@things-factory/auth-base 7.0.1-beta.9 → 7.0.1-rc.0

package/dist-server/utils/accepts.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.accepts = void 0;
+exports.accepts = accepts;
 function accepts(header, accepts) {
     accepts = accepts || ['text/html', '*/*'];
     for (let i = 0; i < accepts.length; i++) {
@@ -10,5 +10,4 @@ function accepts(header, accepts) {
     }
     return false;
 }
-exports.accepts = accepts;
 //# sourceMappingURL=accepts.js.map

package/dist-server/utils/accepts.js.map

@@ -1 +1 @@
-{"version":3,"file":"accepts.js","sourceRoot":"","sources":["../../server/utils/accepts.ts"],"names":[],"mappings":";;;AAAA,SAAgB,OAAO,CAAC,MAAW,EAAE,OAAQ;IAC3C,OAAO,GAAG,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACvC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE;YAC7C,OAAO,IAAI,CAAA;SACZ;KACF;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAVD,0BAUC","sourcesContent":["export function accepts(header: any, accepts?) {\n  accepts = accepts || ['text/html', '*/*']\n  \n  for (let i = 0; i < accepts.length; i++) {\n    if ((header || '').indexOf(accepts[i]) !== -1) {\n      return true\n    }\n  }\n\n  return false\n}\n"]}
+{"version":3,"file":"accepts.js","sourceRoot":"","sources":["../../server/utils/accepts.ts"],"names":[],"mappings":";;AAAA,0BAUC;AAVD,SAAgB,OAAO,CAAC,MAAW,EAAE,OAAQ;IAC3C,OAAO,GAAG,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC","sourcesContent":["export function accepts(header: any, accepts?) {\n  accepts = accepts || ['text/html', '*/*']\n  \n  for (let i = 0; i < accepts.length; i++) {\n    if ((header || '').indexOf(accepts[i]) !== -1) {\n      return true\n    }\n  }\n\n  return false\n}\n"]}

package/dist-server/utils/access-token-cookie.js

@@ -1,6 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.clearAccessTokenCookie = exports.setSessionAccessToken = exports.setAccessTokenCookie = exports.getAccessTokenCookie = void 0;
+exports.getAccessTokenCookie = getAccessTokenCookie;
+exports.setAccessTokenCookie = setAccessTokenCookie;
+exports.setSessionAccessToken = setSessionAccessToken;
+exports.clearAccessTokenCookie = clearAccessTokenCookie;
 const shell_1 = require("@things-factory/shell");
 const env_1 = require("@things-factory/env");
 const max_age_1 = require("../constants/max-age");
@@ -9,7 +12,6 @@ function getAccessTokenCookie(context) {
     var _a;
     return (_a = context === null || context === void 0 ? void 0 : context.cookies) === null || _a === void 0 ? void 0 : _a.get(accessTokenCookieKey);
 }
-exports.getAccessTokenCookie = getAccessTokenCookie;
 function setAccessTokenCookie(context, token) {
     const { secure } = context;
     var cookie = {
@@ -23,7 +25,6 @@ function setAccessTokenCookie(context, token) {
     }
     context.cookies.set(accessTokenCookieKey, token, cookie);
 }
-exports.setAccessTokenCookie = setAccessTokenCookie;
 function setSessionAccessToken(context) {
     /* koa-session 을 사용하는 경우에는, cookie 직접 설정이 작동되지 않는다. 그런 경우에는 session에 설정해서 cookie를 변경한다. */
     const { user } = context.state;
@@ -33,7 +34,6 @@ function setSessionAccessToken(context) {
         status: user.state
     };
 }
-exports.setSessionAccessToken = setSessionAccessToken;
 function clearAccessTokenCookie(context) {
     const { secure } = context;
     var cookie = {
@@ -52,5 +52,4 @@ function clearAccessTokenCookie(context) {
     context.cookies.set('i18next', '', cookie);
     context.session = null;
 }
-exports.clearAccessTokenCookie = clearAccessTokenCookie;
 //# sourceMappingURL=access-token-cookie.js.map

package/dist-server/utils/access-token-cookie.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-token-cookie.js","sourceRoot":"","sources":["../../server/utils/access-token-cookie.ts"],"names":[],"mappings":";;;AAAA,iDAAmE;AACnE,6CAA4C;AAC5C,kDAA8C;AAE9C,MAAM,oBAAoB,GAAG,YAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAA;AAE/E,SAAgB,oBAAoB,CAAC,OAAO;;IAC1C,OAAO,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,0CAAE,GAAG,CAAC,oBAAoB,CAAC,CAAA;AACpD,CAAC;AAFD,oDAEC;AAED,SAAgB,oBAAoB,CAAC,OAAO,EAAE,KAAK;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE1B,IAAI,MAAM,GAAG;QACX,MAAM;QACN,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,iBAAO;KAChB,CAAA;IAED,MAAM,YAAY,GAAG,IAAA,mCAA2B,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,IAAI,YAAY,EAAE;QAChB,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAA;KAChC;IAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;AAC1D,CAAC;AAfD,oDAeC;AAED,SAAgB,qBAAqB,CAAC,OAAO;IAC3C,0FAA0F;IAC1F,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAE9B,OAAO,CAAC,OAAO,GAAG;QAChB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,MAAM,EAAE,IAAI,CAAC,KAAK;KACnB,CAAA;AACH,CAAC;AATD,sDASC;AAED,SAAgB,sBAAsB,CAAC,OAAO;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE1B,IAAI,MAAM,GAAG;QACX,MAAM;QACN,QAAQ,EAAE,IAAI;KACf,CAAA;IAED,MAAM,YAAY,GAAG,IAAA,mCAA2B,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,IAAI,YAAY,EAAE;QAChB,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAA;KAChC;IAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IACrD;;;OAGG;IACH,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IAC1C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;AACxB,CAAC;AApBD,wDAoBC","sourcesContent":["import { getCookieDomainFromHostname } from '@things-factory/shell'\nimport { config } from '@things-factory/env'\nimport { MAX_AGE } from '../constants/max-age'\n\nconst accessTokenCookieKey = config.get('accessTokenCookieKey', 'access_token')\n\nexport function getAccessTokenCookie(context) {\n  return context?.cookies?.get(accessTokenCookieKey)\n}\n\nexport function setAccessTokenCookie(context, token) {\n  const { secure } = context\n\n  var cookie = {\n    secure,\n    httpOnly: true,\n    maxAge: MAX_AGE\n  }\n\n  const cookieDomain = getCookieDomainFromHostname(context.hostname)\n  if (cookieDomain) {\n    cookie['domain'] = cookieDomain\n  }\n\n  context.cookies.set(accessTokenCookieKey, token, cookie)\n}\n\nexport function setSessionAccessToken(context) {\n  /* koa-session 을 사용하는 경우에는, cookie 직접 설정이 작동되지 않는다. 그런 경우에는 session에 설정해서 cookie를 변경한다. */\n  const { user } = context.state\n\n  context.session = {\n    id: user.id,\n    userType: user.type,\n    status: user.state\n  }\n}\n\nexport function clearAccessTokenCookie(context) {\n  const { secure } = context\n\n  var cookie = {\n    secure,\n    httpOnly: true\n  }\n\n  const cookieDomain = getCookieDomainFromHostname(context.hostname)\n  if (cookieDomain) {\n    cookie['domain'] = cookieDomain\n  }\n\n  context.cookies.set(accessTokenCookieKey, '', cookie)\n  /*\n   * TODO clear i18next cookie as well - need to support domain\n   * https://github.com/hatiolab/things-factory/issues/70\n   */\n  context.cookies.set('i18next', '', cookie)\n  context.session = null\n}\n"]}
+{"version":3,"file":"access-token-cookie.js","sourceRoot":"","sources":["../../server/utils/access-token-cookie.ts"],"names":[],"mappings":";;AAMA,oDAEC;AAED,oDAeC;AAED,sDASC;AAED,wDAoBC;AA1DD,iDAAmE;AACnE,6CAA4C;AAC5C,kDAA8C;AAE9C,MAAM,oBAAoB,GAAG,YAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAA;AAE/E,SAAgB,oBAAoB,CAAC,OAAO;;IAC1C,OAAO,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,0CAAE,GAAG,CAAC,oBAAoB,CAAC,CAAA;AACpD,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAO,EAAE,KAAK;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE1B,IAAI,MAAM,GAAG;QACX,MAAM;QACN,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,iBAAO;KAChB,CAAA;IAED,MAAM,YAAY,GAAG,IAAA,mCAA2B,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAA;IACjC,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;AAC1D,CAAC;AAED,SAAgB,qBAAqB,CAAC,OAAO;IAC3C,0FAA0F;IAC1F,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAE9B,OAAO,CAAC,OAAO,GAAG;QAChB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,MAAM,EAAE,IAAI,CAAC,KAAK;KACnB,CAAA;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAO;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE1B,IAAI,MAAM,GAAG;QACX,MAAM;QACN,QAAQ,EAAE,IAAI;KACf,CAAA;IAED,MAAM,YAAY,GAAG,IAAA,mCAA2B,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAA;IACjC,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IACrD;;;OAGG;IACH,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IAC1C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;AACxB,CAAC","sourcesContent":["import { getCookieDomainFromHostname } from '@things-factory/shell'\nimport { config } from '@things-factory/env'\nimport { MAX_AGE } from '../constants/max-age'\n\nconst accessTokenCookieKey = config.get('accessTokenCookieKey', 'access_token')\n\nexport function getAccessTokenCookie(context) {\n  return context?.cookies?.get(accessTokenCookieKey)\n}\n\nexport function setAccessTokenCookie(context, token) {\n  const { secure } = context\n\n  var cookie = {\n    secure,\n    httpOnly: true,\n    maxAge: MAX_AGE\n  }\n\n  const cookieDomain = getCookieDomainFromHostname(context.hostname)\n  if (cookieDomain) {\n    cookie['domain'] = cookieDomain\n  }\n\n  context.cookies.set(accessTokenCookieKey, token, cookie)\n}\n\nexport function setSessionAccessToken(context) {\n  /* koa-session 을 사용하는 경우에는, cookie 직접 설정이 작동되지 않는다. 그런 경우에는 session에 설정해서 cookie를 변경한다. */\n  const { user } = context.state\n\n  context.session = {\n    id: user.id,\n    userType: user.type,\n    status: user.state\n  }\n}\n\nexport function clearAccessTokenCookie(context) {\n  const { secure } = context\n\n  var cookie = {\n    secure,\n    httpOnly: true\n  }\n\n  const cookieDomain = getCookieDomainFromHostname(context.hostname)\n  if (cookieDomain) {\n    cookie['domain'] = cookieDomain\n  }\n\n  context.cookies.set(accessTokenCookieKey, '', cookie)\n  /*\n   * TODO clear i18next cookie as well - need to support domain\n   * https://github.com/hatiolab/things-factory/issues/70\n   */\n  context.cookies.set('i18next', '', cookie)\n  context.session = null\n}\n"]}

