@riocrypto/common 1.0.429 → 1.0.431

package/build/errors/not-broker-error.d.ts

@@ -0,0 +1,8 @@
+import { CustomError } from "./custom-error";
+export declare class NotBrokerError extends CustomError {
+    statusCode: number;
+    constructor();
+    serializeErrors(): {
+        message: string;
+    }[];
+}

package/build/errors/not-broker-error.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotBrokerError = void 0;
+const custom_error_1 = require("./custom-error");
+class NotBrokerError extends custom_error_1.CustomError {
+    constructor() {
+        super("To call this endpoint as a user, you must be a broker");
+        this.statusCode = 401;
+        Object.setPrototypeOf(this, NotBrokerError.prototype);
+    }
+    serializeErrors() {
+        return [
+            { message: "To call this endpoint as a user, you must be a broker" },
+        ];
+    }
+}
+exports.NotBrokerError = NotBrokerError;

package/build/index.d.ts

@@ -21,6 +21,7 @@ export * from "./errors/missing-user-error";
 export * from "./errors/missing-kyc-approval-error";
 export * from "./errors/wrong-order-state-error";
 export * from "./errors/admin-only-error";
+export * from "./errors/not-broker-error";
 export * from "./middlewares/error-handler";
 export * from "./middlewares/validate-request";
 export * from "./middlewares/current-auth";

package/build/index.js

@@ -37,6 +37,7 @@ __exportStar(require("./errors/missing-user-error"), exports);
 __exportStar(require("./errors/missing-kyc-approval-error"), exports);
 __exportStar(require("./errors/wrong-order-state-error"), exports);
 __exportStar(require("./errors/admin-only-error"), exports);
+__exportStar(require("./errors/not-broker-error"), exports);
 __exportStar(require("./middlewares/error-handler"), exports);
 __exportStar(require("./middlewares/validate-request"), exports);
 __exportStar(require("./middlewares/current-auth"), exports);

package/build/middlewares/authorize.js

@@ -25,12 +25,14 @@ const missing_user_error_1 = require("../errors/missing-user-error");
 const missing_password_error_1 = require("../errors/missing-password-error");
 const missing_security_question_error_1 = require("../errors/missing-security-question-error");
 const admin_only_error_1 = require("../errors/admin-only-error");
+const not_broker_error_1 = require("../errors/not-broker-error");
 const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b, _c, _d, _e, _f, _g, _h;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
     let missingKYC = false;
     if (authorizationTypes.includes(authorization_type_1.AuthorizationType.Auth) ||
         authorizationTypes.includes(authorization_type_1.AuthorizationType.UserNoKYC) ||
-        authorizationTypes.includes(authorization_type_1.AuthorizationType.User)) {
+        authorizationTypes.includes(authorization_type_1.AuthorizationType.User) ||
+        authorizationTypes.includes(authorization_type_1.AuthorizationType.Broker)) {
         if ((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.jwt) {
             try {
                 const payload = jsonwebtoken_1.default.verify(req.cookies.jwt, process.env.JWT_KEY);
@@ -106,7 +108,6 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
             const BusinessUser = yield (0, business_user_1.buildBusinessUser)(mongoose);
             businessUser = yield BusinessUser.findOne({
                 authId: req.currentAuth.id,
-                attributes: { $ne: user_attribute_1.UserAttribute.deleted },
             });
             if (!businessUser) {
                 throw new Error();
@@ -124,6 +125,27 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
             req.user = user;
         }
     }
+    if (authorizationTypes.includes(authorization_type_1.AuthorizationType.Broker)) {
+        let businessUser;
+        const BusinessUser = yield (0, business_user_1.buildBusinessUser)(mongoose);
+        businessUser = yield BusinessUser.findOne({
+            authId: req.currentAuth.id,
+        });
+        if (!businessUser) {
+            throw new Error();
+        }
+        if ((businessUser === null || businessUser === void 0 ? void 0 : businessUser.kycStatus) !== kyc_status_1.KYCStatus.businessApproved) {
+            missingKYC = true;
+            throw new Error();
+        }
+        if ((_g = businessUser.attributes) === null || _g === void 0 ? void 0 : _g.includes(user_attribute_1.UserAttribute.broker)) {
+            throw new not_broker_error_1.NotBrokerError();
+        }
+        const user = businessUser;
+        if (user) {
+            req.user = user;
+        }
+    }
     if ((!req.currentAdminAuth && !req.currentAuth && !req.user) ||
         (req.currentAuth &&
             !authorizationTypes.includes(authorization_type_1.AuthorizationType.Auth) &&
@@ -133,12 +155,12 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
         }
         if ((authorizationTypes.includes(authorization_type_1.AuthorizationType.User) ||
             authorizationTypes.includes(authorization_type_1.AuthorizationType.UserNoKYC)) &&
-            ((_g = req.cookies) === null || _g === void 0 ? void 0 : _g.jwt)) {
+            ((_h = req.cookies) === null || _h === void 0 ? void 0 : _h.jwt)) {
             throw new missing_user_error_1.MissingUserError();
         }
         if (authorizationTypes.includes(authorization_type_1.AuthorizationType.Admin) &&
             authorizationTypes.length === 1 &&
-            ((_h = req.cookies) === null || _h === void 0 ? void 0 : _h.jwt)) {
+            ((_j = req.cookies) === null || _j === void 0 ? void 0 : _j.jwt)) {
             throw new admin_only_error_1.AdminOnlyError();
         }
         throw new not_authorized_error_1.NotAuthorizedError();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common",
-  "version": "1.0.429",
+  "version": "1.0.431",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",