@things-factory/shell 6.2.48 → 6.2.50

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/shell",
-  "version": "6.2.48",
+  "version": "6.2.50",
   "description": "Core module for framework",
   "bin": {
     "things-factory": "bin/things-factory",
@@ -133,5 +133,5 @@
     "pg": "^8.7.3",
     "sqlite3": "^5.0.8"
   },
-  "gitHead": "70ed4f01ef662cde4d99911dc9374abd564cbe0e"
+  "gitHead": "4dc51db04b745ac434d2bb874038ac4c3b47989b"
 }

package/server/middlewares/domain-middleware.ts

@@ -1,17 +1,60 @@
+import requestIp from 'request-ip'
 import { getDomainFromURL } from '../utils'
 
 export async function domainMiddleware(context: any, next: any) {
-  const { domain } = context.state
+  var { domain } = context.state
+  if (!domain) {
+    /*
+     * The domainType should be checked only when signin and checkin.
+     * For purposes such as API calls, the target domainType may be different from the system domainType.
+     * So, we don't check domainType here.
+     */
+    domain = await getDomainFromURL(context)
+  }
+
   if (domain) {
-    return await next()
+    const ip = context.ip || requestIp.getClientIp(context.req)
+    const { whitelist = [], blacklist = [], protectedlist = [], privileges = [] } = domain.iplist || {}
+
+    if (Array.isArray(whitelist) && whitelist.length > 0) {
+      /* whitelist 우선 */
+      const whitelisted =
+        Array.isArray(whitelist) &&
+        whitelist.some(item => {
+          return new RegExp(item).test(ip)
+        })
+
+      if (!whitelisted) {
+        context.status = 403
+        return
+      }
+    } else {
+      const blacklisted =
+        Array.isArray(blacklist) &&
+        blacklist.some(item => {
+          return new RegExp(item).test(ip)
+        })
+
+      if (blacklisted) {
+        context.status = 403
+        return
+      }
+    }
+
+    if (Array.isArray(protectedlist) && protectedlist.length > 0) {
+      const protectedIP = protectedlist.some(item => {
+        return new RegExp(item).test(ip)
+      })
+
+      context.state.unsafeIP = !protectedIP
+
+      if (!protectedIP) {
+        context.state.prohibitedPrivileges = privileges
+      }
+    }
   }
 
-  /*
-   * The domainType should be checked only when signin and checkin.
-   * For purposes such as API calls, the target domainType may be different from the system domainType.
-   * So, we don't check domainType here.
-   */
-  context.state.domain = await getDomainFromURL(context)
+  context.state.domain = domain
 
-  await next()
+  return next()
 }

package/server/server-dev.ts

@@ -15,14 +15,12 @@ import { useServer } from 'graphql-ws/lib/use/ws'
 import { createServer } from 'http'
 import Koa from 'koa'
 import koaBodyParser from 'koa-bodyparser'
-import ip from 'koa-ip'
 import koaStatic from 'koa-static'
 import compose from 'koa-compose'
 import { historyApiFallback } from 'koa2-connect-history-api-fallback'
 import { WebSocketServer } from 'ws'
 import co from 'co'
 import http from 'http'
-import requestIp from 'request-ip'
 
 import koaWebpack from '@hatiolab/koa-webpack'
 import cors from '@koa/cors'
@@ -116,34 +114,6 @@ const bootstrap = async () => {
     })
   )
 
-  const whitelist = config.get('whitelist')
-  const blacklist = config.get('blacklist')
-  const protectedlist = config.get('protectedlist')
-
-  if (whitelist || blacklist) {
-    app.use(
-      ip({
-        whitelist,
-        blacklist,
-        handler: async (ctx, next) => {
-          ctx.status = 403
-        }
-      })
-    )
-  }
-
-  if (protectedlist) {
-    app.use((context, next) => {
-      const ip = context.ip || requestIp.getClientIp(context.req)
-
-      context.state.protected = protectedlist.some(item => {
-        return new RegExp(item).test(ip)
-      })
-
-      return next()
-    })
-  }
-
   var subscriptionMiddleware = []
   process.emit('bootstrap-module-subscription' as any, app, subscriptionMiddleware)
 

package/server/server.ts

@@ -15,14 +15,12 @@ import { useServer } from 'graphql-ws/lib/use/ws'
 import { createServer } from 'http'
 import Koa from 'koa'
 import koaBodyParser from 'koa-bodyparser'
-import ip from 'koa-ip'
 import koaStatic from 'koa-static'
 import compose from 'koa-compose'
 import { historyApiFallback } from 'koa2-connect-history-api-fallback'
 import { WebSocketServer } from 'ws'
 import co from 'co'
 import http from 'http'
-import requestIp from 'request-ip'
 
 import cors from '@koa/cors'
 import { config, loader, logger, orderedModuleNames } from '@things-factory/env'
@@ -91,34 +89,6 @@ const bootstrap = async () => {
     })
   )
 