package/dist-server/utils/check-permission.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.checkPermission = void 0;
+exports.checkPermission = checkPermission;
 const user_1 = require("../service/user/user");
 async function checkPermission(privilegeObject, user, domain, unsafeIP, prohibitedPrivileges) {
     if (!privilegeObject) {
@@ -34,5 +34,4 @@ async function checkPermission(privilegeObject, user, domain, unsafeIP, prohibit
         return await user_1.User.hasPrivilege(privilege, category, domain, user);
     }
 }
-exports.checkPermission = checkPermission;
 //# sourceMappingURL=check-permission.js.map

package/dist-server/utils/check-permission.js.map

@@ -1 +1 @@
-{"version":3,"file":"check-permission.js","sourceRoot":"","sources":["../../server/utils/check-permission.ts"],"names":[],"mappings":";;;AAEA,+CAA2C;AAEpC,KAAK,UAAU,eAAe,CACnC,eAAgC,EAChC,IAAU,EACV,MAAc,EACd,QAAkB,EAClB,oBAAgE;IAEhE,IAAI,CAAC,eAAe,EAAE;QACpB,OAAO,IAAI,CAAA;KACZ;IAED,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,eAAe,CAAA;IAEnG,IAAI,QAAQ,EAAE;QACZ,IAAI,SAAS,IAAI,QAAQ,EAAE;YACzB,8CAA8C;YAC9C,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,IAAI,QAAQ,IAAI,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC,EAAE;gBACjG,OAAO,KAAK,CAAA;aACb;YAED,OAAO,MAAM,WAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;SAClE;QAED,wEAAwE;QACxE,OAAO,CAAC,kBAAkB,IAAI,CAAC,gBAAgB,CAAA;KAChD;SAAM;QACL,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE;YAC3B,8DAA8D;YAC9D,OAAO,CACL,CAAC,kBAAkB,IAAI,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;gBACxE,CAAC,gBAAgB,IAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CACrE,CAAA;SACF;QAED,IACE,CAAC,kBAAkB,IAAI,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACxE,CAAC,gBAAgB,IAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EACpE;YACA,OAAO,IAAI,CAAA;SACZ;QAED,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,IAAI,QAAQ,IAAI,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC,EAAE;YACjG,OAAO,KAAK,CAAA;SACb;QAED,OAAO,MAAM,WAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;KAClE;AACH,CAAC;AA/CD,0CA+CC","sourcesContent":["import { Domain } from '@things-factory/shell'\nimport { PrivilegeObject } from '../service/privilege/privilege'\nimport { User } from '../service/user/user'\n\nexport async function checkPermission(\n  privilegeObject: PrivilegeObject,\n  user: User,\n  domain: Domain,\n  unsafeIP?: boolean,\n  prohibitedPrivileges?: { category: string; privilege: string }[]\n): Promise<boolean> {\n  if (!privilegeObject) {\n    return true\n  }\n\n  const { owner: domainOwnerGranted, super: superUserGranted, category, privilege } = privilegeObject\n\n  if (unsafeIP) {\n    if (privilege && category) {\n      // unsafeIP 상황에서는 ownership granted는 적용되지 않는다.\n      if ((prohibitedPrivileges || []).find(pp => pp.category == category && pp.privilege == privilege)) {\n        return false\n      }\n\n      return await User.hasPrivilege(privilege, category, domain, user)\n    }\n\n    // privilege, category가 설정되지 않은 경우에는 ownership granted가 설정되었다면 허가하지 않는다.\n    return !domainOwnerGranted && !superUserGranted\n  } else {\n    if (!privilege || !category) {\n      // privilege, category가 설정되지 않은 경우에는 ownership granted만을 적용한다.\n      return (\n        (domainOwnerGranted && (await process.domainOwnerGranted(domain, user))) ||\n        (superUserGranted && (await process.superUserGranted(domain, user)))\n      )\n    }\n\n    if (\n      (domainOwnerGranted && (await process.domainOwnerGranted(domain, user))) ||\n      (superUserGranted && (await process.superUserGranted(domain, user)))\n    ) {\n      return true\n    }\n\n    if ((prohibitedPrivileges || []).find(pp => pp.category == category && pp.privilege == privilege)) {\n      return false\n    }\n\n    return await User.hasPrivilege(privilege, category, domain, user)\n  }\n}\n"]}
+{"version":3,"file":"check-permission.js","sourceRoot":"","sources":["../../server/utils/check-permission.ts"],"names":[],"mappings":";;AAIA,0CA+CC;AAjDD,+CAA2C;AAEpC,KAAK,UAAU,eAAe,CACnC,eAAgC,EAChC,IAAU,EACV,MAAc,EACd,QAAkB,EAClB,oBAAgE;IAEhE,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,eAAe,CAAA;IAEnG,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YAC1B,8CAA8C;YAC9C,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,IAAI,QAAQ,IAAI,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC,EAAE,CAAC;gBAClG,OAAO,KAAK,CAAA;YACd,CAAC;YAED,OAAO,MAAM,WAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACnE,CAAC;QAED,wEAAwE;QACxE,OAAO,CAAC,kBAAkB,IAAI,CAAC,gBAAgB,CAAA;IACjD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,8DAA8D;YAC9D,OAAO,CACL,CAAC,kBAAkB,IAAI,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;gBACxE,CAAC,gBAAgB,IAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CACrE,CAAA;QACH,CAAC;QAED,IACE,CAAC,kBAAkB,IAAI,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACxE,CAAC,gBAAgB,IAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EACpE,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,IAAI,QAAQ,IAAI,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC,EAAE,CAAC;YAClG,OAAO,KAAK,CAAA;QACd,CAAC;QAED,OAAO,MAAM,WAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACnE,CAAC;AACH,CAAC","sourcesContent":["import { Domain } from '@things-factory/shell'\nimport { PrivilegeObject } from '../service/privilege/privilege'\nimport { User } from '../service/user/user'\n\nexport async function checkPermission(\n  privilegeObject: PrivilegeObject,\n  user: User,\n  domain: Domain,\n  unsafeIP?: boolean,\n  prohibitedPrivileges?: { category: string; privilege: string }[]\n): Promise<boolean> {\n  if (!privilegeObject) {\n    return true\n  }\n\n  const { owner: domainOwnerGranted, super: superUserGranted, category, privilege } = privilegeObject\n\n  if (unsafeIP) {\n    if (privilege && category) {\n      // unsafeIP 상황에서는 ownership granted는 적용되지 않는다.\n      if ((prohibitedPrivileges || []).find(pp => pp.category == category && pp.privilege == privilege)) {\n        return false\n      }\n\n      return await User.hasPrivilege(privilege, category, domain, user)\n    }\n\n    // privilege, category가 설정되지 않은 경우에는 ownership granted가 설정되었다면 허가하지 않는다.\n    return !domainOwnerGranted && !superUserGranted\n  } else {\n    if (!privilege || !category) {\n      // privilege, category가 설정되지 않은 경우에는 ownership granted만을 적용한다.\n      return (\n        (domainOwnerGranted && (await process.domainOwnerGranted(domain, user))) ||\n        (superUserGranted && (await process.superUserGranted(domain, user)))\n      )\n    }\n\n    if (\n      (domainOwnerGranted && (await process.domainOwnerGranted(domain, user))) ||\n      (superUserGranted && (await process.superUserGranted(domain, user)))\n    ) {\n      return true\n    }\n\n    if ((prohibitedPrivileges || []).find(pp => pp.category == category && pp.privilege == privilege)) {\n      return false\n    }\n\n    return await User.hasPrivilege(privilege, category, domain, user)\n  }\n}\n"]}

