@stoker-platform/cli 0.5.130 → 0.5.132

package/lib/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@stoker-platform/cli",
-    "version": "0.5.129",
+    "version": "0.5.131",
     "type": "module",
     "license": "SEE LICENSE IN LICENSE.md",
     "main": "./lib/src/main.js",
@@ -24,9 +24,9 @@
         "@google-cloud/secret-manager": "^6.1.2",
         "@google-cloud/storage": "^7.19.0",
         "@inquirer/prompts": "^8.5.2",
-        "@stoker-platform/node-client": "0.5.82",
-        "@stoker-platform/types": "0.5.61",
-        "@stoker-platform/utils": "0.5.73",
+        "@stoker-platform/node-client": "0.5.84",
+        "@stoker-platform/types": "0.5.62",
+        "@stoker-platform/utils": "0.5.75",
         "algoliasearch": "^5.53.0",
         "commander": "^15.0.0",
         "cross-spawn": "^7.0.6",

package/lib/src/main.js

@@ -73,6 +73,7 @@ import { setUserRole } from "./ops/setUserRole.js";
 import { setUserCollection } from "./ops/setUserCollection.js";
 import { setUserDocument } from "./ops/setUserDocument.js";
 import { getUser } from "./ops/getUser.js";
+import { mfaStatus } from "./ops/mfaStatus.js";
 import { getUserRecord } from "./ops/getUserRecord.js";
 import { getUserPermissions } from "./ops/getUserPermissions.js";
 import { auditPermissions } from "./ops/auditPermissions.js";
@@ -421,6 +422,13 @@ program
     .action((options) => {
     getUser(options);
 });
+program
+    .command("mfa-status")
+    .description("list user MFA statuses")
+    .option("-s, --status <status>", "filter by enabled / disabled")
+    .action((options) => {
+    mfaStatus(options);
+});
 program
     .command("get-user-record")
     .description("retrieve a Firestore user record")

package/lib/src/ops/auditRelations.js

@@ -185,6 +185,14 @@ export const auditRelations = async (options) => {
                             }
                         }
                     }
+                    if (Array.isArray(record[`${field.name}_Array`])) {
+                        for (const id of record[`${field.name}_Array`]) {
+                            // eslint-disable-next-line security/detect-object-injection
+                            if (!record[field.name]?.[id]) {
+                                console.log(`${collectionName} ${doc.id} - Field ${field.name}_Array contains ${id} but there is no matching ${field.name} map entry`);
+                            }
+                        }
+                    }
                 }
             }
         }

package/lib/src/ops/mfaStatus.js

@@ -0,0 +1,57 @@
+import { initializeFirebase } from "@stoker-platform/node-client";
+import { getAuth } from "firebase-admin/auth";
+import { join } from "path";
+import { pathToFileURL } from "url";
+const roleRequiresMfa = (enableMultiFactorAuth, role) => {
+    if (enableMultiFactorAuth === true)
+        return true;
+    if (enableMultiFactorAuth === false)
+        return false;
+    return !!role && enableMultiFactorAuth.includes(role);
+};
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export const mfaStatus = async (options) => {
+    const statusFilter = options.status;
+    if (statusFilter && statusFilter !== "enabled" && statusFilter !== "disabled") {
+        console.error('Invalid status. Use "enabled" or "disabled".');
+        process.exit(1);
+    }
+    const path = join(process.cwd(), "lib", "main.js");
+    const url = pathToFileURL(path).href;
+    const globalConfigFile = await import(url);
+    const globalConfig = globalConfigFile.default({ sdk: "node" });
+    const enableMultiFactorAuth = globalConfig.auth.enableMultiFactorAuth;
+    await initializeFirebase();
+    const auth = getAuth();
+    const results = [];
+    let pageToken;
+    do {
+        const list = await auth.listUsers(1000, pageToken);
+        for (const user of list.users) {
+            const role = user.customClaims?.role;
+            if (!roleRequiresMfa(enableMultiFactorAuth, role))
+                continue;
+            const factors = user.multiFactor?.enrolledFactors ?? [];
+            const mfaEnabled = factors.length > 0;
+            if (statusFilter === "enabled" && !mfaEnabled)
+                continue;
+            if (statusFilter === "disabled" && mfaEnabled)
+                continue;
+            results.push({
+                uid: user.uid,
+                email: user.email ?? null,
+                mfaEnabled,
+                enrolledFactors: factors.map((factor) => factor.factorId),
+            });
+        }
+        pageToken = list.pageToken;
+    } while (pageToken);
+    const lines = results.map((user) => {
+        const email = user.email ?? "(no email)";
+        const status = user.mfaEnabled ? "enabled" : "DISABLED";
+        const factors = user.enrolledFactors.length > 0 ? ` [${user.enrolledFactors.join(", ")}]` : "";
+        return `${email} (${user.uid}): ${status}${factors}`;
+    });
+    console.log(lines.join("\n"));
+    process.exit();
+};

