@rockcarver/frodo-lib 0.16.1 → 0.16.2-1

package/esm/ops/JourneyOps.mjs

@@ -1,7 +1,7 @@
 import fs from 'fs';
 import { v4 as uuidv4 } from 'uuid';
 import _ from 'lodash';
-import { convertBase64TextToArray, getTypedFilename, saveJsonToFile, getRealmString, convertTextArrayToBase64, convertTextArrayToBase64Url, findFilesByName } from './utils/ExportImportUtils';
+import { convertBase64TextToArray, getTypedFilename, convertTextArrayToBase64, convertTextArrayToBase64Url, findFilesByName } from './utils/ExportImportUtils';
 import { getRealmManagedUser, replaceAll } from './utils/OpsUtils';
 import storage from '../storage/SessionStorage';
 import { getNode, putNode, deleteNode, getNodeTypes, getNodesByType } from '../api/NodeApi';
@@ -10,8 +10,7 @@ import { getTrees, getTree, putTree, deleteTree } from '../api/TreeApi';
 import { getEmailTemplate, putEmailTemplate } from '../api/EmailTemplateApi';
 import { getScript } from '../api/ScriptApi';
 import * as global from '../storage/StaticStorage';
-import { printMessage, createProgressIndicator, updateProgressIndicator, stopProgressIndicator, createTable, debug } from './utils/Console';
-import wordwrap from './utils/Wordwrap';
+import { printMessage, createProgressIndicator, updateProgressIndicator, stopProgressIndicator, debug } from './utils/Console';
 import { getProviderByLocationAndId, getProviders, getProviderMetadata, createProvider, findProviders, updateProvider } from '../api/Saml2Api';
 import { createCircleOfTrust, getCirclesOfTrust, updateCircleOfTrust } from '../api/CirclesOfTrustApi';
 import { decode, encode, encodeBase64Url, isBase64Encoded } from '../api/utils/Base64';
@@ -146,8 +145,7 @@ async function getSaml2NodeDependencies(nodeObject, allProviders, allCirclesOfTr
 
 export async function exportJourney(treeId, options = {
   useStringArrays: true,
-  deps: true,
-  verbose: false
+  deps: true
 }) {
   const exportData = createSingleTreeExportTemplate();
 
@@ -155,9 +153,9 @@ export async function exportJourney(treeId, options = {
     const treeObject = await getTree(treeId);
     const {
       useStringArrays,
-      deps,
-      verbose
+      deps
     } = options;
+    const verbose = storage.session.getDebug();
     if (verbose) printMessage(`\n- ${treeObject._id}\n`, 'info', false); // Process tree
 
     if (verbose) printMessage('  - Flow');
@@ -441,7 +439,7 @@ export async function exportJourney(treeId, options = {
 }
 /**
  * Get all the journeys/trees without all their nodes and dependencies.
- * @returns {Promise<unknown[]>} a promise that resolves to an array of journey objects
+ * @returns {Promise<TreeSkeleton[]>} a promise that resolves to an array of journey objects
  */
 
 export async function getJourneys() {
@@ -458,94 +456,7 @@ export async function getJourneys() {
   return journeys;
 }
 /**
- * Export journey by id/name to file
- * @param {string} journeyId journey id/name
- * @param {string} file optional export file name
- * @param {TreeExportOptions} options export options
- */
-
-export async function exportJourneyToFile(journeyId, file, options) {
-  const {
-    verbose
-  } = options;
-  let fileName = file;
-
-  if (!fileName) {
-    fileName = getTypedFilename(journeyId, 'journey');
-  }
-
-  if (!verbose) createProgressIndicator(undefined, `${journeyId}`, 'indeterminate');
-
-  try {
-    const fileData = await exportJourney(journeyId, options);
-    if (verbose) createProgressIndicator(undefined, `${journeyId}`, 'indeterminate');
-    saveJsonToFile(fileData, fileName);
-    stopProgressIndicator(`Exported ${journeyId['brightCyan']} to ${fileName['brightCyan']}.`, 'success');
-  } catch (error) {
-    if (verbose) createProgressIndicator(undefined, `${journeyId}`, 'indeterminate');
-    stopProgressIndicator(`Error exporting journey ${journeyId}: ${error}`, 'fail');
-  }
-}
-/**
- * Export all journeys to file
- * @param {string} file optional export file name
- * @param {TreeExportOptions} options export options
- */
-
-export async function exportJourneysToFile(file, options = {
-  deps: false,
-  useStringArrays: false,
-  verbose: false
-}) {
-  let fileName = file;
-
-  if (!fileName) {
-    fileName = getTypedFilename(`all${getRealmString()}Journeys`, 'journeys');
-  }
-
-  const trees = (await getTrees()).result;
-  const fileData = createMultiTreeExportTemplate();
-  createProgressIndicator(trees.length, 'Exporting journeys...');
-
-  for (const tree of trees) {
-    updateProgressIndicator(`${tree._id}`);
-
-    try {
-      const exportData = await exportJourney(tree._id, options);
-      delete exportData.meta;
-      fileData.trees[tree._id] = exportData;
-    } catch (error) {
-      printMessage(`Error exporting journey ${tree._id}: ${error}`, 'error');
-    }
-  }
-
-  saveJsonToFile(fileData, fileName);
-  stopProgressIndicator(`Exported to ${fileName}`);
-}
-/**
- * Export all journeys to separate files
- * @param {TreeExportOptions} options export options
- */
-
-export async function exportJourneysToFiles(options) {
-  const trees = (await getTrees()).result;
-  createProgressIndicator(trees.length, 'Exporting journeys...');
-
-  for (const tree of trees) {
-    updateProgressIndicator(`${tree._id}`);
-    const fileName = getTypedFilename(`${tree._id}`, 'journey');
-
-    try {
-      const exportData = await exportJourney(tree._id, options);
-      saveJsonToFile(exportData, fileName);
-    } catch (error) {// do we need to report status here?
-    }
-  }
-
-  stopProgressIndicator('Done');
-}
-/**
- * Helper to import a tree with all dependencies from an import data object (typically read from a file)
+ * Helper to import a tree with all dependencies from a `SingleTreeExportInterface` object (typically read from a file)
  * @param {SingleTreeExportInterface} treeObject tree object containing tree and all its dependencies
  * @param {TreeImportOptions} options import options
  */
@@ -553,9 +464,9 @@ export async function exportJourneysToFiles(options) {
 export async function importJourney(treeObject, options) {
   const {
     reUuid,
-    deps,
-    verbose
+    deps
   } = options;
+  const verbose = storage.session.getDebug();
   if (verbose) printMessage(`\n- ${treeObject.tree._id}\n`, 'info', false);
   let newUuid = '';
   const uuidMap = {};
@@ -930,7 +841,7 @@ export async function importJourney(treeObject, options) {
  * @param {int} index Depth of recursion
  */
 
-async function resolveDependencies(installedJorneys, journeyMap, unresolvedJourneys, resolvedJourneys, index = -1) {
+export async function resolveDependencies(installedJorneys, journeyMap, unresolvedJourneys, resolvedJourneys, index = -1) {
   let before = -1;
   let after = index;
 