package/dist-server/utils/check-user-belongs-domain.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.checkUserBelongsDomain = void 0;
+exports.checkUserBelongsDomain = checkUserBelongsDomain;
 const shell_1 = require("@things-factory/shell");
 const user_1 = require("../service/user/user");
 /**
@@ -18,5 +18,4 @@ async function checkUserBelongsDomain(domain, user) {
     const { domains: userDomains } = user;
     return Boolean(userDomains.find((userDomain) => userDomain.id === domain.id));
 }
-exports.checkUserBelongsDomain = checkUserBelongsDomain;
 //# sourceMappingURL=check-user-belongs-domain.js.map

package/dist-server/utils/check-user-belongs-domain.js.map

@@ -1 +1 @@
-{"version":3,"file":"check-user-belongs-domain.js","sourceRoot":"","sources":["../../server/utils/check-user-belongs-domain.ts"],"names":[],"mappings":";;;AAAA,iDAA6D;AAE7D,+CAA2C;AAE3C;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,IAAU;;IACrE,IAAI,CAAC,CAAA,MAAA,IAAI,CAAC,OAAO,0CAAE,MAAM,CAAA,EAAE;QACzB,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,WAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;KAC7F;IAED,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAS,IAAI,CAAA;IAC3C,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAkB,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;AACvF,CAAC;AAPD,wDAOC","sourcesContent":["import { Domain, getRepository } from '@things-factory/shell'\n\nimport { User } from '../service/user/user'\n\n/**\n * @description Based on domain and user information,\n * Find out whether the user belongs domain or user has partnership with domain\n *\n * @param domain\n * @param user\n */\nexport async function checkUserBelongsDomain(domain: Domain, user: User): Promise<Boolean> {\n  if (!user.domains?.length) {\n    user = await getRepository(User).findOne({ where: { id: user.id }, relations: ['domains'] })\n  }\n\n  const { domains: userDomains }: User = user\n  return Boolean(userDomains.find((userDomain: Domain) => userDomain.id === domain.id))\n}\n"]}
+{"version":3,"file":"check-user-belongs-domain.js","sourceRoot":"","sources":["../../server/utils/check-user-belongs-domain.ts"],"names":[],"mappings":";;AAWA,wDAOC;AAlBD,iDAA6D;AAE7D,+CAA2C;AAE3C;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,IAAU;;IACrE,IAAI,CAAC,CAAA,MAAA,IAAI,CAAC,OAAO,0CAAE,MAAM,CAAA,EAAE,CAAC;QAC1B,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,WAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC9F,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAS,IAAI,CAAA;IAC3C,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAkB,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;AACvF,CAAC","sourcesContent":["import { Domain, getRepository } from '@things-factory/shell'\n\nimport { User } from '../service/user/user'\n\n/**\n * @description Based on domain and user information,\n * Find out whether the user belongs domain or user has partnership with domain\n *\n * @param domain\n * @param user\n */\nexport async function checkUserBelongsDomain(domain: Domain, user: User): Promise<Boolean> {\n  if (!user.domains?.length) {\n    user = await getRepository(User).findOne({ where: { id: user.id }, relations: ['domains'] })\n  }\n\n  const { domains: userDomains }: User = user\n  return Boolean(userDomains.find((userDomain: Domain) => userDomain.id === domain.id))\n}\n"]}

package/dist-server/utils/encrypt-state.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.decryptState = exports.encryptState = void 0;
+exports.encryptState = encryptState;
+exports.decryptState = decryptState;
 const tslib_1 = require("tslib");
 const crypto_1 = tslib_1.__importDefault(require("crypto"));
 /* only for short-term life state encryption */
@@ -11,7 +12,6 @@ function encryptState(text) {
     const encrypted = cipher.update(text);
     return iv.toString('hex') + ':' + Buffer.concat([encrypted, cipher.final()]).toString('hex');
 }
-exports.encryptState = encryptState;
 function decryptState(text) {
     const textParts = text.split(':');
     const iv = Buffer.from(textParts.shift(), 'hex');
@@ -20,5 +20,4 @@ function decryptState(text) {
     const decrypted = decipher.update(encryptedText);
     return Buffer.concat([decrypted, decipher.final()]).toString();
 }
-exports.decryptState = decryptState;
 //# sourceMappingURL=encrypt-state.js.map

