@unchainedshop/api 1.2.40 → 2.0.0-beta1

package/src/schema/inputTypes.js

@@ -65,17 +65,19 @@ export default [
     input CreateCurrencyInput {
       isoCode: String!
       contractAddress: String
+      decimals: Int
     }
     input UpdateCurrencyInput {
       isoCode: String!
       isActive: Boolean
       contractAddress: String
+      decimals: Int
     }
 
     input CreateProductInput {
       title: String!
       type: String!
-      tags: [String!]
+      tags: [LowerCaseString!]
     }
 
     input CreateProductVariationInput {
@@ -95,7 +97,7 @@ export default [
     }
 
     input UpdateProductInput {
-      tags: [String!]
+      tags: [LowerCaseString!]
       sequence: Int
       meta: JSON
     }
@@ -174,13 +176,13 @@ export default [
 
     input CreateAssortmentInput {
       isRoot: Boolean
-      tags: [String!]
+      tags: [LowerCaseString!]
       title: String!
     }
 
     input UpdateAssortmentInput {
       isRoot: Boolean
-      tags: [String!]
+      tags: [LowerCaseString!]
       isActive: Boolean
       sequence: Int
     }

package/src/schema/mutation.js

@@ -13,6 +13,11 @@ export default [
         totpCode: String
       ): LoginMethodResponse
 
+      """
+      Log the user in with a WebAuthn device
+      """
+      loginWithWebAuthn(webAuthnPublicKeyCredentials: JSON!): LoginMethodResponse
+
       """
       Create a new user.
       """
@@ -20,6 +25,10 @@ export default [
         username: String
         email: String
         password: HashedPasswordInput
+          @deprecated(
+            reason: "Use plainPassword, there is not a lot of added security by hashing on the client"
+          )
+        webAuthnPublicKeyCredentials: JSON
         plainPassword: String
         profile: UserProfileInput
       ): LoginMethodResponse
@@ -95,6 +104,26 @@ export default [
       """
       disableTOTP(code: String!, userId: ID): User
 
+      """
+      Create WebAuthn PublicKeyCredentialCreationOptions to use for Registering a new WebAuthn Device
+      """
+      createWebAuthnCredentialCreationOptions(username: String!, extensionOptions: JSON): JSON!
+
+      """
+      Register WebAuthn Credentials for current user
+      """
+      addWebAuthnCredentials(credentials: JSON!): User!
+
+      """
+      Remove WebAuthn Credentials for current user
+      """
+      removeWebAuthnCredentials(credentialsId: ID!): User!
+
+      """
+      Create WebAuthn PublicKeyCredentialRequestrOptions to use for WebAuthn Login Flow
+      """
+      createWebAuthnCredentialRequestOptions(username: String, extensionOptions: JSON): JSON!
+
       """
       Creates an alternative cart. If you use this feature, you should use explicit orderId's when using the
       cart mutations. Else it will work like a stack and the checkout will use the very first cart of the user.
@@ -302,7 +331,7 @@ export default [
       """
       Set tags of user
       """
-      setUserTags(tags: [String]!, userId: ID!): User
+      setUserTags(tags: [LowerCaseString]!, userId: ID!): User
 
       """
       Update Profile of any user or logged in user if userId is not provided
@@ -379,6 +408,14 @@ export default [
       """
       updateProductPlan(productId: ID!, plan: UpdateProductPlanInput!): Product
 
+      """
+      Modify tokenization part of a product
+      """
+      updateProductTokenization(
+        productId: ID!
+        tokenization: UpdateProductTokenizationInput!
+      ): TokenizedProduct
+
       """
       Modify warehousing part of a product
       """
@@ -607,7 +644,11 @@ export default [
       """
       Add a new product to an assortment
       """
-      addAssortmentProduct(assortmentId: ID!, productId: ID!, tags: [String!]): AssortmentProduct!
+      addAssortmentProduct(
+        assortmentId: ID!
+        productId: ID!
+        tags: [LowerCaseString!]
+      ): AssortmentProduct!
 
       """
       Remove a product from an assortment
@@ -625,7 +666,7 @@ export default [
       addAssortmentLink(
         parentAssortmentId: ID!
         childAssortmentId: ID!
-        tags: [String!]
+        tags: [LowerCaseString!]
       ): AssortmentLink!
 