@@ -984,135 +895,13 @@ async function resolveDependencies(installedJorneys, journeyMap, unresolvedJourn
     resolveDependencies(installedJorneys, journeyMap, unresolvedJourneys, resolvedJourneys, after);
   }
 }
-/**
- * Import a journey from file
- * @param {string} journeyId journey id/name
- * @param {string} file import file name
- * @param {TreeImportOptions} options import options
- */
-
-
-export async function importJourneyFromFile(journeyId, file, options) {
-  const {
-    verbose
-  } = options;
-  fs.readFile(file, 'utf8', async (err, data) => {
-    if (err) throw err;
-    let journeyData = JSON.parse(data); // check if this is a file with multiple trees and get journey by id
-
-    if (journeyData.trees && journeyData.trees[journeyId]) {
-      journeyData = journeyData.trees[journeyId];
-    } else if (journeyData.trees) {
-      journeyData = null;
-    } // if a journeyId was specified, only import the matching journey
-
-
-    if (journeyData && journeyId === journeyData.tree._id) {
-      // attempt dependency resolution for single tree import
-      const installedJourneys = (await getTrees()).result.map(x => x._id);
-      const unresolvedJourneys = {};
-      const resolvedJourneys = [];
-      createProgressIndicator(undefined, 'Resolving dependencies', 'indeterminate');
-      await resolveDependencies(installedJourneys, {
-        [journeyId]: journeyData
-      }, unresolvedJourneys, resolvedJourneys);
-
-      if (Object.keys(unresolvedJourneys).length === 0) {
-        stopProgressIndicator(`Resolved all dependencies.`, 'success');
-        if (!verbose) createProgressIndicator(undefined, `Importing ${journeyId}...`, 'indeterminate');
-        importJourney(journeyData, options).then(() => {
-          if (verbose) createProgressIndicator(undefined, `Importing ${journeyId}...`, 'indeterminate');
-          stopProgressIndicator(`Imported ${journeyId}.`, 'success');
-        }).catch(importError => {
-          if (verbose) createProgressIndicator(undefined, `Importing ${journeyId}...`, 'indeterminate');
-          stopProgressIndicator(`${importError}`, 'fail');
-        });
-      } else {
-        stopProgressIndicator(`Unresolved dependencies:`, 'fail');
-
-        for (const journey of Object.keys(unresolvedJourneys)) {
-          printMessage(`  ${journey} requires ${unresolvedJourneys[journey]}`, 'error');
-        }
-      } // end dependency resolution for single tree import
-
-    } else {
-      createProgressIndicator(undefined, `Importing ${journeyId}...`, 'indeterminate');
-      stopProgressIndicator(`${journeyId} not found!`, 'fail');
-    }
-  });
-}
-/**
- * Import first journey from file
- * @param {string} file import file name
- * @param {TreeImportOptions} options import options
- */
-
-export async function importFirstJourneyFromFile(file, options) {
-  const {
-    verbose
-  } = options;
-  fs.readFile(file, 'utf8', async (err, data) => {
-    if (err) throw err;
-
-    let journeyData = _.cloneDeep(JSON.parse(data));
-
-    let journeyId = null; // single tree
-
-    if (journeyData.tree) {
-      journeyId = _.cloneDeep(journeyData.tree._id);
-    } // multiple trees, so get the first tree
-    else if (journeyData.trees) {
-      for (const treeId in journeyData.trees) {
-        if (Object.hasOwnProperty.call(journeyData.trees, treeId)) {
-          journeyId = treeId;
-          journeyData = journeyData.trees[treeId];
-          break;
-        }
-      }
-    } // if a journeyId was specified, only import the matching journey
-
-
-    if (journeyData && journeyId) {
-      // attempt dependency resolution for single tree import
-      const installedJourneys = (await getTrees()).result.map(x => x._id);
-      const unresolvedJourneys = {};
-      const resolvedJourneys = [];
-      createProgressIndicator(undefined, 'Resolving dependencies', 'indeterminate');
-      await resolveDependencies(installedJourneys, {
-        [journeyId]: journeyData
-      }, unresolvedJourneys, resolvedJourneys);
-
-      if (Object.keys(unresolvedJourneys).length === 0) {
-        stopProgressIndicator(`Resolved all dependencies.`, 'success');
-        if (!verbose) createProgressIndicator(undefined, `Importing ${journeyId}...`, 'indeterminate');
-        importJourney(journeyData, options).then(() => {
-          if (verbose) createProgressIndicator(undefined, `Importing ${journeyId}...`, 'indeterminate');
-          stopProgressIndicator(`Imported ${journeyId}.`, 'success');
-        }).catch(importError => {
-          if (verbose) createProgressIndicator(undefined, `Importing ${journeyId}...`, 'indeterminate');
-          stopProgressIndicator(`${importError}`, 'fail');
-        });
-      } else {
-        stopProgressIndicator(`Unresolved dependencies:`, 'fail');
-
-        for (const journey of Object.keys(unresolvedJourneys)) {
-          printMessage(`  ${journey} requires ${unresolvedJourneys[journey]}`, 'error');
-        }
-      }
-    } else {
-      createProgressIndicator(undefined, `Importing...`, 'indeterminate');
-      stopProgressIndicator(`No journeys found!`, 'fail');
-    } // end dependency resolution for single tree import
-
-  });
-}
 /**
  * Helper to import multiple trees from a tree map
  * @param {Object} treesMap map of trees object
  * @param {TreeImportOptions} options import options
  */
 
-async function importAllJourneys(treesMap, options) {
+export async function importAllJourneys(treesMap, options) {
   const installedJourneys = (await getTrees()).result.map(x => x._id);
   const unresolvedJourneys = {};
   const resolvedJourneys = [];
@@ -1143,39 +932,6 @@ async function importAllJourneys(treesMap, options) {
 
   stopProgressIndicator('Done');
 }
-/**
- * Import all journeys from file
- * @param {string} file import file name
- * @param {TreeImportOptions} options import options
- */
-
-
-export async function importJourneysFromFile(file, options) {
-  fs.readFile(file, 'utf8', (err, data) => {
-    if (err) throw err;
-    const fileData = JSON.parse(data);
-    importAllJourneys(fileData.trees, options);
-  });
-}
-/**
- * Import all journeys from separate files
- * @param {TreeImportOptions} options import options
- */
-
-export async function importJourneysFromFiles(options) {
-  const names = fs.readdirSync('.');
-  const jsonFiles = names.filter(name => name.toLowerCase().endsWith('.journey.json'));
-  const allJourneysData = {
-    trees: {}
-  };
-
-  for (const file of jsonFiles) {
-    const journeyData = JSON.parse(fs.readFileSync(file, 'utf8'));
-    allJourneysData.trees[journeyData.tree._id] = journeyData;
-  }
-
-  importAllJourneys(allJourneysData.trees, options);
-}
 /**
  * Get the node reference obbject for a node object. Node reference objects
  * are used in a tree flow definition and within page nodes to reference
@@ -1217,8 +973,7 @@ export const onlineTreeExportResolver = async function (treeId) {
   debug(`onlineTreeExportResolver(${treeId})`);
   return await exportJourney(treeId, {
     deps: false,
-    useStringArrays: false,
-    verbose: false
+    useStringArrays: false
   });
 };
 /**
@@ -1501,70 +1256,6 @@ export function getJourneyClassification(journey) {
   if (premium) classifications.push(JourneyClassification.PREMIUM);
   return classifications;
 }
-/**
- * List all the journeys/trees
- * @param {boolean} long Long version, all the fields
- * @param {boolean} analyze Analyze journeys/trees for custom nodes (expensive)
- * @returns {Promise<unknown[]>} a promise that resolves to an array journey objects
- */
-
-export async function listJourneys(long = false, analyze = false) {
-  let journeys = [];
-
-  try {
-    journeys = await getJourneys();
-
-    if (!long && !analyze) {
-      for (const journeyStub of journeys) {
-        printMessage(`${journeyStub['_id']}`, 'data');
-      }
-    } else {
-      if (!analyze) {
-        const table = createTable(['Name', 'Status', 'Tags']);
-
-        for (const journeyStub of journeys) {
-          var _journeyStub$uiConfig;
-
-          table.push([`${journeyStub._id}`, journeyStub.enabled === false ? 'disabled'['brightRed'] : 'enabled'['brightGreen'], (_journeyStub$uiConfig = journeyStub.uiConfig) !== null && _journeyStub$uiConfig !== void 0 && _journeyStub$uiConfig.categories ? wordwrap(JSON.parse(journeyStub.uiConfig.categories).join(', '), 60) : '']);
-        }
-
-        printMessage(table.toString(), 'data');
-      } else {
-        createProgressIndicator(0, 'Retrieving details of all journeys...', 'indeterminate');
-        const exportPromises = [];
-
-        try {
-          for (const journeyStub of journeys) {
-            exportPromises.push(exportJourney(journeyStub['_id'], {
-              useStringArrays: false,
-              deps: false,
-              verbose: false
-            }));
-          }
-
-          const journeyExports = await Promise.all(exportPromises);
-          stopProgressIndicator('Retrieved details of all journeys.', 'success');
-          const table = createTable(['Name', 'Status', 'Classification', 'Tags']);
-
-          for (const journeyExport of journeyExports) {
-            var _journeyExport$tree$u;
-
-            table.push([`${journeyExport.tree._id}`, journeyExport.tree.enabled === false ? 'disabled'['brightRed'] : 'enabled'['brightGreen'], getJourneyClassification(journeyExport).join(', '), (_journeyExport$tree$u = journeyExport.tree.uiConfig) !== null && _journeyExport$tree$u !== void 0 && _journeyExport$tree$u.categories ? wordwrap(JSON.parse(journeyExport.tree.uiConfig.categories).join(', '), 60) : '']);
-          }
-
-          printMessage(table.toString(), 'data');
-        } catch (error) {
-          stopProgressIndicator('Error retrieving details of all journeys.', 'fail');
-          printMessage(error.response.data, 'error');
-        }
-      }
-    }
-  } catch (error) {
-    printMessage(error.response.data, 'error');
-  }
-
-  return journeys;
-}
 /**
  * Delete a journey
  * @param {string} journeyId journey id/name