package/dist-server/utils/encrypt-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"encrypt-state.js","sourceRoot":"","sources":["../../server/utils/encrypt-state.ts"],"names":[],"mappings":";;;;AAAA,4DAA2B;AAE3B,+CAA+C;AAC/C,MAAM,GAAG,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AAElC,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,EAAE,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAErC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC9F,CAAC;AAND,oCAMC;AAED,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;IAChD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAEhD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;AAChE,CAAC;AARD,oCAQC","sourcesContent":["import crypto from 'crypto'\n\n/* only for short-term life state encryption */\nconst KEY = crypto.randomBytes(32)\n\nexport function encryptState(text: string) {\n  const iv = crypto.randomBytes(16)\n  const cipher = crypto.createCipheriv('aes-256-cbc', Buffer.from(KEY), iv)\n  const encrypted = cipher.update(text)\n\n  return iv.toString('hex') + ':' + Buffer.concat([encrypted, cipher.final()]).toString('hex')\n}\n\nexport function decryptState(text: string) {\n  const textParts = text.split(':')\n  const iv = Buffer.from(textParts.shift(), 'hex')\n  const encryptedText = Buffer.from(textParts.join(':'), 'hex')\n  const decipher = crypto.createDecipheriv('aes-256-cbc', Buffer.from(KEY), iv)\n  const decrypted = decipher.update(encryptedText)\n\n  return Buffer.concat([decrypted, decipher.final()]).toString()\n}\n"]}
+{"version":3,"file":"encrypt-state.js","sourceRoot":"","sources":["../../server/utils/encrypt-state.ts"],"names":[],"mappings":";;AAKA,oCAMC;AAED,oCAQC;;AArBD,4DAA2B;AAE3B,+CAA+C;AAC/C,MAAM,GAAG,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AAElC,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,EAAE,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAErC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC9F,CAAC;AAED,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;IAChD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAEhD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;AAChE,CAAC","sourcesContent":["import crypto from 'crypto'\n\n/* only for short-term life state encryption */\nconst KEY = crypto.randomBytes(32)\n\nexport function encryptState(text: string) {\n  const iv = crypto.randomBytes(16)\n  const cipher = crypto.createCipheriv('aes-256-cbc', Buffer.from(KEY), iv)\n  const encrypted = cipher.update(text)\n\n  return iv.toString('hex') + ':' + Buffer.concat([encrypted, cipher.final()]).toString('hex')\n}\n\nexport function decryptState(text: string) {\n  const textParts = text.split(':')\n  const iv = Buffer.from(textParts.shift(), 'hex')\n  const encryptedText = Buffer.from(textParts.join(':'), 'hex')\n  const decipher = crypto.createDecipheriv('aes-256-cbc', Buffer.from(KEY), iv)\n  const decrypted = decipher.update(encryptedText)\n\n  return Buffer.concat([decrypted, decipher.final()]).toString()\n}\n"]}

package/dist-server/utils/get-aes-256-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-aes-256-key.js","sourceRoot":"","sources":["../../server/utils/get-aes-256-key.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C,IAAI,YAAY,GAAG,YAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;AAE5C,IAAI,CAAC,YAAY,EAAE;IACjB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE;QACxC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;KACnD;SAAM;QACL,YAAY,GAAG,kCAAkC,CAAA;KAClD;CACF;AAEY,QAAA,WAAW,GAAG,YAAY,CAAA","sourcesContent":["import { config } from '@things-factory/env'\n\nvar _AES_256_KEY = config.get('AES_256_KEY')\n\nif (!_AES_256_KEY) {\n  if (process.env.NODE_ENV == 'production') {\n    throw new TypeError('AES_256_KEY not configured.')\n  } else {\n    _AES_256_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b'\n  }\n}\n\nexport const AES_256_KEY = _AES_256_KEY\n"]}
+{"version":3,"file":"get-aes-256-key.js","sourceRoot":"","sources":["../../server/utils/get-aes-256-key.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C,IAAI,YAAY,GAAG,YAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;AAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;IAClB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpD,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,kCAAkC,CAAA;IACnD,CAAC;AACH,CAAC;AAEY,QAAA,WAAW,GAAG,YAAY,CAAA","sourcesContent":["import { config } from '@things-factory/env'\n\nvar _AES_256_KEY = config.get('AES_256_KEY')\n\nif (!_AES_256_KEY) {\n  if (process.env.NODE_ENV == 'production') {\n    throw new TypeError('AES_256_KEY not configured.')\n  } else {\n    _AES_256_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b'\n  }\n}\n\nexport const AES_256_KEY = _AES_256_KEY\n"]}

package/dist-server/utils/get-domain-from-hostname.js

@@ -1,10 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getDomainFromHostname = void 0;
+exports.getDomainFromHostname = getDomainFromHostname;
 const env_1 = require("@things-factory/env");
 var subdomainOffset = env_1.config.get('subdomainOffset', 2);
 function getDomainFromHostname(hostname) {
     return hostname.split('.').slice(-subdomainOffset).join('.');
 }
-exports.getDomainFromHostname = getDomainFromHostname;
 //# sourceMappingURL=get-domain-from-hostname.js.map

package/dist-server/utils/get-domain-from-hostname.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-domain-from-hostname.js","sourceRoot":"","sources":["../../server/utils/get-domain-from-hostname.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C,IAAI,eAAe,GAAG,YAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;AAEtD,SAAgB,qBAAqB,CAAC,QAAQ;IAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9D,CAAC;AAFD,sDAEC","sourcesContent":["import { config } from '@things-factory/env'\n\nvar subdomainOffset = config.get('subdomainOffset', 2)\n\nexport function getDomainFromHostname(hostname) {\n  return hostname.split('.').slice(-subdomainOffset).join('.')\n}\n"]}
+{"version":3,"file":"get-domain-from-hostname.js","sourceRoot":"","sources":["../../server/utils/get-domain-from-hostname.ts"],"names":[],"mappings":";;AAIA,sDAEC;AAND,6CAA4C;AAE5C,IAAI,eAAe,GAAG,YAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;AAEtD,SAAgB,qBAAqB,CAAC,QAAQ;IAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9D,CAAC","sourcesContent":["import { config } from '@things-factory/env'\n\nvar subdomainOffset = config.get('subdomainOffset', 2)\n\nexport function getDomainFromHostname(hostname) {\n  return hostname.split('.').slice(-subdomainOffset).join('.')\n}\n"]}

package/dist-server/utils/get-domain-users.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildDomainUsersQueryBuilder = exports.getDomainUsers = void 0;
+exports.getDomainUsers = getDomainUsers;
+exports.buildDomainUsersQueryBuilder = buildDomainUsersQueryBuilder;
 const shell_1 = require("@things-factory/shell");
 const user_1 = require("../service/user/user");
 async function getDomainUsers(domain, trxMgr) {
@@ -14,7 +15,6 @@ async function getDomainUsers(domain, trxMgr) {
     const qb = buildDomainUsersQueryBuilder(domain.id);
     return await qb.getMany();
 }
-exports.getDomainUsers = getDomainUsers;
 function buildDomainUsersQueryBuilder(domainId, alias = 'USER', trxMgr) {
     const userRepo = (trxMgr === null || trxMgr === void 0 ? void 0 : trxMgr.getRepository(user_1.User)) || (0, shell_1.getRepository)(user_1.User);
     const qb = userRepo.createQueryBuilder(alias);
@@ -26,5 +26,4 @@ function buildDomainUsersQueryBuilder(domainId, alias = 'USER', trxMgr) {
         .getQuery()}`);
     return qb;
 }
-exports.buildDomainUsersQueryBuilder = buildDomainUsersQueryBuilder;
 //# sourceMappingURL=get-domain-users.js.map

