@punks/backend-entity-manager 0.0.241 → 0.0.242

package/dist/esm/index.js

@@ -3612,12 +3612,14 @@ const CurrentUser = createParamDecorator((data, context) => {
 });
 
 const AuthenticationExtensionSymbols = {
+    ApiKeysService: Symbol.for("WP.EXT:AUTHENTICATION.API_KEYS_SERVICE"),
+    UserRolesService: Symbol.for("WP.EXT:AUTHENTICATION.USER_ROLES_SERVICE"),
     UserService: Symbol.for("WP.EXT:AUTHENTICATION.USER_SERVICE"),
-    RolesService: Symbol.for("WP.EXT:AUTHENTICATION.ROLES_SERVICE"),
     PermissionsService: Symbol.for("WP.EXT:AUTHENTICATION.PERMISSIONS_SERVICE"),
-    UserRolesService: Symbol.for("WP.EXT:AUTHENTICATION.USER_ROLES_SERVICE"),
+    RolesService: Symbol.for("WP.EXT:AUTHENTICATION.ROLES_SERVICE"),
 };
 const AuthenticationGuardsSymbols = {
+    ApiKey: "guard:apiKey",
     Authenticated: "guard:authenticated",
     Public: "guard:public",
     Roles: "guard:roles",
@@ -3630,6 +3632,7 @@ const Authenticated = () => SetMetadata(AuthenticationGuardsSymbols.Authenticate
 const Permissions = (...permissions) => SetMetadata(AuthenticationGuardsSymbols.Permissions, permissions);
 const Roles = (...roles) => SetMetadata(AuthenticationGuardsSymbols.Roles, roles);
 const MemberOf = (...groups) => SetMetadata(AuthenticationGuardsSymbols.MemberOf, groups);
+const ApiKeyAccess = () => SetMetadata(AuthenticationGuardsSymbols.ApiKey, true);
 const buildRolesGuard = ({ mainRole, secondaryRoles, }, options) => Roles(mainRole.uid, ...(!options?.exact && secondaryRoles
     ? secondaryRoles.map((role) => role.uid)
     : []));
@@ -3643,6 +3646,8 @@ const WpUserService = () => applyDecorators(Injectable(), SetMetadata(Authentica
 
 const WpUserRolesService = () => applyDecorators(Injectable(), SetMetadata(AuthenticationExtensionSymbols.UserRolesService, true));
 
+const WpApiKeysService = () => applyDecorators(Injectable(), SetMetadata(AuthenticationExtensionSymbols.ApiKeysService, true));
+
 const AuthenticationEmailTemplates = {
     Registration: "registration",
     PasswordReset: "passwordReset",
@@ -3723,6 +3728,19 @@ let AuthGuard = AuthGuard_1 = class AuthGuard {
             return true;
         }
         const auth = this.getCurrentAuth(context);
+        const isApiRoute = this.getIsApiRoute(context);
+        if (isApiRoute) {
+            if (auth?.apiKey && !auth.apiKey.disabled) {
+                this.logger.debug(`Authorized:true -> api route with valid api key`, this.getContextInfo({
+                    context,
+                }));
+                return true;
+            }
+            this.logger.debug(`Authorized:false -> api route without api key`, this.getContextInfo({
+                context,
+            }));
+            return false;
+        }
         const allowedRoles = this.getAllowedRoles(context);
         if (allowedRoles) {
             const isAllowed = this.isRoleMatching(allowedRoles, auth?.roles ?? []);
@@ -3791,6 +3809,9 @@ let AuthGuard = AuthGuard_1 = class AuthGuard {
     getIsPublic(context) {
         return this.getMetadata(AuthenticationGuardsSymbols.Public, context);
     }
+    getIsApiRoute(context) {
+        return this.getMetadata(AuthenticationGuardsSymbols.ApiKey, context);
+    }
     getAllowedRoles(context) {
         return this.getMetadata(AuthenticationGuardsSymbols.Roles, context);
     }
@@ -3799,8 +3820,9 @@ let AuthGuard = AuthGuard_1 = class AuthGuard {
     }
     getCurrentAuth(context) {
         const request = context.switchToHttp()?.getRequest();
-        return request?.auth?.user
+        return request?.auth?.user || request.auth?.apiKey
             ? {
+                apiKey: request.auth.apiKey,
                 user: request.auth.user,
                 roles: request.auth.roles,
                 permissions: request.auth.permissions,
@@ -3813,12 +3835,21 @@ let AuthGuard = AuthGuard_1 = class AuthGuard {
             context.getClass(),
         ]);
     }
-    getContextInfo({ context, user, roles, permissions, }) {
+    getContextInfo({ context, apiKey, user, roles, permissions, }) {
         return {
             request: {
                 path: context.switchToHttp()?.getRequest()?.path,
                 method: context.switchToHttp()?.getRequest()?.method,
             },
+            ...(apiKey
+                ? {
+                    apiKey: {
+                        key: `${apiKey.key.substring(0, 7)}*****${apiKey.key.slice(-2)}`,
+                        name: apiKey.name,
+                        organizationId: apiKey.organization?.id,
+                    },
+                }
+                : {}),
             ...(user
                 ? {
                     user: {
@@ -21745,6 +21776,9 @@ SecretsService = __decorate([
 ], SecretsService);
 
