@studyportals/cors 2.3.0-beta.1 → 2.3.0-beta.2

package/bin/index.d.ts

@@ -0,0 +1,2 @@
+export * from './src/domain';
+export * from './src/implementations';

package/bin/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./src/domain"), exports);
+__exportStar(require("./src/implementations"), exports);

package/bin/src/domain/allowed-domain-reg-ex-list.d.ts

@@ -0,0 +1,10 @@
+export declare const AllowedDomainRegExList: {
+    0: {
+        0: RegExp[];
+        1: RegExp[];
+    };
+    1: {
+        0: RegExp[];
+        1: RegExp[];
+    };
+};

package/bin/src/domain/allowed-domain-reg-ex-list.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AllowedDomainRegExList = void 0;
+const environment_1 = require("./enums/environment");
+const scope_1 = require("./enums/scope");
+exports.AllowedDomainRegExList = {
+    [scope_1.Scope.Student]: {
+        [environment_1.Environment.Production]: [
+            /^https?:\/\/(www(?:\.dev)?|cypress\.rc|rc|beta|[0-9]{4,16}(?:-bob)?\.rc)\.mastersportal\.(com|fyi)(?::3030)?$/,
+            /^https?:\/\/(www(?:\.dev)?|cypress\.rc|rc|beta|[0-9]{4,16}(?:-bob)?\.rc)\.bachelorsportal\.(com|fyi)(?::3030)?$/,
+            /^https?:\/\/(www(?:\.dev)?|cypress\.rc|rc|beta|[0-9]{4,16}(?:-bob)?\.rc)\.phdportal\.(com|fyi)(?::3030)?$/,
+            /^https?:\/\/(www(?:\.dev)?|cypress\.rc|rc|beta|[0-9]{4,16}(?:-bob)?\.rc)\.preparationcoursesportal\.(com|fyi)(?::3030)?$/,
+            /^https?:\/\/(www(?:\.dev)?|cypress\.rc|rc|beta|[0-9]{4,16}(?:-bob)?\.rc)\.distancelearningportal\.(com|fyi)(?::3030)?$/,
+            /^https?:\/\/(www(?:\.dev)?|cypress\.rc|rc|beta|[0-9]{4,16}(?:-bob)?\.rc)\.shortcoursesportal\.(com|fyi)(?::3030)?$/,
+            /^https?:\/\/studentemailing\.prtl\.co$/,
+            /^https?:\/\/scholarship\.mastersportal\.com$/,
+            /^https?:\/\/search-page\.prtl\.co$/,
+        ],
+        [environment_1.Environment.Testing]: [
+            /(.*?)/,
+        ],
+    },
+    [scope_1.Scope.UniAdmin]: {
+        [environment_1.Environment.Production]: [/(.*?)/],
+        [environment_1.Environment.Testing]: [/(.*?)/],
+    }
+};

package/bin/src/domain/allowed-explicit-domains-rules.d.ts

@@ -0,0 +1,42 @@
+export declare type AllowedExplicitDomainsRulesType = typeof AllowedExplicitDomainsRules;
+export declare type CorsRule = {
+    allowedOrigins: string[];
+    allowedMethods: string[];
+    allowedHeaders: string[];
+    exposedHeaders: string[];
+    maxAge: number;
+};
+export declare const AllowedExplicitDomainsRules: {
+    0: {
+        0: {
+            allowedOrigins: string[];
+            allowedHeaders: string[];
+            allowedMethods: string[];
+            exposedHeaders: never[];
+            maxAge: number;
+        };
+        1: {
+            allowedOrigins: string[];
+            allowedMethods: string[];
+            allowedHeaders: string[];
+            exposedHeaders: never[];
+            maxAge: number;
+        };
+    };
+    1: {
+        0: {
+            allowedOrigins: string[];
+            allowedHeaders: string[];
+            allowedMethods: string[];
+            exposedHeaders: never[];
+            maxAge: number;
+        };
+        1: {
+            allowedOrigins: string[];
+            allowedMethods: string[];
+            allowedHeaders: string[];
+            exposedHeaders: never[];
+            maxAge: number;
+        };
+    };
+};