package/esm/ops/LogOps.mjs

@@ -151,7 +151,11 @@ export async function fetchLogs(source, startTs, endTs, levels, txid, ffString,
     const noiseFilter = nf == null ? noise : nf;
 
     if (Array.isArray(logsObject.result)) {
-      filteredLogs = logsObject.result.filter(el => !noiseFilter.includes(el.payload.logger) && !noiseFilter.includes(el.type) && (levels[0] === 'ALL' || levels.includes(resolvePayloadLevel(el))) && (typeof txid === 'undefined' || txid === null || el.payload.transactionId.includes(txid)));
+      filteredLogs = logsObject.result.filter(el => {
+        var _el$payload$transacti2;
+
+        return !noiseFilter.includes(el.payload.logger) && !noiseFilter.includes(el.type) && (levels[0] === 'ALL' || levels.includes(resolvePayloadLevel(el))) && (typeof txid === 'undefined' || txid === null || ((_el$payload$transacti2 = el.payload.transactionId) === null || _el$payload$transacti2 === void 0 ? void 0 : _el$payload$transacti2.includes(txid)));
+      });
     }
 
     filteredLogs.forEach(e => {

package/esm/storage/SessionStorage.mjs

@@ -50,6 +50,8 @@ export default {
     getMasterKeyPath: () => _sessionStorage['masterKeyPath'],
     setOutputFile: value => _sessionStorage['outputFile'] = value,
     getOutputFile: () => _sessionStorage['outputFile'],
+    setDirectory: value => _sessionStorage['directory'] = value,
+    getDirectory: () => _sessionStorage['directory'],
     setPrintHandler: printHandler => _sessionStorage['printHandler'] = printHandler,
     getPrintHandler: () => _sessionStorage['printHandler'],
     setErrorHandler: errorHandler => _sessionStorage['errorHandler'] = errorHandler,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rockcarver/frodo-lib",
-  "version": "0.16.1",
+  "version": "0.16.2-1",
   "type": "commonjs",
   "main": "./cjs/index.js",
   "module": "./esm/index.mjs",

