@telia-ace/alliance-portal 1.0.6-next.3 → 1.0.6-next.5

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @telia-ace/alliance-portal
 
+## 1.0.6-next.5
+
+### Patch Changes
+
+-   f2aafe4: Store user session in Redis cache to avoid hitting cookie size limits (https://github.com/telia-company/ace-alliance-sdk/issues/377).
+-   Updated dependencies [f2aafe4]
+    -   @telia-ace/alliance-internal-node-utilities@1.0.3-next.2
+
+## 1.0.6-next.4
+
+### Patch Changes
+
+-   f743a2b: Skip checking user claims for groups when `AUTH_SKIP_GROUP_CLAIM_CHECK` is set to `'true'`.
+
 ## 1.0.6-next.3
 
 ### Patch Changes

package/dist/config.js

@@ -4,9 +4,11 @@ exports.ConfigKeys = void 0;
 var ConfigKeys;
 (function (ConfigKeys) {
     ConfigKeys["AuthScopes"] = "AUTH_SCOPES";
+    ConfigKeys["AuthAuthority"] = "AUTH_AUTHORITY";
     ConfigKeys["AuthClientSecret"] = "AUTH_CLIENT_SECRET";
     ConfigKeys["AuthClientId"] = "AUTH_CLIENT_ID";
     ConfigKeys["AuthResponseType"] = "AUTH_RESPONSE_TYPE";
+    ConfigKeys["AuthSkipGroupClaimCheck"] = "AUTH_SKIP_GROUP_CLAIM_CHECK";
     ConfigKeys["ServiceBaseUrl"] = "SERVICE_BASE_URL";
     ConfigKeys["WebprovisionsTag"] = "WEBPROVISIONS_TAG";
     ConfigKeys["WebprovisionsDistributionUrl"] = "WEBPROVISIONS_DISTRIBUTION_URL";

package/dist/graphql/generated.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GetUserDocument = exports.GetOrCreateUserDocument = void 0;
+exports.GetUserDocument = exports.SetUserTypeDocument = exports.GetOrCreateUserDocument = void 0;
 exports.GetOrCreateUserDocument = { "kind": "Document", "definitions": [{ "kind": "OperationDefinition", "operation": "mutation", "name": { "kind": "Name", "value": "GetOrCreateUser" }, "variableDefinitions": [{ "kind": "VariableDefinition", "variable": { "kind": "Variable", "name": { "kind": "Name", "value": "input" } }, "type": { "kind": "NonNullType", "type": { "kind": "NamedType", "name": { "kind": "Name", "value": "GetOrCreateUserInput" } } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "getOrCreateUser" }, "arguments": [{ "kind": "Argument", "name": { "kind": "Name", "value": "input" }, "value": { "kind": "Variable", "name": { "kind": "Name", "value": "input" } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "objectId" } }, { "kind": "Field", "name": { "kind": "Name", "value": "displayName" } }, { "kind": "Field", "name": { "kind": "Name", "value": "type" } }] } }] } }] };
+exports.SetUserTypeDocument = { "kind": "Document", "definitions": [{ "kind": "OperationDefinition", "operation": "mutation", "name": { "kind": "Name", "value": "SetUserType" }, "variableDefinitions": [{ "kind": "VariableDefinition", "variable": { "kind": "Variable", "name": { "kind": "Name", "value": "input" } }, "type": { "kind": "NonNullType", "type": { "kind": "NamedType", "name": { "kind": "Name", "value": "SetUserTypeInput" } } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "setUserType" }, "arguments": [{ "kind": "Argument", "name": { "kind": "Name", "value": "input" }, "value": { "kind": "Variable", "name": { "kind": "Name", "value": "input" } } }] }] } }] };
 exports.GetUserDocument = { "kind": "Document", "definitions": [{ "kind": "OperationDefinition", "operation": "query", "name": { "kind": "Name", "value": "GetUser" }, "variableDefinitions": [{ "kind": "VariableDefinition", "variable": { "kind": "Variable", "name": { "kind": "Name", "value": "objectId" } }, "type": { "kind": "NonNullType", "type": { "kind": "NamedType", "name": { "kind": "Name", "value": "String" } } } }, { "kind": "VariableDefinition", "variable": { "kind": "Variable", "name": { "kind": "Name", "value": "workspaceSlug" } }, "type": { "kind": "NonNullType", "type": { "kind": "NamedType", "name": { "kind": "Name", "value": "String" } } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "user" }, "arguments": [{ "kind": "Argument", "name": { "kind": "Name", "value": "objectId" }, "value": { "kind": "Variable", "name": { "kind": "Name", "value": "objectId" } } }, { "kind": "Argument", "name": { "kind": "Name", "value": "workspaceSlug" }, "value": { "kind": "Variable", "name": { "kind": "Name", "value": "workspaceSlug" } } }], "selectionSet": { "kind": "SelectionSet", "selections": [{ "kind": "Field", "name": { "kind": "Name", "value": "id" } }] } }] } }] };

