@remit/backend 2.1.0 → 2.1.1

package/dist/src/handlers/people.js

@@ -1,17 +1,31 @@
+import { PeopleErrorCode } from "@remit/domain-enums";
 import { getPeopleDirectory } from "../service/people-directory.js";
 const CLIENT_IP_HEADER = "x-remit-client-ip";
-const refuse = (statusCode, code, message) => ({ statusCode, body: { code, message } });
 const REFUSALS = {
-    caller_disabled: [403, "Your account is disabled."],
+    [PeopleErrorCode.SignInDisabled]: [
+        403,
+        "Sign-in is turned off on this server.",
+    ],
+    [PeopleErrorCode.CallerDisabled]: [403, "Your account is disabled."],
+    [PeopleErrorCode.ForeignOrigin]: [
+        403,
+        "This request came from a page this server does not serve.",
+    ],
+    [PeopleErrorCode.StepUpRequired]: [403, "Confirm your password again."],
+    [PeopleErrorCode.WrongPassword]: [403, "That password is not right."],
+    [PeopleErrorCode.StepUpLocked]: [
+        429,
+        "Too many wrong passwords. Try again in 15 minutes.",
+    ],
+    [PeopleErrorCode.CannotDisableSelf]: [
+        409,
+        "You cannot disable your own account.",
+    ],
     not_found: [404, "Not found"],
-    step_up_required: [403, "Confirm your password again."],
-    wrong_password: [403, "That password is not right."],
-    step_up_locked: [429, "Too many wrong passwords. Try again in 15 minutes."],
-    cannot_disable_self: [409, "You cannot disable your own account."],
 };
-const refusalOf = (refusal) => {
-    const [statusCode, message] = REFUSALS[refusal];
-    return refuse(statusCode, refusal, message);
+const refusalOf = (code) => {
+    const [statusCode, message] = REFUSALS[code];
+    return { statusCode, body: { code, message } };
 };
 const headerOf = (context, name) => {
     const headers = context.request.headers;
@@ -39,18 +53,18 @@ const guard = (context, ctx, targetId, unsafe) => {
         callerId: ctx.identity.sub,
         clientIp: headerOf(context, CLIENT_IP_HEADER) ?? "unknown",
     };
-    const refuseAudited = (outcome, code, message) => {
+    const refuseAudited = (outcome, code) => {
         directory.recordRefusal({ ...request, targetId, outcome });
-        return refuse(403, code, message);
+        return refusalOf(code);
     };
     if (auth.signIn === "Disabled") {
-        return refuseAudited("RefusedSignInOff", "sign_in_disabled", "Sign-in is turned off on this server.");
+        return refuseAudited("RefusedSignInOff", PeopleErrorCode.SignInDisabled);
     }
     const origin = headerOf(context, "origin");
     if (unsafe &&
         origin !== undefined &&
         !ctx.config.corsAllowedOrigins.includes(origin)) {
-        return refuseAudited("RefusedForeignOrigin", "foreign_origin", "This request came from a page this server does not serve.");
+        return refuseAudited("RefusedForeignOrigin", PeopleErrorCode.ForeignOrigin);
     }
     return request;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@remit/backend",
-	"version": "2.1.0",
+	"version": "2.1.1",
 	"description": "Remit Mail Inspector API backend",
 	"license": "MIT",
 	"author": "",