@trimoz/trimoz-api-wrapper 0.0.1-security → 0.9.7

package/src/services/index.js

@@ -0,0 +1,202 @@
+'use strict';
+
+export default (API) => ({
+    services: {
+        get: (establishmentId, serviceId) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId;
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getAvailable: () => {
+            const url = 'v3/services/available';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getAllAvailableByEstablishment: (establishmentId) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/available';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getPlaceAndResourceIndexes: (establishmentId, serviceId) => {
+            const url = 'v3/establishments/' + establishmentId + '/places/resources/services/' + serviceId + '/indexes';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getAllByEstablishment: (establishmentId, module = null, ignorePrest = false, withSettings = false) => {
+            let url = `v3/establishments/${establishmentId}/services`;
+            if (withSettings) {
+                url += `?settings=${withSettings}`;
+            }
+            if (module) {
+                url += `${withSettings ? '&' : '?'}module=${module}`;
+            }
+
+            if (ignorePrest) {
+                url += `${module || withSettings ? '&' : '?'}ignorePrest=${ignorePrest}`;
+            }
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getAllEstablishmentServices: (establishmentId) => {
+            const url = `v3/establishments/${establishmentId}/services/all`;
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getArchived: (establishmentId) => {
+            const url = `v3/establishments/${establishmentId}/services/archived`;
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getAllMetaData: () => {
+            const url = 'v3/metadata';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getEstMetadata: (establishmentId, serviceId) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId + '/metadata/available';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getEstConfigurationMessages: (establishmentId, serviceId) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId + '/configuration/messages';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getAllEstSpecificSettings: (establishmentId, settingIds) => {
+            const values = settingIds.join(',');
+            const url = 'v3/establishments/' + establishmentId + '/services/settings?settingIds=' + values;
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        insertOrUpdateEstConfigurationMessages: (establishmentId, estId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + estId + '/configuration/messages';
+            const request = API.http.put(url, params, { headers: { 'Content-Type': 'application/json' } });
+            return API.handleError(request);
+        },
+        getBasicMeta: () => {
+            const url = 'v3/services/metas';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getEstSettings: (establishmentId, serviceId) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId + '/settings';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getTemplates: () => {
+            const url = 'v3/services/templates';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getServiceTemplatesFilters: (establishmentId, serviceUnifiedId, light = false) => {
+            const serviceUnified = serviceUnifiedId ? `&service_unified=${serviceUnifiedId}` : '';
+            const isLight = light ? '&light=true' : '';
+            const url = 'v3/establishments/' + establishmentId + '/services/templates/filters?' + serviceUnified + isLight;
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        getByIds(establishmentId, servicesIds) {
+            const url = `v3/establishments/${establishmentId}/findByIds?ids=${servicesIds}`;
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        createTemplate: (params) => {
+            const url = 'v3/services/templates';
+            const request = API.http.post(url, params, { headers: { 'Content-Type': 'application/json' } });
+            return API.handleError(request);
+        },
+        updateTemplate: (templateId, params) => {
+            const url = 'v3/services/templates/' + templateId;
+            const request = API.http.put(url, params, { headers: { 'Content-Type': 'application/json' } });
+            return API.handleError(request);
+        },
+        deleteTemplate: (templateId) => {
+            const url = 'v3/services/templates/' + templateId;
+            const request = API.http.delete(url, { headers: { 'Content-Type': 'application/json' } });
+            return API.handleError(request);
+        },
+        getModules: () => {
+            const url = 'v3/services/modules';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+        createUninstantiatedServices: (establishmentId, serviceTemplateId, moduleId, submodules) => {
+            const url = `v3/establishments/${establishmentId}/services/available`;
+            const data = {
+                serviceTemplateId: serviceTemplateId,
+                module: moduleId,
+                submodules: submodules,
+            };
+            const request = API.http.post(url, data, { headers: { 'Content-Type': 'application/json' } });
+            return API.handleError(request);
+        },
+        deleteUninstantiatedServices: (establishmentId, establishmentServiceTemplateId) => {
+            const url = `v3/establishments/${establishmentId}/services/available/${establishmentServiceTemplateId}`;
+            const request = API.http.delete(url);
+            return API.handleError(request);
+        },
+        instantiate: (establishmentId, serviceId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId + '/instantiate';
+            const request = API.http.post(url, params);
+            return API.handleError(request);
+        },
+        restore: (establishmentId, serviceId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId + '/restore';
+            const request = API.http.put(url, params);
+            return API.handleError(request);
+        },
+        delete: (establishmentId, serviceId, validate) => {
+            const url = `v3/establishments/${establishmentId}/services/${serviceId}?validate=${validate}`;
+            const request = API.http.delete(url);
+            return API.handleError(request);
+        },
+        update: (establishmentId, serviceId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId;
+            const request = API.http.put(url, params);
+            return API.handleError(request);
+        },
+        updateStatus: (establishmentId, serviceId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId + '/status';
+            const request = API.http.put(url, params, { headers: { 'Content-Type': 'application/json' } });
+            return API.handleError(request);
+        },
+        updateOrder: (establishmentId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/order';
+            const request = API.http.put(url, params, { headers: { 'Content-Type': 'application/json' } });
+            return API.handleError(request);
+        },
+        uploadDocument: (establishmentId, serviceId, language, file) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId + '/upload/' + language;
+            const params = new FormData();
+            params.append('document', file, file.name);
+
+            const request = API.http.post(url, params, { headers: { 'Content-Type': 'multipart/form-data' } });
+            return API.handleError(request);
+        },
+        deleteDocument: (establishmentId, serviceId, language) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceId + '/upload/' + language + '/delete';
+            const request = API.http.delete(url, { headers: { 'Content-Type': 'application/json' } });
+            return API.handleError(request);
+        },
+        createServiceMeta: (serviceTemplateId, params) => {
+            const url = 'v3/establishments/services/' + serviceTemplateId + '/metadata';
+            const request = API.http.post(url, params);
+            return API.handleError(request);
+        },
+        deleteServiceMeta: (serviceTemplateId, metaId) => {
+            const url = 'v3/establishments/services/' + serviceTemplateId + '/metadata/' + metaId;
+            const request = API.http.delete(url);
+            return API.handleError(request);
+        },
+        updateServiceMetas: (establishmentId, serviceTemplateId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceTemplateId + '/metadata';
+            const request = API.http.put(url, params);
+            return API.handleError(request);
+        },
+        updateServiceSettings: (establishmentId, serviceTemplateId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/services/' + serviceTemplateId + '/settings';
+            const request = API.http.put(url, params);
+            return API.handleError(request);
+        },
+    },
+});