package/dist-server/utils/get-domain-users.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-domain-users.js","sourceRoot":"","sources":["../../server/utils/get-domain-users.ts"],"names":[],"mappings":";;;AAEA,iDAA6D;AAE7D,+CAA2C;AAEpC,KAAK,UAAU,cAAc,CAAC,MAAuB,EAAE,MAAsB;IAClF,MAAM,UAAU,GAAuB,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,CAAC,cAAM,CAAC,KAAI,IAAA,qBAAa,EAAC,cAAM,CAAC,CAAA;IAE7F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;QACd,MAAM,WAAW,GAAW,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAClF,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAA;QAEzF,MAAM,GAAG,WAAW,CAAA;KACrB;IAED,MAAM,EAAE,GAA6B,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC5E,OAAO,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;AAC3B,CAAC;AAZD,wCAYC;AAED,SAAgB,4BAA4B,CAC1C,QAAgB,EAChB,QAAgB,MAAM,EACtB,MAAsB;IAEtB,MAAM,QAAQ,GAAqB,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,CAAC,WAAI,CAAC,KAAI,IAAA,qBAAa,EAAC,WAAI,CAAC,CAAA;IACrF,MAAM,EAAE,GAA6B,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACvE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAClB,GAAG,KAAK,UAAU,EAAE;SACjB,QAAQ,EAAE;SACV,MAAM,CAAC,wBAAwB,CAAC;SAChC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC;SACtC,KAAK,CAAC,sCAAsC,EAAE,EAAE,QAAQ,EAAE,CAAC;SAC3D,QAAQ,EAAE,EAAE,CAChB,CAAA;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAjBD,oEAiBC","sourcesContent":["import { EntityManager, Repository, SelectQueryBuilder } from 'typeorm'\n\nimport { Domain, getRepository } from '@things-factory/shell'\n\nimport { User } from '../service/user/user'\n\nexport async function getDomainUsers(domain: Partial<Domain>, trxMgr?: EntityManager): Promise<User[]> {\n  const domainRepo: Repository<Domain> = trxMgr?.getRepository(Domain) || getRepository(Domain)\n\n  if (!domain.id) {\n    const foundDomain: Domain = await domainRepo.findOne({ where: { id: domain.id } })\n    if (!foundDomain) throw new Error(`Failed to find domain by passed condition, ${domain}`)\n\n    domain = foundDomain\n  }\n\n  const qb: SelectQueryBuilder<User> = buildDomainUsersQueryBuilder(domain.id)\n  return await qb.getMany()\n}\n\nexport function buildDomainUsersQueryBuilder(\n  domainId: string,\n  alias: string = 'USER',\n  trxMgr?: EntityManager\n): SelectQueryBuilder<User> {\n  const userRepo: Repository<User> = trxMgr?.getRepository(User) || getRepository(User)\n  const qb: SelectQueryBuilder<User> = userRepo.createQueryBuilder(alias)\n  qb.select().andWhere(\n    `${alias}.id IN ${qb\n      .subQuery()\n      .select('USERS_DOMAINS.users_id')\n      .from('users_domains', 'USERS_DOMAINS')\n      .where('USERS_DOMAINS.domains_id = :domainId', { domainId })\n      .getQuery()}`\n  )\n\n  return qb\n}\n"]}
+{"version":3,"file":"get-domain-users.js","sourceRoot":"","sources":["../../server/utils/get-domain-users.ts"],"names":[],"mappings":";;AAMA,wCAYC;AAED,oEAiBC;AAnCD,iDAA6D;AAE7D,+CAA2C;AAEpC,KAAK,UAAU,cAAc,CAAC,MAAuB,EAAE,MAAsB;IAClF,MAAM,UAAU,GAAuB,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,CAAC,cAAM,CAAC,KAAI,IAAA,qBAAa,EAAC,cAAM,CAAC,CAAA;IAE7F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,WAAW,GAAW,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAClF,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAA;QAEzF,MAAM,GAAG,WAAW,CAAA;IACtB,CAAC;IAED,MAAM,EAAE,GAA6B,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC5E,OAAO,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;AAC3B,CAAC;AAED,SAAgB,4BAA4B,CAC1C,QAAgB,EAChB,QAAgB,MAAM,EACtB,MAAsB;IAEtB,MAAM,QAAQ,GAAqB,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,CAAC,WAAI,CAAC,KAAI,IAAA,qBAAa,EAAC,WAAI,CAAC,CAAA;IACrF,MAAM,EAAE,GAA6B,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACvE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAClB,GAAG,KAAK,UAAU,EAAE;SACjB,QAAQ,EAAE;SACV,MAAM,CAAC,wBAAwB,CAAC;SAChC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC;SACtC,KAAK,CAAC,sCAAsC,EAAE,EAAE,QAAQ,EAAE,CAAC;SAC3D,QAAQ,EAAE,EAAE,CAChB,CAAA;IAED,OAAO,EAAE,CAAA;AACX,CAAC","sourcesContent":["import { EntityManager, Repository, SelectQueryBuilder } from 'typeorm'\n\nimport { Domain, getRepository } from '@things-factory/shell'\n\nimport { User } from '../service/user/user'\n\nexport async function getDomainUsers(domain: Partial<Domain>, trxMgr?: EntityManager): Promise<User[]> {\n  const domainRepo: Repository<Domain> = trxMgr?.getRepository(Domain) || getRepository(Domain)\n\n  if (!domain.id) {\n    const foundDomain: Domain = await domainRepo.findOne({ where: { id: domain.id } })\n    if (!foundDomain) throw new Error(`Failed to find domain by passed condition, ${domain}`)\n\n    domain = foundDomain\n  }\n\n  const qb: SelectQueryBuilder<User> = buildDomainUsersQueryBuilder(domain.id)\n  return await qb.getMany()\n}\n\nexport function buildDomainUsersQueryBuilder(\n  domainId: string,\n  alias: string = 'USER',\n  trxMgr?: EntityManager\n): SelectQueryBuilder<User> {\n  const userRepo: Repository<User> = trxMgr?.getRepository(User) || getRepository(User)\n  const qb: SelectQueryBuilder<User> = userRepo.createQueryBuilder(alias)\n  qb.select().andWhere(\n    `${alias}.id IN ${qb\n      .subQuery()\n      .select('USERS_DOMAINS.users_id')\n      .from('users_domains', 'USERS_DOMAINS')\n      .where('USERS_DOMAINS.domains_id = :domainId', { domainId })\n      .getQuery()}`\n  )\n\n  return qb\n}\n"]}

package/dist-server/utils/get-secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-secret.js","sourceRoot":"","sources":["../../server/utils/get-secret.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C,IAAI,OAAO,GAAG,YAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;AAElC,IAAI,CAAC,OAAO,EAAE;IACZ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE;QACxC,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;KAClD;SAAM;QACL,OAAO,GAAG,4CAA4C,CAAA;KACvD;CACF;AAEY,QAAA,MAAM,GAAG,OAAO,CAAA","sourcesContent":["import { config } from '@things-factory/env'\n\nvar _SECRET = config.get('SECRET')\n\nif (!_SECRET) {\n  if (process.env.NODE_ENV == 'production') {\n    throw new TypeError('SECRET key not configured.')\n  } else {\n    _SECRET = '0xD58F835B69D207A76CC5F84a70a1D0d4C79dAC95'\n  }\n}\n\nexport const SECRET = _SECRET\n"]}
+{"version":3,"file":"get-secret.js","sourceRoot":"","sources":["../../server/utils/get-secret.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C,IAAI,OAAO,GAAG,YAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;AAElC,IAAI,CAAC,OAAO,EAAE,CAAC;IACb,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,4CAA4C,CAAA;IACxD,CAAC;AACH,CAAC;AAEY,QAAA,MAAM,GAAG,OAAO,CAAA","sourcesContent":["import { config } from '@things-factory/env'\n\nvar _SECRET = config.get('SECRET')\n\nif (!_SECRET) {\n  if (process.env.NODE_ENV == 'production') {\n    throw new TypeError('SECRET key not configured.')\n  } else {\n    _SECRET = '0xD58F835B69D207A76CC5F84a70a1D0d4C79dAC95'\n  }\n}\n\nexport const SECRET = _SECRET\n"]}

