@things-factory/auth-base 8.0.5 → 9.0.0-beta.12

package/dist-server/controllers/verification.js

@@ -6,22 +6,23 @@ exports.resendVerificationEmail = resendVerificationEmail;
 const url_1 = require("url");
 const email_base_1 = require("@things-factory/email-base");
 const shell_1 = require("@things-factory/shell");
-const auth_error_1 = require("../errors/auth-error");
-const user_1 = require("../service/user/user");
-const verification_token_1 = require("../service/verification-token/verification-token");
-const verification_email_1 = require("../templates/verification-email");
-const make_verification_token_1 = require("./utils/make-verification-token");
-const save_verification_token_1 = require("./utils/save-verification-token");
+const auth_error_js_1 = require("../errors/auth-error.js");
+const user_js_1 = require("../service/user/user.js");
+const verification_token_js_1 = require("../service/verification-token/verification-token.js");
+const verification_email_js_1 = require("../templates/verification-email.js");
+const make_verification_token_js_1 = require("./utils/make-verification-token.js");
+const save_verification_token_js_1 = require("./utils/save-verification-token.js");
 async function sendVerificationEmail({ user, context }) {
     try {
-        var token = (0, make_verification_token_1.makeVerificationToken)();
-        var verifaction = await (0, save_verification_token_1.saveVerificationToken)(user.id, token);
+        var token = (0, make_verification_token_js_1.makeVerificationToken)();
+        var verifaction = await (0, save_verification_token_js_1.saveVerificationToken)(user.id, token);
         if (verifaction) {
             var serviceUrl = new url_1.URL(`/auth/verify/${token}`, context.header.referer);
             await (0, email_base_1.sendEmail)({
                 receiver: user.email,
                 subject: 'Verify your email',
-                content: (0, verification_email_1.getVerificationEmailForm)({
+                content: (0, verification_email_js_1.getVerificationEmailForm)({
+                    username: user.username,
                     name: user.name,
                     verifyUrl: serviceUrl
                 })
@@ -34,41 +35,41 @@ async function sendVerificationEmail({ user, context }) {
     }
 }
 async function verify(token) {
-    var verification = await (0, shell_1.getRepository)(verification_token_1.VerificationToken).findOne({
+    var verification = await (0, shell_1.getRepository)(verification_token_js_1.VerificationToken).findOne({
         where: {
             token
         }
     });
     if (!verification) {
-        throw new auth_error_1.AuthError({
-            errorCode: auth_error_1.AuthError.ERROR_CODES.VERIFICATION_ERROR
+        throw new auth_error_js_1.AuthError({
+            errorCode: auth_error_js_1.AuthError.ERROR_CODES.VERIFICATION_ERROR
         });
     }
-    var userInfo = await (0, shell_1.getRepository)(user_1.User).findOneBy({ id: verification.userId });
+    var userInfo = await (0, shell_1.getRepository)(user_js_1.User).findOneBy({ id: verification.userId });
     if (!userInfo) {
-        throw new auth_error_1.AuthError({
-            errorCode: auth_error_1.AuthError.ERROR_CODES.VERIFICATION_ERROR
+        throw new auth_error_js_1.AuthError({
+            errorCode: auth_error_js_1.AuthError.ERROR_CODES.VERIFICATION_ERROR
         });
     }
-    if (!(userInfo.status == user_1.UserStatus.INACTIVE || userInfo.status == user_1.UserStatus.LOCKED)) {
-        throw new auth_error_1.AuthError({
-            errorCode: auth_error_1.AuthError.ERROR_CODES.VERIFICATION_ERROR
+    if (!(userInfo.status == user_js_1.UserStatus.INACTIVE || userInfo.status == user_js_1.UserStatus.LOCKED)) {
+        throw new auth_error_js_1.AuthError({
+            errorCode: auth_error_js_1.AuthError.ERROR_CODES.VERIFICATION_ERROR
         });
     }
-    userInfo.status = user_1.UserStatus.ACTIVATED;
+    userInfo.status = user_js_1.UserStatus.ACTIVATED;
     userInfo.failCount = 0;
-    await (0, shell_1.getRepository)(user_1.User).save(userInfo);
-    await (0, shell_1.getRepository)(verification_token_1.VerificationToken).delete(verification);
+    await (0, shell_1.getRepository)(user_js_1.User).save(userInfo);
+    await (0, shell_1.getRepository)(verification_token_js_1.VerificationToken).delete(verification);
 }
 async function resendVerificationEmail(email, context) {
-    var user = await (0, shell_1.getRepository)(user_1.User).findOne({
+    var user = await (0, shell_1.getRepository)(user_js_1.User).findOne({
         where: {
             email
         }
     });
     if (!user)
         return false;
-    if (user.status == user_1.UserStatus.ACTIVATED)
+    if (user.status == user_js_1.UserStatus.ACTIVATED)
         return false;
     return await sendVerificationEmail({
         user,

