@tomei/sso 0.66.1-test.2 → 0.66.1-test.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomei/sso",
-  "version": "0.66.1-test.2",
+  "version": "0.66.1-test.3",
   "description": "Tomei SSO Package",
   "main": "dist/index.js",
   "scripts": {
@@ -65,6 +65,7 @@
     "@tomei/general": "^0.21.10",
     "@tomei/mailer": "^0.6.2",
     "argon2": "^0.44.0",
+    "axios": "^1.13.2",
     "redis": "^5.8.2",
     "reflect-metadata": "^0.2.2",
     "sequelize": "^6.37.7",

package/src/components/login-user/login-user.ts

@@ -12,13 +12,27 @@ import { createHash, randomBytes, randomUUID } from 'crypto';
 import { UserGroupRepository } from '../user-group/user-group.repository';
 import GroupSystemAccessModel from '../../models/group-system-access.entity';
 import SystemModel from '../../models/system.entity';
-import { ApplicationConfig } from '@tomei/config';
+import { ApplicationConfig, ComponentConfig } from '@tomei/config';
+import axios from 'axios';
 
 export class LoginUser extends User implements ILoginUser {
   session = {
     Id: null,
   };
 
+  private static isLoginApiEnabled(): boolean {
+    try {
+      const useLoginApiYN =
+        ComponentConfig.getComponentConfigValue(
+          '@tomei/sso',
+          'useLoginApiYN',
+        ) || 'Y';
+      return String(useLoginApiYN).toUpperCase() !== 'N';
+    } catch (error) {
+      return true;
+    }
+  }
+
   static async init(
     sessionService: ISessionService,
     userId?: number,
@@ -26,20 +40,43 @@ export class LoginUser extends User implements ILoginUser {
   ): Promise<LoginUser> {
     User._RedisService = await RedisService.init();
     if (userId) {
-      if (dbTransaction) {
-        User._Repository = new UserRepository();
-      }
-      const user = await User._Repository.findOne({
-        where: {
-          UserId: userId,
-        },
-        include: [
+      let user: any;
+
+      if (LoginUser.isLoginApiEnabled()) {
+        const loginApiEndpoint = ComponentConfig.getComponentConfigValue(
+          '@tomei/sso',
+          'loginApiEndpoint',
+        );
+
+        let payload = { UserId: userId };
+
+        const { data } = await axios.post(
+          `${loginApiEndpoint.baseUrl}${loginApiEndpoint.getProfile}`,
+          payload,
           {
-            model: Staff,
+            headers: {
+              'Content-Type': 'application/json',
+              'x-api-key': loginApiEndpoint.apiKey,
+            },
           },
-        ],
-        transaction: dbTransaction,
-      });
+        );
+        user = data.loginUser;
+      } else {
+        if (dbTransaction) {
+          User._Repository = new UserRepository();
+        }
+        user = await User._Repository.findOne({
+          where: {
+            UserId: userId,
+          },
+          include: [
+            {
+              model: Staff,
+            },
+          ],
+          transaction: dbTransaction,
+        });
+      }
 
       if (!user) {
         throw new Error('Invalid credentials.');
@@ -99,6 +136,30 @@ export class LoginUser extends User implements ILoginUser {
         throw new Error('Session name is not set');
       }
 
+      if (LoginUser.isLoginApiEnabled()) {
+        const loginApiEndpoint = ComponentConfig.getComponentConfigValue(
+          '@tomei/sso',
+          'loginApiEndpoint',
+        );
+        let payload = {
+          SystemCode: systemCode,
+          SessionName: sessionName,
+          PrivilegeName: privilegeName,
+          UserId: this.ObjectId,
+        };
+        const { data } = await axios.post(
+          `${loginApiEndpoint.baseUrl}${loginApiEndpoint.checkPrivileges}`,
+          payload,
+          {
+            headers: {
+              'Content-Type': 'application/json',
+              'x-api-key': loginApiEndpoint.apiKey,
+            },
+          },
+        );
+        return data.hasPrivilege;
+      }
+
       const userSession = await this._SessionService.retrieveUserSession(
         this.ObjectId,
         sessionName,
@@ -113,8 +174,7 @@ export class LoginUser extends User implements ILoginUser {
       }
 
       const privileges = systemLogin.privileges;
-      const hasPrivilege = privileges.includes(privilegeName);
-      return hasPrivilege;
+      return privileges.includes(privilegeName);
     } catch (error) {
       throw error;
     }
@@ -131,6 +191,31 @@ export class LoginUser extends User implements ILoginUser {
       if (!sessionName) {
         throw new Error('Session name is not set');
       }
+
+      if (LoginUser.isLoginApiEnabled()) {
+        const loginApiEndpoint = ComponentConfig.getComponentConfigValue(
+          '@tomei/sso',
+          'loginApiEndpoint',
+        );
+        let payload = {
+          SystemCode: systemCode,
+          SessionName: sessionName,
+          SessionId: sessionId,
+          UserId: userId,
+        };
+        const { data } = await axios.post(
+          `${loginApiEndpoint.baseUrl}${loginApiEndpoint.checkSession}`,
+          payload,
+          {
+            headers: {
+              'Content-Type': 'application/json',
+              'x-api-key': loginApiEndpoint.apiKey,
+            },
+          },
+        );
+        return data.systemLogin;
+      }
+
       const userSession = await this._SessionService.retrieveUserSession(
         userId,
         sessionName,
@@ -328,6 +413,31 @@ export class LoginUser extends User implements ILoginUser {
       throw new Error('Session name is not set in the configuration');
     }
 
+    if (LoginUser.isLoginApiEnabled()) {
+      const loginApiEndpoint = ComponentConfig.getComponentConfigValue(
+        '@tomei/sso',
+        'loginApiEndpoint',
+      );
+      let payload = {
+        SystemCode: systemCode,
+        SessionName: sessionName,
+        SessionId: sessionId,
+        UserId: this.ObjectId,
+      };
+
+      await axios.post(
+        `${loginApiEndpoint.baseUrl}${loginApiEndpoint.setSession}`,
+        payload,
+        {
+          headers: {
+            'Content-Type': 'application/json',
+            'x-api-key': loginApiEndpoint.apiKey,
+          },
+        },
+      );
+      return;
+    }
+
     const userSession = await this._SessionService.retrieveUserSession(
       this.ObjectId,
       sessionName,
@@ -344,7 +454,6 @@ export class LoginUser extends User implements ILoginUser {
         system.code === systemCode ? systemLogin : system,
       );
     } else {
-      // if not, add new system login into the userSession
       const newLogin = {
         id: systemCode,
         code: systemCode,
@@ -353,7 +462,6 @@ export class LoginUser extends User implements ILoginUser {
       };
       userSession.systemLogins.push(newLogin);
     }
-    // then update userSession inside the redis storage with 1 day duration of time-to-live
     this._SessionService.setUserSession(
       this.ObjectId,
       userSession,

package/src/index.ts

@@ -6,3 +6,4 @@ export * from './session';
 export * from './enum';
 export * as ssoDb from './database';
 export * from './types';
+export * from './models/user.entity';