@telia-ace/alliance-portal 1.0.6-next.1 → 1.0.6-next.3

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @telia-ace/alliance-portal
 
+## 1.0.6-next.3
+
+### Patch Changes
+
+-   e8eda01: Fix issue with user session cookie being too large.
+
+## 1.0.6-next.2
+
+### Patch Changes
+
+-   ba13c59: Use `.env` files for configuration during development instead of JS/TS modules.
+-   ba13c59: Set user as `system-admin` if user claims include ACE Enterprise Admin group/role.
+
 ## 1.0.6-next.1
 
 ### Patch Changes

package/dist/app.module.js

@@ -12,7 +12,6 @@ const common_1 = require("@nestjs/common");
 const config_1 = require("@nestjs/config");
 const alliance_internal_node_utilities_1 = require("@telia-ace/alliance-internal-node-utilities");
 const app_controller_1 = require("./app.controller");
-const config_2 = require("./config");
 let AppModule = exports.AppModule = class AppModule {
 };
 exports.AppModule = AppModule = __decorate([
@@ -21,7 +20,6 @@ exports.AppModule = AppModule = __decorate([
         imports: [
             config_1.ConfigModule.forRoot({
                 isGlobal: true,
-                load: [config_2.configuration],
             }),
             alliance_internal_node_utilities_1.LoggerModule.forRoot(),
             axios_1.HttpModule,

package/dist/config.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.localConfiguration = exports.configuration = exports.ConfigKeys = void 0;
-const alliance_internal_node_utilities_1 = require("@telia-ace/alliance-internal-node-utilities");
+exports.ConfigKeys = void 0;
 var ConfigKeys;
 (function (ConfigKeys) {
     ConfigKeys["AuthScopes"] = "AUTH_SCOPES";
@@ -13,55 +12,3 @@ var ConfigKeys;
     ConfigKeys["WebprovisionsDistributionUrl"] = "WEBPROVISIONS_DISTRIBUTION_URL";
     ConfigKeys["WebprovisionsDistributionCookiePolicyUrl"] = "WEBPROVISIONS_DISTRIBUTION_COOKIE_POLICY_URL";
 })(ConfigKeys || (exports.ConfigKeys = ConfigKeys = {}));
-function configuration() {
-    return {
-        [alliance_internal_node_utilities_1.SharedConfigKeys.AuthCookieName]: process.env[alliance_internal_node_utilities_1.SharedConfigKeys.AuthCookieName],
-        [alliance_internal_node_utilities_1.SharedConfigKeys.AuthCookieSecret]: process.env[alliance_internal_node_utilities_1.SharedConfigKeys.AuthCookieSecret],
-        [alliance_internal_node_utilities_1.SharedConfigKeys.AuthAuthority]: process.env[alliance_internal_node_utilities_1.SharedConfigKeys.AuthAuthority],
-        [ConfigKeys.AuthScopes]: process.env[ConfigKeys.AuthScopes],
-        [ConfigKeys.AuthClientSecret]: process.env[ConfigKeys.AuthClientSecret],
-        [ConfigKeys.AuthClientId]: process.env[ConfigKeys.AuthClientId],
-        [ConfigKeys.AuthResponseType]: process.env[ConfigKeys.AuthResponseType],
-        [alliance_internal_node_utilities_1.SharedConfigKeys.ServicePort]: process.env[alliance_internal_node_utilities_1.SharedConfigKeys.ServicePort],
-        [ConfigKeys.ServiceBaseUrl]: process.env[ConfigKeys.ServiceBaseUrl],
-        [alliance_internal_node_utilities_1.SharedConfigKeys.ServiceLogLevel]: process.env[alliance_internal_node_utilities_1.SharedConfigKeys.ServiceLogLevel],
-        [ConfigKeys.WebprovisionsTag]: process.env[ConfigKeys.WebprovisionsTag],
-        [ConfigKeys.WebprovisionsDistributionUrl]: process.env[ConfigKeys.WebprovisionsDistributionUrl],
-        [ConfigKeys.WebprovisionsDistributionCookiePolicyUrl]: process.env[ConfigKeys.WebprovisionsDistributionCookiePolicyUrl],
-        [alliance_internal_node_utilities_1.SharedConfigKeys.JwtPrivateKey]: process.env[alliance_internal_node_utilities_1.SharedConfigKeys.JwtPrivateKey],
-        [alliance_internal_node_utilities_1.SharedConfigKeys.DbEndpoint]: process.env[alliance_internal_node_utilities_1.SharedConfigKeys.DbEndpoint],
-    };
-}
-exports.configuration = configuration;
-// ACE KNOWLEDGE AD
-const auth = {
-    [alliance_internal_node_utilities_1.SharedConfigKeys.AuthAuthority]: 'https://humanyb2c.b2clogin.com/humanyb2c.onmicrosoft.com/B2C_1_Alliance.Test/v2.0',
-    [ConfigKeys.AuthClientSecret]: 'z6r7Q~Snpk7NRPSdi1XrKrf~.GVw~AWb3pxYj',
-    [ConfigKeys.AuthClientId]: 'fa9f111b-006e-4633-a7ea-2db825ba898d',
-    [ConfigKeys.AuthScopes]: 'openid',
-    [ConfigKeys.AuthResponseType]: 'id_token',
-};
-// ACE AUTH PLATFORM
-// const auth = {
-//     [SharedConfigKeys.AuthAuthority]: 'https://auth.acedev.teliacompany.net/realms/ace',
-//     [ConfigKeys.AuthClientSecret]: '3x1GEvmAdq42CfkgHKi3GJJnzaOKUEYT',
-//     [ConfigKeys.AuthClientId]: 'ace-alliance',
-//     [ConfigKeys.AuthScopes]: 'openid',
-//     [ConfigKeys.AuthResponseType]: 'code',
-// };
-function localConfiguration() {
-    return {
-        [alliance_internal_node_utilities_1.SharedConfigKeys.AuthCookieName]: 'alliance-auth',
-        [alliance_internal_node_utilities_1.SharedConfigKeys.AuthCookieSecret]: 'zlLZBlk7wt8lypP5lA4D',
-        ...auth,
-        [alliance_internal_node_utilities_1.SharedConfigKeys.ServicePort]: 3000,
-        [ConfigKeys.ServiceBaseUrl]: 'http://localhost:{{port}}',
-        [alliance_internal_node_utilities_1.SharedConfigKeys.ServiceLogLevel]: 'trace',
-        [ConfigKeys.WebprovisionsTag]: 'dev',
-        [ConfigKeys.WebprovisionsDistributionUrl]: 'https://embed.webprovisions.io/p/alliance-portal',
-        [ConfigKeys.WebprovisionsDistributionCookiePolicyUrl]: 'https://embed.webprovisions.io/p/alliance-portal/cookie-policy.html',
-        [alliance_internal_node_utilities_1.SharedConfigKeys.JwtPrivateKey]: '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',
-        [alliance_internal_node_utilities_1.SharedConfigKeys.DbEndpoint]: 'http://localhost:3002/graphql',
-    };
-}
-exports.localConfiguration = localConfiguration;