package/dist-server/controllers/verification.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../server/controllers/verification.ts"],"names":[],"mappings":";;AAYA,sDAqBC;AAED,wBA+BC;AAED,0DAcC;AAlFD,6BAAyB;AAEzB,2DAAsD;AACtD,iDAAqD;AAErD,qDAAgD;AAChD,+CAAuD;AACvD,yFAAoF;AACpF,wEAA0E;AAC1E,6EAAuE;AACvE,6EAAuE;AAEhE,KAAK,UAAU,qBAAqB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,IAAA,+CAAqB,GAAE,CAAA;QACnC,IAAI,WAAW,GAAG,MAAM,IAAA,+CAAqB,EAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAE7D,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,UAAU,GAAG,IAAI,SAAG,CAAC,gBAAgB,KAAK,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACzE,MAAM,IAAA,sBAAS,EAAC;gBACd,QAAQ,EAAE,IAAI,CAAC,KAAK;gBACpB,OAAO,EAAE,mBAAmB;gBAC5B,OAAO,EAAE,IAAA,6CAAwB,EAAC;oBAChC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,UAAU;iBACtB,CAAC;aACH,CAAC,CAAA;YAEF,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,MAAM,CAAC,KAAK;IAChC,IAAI,YAAY,GAAG,MAAM,IAAA,qBAAa,EAAC,sCAAiB,CAAC,CAAC,OAAO,CAAC;QAChE,KAAK,EAAE;YACL,KAAK;SACN;KACF,CAAC,CAAA;IAEF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,kBAAkB;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,QAAQ,GAAG,MAAM,IAAA,qBAAa,EAAC,WAAI,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,kBAAkB;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,iBAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,iBAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,kBAAkB;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,QAAQ,CAAC,MAAM,GAAG,iBAAU,CAAC,SAAS,CAAA;IACtC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAA;IAEtB,MAAM,IAAA,qBAAa,EAAC,WAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,IAAA,qBAAa,EAAC,sCAAiB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AAC7D,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,KAAK,EAAE,OAAO;IAC1D,IAAI,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,WAAI,CAAC,CAAC,OAAO,CAAC;QAC3C,KAAK,EAAE;YACL,KAAK;SACN;KACF,CAAC,CAAA;IAEF,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAU,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IAErD,OAAO,MAAM,qBAAqB,CAAC;QACjC,IAAI;QACJ,OAAO;KACR,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { URL } from 'url'\n\nimport { sendEmail } from '@things-factory/email-base'\nimport { getRepository } from '@things-factory/shell'\n\nimport { AuthError } from '../errors/auth-error'\nimport { User, UserStatus } from '../service/user/user'\nimport { VerificationToken } from '../service/verification-token/verification-token'\nimport { getVerificationEmailForm } from '../templates/verification-email'\nimport { makeVerificationToken } from './utils/make-verification-token'\nimport { saveVerificationToken } from './utils/save-verification-token'\n\nexport async function sendVerificationEmail({ user, context }) {\n  try {\n    var token = makeVerificationToken()\n    var verifaction = await saveVerificationToken(user.id, token)\n\n    if (verifaction) {\n      var serviceUrl = new URL(`/auth/verify/${token}`, context.header.referer)\n      await sendEmail({\n        receiver: user.email,\n        subject: 'Verify your email',\n        content: getVerificationEmailForm({\n          name: user.name,\n          verifyUrl: serviceUrl\n        })\n      })\n\n      return true\n    }\n  } catch (e) {\n    return false\n  }\n}\n\nexport async function verify(token) {\n  var verification = await getRepository(VerificationToken).findOne({\n    where: {\n      token\n    }\n  })\n\n  if (!verification) {\n    throw new AuthError({\n      errorCode: AuthError.ERROR_CODES.VERIFICATION_ERROR\n    })\n  }\n\n  var userInfo = await getRepository(User).findOneBy({ id: verification.userId })\n  if (!userInfo) {\n    throw new AuthError({\n      errorCode: AuthError.ERROR_CODES.VERIFICATION_ERROR\n    })\n  }\n\n  if (!(userInfo.status == UserStatus.INACTIVE || userInfo.status == UserStatus.LOCKED)) {\n    throw new AuthError({\n      errorCode: AuthError.ERROR_CODES.VERIFICATION_ERROR\n    })\n  }\n\n  userInfo.status = UserStatus.ACTIVATED\n  userInfo.failCount = 0\n\n  await getRepository(User).save(userInfo)\n  await getRepository(VerificationToken).delete(verification)\n}\n\nexport async function resendVerificationEmail(email, context) {\n  var user = await getRepository(User).findOne({\n    where: {\n      email\n    }\n  })\n\n  if (!user) return false\n  if (user.status == UserStatus.ACTIVATED) return false\n\n  return await sendVerificationEmail({\n    user,\n    context\n  })\n}\n"]}
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../server/controllers/verification.ts"],"names":[],"mappings":";;AAYA,sDAsBC;AAED,wBA+BC;AAED,0DAcC;AAnFD,6BAAyB;AAEzB,2DAAsD;AACtD,iDAAqD;AAErD,2DAAmD;AACnD,qDAA0D;AAC1D,+FAAuF;AACvF,8EAA6E;AAC7E,mFAA0E;AAC1E,mFAA0E;AAEnE,KAAK,UAAU,qBAAqB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,IAAA,kDAAqB,GAAE,CAAA;QACnC,IAAI,WAAW,GAAG,MAAM,IAAA,kDAAqB,EAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAE7D,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,UAAU,GAAG,IAAI,SAAG,CAAC,gBAAgB,KAAK,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACzE,MAAM,IAAA,sBAAS,EAAC;gBACd,QAAQ,EAAE,IAAI,CAAC,KAAK;gBACpB,OAAO,EAAE,mBAAmB;gBAC5B,OAAO,EAAE,IAAA,gDAAwB,EAAC;oBAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,UAAU;iBACtB,CAAC;aACH,CAAC,CAAA;YAEF,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,MAAM,CAAC,KAAK;IAChC,IAAI,YAAY,GAAG,MAAM,IAAA,qBAAa,EAAC,yCAAiB,CAAC,CAAC,OAAO,CAAC;QAChE,KAAK,EAAE;YACL,KAAK;SACN;KACF,CAAC,CAAA;IAEF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,yBAAS,CAAC;YAClB,SAAS,EAAE,yBAAS,CAAC,WAAW,CAAC,kBAAkB;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,QAAQ,GAAG,MAAM,IAAA,qBAAa,EAAC,cAAI,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,yBAAS,CAAC;YAClB,SAAS,EAAE,yBAAS,CAAC,WAAW,CAAC,kBAAkB;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,oBAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,oBAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,yBAAS,CAAC;YAClB,SAAS,EAAE,yBAAS,CAAC,WAAW,CAAC,kBAAkB;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,QAAQ,CAAC,MAAM,GAAG,oBAAU,CAAC,SAAS,CAAA;IACtC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAA;IAEtB,MAAM,IAAA,qBAAa,EAAC,cAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,IAAA,qBAAa,EAAC,yCAAiB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AAC7D,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,KAAK,EAAE,OAAO;IAC1D,IAAI,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,cAAI,CAAC,CAAC,OAAO,CAAC;QAC3C,KAAK,EAAE;YACL,KAAK;SACN;KACF,CAAC,CAAA;IAEF,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAU,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IAErD,OAAO,MAAM,qBAAqB,CAAC;QACjC,IAAI;QACJ,OAAO;KACR,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { URL } from 'url'\n\nimport { sendEmail } from '@things-factory/email-base'\nimport { getRepository } from '@things-factory/shell'\n\nimport { AuthError } from '../errors/auth-error.js'\nimport { User, UserStatus } from '../service/user/user.js'\nimport { VerificationToken } from '../service/verification-token/verification-token.js'\nimport { getVerificationEmailForm } from '../templates/verification-email.js'\nimport { makeVerificationToken } from './utils/make-verification-token.js'\nimport { saveVerificationToken } from './utils/save-verification-token.js'\n\nexport async function sendVerificationEmail({ user, context }) {\n  try {\n    var token = makeVerificationToken()\n    var verifaction = await saveVerificationToken(user.id, token)\n\n    if (verifaction) {\n      var serviceUrl = new URL(`/auth/verify/${token}`, context.header.referer)\n      await sendEmail({\n        receiver: user.email,\n        subject: 'Verify your email',\n        content: getVerificationEmailForm({\n          username: user.username,\n          name: user.name,\n          verifyUrl: serviceUrl\n        })\n      })\n\n      return true\n    }\n  } catch (e) {\n    return false\n  }\n}\n\nexport async function verify(token) {\n  var verification = await getRepository(VerificationToken).findOne({\n    where: {\n      token\n    }\n  })\n\n  if (!verification) {\n    throw new AuthError({\n      errorCode: AuthError.ERROR_CODES.VERIFICATION_ERROR\n    })\n  }\n\n  var userInfo = await getRepository(User).findOneBy({ id: verification.userId })\n  if (!userInfo) {\n    throw new AuthError({\n      errorCode: AuthError.ERROR_CODES.VERIFICATION_ERROR\n    })\n  }\n\n  if (!(userInfo.status == UserStatus.INACTIVE || userInfo.status == UserStatus.LOCKED)) {\n    throw new AuthError({\n      errorCode: AuthError.ERROR_CODES.VERIFICATION_ERROR\n    })\n  }\n\n  userInfo.status = UserStatus.ACTIVATED\n  userInfo.failCount = 0\n\n  await getRepository(User).save(userInfo)\n  await getRepository(VerificationToken).delete(verification)\n}\n\nexport async function resendVerificationEmail(email, context) {\n  var user = await getRepository(User).findOne({\n    where: {\n      email\n    }\n  })\n\n  if (!user) return false\n  if (user.status == UserStatus.ACTIVATED) return false\n\n  return await sendVerificationEmail({\n    user,\n    context\n  })\n}\n"]}

package/dist-server/errors/auth-error.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthError = void 0;
 const tslib_1 = require("tslib");
-const ERROR_CODES = tslib_1.__importStar(require("../constants/error-code"));
+const ERROR_CODES = tslib_1.__importStar(require("../constants/error-code.js"));
 class AuthError extends Error {
     static get ERROR_CODES() {
         return Object.assign({}, ERROR_CODES);

package/dist-server/errors/auth-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-error.js","sourceRoot":"","sources":["../../server/errors/auth-error.ts"],"names":[],"mappings":";;;;AAAA,6EAAsD;AAMtD,MAAa,SAAU,SAAQ,KAAK;IAClC,MAAM,KAAK,WAAW;QACpB,yBACK,WAAW,EACf;IACH,CAAC;IAKD,YAAY,EAAE,SAAS,EAAE,MAAM,EAAqB;QAClD,KAAK,CAAC,SAAS,CAAC,CAAA;QAEhB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAjBD,8BAiBC","sourcesContent":["import * as ERROR_CODES from '../constants/error-code'\n\ntype AuthErrorArgument = {\n  errorCode: string\n  detail?: Object\n}\nexport class AuthError extends Error {\n  static get ERROR_CODES(): any {\n    return {\n      ...ERROR_CODES\n    }\n  }\n\n  errorCode: any\n  detail: Object\n\n  constructor({ errorCode, detail }: AuthErrorArgument) {\n    super(errorCode)\n\n    this.name = 'auth-error'\n    this.errorCode = errorCode\n    this.detail = detail\n  }\n}\n"]}
+{"version":3,"file":"auth-error.js","sourceRoot":"","sources":["../../server/errors/auth-error.ts"],"names":[],"mappings":";;;;AAAA,gFAAyD;AAMzD,MAAa,SAAU,SAAQ,KAAK;IAClC,MAAM,KAAK,WAAW;QACpB,yBACK,WAAW,EACf;IACH,CAAC;IAKD,YAAY,EAAE,SAAS,EAAE,MAAM,EAAqB;QAClD,KAAK,CAAC,SAAS,CAAC,CAAA;QAEhB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAjBD,8BAiBC","sourcesContent":["import * as ERROR_CODES from '../constants/error-code.js'\n\ntype AuthErrorArgument = {\n  errorCode: string\n  detail?: Object\n}\nexport class AuthError extends Error {\n  static get ERROR_CODES(): any {\n    return {\n      ...ERROR_CODES\n    }\n  }\n\n  errorCode: any\n  detail: Object\n\n  constructor({ errorCode, detail }: AuthErrorArgument) {\n    super(errorCode)\n\n    this.name = 'auth-error'\n    this.errorCode = errorCode\n    this.detail = detail\n  }\n}\n"]}

package/dist-server/errors/index.d.ts

@@ -1,2 +1,2 @@
-export * from './auth-error';
-export * from './user-domain-not-match-error';
+export * from './auth-error.js';
+export * from './user-domain-not-match-error.js';