       """
@@ -641,7 +682,7 @@ export default [
       """
       Add a new filter to an assortment
       """
-      addAssortmentFilter(assortmentId: ID!, filterId: ID!, tags: [String!]): AssortmentFilter!
+      addAssortmentFilter(assortmentId: ID!, filterId: ID!, tags: [LowerCaseString!]): AssortmentFilter!
 
       """
       Remove a product from an assortment
@@ -846,6 +887,11 @@ export default [
       prepareAssortmentMediaUpload(mediaName: String!, assortmentId: ID!): MediaUploadTicket!
       prepareUserAvatarUpload(mediaName: String!, userId: ID): MediaUploadTicket!
       confirmMediaUpload(mediaUploadTicketId: ID!, size: Int!, type: String!): Media!
+
+      """
+      Tokenize
+      """
+      exportToken(tokenId: ID!, quantity: Int! = 1, recipientWalletAddress: String!): Token!
     }
   `,
 ];

package/src/schema/query.js

@@ -31,7 +31,7 @@ export default [
       If a slug is provided
       """
       productsCount(
-        tags: [String!]
+        tags: [LowerCaseString!]
         slugs: [String!]
         includeDrafts: Boolean = false
         queryString: String
@@ -43,7 +43,7 @@ export default [
       """
       products(
         queryString: String
-        tags: [String!]
+        tags: [LowerCaseString!]
         slugs: [String!]
         limit: Int = 10
         offset: Int = 0
@@ -182,6 +182,11 @@ export default [
       """
       warehousingInterfaces(type: WarehousingProviderType!): [WarehousingInterface!]!
 
+      """
+      Get token
+      """
+      token(tokenId: ID!): Token
+
       """
       Returns total number of payment providers, optionally filtered by type
       """
@@ -233,7 +238,7 @@ export default [
       """
       assortments(
         queryString: String
-        tags: [String!]
+        tags: [LowerCaseString!]
         slugs: [String!]
         limit: Int = 10
         offset: Int = 0
@@ -246,7 +251,7 @@ export default [
       Returns total number of assortments that match a given criteria or all if no criteria is given
       """
       assortmentsCount(
-        tags: [String!]
+        tags: [LowerCaseString!]
         slugs: [String!]
         includeInactive: Boolean = false
         includeLeaves: Boolean = false

package/src/schema/scalars.js

@@ -5,5 +5,6 @@ export default [
     scalar DateTime
     scalar Date
     scalar Timestamp
+    scalar LowerCaseString
   `,
 ];

package/src/schema/types/assortment.js

@@ -9,7 +9,7 @@ export default [
 
     type AssortmentMedia {
       _id: ID!
-      tags: [String!]
+      tags: [LowerCaseString!]
       file: Media!
       sortKey: Int!
       texts(forceLocale: String): AssortmentMediaTexts
@@ -26,8 +26,8 @@ export default [
       isBase: Boolean
       isRoot: Boolean
       sequence: Int!
-      tags: [String!]
-      media(limit: Int = 10, offset: Int = 0, tags: [String!]): [AssortmentMedia!]!
+      tags: [LowerCaseString!]
+      media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [AssortmentMedia!]!
       texts(forceLocale: String): AssortmentTexts
       productAssignments: [AssortmentProduct!]
       filterAssignments: [AssortmentFilter!]
@@ -66,7 +66,7 @@ export default [
     type AssortmentProduct {
       _id: ID!
       sortKey: Int!
-      tags: [String!]
+      tags: [LowerCaseString!]
       assortment: Assortment!
       product: Product!
     }
@@ -74,7 +74,7 @@ export default [
     type AssortmentFilter {
       _id: ID!
       sortKey: Int!
-      tags: [String!]
+      tags: [LowerCaseString!]
       assortment: Assortment!
       filter: Filter!
     }
@@ -82,7 +82,7 @@ export default [
     type AssortmentLink {
       _id: ID!
       sortKey: Int!
-      tags: [String!]
+      tags: [LowerCaseString!]
       parent: Assortment!
       child: Assortment!
     }

