thisNoti.Subtext =
-        !_.isEmpty(noti.Data.Text) && noti.Data.Text.length > 100
-          ? `${noti.Data.Text.substring(0, 100)}...`
-          : noti.Data.Text;
-      thisNoti.Icon = "newspaper-o";
-      break;
-    case "FormLockoutFailure":
-      thisNoti.Text =
-        "Someone answered yes to a question on the kiosk and was denied access";
-      thisNoti.Icon = "exclamation-triangle";
-      break;
-    case "FormLockoutSuccess":
-      thisNoti.Text =
-        "Someone answered no to all questions on the kiosk and was granted access";
-      thisNoti.Icon = "check";
-      break;
-    case "InformationAdded":
-      thisNoti.Text = `There is new important information available: ${noti.Data.title}`;
-      thisNoti.Icon = "info";
-      break;
-    case "InformationUpdated":
-      thisNoti.Text = `Important information updated: ${noti.Data.title}`;
-      thisNoti.Icon = "info";
-      break;
-    case "PollAdded":
-      thisNoti.Text = `There is a new survey available: ${noti.Data.Title}`;
-      thisNoti.Icon = "pie-chart";
-      break;
-    case "OfferAdded":
-      thisNoti.Text = `There is a new offer available: ${noti.Data.Title}`;
-      thisNoti.Icon = "shopping-bag";
-      break;
-    case "ServiceAdded":
-      thisNoti.Text = `There is a new service available: ${noti.Data.Title}`;
-      thisNoti.Icon = "stethoscope";
-      break;
-    case "EventAdded":
-      thisNoti.Text = `There is a new event: ${noti.Data.Title}`;
-      thisNoti.Icon = "calendar-plus-o";
-      break;
-    case "FacilityAdded":
-      thisNoti.Text = `There is a new ${getConfig().strings.FACILITY}: ${
-        noti.Data.Title
-      }`;
-      thisNoti.Icon = "building";
-      break;
-    case "MapAdded":
-      thisNoti.Text = `There is a new map: ${noti.Data.title}`;
-      thisNoti.Icon = "map-marker";
-      break;
-    case "ImportantContactAdded":
-      thisNoti.Text = `There is a new contact: ${noti.Data.title}`;
-      thisNoti.Icon = "address-card-o";
-      break;
-    case "PersonalDocumentAdded":
-      thisNoti.Text = `There is a new document: ${noti.Data.Name}`;
-      thisNoti.Icon = "file-o";
-      break;
-    case "AppointmentAdded":
-      thisNoti.Text = noti.Data.message;
-      thisNoti.Icon = "calendar-plus-o";
-      break;
-    case "AppointmentUpdated":
-      thisNoti.Text = noti.Data.message;
-      thisNoti.Icon = "calendar-check-o";
-      break;
-    case "AppointmentCancelled":
-      thisNoti.Text = noti.Data.message;
-      thisNoti.Icon = "calendar-times-o";
-      break;
-    case "AppointmentReminder":
-      thisNoti.Text = noti.Data.message;
-      thisNoti.Icon = "bell-o";
-      break;
-    case "AppointmentFollowup":
-      thisNoti.Text = noti.Data.message;
-      thisNoti.Icon = "calendar-check-o";
-      break;
-    case "ScheduledAction":
-      thisNoti.Text = noti.Data.message;
-      thisNoti.Icon = "bell-o";
-      break;
-    default:
-      thisNoti.Text = "You have received a notification";
-      thisNoti.Icon = "bell-o";
-      break;
+  const type = noti.Type ?? "";
+  if (type.startsWith("MaintenanceJobStatusChanged")) {
+    thisNoti.Text = `Your request is ${noti.Data.status}`;
+    thisNoti.Subtext = noti.Data.title || noti.Data.description;
+    thisNoti.Icon = "wrench";
+  } else if (type.startsWith("MaintenanceJobAssigned")) {
+    thisNoti.Text = `You have been assigned a request`;
+    thisNoti.Subtext = noti.Data.title || noti.Data.description;
+    thisNoti.Icon = "wrench";
+  } else if (type.startsWith("MaintenanceJobUnassigned")) {
+    thisNoti.Text = `A request you were assigned has been reassigned`;
+    thisNoti.Subtext = noti.Data.title || noti.Data.description;
+    thisNoti.Icon = "wrench";
+  } else if (type.startsWith("MaintenanceJobCommented")) {
+    thisNoti.Text = noti.Data.comment;
+    thisNoti.Subtext = noti.Data.title || noti.Data.description;
+    thisNoti.Icon = "wrench";
+  } else if (type.startsWith("EntityCommented")) {
+    thisNoti.Text = noti.Data.comment;
+    thisNoti.Subtext = noti.Data.title || noti.Data.description;
+    thisNoti.Icon = "commenting";
+  } else if (type.startsWith("EventRepChange")) {
+    let eventChangeText = "";
+    if (noti.Data.LocationChanged && noti.Data.TimeChanged) {
+      eventChangeText = "time and location";
+    } else if (noti.Data.LocationChanged) {
+      eventChangeText = "location";
+    } else if (noti.Data.TimeChanged) {
+      eventChangeText = "time";
+    }
+    thisNoti.Text = `An event you are attending has changed ${eventChangeText}`;
+    thisNoti.Subtext = noti.Data.Title;
+    thisNoti.Icon = "calendar";
+  } else if (type.startsWith("EventRepRemoved")) {
+    thisNoti.Text = "An event you are attending has been cancelled";
+    thisNoti.Subtext = noti.Data.Title;
+    thisNoti.TimeText = noti.Data.Time;
+    thisNoti.Icon = "calendar-times-o";