package/types/ops/AuthenticateOps.d.ts.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/ops/AuthenticateOps.ts"],"names":[],"mappings":"AAgTA;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,UAAQ,oBAwC3C","file":"AuthenticateOps.d.ts","sourcesContent":["import url from 'url';\nimport { createHash, randomBytes } from 'crypto';\nimport readlineSync from 'readline-sync';\nimport { encodeBase64Url } from '../api/utils/Base64';\nimport storage from '../storage/SessionStorage';\nimport * as global from '../storage/StaticStorage';\nimport { printMessage } from './utils/Console';\nimport { getServerInfo, getServerVersionInfo } from '../api/ServerInfoApi';\nimport { step } from '../api/AuthenticateApi';\nimport { accessToken, authorize } from '../api/OAuth2OIDCApi';\nimport {\n  getConnectionProfile,\n  saveConnectionProfile,\n} from './ConnectionProfileOps';\n\nconst adminClientPassword = 'doesnotmatter';\nconst redirectUrlTemplate = '/platform/appAuthHelperRedirect.html';\n\nconst idmAdminScope = 'fr:idm:* openid';\n\nlet adminClientId = 'idmAdminClient';\n\n/**\n * Helper function to get cookie name\n * @returns {String} cookie name\n */\nasync function getCookieName() {\n  try {\n    return (await getServerInfo()).data.cookieName;\n  } catch (error) {\n    printMessage(`Error getting cookie name: ${error}`, 'error');\n    return null;\n  }\n}\n\n/**\n * Helper function to determine if this is a setup mfa prompt in the ID Cloud tenant admin login journey\n * @param {Object} payload response from the previous authentication journey step\n * @returns {Object} an object indicating if 2fa is required and the original payload\n */\nfunction checkAndHandle2FA(payload) {\n  // let skippable = false;\n  if ('callbacks' in payload) {\n    for (const element of payload.callbacks) {\n      if (element.type === 'HiddenValueCallback') {\n        if (element.input[0].value.includes('skip')) {\n          // skippable = true;\n          element.input[0].value = 'Skip';\n          return {\n            need2fa: true,\n            payload,\n          };\n        }\n      }\n      if (element.type === 'NameCallback') {\n        if (element.output[0].value.includes('code')) {\n          // skippable = false;\n          printMessage('2FA is enabled and required for this user...');\n          const code = readlineSync.question(`${element.output[0].value}: `);\n          element.input[0].value = code;\n          return {\n            need2fa: true,\n            payload,\n          };\n        }\n      }\n    }\n    // console.info(\"NO2FA\");\n    return {\n      need2fa: false,\n      payload,\n    };\n  }\n  // console.info(\"NO2FA\");\n  return {\n    need2fa: false,\n    payload,\n  };\n}\n\n/**\n * Helper function to set the default realm by deployment type\n * @param {String} deploymentType deployment type\n */\nfunction determineDefaultRealm(deploymentType) {\n  if (storage.session.getRealm() === global.DEFAULT_REALM_KEY) {\n    storage.session.setRealm(global.DEPLOYMENT_TYPE_REALM_MAP[deploymentType]);\n  }\n}\n\n/**\n * Helper function to determine the deployment type\n * @returns {String} deployment type\n */\nasync function determineDeploymentType() {\n  const fidcClientId = 'idmAdminClient';\n  const forgeopsClientId = 'idm-admin-ui';\n\n  const verifier = encodeBase64Url(randomBytes(32));\n  const challenge = encodeBase64Url(\n    createHash('sha256').update(verifier).digest()\n  );\n  const challengeMethod = 'S256';\n  const redirectURL = url.resolve(\n    storage.session.getTenant(),\n    redirectUrlTemplate\n  );\n\n  const config = {\n    maxRedirects: 0,\n  };\n  let bodyFormData = `redirect_uri=${redirectURL}&scope=${idmAdminScope}&response_type=code&client_id=${fidcClientId}&csrf=${storage.session.getCookieValue()}&decision=allow&code_challenge=${challenge}&code_challenge_method=${challengeMethod}`;\n\n  let deploymentType = global.CLASSIC_DEPLOYMENT_TYPE_KEY;\n  try {\n    await authorize(bodyFormData, config);\n  } catch (e) {\n    if (\n      e.response?.status === 302 &&\n      e.response.headers?.location?.indexOf('code=') > -1\n    ) {\n      printMessage('ForgeRock Identity Cloud ', 'info', false);\n      deploymentType = global.CLOUD_DEPLOYMENT_TYPE_KEY;\n    } else {\n      try {\n        bodyFormData = `redirect_uri=${redirectURL}&scope=${idmAdminScope}&response_type=code&client_id=${forgeopsClientId}&csrf=${storage.session.getCookieValue()}&decision=allow&code_challenge=${challenge}&code_challenge_method=${challengeMethod}`;\n        await authorize(bodyFormData, config);\n      } catch (ex) {\n        if (\n          ex.response?.status === 302 &&\n          ex.response.headers?.location?.indexOf('code=') > -1\n        ) {\n          adminClientId = forgeopsClientId;\n          printMessage('ForgeOps deployment ', 'info', false);\n          deploymentType = global.FORGEOPS_DEPLOYMENT_TYPE_KEY;\n        } else {\n          printMessage('Classic deployment ', 'info', false);\n        }\n      }\n    }\n    printMessage('detected.');\n  }\n  determineDefaultRealm(deploymentType);\n  return deploymentType;\n}\n\n/**\n * Helper function to extract the semantic version string from a version info object\n * @param {Object} versionInfo version info object\n * @returns {String} semantic version\n */\nasync function getSemanticVersion(versionInfo) {\n  if ('version' in versionInfo) {\n    const versionString = versionInfo.version;\n    const rx = /([\\d]\\.[\\d]\\.[\\d](\\.[\\d])*)/g;\n    const version = versionString.match(rx);\n    return version[0];\n  }\n  throw new Error('Cannot extract semantic version from version info object.');\n}\n\n/**\n * Helper function to authenticate and obtain and store session cookie\n * @returns {String} empty string or null\n */\nasync function authenticate() {\n  storage.session.setCookieName(await getCookieName());\n  try {\n    const config = {\n      headers: {\n        'X-OpenAM-Username': storage.session.getUsername(),\n        'X-OpenAM-Password': storage.session.getPassword(),\n      },\n    };\n    const response1 = (await step({}, config)).data;\n    const skip2FA = checkAndHandle2FA(response1);\n    let response2 = {};\n    if (skip2FA.need2fa) {\n      response2 = (await step(skip2FA.payload)).data;\n    } else {\n      response2 = skip2FA.payload;\n    }\n    if ('tokenId' in response2) {\n      storage.session.setCookieValue(response2['tokenId']);\n      if (!storage.session.getDeploymentType()) {\n        storage.session.setDeploymentType(await determineDeploymentType());\n      } else {\n        determineDefaultRealm(storage.session.getDeploymentType());\n      }\n      const versionInfo = (await getServerVersionInfo()).data;\n      printMessage(`Connected to ${versionInfo.fullVersion}`);\n      const version = await getSemanticVersion(versionInfo);\n      storage.session.setAmVersion(version);\n      return '';\n    }\n    printMessage(`error authenticating`, 'error');\n    printMessage('+++ likely cause, bad credentials!!! +++', 'error');\n    return null;\n  } catch (e) {\n    if (e.response?.status === 401) {\n      printMessage(`error authenticating - ${e.message}`, 'error');\n      printMessage('+++ likely cause, bad credentials +++', 'error');\n    }\n    if (e.message === 'self signed certificate') {\n      printMessage(`error authenticating - ${e.message}`, 'error');\n      printMessage('+++ use -k, --insecure option to allow +++', 'error');\n    } else {\n      printMessage(`error authenticating - ${e.message}`, 'error');\n      printMessage(e.response?.data, 'error');\n    }\n    return null;\n  }\n}\n\n/**\n * Helper function to obtain an oauth2 authorization code\n * @param {String} redirectURL oauth2 redirect uri\n * @param {String} codeChallenge PKCE code challenge\n * @param {String} codeChallengeMethod PKCE code challenge method\n * @returns {String} oauth2 authorization code or null\n */\nasync function getAuthCode(redirectURL, codeChallenge, codeChallengeMethod) {\n  try {\n    const bodyFormData = `redirect_uri=${redirectURL}&scope=${idmAdminScope}&response_type=code&client_id=${adminClientId}&csrf=${storage.session.getCookieValue()}&decision=allow&code_challenge=${codeChallenge}&code_challenge_method=${codeChallengeMethod}`;\n    const config = {\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n    };\n    const response = await authorize(bodyFormData, config);\n    if (response.status < 200 || response.status > 