package/dist-server/utils/get-user-domains.js

@@ -1,6 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getDomainsAsOwner = exports.getDomainsWithPrivilege = exports.getRoleBasedDomains = exports.getUserDomains = void 0;
+exports.getUserDomains = getUserDomains;
+exports.getRoleBasedDomains = getRoleBasedDomains;
+exports.getDomainsWithPrivilege = getDomainsWithPrivilege;
+exports.getDomainsAsOwner = getDomainsAsOwner;
 const shell_1 = require("@things-factory/shell");
 const user_1 = require("../service/user/user");
 async function getUserDomains(user) {
@@ -33,7 +36,6 @@ async function getUserDomains(user) {
         return { id, name, description, subdomain, extType, brandName, brandImage };
     });
 }
-exports.getUserDomains = getUserDomains;
 async function getRoleBasedDomains(user) {
     return (await (0, shell_1.getRepository)(shell_1.Domain)
         .createQueryBuilder('DOMAIN')
@@ -54,7 +56,6 @@ async function getRoleBasedDomains(user) {
         return { id, name, description, subdomain, extType, brandName, brandImage };
     });
 }
-exports.getRoleBasedDomains = getRoleBasedDomains;
 async function getDomainsWithPrivilege(user, privilege, category) {
     return (await (0, shell_1.getRepository)(shell_1.Domain)
         .createQueryBuilder('DOMAIN')
@@ -88,7 +89,6 @@ async function getDomainsWithPrivilege(user, privilege, category) {
         return { id, name, description, subdomain, extType, brandName, brandImage };
     });
 }
-exports.getDomainsWithPrivilege = getDomainsWithPrivilege;
 async function getDomainsAsOwner(user) {
     return (await (0, shell_1.getRepository)(shell_1.Domain).find({
         where: { owner: user.id }
@@ -97,5 +97,4 @@ async function getDomainsAsOwner(user) {
         return { id, name, description, subdomain, extType, brandName, brandImage };
     });
 }
-exports.getDomainsAsOwner = getDomainsAsOwner;
 //# sourceMappingURL=get-user-domains.js.map