package/dist-server/errors/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
-tslib_1.__exportStar(require("./auth-error"), exports);
-tslib_1.__exportStar(require("./user-domain-not-match-error"), exports);
+tslib_1.__exportStar(require("./auth-error.js"), exports);
+tslib_1.__exportStar(require("./user-domain-not-match-error.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist-server/errors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/errors/index.ts"],"names":[],"mappings":";;;AAAA,uDAA4B;AAC5B,wEAA6C","sourcesContent":["export * from './auth-error'\nexport * from './user-domain-not-match-error'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/errors/index.ts"],"names":[],"mappings":";;;AAAA,0DAA+B;AAC/B,2EAAgD","sourcesContent":["export * from './auth-error.js'\nexport * from './user-domain-not-match-error.js'\n"]}

package/dist-server/errors/user-domain-not-match-error.d.ts

@@ -1,4 +1,4 @@
-import { AuthError } from './auth-error';
+import { AuthError } from './auth-error.js';
 export declare class DomainError extends AuthError {
     static get ERROR_CODES(): any;
     domains: any;

package/dist-server/errors/user-domain-not-match-error.js

@@ -1,18 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DomainError = void 0;
-const error_code_1 = require("../constants/error-code");
-const auth_error_1 = require("./auth-error");
-class DomainError extends auth_error_1.AuthError {
+const error_code_js_1 = require("../constants/error-code.js");
+const auth_error_js_1 = require("./auth-error.js");
+class DomainError extends auth_error_js_1.AuthError {
     static get ERROR_CODES() {
         return {
-            UNAVAILABLE_DOMAIN: error_code_1.UNAVAILABLE_DOMAIN,
-            NO_AVAILABLE_DOMAIN: error_code_1.NO_AVAILABLE_DOMAIN,
-            NO_SELECTED_DOMAIN: error_code_1.NO_SELECTED_DOMAIN,
-            REDIRECT_TO_DEFAULT_DOMAIN: error_code_1.REDIRECT_TO_DEFAULT_DOMAIN
+            UNAVAILABLE_DOMAIN: error_code_js_1.UNAVAILABLE_DOMAIN,
+            NO_AVAILABLE_DOMAIN: error_code_js_1.NO_AVAILABLE_DOMAIN,
+            NO_SELECTED_DOMAIN: error_code_js_1.NO_SELECTED_DOMAIN,
+            REDIRECT_TO_DEFAULT_DOMAIN: error_code_js_1.REDIRECT_TO_DEFAULT_DOMAIN
         };
     }
-    constructor({ errorCode = error_code_1.UNAVAILABLE_DOMAIN, domains }) {
+    constructor({ errorCode = error_code_js_1.UNAVAILABLE_DOMAIN, domains }) {
         super({
             errorCode
         });

package/dist-server/errors/user-domain-not-match-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-domain-not-match-error.js","sourceRoot":"","sources":["../../server/errors/user-domain-not-match-error.ts"],"names":[],"mappings":";;;AAAA,wDAKgC;AAChC,6CAAwC;AAExC,MAAa,WAAY,SAAQ,sBAAS;IACxC,MAAM,KAAK,WAAW;QACpB,OAAO;YACL,kBAAkB,EAAlB,+BAAkB;YAClB,mBAAmB,EAAnB,gCAAmB;YACnB,kBAAkB,EAAlB,+BAAkB;YAClB,0BAA0B,EAA1B,uCAA0B;SAC3B,CAAA;IACH,CAAC;IAID,YAAY,EAAE,SAAS,GAAG,+BAAkB,EAAE,OAAO,EAAE;QACrD,KAAK,CAAC;YACJ,SAAS;SACV,CAAC,CAAA;QAEF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF;AApBD,kCAoBC","sourcesContent":["import {\n  NO_AVAILABLE_DOMAIN,\n  NO_SELECTED_DOMAIN,\n  REDIRECT_TO_DEFAULT_DOMAIN,\n  UNAVAILABLE_DOMAIN\n} from '../constants/error-code'\nimport { AuthError } from './auth-error'\n\nexport class DomainError extends AuthError {\n  static get ERROR_CODES(): any {\n    return {\n      UNAVAILABLE_DOMAIN,\n      NO_AVAILABLE_DOMAIN,\n      NO_SELECTED_DOMAIN,\n      REDIRECT_TO_DEFAULT_DOMAIN\n    }\n  }\n\n  domains: any\n\n  constructor({ errorCode = UNAVAILABLE_DOMAIN, domains }) {\n    super({\n      errorCode\n    })\n\n    this.name = 'user-domain-not-match'\n    this.domains = domains\n  }\n}\n"]}
+{"version":3,"file":"user-domain-not-match-error.js","sourceRoot":"","sources":["../../server/errors/user-domain-not-match-error.ts"],"names":[],"mappings":";;;AAAA,8DAKmC;AACnC,mDAA2C;AAE3C,MAAa,WAAY,SAAQ,yBAAS;IACxC,MAAM,KAAK,WAAW;QACpB,OAAO;YACL,kBAAkB,EAAlB,kCAAkB;YAClB,mBAAmB,EAAnB,mCAAmB;YACnB,kBAAkB,EAAlB,kCAAkB;YAClB,0BAA0B,EAA1B,0CAA0B;SAC3B,CAAA;IACH,CAAC;IAID,YAAY,EAAE,SAAS,GAAG,kCAAkB,EAAE,OAAO,EAAE;QACrD,KAAK,CAAC;YACJ,SAAS;SACV,CAAC,CAAA;QAEF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF;AApBD,kCAoBC","sourcesContent":["import {\n  NO_AVAILABLE_DOMAIN,\n  NO_SELECTED_DOMAIN,\n  REDIRECT_TO_DEFAULT_DOMAIN,\n  UNAVAILABLE_DOMAIN\n} from '../constants/error-code.js'\nimport { AuthError } from './auth-error.js'\n\nexport class DomainError extends AuthError {\n  static get ERROR_CODES(): any {\n    return {\n      UNAVAILABLE_DOMAIN,\n      NO_AVAILABLE_DOMAIN,\n      NO_SELECTED_DOMAIN,\n      REDIRECT_TO_DEFAULT_DOMAIN\n    }\n  }\n\n  domains: any\n\n  constructor({ errorCode = UNAVAILABLE_DOMAIN, domains }) {\n    super({\n      errorCode\n    })\n\n    this.name = 'user-domain-not-match'\n    this.domains = domains\n  }\n}\n"]}

package/dist-server/index.d.ts

@@ -1,16 +1,16 @@
-import './routes';
-export * from './service';
-export * from './migrations';
-export * from './middlewares';
-export * from './routes';
-export * from './router';
-export * from './utils/get-domain-users';
-export * from './utils/get-user-domains';
-export * from './utils/get-secret';
-export * from './utils/check-user-belongs-domain';
-export * from './utils/access-token-cookie';
-export * from './utils/encrypt-state';
-export * from './utils/check-permission';
-export * from './utils/check-user-has-role';
-export * from './errors';
-export * from './types';
+import './routes.js';
+export * from './service/index.js';
+export * from './migrations/index.js';
+export * from './middlewares/index.js';
+export * from './router/index.js';
+export * from './routes.js';
+export * from './utils/get-domain-users.js';
+export * from './utils/get-user-domains.js';
+export * from './utils/get-secret.js';
+export * from './utils/check-user-belongs-domain.js';
+export * from './utils/access-token-cookie.js';
+export * from './utils/encrypt-state.js';
+export * from './utils/check-permission.js';
+export * from './utils/check-user-has-role.js';
+export * from './errors/index.js';
+export * from './types.js';

