@solidxai/core 0.1.10-beta.26 → 0.1.10-beta.28

package/dist/passport-strategies/microsoft-active-directory-oauth.strategy.js

@@ -0,0 +1,67 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var MicrosoftActiveDirectoryOAuthStrategy_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MicrosoftActiveDirectoryOAuthStrategy = exports.MicrosoftActiveDirectoryOauthGuard = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_microsoft_1 = require("passport-microsoft");
+const microsoft_active_directory_oauth_helper_1 = require("../helpers/microsoft-active-directory-oauth.helper");
+const uuid_1 = require("uuid");
+const user_service_1 = require("../services/user.service");
+const DUMMY_CLIENT_ID = 'DUMMY_CLIENT_ID';
+const DUMMY_CLIENT_SECRET = 'DUMMY_CLIENT_SECRET';
+const DUMMY_CALLBACK_URL = 'DUMMY_CALLBACK_URL';
+let MicrosoftActiveDirectoryOauthGuard = class MicrosoftActiveDirectoryOauthGuard extends (0, passport_1.AuthGuard)('microsoft-active-directory') {
+};
+exports.MicrosoftActiveDirectoryOauthGuard = MicrosoftActiveDirectoryOauthGuard;
+exports.MicrosoftActiveDirectoryOauthGuard = MicrosoftActiveDirectoryOauthGuard = __decorate([
+    (0, common_1.Injectable)()
+], MicrosoftActiveDirectoryOauthGuard);
+let MicrosoftActiveDirectoryOAuthStrategy = MicrosoftActiveDirectoryOAuthStrategy_1 = class MicrosoftActiveDirectoryOAuthStrategy extends (0, passport_1.PassportStrategy)(passport_microsoft_1.Strategy, 'microsoft-active-directory') {
+    constructor(userService) {
+        const clientID = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CLIENT_ID || DUMMY_CLIENT_ID;
+        const clientSecret = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CLIENT_SECRET || DUMMY_CLIENT_SECRET;
+        const tenant = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_TENANT_ID || microsoft_active_directory_oauth_helper_1.DEFAULT_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_TENANT;
+        const callbackURL = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL || DUMMY_CALLBACK_URL;
+        const redirectURL = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_REDIRECT_URL;
+        super({ clientID, clientSecret, callbackURL, tenant, scope: microsoft_active_directory_oauth_helper_1.MICROSOFT_ACTIVE_DIRECTORY_OAUTH_SCOPES, addUPNAsEmail: true });
+        this.userService = userService;
+        this.logger = new common_1.Logger(MicrosoftActiveDirectoryOAuthStrategy_1.name);
+        const microsoftActiveDirectoryOauth = { clientID, clientSecret, tenant, callbackURL, redirectURL };
+        if (!(0, microsoft_active_directory_oauth_helper_1.isMicrosoftActiveDirectoryOAuthConfigured)(microsoftActiveDirectoryOauth)) {
+            this.logger.debug('Microsoft Active Directory OAuth strategy is not configured');
+        }
+    }
+    async validate(_accessToken, _refreshToken, profile, done) {
+        const providerId = (0, microsoft_active_directory_oauth_helper_1.getMicrosoftActiveDirectoryOAuthProfileId)(profile);
+        if (!providerId) {
+            return done(new common_1.UnauthorizedException('Microsoft Active Directory OAuth profile is missing an id'), false);
+        }
+        const loginAccessCode = (0, uuid_1.v4)();
+        const user = {
+            provider: 'microsoftActiveDirectory',
+            providerId,
+            email: (0, microsoft_active_directory_oauth_helper_1.getMicrosoftActiveDirectoryOAuthEmail)(profile),
