@riocrypto/common-server 1.0.2869 → 1.0.2870

package/build/index.d.ts

@@ -135,6 +135,8 @@ export * from "./models/binance-rfq-trade";
 export * from "./models/static-bank-payment-reference";
 export * from "./models/indicative-quote-page";
 export * from "./models/indicative-quote-page-verification";
+export * from "./models/information-request-link";
+export * from "./models/information-request-verification";
 export * from "./models/cancelled-order-pnl-report";
 export * from "./models/banner-announcement";
 export * from "./clients/axios-with-logging";

package/build/index.js

@@ -151,6 +151,8 @@ __exportStar(require("./models/binance-rfq-trade"), exports);
 __exportStar(require("./models/static-bank-payment-reference"), exports);
 __exportStar(require("./models/indicative-quote-page"), exports);
 __exportStar(require("./models/indicative-quote-page-verification"), exports);
+__exportStar(require("./models/information-request-link"), exports);
+__exportStar(require("./models/information-request-verification"), exports);
 __exportStar(require("./models/cancelled-order-pnl-report"), exports);
 __exportStar(require("./models/banner-announcement"), exports);
 __exportStar(require("./clients/axios-with-logging"), exports);

package/build/middlewares/authorize.d.ts

@@ -18,6 +18,10 @@ declare global {
                 email: string;
                 pageId: string;
             };
+            informationRequestAuth?: {
+                email: string;
+                linkToken: string;
+            };
         }
     }
 }

package/build/middlewares/authorize.js

@@ -311,6 +311,36 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
             }))());
         }
     }
+    // Check for information request auth token - only if needed
+    if (authorizationTypes.includes(common_1.AuthorizationType.InformationRequestAuth)) {
+        const authHeader = req.header("Authorization");
+        const token = (authHeader === null || authHeader === void 0 ? void 0 : authHeader.startsWith("Bearer "))
+            ? authHeader.slice(7)
+            : null;
+        if (token) {
+            promises.push((() => __awaiter(void 0, void 0, void 0, function* () {
+                var _l;
+                try {
+                    const INFORMATION_REQUEST_TOKEN_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("INFORMATION_REQUEST_TOKEN_SECRET");
+                    if (!INFORMATION_REQUEST_TOKEN_SECRET) {
+                        return;
+                    }
+                    const payload = jsonwebtoken_1.default.verify(token, INFORMATION_REQUEST_TOKEN_SECRET, { algorithms: ["HS256"] });
+                    if (payload.email && payload.linkToken) {
+                        req.informationRequestAuth = {
+                            email: payload.email,
+                            linkToken: payload.linkToken,
+                        };
+                    }
+                }
+                catch (err) {
+                    (_l = logger_1.default.getLogger()) === null || _l === void 0 ? void 0 : _l.warn("Information request auth verification failed", {
+                        ip: req.headers["cf-connecting-ip"] || req.ip,
+                    });
+                }
+            }))());
+        }
+    }
     // Wait for all promises to complete
     yield Promise.all(promises);
     // Check authorization results and proceed if authorized
@@ -333,7 +363,9 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
             authorizationTypes.includes(common_1.AuthorizationType.UserNoKYC)) &&
             req.user) ||
         (authorizationTypes.includes(common_1.AuthorizationType.IndicativeQuoteAuth) &&
-            req.indicativeQuoteAuth)) {
+            req.indicativeQuoteAuth) ||
+        (authorizationTypes.includes(common_1.AuthorizationType.InformationRequestAuth) &&
+            req.informationRequestAuth)) {
         next();
         return;
     }

package/build/models/information-request-link.d.ts

@@ -0,0 +1,25 @@
+import { InformationRequestUpload } from "@riocrypto/common";
+import { Mongoose, Model, Document, HydratedDocument } from "mongoose";
+interface InformationRequestLinkAttrs {
+    userId: string;
+    token: string;
+    allowedEmails: string[];
+    createdBy: string;
+    createdAt: Date;
+    updatedAt: Date;
+}
+interface InformationRequestLinkModel extends Model<InformationRequestLinkDoc> {
+    build(attrs: InformationRequestLinkAttrs): HydratedDocument<InformationRequestLinkDoc>;
+}
+interface InformationRequestLinkDoc extends Document {
+    userId: string;
+    token: string;
+    allowedEmails: string[];
+    revokedAt?: Date;
+    createdBy: string;
+    createdAt: Date;
+    updatedAt: Date;
+    uploads: InformationRequestUpload[];
+}
+declare const buildInformationRequestLink: (mongoose: Mongoose) => InformationRequestLinkModel;
+export { buildInformationRequestLink, InformationRequestLinkDoc, InformationRequestLinkAttrs, };

