@riocrypto/common 1.0.407 → 1.0.409

package/build/errors/admin-only-error.d.ts

@@ -0,0 +1,8 @@
+import { CustomError } from "./custom-error";
+export declare class AdminOnlyError extends CustomError {
+    statusCode: number;
+    constructor();
+    serializeErrors(): {
+        message: string;
+    }[];
+}

package/build/errors/admin-only-error.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminOnlyError = void 0;
+const custom_error_1 = require("./custom-error");
+class AdminOnlyError extends custom_error_1.CustomError {
+    constructor() {
+        super("This endpoint can only be called by admins");
+        this.statusCode = 401;
+        Object.setPrototypeOf(this, AdminOnlyError.prototype);
+    }
+    serializeErrors() {
+        return [{ message: "This endpoint can only be called by admins" }];
+    }
+}
+exports.AdminOnlyError = AdminOnlyError;

package/build/index.d.ts

@@ -20,6 +20,7 @@ export * from "./errors/api-key-not-found-error";
 export * from "./errors/missing-user-error";
 export * from "./errors/missing-kyc-approval-error";
 export * from "./errors/wrong-order-state-error";
+export * from "./errors/admin-only-error";
 export * from "./middlewares/error-handler";
 export * from "./middlewares/validate-request";
 export * from "./middlewares/current-auth";

package/build/index.js

@@ -36,6 +36,7 @@ __exportStar(require("./errors/api-key-not-found-error"), exports);
 __exportStar(require("./errors/missing-user-error"), exports);
 __exportStar(require("./errors/missing-kyc-approval-error"), exports);
 __exportStar(require("./errors/wrong-order-state-error"), exports);
+__exportStar(require("./errors/admin-only-error"), exports);
 __exportStar(require("./middlewares/error-handler"), exports);
 __exportStar(require("./middlewares/validate-request"), exports);
 __exportStar(require("./middlewares/current-auth"), exports);

package/build/middlewares/authorize.js

@@ -38,7 +38,6 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
             catch (err) { }
         }
         if ((_c = (_b = req.currentAuth) === null || _b === void 0 ? void 0 : _b.missing) === null || _c === void 0 ? void 0 : _c.includes("password")) {
-            console.log("hit");
             throw new missing_password_error_1.MissingPasswordError();
         }
         if ((_e = (_d = req.currentAuth) === null || _d === void 0 ? void 0 : _d.missing) === null || _e === void 0 ? void 0 : _e.includes("securityQuestion")) {
@@ -63,9 +62,6 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                 phoneNumber: req.currentAuth.phoneNumber,
                 attributes: { $ne: user_attribute_1.UserAttribute.deleted },
             });
-            if (!individualUser) {
-                throw new missing_user_error_1.MissingUserError();
-            }
         }
         catch (err) {
             individualUser = null;
@@ -76,9 +72,6 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                 phoneNumber: req.currentAuth.phoneNumber,
                 attributes: { $ne: user_attribute_1.UserAttribute.deleted },
             });
-            if (!businessUser) {
-                throw new missing_user_error_1.MissingUserError();
-            }
         }
         catch (err) {
             businessUser = null;
@@ -135,7 +128,9 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
         if (missingKYC) {
             throw new missing_kyc_approval_error_1.MissingKYCApprovalError();
         }
-        if ((_g = req.cookies) === null || _g === void 0 ? void 0 : _g.jwt) {
+        if ((authorizationTypes.includes(authorization_type_1.AuthorizationType.User) ||
+            authorizationTypes.includes(authorization_type_1.AuthorizationType.UserNoKYC)) &&
+            ((_g = req.cookies) === null || _g === void 0 ? void 0 : _g.jwt)) {
             throw new missing_user_error_1.MissingUserError();
         }
         throw new not_authorized_error_1.NotAuthorizedError();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common",
-  "version": "1.0.407",
+  "version": "1.0.409",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",