-  const whitelist = config.get('whitelist')
-  const blacklist = config.get('blacklist')
-  const protectedlist = config.get('protectedlist')
-
-  if (whitelist || blacklist) {
-    app.use(
-      ip({
-        whitelist,
-        blacklist,
-        handler: async (ctx, next) => {
-          ctx.status = 403
-        }
-      })
-    )
-  }
-
-  if (protectedlist) {
-    app.use((context, next) => {
-      const ip = context.ip || requestIp.getClientIp(context.req)
-
-      context.state.protected = protectedlist.some(item => {
-        return new RegExp(item).test(ip)
-      })
-
-      return next()
-    })
-  }
-
   var subscriptionMiddleware = []
   process.emit('bootstrap-module-subscription' as any, app, subscriptionMiddleware)
 

package/server/service/domain/{domain-resolver.ts → domain-mutation.ts}

@@ -1,53 +1,16 @@
-import { Arg, Args, Ctx, Directive, Mutation, Query, Resolver, FieldResolver, Root } from 'type-graphql'
+import { Arg, Args, Ctx, Directive, Mutation, Query, Resolver, Root } from 'type-graphql'
 import { In, Repository } from 'typeorm'
 
 import { slugger } from '@things-factory/utils'
 
 import { getRepository } from '../../initializers/database'
-import { getQueryBuilderFromListParams } from '../../utils/get-query-builder-from-list-params'
 
-import { ListParam } from '../common-types/list-param'
-import { Domain } from './domain'
-import { DomainList, DomainPatch } from './domain-types'
+import { Domain, IPList } from './domain'
+import { DomainPatch } from './domain-types'
+import { ScalarObject } from '../common-types'
 
 @Resolver(Domain)
-export class DomainResolver {
-  @Directive('@privilege(category: "system", privilege: "query", domainOwnerGranted: true, superUserGranted: true)')
-  @Query(returns => Domain, { description: 'To fetch domain' })
-  async domain(@Arg('id') id: string, @Ctx() context: any): Promise<Domain> {
-    const repository = getRepository(Domain)
-
-    return await repository.findOneBy({ id })
-  }
-
-  @Directive('@privilege(superUserGranted: true)')
-  @Query(returns => DomainList, { description: 'To fetch all domains (Only superuser is granted this privilege.)' })
-  async domains(@Args() params: ListParam, @Ctx() context: any): Promise<DomainList> {
-    const queryBuilder = await getQueryBuilderFromListParams({
-      repository: getRepository(Domain),
-      alias: 'ContactPoint',
-      params,
-      searchables: ['name', 'description', 'subdomain']
-    })
-
-    const [items, total] = await queryBuilder.getManyAndCount()
-
-    return { items, total }
-  }
-
-  // @Query(returns => Boolean, { description: 'To check if given domain is exist' })
-  // async checkExistsDomain(@Arg('name') name: string) {
-  //   const domainRepository: Repository<Domain> = getRepository(Domain)
-  //   const targetSubdomain: string = slugger(name)
-
-  //   const oldDomain = await domainRepository.findOneBy({ subdomain: targetSubdomain })
-  //   if (oldDomain) {
-  //     throw new Error('domain is duplicated')
-  //   }
-
-  //   return true
-  // }
-
+export class DomainMutation {
   @Directive('@transaction')
   @Directive('@privilege(superUserGranted: true)')
   @Mutation(returns => Domain, { description: 'To create domain (Only superuser is granted this privilege.)' })
@@ -134,8 +97,24 @@ export class DomainResolver {
     return true
   }
 