package/src/setOptions/index.js

@@ -0,0 +1,31 @@
+'use strict';
+
+export default (API) => ({
+    setOptions: {
+        product: (product) => {
+            API.http.defaults.headers.PRODUCT = product;
+        },
+
+        role: (role) => {
+            API.http.defaults.headers['X-TRIMOZ-ROLE'] = role;
+        },
+
+        updateAppointmentJobId: (jobId) => {
+            if (jobId) {
+                API.http.defaults.headers['X-TRIMOZ-APPOINTMENT-UPDATE-JOB-ID'] = jobId;
+            }
+            else {
+                delete API.http.defaults.headers['X-TRIMOZ-APPOINTMENT-UPDATE-JOB-ID'];
+            }
+        },
+
+        updateAppointmentJobToken: (jobToken) => {
+            if (jobToken) {
+                API.http.defaults.headers['X-TRIMOZ-APPOINTMENT-UPDATE-JOB-TOKEN'] = jobToken;
+            }
+            else {
+                delete API.http.defaults.headers['X-TRIMOZ-APPOINTMENT-UPDATE-JOB-TOKEN'];
+            }
+        },
+    },
+});

package/src/settings/index.js

@@ -0,0 +1,17 @@
+'use strict';
+
+export default (API) => ({
+    settings: {
+        getBaseSettings: (appModule) => {
+            const url = 'v3/settings' + (appModule ? '?appModule=' + appModule : '');
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+
+        getGlobalSettings: () => {
+            const url = 'v3/globalSettings';
+            const request = API.http.get(url);
+            return API.handleError(request);
+        }
+    }
+});