399) {\n      printMessage('error getting auth code', 'error');\n      printMessage(\n        'likely cause: mismatched parameters with OAuth client config',\n        'error'\n      );\n      return null;\n    }\n    const redirectLocationURL = response.request.res.responseUrl;\n    const queryObject = url.parse(redirectLocationURL, true).query;\n    if ('code' in queryObject) {\n      return queryObject.code;\n    }\n    printMessage('auth code not found', 'error');\n    return null;\n  } catch (error) {\n    printMessage(`error getting auth code - ${error.message}`, 'error');\n    printMessage(error.response.data, 'error');\n    return null;\n  }\n}\n\n/**\n * Helper function to obtain oauth2 access token\n * @returns {String} empty string or null\n */\nasync function getAccessToken() {\n  try {\n    const verifier = encodeBase64Url(randomBytes(32));\n    const challenge = encodeBase64Url(\n      createHash('sha256').update(verifier).digest()\n    );\n    const challengeMethod = 'S256';\n    const redirectURL = url.resolve(\n      storage.session.getTenant(),\n      redirectUrlTemplate\n    );\n    const authCode = await getAuthCode(redirectURL, challenge, challengeMethod);\n    if (authCode == null) {\n      printMessage('error getting auth code', 'error');\n      return null;\n    }\n    let response = null;\n    if (\n      storage.session.getDeploymentType() === global.CLOUD_DEPLOYMENT_TYPE_KEY\n    ) {\n      const config = {\n        auth: {\n          username: adminClientId,\n          password: adminClientPassword,\n        },\n      };\n      const bodyFormData = `redirect_uri=${redirectURL}&grant_type=authorization_code&code=${authCode}&code_verifier=${verifier}`;\n      response = await accessToken(bodyFormData, config);\n    } else {\n      const bodyFormData = `client_id=${adminClientId}&redirect_uri=${redirectURL}&grant_type=authorization_code&code=${authCode}&code_verifier=${verifier}`;\n      response = await accessToken(bodyFormData);\n    }\n    if (response.status < 200 || response.status > 399) {\n      printMessage(`access token call returned ${response.status}`, 'error');\n      return null;\n    }\n    if ('access_token' in response.data) {\n      storage.session.setBearerToken(response.data.access_token);\n      return '';\n    }\n    printMessage(\"can't get access token\", 'error');\n    return null;\n  } catch (e) {\n    printMessage('error getting access token - ', 'error');\n    return null;\n  }\n}\n\n/**\n * Get tokens\n * @param {boolean} save true to save a connection profile upon successful authentication, false otherwise\n * @returns {boolean} true if tokens were successfully obtained, false otherwise\n */\nexport async function getTokens(save = false) {\n  let credsFromParameters = true;\n  // if username/password on cli are empty, try to read from connections.json\n  if (\n    storage.session.getUsername() == null &&\n    storage.session.getPassword() == null\n  ) {\n    credsFromParameters = false;\n    const conn = await getConnectionProfile();\n    if (conn) {\n      storage.session.setTenant(conn.tenant);\n      storage.session.setUsername(conn.username);\n      storage.session.setPassword(conn.password);\n      storage.session.setAuthenticationService(conn.authenticationService);\n      storage.session.setAuthenticationHeaderOverrides(\n        conn.authenticationHeaderOverrides\n      );\n    } else {\n      return false;\n    }\n  }\n  await authenticate();\n  if (\n    storage.session.getCookieValue() &&\n    !storage.session.getBearerToken() &&\n    (storage.session.getDeploymentType() === global.CLOUD_DEPLOYMENT_TYPE_KEY ||\n      storage.session.getDeploymentType() ===\n        global.FORGEOPS_DEPLOYMENT_TYPE_KEY)\n  ) {\n    await getAccessToken();\n  }\n  if (save && storage.session.getCookieValue() && credsFromParameters) {\n    // valid cookie, which means valid username/password combo. Save it in connections.json\n    saveConnectionProfile();\n    return true;\n  }\n  if (!storage.session.getCookieValue()) {\n    return false;\n  }\n  return true;\n}\n"]}
+{"version":3,"sources":["../src/ops/AuthenticateOps.ts"],"names":[],"mappings":"AAyTA;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,UAAQ,oBAwC3C","file":"AuthenticateOps.d.ts","sourcesContent":["import url from 'url';\nimport { createHash, randomBytes } from 'crypto';\nimport readlineSync from 'readline-sync';\nimport { encodeBase64Url } from '../api/utils/Base64';\nimport storage from '../storage/SessionStorage';\nimport * as global from '../storage/StaticStorage';\nimport { printMessage } from './utils/Console';\nimport { getServerInfo, getServerVersionInfo } from '../api/ServerInfoApi';\nimport { step } from '../api/AuthenticateApi';\nimport { accessToken, authorize } from '../api/OAuth2OIDCApi';\nimport {\n  getConnectionProfile,\n  saveConnectionProfile,\n} from './ConnectionProfileOps';\n\nconst adminClientPassword = 'doesnotmatter';\nconst redirectUrlTemplate = '/platform/appAuthHelperRedirect.html';\n\nconst idmAdminScope = 'fr:idm:* openid';\n\nlet adminClientId = 'idmAdminClient';\n\n/**\n * Helper function to get cookie name\n * @returns {String} cookie name\n */\nasync function getCookieName() {\n  try {\n    return (await getServerInfo()).data.cookieName;\n  } catch (error) {\n    printMessage(`Error getting cookie name: ${error}`, 'error');\n    return null;\n  }\n}\n\n/**\n * Helper function to determine if this is a setup mfa prompt in the ID Cloud tenant admin login journey\n * @param {Object} payload response from the previous authentication journey step\n * @returns {Object} an object indicating if 2fa is required and the original payload\n */\nfunction checkAndHandle2FA(payload) {\n  // let skippable = false;\n  if ('callbacks' in payload) {\n    for (const element of payload.callbacks) {\n      if (element.type === 'HiddenValueCallback') {\n        if (element.input[0].value.includes('skip')) {\n          // skippable = true;\n          element.input[0].value = 'Skip';\n          return {\n            need2fa: true,\n            payload,\n          };\n        }\n      }\n      if (element.type === 'NameCallback') {\n        if (element.output[0].value.includes('code')) {\n          // skippable = false;\n          printMessage('2FA is enabled and required for this user...');\n          const code = readlineSync.question(`${element.output[0].value}: `);\n          element.input[0].value = code;\n          return {\n            need2fa: true,\n            payload,\n          };\n        }\n      }\n    }\n    // console.info(\"NO2FA\");\n    return {\n      need2fa: false,\n      payload,\n    };\n  }\n  // console.info(\"NO2FA\");\n  return {\n    need2fa: false,\n    payload,\n  };\n}\n\n/**\n * Helper function to set the default realm by deployment type\n * @param {String} deploymentType deployment type\n */\nfunction determineDefaultRealm(deploymentType) {\n  if (storage.session.getRealm() === global.DEFAULT_REALM_KEY) {\n    storage.session.setRealm(global.DEPLOYMENT_TYPE_REALM_MAP[deploymentType]);\n  }\n}\n\n/**\n * Helper function to determine the deployment type\n * @returns {String} deployment type\n */\nasync function determineDeploymentType() {\n  const fidcClientId = 'idmAdminClient';\n  const forgeopsClientId = 'idm-admin-ui';\n\n  const verifier = encodeBase64Url(randomBytes(32));\n  const challenge = encodeBase64Url(\n    createHash('sha256').update(verifier).digest()\n  );\n  const challengeMethod = 'S256';\n  const redirectURL = url.resolve(\n    storage.session.getTenant(),\n    redirectUrlTemplate\n  );\n\n  const config = {\n    maxRedirects: 0,\n  };\n  let bodyFormData = `redirect_uri=${redirectURL}&scope=${idmAdminScope}&response_type=code&client_id=${fidcClientId}&csrf=${storage.session.getCookieValue()}&decision=allow&code_challenge=${challenge}&code_challenge_method=${challengeMethod}`;\n\n  let deploymentType = global.CLASSIC_DEPLOYMENT_TYPE_KEY;\n  try {\n    await authorize(bodyFormData, config);\n  } catch (e) {\n    if (\n      e.response?.status === 302 &&\n      e.response.headers?.location?.indexOf('code=') > -1\n    ) {\n      printMessage('ForgeRock Identity Cloud ', 'info', false);\n      deploymentType = global.CLOUD_DEPLOYMENT_TYPE_KEY;\n    } else {\n      try {\n        bodyFormData = `redirect_uri=${redirectURL}&scope=${idmAdminScope}&response_type=code&client_id=${forgeopsClientId}&csrf=${storage.session.getCookieValue()}&decision=allow&code_challenge=${challenge}&code_challenge_method=${challengeMethod}`;\n        await authorize(bodyFormData, config);\n      } catch (ex) {\n        if (\n          ex.response?.status === 302 &&\n          ex.response.headers?.location?.indexOf('code=') > -1\n        ) {\n          adminClientId = forgeopsClientId;\n          printMessage('ForgeOps deployment ', 'info', false);\n          deploymentType = global.FORGEOPS_DEPLOYMENT_TYPE_KEY;\n        } else {\n          printMessage('Classic deployment ', 'info', false);\n        }\n      }\n    }\n    printMessage('detected.');\n  }\n  determineDefaultRealm(deploymentType);\n  return deploymentType;\n}\n\n/**\n * Helper function to extract the semantic version string from a version info object\n * @param {Object} versionInfo version info object\n * @returns {String} semantic version\n */\nasync function getSemanticVersion(versionInfo) {\n  if ('version' in versionInfo) {\n    const versionString = versionInfo.version;\n    const rx = /([\\d]\\.