package/dist-server/index.js

@@ -2,26 +2,26 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 const shell_1 = require("@things-factory/shell");
-const privilege_1 = require("./service/privilege/privilege");
-require("./routes");
-tslib_1.__exportStar(require("./service"), exports);
-tslib_1.__exportStar(require("./migrations"), exports);
-tslib_1.__exportStar(require("./middlewares"), exports);
-tslib_1.__exportStar(require("./routes"), exports);
-tslib_1.__exportStar(require("./router"), exports);
-tslib_1.__exportStar(require("./utils/get-domain-users"), exports);
-tslib_1.__exportStar(require("./utils/get-user-domains"), exports);
-tslib_1.__exportStar(require("./utils/get-secret"), exports);
-tslib_1.__exportStar(require("./utils/check-user-belongs-domain"), exports);
-tslib_1.__exportStar(require("./utils/access-token-cookie"), exports);
-tslib_1.__exportStar(require("./utils/encrypt-state"), exports);
-tslib_1.__exportStar(require("./utils/check-permission"), exports);
-tslib_1.__exportStar(require("./utils/check-user-has-role"), exports);
-tslib_1.__exportStar(require("./errors"), exports);
-tslib_1.__exportStar(require("./types"), exports);
+const privilege_js_1 = require("./service/privilege/privilege.js");
+require("./routes.js");
+tslib_1.__exportStar(require("./service/index.js"), exports);
+tslib_1.__exportStar(require("./migrations/index.js"), exports);
+tslib_1.__exportStar(require("./middlewares/index.js"), exports);
+tslib_1.__exportStar(require("./router/index.js"), exports);
+tslib_1.__exportStar(require("./routes.js"), exports);
+tslib_1.__exportStar(require("./utils/get-domain-users.js"), exports);
+tslib_1.__exportStar(require("./utils/get-user-domains.js"), exports);
+tslib_1.__exportStar(require("./utils/get-secret.js"), exports);
+tslib_1.__exportStar(require("./utils/check-user-belongs-domain.js"), exports);
+tslib_1.__exportStar(require("./utils/access-token-cookie.js"), exports);
+tslib_1.__exportStar(require("./utils/encrypt-state.js"), exports);
+tslib_1.__exportStar(require("./utils/check-permission.js"), exports);
+tslib_1.__exportStar(require("./utils/check-user-has-role.js"), exports);
+tslib_1.__exportStar(require("./errors/index.js"), exports);
+tslib_1.__exportStar(require("./types.js"), exports);
 process.on('bootstrap-module-start', async ({ app, config, client }) => {
     const privileges = process['PRIVILEGES'];
-    const privilegeRepository = (0, shell_1.getRepository)(privilege_1.Privilege);
+    const privilegeRepository = (0, shell_1.getRepository)(privilege_js_1.Privilege);
     for (const [category, name] of Object.values(privileges)) {
         if (0 == (await privilegeRepository.count({ where: { category, name } }))) {
             await privilegeRepository.save({ category, name });

package/dist-server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../server/index.ts"],"names":[],"mappings":";;;AAAA,iDAAqD;AACrD,6DAAyD;AAEzD,oBAAiB;AAEjB,oDAAyB;AACzB,uDAA4B;AAE5B,wDAA6B;AAC7B,mDAAwB;AACxB,mDAAwB;AAExB,mEAAwC;AACxC,mEAAwC;AACxC,6DAAkC;AAClC,4EAAiD;AACjD,sEAA2C;AAC3C,gEAAqC;AACrC,mEAAwC;AACxC,sEAA2C;AAE3C,mDAAwB;AAExB,kDAAuB;AAEvB,OAAO,CAAC,EAAE,CAAC,wBAA+B,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAO,EAAE,EAAE;IACjF,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACxC,MAAM,mBAAmB,GAAG,IAAA,qBAAa,EAAC,qBAAS,CAAC,CAAA;IAEpD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,UAA8B,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1E,MAAM,mBAAmB,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAA;AAC1F,CAAC,CAAC,CAAA","sourcesContent":["import { getRepository } from '@things-factory/shell'\nimport { Privilege } from './service/privilege/privilege'\n\nimport './routes'\n\nexport * from './service'\nexport * from './migrations'\n\nexport * from './middlewares'\nexport * from './routes'\nexport * from './router'\n\nexport * from './utils/get-domain-users'\nexport * from './utils/get-user-domains'\nexport * from './utils/get-secret'\nexport * from './utils/check-user-belongs-domain'\nexport * from './utils/access-token-cookie'\nexport * from './utils/encrypt-state'\nexport * from './utils/check-permission'\nexport * from './utils/check-user-has-role'\n\nexport * from './errors'\n\nexport * from './types'\n\nprocess.on('bootstrap-module-start' as any, async ({ app, config, client }: any) => {\n  const privileges = process['PRIVILEGES']\n  const privilegeRepository = getRepository(Privilege)\n\n  for (const [category, name] of Object.values(privileges as [string, string])) {\n    if (0 == (await privilegeRepository.count({ where: { category, name } }))) {\n      await privilegeRepository.save({ category, name })\n    }\n  }\n\n  console.log('[auth-base:bootstrap] Synchronization for privilege master has just done.')\n})\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../server/index.ts"],"names":[],"mappings":";;;AAAA,iDAAqD;AACrD,mEAA4D;AAE5D,uBAAoB;AAEpB,6DAAkC;AAClC,gEAAqC;AAErC,iEAAsC;AACtC,4DAAiC;AACjC,sDAA2B;AAE3B,sEAA2C;AAC3C,sEAA2C;AAC3C,gEAAqC;AACrC,+EAAoD;AACpD,yEAA8C;AAC9C,mEAAwC;AACxC,sEAA2C;AAC3C,yEAA8C;AAE9C,4DAAiC;AAEjC,qDAA0B;AAE1B,OAAO,CAAC,EAAE,CAAC,wBAA+B,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAO,EAAE,EAAE;IACjF,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACxC,MAAM,mBAAmB,GAAG,IAAA,qBAAa,EAAC,wBAAS,CAAC,CAAA;IAEpD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,UAA8B,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1E,MAAM,mBAAmB,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAA;AAC1F,CAAC,CAAC,CAAA","sourcesContent":["import { getRepository } from '@things-factory/shell'\nimport { Privilege } from './service/privilege/privilege.js'\n\nimport './routes.js'\n\nexport * from './service/index.js'\nexport * from './migrations/index.js'\n\nexport * from './middlewares/index.js'\nexport * from './router/index.js'\nexport * from './routes.js'\n\nexport * from './utils/get-domain-users.js'\nexport * from './utils/get-user-domains.js'\nexport * from './utils/get-secret.js'\nexport * from './utils/check-user-belongs-domain.js'\nexport * from './utils/access-token-cookie.js'\nexport * from './utils/encrypt-state.js'\nexport * from './utils/check-permission.js'\nexport * from './utils/check-user-has-role.js'\n\nexport * from './errors/index.js'\n\nexport * from './types.js'\n\nprocess.on('bootstrap-module-start' as any, async ({ app, config, client }: any) => {\n  const privileges = process['PRIVILEGES']\n  const privilegeRepository = getRepository(Privilege)\n\n  for (const [category, name] of Object.values(privileges as [string, string])) {\n    if (0 == (await privilegeRepository.count({ where: { category, name } }))) {\n      await privilegeRepository.save({ category, name })\n    }\n  }\n\n  console.log('[auth-base:bootstrap] Synchronization for privilege master has just done.')\n})\n"]}

package/dist-server/middlewares/authenticate-401-middleware.js

@@ -2,9 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authenticate401Middleware = authenticate401Middleware;
 const env_1 = require("@things-factory/env");
-const error_code_1 = require("../constants/error-code");
-const auth_error_1 = require("../errors/auth-error");
-const accepts_1 = require("../utils/accepts");
+const error_code_js_1 = require("../constants/error-code.js");
+const auth_error_js_1 = require("../errors/auth-error.js");
+const accepts_js_1 = require("../utils/accepts.js");
 const disableUserSignupProcess = env_1.config.get('disableUserSignupProcess', false);
 const disableUserFavoredLanguage = env_1.config.get('i18n/disableUserFavoredLanguage', false);
 const languages = env_1.config.get('i18n/languages', false);
@@ -14,7 +14,7 @@ async function authenticate401Middleware(context, next) {
     }
     catch (err) {
         var message;
-        if (err instanceof auth_error_1.AuthError) {
+        if (err instanceof auth_error_js_1.AuthError) {
             message = (context.t && context.t(`error.${err.errorCode}`, err.detail || {})) || err.errorCode;
         }
         else {
@@ -32,21 +32,21 @@ async function authenticate401Middleware(context, next) {
          */
         const { method, header, path, originalUrl } = context;
         if (method == 'POST' && path.startsWith('/graphql')) {
-            if (err.errorCode == error_code_1.SUBDOMAIN_NOTFOUND) {
+            if (err.errorCode == error_code_js_1.SUBDOMAIN_NOTFOUND) {
                 context.status = 403;
             }
             return;
         }
-        if (!(0, accepts_1.accepts)(header.accept, ['text/html', '*/*'])) {
+        if (!(0, accepts_js_1.accepts)(header.accept, ['text/html', '*/*'])) {
             return;
         }
         const { redirect_to } = context.query;
         const { redirectTo = redirect_to || originalUrl } = context.request.body || {};
         switch (err.errorCode) {
-            case error_code_1.SUBDOMAIN_NOTFOUND:
+            case error_code_js_1.SUBDOMAIN_NOTFOUND:
                 context.redirect(`/auth/checkin?redirect_to=${encodeURIComponent(redirectTo)}`);
                 break;
-            case error_code_1.USER_LOCKED:
+            case error_code_js_1.USER_LOCKED:
                 return await context.render('auth-page', {
                     pageElement: 'auth-activate',
                     elementScript: '/auth/activate.js',
@@ -56,7 +56,7 @@ async function authenticate401Middleware(context, next) {
                         disableUserFavoredLanguage,
                         languages })
                 });
-            case error_code_1.USER_NOT_ACTIVATED:
+            case error_code_js_1.USER_NOT_ACTIVATED:
                 return await context.render('auth-page', {
                     pageElement: 'auth-activate',
                     elementScript: '/auth/activate.js',
@@ -66,7 +66,7 @@ async function authenticate401Middleware(context, next) {
                         disableUserFavoredLanguage,
                         languages })
                 });
-            case error_code_1.USER_DUPLICATED:
+            case error_code_js_1.USER_DUPLICATED:
                 return await context.render('auth-page', {
                     pageElement: 'auth-signup',
                     elementScript: '/auth/signup.js',
@@ -80,7 +80,7 @@ async function authenticate401Middleware(context, next) {
                 return await context.render('auth-page', {
                     pageElement: 'auth-signin',
                     elementScript: '/auth/signin.js',
-                    data: Object.assign(Object.assign({}, err.detail), { message: err instanceof auth_error_1.AuthError ? message : '', redirectTo,
+                    data: Object.assign(Object.assign({}, err.detail), { message: err instanceof auth_error_js_1.AuthError ? message : '', redirectTo,
                         disableUserSignupProcess,
                         disableUserFavoredLanguage,
                         languages })