package/dist-server/utils/get-user-domains.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-user-domains.js","sourceRoot":"","sources":["../../server/utils/get-user-domains.ts"],"names":[],"mappings":";;;AAEA,iDAA6D;AAE7D,+CAA2C;AAEpC,KAAK,UAAU,cAAc,CAAC,IAAU;IAC7C,OAAO,CACL,MAAM,IAAA,qBAAa,EAAC,cAAM,CAAC;SACxB,kBAAkB,CAAC,QAAQ,CAAC;SAC5B,KAAK,CAAC,EAAE,CAAC,EAAE;QACV,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,QAAQ,CAAC,IAAI,CAAC;aACd,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,WAAI,EAAE,MAAM,CAAC;aAClB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;aAC9B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;aACjC,KAAK,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC/C,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC,EAAE;QACZ,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,cAAM,EAAE,QAAQ,CAAC;aACtB,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAClD,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC;SAC7B,OAAO,EAAE,CACb,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC;AA/BD,wCA+BC;AAEM,KAAK,UAAU,mBAAmB,CAAC,IAAU;IAClD,OAAO,CACL,MAAM,IAAA,qBAAa,EAAC,cAAM,CAAC;SACxB,kBAAkB,CAAC,QAAQ,CAAC;SAC5B,KAAK,CAAC,EAAE,CAAC,EAAE;QACV,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,QAAQ,CAAC,IAAI,CAAC;aACd,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,WAAI,EAAE,MAAM,CAAC;aAClB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;aAC9B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;aACjC,KAAK,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC/C,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,EAAE,CACb,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC;AArBD,kDAqBC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,SAAiB,EACjB,QAAgB;IAEhB,OAAO,CACL,MAAM,IAAA,qBAAa,EAAC,cAAM,CAAC;SACxB,kBAAkB,CAAC,QAAQ,CAAC;SAC5B,KAAK,CAAC,EAAE,CAAC,EAAE;QACV,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,QAAQ,CAAC,IAAI,CAAC;aACd,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,WAAI,EAAE,MAAM,CAAC;aAClB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;aAC9B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;aACjC,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC;aACxC,KAAK,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC/C,QAAQ,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,CAAC;aACtD,QAAQ,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,CAAC;aACxD,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC,EAAE;QACZ,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,cAAM,EAAE,QAAQ,CAAC;aACtB,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAClD,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC;SAC7B,OAAO,EAAE,CACb,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC;AAtCD,0DAsCC;AAEM,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,OAAO,CACL,MAAM,IAAA,qBAAa,EAAC,cAAM,CAAC,CAAC,IAAI,CAAC;QAC/B,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;KAC1B,CAAC,CACH,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC;AATD,8CASC","sourcesContent":["import { In } from 'typeorm'\n\nimport { Domain, getRepository } from '@things-factory/shell'\n\nimport { User } from '../service/user/user'\n\nexport async function getUserDomains(user: User): Promise<Partial<Domain>[]> {\n  return (\n    await getRepository(Domain)\n      .createQueryBuilder('DOMAIN')\n      .where(qb => {\n        const subQuery = qb\n          .subQuery()\n          .distinct(true)\n          .select('DOMAIN.id')\n          .from(User, 'USER')\n          .leftJoin('USER.roles', 'ROLE')\n          .leftJoin('ROLE.domain', 'DOMAIN')\n          .where('USER.id = :userId', { userId: user.id })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .orWhere(qb => {\n        const subQuery = qb\n          .subQuery()\n          .select('DOMAIN.id')\n          .from(Domain, 'DOMAIN')\n          .where('DOMAIN.owner = :owner', { owner: user.id })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .orderBy('DOMAIN.name', 'ASC')\n      .getMany()\n  ).map(domain => {\n    const { id, name, description, subdomain, extType, brandName, brandImage } = domain\n    return { id, name, description, subdomain, extType, brandName, brandImage }\n  })\n}\n\nexport async function getRoleBasedDomains(user: User): Promise<Partial<Domain>[]> {\n  return (\n    await getRepository(Domain)\n      .createQueryBuilder('DOMAIN')\n      .where(qb => {\n        const subQuery = qb\n          .subQuery()\n          .distinct(true)\n          .select('DOMAIN.id')\n          .from(User, 'USER')\n          .leftJoin('USER.roles', 'ROLE')\n          .leftJoin('ROLE.domain', 'DOMAIN')\n          .where('USER.id = :userId', { userId: user.id })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .getMany()\n  ).map(domain => {\n    const { id, name, description, subdomain, extType, brandName, brandImage } = domain\n    return { id, name, description, subdomain, extType, brandName, brandImage }\n  })\n}\n\nexport async function getDomainsWithPrivilege(\n  user: User,\n  privilege: string,\n  category: string\n): Promise<Partial<Domain>[]> {\n  return (\n    await getRepository(Domain)\n      .createQueryBuilder('DOMAIN')\n      .where(qb => {\n        const subQuery = qb\n          .subQuery()\n          .distinct(true)\n          .select('DOMAIN.id')\n          .from(User, 'USER')\n          .leftJoin('USER.roles', 'ROLE')\n          .leftJoin('ROLE.domain', 'DOMAIN')\n          .leftJoin('ROLE.privileges', 'PRIVILEGE')\n          .where('USER.id = :userId', { userId: user.id })\n          .andWhere('PRIVILEGE.name = :privilege', { privilege })\n          .andWhere('PRIVILEGE.category = :category', { category })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .orWhere(qb => {\n        const subQuery = qb\n          .subQuery()\n          .select('DOMAIN.id')\n          .from(Domain, 'DOMAIN')\n          .where('DOMAIN.owner = :owner', { owner: user.id })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .orderBy('DOMAIN.name', 'ASC')\n      .getMany()\n  ).map(domain => {\n    const { id, name, description, subdomain, extType, brandName, brandImage } = domain\n    return { id, name, description, subdomain, extType, brandName, brandImage }\n  })\n}\n\nexport async function getDomainsAsOwner(user: User): Promise<Partial<Domain>[]> {\n  return (\n    await getRepository(Domain).find({\n      where: { owner: user.id }\n    })\n  ).map(domain => {\n    const { id, name, description, subdomain, extType, brandName, brandImage } = domain\n    return { id, name, description, subdomain, extType, brandName, brandImage }\n  })\n}\n"]}
+{"version":3,"file":"get-user-domains.js","sourceRoot":"","sources":["../../server/utils/get-user-domains.ts"],"names":[],"mappings":";;AAMA,wCA+BC;AAED,kDAqBC;AAED,0DAsCC;AAED,8CASC;AA7GD,iDAA6D;AAE7D,+CAA2C;AAEpC,KAAK,UAAU,cAAc,CAAC,IAAU;IAC7C,OAAO,CACL,MAAM,IAAA,qBAAa,EAAC,cAAM,CAAC;SACxB,kBAAkB,CAAC,QAAQ,CAAC;SAC5B,KAAK,CAAC,EAAE,CAAC,EAAE;QACV,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,QAAQ,CAAC,IAAI,CAAC;aACd,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,WAAI,EAAE,MAAM,CAAC;aAClB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;aAC9B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;aACjC,KAAK,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC/C,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC,EAAE;QACZ,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,cAAM,EAAE,QAAQ,CAAC;aACtB,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAClD,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC;SAC7B,OAAO,EAAE,CACb,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,IAAU;IAClD,OAAO,CACL,MAAM,IAAA,qBAAa,EAAC,cAAM,CAAC;SACxB,kBAAkB,CAAC,QAAQ,CAAC;SAC5B,KAAK,CAAC,EAAE,CAAC,EAAE;QACV,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,QAAQ,CAAC,IAAI,CAAC;aACd,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,WAAI,EAAE,MAAM,CAAC;aAClB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;aAC9B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;aACjC,KAAK,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC/C,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,EAAE,CACb,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,SAAiB,EACjB,QAAgB;IAEhB,OAAO,CACL,MAAM,IAAA,qBAAa,EAAC,cAAM,CAAC;SACxB,kBAAkB,CAAC,QAAQ,CAAC;SAC5B,KAAK,CAAC,EAAE,CAAC,EAAE;QACV,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,QAAQ,CAAC,IAAI,CAAC;aACd,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,WAAI,EAAE,MAAM,CAAC;aAClB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;aAC9B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;aACjC,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC;aACxC,KAAK,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC/C,QAAQ,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,CAAC;aACtD,QAAQ,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,CAAC;aACxD,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC,EAAE;QACZ,MAAM,QAAQ,GAAG,EAAE;aAChB,QAAQ,EAAE;aACV,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,cAAM,EAAE,QAAQ,CAAC;aACtB,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAClD,QAAQ,EAAE,CAAA;QACb,OAAO,eAAe,GAAG,QAAQ,CAAA;IACnC,CAAC,CAAC;SACD,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC;SAC7B,OAAO,EAAE,CACb,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,OAAO,CACL,MAAM,IAAA,qBAAa,EAAC,cAAM,CAAC,CAAC,IAAI,CAAC;QAC/B,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;KAC1B,CAAC,CACH,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { In } from 'typeorm'\n\nimport { Domain, getRepository } from '@things-factory/shell'\n\nimport { User } from '../service/user/user'\n\nexport async function getUserDomains(user: User): Promise<Partial<Domain>[]> {\n  return (\n    await getRepository(Domain)\n      .createQueryBuilder('DOMAIN')\n      .where(qb => {\n        const subQuery = qb\n          .subQuery()\n          .distinct(true)\n          .select('DOMAIN.id')\n          .from(User, 'USER')\n          .leftJoin('USER.roles', 'ROLE')\n          .leftJoin('ROLE.domain', 'DOMAIN')\n          .where('USER.id = :userId', { userId: user.id })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .orWhere(qb => {\n        const subQuery = qb\n          .subQuery()\n          .select('DOMAIN.id')\n          .from(Domain, 'DOMAIN')\n          .where('DOMAIN.owner = :owner', { owner: user.id })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .orderBy('DOMAIN.name', 'ASC')\n      .getMany()\n  ).map(domain => {\n    const { id, name, description, subdomain, extType, brandName, brandImage } = domain\n    return { id, name, description, subdomain, extType, brandName, brandImage }\n  })\n}\n\nexport async function getRoleBasedDomains(user: User): Promise<Partial<Domain>[]> {\n  return (\n    await getRepository(Domain)\n      .createQueryBuilder('DOMAIN')\n      .where(qb => {\n        const subQuery = qb\n          .subQuery()\n          .distinct(true)\n          .select('DOMAIN.id')\n          .from(User, 'USER')\n          .leftJoin('USER.roles', 'ROLE')\n          .leftJoin('ROLE.domain', 'DOMAIN')\n          .where('USER.id = :userId', { userId: user.id })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .getMany()\n  ).map(domain => {\n    const { id, name, description, subdomain, extType, brandName, brandImage } = domain\n    return { id, name, description, subdomain, extType, brandName, brandImage }\n  })\n}\n\nexport async function getDomainsWithPrivilege(\n  user: User,\n  privilege: string,\n  category: string\n): Promise<Partial<Domain>[]> {\n  return (\n    await getRepository(Domain)\n      .createQueryBuilder('DOMAIN')\n      .where(qb => {\n        const subQuery = qb\n          .subQuery()\n          .distinct(true)\n          .select('DOMAIN.id')\n          .from(User, 'USER')\n          .leftJoin('USER.roles', 'ROLE')\n          .leftJoin('ROLE.domain', 'DOMAIN')\n          .leftJoin('ROLE.privileges', 'PRIVILEGE')\n          .where('USER.id = :userId', { userId: user.id })\n          .andWhere('PRIVILEGE.name = :privilege', { privilege })\n          .andWhere('PRIVILEGE.category = :category', { category })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .orWhere(qb => {\n        const subQuery = qb\n          .subQuery()\n          .select('DOMAIN.id')\n          .from(Domain, 'DOMAIN')\n          .where('DOMAIN.owner = :owner', { owner: user.id })\n          .getQuery()\n        return 'DOMAIN.id IN ' + subQuery\n      })\n      .orderBy('DOMAIN.name', 'ASC')\n      .getMany()\n  ).map(domain => {\n    const { id, name, description, subdomain, extType, brandName, brandImage } = domain\n    return { id, name, description, subdomain, extType, brandName, brandImage }\n  })\n}\n\nexport async function getDomainsAsOwner(user: User): Promise<Partial<Domain>[]> {\n  return (\n    await getRepository(Domain).find({\n      where: { owner: user.id }\n    })\n  ).map(domain => {\n    const { id, name, description, subdomain, extType, brandName, brandImage } = domain\n    return { id, name, description, subdomain, extType, brandName, brandImage }\n  })\n}\n"]}

package/helps/config/SECRET.ja.md

@@ -0,0 +1,13 @@
+# SECRET
+
+すべてのアプリケーションは、以下のサンプルのように独自のSECRETキーを指定する必要があります。
+この設定は、認証用のjwtキーを生成する際の暗号化SEEDとして使用されます。
+したがって、新しくデプロイされた場所で独自のSECRETキーを指定しないと、デフォルト値（すでに知られている可能性がある）が使用されるため、セキュリティが脆弱になる可能性があります。
+
+## default
+
+```
+module.exports = {
+  SECRET: '0xD58F835B69D207A76CC5F84a70a1D0d4C79dAC95',
+}
+```

package/helps/config/SECRET.ko.md

@@ -0,0 +1,13 @@
+# SECRET
+
+모든 어플리케이션은 아래 샘플과 같이 독자적인 SECRET 키를 지정하여야 한다.
+이 설정은 인증을 위한 jwt key 생성시 암호화를 위한 SEED로 사용된다.
+따라서, 새로 디플로이된 곳에 독자적인 SECRET 키를 새로 지정하지 않으면, (이미 알려져있을 수 있는) 디폴트 값이 사용되므로 보안에 취약해질 수 있다.
+
+## default
+
+```
+module.exports = {
+  SECRET: '0xD58F835B69D207A76CC5F84a70a1D0d4C79dAC95',
+}
+```

package/helps/config/SECRET.md

@@ -1,8 +1,8 @@
 # SECRET
 
-모든 어플리케이션은 아래 샘플과 같이 독자적인 SECRET 키를 지정하여야 한다.
-이 설정은 인증을 위한 jwt key 생성시 암호화를 위한 SEED로 사용된다.
-따라서, 새로 디플로이된 곳에 독자적인 SECRET 키를 새로 지정하지 않으면, (이미 알려져있을 수 있는) 디폴트 값이 사용되므로 보안에 취약해질 수 있다.
+all applications must specify a unique SECRET key as shown in the sample below.
+this setting is used as the SEED for encryption when generating the jwt key for authentication.
+therefore, if a unique SECRET key is not specified in a newly deployed location, the default value (which may already be known) will be used, potentially compromising security.
 