[\\d]\\.[\\d](\\.[\\d])*)/g;\n    const version = versionString.match(rx);\n    return version[0];\n  }\n  throw new Error('Cannot extract semantic version from version info object.');\n}\n\n/**\n * Helper function to authenticate and obtain and store session cookie\n * @returns {String} empty string or null\n */\nasync function authenticate() {\n  storage.session.setCookieName(await getCookieName());\n  try {\n    const config = {\n      headers: {\n        'X-OpenAM-Username': storage.session.getUsername(),\n        'X-OpenAM-Password': storage.session.getPassword(),\n      },\n    };\n    const response1 = (await step({}, config)).data;\n    const skip2FA = checkAndHandle2FA(response1);\n    let response2 = {};\n    if (skip2FA.need2fa) {\n      response2 = (await step(skip2FA.payload)).data;\n    } else {\n      response2 = skip2FA.payload;\n    }\n    if ('tokenId' in response2) {\n      storage.session.setCookieValue(response2['tokenId']);\n      if (!storage.session.getDeploymentType()) {\n        storage.session.setDeploymentType(await determineDeploymentType());\n      } else {\n        determineDefaultRealm(storage.session.getDeploymentType());\n      }\n      const versionInfo = (await getServerVersionInfo()).data;\n\n      // https://github.com/rockcarver/frodo-cli/issues/109\n      // printMessage(`Connected to ${versionInfo.fullVersion}`);\n\n      // https://github.com/rockcarver/frodo-cli/issues/102\n      printMessage(\n        `Connected to [${storage.session.getTenant()}], [${\n          !storage.session.getRealm() ? 'alpha' : storage.session.getRealm()\n        }] realm, as [${storage.session.getUsername()}]`\n      );\n      const version = await getSemanticVersion(versionInfo);\n      storage.session.setAmVersion(version);\n      return '';\n    }\n    printMessage(`error authenticating`, 'error');\n    printMessage('+++ likely cause, bad credentials!!! +++', 'error');\n    return null;\n  } catch (e) {\n    if (e.response?.status === 401) {\n      printMessage(`error authenticating - ${e.message}`, 'error');\n      printMessage('+++ likely cause, bad credentials +++', 'error');\n    }\n    if (e.message === 'self signed certificate') {\n      printMessage(`error authenticating - ${e.message}`, 'error');\n      printMessage('+++ use -k, --insecure option to allow +++', 'error');\n    } else {\n      printMessage(`error authenticating - ${e.message}`, 'error');\n      printMessage(e.response?.data, 'error');\n    }\n    return null;\n  }\n}\n\n/**\n * Helper function to obtain an oauth2 authorization code\n * @param {String} redirectURL oauth2 redirect uri\n * @param {String} codeChallenge PKCE code challenge\n * @param {String} codeChallengeMethod PKCE code challenge method\n * @returns {String} oauth2 authorization code or null\n */\nasync function getAuthCode(redirectURL, codeChallenge, codeChallengeMethod) {\n  try {\n    const bodyFormData = `redirect_uri=${redirectURL}&scope=${idmAdminScope}&response_type=code&client_id=${adminClientId}&csrf=${storage.session.getCookieValue()}&decision=allow&code_challenge=${codeChallenge}&code_challenge_method=${codeChallengeMethod}`;\n    const config = {\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n    };\n    const response = await authorize(bodyFormData, config);\n    if (response.status < 200 || response.status > 399) {\n      printMessage('error getting auth code', 'error');\n      printMessage(\n        'likely cause: mismatched parameters with OAuth client config',\n        'error'\n      );\n      return null;\n    }\n    const redirectLocationURL = response.request.res.responseUrl;\n    const queryObject = url.parse(redirectLocationURL, true).query;\n    if ('code' in queryObject) {\n      return queryObject.code;\n    }\n    printMessage('auth code not found', 'error');\n    return null;\n  } catch (error) {\n    printMessage(`error getting auth code - ${error.message}`, 'error');\n    printMessage(error.response.data, 'error');\n    return null;\n  }\n}\n\n/**\n * Helper function to obtain oauth2 access token\n * @returns {String} empty string or null\n */\nasync function getAccessToken() {\n  try {\n    const verifier = encodeBase64Url(randomBytes(32));\n    const challenge = encodeBase64Url(\n      createHash('sha256').update(verifier).digest()\n    );\n    const challengeMethod = 'S256';\n    const redirectURL = url.resolve(\n      storage.session.getTenant(),\n      redirectUrlTemplate\n    );\n    const authCode = await getAuthCode(redirectURL, challenge, challengeMethod);\n    if (authCode == null) {\n      printMessage('error getting auth code', 'error');\n      return null;\n    }\n    let response = null;\n    if (\n      storage.session.getDeploymentType() === global.CLOUD_DEPLOYMENT_TYPE_KEY\n    ) {\n      const config = {\n        auth: {\n          username: adminClientId,\n          password: adminClientPassword,\n        },\n      };\n      const bodyFormData = `redirect_uri=${redirectURL}&grant_type=authorization_code&code=${authCode}&code_verifier=${verifier}`;\n      response = await accessToken(bodyFormData, config);\n    } else {\n      const bodyFormData = `client_id=${adminClientId}&redirect_uri=${redirectURL}&grant_type=authorization_code&code=${authCode}&code_verifier=${verifier}`;\n      response = await accessToken(bodyFormData);\n    }\n    if (response.status < 200 || response.status > 399) {\n      printMessage(`access token call returned ${response.status}`, 'error');\n      return null;\n    }\n    if ('access_token' in response.data) {\n      storage.session.setBearerToken(response.data.access_token);\n      return '';\n    }\n    printMessage(\"can't get access token\", 'error');\n    return null;\n  } catch (e) {\n    printMessage('error getting access token - ', 'error');\n    return null;\n  }\n}\n\n/**\n * Get tokens\n * @param {boolean} save true to save a connection profile upon successful authentication, false otherwise\n * @returns {boolean} true if tokens were successfully obtained, false otherwise\n */\nexport async function getTokens(save = false) {\n  let credsFromParameters = true;\n  // if username/password on cli are empty, try to read from connections.json\n  if (\n    storage.session.getUsername() == null &&\n    storage.session.getPassword() == null\n  ) {\n    credsFromParameters = false;\n    const conn = await getConnectionProfile();\n    if (conn) {\n      storage.session.setTenant(conn.tenant);\n      storage.session.setUsername(conn.username);\n      storage.session.setPassword(conn.password);\n      storage.session.setAuthenticationService(conn.authenticationService);\n      storage.session.setAuthenticationHeaderOverrides(\n        conn.authenticationHeaderOverrides\n      );\n    } else {\n      return false;\n    }\n  }\n  await authenticate();\n  if (\n    storage.session.getCookieValue() &&\n    !storage.session.getBearerToken() &&\n    (storage.session.getDeploymentType() === global.CLOUD_DEPLOYMENT_TYPE_KEY ||\n      storage.session.getDeploymentType() ===\n        global.FORGEOPS_DEPLOYMENT_TYPE_KEY)\n  ) {\n    await getAccessToken();\n  }\n  if (save && storage.session.getCookieValue() && credsFromParameters) {\n    // valid cookie, which means valid username/password combo. Save it in connections.json\n    saveConnectionProfile();\n    return true;\n  }\n  if (!storage.session.getCookieValue()) {\n    return false;\n  }\n  return true;\n}\n"]}