package/dist-server/middlewares/authenticate-401-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticate-401-middleware.js","sourceRoot":"","sources":["../../server/middlewares/authenticate-401-middleware.ts"],"names":[],"mappings":";;AAUA,8DAuGC;AAjHD,6CAA4C;AAE5C,wDAA8G;AAC9G,qDAAgD;AAChD,8CAA0C;AAE1C,MAAM,wBAAwB,GAAG,YAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;AAC9E,MAAM,0BAA0B,GAAG,YAAM,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAA;AACvF,MAAM,SAAS,GAAG,YAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAA;AAE9C,KAAK,UAAU,yBAAyB,CAAC,OAAO,EAAE,IAAI;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,EAAE,CAAA;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAA;QAEX,IAAI,GAAG,YAAY,sBAAS,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,SAAS,CAAA;QACjG,CAAC;aAAM,CAAC;YACN,IAAI,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,MAAK,GAAG,EAAE,CAAC;gBACxB,MAAM,GAAG,CAAA;YACX,CAAC;YAED,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;QACvB,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;QACpB,OAAO,CAAC,IAAI,GAAG,OAAO,CAAA;QAEtB;;;;WAIG;QAEH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAErD,IAAI,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,IAAI,GAAG,CAAC,SAAS,IAAI,+BAAkB,EAAE,CAAC;gBACxC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;YACtB,CAAC;YACD,OAAM;QACR,CAAC;QAED,IAAI,CAAC,IAAA,iBAAO,EAAC,MAAM,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAClD,OAAM;QACR,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QACrC,MAAM,EAAE,UAAU,GAAG,WAAW,IAAI,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAA;QAE9E,QAAQ,GAAG,CAAC,SAAS,EAAE,CAAC;YACtB,KAAK,+BAAkB;gBACrB,OAAO,CAAC,QAAQ,CAAC,6BAA6B,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;gBAC/E,MAAK;YAEP,KAAK,wBAAW;gBACd,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACvC,WAAW,EAAE,eAAe;oBAC5B,aAAa,EAAE,mBAAmB;oBAClC,IAAI,kCACC,GAAG,CAAC,MAAM,KACb,OAAO;wBACP,UAAU;wBACV,wBAAwB;wBACxB,0BAA0B;wBAC1B,SAAS,GACV;iBACF,CAAC,CAAA;YAEJ,KAAK,+BAAkB;gBACrB,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACvC,WAAW,EAAE,eAAe;oBAC5B,aAAa,EAAE,mBAAmB;oBAClC,IAAI,kCACC,GAAG,CAAC,MAAM,KACb,OAAO;wBACP,UAAU;wBACV,wBAAwB;wBACxB,0BAA0B;wBAC1B,SAAS,GACV;iBACF,CAAC,CAAA;YAEJ,KAAK,4BAAe;gBAClB,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACvC,WAAW,EAAE,aAAa;oBAC1B,aAAa,EAAE,iBAAiB;oBAChC,IAAI,kCACC,GAAG,CAAC,MAAM,KACb,OAAO;wBACP,UAAU;wBACV,wBAAwB;wBACxB,0BAA0B;wBAC1B,SAAS,GACV;iBACF,CAAC,CAAA;YAEJ;gBACE,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACvC,WAAW,EAAE,aAAa;oBAC1B,aAAa,EAAE,iBAAiB;oBAChC,IAAI,kCACC,GAAG,CAAC,MAAM,KACb,OAAO,EAAE,GAAG,YAAY,sBAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAChD,UAAU;wBACV,wBAAwB;wBACxB,0BAA0B;wBAC1B,SAAS,GACV;iBACF,CAAC,CAAA;QACN,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { config } from '@things-factory/env'\n\nimport { SUBDOMAIN_NOTFOUND, USER_DUPLICATED, USER_LOCKED, USER_NOT_ACTIVATED } from '../constants/error-code'\nimport { AuthError } from '../errors/auth-error'\nimport { accepts } from '../utils/accepts'\n\nconst disableUserSignupProcess = config.get('disableUserSignupProcess', false)\nconst disableUserFavoredLanguage = config.get('i18n/disableUserFavoredLanguage', false)\nconst languages = config.get('i18n/languages', false)\n\nexport async function authenticate401Middleware(context, next) {\n  try {\n    await next()\n  } catch (err) {\n    var message\n\n    if (err instanceof AuthError) {\n      message = (context.t && context.t(`error.${err.errorCode}`, err.detail || {})) || err.errorCode\n    } else {\n      if (err?.status !== 401) {\n        throw err\n      }\n\n      message = err.message\n    }\n\n    context.status = 401\n    context.body = message\n\n    /*\n     * 클라이언트 라우팅을 위한 ApiHistoryFallback의 상황과,\n     * 서버라우팅의 상황에서 발생하는 던져지는 401 에러인 경우에는\n     * error code에 맞춰서 적절하게 rewriting 되도록 한다.\n     */\n\n    const { method, header, path, originalUrl } = context\n\n    if (method == 'POST' && path.startsWith('/graphql')) {\n      if (err.errorCode == SUBDOMAIN_NOTFOUND) {\n        context.status = 403\n      }\n      return\n    }\n\n    if (!accepts(header.accept, ['text/html', '*/*'])) {\n      return\n    }\n\n    const { redirect_to } = context.query\n    const { redirectTo = redirect_to || originalUrl } = context.request.body || {}\n\n    switch (err.errorCode) {\n      case SUBDOMAIN_NOTFOUND:\n        context.redirect(`/auth/checkin?redirect_to=${encodeURIComponent(redirectTo)}`)\n        break\n\n      case USER_LOCKED:\n        return await context.render('auth-page', {\n          pageElement: 'auth-activate',\n          elementScript: '/auth/activate.js',\n          data: {\n            ...err.detail,\n            message,\n            redirectTo,\n            disableUserSignupProcess,\n            disableUserFavoredLanguage,\n            languages\n          }\n        })\n\n      case USER_NOT_ACTIVATED:\n        return await context.render('auth-page', {\n          pageElement: 'auth-activate',\n          elementScript: '/auth/activate.js',\n          data: {\n            ...err.detail,\n            message,\n            redirectTo,\n            disableUserSignupProcess,\n            disableUserFavoredLanguage,\n            languages\n          }\n        })\n\n      case USER_DUPLICATED:\n        return await context.render('auth-page', {\n          pageElement: 'auth-signup',\n          elementScript: '/auth/signup.js',\n          data: {\n            ...err.detail,\n            message,\n            redirectTo,\n            disableUserSignupProcess,\n            disableUserFavoredLanguage,\n            languages\n          }\n        })\n\n      default:\n        return await context.render('auth-page', {\n          pageElement: 'auth-signin',\n          elementScript: '/auth/signin.js',\n          data: {\n            ...err.detail,\n            message: err instanceof AuthError ? message : '',\n            redirectTo,\n            disableUserSignupProcess,\n            disableUserFavoredLanguage,\n            languages\n          }\n        })\n    }\n  }\n}\n"]}
+{"version":3,"file":"authenticate-401-middleware.js","sourceRoot":"","sources":["../../server/middlewares/authenticate-401-middleware.ts"],"names":[],"mappings":";;AAUA,8DAuGC;AAjHD,6CAA4C;AAE5C,8DAAiH;AACjH,2DAAmD;AACnD,oDAA6C;AAE7C,MAAM,wBAAwB,GAAG,YAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;AAC9E,MAAM,0BAA0B,GAAG,YAAM,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAA;AACvF,MAAM,SAAS,GAAG,YAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAA;AAE9C,KAAK,UAAU,yBAAyB,CAAC,OAAO,EAAE,IAAI;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,EAAE,CAAA;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAA;QAEX,IAAI,GAAG,YAAY,yBAAS,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,SAAS,CAAA;QACjG,CAAC;aAAM,CAAC;YACN,IAAI,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,MAAK,GAAG,EAAE,CAAC;gBACxB,MAAM,GAAG,CAAA;YACX,CAAC;YAED,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;QACvB,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;QACpB,OAAO,CAAC,IAAI,GAAG,OAAO,CAAA;QAEtB;;;;WAIG;QAEH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAErD,IAAI,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,IAAI,GAAG,CAAC,SAAS,IAAI,kCAAkB,EAAE,CAAC;gBACxC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;YACtB,CAAC;YACD,OAAM;QACR,CAAC;QAED,IAAI,CAAC,IAAA,oBAAO,EAAC,MAAM,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAClD,OAAM;QACR,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QACrC,MAAM,EAAE,UAAU,GAAG,WAAW,IAAI,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAA;QAE9E,QAAQ,GAAG,CAAC,SAAS,EAAE,CAAC;YACtB,KAAK,kCAAkB;gBACrB,OAAO,CAAC,QAAQ,CAAC,6BAA6B,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;gBAC/E,MAAK;YAEP,KAAK,2BAAW;gBACd,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACvC,WAAW,EAAE,eAAe;oBAC5B,aAAa,EAAE,mBAAmB;oBAClC,IAAI,kCACC,GAAG,CAAC,MAAM,KACb,OAAO;wBACP,UAAU;wBACV,wBAAwB;wBACxB,0BAA0B;wBAC1B,SAAS,GACV;iBACF,CAAC,CAAA;YAEJ,KAAK,kCAAkB;gBACrB,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACvC,WAAW,EAAE,eAAe;oBAC5B,aAAa,EAAE,mBAAmB;oBAClC,IAAI,kCACC,GAAG,CAAC,MAAM,KACb,OAAO;wBACP,UAAU;wBACV,wBAAwB;wBACxB,0BAA0B;wBAC1B,SAAS,GACV;iBACF,CAAC,CAAA;YAEJ,KAAK,+BAAe;gBAClB,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACvC,WAAW,EAAE,aAAa;oBAC1B,aAAa,EAAE,iBAAiB;oBAChC,IAAI,kCACC,GAAG,CAAC,MAAM,KACb,OAAO;wBACP,UAAU;wBACV,wBAAwB;wBACxB,0BAA0B;wBAC1B,SAAS,GACV;iBACF,CAAC,CAAA;YAEJ;gBACE,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACvC,WAAW,EAAE,aAAa;oBAC1B,aAAa,EAAE,iBAAiB;oBAChC,IAAI,kCACC,GAAG,CAAC,MAAM,KACb,OAAO,EAAE,GAAG,YAAY,yBAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAChD,UAAU;wBACV,wBAAwB;wBACxB,0BAA0B;wBAC1B,SAAS,GACV;iBACF,CAAC,CAAA;QACN,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { config } from '@things-factory/env'\n\nimport { SUBDOMAIN_NOTFOUND, USER_DUPLICATED, USER_LOCKED, USER_NOT_ACTIVATED } from '../constants/error-code.js'\nimport { AuthError } from '../errors/auth-error.js'\nimport { accepts } from '../utils/accepts.js'\n\nconst disableUserSignupProcess = config.get('disableUserSignupProcess', false)\nconst disableUserFavoredLanguage = config.get('i18n/disableUserFavoredLanguage', false)\nconst languages = config.get('i18n/languages', false)\n\nexport async function authenticate401Middleware(context, next) {\n  try {\n    await next()\n  } catch (err) {\n    var message\n\n    if (err instanceof AuthError) {\n      message = (context.t && context.t(`error.${err.errorCode}`, err.detail || {})) || err.errorCode\n    } else {\n      if (err?.status !== 401) {\n        throw err\n      }\n\n      message = err.message\n    }\n\n    context.status = 401\n    context.body = message\n\n    /*\n     * 클라이언트 라우팅을 위한 ApiHistoryFallback의 상황과,\n     * 서버라우팅의 상황에서 발생하는 던져지는 401 에러인 경우에는\n     * error code에 맞춰서 적절하게 rewriting 되도록 한다.\n     */\n\n    const { method, header, path, originalUrl } = context\n\n    if (method == 'POST' && path.startsWith('/graphql')) {\n      if (err.errorCode == SUBDOMAIN_NOTFOUND) {\n        context.status = 403\n      }\n      return\n    }\n\n    if (!accepts(header.accept, ['text/html', '*/*'])) {\n      return\n    }\n\n    const { redirect_to } = context.query\n    const { redirectTo = redirect_to || originalUrl } = context.request.body || {}\n\n    switch (err.errorCode) {\n      case SUBDOMAIN_NOTFOUND:\n        context.redirect(`/auth/checkin?redirect_to=${encodeURIComponent(redirectTo)}`)\n        break\n\n      case USER_LOCKED:\n        return await context.render('auth-page', {\n          pageElement: 'auth-activate',\n          elementScript: '/auth/activate.js',\n          data: {\n            ...err.detail,\n            message,\n            redirectTo,\n            disableUserSignupProcess,\n            disableUserFavoredLanguage,\n            languages\n          }\n        })\n\n      case USER_NOT_ACTIVATED:\n        return await context.render('auth-page', {\n          pageElement: 'auth-activate',\n          elementScript: '/auth/activate.js',\n          data: {\n            ...err.detail,\n            message,\n            redirectTo,\n            disableUserSignupProcess,\n            disableUserFavoredLanguage,\n            languages\n          }\n        })\n\n      case USER_DUPLICATED:\n        return await context.render('auth-page', {\n          pageElement: 'auth-signup',\n          elementScript: '/auth/signup.js',\n          data: {\n            ...err.detail,\n            message,\n            redirectTo,\n            disableUserSignupProcess,\n            disableUserFavoredLanguage,\n            languages\n          }\n        })\n\n      default:\n        return await context.render('auth-page', {\n          pageElement: 'auth-signin',\n          elementScript: '/auth/signin.js',\n          data: {\n            ...err.detail,\n            message: err instanceof AuthError ? message : '',\n            redirectTo,\n            disableUserSignupProcess,\n            disableUserFavoredLanguage,\n            languages\n          }\n        })\n    }\n  }\n}\n"]}

