@riocrypto/common-server 1.0.2744 → 1.0.2745

package/build/clients/slack-client.d.ts

@@ -1,7 +1,8 @@
 declare class SlackClient {
-    private axiosClient;
-    constructor();
-    sendMessageWithWebhook(message: string, webhookUrl: string): Promise<void>;
+    private webClient;
+    private initPromise;
+    private init;
+    sendMessage(message: string, channelId: string): Promise<void>;
 }
 export declare const slackClient: SlackClient;
 export {};

package/build/clients/slack-client.js

@@ -13,18 +13,47 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.slackClient = void 0;
+const web_api_1 = require("@slack/web-api");
 const logger_1 = __importDefault(require("../services/logger"));
-const axios_with_logging_1 = require("./axios-with-logging");
+const secret_manager_client_1 = require("./secret-manager-client");
 class SlackClient {
     constructor() {
-        this.axiosClient = (0, axios_with_logging_1.buildAxiosWithLogging)();
+        this.webClient = null;
+        this.initPromise = null;
     }
-    sendMessageWithWebhook(message, webhookUrl) {
+    init() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this.webClient)
+                return;
+            if (this.initPromise) {
+                yield this.initPromise;
+                return;
+            }
+            this.initPromise = (() => __awaiter(this, void 0, void 0, function* () {
+                var _a;
+                try {
+                    const token = yield secret_manager_client_1.secretManagerClient.getSecretValue("RIO_CHECKOUT_SLACK_BOT_TOKEN");
+                    if (token) {
+                        this.webClient = new web_api_1.WebClient(token);
+                    }
+                }
+                catch (error) {
+                    (_a = logger_1.default.getLogger()) === null || _a === void 0 ? void 0 : _a.error(error);
+                }
+            }))();
+            yield this.initPromise;
+        });
+    }
+    sendMessage(message, channelId) {
         var _a;
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                yield this.axiosClient.post(webhookUrl, {
+                yield this.init();
+                if (!this.webClient)
+                    return;
+                yield this.webClient.chat.postMessage({
                     text: message,
+                    channel: channelId,
                 });
             }
             catch (error) {