-  @FieldResolver(type => Domain)
-  async parent(@Root() domain: Domain): Promise<Domain> {
-    return domain.parentId && (await getRepository(Domain).findOneBy({ id: domain.parentId }))
+  @Directive('@transaction')
+  @Directive(
+    '@privilege(category: "security", privilege: "mutation", domainOwnerGranted: true, superUserGranted: true)'
+  )
+  @Mutation(returns => ScalarObject, { nullable: true, description: 'To update secure IP list for domain' })
+  async updateSecureIPList(
+    @Arg('iplist', type => ScalarObject) iplist: IPList,
+    @Ctx() context: any
+  ): Promise<IPList | null> {
+    const { domain } = context.state
+    const repository = getRepository(Domain)
+    // const domain: Domain = await repository.findOneBy({ id })
+
+    const { iplist: result } = await repository.save({
+      ...domain,
+      iplist
+    } as any)
+
+    return result
   }
 }

package/server/service/domain/domain-query.ts

@@ -0,0 +1,52 @@
+import { Arg, Args, Ctx, Directive, Mutation, Query, Resolver, FieldResolver, Root } from 'type-graphql'
+import { In, Repository } from 'typeorm'
+
+import { getRepository } from '../../initializers/database'
+import { getQueryBuilderFromListParams } from '../../utils/get-query-builder-from-list-params'
+
+import { ListParam } from '../common-types/list-param'
+import { Domain, IPList } from './domain'
+import { DomainList } from './domain-types'
+import { ScalarObject } from '../common-types'
+
+@Resolver(Domain)
+export class DomainQuery {
+  @Directive('@privilege(superUserGranted: true)')
+  @Query(returns => Domain, { description: 'To fetch domain' })
+  async domain(@Arg('id') id: string, @Ctx() context: any): Promise<Domain> {
+    const repository = getRepository(Domain)
+
+    return await repository.findOneBy({ id })
+  }
+
+  @Directive('@privilege(superUserGranted: true)')
+  @Query(returns => DomainList, { description: 'To fetch all domains (Only superuser is granted this privilege.)' })
+  async domains(@Args() params: ListParam, @Ctx() context: any): Promise<DomainList> {
+    const queryBuilder = await getQueryBuilderFromListParams({
+      repository: getRepository(Domain),
+      alias: 'ContactPoint',
+      params,
+      searchables: ['name', 'description', 'subdomain']
+    })
+
+    const [items, total] = await queryBuilder.getManyAndCount()
+
+    return { items, total }
+  }
+
+  @Directive('@privilege(category: "security", privilege: "query", domainOwnerGranted: true, superUserGranted: true)')
+  @Query(returns => ScalarObject, { nullable: true, description: 'To fetch domain' })
+  async secureIPList(@Ctx() context: any): Promise<IPList | null> {
+    const { domain } = context.state
+    // const repository = getRepository(Domain)
+
+    // const { iplist } = await repository.findOneBy({ id })
+
+    return domain.iplist
+  }
+
+  @FieldResolver(type => Domain)
+  async parent(@Root() domain: Domain): Promise<Domain> {
+    return domain.parentId && (await getRepository(Domain).findOneBy({ id: domain.parentId }))
+  }
+}

package/server/service/domain/domain-types.ts

@@ -1,5 +1,5 @@
 import { ObjectType, InputType, Field, Int } from 'type-graphql'
-import { Domain } from './domain'
+import { Domain, IPList } from './domain'
 import { ObjectRef, ScalarObject } from '../common-types'
 
 @InputType()

package/server/service/domain/domain.ts

@@ -19,6 +19,16 @@ const domainPrimaryOption = config.get('domainPrimaryOption')
 const domainPrimaryType = domainPrimaryOption?.type
 const domainPrimaryStrategy = domainPrimaryOption?.strategy
 
+export type IPList = {
+  whitelist?: string[]
+  blacklist?: string[]
+  protectedlist?: string[]
+  privileges?: {
+    category: string
+    name: string
+  }[]
+}
+
 @Entity()
 @Index('ix_domain_0', (domain: Domain) => [domain.subdomain, domain.deletedAt], {
   unique: true,
@@ -115,6 +125,10 @@ export class Domain {
   @Column({ nullable: true })
   theme: string
 