package/src/stats/index.js

@@ -0,0 +1,88 @@
+'use strict';
+
+import { forEach } from 'lodash';
+
+export default (API) => ({
+    stats: {
+        /**
+         * @deprecated
+         */
+        getView: (
+            dateStart,
+            dateStop,
+            establishments,
+            places,
+            resources,
+            establishmentServiceTemplates,
+            timezone = null,
+            headOffices = null,
+            modules = null,
+            groupBy = null,
+            view = null,
+            gainValuesOverride = null
+        ) => {
+            let url = 'v3/statistics/view';
+            url += '?dateStart=' + dateStart;
+            url += '&dateStop=' + dateStop;
+            url += establishments ? ('&establishments=' + establishments) : '';
+            url += places ? ('&places=' + places) : '';
+            url += resources ? ('&resources=' + resources) : '';
+            url += establishmentServiceTemplates ? ('&establishmentServiceTemplates=' + establishmentServiceTemplates) : '';
+            url += timezone ? '&timezone=' + timezone : '';
+            url += headOffices ? '&headOffices=' + headOffices : '';
+            url += modules ? '&modules=' + modules : '';
+            url += view ? '&view=' + view : '';
+            url += groupBy ? '&groupBy=' + groupBy : '';
+
+            if (gainValuesOverride) {
+                url += gainValuesOverride['bookingGainMinutes'] ? '&bookingGainMinutes=' + gainValuesOverride['bookingGainMinutes'] : '';
+                url += gainValuesOverride['cancellationGainMinutes'] ? '&cancellationGainMinutes=' + gainValuesOverride['cancellationGainMinutes'] : '';
+                url += gainValuesOverride['reminderGainMinutes'] ? '&reminderGainMinutes=' + gainValuesOverride['reminderGainMinutes'] : '';
+                url += gainValuesOverride['relaunchGainMinutes'] ? '&relaunchGainMinutes=' + gainValuesOverride['relaunchGainMinutes'] : '';
+
+                url += gainValuesOverride['bookingHourlyRate'] ? '&bookingHourlyRate=' + gainValuesOverride['bookingHourlyRate'] : '';
+                url += gainValuesOverride['cancellationHourlyRate'] ? '&cancellationHourlyRate=' + gainValuesOverride['cancellationHourlyRate'] : '';
+                url += gainValuesOverride['reminderHourlyRate'] ? '&reminderHourlyRate=' + gainValuesOverride['reminderHourlyRate'] : '';
+                url += gainValuesOverride['relaunchHourlyRate'] ? '&relaunchHourlyRate=' + gainValuesOverride['relaunchHourlyRate'] : '';
+            }
+
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+
+        insertKPIStatisticForEstablishment: (establishment, service, place, firstAvailabilityDate) => {
+            const url = `v3/establishments/${establishment}/statistics/kpi`;
+
+            const request = API.http.post(
+                url,
+                { place: place, service: service, firstAvailabilityDate: firstAvailabilityDate },
+                { headers: { 'Content-Type': 'application/json' } }
+            );
+            return API.handleError(request);
+        },
+
+        incrementPublicVisitsForEstablishment: (establishment) => {
+            const url = `v3/establishments/${establishment}/statistics/publicVisits`;
+
+            const request = API.http.post(url);
+            return API.handleError(request);
+        },
+
+        createStatisticsReportJob(payload) {
+            let url = `v3/statistics/job`;
+            const params = new FormData();
+            forEach(payload, (val, key) => {
+                params.append(key, val);
+            });
+
+            const request = API.http.post(url, params, { headers: { 'Content-Type': 'multipart/form-data' }, timeout: 30000 });
+            return API.handleError(request);
+        },
+
+        getStatisticsReportJob: (jobId) => {
+            const url = `/v3/statistics/job/${jobId}`;
+            const request = API.http.get(url);
+            return API.handleError(request);
+        }
+    }
+});

package/src/store/helpers/index.js

@@ -0,0 +1,16 @@
+const { keys, forEach, find } = require('lodash');
+export const urlFromClientData = (profileUrl, clientData) => {
+    const requiredKeys = ['birthday', 'cellphone', 'email', 'firstName', 'lastName', 'nam', 'unknownMother', 'motherFirstName', 'motherLastName', 'unknownFather', 'fatherFirstName', 'fatherLastName', 'gender', 'baseUrl', 'locale'];
+    const url = new URL(profileUrl + '/auth/register');
+    forEach(keys(clientData), (key) => {
+        if (!find(requiredKeys, (it) => it === key)) {
+            return;
+        }
+        if (key.includes('unknown')) {
+            url.searchParams.append(key.replace('unknown', '').toLowerCase() + 'Unknown', clientData[key]);
+            return;
+        }
+        url.searchParams.append(key, clientData[key]);
+    });
+    return url.href;
+};