package/dist-server/middlewares/domain-authenticate-middleware.d.ts

@@ -1,5 +1,5 @@
 import { Domain } from '@things-factory/shell';
-import { User } from '../service/user/user';
+import { User } from '../service/user/user.js';
 declare global {
     namespace NodeJS {
         interface Process {

package/dist-server/middlewares/domain-authenticate-middleware.js

@@ -3,9 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.domainAuthenticateMiddleware = domainAuthenticateMiddleware;
 const env_1 = require("@things-factory/env");
 const shell_1 = require("@things-factory/shell");
-const auth_error_1 = require("../errors/auth-error");
-const user_1 = require("../service/user/user");
-const get_user_domains_1 = require("../utils/get-user-domains");
+const auth_error_js_1 = require("../errors/auth-error.js");
+const user_js_1 = require("../service/user/user.js");
+const get_user_domains_js_1 = require("../utils/get-user-domains.js");
 const useVirtualHostBasedDomain = !!env_1.config.get('useVirtualHostBasedDomain');
 const fixed = env_1.config.get('subdomain');
 const subdomainOffset = env_1.config.getNumber('subdomainOffset', 2);
@@ -17,7 +17,7 @@ process.superUserGranted = async (domain, user) => {
         return false;
     }
     if (!user.domains.length) {
-        user = await (0, shell_1.getRepository)(user_1.User).findOne({
+        user = await (0, shell_1.getRepository)(user_js_1.User).findOne({
             where: { id: user.id },
             relations: ['domains']
         });
@@ -44,17 +44,17 @@ async function domainAuthenticateMiddleware(context, next) {
     // 1. 현재 subdomain 이 결정되지 않은 경우.
     // - checkin로 이동한다.
     if (!subdomain) {
-        throw new auth_error_1.AuthError({
-            errorCode: auth_error_1.AuthError.ERROR_CODES.SUBDOMAIN_NOTFOUND
+        throw new auth_error_js_1.AuthError({
+            errorCode: auth_error_js_1.AuthError.ERROR_CODES.SUBDOMAIN_NOTFOUND
         });
     }
     // 2. 현재 subdomain 이 결정된 경우.
-    const userDomains = await (0, get_user_domains_1.getUserDomains)(user);
+    const userDomains = await (0, get_user_domains_js_1.getUserDomains)(user);
     if (userDomains.find(domain => domain.subdomain == subdomain) || (await process.superUserGranted(domain, user))) {
         return await next();
     }
-    throw new auth_error_1.AuthError({
-        errorCode: auth_error_1.AuthError.ERROR_CODES.SUBDOMAIN_NOTFOUND
+    throw new auth_error_js_1.AuthError({
+        errorCode: auth_error_js_1.AuthError.ERROR_CODES.SUBDOMAIN_NOTFOUND
     });
 }
 //# sourceMappingURL=domain-authenticate-middleware.js.map