 let AuthenticationServicesResolver = class AuthenticationServicesResolver {
+    registerApiKeysService(service) {
+        this.apiKeysService = service;
+    }
     registerUsersService(usersService) {
         this.usersService = usersService;
     }
@@ -21757,6 +21791,12 @@ let AuthenticationServicesResolver = class AuthenticationServicesResolver {
     registerUserRolesService(userRolesService) {
         this.usersRolesService = userRolesService;
     }
+    getApiKeysService() {
+        if (!this.apiKeysService) {
+            throw new Error("Api keys service is not registered");
+        }
+        return this.apiKeysService;
+    }
     getUsersService() {
         if (!this.usersService) {
             throw new Error("Users service is not registered");
@@ -22437,6 +22477,9 @@ let AuthenticationService = class AuthenticationService {
     async userTokenVerify(input) {
         return await this.userTokenVerifyHandler.execute(input);
     }
+    get apiKeysService() {
+        return this.resolver.getApiKeysService();
+    }
     get usersService() {
         return this.resolver.getUsersService();
     }
@@ -23088,6 +23131,7 @@ let AuthenticationInitializer = AuthenticationInitializer_1 = class Authenticati
         await this.registerPermissionsService();
         await this.registerUsersService();
         await this.registerUserRolesService();
+        await this.registerApiKeysService();
         this.logger.log("Authentication initialized 🔑");
     }
     async registerRolesService() {
@@ -23122,6 +23166,15 @@ let AuthenticationInitializer = AuthenticationInitializer_1 = class Authenticati
         this.registry.registerUserRolesService(service.discoveredClass.instance);
         this.logger.log(`Authentication user roles service ${service.discoveredClass.name} registered`);
     }
+    async registerApiKeysService() {
+        const service = await this.discoverApiKeysService();
+        if (!service) {
+            console.warn("No api keys service found");
+            return;
+        }
+        this.registry.registerApiKeysService(service.discoveredClass.instance);
+        this.logger.log(`Authentication api key service ${service.discoveredClass.name} registered`);
+    }
     async discoverUserService() {
         return await this.discover.providerWithMetaAtKey(AuthenticationExtensionSymbols.UserService);
     }
@@ -23134,6 +23187,9 @@ let AuthenticationInitializer = AuthenticationInitializer_1 = class Authenticati
     async discoverUserRolesService() {
         return await this.discover.providerWithMetaAtKey(AuthenticationExtensionSymbols.UserRolesService);
     }
+    async discoverApiKeysService() {
+        return await this.discover.providerWithMetaAtKey(AuthenticationExtensionSymbols.ApiKeysService);
+    }
 };
 AuthenticationInitializer = AuthenticationInitializer_1 = __decorate([
     WpAppInitializer(),
@@ -23189,6 +23245,16 @@ let AuthenticationMiddleware = class AuthenticationMiddleware {
         this.authService = authService;
     }
     async use(req, res, next) {
+        let authData = null;
+        const apiKey = this.extractApiKeyFromHeader(req);
+        if (apiKey) {
+            const entry = await this.authService.apiKeysService.find(apiKey);
+            if (entry && !entry.disabled) {
+                authData = {
+                    apiKey: entry,
+                };
+            }
+        }
         const token = this.extractTokenFromHeader(req);
         if (token) {
             const parsedToken = await this.authService.userTokenVerify({ token });
@@ -23199,15 +23265,18 @@ let AuthenticationMiddleware = class AuthenticationMiddleware {
                 const organizationalUnits = user
                     ? await this.getUserOrganizationalUnits(user)
                     : [];
-                const authData = {
+                authData = {
+                    ...(authData ?? {}),
                     user,
                     roles,
                     permissions,
                     organizationalUnits,
                 };
-                req.auth = await this.postProcessContext(authData);
             }
         }
+        if (authData) {
+            req.auth = await this.postProcessContext(authData);
+        }
         next();
     }
     async postProcessContext(authData) {
@@ -23245,6 +23314,10 @@ let AuthenticationMiddleware = class AuthenticationMiddleware {
         const [type, token] = request.headers.authorization?.split(" ") ?? [];
         return type === "Bearer" ? token : undefined;
     }
+    extractApiKeyFromHeader(request) {
+        const [type, token] = request.headers.authorization?.split(" ") ?? [];
+        return type === "ApiKey" ? token : undefined;
+    }
 };
 AuthenticationMiddleware = __decorate([
     Injectable(),
@@ -32428,5 +32501,5 @@ AwsSecretsModule = AwsSecretsModule_1 = __decorate([
     })
 ], AwsSecretsModule);
 