+  @Column('simple-json', { nullable: true })
+  @Field(type => ScalarObject, { nullable: true })
+  iplist?: IPList
+
   @Column('simple-json', { nullable: true })
   @Field(type => ScalarObject, { nullable: true })
   attributes?: any

package/server/service/domain/index.ts

@@ -1,5 +1,6 @@
 import { Domain } from './domain'
-import { DomainResolver } from './domain-resolver'
+import { DomainQuery } from './domain-query'
+import { DomainMutation } from './domain-Mutation'
 
 export const entities = [Domain]
-export const resolvers = [DomainResolver]
+export const resolvers = [DomainQuery, DomainMutation]

package/dist-server/service/domain/domain-resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"domain-resolver.js","sourceRoot":"","sources":["../../../server/service/domain/domain-resolver.ts"],"names":[],"mappings":";;;;AAAA,+CAAwG;AACxG,qCAAwC;AAExC,iDAA+C;AAE/C,0DAA2D;AAC3D,uGAA8F;AAE9F,2DAAsD;AACtD,qCAAiC;AACjC,iDAAwD;AAGjD,IAAM,cAAc,GAApB,MAAM,cAAc;IAGnB,AAAN,KAAK,CAAC,MAAM,CAAY,EAAU,EAAS,OAAY;QACrD,MAAM,UAAU,GAAG,IAAA,wBAAa,EAAC,eAAM,CAAC,CAAA;QAExC,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3C,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CAAS,MAAiB,EAAS,OAAY;QAC1D,MAAM,YAAY,GAAG,MAAM,IAAA,kEAA6B,EAAC;YACvD,UAAU,EAAE,IAAA,wBAAa,EAAC,eAAM,CAAC;YACjC,KAAK,EAAE,cAAc;YACrB,MAAM;YACN,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC;SAClD,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,CAAA;QAE3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,mFAAmF;IACnF,uDAAuD;IACvD,uEAAuE;IACvE,kDAAkD;IAElD,uFAAuF;IACvF,qBAAqB;IACrB,8CAA8C;IAC9C,MAAM;IAEN,gBAAgB;IAChB,IAAI;IAKE,AAAN,KAAK,CAAC,YAAY,CAAqB,WAAwB;QAC7D,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,CAAA;QACzC,MAAM,UAAU,GAAuB,IAAA,wBAAa,EAAC,eAAM,CAAC,CAAA;QAC5D,MAAM,SAAS,GAAW,IAAA,eAAO,EAAC,IAAI,CAAC,CAAA;QAEvC,MAAM,MAAM,GAAW,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAChE,IAAI,MAAM,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;SACxC;QAED,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAA;IAChE,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CAAc,IAAY;QAC1C,OAAO,MAAM,IAAA,wBAAa,EAAC,eAAM,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,CAAC;IAOK,AAAN,KAAK,CAAC,aAAa,CAA+B,KAAe;QAC/D,MAAM,OAAO,GAAa,MAAM,IAAA,wBAAa,EAAC,eAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,YAAE,EAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1F,MAAM,SAAS,GAAa,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAE5D,MAAM,IAAA,wBAAa,EAAC,eAAM,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC3D,CAAC;IAOK,AAAN,KAAK,CAAC,YAAY,CAAc,IAAY,EAAmC,KAAkB;QAC/F,MAAM,UAAU,GAAG,IAAA,wBAAa,EAAC,eAAM,CAAC,CAAA;QACxC,MAAM,MAAM,GAAW,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3D,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;YAChD,OAAO,KAAK,CAAC,MAAM,CAAA;SACpB;QAED,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,gCACxB,MAAM,GACN,KAAK,CACF,CAAC,CAAA;IACX,CAAC;IAOK,AAAN,KAAK,CAAC,aAAa,CAAsC,OAAsB;QAC7E,MAAM,UAAU,GAAuB,IAAA,wBAAa,EAAC,eAAM,CAAC,CAAA;QAE5D,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAEzD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;YACvB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;gBACpC,MAAM,MAAM,GAAW,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;gBAEnF,IAAI,YAAY,CAAC,IAAI,EAAE;oBACrB,YAAY,CAAC,SAAS,GAAG,IAAA,eAAO,EAAC,YAAY,CAAC,IAAI,CAAC,CAAA;iBACpD;gBAED,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;oBAC9D,OAAO,YAAY,CAAC,MAAM,CAAA;iBAC3B;gBAED,MAAM,UAAU,CAAC,IAAI,CAAC,gCACjB,MAAM,GACN,YAAY,CACT,CAAC,CAAA;YACX,CAAC,CAAC,CAAA;SACH;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAS,MAAc;QACjC,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAA,wBAAa,EAAC,eAAM,