package/src/store/jwt.js

@@ -0,0 +1,172 @@
+import { signInWindow } from '../oAuthWindow';
+import { inferProfileUrl, hasRtkpCookie } from '../utils';
+import { urlFromClientData } from './helpers';
+
+const state = {
+    accessToken: null,
+    isInRetryMode: false,
+    queuedRequest: [],
+    headRequest: undefined,
+    loggedUser: undefined,
+    loggedUserCommunication: undefined,
+    patients: [],
+    loading: false,
+    locale: null,
+};
+
+const getters = {
+    getAccessToken(state) {
+        return state.accessToken;
+    },
+
+    getIsInRetryMode(state) {
+        return state.isInRetryMode;
+    },
+
+    getHeadRequest(state) {
+        return state.headRequest;
+    },
+
+    getLoggedUser(state) {
+        return state.loggedUser;
+    },
+
+    getLoggedUserCommunication(state) {
+        return state.loggedUserCommunication;
+    },
+
+    getProfileUrl() {
+        return inferProfileUrl();
+    },
+
+    getPatients(state) {
+        return state.patients;
+    },
+
+    getLoading(state) {
+        return state.loading;
+    },
+
+    getLocale(state) {
+        return state.locale;
+    },
+};
+
+const mutations = {
+    SET_ACCESS_TOKEN(state, token) {
+        state.accessToken = token;
+    },
+
+    CLEAR_ACCESS_TOKEN(state) {
+        state.accessToken = null;
+    },
+
+    SET_IS_IN_RETRY_MODE(state, value) {
+        state.isInRetryMode = value;
+    },
+
+    ENQUEUE_REQUEST(state, req) {
+        state.queuedRequest.push(req);
+    },
+
+    DEQUEUE_REQUEST(state) {
+        state.headRequest = state.queuedRequest.shift();
+    },
+
+    SET_LOGGED_USER(state, user) {
+        state.loggedUser = user;
+    },
+
+    SET_LOGGED_USER_COMMUNICATION(state, payload) {
+        state.loggedUserCommunication = payload;
+    },
+
+    SET_PATIENTS(state, patients) {
+        state.patients = patients;
+    },
+
+    SET_LOADING(state, payload) {
+        state.loading = payload;
+    },
+
+    SET_LOCALE_FOR_PROFILE(state, locale) {
+        state.locale = locale;
+    },
+};
+
+const actions = {
+    async fetchAccessToken({ commit }) {
+        if (hasRtkpCookie()) {
+            const response = await this._vm.$api.auth.getAccessToken();
+            commit('SET_ACCESS_TOKEN', response.data.accessToken);
+        }
+    },
+
+    async logout({ commit }) {
+        try {
+            commit('SET_LOADING', true);
+            await this._vm.$api.auth.logoutJwt();
+            commit('SET_ACCESS_TOKEN', null);
+            commit('SET_LOGGED_USER', null);
+            commit('SET_PATIENTS', []);
+        }
+        finally {
+            commit('SET_LOADING', false);
+        }
+    },
+
+    async getLoggedUser({ getters, commit }) {
+        if (getters.getAccessToken) {
+            const response = await this._vm.$api.auth.getMyPatient();
+            commit('SET_LOGGED_USER', response.data);
+        }
+    },
+
+    async getLoggedUserCommunication({ getters, commit }) {
+        if (getters.getAccessToken) {
+            const response = await this._vm.$api.auth.getMyPatientCommunication();
+            commit('SET_LOGGED_USER_COMMUNICATION', response.data);
+        }
+    },
+
+    async getPatients({ getters, commit }) {
+        if (getters.getAccessToken) {
+            const response = await this._vm.$api.auth.getAllPatients();
+            commit('SET_PATIENTS', response.data);
+        }
+    },
+
+    async openSignInWindow({ getters, dispatch, commit }, isRegiser = false) {
+        const oAuthUrl = isRegiser
+            ? '/oauth/register'
+            : '/oauth/login';
+        const authenticationRoute = `${getters.getProfileUrl}${oAuthUrl}?baseUrl=${window.location.origin}&locale=${getters.getLocale}`;
+        try {
+            await signInWindow(authenticationRoute);
+            commit('SET_LOADING', true);
+            await dispatch('fetchAccessToken');
+            await Promise.all([
+                dispatch('getLoggedUser'),
+                dispatch('getLoggedUserCommunication'),
+                dispatch('getPatients'),
+            ]);
+        }
+        finally {
+            commit('SET_LOADING', false);
+        }
+    },
+
+    async openRegisterWindow({ getters }, payload) {
+        const { clientDataForUrl } = payload;
+        urlFromClientData(getters.getProfileUrl, clientDataForUrl);
+        await signInWindow(urlFromClientData(getters.getProfileUrl, { ...clientDataForUrl, baseUrl: window.location.origin }));
+    },
+};
+
+export const jwt = {
+    namespaced: true,
+    actions,
+    getters,
+    mutations,
+    state,
+};

