@solidxai/core 0.1.10-beta.0 → 0.1.10-beta.11

package/src/seeders/seed-data/solid-core-metadata.json

@@ -1761,6 +1761,19 @@
             "encrypt": false,
             "isSystem": true
           },
+          {
+            "name": "failedLoginAttempts",
+            "displayName": "Failed Login Attempts",
+            "type": "int",
+            "ormType": "integer",
+            "defaultValue": "0",
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
           {
             "name": "profilePicture",
             "displayName": "Profile Picture",
@@ -5919,6 +5932,214 @@
             "isSystem": true
           }
         ]
+      },
+      {
+        "singularName": "mcpAuditLog",
+        "pluralName": "mcpAuditLogs",
+        "displayName": "MCP Audit Log",
+        "description": "Audit trail of MCP requests handled by the server",
+        "dataSource": "default",
+        "dataSourceType": "postgres",
+        "tableName": "ss_mcp_audit_log",
+        "isChild": false,
+        "isLegacyTable": true,
+        "isLegacyTableWithId": true,
+        "enableAuditTracking": false,
+        "enableSoftDelete": false,
+        "draftPublishWorkflow": false,
+        "internationalisation": false,
+        "isSystem": true,
+        "userKeyFieldUserKey": "id",
+        "fields": [
+          {
+            "name": "userId",
+            "displayName": "User ID",
+            "type": "int",
+            "columnName": "user_id",
+            "required": false,
+            "unique": false,
+            "index": true,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "apiKeyId",
+            "displayName": "API Key ID",
+            "type": "int",
+            "columnName": "api_key_id",
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "username",
+            "displayName": "Username",
+            "type": "shortText",
+            "columnName": "username",
+            "length": 128,
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "transport",
+            "displayName": "Transport",
+            "type": "shortText",
+            "columnName": "transport",
+            "length": 32,
+            "required": true,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "mcpSessionId",
+            "displayName": "MCP Session ID",
+            "type": "shortText",
+            "columnName": "mcp_session_id",
+            "length": 64,
+            "required": false,
+            "unique": false,
+            "index": true,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "clientAddr",
+            "displayName": "Client Address",
+            "type": "shortText",
+            "columnName": "client_addr",
+            "length": 64,
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "method",
+            "displayName": "Method",
+            "type": "shortText",
+            "columnName": "method",
+            "length": 64,
+            "required": true,
+            "unique": false,
+            "index": true,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "requestId",
+            "displayName": "Request ID",
+            "type": "shortText",
+            "columnName": "request_id",
+            "length": 64,
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "toolName",
+            "displayName": "Tool Name",
+            "type": "shortText",
+            "columnName": "tool_name",
+            "length": 128,
+            "required": false,
+            "unique": false,
+            "index": true,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "requestParams",
+            "displayName": "Request Params",
+            "type": "longText",
+            "columnName": "request_params",
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "status",
+            "displayName": "Status",
+            "type": "shortText",
+            "columnName": "status",
+            "length": 16,
+            "required": true,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "responseResult",
+            "displayName": "Response Result",
+            "type": "longText",
+            "columnName": "response_result",
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "errorCode",
+            "displayName": "Error Code",
+            "type": "int",
+            "columnName": "error_code",
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "errorMessage",
+            "displayName": "Error Message",
+            "type": "longText",
+            "columnName": "error_message",
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          },
+          {
+            "name": "durationMs",
+            "displayName": "Duration (ms)",
+            "type": "decimal",
+            "columnName": "duration_ms",
+            "required": false,
+            "unique": false,
+            "index": false,
+            "private": false,
+            "encrypt": false,
+            "isSystem": true
+          }
+        ]
       }
     ]
   },
@@ -5985,6 +6206,8 @@
         "AgentSessionController.findOne",
         "AgentEventController.findMany",
         "AgentEventController.findOne",
+        "McpAuditLogController.findMany",
+        "McpAuditLogController.findOne",
         "mcp:invoke",
         "agent:invoke"
       ]
@@ -6594,6 +6817,32 @@
       "viewUserKey": "agentEvent-form-view",
       "moduleUserKey": "solid-core",
       "modelUserKey": "agentEvent"
+    },
+    {
+      "displayName": "MCP Audit Log List Action",
+      "name": "mcpAuditLog-list-action",
+      "type": "solid",
+      "domain": "",
+      "context": "",
+      "customComponent": "",
+      "customIsModal": true,
+      "serverEndpoint": "",
+      "viewUserKey": "mcpAuditLog-list-view",
+      "moduleUserKey": "solid-core",
+      "modelUserKey": "mcpAuditLog"
+    },
+    {
+      "displayName": "MCP Audit Log Form Action",
+      "name": "mcpAuditLog-form-action",
+      "type": "solid",
+      "domain": "",
+      "context": "",
+      "customComponent": "",
+      "customIsModal": true,
+      "serverEndpoint": "",
+      "viewUserKey": "mcpAuditLog-form-view",