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC5F,CAAC;CACF,CAAA;AA5HO;IAFL,IAAA,wBAAS,EAAC,sGAAsG,CAAC;IACjH,IAAA,oBAAK,EAAC,OAAO,CAAC,EAAE,CAAC,eAAM,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAC/C,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IAAc,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;4CAIzC;AAIK;IAFL,IAAA,wBAAS,EAAC,oCAAoC,CAAC;IAC/C,IAAA,oBAAK,EAAC,OAAO,CAAC,EAAE,CAAC,yBAAU,EAAE,EAAE,WAAW,EAAE,kEAAkE,EAAE,CAAC;IACnG,mBAAA,IAAA,mBAAI,GAAE,CAAA;IAAqB,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAAjB,sBAAS;;6CAWtC;AAkBK;IAHL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,wBAAS,EAAC,oCAAoC,CAAC;IAC/C,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,eAAM,EAAE,EAAE,WAAW,EAAE,8DAA8D,EAAE,CAAC;IACzF,mBAAA,IAAA,kBAAG,EAAC,aAAa,CAAC,CAAA;;6CAAc,0BAAW;;kDAW9D;AAKK;IAHL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,wBAAS,EAAC,oCAAoC,CAAC;IAC/C,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,eAAM,EAAE,EAAE,WAAW,EAAE,8DAA8D,EAAE,CAAC;IACzF,mBAAA,IAAA,kBAAG,EAAC,MAAM,CAAC,CAAA;;;;kDAE9B;AAOK;IALL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,wBAAS,EAAC,oCAAoC,CAAC;IAC/C,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE;QAC5B,WAAW,EAAE,wEAAwE;KACtF,CAAC;IACmB,mBAAA,IAAA,kBAAG,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;;;;mDAKhD;AAOK;IALL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,wBAAS,EAAC,oCAAoC,CAAC;IAC/C,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,eAAM,EAAE;QAC3B,WAAW,EAAE,8DAA8D;KAC5E,CAAC;IACkB,mBAAA,IAAA,kBAAG,EAAC,MAAM,CAAC,CAAA;IAAgB,mBAAA,IAAA,kBAAG,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,0BAAW,CAAC,CAAA;;qDAAQ,0BAAW;;kDAYhG;AAOK;IALL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,wBAAS,EAAC,oCAAoC,CAAC;IAC/C,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE;QAC5B,WAAW,EAAE,wEAAwE;KACtF,CAAC;IACmB,mBAAA,IAAA,kBAAG,EAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,0BAAW,CAAC,CAAC,CAAA;;;;mDAyBvD;AAGK;IADL,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC,eAAM,CAAC;IAChB,mBAAA,IAAA,mBAAI,GAAE,CAAA;;6CAAS,eAAM;;4CAElC;AA9HU,cAAc;IAD1B,IAAA,uBAAQ,EAAC,eAAM,CAAC;GACJ,cAAc,CA+H1B;AA/HY,wCAAc","sourcesContent":["import { Arg, Args, Ctx, Directive, Mutation, Query, Resolver, FieldResolver, Root } from 'type-graphql'\nimport { In, Repository } from 'typeorm'\n\nimport { slugger } from '@things-factory/utils'\n\nimport { getRepository } from '../../initializers/database'\nimport { getQueryBuilderFromListParams } from '../../utils/get-query-builder-from-list-params'\n\nimport { ListParam } from '../common-types/list-param'\nimport { Domain } from './domain'\nimport { DomainList, DomainPatch } from './domain-types'\n\n@Resolver(Domain)\nexport class DomainResolver {\n  @Directive('@privilege(category: \"system\", privilege: \"query\", domainOwnerGranted: true, superUserGranted: true)')\n  @Query(returns => Domain, { description: 'To fetch domain' })\n  async domain(@Arg('id') id: string, @Ctx() context: any): Promise<Domain> {\n    const repository = getRepository(Domain)\n\n    return await repository.findOneBy({ id })\n  }\n\n  @Directive('@privilege(superUserGranted: true)')\n  @Query(returns => DomainList, { description: 'To fetch all domains (Only superuser is granted this privilege.)' })\n  async domains(@Args() params: ListParam, @Ctx() context: any): Promise<DomainList> {\n    const queryBuilder = await getQueryBuilderFromListParams({\n      repository: getRepository(Domain),\n      alias: 'ContactPoint',\n      params,\n      searchables: ['name', 'description', 'subdomain']\n    })\n\n    const [items, total] = await queryBuilder.getManyAndCount()\n\n    return { items, total }\n  }\n\n  // @Query(returns => Boolean, { description: 