package/types/ops/ConnectionProfileOps.d.ts.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/ops/ConnectionProfileOps.ts"],"names":[],"mappings":"AAcA;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAMlD;AAmBD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,UAAQ,QA2BlD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,SAkCrC;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,KAAA;;;;;;;;GAkCpD;AAED;;;GAGG;AACH,wBAAsB,oBAAoB;;;;;;;;GAEzC;AAED;;GAEG;AACH,wBAAsB,qBAAqB,kBAoD1C;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,KAAA,QAwB3C;AAED,wBAAsB,yBAAyB,CAAC,IAAI,KAAA,EAAE,WAAW,KAAA,iBAyBhE","file":"ConnectionProfileOps.d.ts","sourcesContent":["import fs from 'fs';\nimport os from 'os';\nimport path from 'path';\nimport storage from '../storage/SessionStorage';\nimport DataProtection from './utils/DataProtection';\nimport { createObjectTable, createTable, printMessage } from './utils/Console';\nimport { FRODO_CONNECTION_PROFILES_PATH_KEY } from '../storage/StaticStorage';\n\nconst dataProtection = new DataProtection();\n\nconst fileOptions = {\n  indentation: 4,\n};\n\n/**\n * Get connection profiles file name\n * @returns {String} connection profiles file name\n */\nexport function getConnectionProfilesPath(): string {\n  return (\n    storage.session.getConnectionProfilesPath() ||\n    process.env[FRODO_CONNECTION_PROFILES_PATH_KEY] ||\n    `${os.homedir()}/.frodo/.frodorc`\n  );\n}\n\n/**\n * Find connection profile\n * @param {Object} connectionProfiles connection profile object\n * @param {String} host tenant host url or unique substring\n * @returns {Object} connection profile object or null\n */\nfunction findConnectionProfile(connectionProfiles, host) {\n  for (const tenant in connectionProfiles) {\n    if (tenant.includes(host)) {\n      const profile = connectionProfiles[tenant];\n      profile.tenant = tenant;\n      return profile;\n    }\n  }\n  return null;\n}\n\n/**\n * List connection profiles\n * @param {boolean} long Long list format with details\n */\nexport function listConnectionProfiles(long = false) {\n  const filename = getConnectionProfilesPath();\n  try {\n    const data = fs.readFileSync(filename, 'utf8');\n    const connectionsData = JSON.parse(data);\n    if (long) {\n      const table = createTable(['Host', 'Username', 'Log API Key']);\n      Object.keys(connectionsData).forEach((c) => {\n        table.push([\n          c,\n          connectionsData[c].username,\n          connectionsData[c].logApiKey,\n        ]);\n      });\n      printMessage(table.toString(), 'data');\n    } else {\n      Object.keys(connectionsData).forEach((c) => {\n        printMessage(`${c}`, 'data');\n      });\n    }\n    printMessage(\n      'Any unique substring of a saved host can be used as the value for host parameter in all commands',\n      'info'\n    );\n  } catch (e) {\n    printMessage(`No connections found in ${filename} (${e.message})`, 'error');\n  }\n}\n\n/**\n * Initialize connection profiles\n */\nexport function initConnectionProfiles() {\n  // create connections.json file if it doesn't exist\n  const filename = getConnectionProfilesPath();\n  const folderName = path.dirname(filename);\n  if (!fs.existsSync(folderName)) {\n    fs.mkdirSync(folderName, { recursive: true });\n    if (!fs.existsSync(filename)) {\n      fs.writeFileSync(\n        filename,\n        JSON.stringify({}, null, fileOptions.indentation)\n      );\n    }\n  }\n  // encrypt the password from clear text to aes-256-GCM\n  else {\n    const data = fs.readFileSync(filename, 'utf8');\n    const connectionsData = JSON.parse(data);\n    let convert = false;\n    Object.keys(connectionsData).forEach(async (conn) => {\n      if (connectionsData[conn].password) {\n        convert = true;\n        connectionsData[conn].encodedPassword = await dataProtection.encrypt(\n          connectionsData[conn].password\n        ); // Buffer.from(connectionsData[conn].password).toString('base64');\n        delete connectionsData[conn].password;\n      }\n    });\n    if (convert) {\n      fs.writeFileSync(\n        filename,\n        JSON.stringify(connectionsData, null, fileOptions.indentation)\n      );\n    }\n  }\n}\n\n/**\n * Get connection profile by host\n * @param {String} host host tenant host url or unique substring\n * @returns {Object} connection profile or null\n */\nexport async function getConnectionProfileByHost(host) {\n  try {\n    const filename = getConnectionProfilesPath();\n    const connectionsData = JSON.parse(fs.readFileSync(filename, 'utf8'));\n    const profile = findConnectionProfile(connectionsData, host);\n    if (!profile) {\n      printMessage(\n        `Profile for ${host} not found. Please specify credentials on command line`,\n        'error'\n      );\n      return null;\n    }\n    return {\n      tenant: profile.tenant,\n      username: profile.username ? profile.username : null,\n      password: profile.encodedPassword\n        ? await dataProtection.decrypt(profile.encodedPassword)\n        : null,\n      key: profile.logApiKey ? profile.logApiKey : null,\n      secret: profile.logApiSecret ? profile.logApiSecret : null,\n      authenticationService: profile.authenticationService\n        ? profile.authenticationService\n        : null,\n      authenticationHeaderOverrides: profile.authenticationHeaderOverrides\n        ? profile.authenticationHeaderOverrides\n        : {},\n    };\n  } catch (e) {\n    printMessage(\n      `Can not read saved connection info, please specify credentials on command line: ${e}`,\n      'error'\n    );\n    return null;\n  }\n}\n\n/**\n * Get connection profile\n * @returns {Object} connection profile or null\n */\nexport async function getConnectionProfile() {\n  return getConnectionProfileByHost(storage.session.getTenant());\n}\n\n/**\n * Save connection profile\n */\nexport async function saveConnectionProfile() {\n  const filename = getConnectionProfilesPath();\n  printMessage(`Saving creds in ${filename}...`);\n  let connectionsData = {};\n  let existingData = {};\n  try {\n    fs.statSync(filename);\n    const data = fs.readFileSync(filename, 'utf8');\n    connectionsData = JSON.parse(data);\n    if (connectionsData[storage.session.getTenant()]) {\n      existingData = connectionsData[storage.session.getTenant()];\n      printMessage(\n        `Updating connection profile ${storage.session.getTenant()}`\n      );\n    } else\n      printMessage(`Adding connection profile ${storage.session.getTenant()}`);\n  } catch (e) {\n    printMessage(\n      `Creating connection profiles file ${filename} with ${storage.session.getTenant()}`\n    );\n  }\n  if (storage.session.getUsername())\n    existingData['username'] = storage.session.getUsername();\n  if (storage.session.getPassword())\n    existingData['encodedPassword'] = await dataProtection.encrypt(\n      storage.session.getPassword()\n    );\n  if (storage.session.getLogApiKey())\n    existingData['logApiKey'] = storage.session.getLogApiKey();\n  if (storage.session.getLogApiSecret())\n    existingData['logApiSecret'] = storage.session.getLogApiSecret();\n\n  // advanced settings\n  if (storage.session.getAuthenticationService()) {\n    existingData['authenticationService'] =\n      storage.session.getAuthenticationService();\n    printMessage(\n      'Advanced setting: Authentication Service: ' +\n        storage.session.getAuthenticationService(),\n      'info'\n    );\n  }\n  if (storage.session.getAuthenticationHeaderOverrides()) {\n    existingData['authenticationHeaderOverrides'] =\n      storage.session.getAuthenticationHeaderOverrides();\n    printMessage('Advanced setting: Authentication Header Overrides: ', 'info');\n    printMessage(storage.session.getAuthenticationHeaderOverrides(), 'info');\n  }\n\n  connectionsData[storage.session.getTenant()] = existingData;\n\n  fs.writeFileSync(filename, JSON.stringify(connectionsData, null, 2));\n}\n\n/**\n * Delete connection profile\n * @param {String} host host tenant host url or unique substring\n */\nexport function deleteConnectionProfile(host) {\n  const filename = getConnectionProfilesPath();\n  let connectionsData = {};\n  fs.stat(filename, (err) => {\n    if (err == null) {\n      const data = fs.readFileSync(filename, 'utf8');\n      connectionsData = JSON.parse(data);\n      const profile = findConnectionProfile(connectionsData, host);\n      if (profile) {\n        printMessage(`Deleting connection profile ${profile.tenant}`);\n        delete connectionsData[profile.tenant];\n        fs.writeFileSync(filename, JSON.stringify(connectionsData, null, 2));\n      } else {\n        printMessage(`No connection profile ${host} found`);\n      }\n    } else if (err.code === 'ENOENT') {\n      printMessage(`Connection profile file ${filename} not found`);\n    } else {\n      printMessage(\n        `Error in deleting connection profile: ${err.code}`,\n        'error'\n      );\n    }\n  });\n}\n\nexport async function describeConnectionProfile(host, showSecrets) {\n  const profile = await getConnectionProfileByHost(host);\n  if (profile) {\n    if (!showSecrets) {\n      delete profile.password;\n      delete profile.secret;\n    }\n    if (!profile.key) {\n      delete profile.key;\n      delete profile.secret;\n    }\n    const keyMap = {\n      tenant: 'Host',\n      username: 'Username',\n      password: 'Password',\n      key: 'Log API Key',\n      secret: 'Log API Secret',\n      authenticationService: 'Authentication Service',\n      authenticationHeaderOverrides: 'Authentication Header Overrides',\n    };\n    const table = createObjectTable(profile, keyMap);\n    printMessage(table.toString(), 'data');\n  } else {\n    printMessage(`No connection profile ${host} found`);\n  }\n}\n"]}