 ## default
 

package/helps/config/SECRET.ms.md

@@ -0,0 +1,13 @@
+# SECRET
+
+semua aplikasi mesti menetapkan kunci SECRET yang unik seperti dalam contoh di bawah.
+tetapan ini digunakan sebagai SEED untuk penyulitan semasa menghasilkan kunci jwt untuk pengesahan.
+oleh itu, jika kunci SECRET yang unik tidak ditetapkan di tempat yang baru diterapkan, nilai lalai (yang mungkin sudah diketahui) akan digunakan, yang boleh menyebabkan kelemahan keselamatan.
+
+## default
+
+```
+module.exports = {
+  SECRET: '0xD58F835B69D207A76CC5F84a70a1D0d4C79dAC95',
+}
+```

package/helps/config/SECRET.zh.md

@@ -0,0 +1,13 @@
+# SECRET
+
+所有应用程序必须指定一个独特的SECRET键，如下面的示例所示。
+此设置用于生成jwt密钥时的加密SEED。
+因此，如果在新部署的地方不指定独特的SECRET键，将使用默认值（可能已知），这可能导致安全漏洞。
+
+## default
+
+```
+module.exports = {
+  SECRET: '0xD58F835B69D207A76CC5F84a70a1D0d4C79dAC95',
+}
+```

package/helps/config/accessTokenCookieKey.ja.md

@@ -0,0 +1,11 @@
+# accessTokenCookieKey
+
+ブラウザでクッキーを活用してセッションキーを保存する場合、セッションキーとして活用される固有のクッキーキーを指定することができます。
+
+## default
+
+```
+module.exports = {
+  accessTokenCookieKey: 'access_token',
+}
+```

package/helps/config/accessTokenCookieKey.ko.md

@@ -0,0 +1,11 @@
+# accessTokenCookieKey
+
+브라우저에서 쿠키를 활용해서 세션키를 저장하는 경우, 세션키로 활용될 고유한 쿠키의 키를 지정할 수 있다.
+
+## default
+
+```
+module.exports = {
+  accessTokenCookieKey: 'access_token',
+}
+```

package/helps/config/accessTokenCookieKey.md

@@ -1,6 +1,6 @@
 # accessTokenCookieKey
 
-브라우저에서 쿠키를 활용해서 세션키를 저장하는 경우, 세션키로 활용될 고유한 쿠키의 키를 지정할 수 있다.
+in cases where the session key is stored using cookies in the browser, the unique cookie key to be used as the session key can be specified.
 
 ## default
 

package/helps/config/accessTokenCookieKey.ms.md

@@ -0,0 +1,11 @@
+# accessTokenCookieKey
+
+dalam kes menyimpan kunci sesi menggunakan kuki di pelayar, kunci kuki yang unik boleh ditentukan untuk digunakan sebagai kunci sesi.
+
+## default
+
+```
+module.exports = {
+  accessTokenCookieKey: 'access_token',
+}
+```

package/helps/config/accessTokenCookieKey.zh.md

@@ -0,0 +1,11 @@
+# accessTokenCookieKey
+
+通过在浏览器中使用cookie来存储会话密钥的情况，可以指定用于会话密钥的唯一cookie键。
+
+## default
+
+```
+module.exports = {
+  accessTokenCookieKey: 'access_token',
+}
+```

package/helps/config/applianceJwtExpiresIn.ja.md

@@ -0,0 +1,26 @@
+# applianceJwtExpiresIn
+
+デバイスのアクセストークンの有効期限を設定します。
+
+- 設定値は次のような複数の形式が可能です。[参考](https://github.com/vercel/ms)
+
+```
+2 days // 2日
+1d // 1日
+10h // 10時間
+2.5 hrs // 2.5時間
+2h // 2時間
+1m // 1分
+5s // 5秒
+1y // 1年
+10y // 10年
+100 // 100ミリ秒
+```
+
+## default
+
+```
+module.exports = {
+  applianceJwtExpiresIn: '1y',
+}
+```

package/helps/config/applianceJwtExpiresIn.ko.md

@@ -0,0 +1,26 @@
+# applianceJwtExpiresIn
+
+단말장치의 액세스토큰의 사용 유효기간을 설정한다.
+
+- 설정값은 다음과 같은 여러 형태로 가능합니다.[참조](https://github.com/vercel/ms)
+
+```
+2 days  // 2일
+1d      // 하루
+10h     // 10시간
+2.5 hrs // 2.5시간
+2h      // 2시간
+1m      // 1분
+5s      // 5초
+1y      // 1년
+10y     // 10년
+100     // 100 미리초
+```
+
+## default
+
+```
+module.exports = {
+  applianceJwtExpiresIn: '1y',
+}
+```

package/helps/config/applianceJwtExpiresIn.md

@@ -1,26 +1,29 @@
 # applianceJwtExpiresIn
 
-단말장치의 액세스토큰의 사용 유효기간을 설정한다.
+sets the validity period for the device access token.
 
-- 설정값은 다음과 같은 여러 형태로 가능합니다.[참조](https://github.com/vercel/ms)
+- the setting value can be in various formats as follows.[reference](https://github.com/vercel/ms)
 
-```
-2 days  // 2일
-1d      // 하루
-10h     // 10시간
-2.5 hrs // 2.5시간
-2h      // 2시간
-1m      // 1분
-5s      // 5초
-1y      // 1년
-10y     // 10년
-100     // 100 미리초
+````
+2 days // 2 days
+1d // 1 day
+10h // 10 hours
+2.5 hrs // 2.5 hours
+2h // 2 hours
+1m // 1 minute
+5s // 5 seconds
+1y // 1 year
+10y // 10 years
 ```
 
 ## default
 
-```
+````
+
 module.exports = {
-  applianceJwtExpiresIn: '1y',
+applianceJwtExpiresIn: '1y',
 }
+
+```
+
 ```

package/helps/config/applianceJwtExpiresIn.ms.md

@@ -0,0 +1,30 @@
+# applianceJwtExpiresIn
+
+menetapkan tempoh sah token akses peranti.
+
+- nilai tetapan boleh dalam pelbagai bentuk berikut.[rujukan](https://github.com/vercel/ms)
+
+````
+2 days // 2 hari
+1d // 1 hari
+10h // 10 jam
+2.5 hrs // 2.5 jam
+2h // 2 jam
+1m // 1 minit
+5s // 5 saat
+1y // 1 tahun
+10y // 10 tahun
+100 // 100 milisaat
+```
+
+## default
+
+````
+
+module.exports = {
+applianceJwtExpiresIn: '1y',
+}
+
+```
+
+```

package/helps/config/applianceJwtExpiresIn.zh.md

@@ -0,0 +1,26 @@
+# applianceJwtExpiresIn
+
+设置设备访问令牌的有效期。
+
+- 设置值可以是以下多种形式。[参考](https://github.com/vercel/ms)
+
+```
+2 days // 2天
+1d // 1天
+10h // 10小时
+2.5 hrs // 2.5小时
+2h // 2小时
+1m // 1分钟
+5s // 5秒
+1y // 1年
+10y // 10年
+100 // 100毫秒
+```
+
+## default
+
+```
+module.exports = {
+  applianceJwtExpiresIn: '1y',
+}
+```