'To check if given domain is exist' })\n  // async checkExistsDomain(@Arg('name') name: string) {\n  //   const domainRepository: Repository<Domain> = getRepository(Domain)\n  //   const targetSubdomain: string = slugger(name)\n\n  //   const oldDomain = await domainRepository.findOneBy({ subdomain: targetSubdomain })\n  //   if (oldDomain) {\n  //     throw new Error('domain is duplicated')\n  //   }\n\n  //   return true\n  // }\n\n  @Directive('@transaction')\n  @Directive('@privilege(superUserGranted: true)')\n  @Mutation(returns => Domain, { description: 'To create domain (Only superuser is granted this privilege.)' })\n  async createDomain(@Arg('domainInput') domainInput: DomainPatch) {\n    const { name, description } = domainInput\n    const domainRepo: Repository<Domain> = getRepository(Domain)\n    const subdomain: string = slugger(name)\n\n    const domain: Domain = await domainRepo.findOneBy({ subdomain })\n    if (domain) {\n      throw new Error('domain is duplicated')\n    }\n\n    return await domainRepo.save({ name, description, subdomain })\n  }\n\n  @Directive('@transaction')\n  @Directive('@privilege(superUserGranted: true)')\n  @Mutation(returns => Domain, { description: 'To delete domain (Only superuser is granted this privilege.)' })\n  async deleteDomain(@Arg('name') name: string) {\n    return await getRepository(Domain).delete({ name })\n  }\n\n  @Directive('@transaction')\n  @Directive('@privilege(superUserGranted: true)')\n  @Mutation(returns => Boolean, {\n    description: 'To delete multiple domains (Only superuser is granted this privilege.)'\n  })\n  async deleteDomains(@Arg('names', () => [String]) names: string[]) {\n    const domains: Domain[] = await getRepository(Domain).find({ where: { name: In(names) } })\n    const domainIds: string[] = domains.map(domain => domain.id)\n\n    await getRepository(Domain).delete({ id: In(domainIds) })\n  }\n\n  @Directive('@transaction')\n  @Directive('@privilege(superUserGranted: true)')\n  @Mutation(returns => Domain, {\n    description: 'To update domain (Only superuser is granted this privilege.)'\n  })\n  async updateDomain(@Arg('name') name: string, @Arg('patch', () => DomainPatch) patch: DomainPatch) {\n    const repository = getRepository(Domain)\n    const domain: Domain = await repository.findOneBy({ name })\n\n    if (patch.parent && patch.parent.id == domain.id) {\n      delete patch.parent\n    }\n\n    return await repository.save({\n      ...domain,\n      ...patch\n    } as any)\n  }\n\n  @Directive('@transaction')\n  @Directive('@privilege(superUserGranted: true)')\n  @Mutation(returns => Boolean, {\n    description: 'To update multiple domains (Only superuser is granted this privilege.)'\n  })\n  async updateDomains(@Arg('patches', () => [DomainPatch]) patches: DomainPatch[]): Promise<boolean> {\n    const domainRepo: Repository<Domain> = getRepository(Domain)\n\n    const patchIds = patches.filter((patch: any) => patch.id)\n\n    if (patchIds.length > 0) {\n      patchIds.forEach(async updateRecord => {\n        const domain: Domain = await domainRepo.findOne({ where: { id: updateRecord.id } })\n\n        if (updateRecord.name) {\n          updateRecord.subdomain = slugger(updateRecord.name)\n        }\n\n        if (updateRecord.parent && updateRecord.parent.id == domain.id) {\n          delete updateRecord.parent\n        }\n\n        await domainRepo.save({\n          ...domain,\n          ...updateRecord\n        } as any)\n      })\n    }\n\n    return true\n  }\n\n  @FieldResolver(type => Domain)\n  async parent(@Root() domain: Domain): Promise<Domain> {\n    return domain.parentId && (await getRepository(Domain).findOneBy({ id: domain.parentId }))\n  }\n}\n"]}