package/dist/index.js

@@ -32,6 +32,7 @@ async function startPortal() {
                 displayName: claims.name || 'Empty displayName',
                 email: claims.email || claims.emails[0] || 'Empty email',
                 objectId: claims.sub || claims.oid,
+                type: hasEnterpriseAdminRole(claims) ? 'system-admin' : 'user',
             };
             logger.trace({
                 msg: 'decoded JWT and mapped claims to user, getting or creating user in database',
@@ -46,9 +47,20 @@ async function startPortal() {
                 logger.trace({ msg: 'added user to database, if it did not already exist' });
             }
             catch { }
+            // FUTURE TODO: Implement some external storage for sessions, such as redis
+            // Temporary - With this the stored session cookie gets too big
+            // @ts-ignore
+            delete session.access_token;
             return session;
         },
     }));
     await app.listen(configService.getOrThrow(alliance_internal_node_utilities_1.SharedConfigKeys.ServicePort));
 }
+function hasEnterpriseAdminRole(claims) {
+    if (!claims.groups) {
+        return false;
+    }
+    const aceEnterpriseAdminRoleId = 'PROD_ACE_Enterprise_Admins';
+    return claims.groups.includes(aceEnterpriseAdminRoleId);
+}
 startPortal();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telia-ace/alliance-portal",
-  "version": "1.0.6-next.1",
+  "version": "1.0.6-next.3",
   "description": "ACE Alliance portal",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Telia Company AB",