@telia-ace/alliance-portal 1.0.5-next.2 → 1.0.5-next.3

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @telia-ace/alliance-portal
 
+## 1.0.5-next.3
+
+### Patch Changes
+
+-   7a0e643: Show 401 unauthorized page for users without access to the workspace.
+
 ## 1.0.5-next.2
 
 ### Patch Changes

package/dist/app.controller.js

@@ -17,7 +17,9 @@ const axios_1 = require("@nestjs/axios");
 const common_1 = require("@nestjs/common");
 const config_1 = require("@nestjs/config");
 const alliance_internal_node_utilities_1 = require("@telia-ace/alliance-internal-node-utilities");
+const graphql_request_1 = require("graphql-request");
 const config_2 = require("./config");
+const graphql_1 = require("./graphql");
 let AppController = exports.AppController = class AppController {
     logger;
     configService;
@@ -36,7 +38,19 @@ let AppController = exports.AppController = class AppController {
         const { data } = await this.httpService.axiosRef.get(policyUrl);
         return data;
     }
-    index(req) {
+    async index(req, workspaceSlug) {
+        let userHasAccess = false;
+        try {
+            const objectId = req.oidc.user.sub;
+            const { user } = await (0, graphql_request_1.request)(this.configService.getOrThrow(alliance_internal_node_utilities_1.SharedConfigKeys.DbEndpoint), graphql_1.GetUserDocument, { objectId, workspaceSlug }, {
+                authorization: (0, alliance_internal_node_utilities_1.createSystemUserToken)(this.configService),
+            });
+            userHasAccess = !!user.id;
+        }
+        catch { }
+        if (!userHasAccess) {
+            return htmlTemplate(unauthorizedPortalBody());
+        }
         const distributionOptions = {};
         const distributionUrl = this.configService.getOrThrow(config_2.ConfigKeys.WebprovisionsDistributionUrl);
         if (!req.query['wp-tag'] && !req.query['wp-version']) {
@@ -48,7 +62,7 @@ let AppController = exports.AppController = class AppController {
             distributionOptions,
             distributionUrl,
         });
-        return htmlTemplate(distributionUrl, distributionOptions);
+        return htmlTemplate(portalBody(distributionUrl, distributionOptions));
     }
 };
 __decorate([
@@ -72,9 +86,10 @@ __decorate([
 __decorate([
     (0, common_1.Get)(['/:workspace', '/:workspace/*']),
     __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('workspace')),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", void 0)
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
 ], AppController.prototype, "index", null);
 exports.AppController = AppController = __decorate([
     (0, common_1.Controller)(),
@@ -190,7 +205,59 @@ const loader = `
     </div>
 </div>
 `;
-function htmlTemplate(distributionUrl, distributionOpts) {
+function portalBody(distributionUrl, distributionOpts) {
+    return `
+    <script>
+        /* WEBPROVISIONS */
+        !function(e,n){var o=n||{},c=document,t=window,s=function(n,o){e+=(e.indexOf("?")>-1?"&":"?")+encodeURIComponent(n)+"="
+        +encodeURIComponent(o)},i=/[?&]{1}(wp[^=]*)=([^&#]*)/g,r=c.getElementsByTagName("script")[0],p=c.createElement("script");p.type="module";e=e+"/index.js";
+        for(t.webprovisions=t.webprovisions||{_c:[],configure:function(){t.webprovisions._c.push(arguments)}};matches=i.exec(t.location.search);)
+        s(matches[1],matches[2]);Object.keys(o).forEach((function(e){s("wp-"+e,o[e])})),p.async=!0,p.src=e,r.parentNode.insertBefore(p,r)}
+        /**
+        * Configure the implementation by specifying a remote endpoint with optional arguments.
+        * url - The url to the remote endpoint for the implementation.
+        * args - Object containing optional arguments for the implementation.
+        */
+        ("${distributionUrl}", ${JSON.stringify(distributionOpts)})
+    </script>
+    
+    ${loader}
+    `;
+}
+function unauthorizedPortalBody() {
+    return `
+    <div class="unauthorized">
+        <h1>401</h1>
+        <p>Your user does access to this workspace</p>
+    </div>
+    <style>
+        @import 'https://cdn.voca.teliacompany.com/fonts/TeliaSansV10/TeliaSans.css';
+        .unauthorized {
+            position: absolute;
+            inset: 0;
+            display: flex;
+            flex-direction: column;
+            gap: 1em;
+            justify-content: center;
+            align-items: center;
+        }
+        
+        h1 {
+            font-family: TeliaSansHeading, TeliaSans, HelveticaNeue, Helvetica, Arial, sans-serif;
+            color: #e4175c;
+            font-size: 4em;
+            margin: 0;
+        }
+        
+        p {
+            font-family: TeliaSans, Helvetica, Arial, Lucida Grande, sans-serif;
+            font-size: 2em;
+            margin: 0;
+        }    
+    </style>
+    `;
+}
+function htmlTemplate(body) {
     return `
     <!DOCTYPE html>
     <html lang="en">
@@ -204,22 +271,7 @@ function htmlTemplate(distributionUrl, distributionOpts) {
         </head>
         
