@riocrypto/common-server 1.0.2756 → 1.0.2758

package/build/clients/cosigner-client.d.ts

@@ -1,8 +1,9 @@
 declare class CosignerClient {
     private apiKey;
     private webhookSecret;
+    private requestToken;
     private axiosClient;
-    constructor(apiKey: string, webhookSecret: string);
+    constructor(apiKey: string, webhookSecret: string, requestToken: string);
     sendRequest(title: string, description: string, minApprovers: number, notificationUrl: string, approverGroupId: string, metadata?: Object, alternativeActions?: {
         label: string;
         value: string;

package/build/clients/cosigner-client.js

@@ -17,9 +17,10 @@ const secret_manager_client_1 = require("./secret-manager-client");
 const axios_with_logging_1 = require("./axios-with-logging");
 const crypto_1 = __importDefault(require("crypto"));
 class CosignerClient {
-    constructor(apiKey, webhookSecret) {
+    constructor(apiKey, webhookSecret, requestToken) {
         this.apiKey = apiKey;
         this.webhookSecret = webhookSecret;
+        this.requestToken = requestToken;
         this.axiosClient = (0, axios_with_logging_1.buildAxiosWithLogging)();
     }
     sendRequest(title, description, minApprovers, notificationUrl, approverGroupId, metadata, alternativeActions) {
@@ -35,6 +36,7 @@ class CosignerClient {
             }, {
                 headers: {
                     "x-api-key": this.apiKey,
+                    "x-cosigner-token": this.requestToken,
                 },
             });
         });
@@ -58,6 +60,10 @@ const buildCosignerClient = () => __awaiter(void 0, void 0, void 0, function* ()
     if (!COSIGNER_WEBHOOK_SECRET) {
         throw new Error("Unable to get COSIGNER_WEBHOOK_SECRET");
     }
-    return new CosignerClient(COSIGNER_API_KEY, COSIGNER_WEBHOOK_SECRET);
+    const COSIGNER_REQUEST_TOKEN = yield secret_manager_client_1.secretManagerClient.getSecretValue("COSIGNER_REQUEST_TOKEN");
+    if (!COSIGNER_REQUEST_TOKEN) {
+        throw new Error("Unable to get COSIGNER_REQUEST_TOKEN");
+    }
+    return new CosignerClient(COSIGNER_API_KEY, COSIGNER_WEBHOOK_SECRET, COSIGNER_REQUEST_TOKEN);
 });
 exports.buildCosignerClient = buildCosignerClient;

package/build/middlewares/authorize.d.ts

@@ -12,6 +12,7 @@ declare global {
             user?: UserDoc;
             validClusterApiKey?: boolean;
             validGenisisAdminKey?: boolean;
+            validFXPricePusherApiKey?: boolean;
             isAuthMissing2FA?: boolean;
             indicativeQuoteAuth?: {
                 email: string;

package/build/middlewares/authorize.js

@@ -58,6 +58,22 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
             }))());
         }
     }
+    // Check for FX price pusher API key - only if needed
+    if (authorizationTypes.includes(common_1.AuthorizationType.FXPricePusher)) {
+        const fxPricePusherApiKey = req.header("x-fx-price-pusher-api-key");
+        if (fxPricePusherApiKey) {
+            promises.push((() => __awaiter(void 0, void 0, void 0, function* () {
+                const FX_PRICE_PUSHER_API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("FX_PRICE_PUSHER_API_KEY");
+                if (!FX_PRICE_PUSHER_API_KEY) {
+                    throw new common_1.SecretManagerError();
+                }
+                if (fxPricePusherApiKey.length === FX_PRICE_PUSHER_API_KEY.length &&
+                    crypto_1.default.timingSafeEqual(Buffer.from(fxPricePusherApiKey), Buffer.from(FX_PRICE_PUSHER_API_KEY))) {
+                    req.validFXPricePusherApiKey = true;
+                }
+            }))());
+        }
+    }
     // Check for admin auth - only if needed
     if (authorizationTypes.includes(common_1.AuthorizationType.AdminAuth)) {
         const adminApiKey = req.header("x-admin-api-key");
@@ -266,6 +282,8 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
             req.validClusterApiKey) ||
         (authorizationTypes.includes(common_1.AuthorizationType.GenesisAdmin) &&
             req.validGenisisAdminKey) ||
+        (authorizationTypes.includes(common_1.AuthorizationType.FXPricePusher) &&
+            req.validFXPricePusherApiKey) ||
         (authorizationTypes.includes(common_1.AuthorizationType.Auth) && req.auth) ||
         (authorizationTypes.includes(common_1.AuthorizationType.AuthMissing2FA) &&
             req.auth &&

package/package.json

@@ -1,16 +1,12 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.2756",
+  "version": "1.0.2758",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "files": [
     "build/**/*"
   ],
-  "scripts": {
-    "clean": "rm -rf ./build/*",
-    "build": "npm run clean && tsc"
-  },
   "keywords": [],
   "author": "",
   "license": "ISC",
@@ -28,7 +24,7 @@
     "@google-cloud/secret-manager": "^5.6.0",
     "@google-cloud/storage": "^7.19.0",
     "@hyperdx/node-opentelemetry": "^0.10.3",
-    "@riocrypto/common": "^1.0.2546",
+    "@riocrypto/common": "^1.0.2552",
     "@slack/web-api": "^7.15.0",
     "@types/express": "^4.17.25",
     "axios": "1.13.6",
@@ -42,10 +38,15 @@
     "jose": "^6.2.2",
     "jsonwebtoken": "^9.0.3",
     "lodash": "^4.17.23",
+    "logform": "2.7.0",
     "mongoose": "^8.23.0",
     "node-cache": "^5.1.2",
     "uuid": "^9.0.1",
     "winston": "^3.19.0",
     "xss": "^1.0.15"
+  },
+  "scripts": {
+    "clean": "rm -rf ./build/*",
+    "build": "npm run clean && tsc"
   }
-}
+}