package/dist/index.js

@@ -26,13 +26,13 @@ async function startPortal() {
             response_type: configService.getOrThrow(config_2.ConfigKeys.AuthResponseType),
             scope: configService.getOrThrow(config_2.ConfigKeys.AuthScopes),
         },
+        issuerBaseURL: `${configService.getOrThrow(config_2.ConfigKeys.AuthAuthority)}/.well-known/openid-configuration`,
         async afterCallback(_, __, session) {
             const claims = (0, jose_1.decodeJwt)(session.id_token);
             const user = {
                 displayName: claims.name || 'Empty displayName',
                 email: claims.email || claims.emails[0] || 'Empty email',
                 objectId: claims.sub || claims.oid,
-                type: hasEnterpriseAdminRole(claims) ? 'system-admin' : 'user',
             };
             logger.trace({
                 msg: 'decoded JWT and mapped claims to user, getting or creating user in database',
@@ -47,10 +47,22 @@ async function startPortal() {
                 logger.trace({ msg: 'added user to database, if it did not already exist' });
             }
             catch { }
-            // FUTURE TODO: Implement some external storage for sessions, such as redis
-            // Temporary - With this the stored session cookie gets too big
-            // @ts-ignore
-            delete session.access_token;
+            // For easier testing as system admin during development
+            const skipGroupClaimCheck = configService.get(config_2.ConfigKeys.AuthSkipGroupClaimCheck) ===
+                'true';
+            if (!skipGroupClaimCheck) {
+                const type = hasEnterpriseAdminRole(claims) ? 'system-admin' : 'user';
+                logger.trace({ msg: 'updating user type according to user claims', type });
+                try {
+                    await (0, graphql_request_1.request)(configService.getOrThrow(alliance_internal_node_utilities_1.SharedConfigKeys.DbEndpoint), graphql_1.SetUserTypeDocument, { input: { objectId: user.objectId, type } }, {
+                        authorization: (0, alliance_internal_node_utilities_1.createSystemUserToken)(configService),
+                    });
+                    logger.trace({
+                        msg: 'user type updated',
+                    });
+                }
+                catch { }
+            }
             return session;
         },
     }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telia-ace/alliance-portal",
-  "version": "1.0.6-next.3",
+  "version": "1.0.6-next.5",
   "description": "ACE Alliance portal",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Telia Company AB",
@@ -19,7 +19,7 @@
     "@nestjs/config": "^3.0.0",
     "@nestjs/core": "^10.1.0",
     "@nestjs/platform-express": "^10.1.0",
-    "@telia-ace/alliance-internal-node-utilities": "1.0.3-next.1",
+    "@telia-ace/alliance-internal-node-utilities": "1.0.3-next.2",
     "express-openid-connect": "^2.16.0",
     "graphql": "^16.7.1",
     "graphql-request": "^6.1.0",