@toa.io/extensions.exposition 1.0.0-alpha.28 → 1.0.0-alpha.283

package/features/steps/IdP.ts

@@ -1,154 +0,0 @@
-import { once } from 'node:events'
-import * as crypto from 'node:crypto'
-import * as http from 'node:http'
-import * as assert from 'node:assert'
-import * as util from 'node:util'
-import { binding, given, afterAll } from 'cucumber-tsflow'
-import { Captures } from './Captures'
-
-import type { AddressInfo } from 'node:net'
-
-@binding([Captures])
-export class IdP {
-  private static server?: http.Server
-  private static privateKey?: crypto.KeyObject
-  private static issuer?: string
-
-  public constructor (private readonly captures: Captures) {
-  }
-
-  @afterAll()
-  public static async stop (): Promise<void> {
-    if (this.server instanceof http.Server) {
-      this.server.close()
-      await once(this.server, 'close')
-    }
-  }
-
-  @given(/local IDP is running/i)
-  public async start (): Promise<void> {
-    if (IdP.server instanceof http.Server) return
-
-    // creating the key
-    const {
-      publicKey,
-      privateKey
-    } = await util.promisify(crypto.generateKeyPair)('rsa', {
-      modulusLength: 2048
-    })
-
-    IdP.privateKey = privateKey
-
-    const jwk = JSON.stringify({
-      keys: [{
-        use: 'sig',
-        alg: 'RS256',
-        ...publicKey.export({ format: 'jwk' })
-      }]
-    })
-
-    const JWK_URL = '/.well-known/jwks'
-
-    const server = http.createServer((request, response) => {
-      switch (request.url) {
-        case JWK_URL:
-          response.writeHead(200, {
-            'Content-Type': 'application/json',
-            'Content-Length': jwk.length,
-            'Cache-Control': 'no-cache, no-store, must-revalidate',
-            Pragma: 'no-cache',
-            Expires: '0'
-          })
-          response.end(jwk)
-          break
-
-        case '/.well-known/openid-configuration': {
-          const openIdConfiguration = JSON.stringify({
-            issuer: IdP.issuer,
-            jwks_uri: IdP.issuer + JWK_URL,
-            response_types_supported: ['id_token'],
-            subject_types_supported: ['public'],
-            id_token_signing_alg_values_supported: ['RS256'],
-            scopes_supported: ['openid']
-          })
-
-          response.writeHead(200, {
-            'Content-Type': 'application/json',
-            'Cache-Control': 'public, max-age=3600',
-            'Content-Length': openIdConfiguration.length
-          })
-          response.end(openIdConfiguration)
-        }
-
-          break
-
-        default:
-          response.writeHead(404, 'Not found')
-          response.end()
-      }
-    })
-
-    server.listen(44444, 'localhost')
-    await once(server, 'listening')
-
-    const address = server.address() as AddressInfo
-
-    console.log('IdP is listening on %s:%s', address.address, address.port)
-    IdP.server = server
-    IdP.issuer = `http://localhost:${address.port}`
-  }
-
-  @given('the IDP token for {word} is issued')
-  public async issueToken (user: string): Promise<void> {
-    assert.ok(IdP.privateKey, 'IdP private key is not available')
-
-    const jwt = [
-      {
-        typ: 'JWT',
-        alg: 'RS256'
-      },
-      {
-        iss: IdP.issuer,
-        sub: `${user}-mock-id`,
-        aud: 'test',
-        iat: Math.floor(Date.now() / 1000),
-        exp: Math.floor((Date.now() + 1000 * 60 * 5) / 1000)
-      }
-    ]
-      .map((v) => Buffer.from(JSON.stringify(v)).toString('base64url'))
-      .join('.')
-
-    const signature = crypto.createSign('RSA-SHA256').end(jwt).sign(IdP.privateKey, 'base64url')
-
-    const idToken = `${jwt}.${signature}`
-
-    this.captures.set(`${user}.id_token`, idToken)
-  }
-
-  @given('the IDP {word} token for {word} is issued with following secret:')
-  public async issueSymmetricToken (alg: string, user: string, secret: string): Promise<void> {
-    const jwt = [
-      {
-        typ: 'JWT',
-        alg
-      },
-      {
-        iss: IdP.issuer,
-        sub: `${user}-mock-id`,
-        aud: 'test',
-        iat: Math.floor(Date.now() / 1000),
-        exp: Math.floor((Date.now() + 1000 * 60 * 5) / 1000)
-      }
-    ]
-      .map((v) => Buffer.from(JSON.stringify(v)).toString('base64url'))
-      .join('.')
-
-    const signature = crypto.createHmac(alg.replace(/^HS(\d{3})$/, 'sha$1'), secret)
-      .update(jwt)
-      .digest('base64url')
-
-    const idToken = `${jwt}.${signature}`
-
-    this.captures.set(`${user}.id_token`, idToken)
-  }
-}