+  } else if (type.startsWith("ApproveNewsSubmission")) {
+    thisNoti.Text = "A story you submitted has been approved";
+    thisNoti.Subtext = noti.Data.Title;
+    thisNoti.Icon = "newspaper-o";
+  } else if (type.startsWith("ApproveEventSubmission")) {
+    thisNoti.Text = "An event you submitted has been approved";
+    thisNoti.Subtext = noti.Data.Title;
+    thisNoti.Icon = "calendar-check-o";
+  } else if (type.startsWith("EventRegisterFromWaitlist")) {
+    thisNoti.Text =
+      "A spot has opened up on an event you were on the waitlist for";
+    thisNoti.Subtext = noti.Data.Title;
+    thisNoti.Icon = "calendar-plus-o";
+  } else if (type.startsWith("NewsletterPublished")) {
+    thisNoti.Text = `News: ${noti.Data.Title}`;
+    thisNoti.Subtext =
+      !_.isEmpty(noti.Data.Text) && noti.Data.Text.length > 100
+        ? `${noti.Data.Text.substring(0, 100)}...`
+        : noti.Data.Text;
+    thisNoti.Icon = "newspaper-o";
+  } else if (type.startsWith("FormLockoutFailure")) {
+    thisNoti.Text =
+      "Someone answered yes to a question on the kiosk and was denied access";
+    thisNoti.Icon = "exclamation-triangle";
+  } else if (type.startsWith("FormLockoutSuccess")) {
+    thisNoti.Text =
+      "Someone answered no to all questions on the kiosk and was granted access";
+    thisNoti.Icon = "check";
+  } else if (type.startsWith("InformationAdded")) {
+    thisNoti.Text = `There is new important information available: ${noti.Data.title}`;
+    thisNoti.Icon = "info";
+  } else if (type.startsWith("InformationUpdated")) {
+    thisNoti.Text = `Important information updated: ${noti.Data.title}`;
+    thisNoti.Icon = "info";
+  } else if (type.startsWith("PollAdded")) {
+    thisNoti.Text = `There is a new survey available: ${noti.Data.Title}`;
+    thisNoti.Icon = "pie-chart";
+  } else if (type.startsWith("OfferAdded")) {
+    thisNoti.Text = `There is a new offer available: ${noti.Data.Title}`;
+    thisNoti.Icon = "shopping-bag";
+  } else if (type.startsWith("ServiceAdded")) {
+    thisNoti.Text = `There is a new service available: ${noti.Data.Title}`;
+    thisNoti.Icon = "stethoscope";
+  } else if (type.startsWith("EventAdded")) {
+    thisNoti.Text = `There is a new event: ${noti.Data.Title}`;
+    thisNoti.Icon = "calendar-plus-o";
+  } else if (type.startsWith("FacilityAdded")) {
+    thisNoti.Text = `There is a new ${getConfig().strings.FACILITY}: ${
+      noti.Data.Title
+    }`;
+    thisNoti.Icon = "building";
+  } else if (type.startsWith("MapAdded")) {
+    thisNoti.Text = `There is a new map: ${noti.Data.title}`;
+    thisNoti.Icon = "map-marker";
+  } else if (type.startsWith("ImportantContactAdded")) {
+    thisNoti.Text = `There is a new contact: ${noti.Data.title}`;
+    thisNoti.Icon = "address-card-o";
+  } else if (type.startsWith("PersonalDocumentAdded")) {
+    thisNoti.Text = `There is a new document: ${noti.Data.Name}`;
+    thisNoti.Icon = "file-o";
+  } else if (type.startsWith("AppointmentAdded")) {
+    thisNoti.Text = noti.Data.message;
+    thisNoti.Icon = "calendar-plus-o";
+  } else if (type.startsWith("AppointmentUpdated")) {
+    thisNoti.Text = noti.Data.message;
+    thisNoti.Icon = "calendar-check-o";
+  } else if (type.startsWith("AppointmentCancelled")) {
+    thisNoti.Text = noti.Data.message;
+    thisNoti.Icon = "calendar-times-o";
+  } else if (type.startsWith("AppointmentReminder")) {
+    thisNoti.Text = noti.Data.message;
+    thisNoti.Icon = "bell-o";
+  } else if (type.startsWith("AppointmentFollowup")) {
+    thisNoti.Text = noti.Data.message;
+    thisNoti.Icon = "calendar-check-o";
+  } else if (type.startsWith("ScheduledAction")) {
+    thisNoti.Text = noti.Data.message;
+    thisNoti.Icon = "bell-o";
+  } else {
+    thisNoti.Text = "You have received a notification";
+    thisNoti.Icon = "bell-o";
   }
   return thisNoti;
 };

package/package.json

@@ -1,12 +1,15 @@
 {
   "name": "@plusscommunities/pluss-core-aws",
-  "version": "2.0.8",
+  "version": "2.0.9-auth.0",
   "description": "Core extension package for Pluss Communities platform",
   "scripts": {
     "betapatch": "npm version prepatch --preid=beta",
     "patch": "npm version patch",
     "betaupload": "npm i && npm i && npm publish --access public --tag beta",
     "betaupload:p": "npm run betapatch && npm run betaupload",
+    "authpatch": "npm version prepatch --preid=auth",
+    "authupload": "npm i && npm i && npm publish --access public --tag auth",
+    "authupload:p": "npm run authpatch && npm run authupload",
     "upload": "npm i && npm i && npm publish --access public",
     "upload:p": "npm run patch && npm run upload"
   },
@@ -20,6 +23,8 @@
     "expo-server-sdk": "^3.0.1",
     "html-entities": "^2.3.2",
     "https": "^1.0.0",
+    "jsonwebtoken": "^9.0.2",
+    "jwks-rsa": "^3.1.0",
     "lodash": "^4.17.10",
     "moment": "^2.30.1",
     "node-fetch": "^2.2.0",