         <body>
-            <script>
-                /* WEBPROVISIONS */
-                !function(e,n){var o=n||{},c=document,t=window,s=function(n,o){e+=(e.indexOf("?")>-1?"&":"?")+encodeURIComponent(n)+"="
-                +encodeURIComponent(o)},i=/[?&]{1}(wp[^=]*)=([^&#]*)/g,r=c.getElementsByTagName("script")[0],p=c.createElement("script");p.type="module";e=e+"/index.js";
-                for(t.webprovisions=t.webprovisions||{_c:[],configure:function(){t.webprovisions._c.push(arguments)}};matches=i.exec(t.location.search);)
-                s(matches[1],matches[2]);Object.keys(o).forEach((function(e){s("wp-"+e,o[e])})),p.async=!0,p.src=e,r.parentNode.insertBefore(p,r)}
-                /**
-                * Configure the implementation by specifying a remote endpoint with optional arguments.
-                * url - The url to the remote endpoint for the implementation.
-                * args - Object containing optional arguments for the implementation.
-                */
-                ("${distributionUrl}", ${JSON.stringify(distributionOpts)})
-            </script>
-            
-            ${loader}
-            
+            ${body}
         </body>
     
     </html>

package/dist/graphql/generated.js

@@ -1,4 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GetOrCreateUserDocument = void 0;
+exports.GetUserDocument = exports.GetOrCreateUserDocument = void 0;
 exports.GetOrCreateUserDocument = { "kind": "Document", "definitions": [{ "kind": "OperationDefinition", "operation": "mutation", "name": { "kind": "Name", "value": "GetOrCreateUser" }, "variableDefinitions": [{ "kind": "VariableDefinition", "variable": { "kind": "Variable", "name": { "kind": "Name", "value": "input" } }, "type": { "kind": "NonNullType", "type": { "kind": "NamedType", "name": { "kind": "Name", "value": "GetOrCreateUserInput" } } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "getOrCreateUser" }, "arguments": [{ "kind": "Argument", "name": { "kind": "Name", "value": "input" }, "value": { "kind": "Variable", "name": { "kind": "Name", "value": "input" } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "objectId" } }, { "kind": "Field", "name": { "kind": "Name", "value": "displayName" } }, { "kind": "Field", "name": { "kind": "Name", "value": "type" } }] } }] } }] };
+exports.GetUserDocument = { "kind": "Document", "definitions": [{ "kind": "OperationDefinition", "operation": "query", "name": { "kind": "Name", "value": "GetUser" }, "variableDefinitions": [{ "kind": "VariableDefinition", "variable": { "kind": "Variable", "name": { "kind": "Name", "value": "objectId" } }, "type": { "kind": "NonNullType", "type": { "kind": "NamedType", "name": { "kind": "Name", "value": "String" } } } }, { "kind": "VariableDefinition", "variable": { "kind": "Variable", "name": { "kind": "Name", "value": "workspaceSlug" } }, "type": { "kind": "NonNullType", "type": { "kind": "NamedType", "name": { "kind": "Name", "value": "String" } } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "user" }, "arguments": [{ "kind": "Argument", "name": { "kind": "Name", "value": "objectId" }, "value": { "kind": "Variable", "name": { "kind": "Name", "value": "objectId" } } }, { "kind": "Argument", "name": { "kind": "Name", "value": "workspaceSlug" }, "value": { "kind": "Variable", "name": { "kind": "Name", "value": "workspaceSlug" } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "id" } }] } }] } }] };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telia-ace/alliance-portal",
-  "version": "1.0.5-next.2",
+  "version": "1.0.5-next.3",
   "description": "ACE Alliance portal",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Telia Company AB",