+      "moduleUserKey": "solid-core",
+      "modelUserKey": "mcpAuditLog"
     }
   ],
   "menus": [
@@ -6950,6 +7199,14 @@
       "actionUserKey": "agentEvent-list-action",
       "moduleUserKey": "solid-core",
       "parentMenuItemUserKey": "agent-menu-item"
+    },
+    {
+      "displayName": "MCP Audit Log",
+      "name": "mcpAuditLog-menu-item",
+      "sequenceNumber": 3,
+      "actionUserKey": "mcpAuditLog-list-action",
+      "moduleUserKey": "solid-core",
+      "parentMenuItemUserKey": "agent-menu-item"
     }
   ],
   "views": [
@@ -9841,6 +10098,14 @@
               "name": "active",
               "isSearchable": true
             }
+          },
+          {
+            "type": "field",
+            "attrs": {
+              "label" : "Blocked / Unblocked",
+              "name": "failedLoginAttempts",
+              "viewWidget": "SolidUserBlockedStatusListWidget"
+            }
           }
         ]
       }
@@ -11552,7 +11817,7 @@
           "enableGlobalSearch": true,
           "create": true,
           "edit": true,
-          "delete": false
+          "delete": true
         },
         "children": [
           {
@@ -11570,7 +11835,18 @@
               "name": "name",
               "label": "Name",
               "sortable": true,
-              "filterable": true
+              "filterable": true,
+              "isSearchable": true
+            }
+          },
+          {
+            "type": "field",
+            "attrs": {
+              "name": "description",
+              "label": "Description",
+              "sortable": true,
+              "filterable": true,
+              "isSearchable": true
             }
           }
         ]
@@ -13862,6 +14138,108 @@
           }
         ]
       }
+    },
+    {
+      "name": "mcpAuditLog-list-view",
+      "displayName": "MCP Audit Logs",
+      "type": "list",
+      "context": "{}",
+      "moduleUserKey": "solid-core",
+      "modelUserKey": "mcpAuditLog",
+      "layout": {
+        "type": "list",
+        "attrs": {
+          "pagination": true,
+          "pageSizeOptions": [10, 25, 50],
+          "enableGlobalSearch": true,
+          "create": true,
+          "edit": true,
+          "delete": false
+        },
+        "children": [
+          { "type": "field", "attrs": { "name": "id" } },
+          { "type": "field", "attrs": { "name": "createdAt" } },
+          { "type": "field", "attrs": { "name": "method", "isSearchable": true } },
+          { "type": "field", "attrs": { "name": "toolName", "isSearchable": true } },
+          { "type": "field", "attrs": { "name": "status", "isSearchable": true } },
+          { "type": "field", "attrs": { "name": "username", "isSearchable": true } },
+          { "type": "field", "attrs": { "name": "userId" } },
+          { "type": "field", "attrs": { "name": "transport", "isSearchable": true } },
+          { "type": "field", "attrs": { "name": "mcpSessionId", "isSearchable": true } },
+          { "type": "field", "attrs": { "name": "clientAddr", "isSearchable": true } },
+          { "type": "field", "attrs": { "name": "durationMs" } },
+          { "type": "field", "attrs": { "name": "errorCode" } }
+        ]
+      }
+    },
+    {
+      "name": "mcpAuditLog-form-view",
+      "displayName": "MCP Audit Log",
+      "type": "form",
+      "context": "{}",
+      "moduleUserKey": "solid-core",
+      "modelUserKey": "mcpAuditLog",
+      "layout": {
+        "type": "form",
+        "attrs": {
+          "name": "form-1",
+          "label": "MCP Audit Log",
+          "className": "grid"
+        },
+        "children": [
+          {
+            "type": "sheet",
+            "attrs": { "name": "sheet-1" },
+            "children": [
+              {
+                "type": "row",
+                "attrs": { "name": "row-1" },
+                "children": [
+                  {
+                    "type": "column",
+                    "attrs": { "name": "col-1", "label": "", "className": "col-12 sm:col-12 md:col-6 lg:col-6" },
+                    "children": [
+                      { "type": "field", "attrs": { "name": "method" } },
+                      { "type": "field", "attrs": { "name": "toolName" } },
+                      { "type": "field", "attrs": { "name": "status" } },
+                      { "type": "field", "attrs": { "name": "transport" } },
+                      { "type": "field", "attrs": { "name": "mcpSessionId" } },
+                      { "type": "field", "attrs": { "name": "requestId" } }
+                    ]
+                  },
+                  {
+                    "type": "column",
+                    "attrs": { "name": "col-2", "label": "", "className": "col-12 sm:col-12 md:col-6 lg:col-6" },
+                    "children": [
+                      { "type": "field", "attrs": { "name": "userId" } },
+                      { "type": "field", "attrs": { "name": "apiKeyId" } },
+                      { "type": "field", "attrs": { "name": "username" } },
+                      { "type": "field", "attrs": { "name": "clientAddr" } },
+                      { "type": "field", "attrs": { "name": "durationMs" } },
+                      { "type": "field", "attrs": { "name": "errorCode" } }
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "row",
+                "attrs": { "name": "row-2" },
+                "children": [
+                  {
+                    "type": "column",
+                    "attrs": { "name": "col-payload", "label": "", "className": "col-12" },
+                    "children": [
+                      { "type": "field", "attrs": { "name": "requestParams", "viewWidget": "SolidJsonFormViewWidget" } },
+                      { "type": "field", "attrs": { "name": "responseResult", "viewWidget": "SolidJsonFormViewWidget" } },
+                      { "type": "field", "attrs": { "name": "errorMessage" } }
+                    ]
+                  }
+                ]
+              }
+            ]
+          }
+        ]
+      }
     }
   ],
   "emailTemplates": [