package/bin/src/domain/allowed-explicit-domains-rules.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AllowedExplicitDomainsRules = void 0;
+const environment_1 = require("./enums/environment");
+const scope_1 = require("./enums/scope");
+exports.AllowedExplicitDomainsRules = {
+    [scope_1.Scope.Student]: {
+        [environment_1.Environment.Production]: {
+            allowedOrigins: ["*.mastersportal.com", "*.bachelorsportal.com", "*.shortcoursesportal.com",
+                "*.distancelearningportal.com", "*.preparationcoursesportal.com", "*.phdportal.com",
+                "*.prtl.co", "*.rc.mastersportal.fyi", "*.rc.bachelorsportal.fyi", "*.rc.shortcoursesportal.fyi",
+                "*.rc.distancelearningportal.fyi", "*.rc.preparationcoursesportal.fyi", "*.rc.phdportal.fyi"],
+            allowedHeaders: ["Authorization"],
+            allowedMethods: ["GET"],
+            exposedHeaders: [],
+            maxAge: 3000
+        },
+        [environment_1.Environment.Testing]: {
+            allowedOrigins: ["*"],
+            allowedMethods: ["GET"],
+            allowedHeaders: ["Authorization"],
+            exposedHeaders: [],
+            maxAge: 3000
+        }
+    },
+    [scope_1.Scope.UniAdmin]: {
+        [environment_1.Environment.Production]: {
+            allowedOrigins: ["*.studyportals.eu"],
+            allowedHeaders: ["Authorization"],
+            allowedMethods: ["GET", "POST"],
+            exposedHeaders: [],
+            maxAge: 3000
+        },
+        [environment_1.Environment.Testing]: {
+            allowedOrigins: ["*-uniadmin.prtl.fyi"],
+            allowedMethods: ["GET"],
+            allowedHeaders: ["*"],
+            exposedHeaders: [],
+            maxAge: 3000
+        }
+    }
+};

package/bin/src/domain/cors.d.ts

@@ -0,0 +1,16 @@
+import { CorsRule } from './allowed-explicit-domains-rules';
+import { Environment } from './enums/environment';
+import { Scope } from './enums/scope';
+export declare class CORS {
+    private regExes;
+    private s3Rules;
+    constructor(scope: Scope, environment?: Environment);
+    /**
+     * isValidDomain
+     */
+    isValidDomain(domain: string): Promise<boolean>;
+    /**
+     * getIamRules
+     */
+    getS3Rules(): CorsRule[];
+}

package/bin/src/domain/cors.js

@@ -0,0 +1,37 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CORS = void 0;
+const allowed_domain_reg_ex_list_1 = require("./allowed-domain-reg-ex-list");
+const allowed_explicit_domains_rules_1 = require("./allowed-explicit-domains-rules");
+const environment_1 = require("./enums/environment");
+class CORS {
+    constructor(scope, environment = environment_1.Environment.Production) {
+        this.regExes = allowed_domain_reg_ex_list_1.AllowedDomainRegExList[scope][environment];
+        this.s3Rules = [allowed_explicit_domains_rules_1.AllowedExplicitDomainsRules[scope][environment]];
+    }
+    /**
+     * isValidDomain
+     */
+    isValidDomain(domain) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const hasMatch = this.regExes.filter((regex) => domain.match(regex) !== null);
+            return (hasMatch.length !== 0);
+        });
+    }
+    /**
+     * getIamRules
+     */
+    getS3Rules() {
+        return this.s3Rules;
+    }
+}
+exports.CORS = CORS;

package/bin/src/domain/enums/environment.d.ts

@@ -0,0 +1,4 @@
+export declare enum Environment {
+    Production = 0,
+    Testing = 1
+}

package/bin/src/domain/enums/environment.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Environment = void 0;
+var Environment;
+(function (Environment) {
+    Environment[Environment["Production"] = 0] = "Production";
+    Environment[Environment["Testing"] = 1] = "Testing";
+})(Environment = exports.Environment || (exports.Environment = {}));

package/bin/src/domain/enums/index.d.ts

@@ -0,0 +1,2 @@
+export * from './environment';
+export * from './scope';

package/bin/src/domain/enums/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./environment"), exports);
+__exportStar(require("./scope"), exports);

package/bin/src/domain/enums/scope.d.ts

@@ -0,0 +1,4 @@
+export declare enum Scope {
+    Student = 0,
+    UniAdmin = 1
+}

package/bin/src/domain/enums/scope.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Scope = void 0;
+var Scope;
+(function (Scope) {
+    Scope[Scope["Student"] = 0] = "Student";
+    Scope[Scope["UniAdmin"] = 1] = "UniAdmin";
+})(Scope = exports.Scope || (exports.Scope = {}));

package/bin/src/domain/index.d.ts

@@ -0,0 +1,3 @@
+export * from './cors';
+export * from './allowed-domain-reg-ex-list';
+export * from './enums';