package/build/middlewares/authorize.js

@@ -21,6 +21,7 @@ const auth_1 = require("../models/auth");
 const apiKey_1 = require("../services/apiKey");
 const secret_manager_client_1 = require("../clients/secret-manager-client");
 const admin_auth_1 = require("../models/admin-auth");
+const logger_1 = __importDefault(require("../services/logger"));
 const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(void 0, void 0, void 0, function* () {
     var _a, _b, _c;
     // Prepare promises for parallel execution
@@ -63,6 +64,7 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
         const adminAccessToken = (_a = req.cookies) === null || _a === void 0 ? void 0 : _a.adminAccessToken;
         if (adminApiKey || adminAccessToken) {
             promises.push((() => __awaiter(void 0, void 0, void 0, function* () {
+                var _d, _e;
                 const AdminAuth = yield (0, admin_auth_1.buildAdminAuth)(mongoose);
                 if (adminApiKey) {
                     try {
@@ -74,7 +76,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                             req.adminAuth = adminAuth;
                         }
                     }
-                    catch (err) { }
+                    catch (err) {
+                        (_d = logger_1.default.getLogger()) === null || _d === void 0 ? void 0 : _d.warn("Admin API key verification failed", {
+                            ip: req.headers["cf-connecting-ip"] || req.ip,
+                        });
+                    }
                 }
                 else if (adminAccessToken) {
                     try {
@@ -88,7 +94,7 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                             // Check if token version matches (for server-side invalidation)
                             if (payload.tokenVersion !== undefined &&
                                 adminAuth.tokenVersion !== undefined) {
-                                if (payload.tokenVersion >= adminAuth.tokenVersion) {
+                                if (payload.tokenVersion === adminAuth.tokenVersion) {
                                     req.adminAuth = adminAuth;
                                 }
                             }
@@ -98,7 +104,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                             }
                         }
                     }
-                    catch (err) { }
+                    catch (err) {
+                        (_e = logger_1.default.getLogger()) === null || _e === void 0 ? void 0 : _e.warn("Admin JWT verification failed", {
+                            ip: req.headers["cf-connecting-ip"] || req.ip,
+                        });
+                    }
                 }
             }))());
         }
@@ -112,6 +122,7 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
         const accessToken = (_b = req.cookies) === null || _b === void 0 ? void 0 : _b.accessToken;
         if (apiKey || accessToken) {
             promises.push((() => __awaiter(void 0, void 0, void 0, function* () {
+                var _f, _g, _h;
                 const Auth = yield (0, auth_1.buildAuth)(mongoose);
                 let authId = null;
                 if (apiKey) {
@@ -125,7 +136,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                             authId = auth.id;
                         }
                     }
-                    catch (err) { }
+                    catch (err) {
+                        (_f = logger_1.default.getLogger()) === null || _f === void 0 ? void 0 : _f.warn("User API key verification failed", {
+                            ip: req.headers["cf-connecting-ip"] || req.ip,
+                        });
+                    }
                 }
                 else if (accessToken) {
                     try {
@@ -139,7 +154,7 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                             // Check if token version matches (for server-side invalidation)
                             if (payload.tokenVersion !== undefined &&
                                 auth.tokenVersion !== undefined) {
-                                if (payload.tokenVersion >= auth.tokenVersion) {
+                                if (payload.tokenVersion === auth.tokenVersion) {
                                     req.auth = auth;
                                     authId = auth.id;
                                 }
@@ -151,7 +166,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                             }
                         }
                     }
-                    catch (err) { }
+                    catch (err) {
+                        (_g = logger_1.default.getLogger()) === null || _g === void 0 ? void 0 : _g.warn("User JWT verification failed", {
+                            ip: req.headers["cf-connecting-ip"] || req.ip,
+                        });
+                    }
                 }
                 // Only fetch user if we need it and we have an auth ID
                 const needsUser = authorizationTypes.includes(common_1.AuthorizationType.UserNoKYC) ||
@@ -173,7 +192,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                             }
                         }
                     }
-                    catch (err) { }
+                    catch (err) {
+                        (_h = logger_1.default.getLogger()) === null || _h === void 0 ? void 0 : _h.warn("User lookup failed", {
+                            ip: req.headers["cf-connecting-ip"] || req.ip,
+                        });
+                    }
                 }
             }))());
         }
@@ -183,6 +206,7 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
         const authMissing2FAToken = (_c = req.cookies) === null || _c === void 0 ? void 0 : _c.authMissing2FAToken;
         if (authMissing2FAToken) {
             promises.push((() => __awaiter(void 0, void 0, void 0, function* () {
+                var _j;
                 try {
                     const AUTH_MISSING_2FA_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("AUTH_MISSING_2FA_SECRET");
                     if (!AUTH_MISSING_2FA_SECRET) {
@@ -196,7 +220,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                         req.isAuthMissing2FA = true;
                     }
                 }
-                catch (err) { }
+                catch (err) {
+                    (_j = logger_1.default.getLogger()) === null || _j === void 0 ? void 0 : _j.warn("AuthMissing2FA JWT verification failed", {
+                        ip: req.headers["cf-connecting-ip"] || req.ip,
+                    });
+                }
             }))());
         }
     }
@@ -208,6 +236,7 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
             : null;
         if (token) {
             promises.push((() => __awaiter(void 0, void 0, void 0, function* () {
+                var _k;
                 try {
                     const INDICATIVE_PAGE_TOKEN_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("INDICATIVE_PAGE_TOKEN_SECRET");
                     if (!INDICATIVE_PAGE_TOKEN_SECRET) {
@@ -221,7 +250,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                         };
                     }
                 }
-                catch (err) { }
+                catch (err) {
+                    (_k = logger_1.default.getLogger()) === null || _k === void 0 ? void 0 : _k.warn("Indicative quote auth verification failed", {
+                        ip: req.headers["cf-connecting-ip"] || req.ip,
+                    });
+                }
             }))());
         }
     }

package/build/middlewares/verify-csrf-token.js

@@ -19,8 +19,10 @@ const common_1 = require("@riocrypto/common");
 const verifyCsrfToken = (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
     // Check for the presence of accessToken or adminAccessToken cookies
     const hasAccessToken = req.cookies.accessToken || req.cookies.adminAccessToken;
-    // Skip CSRF check if the request path contains "notification"
-    if (req.path.toLowerCase().includes("notification")) {
+    const normalizedPath = req.path.toLowerCase();
+    if (normalizedPath.includes("/notifications/") ||
+        normalizedPath.endsWith("/notifications") ||
+        normalizedPath.includes("/cosigner-notification")) {
         return next();
     }
     // Only apply CSRF check if accessToken or adminAccessToken cookies are present

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.2744",
+  "version": "1.0.2745",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -28,7 +28,8 @@
     "@google-cloud/secret-manager": "^5.3.0",
     "@google-cloud/storage": "^6.9.5",
     "@hyperdx/node-opentelemetry": "^0.7.0",
-    "@riocrypto/common": "^1.0.2536",
+    "@riocrypto/common": "^1.0.2537",
+    "@slack/web-api": "^7.9.2",
     "@types/express": "^4.17.13",
     "axios": "^1.7.4",
     "crypto-js": "^4.2.0",