-export { AUTHENTICATION_EVENTS_NAMESPACE, AppExceptionsFilterBase, AppHashingService, AppInMemorySettings, AppSessionMiddleware, AppSessionService, AuthGuard, Authenticated, AuthenticationEmailTemplates, AuthenticationError, AuthenticationEvents, AuthenticationExtensionSymbols, AuthenticationModule, AuthenticationService, AwsBucketModule, AwsEmailModule, AwsS3BucketError, AwsS3BucketProvider, AwsS3MediaError, AwsS3MediaModule, AwsS3MediaProvider, AwsSecretsModule, AwsSecretsProvider, AwsSesEmailTemplate, BucketItemType, CacheService, CurrentUser, EmailService, EntityManagerConfigurationError, EntityManagerException, EntityManagerInitializer, EntityManagerModule, EntityManagerRegistry, EntityManagerService, EntityManagerSymbols, EntityManagerUnauthorizedException, EntityNotFoundException, EntityOperationType, EntityOperationUnauthorizedException, EntitySeeder, EntitySerializationFormat, EntitySerializer, EntitySnapshotService, EntityVersionOperation, EventsService, FilesManager, IEntityVersionsCursor, InMemoryBucketProvider, InMemoryEmailProvider, InMemoryMediaProvider, InvalidCredentialsError, MediaLibraryService, MemberOf, MissingEntityIdError, ModulesContainerProvider, MultiTenancyModule, MultipleEntitiesFoundException, NestEntityActions, NestEntityAuthorizationMiddleware, NestEntityManager, NestEntitySerializer, NestEntitySnapshotService, NestPipelineTemplate, NestTypeOrmEntitySeeder, NestTypeOrmQueryBuilder, NestTypeOrmRepository, OperationTokenMismatchError, PLATFORM_EVENT_NAMESPACE, Permissions, PipelineController, PipelineErrorType, PipelineInvocationError, PipelineStatus, PipelineStepErrorType, PipelinesBuilder, PipelinesRunner, PlatformEvents, Public, QueryBuilderBase, QueryBuilderOperation, ReplicationMode, Roles, SanityMediaError, SanityMediaModule, SanityMediaProvider, SecretsService, SendgridEmailModule, SendgridEmailTemplate, SortDirection, TrackingService, TypeOrmQueryBuilder, TypeOrmRepository, TypeormCacheInstance, UserCreationError, UserRegistrationError, WpAppInitializer, WpAwsSesEmailTemplate, WpBucketProvider, WpCacheInstance, WpEmailLogger, WpEmailProvider, WpEmailTemplate, WpEntity, WpEntityActions, WpEntityAdapter, WpEntityAuthMiddleware, WpEntityConnector, WpEntityConverter, WpEntityManager, WpEntityQueryBuilder, WpEntityRepository, WpEntitySeeder, WpEntitySerializer, WpEntitySnapshotService, WpEntityVersioningProvider, WpEventsTracker, WpFileProvider, WpFileReferenceRepository, WpGlobalAuthenticationMiddleware, WpMediaFolderRepository, WpMediaProvider, WpMediaReferenceRepository, WpPermissionsService, WpPipeline, WpRolesService, WpSendgridEmailTemplate, WpUserRolesService, WpUserService, buildPermissionsGuard, buildRolesGuard, createContainer, createExpressFileResponse, getLocalizedText, newUuid, renderHandlebarsTemplate, toEntitiesImportInput };
