@riocrypto/common 1.0.387 → 1.0.388

package/build/index.d.ts

@@ -32,6 +32,7 @@ export * from "./middlewares/get-partner";
 export * from "./middlewares/get-user";
 export * from "./middlewares/require-priveleges";
 export * from "./middlewares/validate-kyc";
+export * from "./middlewares/authorize";
 export * from "./events/base-listener";
 export * from "./events/base-publisher";
 export * from "./events/subjects";
@@ -130,6 +131,7 @@ export * from "./types/business-user-update";
 export * from "./types/user-type";
 export * from "./types/platform-fee-range";
 export * from "./types/api-key";
+export * from "./types/authorization-type";
 export * from "./classes/Asset";
 export * from "./classes/CountryAsset";
 export * from "./classes/CryptoAsset";

package/build/index.js

@@ -49,6 +49,7 @@ __exportStar(require("./middlewares/get-user"), exports);
 __exportStar(require("./middlewares/require-priveleges"), exports);
 __exportStar(require("./middlewares/validate-kyc"), exports);
 // export * from "./middlewares/validate-order";
+__exportStar(require("./middlewares/authorize"), exports);
 __exportStar(require("./events/base-listener"), exports);
 __exportStar(require("./events/base-publisher"), exports);
 __exportStar(require("./events/subjects"), exports);
@@ -147,6 +148,7 @@ __exportStar(require("./types/business-user-update"), exports);
 __exportStar(require("./types/user-type"), exports);
 __exportStar(require("./types/platform-fee-range"), exports);
 __exportStar(require("./types/api-key"), exports);
+__exportStar(require("./types/authorization-type"), exports);
 __exportStar(require("./classes/Asset"), exports);
 __exportStar(require("./classes/CountryAsset"), exports);
 __exportStar(require("./classes/CryptoAsset"), exports);

package/build/middlewares/authorize.d.ts

@@ -0,0 +1,26 @@
+import { Request, Response, NextFunction } from "express";
+import { BusinessUserDoc } from "../models/business-user";
+import { UserDoc } from "../models/user";
+import { Mongoose } from "mongoose";
+import { AuthorizationType } from "../types/authorization-type";
+interface AuthPayload {
+    id: string;
+    phoneNumber: string;
+    missing: string[];
+}
+interface AdminAuthPayload {
+    id: string;
+    email: string;
+}
+declare global {
+    namespace Express {
+        interface Request {
+            currentAuth?: AuthPayload;
+            currentAdminAuth?: AdminAuthPayload;
+            user?: UserDoc | BusinessUserDoc;
+            session?: any;
+        }
+    }
+}
+export declare const authorize: (req: Request, res: Response, next: NextFunction, mongoose: Mongoose, authorizationTypes: AuthorizationType[]) => Promise<void>;
+export {};

package/build/middlewares/authorize.js

@@ -0,0 +1,110 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authorize = void 0;
+const business_user_1 = require("../models/business-user");
+const user_1 = require("../models/user");
+const user_attribute_1 = require("../types/user-attribute");
+const authorization_type_1 = require("../types/authorization-type");
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const not_authorized_error_1 = require("../errors/not-authorized-error");
+const kyc_status_1 = require("../types/kyc-status");
+const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a, _b;
+    if (authorizationTypes.includes(authorization_type_1.AuthorizationType.Auth)) {
+        if ((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.jwt) {
+            try {
+                const payload = jsonwebtoken_1.default.verify(req.cookies.jwt, process.env.JWT_KEY);
+                req.currentAuth = payload;
+            }
+            catch (err) { }
+        }
+    }
+    if (authorizationTypes.includes(authorization_type_1.AuthorizationType.Admin)) {
+        if ((_b = req.cookies) === null || _b === void 0 ? void 0 : _b.adminJwt) {
+            try {
+                const payload = jsonwebtoken_1.default.verify(req.cookies.adminJwt, process.env.JWT_KEY_ADMIN);
+                req.currentAdminAuth = payload;
+            }
+            catch (err) { }
+        }
+    }
+    if (authorizationTypes.includes(authorization_type_1.AuthorizationType.UserNoKYC)) {
+        let individualUser;
+        let businessUser;
+        try {
+            const User = yield (0, user_1.buildUser)(mongoose);
+            individualUser = yield User.findOne({
+                phoneNumber: req.currentAuth.phoneNumber,
+                attributes: { $ne: user_attribute_1.UserAttribute.deleted },
+            });
+        }
+        catch (err) {
+            individualUser = null;
+        }
+        try {
+            const BusinessUser = yield (0, business_user_1.buildBusinessUser)(mongoose);
+            businessUser = yield BusinessUser.findOne({
+                phoneNumber: req.currentAuth.phoneNumber,
+                attributes: { $ne: user_attribute_1.UserAttribute.deleted },
+            });
+        }
+        catch (err) {
+            businessUser = null;
+        }
+        const user = individualUser || businessUser;
+        if (user) {
+            req.user = user;
+        }
+    }
+    if (authorizationTypes.includes(authorization_type_1.AuthorizationType.User)) {
+        let individualUser;
+        let businessUser;
+        try {
+            const User = yield (0, user_1.buildUser)(mongoose);
+            individualUser = yield User.findOne({
+                phoneNumber: req.currentAuth.phoneNumber,
+                attributes: { $ne: user_attribute_1.UserAttribute.deleted },
+            });
+            if ((individualUser === null || individualUser === void 0 ? void 0 : individualUser.kycStatus) !== kyc_status_1.KYCStatus.Passed) {
+                throw new Error();
+            }
+        }
+        catch (err) {
+            individualUser = null;
+        }
+        try {
+            const BusinessUser = yield (0, business_user_1.buildBusinessUser)(mongoose);
+            businessUser = yield BusinessUser.findOne({
+                phoneNumber: req.currentAuth.phoneNumber,
+                attributes: { $ne: user_attribute_1.UserAttribute.deleted },
+            });
+            if ((businessUser === null || businessUser === void 0 ? void 0 : businessUser.kycStatus) !== kyc_status_1.KYCStatus.businessApproved) {
+                throw new Error();
+            }
+        }
+        catch (err) {
+            businessUser = null;
+        }
+        const user = individualUser || businessUser;
+        if (user) {
+            req.user = user;
+        }
+    }
+    if (!req.currentAdminAuth && !req.currentAuth && !req.user) {
+        throw new not_authorized_error_1.NotAuthorizedError();
+    }
+    next();
+});
+exports.authorize = authorize;

package/build/types/authorization-type.d.ts

@@ -0,0 +1,7 @@
+export declare enum AuthorizationType {
+    UserNoKYC = "newUserNoKYC",
+    User = "user",
+    Admin = "admin",
+    Partner = "partner",
+    Auth = "auth"
+}

package/build/types/authorization-type.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationType = void 0;
+var AuthorizationType;
+(function (AuthorizationType) {
+    AuthorizationType["UserNoKYC"] = "newUserNoKYC";
+    AuthorizationType["User"] = "user";
+    AuthorizationType["Admin"] = "admin";
+    AuthorizationType["Partner"] = "partner";
+    AuthorizationType["Auth"] = "auth";
+})(AuthorizationType = exports.AuthorizationType || (exports.AuthorizationType = {}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common",
-  "version": "1.0.387",
+  "version": "1.0.388",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",