package/dist-server/middlewares/domain-authenticate-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"domain-authenticate-middleware.js","sourceRoot":"","sources":["../../server/middlewares/domain-authenticate-middleware.ts"],"names":[],"mappings":";;AAsDA,oEAuBC;AA7ED,6CAA4C;AAC5C,iDAA6D;AAE7D,qDAAgD;AAChD,+CAA2C;AAC3C,gEAA0D;AAE1D,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAA;AAC3E,MAAM,KAAK,GAAG,YAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;AACrC,MAAM,eAAe,GAAG,YAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;AAW9D,OAAO,CAAC,kBAAkB,GAAG,KAAK,EAAE,MAAc,EAAE,IAAU,EAAoB,EAAE;IAClF,OAAO,IAAI,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAA;AACnD,CAAC,CAAA;AAED,OAAO,CAAC,gBAAgB,GAAG,KAAK,EAAE,MAAc,EAAE,IAAU,EAAoB,EAAE;IAChF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,WAAI,CAAC,CAAC,OAAO,CAAC;YACvC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;YACtB,SAAS,EAAE,CAAC,SAAS,CAAC;SACvB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,YAAY,GAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAA;IACjG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAA;AACvC,CAAC,CAAA;AAED;;;;;;;;GAQG;AAEI,KAAK,UAAU,4BAA4B,CAAC,OAAY,EAAE,IAAS;IACxE,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAAA;IACrB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAEtC,MAAM,SAAS,GAAW,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA;IAE3C,gCAAgC;IAChC,mBAAmB;IACnB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,kBAAkB;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,4BAA4B;IAC5B,MAAM,WAAW,GAAsB,MAAM,IAAA,iCAAc,EAAC,IAAI,CAAC,CAAA;IACjE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAChH,OAAO,MAAM,IAAI,EAAE,CAAA;IACrB,CAAC;IAED,MAAM,IAAI,sBAAS,CAAC;QAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,kBAAkB;KACpD,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { config } from '@things-factory/env'\nimport { Domain, getRepository } from '@things-factory/shell'\n\nimport { AuthError } from '../errors/auth-error'\nimport { User } from '../service/user/user'\nimport { getUserDomains } from '../utils/get-user-domains'\n\nconst useVirtualHostBasedDomain = !!config.get('useVirtualHostBasedDomain')\nconst fixed = config.get('subdomain')\nconst subdomainOffset = config.getNumber('subdomainOffset', 2)\n\ndeclare global {\n  namespace NodeJS {\n    interface Process {\n      domainOwnerGranted: (domain: Domain, user: User) => Promise<boolean>\n      superUserGranted: (domain: Domain, user: User) => Promise<boolean>\n    }\n  }\n}\n\nprocess.domainOwnerGranted = async (domain: Domain, user: User): Promise<boolean> => {\n  return user && domain && domain.owner === user.id\n}\n\nprocess.superUserGranted = async (domain: Domain, user: User): Promise<boolean> => {\n  if (!user) {\n    return false\n  }\n\n  if (!user.domains.length) {\n    user = await getRepository(User).findOne({\n      where: { id: user.id },\n      relations: ['domains']\n    })\n  }\n\n  const systemDomain: Domain = user.domains.find((domain: Domain) => domain.subdomain === 'system')\n  if (!systemDomain) {\n    return false\n  }\n\n  return systemDomain.owner === user.id\n}\n\n/*\n * 현재 subdomain 과 user의 domain list와의 비교를 통해서,\n * 인증 성공 또는 인증 에러를 발생시킬 것인지를 결정한다.\n * 1. 현재 subdomain 이 결정되지 않은 경우.\n * - checkin로 이동한다.\n * 2. superUser 판단\n * 3. 현재 subdomain 이 결정된 경우.\n * - user의 domains 리스트에 해당 subdomain이 없다면, 인증 오류를 발생한다.\n */\n\nexport async function domainAuthenticateMiddleware(context: any, next: any) {\n  const { t } = context\n  const { domain, user } = context.state\n\n  const subdomain: string = domain?.subdomain\n\n  // 1. 현재 subdomain 이 결정되지 않은 경우.\n  // - checkin로 이동한다.\n  if (!subdomain) {\n    throw new AuthError({\n      errorCode: AuthError.ERROR_CODES.SUBDOMAIN_NOTFOUND\n    })\n  }\n\n  // 2. 현재 subdomain 이 결정된 경우.\n  const userDomains: Partial<Domain>[] = await getUserDomains(user)\n  if (userDomains.find(domain => domain.subdomain == subdomain) || (await process.superUserGranted(domain, user))) {\n    return await next()\n  }\n\n  throw new AuthError({\n    errorCode: AuthError.ERROR_CODES.SUBDOMAIN_NOTFOUND\n  })\n}\n"]}
+{"version":3,"file":"domain-authenticate-middleware.js","sourceRoot":"","sources":["../../server/middlewares/domain-authenticate-middleware.ts"],"names":[],"mappings":";;AAsDA,oEAuBC;AA7ED,6CAA4C;AAC5C,iDAA6D;AAE7D,2DAAmD;AACnD,qDAA8C;AAC9C,sEAA6D;AAE7D,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAA;AAC3E,MAAM,KAAK,GAAG,YAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;AACrC,MAAM,eAAe,GAAG,YAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;AAW9D,OAAO,CAAC,kBAAkB,GAAG,KAAK,EAAE,MAAc,EAAE,IAAU,EAAoB,EAAE;IAClF,OAAO,IAAI,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAA;AACnD,CAAC,CAAA;AAED,OAAO,CAAC,gBAAgB,GAAG,KAAK,EAAE,MAAc,EAAE,IAAU,EAAoB,EAAE;IAChF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,cAAI,CAAC,CAAC,OAAO,CAAC;YACvC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;YACtB,SAAS,EAAE,CAAC,SAAS,CAAC;SACvB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,YAAY,GAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAA;IACjG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAA;AACvC,CAAC,CAAA;AAED;;;;;;;;GAQG;AAEI,KAAK,UAAU,4BAA4B,CAAC,OAAY,EAAE,IAAS;IACxE,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAAA;IACrB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAEtC,MAAM,SAAS,GAAW,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA;IAE3C,gCAAgC;IAChC,mBAAmB;IACnB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,yBAAS,CAAC;YAClB,SAAS,EAAE,yBAAS,CAAC,WAAW,CAAC,kBAAkB;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,4BAA4B;IAC5B,MAAM,WAAW,GAAsB,MAAM,IAAA,oCAAc,EAAC,IAAI,CAAC,CAAA;IACjE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAChH,OAAO,MAAM,IAAI,EAAE,CAAA;IACrB,CAAC;IAED,MAAM,IAAI,yBAAS,CAAC;QAClB,SAAS,EAAE,yBAAS,CAAC,WAAW,CAAC,kBAAkB;KACpD,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { config } from '@things-factory/env'\nimport { Domain, getRepository } from '@things-factory/shell'\n\nimport { AuthError } from '../errors/auth-error.js'\nimport { User } from '../service/user/user.js'\nimport { getUserDomains } from '../utils/get-user-domains.js'\n\nconst useVirtualHostBasedDomain = !!config.get('useVirtualHostBasedDomain')\nconst fixed = config.get('subdomain')\nconst subdomainOffset = config.getNumber('subdomainOffset', 2)\n\ndeclare global {\n  namespace NodeJS {\n    interface Process {\n      domainOwnerGranted: (domain: Domain, user: User) => Promise<boolean>\n      superUserGranted: (domain: Domain, user: User) => Promise<boolean>\n    }\n  }\n}\n\nprocess.domainOwnerGranted = async (domain: Domain, user: User): Promise<boolean> => {\n  return user && domain && domain.owner === user.id\n}\n\nprocess.superUserGranted = async (domain: Domain, user: User): Promise<boolean> => {\n  if (!user) {\n    return false\n  }\n\n  if (!user.domains.length) {\n    user = await getRepository(User).findOne({\n      where: { id: user.id },\n      relations: ['domains']\n    })\n  }\n\n  const systemDomain: Domain = user.domains.find((domain: Domain) => domain.subdomain === 'system')\n  if (!systemDomain) {\n    return false\n  }\n\n  return systemDomain.owner === user.id\n}\n\n/*\n * 현재 subdomain 과 user의 domain list와의 비교를 통해서,\n * 인증 성공 또는 인증 에러를 발생시킬 것인지를 결정한다.\n * 1. 현재 subdomain 이 결정되지 않은 경우.\n * - checkin로 이동한다.\n * 2. superUser 판단\n * 3. 현재 subdomain 이 결정된 경우.\n * - user의 domains 리스트에 해당 subdomain이 없다면, 인증 오류를 발생한다.\n */\n\nexport async function domainAuthenticateMiddleware(context: any, next: any) {\n  const { t } = context\n  const { domain, user } = context.state\n\n  const subdomain: string = domain?.subdomain\n\n  // 1. 현재 subdomain 이 결정되지 않은 경우.\n  // - checkin로 이동한다.\n  if (!subdomain) {\n    throw new AuthError({\n      errorCode: AuthError.ERROR_CODES.SUBDOMAIN_NOTFOUND\n    })\n  }\n\n  // 2. 현재 subdomain 이 결정된 경우.\n  const userDomains: Partial<Domain>[] = await getUserDomains(user)\n  if (userDomains.find(domain => domain.subdomain == subdomain) || (await process.superUserGranted(domain, user))) {\n    return await next()\n  }\n\n  throw new AuthError({\n    errorCode: AuthError.ERROR_CODES.SUBDOMAIN_NOTFOUND\n  })\n}\n"]}