+export { AUTHENTICATION_EVENTS_NAMESPACE, ApiKeyAccess, AppExceptionsFilterBase, AppHashingService, AppInMemorySettings, AppSessionMiddleware, AppSessionService, AuthGuard, Authenticated, AuthenticationEmailTemplates, AuthenticationError, AuthenticationEvents, AuthenticationExtensionSymbols, AuthenticationModule, AuthenticationService, AwsBucketModule, AwsEmailModule, AwsS3BucketError, AwsS3BucketProvider, AwsS3MediaError, AwsS3MediaModule, AwsS3MediaProvider, AwsSecretsModule, AwsSecretsProvider, AwsSesEmailTemplate, BucketItemType, CacheService, CurrentUser, EmailService, EntityManagerConfigurationError, EntityManagerException, EntityManagerInitializer, EntityManagerModule, EntityManagerRegistry, EntityManagerService, EntityManagerSymbols, EntityManagerUnauthorizedException, EntityNotFoundException, EntityOperationType, EntityOperationUnauthorizedException, EntitySeeder, EntitySerializationFormat, EntitySerializer, EntitySnapshotService, EntityVersionOperation, EventsService, FilesManager, IEntityVersionsCursor, InMemoryBucketProvider, InMemoryEmailProvider, InMemoryMediaProvider, InvalidCredentialsError, MediaLibraryService, MemberOf, MissingEntityIdError, ModulesContainerProvider, MultiTenancyModule, MultipleEntitiesFoundException, NestEntityActions, NestEntityAuthorizationMiddleware, NestEntityManager, NestEntitySerializer, NestEntitySnapshotService, NestPipelineTemplate, NestTypeOrmEntitySeeder, NestTypeOrmQueryBuilder, NestTypeOrmRepository, OperationTokenMismatchError, PLATFORM_EVENT_NAMESPACE, Permissions, PipelineController, PipelineErrorType, PipelineInvocationError, PipelineStatus, PipelineStepErrorType, PipelinesBuilder, PipelinesRunner, PlatformEvents, Public, QueryBuilderBase, QueryBuilderOperation, ReplicationMode, Roles, SanityMediaError, SanityMediaModule, SanityMediaProvider, SecretsService, SendgridEmailModule, SendgridEmailTemplate, SortDirection, TrackingService, TypeOrmQueryBuilder, TypeOrmRepository, TypeormCacheInstance, UserCreationError, UserRegistrationError, WpApiKeysService, WpAppInitializer, WpAwsSesEmailTemplate, WpBucketProvider, WpCacheInstance, WpEmailLogger, WpEmailProvider, WpEmailTemplate, WpEntity, WpEntityActions, WpEntityAdapter, WpEntityAuthMiddleware, WpEntityConnector, WpEntityConverter, WpEntityManager, WpEntityQueryBuilder, WpEntityRepository, WpEntitySeeder, WpEntitySerializer, WpEntitySnapshotService, WpEntityVersioningProvider, WpEventsTracker, WpFileProvider, WpFileReferenceRepository, WpGlobalAuthenticationMiddleware, WpMediaFolderRepository, WpMediaProvider, WpMediaReferenceRepository, WpPermissionsService, WpPipeline, WpRolesService, WpSendgridEmailTemplate, WpUserRolesService, WpUserService, buildPermissionsGuard, buildRolesGuard, createContainer, createExpressFileResponse, getLocalizedText, newUuid, renderHandlebarsTemplate, toEntitiesImportInput };
 //# sourceMappingURL=index.js.map