+            name: (0, microsoft_active_directory_oauth_helper_1.getMicrosoftActiveDirectoryOAuthDisplayName)(profile) || (0, microsoft_active_directory_oauth_helper_1.getMicrosoftActiveDirectoryOAuthEmail)(profile) || 'Microsoft Active Directory User',
+            picture: (0, microsoft_active_directory_oauth_helper_1.getMicrosoftActiveDirectoryOAuthPicture)(profile),
+            accessCode: loginAccessCode,
+        };
+        await this.userService.resolveUserOnOauthMicrosoftActiveDirectory({ ...user, accessToken: _accessToken, refreshToken: null });
+        done(null, user);
+    }
+};
+exports.MicrosoftActiveDirectoryOAuthStrategy = MicrosoftActiveDirectoryOAuthStrategy;
+exports.MicrosoftActiveDirectoryOAuthStrategy = MicrosoftActiveDirectoryOAuthStrategy = MicrosoftActiveDirectoryOAuthStrategy_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_service_1.UserService])
+], MicrosoftActiveDirectoryOAuthStrategy);
+//# sourceMappingURL=microsoft-active-directory-oauth.strategy.js.map

package/dist/passport-strategies/microsoft-active-directory-oauth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"microsoft-active-directory-oauth.strategy.js","sourceRoot":"","sources":["../../src/passport-strategies/microsoft-active-directory-oauth.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,+CAA+D;AAC/D,2DAA8C;AAC9C,gHAA6Z;AAC7Z,+BAAkC;AAClC,2DAAuD;AAEvD,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAClD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAGzC,IAAM,kCAAkC,GAAxC,MAAM,kCAAmC,SAAQ,IAAA,oBAAS,EAAC,4BAA4B,CAAC;CAAI,CAAA;AAAtF,gFAAkC;6CAAlC,kCAAkC;IAD9C,IAAA,mBAAU,GAAE;GACA,kCAAkC,CAAoD;AAI5F,IAAM,qCAAqC,6CAA3C,MAAM,qCAAsC,SAAQ,IAAA,2BAAgB,EAAC,6BAAQ,EAAE,4BAA4B,CAAC;IAEjH,YAA6B,WAAwB;QAGnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,8CAA8C,IAAI,eAAe,CAAC;QAC/F,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kDAAkD,IAAI,mBAAmB,CAAC;QAC3G,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,8CAA8C,IAAI,yFAA+C,CAAC;QAC7H,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iDAAiD,IAAI,kBAAkB,CAAC;QACxG,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC;QAElF,KAAK,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,iFAAuC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QATjG,gBAAW,GAAX,WAAW,CAAa;QADpC,WAAM,GAAG,IAAI,eAAM,CAAC,uCAAqC,CAAC,IAAI,CAAC,CAAC;QAY/E,MAAM,6BAA6B,GAA8C,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAA;QAC7I,IAAI,CAAC,IAAA,mFAAyC,EAAC,6BAA6B,CAAC,EAAE,CAAC;YAC9E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,aAAqB,EAAE,OAAY,EAAE,IAAS;QACjF,MAAM,UAAU,GAAG,IAAA,mFAAyC,EAAC,OAAO,CAAC,CAAC;QAEtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,IAAI,8BAAqB,CAAC,2DAA2D,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7G,CAAC;QAGD,MAAM,eAAe,GAAW,IAAA,SAAI,GAAE,CAAC;QAEvC,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,0BAA0B;YACpC,UAAU;YACV,KAAK,EAAE,IAAA,+EAAqC,EAAC,OAAO,CAAC;YACrD,IAAI,EAAE,IAAA,qFAA2C,EAAC,OAAO,CAAC,IAAI,IAAA,+EAAqC,EAAC,OAAO,CAAC,IAAI,iCAAiC;YACjJ,OAAO,EAAE,IAAA,iFAAuC,EAAC,OAAO,CAAC;YACzD,UAAU,EAAE,eAAe;SAC5B,CAAC;QAKF,MAAM,IAAI,CAAC,WAAW,CAAC,0CAA0C,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9H,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC;CAEF,CAAA;AA9CY,sFAAqC;gDAArC,qCAAqC;IADjD,IAAA,mBAAU,GAAE;qCAG+B,0BAAW;GAF1C,qCAAqC,CA8CjD","sourcesContent":["import { Injectable, Logger, UnauthorizedException } from '@nestjs/common';\nimport { AuthGuard, PassportStrategy } from '@nestjs/passport';\nimport { Strategy } from 'passport-microsoft';\nimport { DEFAULT_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_TENANT, MICROSOFT_ACTIVE_DIRECTORY_OAUTH_SCOPES, MicrosoftActiveDirectoryAuthConfiguration, getMicrosoftActiveDirectoryOAuthDisplayName, getMicrosoftActiveDirectoryOAuthEmail, getMicrosoftActiveDirectoryOAuthPicture, getMicrosoftActiveDirectoryOAuthProfileId, isMicrosoftActiveDirectoryOAuthConfigured } from 'src/helpers/microsoft-active-directory-oauth.helper';\nimport { v4 as uuid } from 'uuid';\nimport { UserService } from '../services/user.service';\n\nconst DUMMY_CLIENT_ID = 'DUMMY_CLIENT_ID';\nconst DUMMY_CLIENT_SECRET = 'DUMMY_CLIENT_SECRET';\nconst DUMMY_CALLBACK_URL = 'DUMMY_CALLBACK_URL';\n\n@Injectable()\nexport class MicrosoftActiveDirectoryOauthGuard extends AuthGuard('microsoft-active-directory') { }\n\n\n@Injectable()\nexport class MicrosoftActiveDirectoryOAuthStrategy extends PassportStrategy(Strategy, 'microsoft-active-directory') {\n  private readonly logger = new Logger(MicrosoftActiveDirectoryOAuthStrategy.name);\n  constructor(private readonly userService: UserService) {\n    // TODO: Have added default dummy values for the configuration, since the configuration is not mandatory.\n    // Perhaps a cleaner way needs to be figured out\n    const clientID = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CLIENT_ID || DUMMY_CLIENT_ID;\n    const clientSecret = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CLIENT_SECRET || DUMMY_CLIENT_SECRET;\n    const tenant = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_TENANT_ID || DEFAULT_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_TENANT;\n    const callbackURL = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_CALLBACK_URL || DUMMY_CALLBACK_URL;\n    const redirectURL = process.env.IAM_MICROSOFT_ACTIVE_DIRECTORY_OAUTH_REDIRECT_URL;\n\n    super({ clientID, clientSecret, callbackURL, tenant, scope: MICROSOFT_ACTIVE_DIRECTORY_OAUTH_SCOPES, addUPNAsEmail: true });\n\n    const microsoftActiveDirectoryOauth: MicrosoftActiveDirectoryAuthConfiguration = { clientID, clientSecret, tenant, callbackURL, redirectURL }\n    if (!isMicrosoftActiveDirectoryOAuthConfigured(microsoftActiveDirectoryOauth)) {\n      this.logger.debug('Microsoft Active Directory OAuth strategy is not configured');\n    }\n  }\n\n  async validate(_accessToken: string, _refreshToken: string, profile: any, done: any): Promise<any> {\n    const providerId = getMicrosoftActiveDirectoryOAuthProfileId(profile);\n\n    if (!providerId) {\n      return done(new UnauthorizedException('Microsoft Active Directory OAuth profile is missing an id'), false);\n    }\n\n    // generate a unique access code. \n    const loginAccessCode: string = uuid();\n\n    const user = {\n      provider: 'microsoftActiveDirectory',\n      providerId,\n      email: getMicrosoftActiveDirectoryOAuthEmail(profile),\n      name: getMicrosoftActiveDirectoryOAuthDisplayName(profile) || getMicrosoftActiveDirectoryOAuthEmail(profile) || 'Microsoft Active Directory User',\n      picture: getMicrosoftActiveDirectoryOAuthPicture(profile),\n      accessCode: loginAccessCode,\n    };\n\n    // store the access code and the access token in the database. \n    // while doing this we also check if the user exists in the database if not we create one. \n    // if exists then we update the user and store the specified access code & token.\n    await this.userService.resolveUserOnOauthMicrosoftActiveDirectory({ ...user, accessToken: _accessToken, refreshToken: null });\n\n    done(null, user);\n  }\n\n}\n"]}