package/dist-server/middlewares/graphql-authenticate-middleware.js

@@ -1,13 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.graphqlAuthenticateMiddleware = graphqlAuthenticateMiddleware;
-const domain_authenticate_middleware_1 = require("./domain-authenticate-middleware");
-const jwt_authenticate_middleware_1 = require("./jwt-authenticate-middleware");
+const domain_authenticate_middleware_js_1 = require("./domain-authenticate-middleware.js");
+const jwt_authenticate_middleware_js_1 = require("./jwt-authenticate-middleware.js");
 async function graphqlAuthenticateMiddleware(context, next) {
     const { method, path } = context;
     if (method == 'POST' && path.startsWith('/graphql')) {
-        await (0, jwt_authenticate_middleware_1.jwtAuthenticateMiddleware)(context, () => { });
-        await (0, domain_authenticate_middleware_1.domainAuthenticateMiddleware)(context, () => { });
+        await (0, jwt_authenticate_middleware_js_1.jwtAuthenticateMiddleware)(context, () => { });
+        await (0, domain_authenticate_middleware_js_1.domainAuthenticateMiddleware)(context, () => { });
     }
     await next();
 }

package/dist-server/middlewares/graphql-authenticate-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"graphql-authenticate-middleware.js","sourceRoot":"","sources":["../../server/middlewares/graphql-authenticate-middleware.ts"],"names":[],"mappings":";;AAGA,sEASC;AAZD,qFAA+E;AAC/E,+EAAyE;AAElE,KAAK,UAAU,6BAA6B,CAAC,OAAO,EAAE,IAAI;IAC/D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAEhC,IAAI,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,MAAM,IAAA,uDAAyB,EAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClD,MAAM,IAAA,6DAA4B,EAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,IAAI,EAAE,CAAA;AACd,CAAC","sourcesContent":["import { domainAuthenticateMiddleware } from './domain-authenticate-middleware'\nimport { jwtAuthenticateMiddleware } from './jwt-authenticate-middleware'\n\nexport async function graphqlAuthenticateMiddleware(context, next) {\n  const { method, path } = context\n\n  if (method == 'POST' && path.startsWith('/graphql')) {\n    await jwtAuthenticateMiddleware(context, () => {})\n    await domainAuthenticateMiddleware(context, () => {})\n  }\n\n  await next()\n}\n"]}
+{"version":3,"file":"graphql-authenticate-middleware.js","sourceRoot":"","sources":["../../server/middlewares/graphql-authenticate-middleware.ts"],"names":[],"mappings":";;AAGA,sEASC;AAZD,2FAAkF;AAClF,qFAA4E;AAErE,KAAK,UAAU,6BAA6B,CAAC,OAAO,EAAE,IAAI;IAC/D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAEhC,IAAI,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,MAAM,IAAA,0DAAyB,EAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClD,MAAM,IAAA,gEAA4B,EAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,IAAI,EAAE,CAAA;AACd,CAAC","sourcesContent":["import { domainAuthenticateMiddleware } from './domain-authenticate-middleware.js'\nimport { jwtAuthenticateMiddleware } from './jwt-authenticate-middleware.js'\n\nexport async function graphqlAuthenticateMiddleware(context, next) {\n  const { method, path } = context\n\n  if (method == 'POST' && path.startsWith('/graphql')) {\n    await jwtAuthenticateMiddleware(context, () => {})\n    await domainAuthenticateMiddleware(context, () => {})\n  }\n\n  await next()\n}\n"]}

package/dist-server/middlewares/index.d.ts

@@ -1,6 +1,6 @@
 export declare function initMiddlewares(app: any): void;
-export * from './jwt-authenticate-middleware';
-export * from './domain-authenticate-middleware';
-export * from './signin-middleware';
-export * from './webauthn-middleware';
-export * from './authenticate-401-middleware';
+export * from './jwt-authenticate-middleware.js';
+export * from './domain-authenticate-middleware.js';
+export * from './signin-middleware.js';
+export * from './webauthn-middleware.js';
+export * from './authenticate-401-middleware.js';

package/dist-server/middlewares/index.js

@@ -5,20 +5,20 @@ const tslib_1 = require("tslib");
 const koa_session_1 = tslib_1.__importDefault(require("koa-session"));
 const koa_passport_1 = tslib_1.__importDefault(require("koa-passport"));
 const env_1 = require("@things-factory/env");
-const get_secret_1 = require("../utils/get-secret");
-const authenticate_401_middleware_1 = require("./authenticate-401-middleware");
-const domain_authenticate_middleware_1 = require("./domain-authenticate-middleware");
-const graphql_authenticate_middleware_1 = require("./graphql-authenticate-middleware");
-const jwt_authenticate_middleware_1 = require("./jwt-authenticate-middleware");
-const user_1 = require("../service/user/user");
-const max_age_1 = require("../constants/max-age");
+const get_secret_js_1 = require("../utils/get-secret.js");
+const authenticate_401_middleware_js_1 = require("./authenticate-401-middleware.js");
+const domain_authenticate_middleware_js_1 = require("./domain-authenticate-middleware.js");
+const graphql_authenticate_middleware_js_1 = require("./graphql-authenticate-middleware.js");
+const jwt_authenticate_middleware_js_1 = require("./jwt-authenticate-middleware.js");
+const user_js_1 = require("../service/user/user.js");
+const max_age_js_1 = require("../constants/max-age.js");
 const accessTokenCookieKey = env_1.config.get('accessTokenCookieKey', 'access_token');
 function initMiddlewares(app) {
     /* oauth2orize-koa 에서 oauth 트랜잭션 관리를 위해서 session을 사용함. */
-    app.keys = [get_secret_1.SECRET];
+    app.keys = [get_secret_js_1.SECRET];
     app.use((0, koa_session_1.default)({
         key: 'tfsession',
-        maxAge: max_age_1.MAX_AGE,
+        maxAge: max_age_js_1.MAX_AGE,
         overwrite: true,
         httpOnly: true,
         signed: true,
@@ -29,26 +29,26 @@ function initMiddlewares(app) {
         done(null, profile);
     });
     koa_passport_1.default.deserializeUser(async (profile, done) => {
-        done(null, await user_1.User.checkAuth(profile));
+        done(null, await user_js_1.User.checkAuth(profile));
     });
     /* passport initialize */
     app.use(koa_passport_1.default.initialize());
     /* passport use session - for oauth transaction */
     app.use(koa_passport_1.default.session());
     /* authentication error handling */
-    app.use(authenticate_401_middleware_1.authenticate401Middleware);
+    app.use(authenticate_401_middleware_js_1.authenticate401Middleware);
     /*
      * post:graphql 에 대해서는 graphqlAuthenticationMiddleware를 적용한다.
      * graphql app을 router에 적용하지 못하기 때문임.
      */
-    app.use(graphql_authenticate_middleware_1.graphqlAuthenticateMiddleware);
+    app.use(graphql_authenticate_middleware_js_1.graphqlAuthenticateMiddleware);
 }
 process.on('bootstrap-module-subscription', (app, subscriptionMiddleware) => {
-    subscriptionMiddleware.push(jwt_authenticate_middleware_1.jwtAuthenticateMiddleware, domain_authenticate_middleware_1.domainAuthenticateMiddleware);
+    subscriptionMiddleware.push(jwt_authenticate_middleware_js_1.jwtAuthenticateMiddleware, domain_authenticate_middleware_js_1.domainAuthenticateMiddleware);
 });
-tslib_1.__exportStar(require("./jwt-authenticate-middleware"), exports);
-tslib_1.__exportStar(require("./domain-authenticate-middleware"), exports);
-tslib_1.__exportStar(require("./signin-middleware"), exports);
-tslib_1.__exportStar(require("./webauthn-middleware"), exports);
-tslib_1.__exportStar(require("./authenticate-401-middleware"), exports);
+tslib_1.__exportStar(require("./jwt-authenticate-middleware.js"), exports);
+tslib_1.__exportStar(require("./domain-authenticate-middleware.js"), exports);
+tslib_1.__exportStar(require("./signin-middleware.js"), exports);
+tslib_1.__exportStar(require("./webauthn-middleware.js"), exports);
+tslib_1.__exportStar(require("./authenticate-401-middleware.js"), exports);
 //# sourceMappingURL=index.js.map