package/bin/src/domain/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./cors"), exports);
+__exportStar(require("./allowed-domain-reg-ex-list"), exports);
+__exportStar(require("./enums"), exports);

package/bin/src/implementations/express-middleware.d.ts

@@ -0,0 +1,5 @@
+import { RequestHandler } from 'express';
+import { Environment, Scope } from '../domain/enums';
+export declare class ExpressMiddleware {
+    static getMiddleWare(scope: Scope, environment?: Environment): RequestHandler;
+}

package/bin/src/implementations/express-middleware.js

@@ -0,0 +1,27 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExpressMiddleware = void 0;
+const domain_1 = require("../domain");
+const enums_1 = require("../domain/enums");
+class ExpressMiddleware {
+    static getMiddleWare(scope, environment = enums_1.Environment.Production) {
+        const cors = new domain_1.CORS(scope, environment);
+        return (req, res, next) => __awaiter(this, void 0, void 0, function* () {
+            const origin = req.get('origin') || '';
+            if (yield cors.isValidDomain(origin)) {
+                res.header('Access-Control-Allow-Origin', origin);
+            }
+            next();
+        });
+    }
+}
+exports.ExpressMiddleware = ExpressMiddleware;

package/bin/src/implementations/index.d.ts

@@ -0,0 +1,3 @@
+export * from './options';
+export * from './express-middleware';
+export * from './s3-rules';

package/bin/src/implementations/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./options"), exports);
+__exportStar(require("./express-middleware"), exports);
+__exportStar(require("./s3-rules"), exports);

package/bin/src/implementations/options.d.ts

@@ -0,0 +1,8 @@
+import { Environment, Scope } from '../domain/enums';
+export declare class OptionsLambda {
+    private cors;
+    constructor(scope: Scope, environment?: Environment);
+    getLowercasedHeaders(event: any): any;
+    getOrigin(event: any): string;
+    getHandler(): (event: any) => Promise<any>;
+}

package/bin/src/implementations/options.js

@@ -0,0 +1,49 @@
+'use strict';
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OptionsLambda = void 0;
+const domain_1 = require("../domain");
+const enums_1 = require("../domain/enums");
+class OptionsLambda {
+    constructor(scope, environment = enums_1.Environment.Production) {
+        this.cors = new domain_1.CORS(scope, environment);
+    }
+    getLowercasedHeaders(event) {
+        const headers = {};
+        Object.keys(event.headers).forEach((key) => {
+            headers[key.toLowerCase()] = event.headers[key];
+        });
+        return headers;
+    }
+    getOrigin(event) {
+        const headers = this.getLowercasedHeaders(event);
+        return headers['origin'];
+    }
+    getHandler() {
+        return (event) => __awaiter(this, void 0, void 0, function* () {
+            const origin = this.getOrigin(event);
+            const headers = {
+                'Cache-Control': 'max-age=600, s-maxage=600, proxy-revalidate',
+            };
+            if (yield this.cors.isValidDomain(origin)) {
+                headers['Access-Control-Allow-Origin'] = origin;
+                headers['Access-Control-Allow-Headers'] = 'authorization, x-api-key, content-type';
+                headers['Access-Control-Allow-Methods'] = 'GET, POST, DELETE, PATCH, HEAD, PUT, OPTIONS';
+                headers['Access-Control-Max-Age'] = '600';
+            }
+            return {
+                statusCode: 200,
+                headers,
+            };
+        });
+    }
+}
+exports.OptionsLambda = OptionsLambda;

package/bin/src/implementations/s3-rules.d.ts

@@ -0,0 +1,5 @@
+import { CorsRule } from '../domain/allowed-explicit-domains-rules';
+import { Environment, Scope } from '../domain/enums';
+export declare class S3Rules {
+    static generate(scope: Scope, environment?: Environment): CorsRule[];
+}

package/bin/src/implementations/s3-rules.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.S3Rules = void 0;
+const domain_1 = require("../domain");
+const enums_1 = require("../domain/enums");
+class S3Rules {
+    static generate(scope, environment = enums_1.Environment.Production) {
+        const cors = new domain_1.CORS(scope, environment);
+        return cors.getS3Rules();
+    }
+}
+exports.S3Rules = S3Rules;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@studyportals/cors",
-  "version": "2.3.0-beta.1",
+  "version": "2.3.0-beta.2",
   "description": "",
   "main": "bin/index.js",
   "scripts": {