package/build/models/information-request-link.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildInformationRequestLink = void 0;
+const buildInformationRequestLink = (mongoose) => {
+    if (mongoose.models.InformationRequestLink) {
+        return mongoose.model("InformationRequestLink");
+    }
+    const UploadSchema = new mongoose.Schema({
+        label: {
+            type: String,
+            required: true,
+        },
+        fileName: {
+            type: String,
+            required: true,
+        },
+        email: {
+            type: String,
+            required: true,
+        },
+        uploadedAt: {
+            type: Date,
+            required: true,
+        },
+        sizeBytes: {
+            type: Number,
+            required: true,
+        },
+        aipriseDocumentId: {
+            type: String,
+        },
+    }, { _id: false });
+    const InformationRequestLinkSchema = new mongoose.Schema({
+        userId: {
+            type: String,
+            required: true,
+        },
+        // Deliberately a random value rather than this document's own ObjectId,
+        // which is how indicative quote pages address themselves. An ObjectId is
+        // only partly unpredictable -- a 4-byte timestamp, a 5-byte value fixed
+        // per process, and a 3-byte counter -- so holding one link narrows the
+        // search for others minted by the same pod. The email allowlist and the
+        // one-time code are the real gate either way, but this link is permanent
+        // and tied to a single customer, so it is a standing target and the
+        // randomness is free.
+        token: {
+            type: String,
+            required: true,
+        },
+        allowedEmails: {
+            type: [String],
+            required: true,
+        },
+        revokedAt: {
+            type: Date,
+        },
+        createdBy: {
+            type: String,
+            required: true,
+        },
+        createdAt: {
+            type: Date,
+            required: true,
+        },
+        updatedAt: {
+            type: Date,
+            required: true,
+        },
+        uploads: {
+            type: [UploadSchema],
+            default: [],
+        },
+    }, {
+        toJSON: {
+            transform(doc, ret) {
+                ret.id = ret._id.valueOf();
+                delete ret._id;
+                delete ret.__v;
+            },
+        },
+    });
+    InformationRequestLinkSchema.index({ token: 1 }, { unique: true });
+    InformationRequestLinkSchema.index({ userId: 1 }, { unique: true });
+    InformationRequestLinkSchema.statics.build = (attrs) => {
+        return new InformationRequestLink(attrs);
+    };
+    const InformationRequestLink = mongoose.model("InformationRequestLink", InformationRequestLinkSchema);
+    return InformationRequestLink;
+};
+exports.buildInformationRequestLink = buildInformationRequestLink;

package/build/models/information-request-verification.d.ts

@@ -0,0 +1,22 @@
+import { Mongoose, Model, Document } from "mongoose";
+interface InformationRequestVerificationAttrs {
+    linkToken: string;
+    email: string;
+    verificationCode: string;
+    expiresAt: Date;
+    attempts: number;
+    createdAt: Date;
+}
+interface InformationRequestVerificationModel extends Model<InformationRequestVerificationDoc> {
+    build(attrs: InformationRequestVerificationAttrs): InformationRequestVerificationDoc;
+}
+interface InformationRequestVerificationDoc extends Document {
+    linkToken: string;
+    email: string;
+    verificationCode: string;
+    expiresAt: Date;
+    attempts: number;
+    createdAt: Date;
+}
+declare const buildInformationRequestVerification: (mongoose: Mongoose) => InformationRequestVerificationModel;
+export { buildInformationRequestVerification, InformationRequestVerificationDoc, InformationRequestVerificationAttrs, };

package/build/models/information-request-verification.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildInformationRequestVerification = void 0;
+const buildInformationRequestVerification = (mongoose) => {
+    if (mongoose.models.InformationRequestVerification) {
+        return mongoose.model("InformationRequestVerification");
+    }
+    const InformationRequestVerificationSchema = new mongoose.Schema({
+        linkToken: {
+            type: String,
+            required: true,
+        },
+        email: {
+            type: String,
+            required: true,
+        },
+        verificationCode: {
+            type: String,
+            required: true,
+        },
+        expiresAt: {
+            type: Date,
+            required: true,
+        },
+        attempts: {
+            type: Number,
+            default: 0,
+        },
+        createdAt: {
+            type: Date,
+            required: true,
+        },
+    }, {
+        toJSON: {
+            transform(doc, ret) {
+                ret.id = ret._id.valueOf();
+                delete ret._id;
+                delete ret.__v;
+            },
+        },
+    });
+    InformationRequestVerificationSchema.index({ linkToken: 1, email: 1 }, { unique: true });
+    InformationRequestVerificationSchema.index({ expiresAt: 1 }, { expireAfterSeconds: 0 });
+    InformationRequestVerificationSchema.statics.build = (attrs) => {
+        return new InformationRequestVerification(attrs);
+    };
+    const InformationRequestVerification = mongoose.model("InformationRequestVerification", InformationRequestVerificationSchema);
+    return InformationRequestVerification;
+};
+exports.buildInformationRequestVerification = buildInformationRequestVerification;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.2869",
+  "version": "1.0.2870",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -28,7 +28,7 @@
     "@google-cloud/secret-manager": "^5.6.0",
     "@google-cloud/storage": "^7.19.0",
     "@hyperdx/node-opentelemetry": "^0.10.3",
-    "@riocrypto/common": "1.0.2688",
+    "@riocrypto/common": "1.0.2691",
     "@slack/web-api": "^7.15.0",
     "@types/express": "^4.17.25",
     "axios": "1.16.0",