package/src/services/1.js

@@ -0,0 +1,6 @@
+1. Do i need to create a storeStreams method for aws service too?
+    - Handle later
+2. queues handling -> if queues is enabled by default, i.e triggerExport(exportTransactionEntity.id).
+    - startExport should either return the data or return the transaction id
+3. How to handle scenarios wherein, nested related exist.(do i need to only get the userkey)
+    - show the userKey

package/src/services/authentication.service.ts

@@ -164,6 +164,8 @@ export class AuthenticationService {
     "mobile",
     "roles",
     "forcePasswordChange",
+    "isAllowedToGenerateApiKeys",
+    "failedLoginAttempts",
   ]);
 
   async signUp(
@@ -191,22 +193,11 @@ export class AuthenticationService {
     return this.performSignUp(signUpDto, new User(), this.userRepository);
   }
 
-  private async performSignUp<T extends User>(
-    signUpDto: SignUpDto,
-    entity: T,
-    repo: Repository<T>,
-  ): Promise<T> {
+  private async performSignUp<T extends User>(signUpDto: SignUpDto, entity: T, repo: Repository<T>): Promise<T> {
     try {
-      const onForcePasswordChange =
-        this.settingService.getConfigValue<SolidCoreSetting>(
-          "forceChangePasswordOnFirstLogin",
-        );
-      const activateUserOnRegistration =
-        this.settingService.getConfigValue<SolidCoreSetting>(
-          "activateUserOnRegistration",
-        );
-      const defaultRole =
-        this.settingService.getConfigValue<SolidCoreSetting>("defaultRole");
+      const onForcePasswordChange = this.settingService.getConfigValue<SolidCoreSetting>("forceChangePasswordOnFirstLogin");
+      const activateUserOnRegistration = this.settingService.getConfigValue<SolidCoreSetting>("activateUserOnRegistration");
+      const defaultRole = this.settingService.getConfigValue<SolidCoreSetting>("defaultRole");
 
       var { user, pwd, autoGeneratedPwd } = await this.populateForSignup<T>(
         entity,
@@ -220,17 +211,14 @@ export class AuthenticationService {
       }
       const savedUser = await repo.save(user);
       const userRoles = signUpDto.roles ?? [];
-      if (
-        (signUpDto.roles?.length ?? 0) === 0 &&
-        signUpDto.username !== "sa" &&
-        defaultRole
-      ) {
+      if ((signUpDto.roles?.length ?? 0) === 0 && signUpDto.username !== "sa" && defaultRole) {
         userRoles.push(defaultRole);
       }
       await this.handlePostSignup(savedUser, userRoles, pwd, autoGeneratedPwd);
 