package/features/steps/components/octets.tester/operations/diversify.js

@@ -1,14 +0,0 @@
-'use strict'
-
-const { join } = require('node:path')
-const { createReadStream } = require('node:fs')
-
-const lenna = join(__dirname, 'lenna.png')
-
-async function diversify (input, context) {
-  const stream = createReadStream(lenna)
-
-  return context.storages[input.storage].diversify(input.path, 'hello.png', stream)
-}
-
-exports.effect = diversify

package/features/vary.feature

@@ -1,252 +0,0 @@
-Feature: The Vary directive family
-
-  Scenario Outline: Embedding a `<result>` language code
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: true
-          vary:languages: [en, fr]
-          GET:
-            vary:embed:
-              name: language  # embed resolved language code as a `name` property of the operation input
-            endpoint: compute
-      """
-    When the following request is received:
-      """
-      GET /echo/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      accept-language: <accept>
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      content-type: application/yaml
-      content-language: <result>
-      vary: accept-language, accept
-
-      Hello <result>
-      """
-    Examples:
-      | accept | result |
-      | en     | en     |
-      | en_US  | en     |
-      | fr     | fr     |
-      | sw     | en     |
-
-  Scenario: Listing languages on the root
-    Given the annotation:
-    """
-    /:
-      vary:languages: [en, fr]
-    """
-    And the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: true
-          GET:
-            anonymous: true
-            vary:embed:
-              name: language
-            endpoint: compute
-      """
-    When the following request is received:
-      """
-      GET /echo/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      accept-language: fr
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      content-type: application/yaml
-      content-language: fr
-      """
-
-  Scenario: Embedding a value of an arbitrary header
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: true
-          GET:
-            vary:embed:
-              name: :foo
-            endpoint: compute
-      """
-    When the following request is received:
-      """
-      GET /echo/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      foo: bar
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      content-type: application/yaml
-      vary: foo, accept
-
-      Hello bar
-      """
-
-  Scenario: Embedding a `host` header value
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: true
-          GET:
-            vary:embed:
-              name: :Host
-            endpoint: compute
-      """
-    When the following request is received:
-      """
-      GET /echo/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      foo: bar
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      content-type: application/yaml
-      vary: accept
-
-      Hello 127.0.0.1:8000
-      """
-
-  Scenario Outline: Embedding a value from the list of options
-    Given the `echo` is running with the following manifest:
-        """yaml
-        exposition:
-          /:
-            io:output: true
-            vary:languages: [en, fr]
-            GET:
-              vary:embed:
-                name:
-                  - :foo
-                  - :bar
-                  - language
-              endpoint: compute
-        """
-    When the following request is received:
-        """
-        GET /echo/ HTTP/1.1
-      host: nex.toa.io
-        accept: application/yaml
-        <header>: <value>
-        """
-    Then the following reply is sent:
-        """
-        200 OK
-        content-type: application/yaml
-        vary: <header>, accept
-
-        Hello <value>
-        """
-    Examples:
-      | header          | value |
-      | foo             | bar   |
-      | bar             | baz   |
-      | accept-language | en    |
-
-  Scenario: Embedding route parameter
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:friend:
-          io:output: true
-          GET:
-            vary:embed:
-              name: /:friend
-            endpoint: compute
-      """
-    When the following request is received:
-      """
-      GET /echo/Ken/ HTTP/1.1
-      host: nex.toa.io
-      accept: text/plain
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      Hello Ken
-      """
-
-  Scenario: Adding headers used by defined embeddings to CORS permissions
-    Given the `echo` is running with the following manifest:
-        """yaml
-        exposition:
-          /:
-            io:output: true
-            vary:languages: [en, fr]
-            GET:
-              vary:embed:
-                name:
-                  - language
-                  - :foo
-                  - :FOO
-                  - :bar
-              endpoint: compute
-        """
-    When the following request is received:
-        """
-        OPTIONS / HTTP/1.1
-      host: nex.toa.io
-        origin: https://example.com
-        access-control-request-headers: whatever
-        """
-    Then the following reply is sent:
-        """
-        204 No Content
-        access-control-allow-headers: accept, authorization, content-type, etag, if-match, if-none-match, accept-language, foo, bar
-        """
-
-  Scenario: Embedding authority
-    Given the annotation:
-      """yaml
-      authorities:
-        one: the.one.com
-        two: the.two.com
-      """
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: true
-          GET:
-            vary:embed:
-              name: authority
-            endpoint: compute
-      """
-    When the following request is received:
-      """
-      GET /echo/ HTTP/1.1
-      host: the.one.com
-      accept: text/plain
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      Hello one
-      """
-    When the following request is received:
-      """
-      GET /echo/ HTTP/1.1
-      host: the.two.com
-      accept: text/plain
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      Hello two
-      """