+{"version":3,"sources":["../src/ops/ConnectionProfileOps.ts"],"names":[],"mappings":"AAeA;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAMlD;AAoBD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,UAAQ,QA2BlD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,SAkCrC;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,KAAA;;;;;;;;GA0CpD;AAED;;;GAGG;AACH,wBAAsB,oBAAoB;;;;;;;;GAEzC;AAED;;GAEG;AACH,wBAAsB,qBAAqB,kBAoD1C;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,KAAA,QAiC3C;AAED,wBAAsB,yBAAyB,CAAC,IAAI,KAAA,EAAE,WAAW,KAAA,iBAyBhE","file":"ConnectionProfileOps.d.ts","sourcesContent":["import fs from 'fs';\nimport os from 'os';\nimport path from 'path';\nimport storage from '../storage/SessionStorage';\nimport DataProtection from './utils/DataProtection';\nimport { createObjectTable, createTable, printMessage } from './utils/Console';\nimport { FRODO_CONNECTION_PROFILES_PATH_KEY } from '../storage/StaticStorage';\nimport { profile } from 'console';\n\nconst dataProtection = new DataProtection();\n\nconst fileOptions = {\n  indentation: 4,\n};\n\n/**\n * Get connection profiles file name\n * @returns {String} connection profiles file name\n */\nexport function getConnectionProfilesPath(): string {\n  return (\n    storage.session.getConnectionProfilesPath() ||\n    process.env[FRODO_CONNECTION_PROFILES_PATH_KEY] ||\n    `${os.homedir()}/.frodo/.frodorc`\n  );\n}\n\n/**\n * Find connection profile\n * @param {Object} connectionProfiles connection profile object\n * @param {String} host tenant host url or unique substring\n * @returns {Object} connection profile object or null\n */\nfunction findConnectionProfile(connectionProfiles, host) {\n  const profiles = [];\n  for (const tenant in connectionProfiles) {\n    if (tenant.includes(host)) {\n      const foundProfile = connectionProfiles[tenant];\n      foundProfile.tenant = tenant;\n      profiles.push(foundProfile);\n    }\n  }\n  return profiles;\n}\n\n/**\n * List connection profiles\n * @param {boolean} long Long list format with details\n */\nexport function listConnectionProfiles(long = false) {\n  const filename = getConnectionProfilesPath();\n  try {\n    const data = fs.readFileSync(filename, 'utf8');\n    const connectionsData = JSON.parse(data);\n    if (long) {\n      const table = createTable(['Host', 'Username', 'Log API Key']);\n      Object.keys(connectionsData).forEach((c) => {\n        table.push([\n          c,\n          connectionsData[c].username,\n          connectionsData[c].logApiKey,\n        ]);\n      });\n      printMessage(table.toString(), 'data');\n    } else {\n      Object.keys(connectionsData).forEach((c) => {\n        printMessage(`${c}`, 'data');\n      });\n    }\n    printMessage(\n      'Any unique substring of a saved host can be used as the value for host parameter in all commands',\n      'info'\n    );\n  } catch (e) {\n    printMessage(`No connections found in ${filename} (${e.message})`, 'error');\n  }\n}\n\n/**\n * Initialize connection profiles\n */\nexport function initConnectionProfiles() {\n  // create connections.json file if it doesn't exist\n  const filename = getConnectionProfilesPath();\n  const folderName = path.dirname(filename);\n  if (!fs.existsSync(folderName)) {\n    fs.mkdirSync(folderName, { recursive: true });\n    if (!fs.existsSync(filename)) {\n      fs.writeFileSync(\n        filename,\n        JSON.stringify({}, null, fileOptions.indentation)\n      );\n    }\n  }\n  // encrypt the password from clear text to aes-256-GCM\n  else {\n    const data = fs.readFileSync(filename, 'utf8');\n    const connectionsData = JSON.parse(data);\n    let convert = false;\n    Object.keys(connectionsData).forEach(async (conn) => {\n      if (connectionsData[conn].password) {\n        convert = true;\n        connectionsData[conn].encodedPassword = await dataProtection.encrypt(\n          connectionsData[conn].password\n        ); // Buffer.from(connectionsData[conn].password).toString('base64');\n        delete connectionsData[conn].password;\n      }\n    });\n    if (convert) {\n      fs.writeFileSync(\n        filename,\n        JSON.stringify(connectionsData, null, fileOptions.indentation)\n      );\n    }\n  }\n}\n\n/**\n * Get connection profile by host\n * @param {String} host host tenant host url or unique substring\n * @returns {Object} connection profile or null\n */\nexport async function getConnectionProfileByHost(host) {\n  try {\n    const filename = getConnectionProfilesPath();\n    const connectionsData = JSON.parse(fs.readFileSync(filename, 'utf8'));\n    const profiles = findConnectionProfile(connectionsData, host);\n    if (profiles.length == 0) {\n      printMessage(\n        `Profile for ${host} not found. Please specify credentials on command line`,\n        'error'\n      );\n      return null;\n    }\n    if (profiles.length > 1) {\n      printMessage(`Multiple matching profiles found.`, 'error');\n      profiles.forEach((p) => {\n        printMessage(`- ${p.tenant}`, 'error');\n      });\n      printMessage(`Please specify a unique sub-string`, 'error');\n      return null;\n    }\n    return {\n      tenant: profiles[0].tenant,\n      username: profiles[0].username ? profiles[0].username : null,\n      password: profiles[0].encodedPassword\n        ? await dataProtection.decrypt(profiles[0].encodedPassword)\n        : null,\n      key: profiles[0].logApiKey ? profiles[0].logApiKey : null,\n      secret: profiles[0].logApiSecret ? profiles[0].logApiSecret : null,\n      authenticationService: profiles[0].authenticationService\n        ? profiles[0].authenticationService\n        : null,\n      authenticationHeaderOverrides: profiles[0].authenticationHeaderOverrides\n        ? profiles[0].authenticationHeaderOverrides\n        : {},\n    };\n  } catch (e) {\n    printMessage(\n      `Can not read saved connection info, please specify credentials on command line: ${e}`,\n      'error'\n    );\n    return null;\n  }\n}\n\n/**\n * Get connection profile\n * @returns {Object} connection profile or null\n */\nexport async function getConnectionProfile() {\n  return getConnectionProfileByHost(storage.session.getTenant());\n}\n\n/**\n * Save connection profile\n */\nexport async function saveConnectionProfile() {\n  const filename = getConnectionProfilesPath();\n  printMessage(`Saving creds in ${filename}...`);\n  let connectionsData = {};\n  let existingData = {};\n  try {\n    fs.statSync(filename);\n    const data = fs.readFileSync(filename, 'utf8');\n    connectionsData = JSON.parse(data);\n    if (connectionsData[storage.session.getTenant()]) {\n      existingData = connectionsData[storage.session.getTenant()];\n      printMessage(\n        `Updating connection profile ${storage.session.getTenant()}`\n      );\n    } else\n      printMessage(`Adding connection profile ${storage.session.getTenant()}`);\n  } catch (e) {\n    printMessage(\n      `Creating connection profiles file ${filename} with ${storage.session.getTenant()}`\n    );\n  }\n  if (storage.session.getUsername())\n    existingData['username'] = storage.session.getUsername();\n  if (storage.session.getPassword())\n    existingData['encodedPassword'] = await dataProtection.encrypt(\n      storage.session.getPassword()\n    );\n  if (storage.session.getLogApiKey())\n    existingData['logApiKey'] = storage.session.getLogApiKey();\n  if (storage.session.getLogApiSecret())\n    existingData['logApiSecret'] = storage.session.getLogApiSecret();\n\n  // advanced settings\n  if (storage.session.getAuthenticationService()) {\n    existingData['authenticationService'] =\n      storage.session.getAuthenticationService();\n    printMessage(\n      'Advanced setting: Authentication Service: ' +\n        storage.session.getAuthenticationService(),\n      'info'\n    );\n  }\n  if (storage.session.getAuthenticationHeaderOverrides()) {\n    existingData['authenticationHeaderOverrides'] =\n      storage.session.getAuthenticationHeaderOverrides();\n    printMessage('Advanced setting: Authentication Header Overrides: ', 'info');\n    printMessage(storage.session.getAuthenticationHeaderOverrides(), 'info');\n  }\n\n  connectionsData[storage.session.getTenant()] = existingData;\n\n  fs.writeFileSync(filename, JSON.stringify(connectionsData, null, 2));\n}\n\n/**\n * Delete connection profile\n * @param {String} host host tenant host url or unique substring\n */\nexport function deleteConnectionProfile(host) {\n  const filename = getConnectionProfilesPath();\n  let connectionsData = {};\n  fs.stat(filename, (err) => {\n    if (err == null) {\n      const data = fs.readFileSync(filename, 'utf8');\n      connectionsData = JSON.parse(data);\n      const profiles = findConnectionProfile(connectionsData, host);\n      if (profiles.length == 1) {\n        printMessage(`Deleting connection profile ${profiles[0].tenant}`);\n        delete connectionsData[profiles[0].tenant];\n        fs.writeFileSync(filename, JSON.stringify(connectionsData, null, 2));\n      } else {\n        if (profiles.length > 1) {\n          printMessage(`Multiple matching profiles found.`, 'error');\n          profiles.forEach((p) => {\n            printMessage(`- ${p.tenant}`, 'error');\n          });\n          printMessage(`Please specify a unique sub-string`, 'error');\n          return null;\n        } else {\n          printMessage(`No connection profile ${host} found`);\n        }\n      }\n    } else if (err.code === 'ENOENT') {\n      printMessage(`Connection profile file ${filename} not found`);\n    } else {\n      printMessage(\n        `Error in deleting connection profile: ${err.code}`,\n        'error'\n      );\n    }\n  });\n}\n\nexport async function describeConnectionProfile(host, showSecrets) {\n  const profile = await getConnectionProfileByHost(host);\n  if (profile) {\n    if (!showSecrets) {\n      delete profile.password;\n      delete profile.secret;\n    }\n    if (!profile.key) {\n      delete profile.key;\n      delete profile.secret;\n    }\n    const keyMap = {\n      tenant: 'Host',\n      username: 'Username',\n      password: 'Password',\n      key: 'Log API Key',\n      secret: 'Log API Secret',\n      authenticationService: 'Authentication Service',\n      authenticationHeaderOverrides: 'Authentication Header Overrides',\n    };\n    const table = createObjectTable(profile, keyMap);\n    printMessage(table.toString(), 'data');\n  } else {\n    printMessage(`No connection profile ${host} found`);\n  }\n}\n"]}