       return savedUser;
-    } catch (err) {
+    }
+    catch (err: any) {
       const pgUniqueViolationErrorCode = "23505";
       if (err.code === pgUniqueViolationErrorCode) {
         throw new ConflictException(
@@ -485,7 +473,7 @@ export class AuthenticationService {
         validationSource,
       );
       await this.notifyUserOnOtpInitiateRegistration(user, validationSource);
-    } catch (err) {
+    } catch (err: any) {
       if (err.code === "23505") {
         throw new ConflictException(ERROR_MESSAGES.USER_ALREADY_EXISTS);
       }
@@ -1306,7 +1294,7 @@ export class AuthenticationService {
     // Assuming all users do not have mobile as mandatory.
     if (
       forgotPasswordSendVerificationTokenOn ==
-        ForgotPasswordSendVerificationTokenOn.MOBILE &&
+      ForgotPasswordSendVerificationTokenOn.MOBILE &&
       user.mobile
     ) {
       const smsService = this.smsFactory.getSmsService();
@@ -1336,11 +1324,11 @@ export class AuthenticationService {
         confirmForgotPasswordDto.verificationToken,
       );
       if (!user)
-        throw new UnauthorizedException(ERROR_MESSAGES.INVALID_CREDENTIALS);
+        throw new UnauthorizedException("Invalid verification token");
       if (user.lastLoginProvider !== "local")
         throw new UnauthorizedException(ERROR_MESSAGES.INVALID_CREDENTIALS);
       if (!user.active)
-        throw new UnauthorizedException(ERROR_MESSAGES.INVALID_CREDENTIALS);
+        throw new UnauthorizedException("User is inactive");
 
       // 1) Atomically consume the token (only one request can succeed)
       const { affected } = await m
@@ -1432,7 +1420,7 @@ export class AuthenticationService {
     // Assuming all users do not have mobile as mandatory.
     if (
       forgotPasswordSendVerificationTokenOn ==
-        ForgotPasswordSendVerificationTokenOn.MOBILE &&
+      ForgotPasswordSendVerificationTokenOn.MOBILE &&
       user.mobile
     ) {
       const smsService = this.smsFactory.getSmsService();
@@ -1548,7 +1536,7 @@ export class AuthenticationService {
         accessToken: await this.generateAccessToken(user),
         refreshToken: currentRefreshToken,
       };
-    } catch (err) {
+    } catch (err: any) {
       if (err instanceof InvalidatedRefreshTokenError) {
         // Take action: notify user that his refresh token might have been stolen?
         throw new UnauthorizedException(ERROR_MESSAGES.ACCESS_DENIED);
@@ -1599,7 +1587,7 @@ export class AuthenticationService {
       } else {
         throw new UnauthorizedException(ERROR_MESSAGES.INVALID_USER_PROFILE);
       }
-    } catch (error) {
+    } catch (error: any) {
       throw new UnauthorizedException(
         ERROR_MESSAGES.GOOGLE_OAUTH_PROFILE_FETCH_FAILED,
       );
@@ -1668,7 +1656,7 @@ export class AuthenticationService {
       } else {
         throw new UnauthorizedException(ERROR_MESSAGES.INVALID_USER_PROFILE);
       }
-    } catch (error) {
+    } catch (error: any) {
       if (error instanceof UnauthorizedException) {
         throw error;
       }
@@ -1733,7 +1721,7 @@ export class AuthenticationService {
       } else {
         throw new UnauthorizedException(ERROR_MESSAGES.INVALID_USER_PROFILE);
       }
-    } catch (error) {
+    } catch (error: any) {
       throw new UnauthorizedException("Microsoft OAuth profile fetch failed");
     }
   }
@@ -1880,7 +1868,7 @@ export class AuthenticationService {
       await this.userActivityHistoryService.logEvent("logout", user);
 
       return { message: SUCCESS_MESSAGES.LOGOUT_SUCCESS };
-    } catch (err) {
+    } catch (err: any) {
       throw err instanceof UnauthorizedException ||
         err instanceof InternalServerErrorException
         ? err