package/lib/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/main.ts","../src/data/exporttobigquery.ts","../src/data/seeddata.ts","../src/deploy/deployproject.ts","../src/deploy/cloud-functions/getfunctionsdata.ts","../src/deploy/firestore-export/exportfirestoredata.ts","../src/deploy/firestore-ttl/deployttls.ts","../src/deploy/live-update/liveupdate.ts","../src/deploy/maintenance/activatemaintenancemode.ts","../src/deploy/maintenance/disablemaintenancemode.ts","../src/deploy/maintenance/setdeploymentstatus.ts","../src/deploy/rules-indexes/generatefirestoreindexes.ts","../src/deploy/rules-indexes/generatefirestorerules.ts","../src/deploy/rules-indexes/generatestoragerules.ts","../src/deploy/schema/applyschema.ts","../src/deploy/schema/generateschema.ts","../src/deploy/schema/persistschema.ts","../src/deploy/schema/updateliveschema.ts","../src/lint/lintschema.ts","../src/lint/securityreport.ts","../src/migration/migrateall.ts","../src/migration/firestore/migratefirestore.ts","../src/migration/firestore/operations/deletefield.ts","../src/ops/auditdenormalized.ts","../src/ops/auditpermissions.ts","../src/ops/auditrelations.ts","../src/ops/explainpreloadqueries.ts","../src/ops/getuser.ts","../src/ops/getuserpermissions.ts","../src/ops/getuserrecord.ts","../src/ops/listprojects.ts","../src/ops/setusercollection.ts","../src/ops/setuserdocument.ts","../src/ops/setuserrole.ts","../src/project/addproject.ts","../src/project/addrecord.ts","../src/project/addrecordprompt.ts","../src/project/addtenant.ts","../src/project/buildwebapp.ts","../src/project/customdomain.ts","../src/project/deleteproject.ts","../src/project/deleterecord.ts","../src/project/deletetenant.ts","../src/project/getone.ts","../src/project/getsome.ts","../src/project/initproject.ts","../src/project/prepareemulatordata.ts","../src/project/setproject.ts","../src/project/startemulators.ts","../src/project/updaterecord.ts","../src/types/generatetypes.ts"],"version":"6.0.3"}
+{"root":["../src/main.ts","../src/data/exporttobigquery.ts","../src/data/seeddata.ts","../src/deploy/deployproject.ts","../src/deploy/cloud-functions/getfunctionsdata.ts","../src/deploy/firestore-export/exportfirestoredata.ts","../src/deploy/firestore-ttl/deployttls.ts","../src/deploy/live-update/liveupdate.ts","../src/deploy/maintenance/activatemaintenancemode.ts","../src/deploy/maintenance/disablemaintenancemode.ts","../src/deploy/maintenance/setdeploymentstatus.ts","../src/deploy/rules-indexes/generatefirestoreindexes.ts","../src/deploy/rules-indexes/generatefirestorerules.ts","../src/deploy/rules-indexes/generatestoragerules.ts","../src/deploy/schema/applyschema.ts","../src/deploy/schema/generateschema.ts","../src/deploy/schema/persistschema.ts","../src/deploy/schema/updateliveschema.ts","../src/lint/lintschema.ts","../src/lint/securityreport.ts","../src/migration/migrateall.ts","../src/migration/firestore/migratefirestore.ts","../src/migration/firestore/operations/deletefield.ts","../src/ops/auditdenormalized.ts","../src/ops/auditpermissions.ts","../src/ops/auditrelations.ts","../src/ops/explainpreloadqueries.ts","../src/ops/getuser.ts","../src/ops/getuserpermissions.ts","../src/ops/getuserrecord.ts","../src/ops/listprojects.ts","../src/ops/mfastatus.ts","../src/ops/setusercollection.ts","../src/ops/setuserdocument.ts","../src/ops/setuserrole.ts","../src/project/addproject.ts","../src/project/addrecord.ts","../src/project/addrecordprompt.ts","../src/project/addtenant.ts","../src/project/buildwebapp.ts","../src/project/customdomain.ts","../src/project/deleteproject.ts","../src/project/deleterecord.ts","../src/project/deletetenant.ts","../src/project/getone.ts","../src/project/getsome.ts","../src/project/initproject.ts","../src/project/prepareemulatordata.ts","../src/project/setproject.ts","../src/project/startemulators.ts","../src/project/updaterecord.ts","../src/types/generatetypes.ts"],"version":"6.0.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@stoker-platform/cli",
-    "version": "0.5.130",
+    "version": "0.5.132",
     "type": "module",
     "license": "SEE LICENSE IN LICENSE.md",
     "main": "./lib/src/main.js",
@@ -24,9 +24,9 @@
         "@google-cloud/secret-manager": "^6.1.2",
         "@google-cloud/storage": "^7.19.0",
         "@inquirer/prompts": "^8.5.2",
-        "@stoker-platform/node-client": "0.5.83",
+        "@stoker-platform/node-client": "0.5.84",
         "@stoker-platform/types": "0.5.62",
-        "@stoker-platform/utils": "0.5.74",
+        "@stoker-platform/utils": "0.5.75",
         "algoliasearch": "^5.53.0",
         "commander": "^15.0.0",
         "cross-spawn": "^7.0.6",