package/schemas/octets/context.cos.yaml

@@ -1 +0,0 @@
-string

package/schemas/octets/fetch.cos.yaml

@@ -1,3 +0,0 @@
-blob: boolean
-meta: boolean
-_: true

package/schemas/octets/list.cos.yaml

@@ -1,2 +0,0 @@
-meta: boolean
-_: true

package/schemas/octets/permute.cos.yaml

@@ -1 +0,0 @@
-~

package/schemas/octets/store.cos.yaml

@@ -1,3 +0,0 @@
-accept+: string
-workflow+: <string>
-_: true

package/source/directives/octets/Fetch.ts

@@ -1,100 +0,0 @@
-import { posix } from 'node:path'
-import { Forbidden, NotFound } from '../../HTTP'
-import * as schemas from './schemas'
-import { Directive } from './Directive'
-import type { Maybe } from '@toa.io/types'
-import type { Entry } from '@toa.io/extensions.storages'
-import type { Readable } from 'node:stream'
-import type { Component } from '@toa.io/core'
-import type { Output } from '../../io'
-import type { Input } from './types'
-
-export class Fetch extends Directive {
-  public readonly targeted = true
-
-  private readonly permissions: Required<Permissions> = {
-    blob: true,
-    meta: false
-  }
-
-  private readonly discovery: Promise<Component>
-  private storage: Component = null as unknown as Component
-
-  public constructor (permissions: Permissions | null, discovery: Promise<Component>) {
-    super()
-    schemas.fetch.validate(permissions)
-
-    Object.assign(this.permissions, permissions)
-    this.discovery = discovery
-  }
-
-  public async apply (storage: string, input: Input): Promise<Output> {
-    this.storage ??= await this.discovery
-
-    const variant = posix.basename(input.request.url).includes('.')
-    const metadata = input.subtype === 'octets.entry'
-
-    if (!variant && metadata)
-      if (this.permissions.meta)
-        return this.get(storage, input)
-      else
-        throw new Forbidden('Metadata is not accessible.')
-
-    if (!variant && !this.permissions.blob)
-      throw new Forbidden('BLOB variant must be specified.')
-
-    return await this.fetch(storage, input)
-  }
-
-  private async fetch (storage: string, input: Input): Promise<Output> {
-    if ('if-none-match' in input.request.headers)
-      return { status: 304 }
-
-    const result = await this.storage.invoke<Maybe<FetchResult>>('fetch', {
-      input: {
-        storage,
-        path: input.request.url
-      }
-    })
-
-    if (result instanceof Error)
-      throw new NotFound()
-
-    const headers = new Headers({
-      'content-type': result.type,
-      'content-length': result.size.toString(),
-      etag: result.checksum
-    })
-
-    return {
-      headers,
-      body: result.stream
-    }
-  }
-
-  private async get (storage: string, input: Input): Promise<Output> {
-    const entry = await this.storage.invoke<Maybe<Entry>>('get', {
-      input: {
-        storage,
-        path: input.request.url
-      }
-    })
-
-    if (entry instanceof Error)
-      throw new NotFound()
-
-    return { body: entry }
-  }
-}
-
-export interface Permissions {
-  blob?: boolean
-  meta?: boolean
-}
-
-interface FetchResult {
-  stream: Readable
-  checksum: string
-  size: number
-  type: string
-}

package/source/directives/octets/List.ts

@@ -1,72 +0,0 @@
-import { posix } from 'node:path'
-import { Forbidden, NotFound } from '../../HTTP'
-import * as schemas from './schemas'
-import { Directive } from './Directive'
-import type { Entry } from '@toa.io/extensions.storages'
-import type { Maybe } from '@toa.io/types'
-import type { Component } from '@toa.io/core'
-import type { Output } from '../../io'
-
-import type { Input } from './types'
-
-export class List extends Directive {
-  public readonly targeted = false
-
-  private readonly permissions: Required<Permissions> = { meta: false }
-  private readonly discovery: Promise<Component>
-  private storage: Component | null = null
-
-  public constructor (permissions: Permissions | null, discovery: Promise<Component>) {
-    super()
-    schemas.list.validate(permissions)
-
-    Object.assign(this.permissions, permissions)
-    this.discovery = discovery
-  }
-
-  public async apply (storage: string, input: Input): Promise<Output> {
-    this.storage ??= await this.discovery
-
-    const metadata = input.subtype === 'octets.entries'
-
-    if (metadata && !this.permissions.meta)
-      throw new Forbidden('Metadata is not accessible.')
-
-    const list = await this.storage.invoke<Maybe<string[]>>('list', {
-      input: {
-        storage,
-        path: input.request.url
-      }
-    })
-
-    if (list instanceof Error)
-      throw new NotFound()
-
-    const body = metadata
-      ? await this.expand(storage, input.request.url, list)
-      : list
-
-    return { body }
-  }
-
-  private async expand (storage: string, prefix: string, list: string[]):
-  Promise<Array<Maybe<Entry>>> {
-    const promises = list.map(async (id) => {
-      const path = posix.join(prefix, id)
-
-      const input = {
-        storage,
-        path
-      }
-
-      // eslint-disable-next-line @typescript-eslint/no-non-null-assertion -- ensured in `apply`
-      return this.storage!.invoke<Maybe<Entry>>('get', { input })
-    })
-
-    return await Promise.all(promises)
-  }
-}
-
-export interface Permissions {
-  meta?: boolean
-}