package/src/texts/index.js

@@ -0,0 +1,17 @@
+'use strict';
+
+export default (API) => ({
+    texts: {
+        get: (establishmentId, lang = '') => {
+            const url = 'v3/establishments/' + establishmentId + '/texts' + (lang ? '/' + lang : '');
+            const request = API.http.get(url);
+            return API.handleError(request);
+        },
+
+        updateTexts: (establishmentId, params) => {
+            const url = 'v3/establishments/' + establishmentId + '/texts';
+            const request = API.http.put(url, params);
+            return API.handleError(request);
+        }
+    }
+});

package/src/utils.js

@@ -0,0 +1,71 @@
+import { filter, forEach, get, includes, isNil, join, replace, some, split, startsWith } from 'lodash';
+import { TrimozError } from '@trimoz/trimoz-vue-error-handling';
+
+export const appendQueryParams = (url, params) => {
+    let hasParams = false;
+    forEach(params, function(value, key) {
+        if (!isNil(value)) {
+            if (!hasParams) {
+                url += `?${key}=${value}`;
+                hasParams = true;
+            }
+            else {
+                url += `&${key}=${value}`;
+            }
+        }
+    });
+    return url;
+};
+
+export const convertApiErrorIntoTrimozError = (error) => {
+    const contextCode = get(error, 'response.data.messages.errors[0].context.error_code', null);
+    const internalCode = retrieveErrorInternalCode(error);
+
+    return new TrimozError(error, 'errors.generic', internalCode, contextCode);
+};
+
+export const retrieveErrorInternalCode = (error) => {
+    return get(error, 'response.data.messages.errors[0].internal_code', null);
+};
+
+export function inferProfileUrl() {
+    let hostname = window.location.host;
+    hostname = replace(hostname, 'portal3.', 'profile.');
+    hostname = replace(hostname, 'portal.', 'profile.');
+    hostname = replace(hostname, 'portal-dot-', 'profile-dot-');
+    hostname = replace(hostname, 'clients3.', 'profile.');
+    hostname = replace(hostname, 'clients.', 'profile.');
+    hostname = replace(hostname, 'public-dot-', 'profile-dot-');
+    hostname = replace(hostname, 'admin3.', 'profile.');
+    hostname = replace(hostname, 'admin.', 'profile.');
+    hostname = replace(hostname, 'admin-dot-', 'profile-dot-');
+    hostname = replace(hostname, '8082', '8084');
+    hostname = replace(hostname, '8081', '8084');
+    hostname = replace(hostname, '8080', '8084');
+    return window.location.protocol + '//' + hostname;
+}
+
+export function inferCookieDomain(domain = null) {
+    let hostname = domain || process.env.VUE_APP_COOKIE_DOMAIN || window.location.hostname;
+    hostname = replace(hostname, 'admin3.', '');
+    hostname = replace(hostname, 'admin.', '');
+    hostname = replace(hostname, 'clients3.', '');
+    hostname = replace(hostname, 'clients.', '');
+    return hostname;
+}
+
+export function isAdminApp() {
+    return includes(window.location.host, 'admin') || includes(window.location.host, 'localhost:8080');
+}
+
+export const expectedRtkpValue = (domain = window.location.hostname) => {
+    return join(['profile', inferCookieDomain(domain)], '.');
+};
+
+export const hasRtkpCookie = (domain = window.location.hostname, cookies = document.cookie) => {
+    const rtkps = filter(split(cookies, '; '), cookie => startsWith(cookie, 'rtkp='));
+    return some(rtkps, rtkp => {
+        const rtkpValue = split(rtkp, '=')[1];
+        return rtkpValue === expectedRtkpValue(domain);
+    });
+};

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=%40trimoz%2Ftrimoz-api-wrapper for more information.