package/src/schema/types/currency.js

@@ -5,6 +5,7 @@ export default [
       isoCode: String!
       isActive: Boolean
       contractAddress: String
+      decimals: Int
     }
   `,
 ];

package/src/schema/types/order/order.js

@@ -54,38 +54,6 @@ export default [
       DISCOUNTS
     }
 
-    enum OrderDocumentType {
-      """
-      Order Confirmation
-      """
-      ORDER_CONFIRMATION
-
-      """
-      Order Rejection
-      """
-      ORDER_REJECTION
-
-      """
-      Delivery Note
-      """
-      DELIVERY_NOTE
-
-      """
-      Invoice
-      """
-      INVOICE
-
-      """
-      Receipt
-      """
-      RECEIPT
-
-      """
-      Other
-      """
-      OTHER
-    }
-
     """
     Just an order
     """
@@ -100,7 +68,6 @@ export default [
       currency: Currency
       delivery: OrderDelivery
       discounts: [OrderDiscount!]
-      documents(type: OrderDocumentType = CONFIRMATION): [Media!]!
       enrollment: Enrollment
       fullfilled: DateTime
       items: [OrderItem!]

package/src/schema/types/payment.js

@@ -33,9 +33,9 @@ export default [
     type PaymentCredentials {
       _id: ID!
       user: User!
-      meta: JSON
       paymentProvider: PaymentProvider!
       token: JSON
+      meta: JSON
       isValid: Boolean!
       isPreferred: Boolean!
     }

package/src/schema/types/product/bundle-product.js

@@ -7,11 +7,11 @@ export default [
       _id: ID!
       sequence: Int!
       status: ProductStatus!
-      tags: [String!]
+      tags: [LowerCaseString!]
       created: DateTime
       updated: DateTime
       published: DateTime
-      media(limit: Int = 10, offset: Int = 0, tags: [String!]): [ProductMedia!]!
+      media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
       texts(forceLocale: String): ProductTexts
       bundleItems: [ProductBundleItem!]
       reviews(

package/src/schema/types/product/configurable-product.js

@@ -66,11 +66,11 @@ export default [
       _id: ID!
       sequence: Int!
       status: ProductStatus!
-      tags: [String!]
+      tags: [LowerCaseString!]
       created: DateTime
       updated: DateTime
       published: DateTime
-      media(limit: Int = 10, offset: Int = 0, tags: [String!]): [ProductMedia!]!
+      media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
       texts(forceLocale: String): ProductTexts
       assortmentPaths: [ProductAssortmentPath!]!
       siblings(

package/src/schema/types/product/index.js

@@ -3,5 +3,13 @@ import simpleProduct from './simple-product';
 import product from './product';
 import bundleProduct from './bundle-product';
 import planProduct from './plan-product';
+import tokenizedProduct from './tokenized-product';
 
-export default [...product, ...configurableProduct, ...simpleProduct, ...bundleProduct, ...planProduct];
+export default [
+  ...product,
+  ...configurableProduct,
+  ...simpleProduct,
+  ...bundleProduct,
+  ...planProduct,
+  ...tokenizedProduct,
+];

package/src/schema/types/product/plan-product.js

@@ -36,11 +36,11 @@ export default [
       _id: ID!
       sequence: Int!
       status: ProductStatus!
-      tags: [String!]
+      tags: [LowerCaseString!]
       created: DateTime
       updated: DateTime
       published: DateTime
-      media(limit: Int = 10, offset: Int = 0, tags: [String!]): [ProductMedia!]!
+      media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
       texts(forceLocale: String): ProductTexts
       catalogPrice(quantity: Int = 1, currency: String): Price
       leveledCatalogPrices(currency: String): [PriceLevel!]!

package/src/schema/types/product/product.js

@@ -32,7 +32,7 @@ export default [
 
     type ProductMedia {
       _id: ID!
-      tags: [String!]
+      tags: [LowerCaseString!]
       file: Media!
       sortKey: Int!
       texts(forceLocale: String): ProductMediaTexts
@@ -57,12 +57,12 @@ export default [
       _id: ID!
       sequence: Int!
       status: ProductStatus!
-      tags: [String!]
+      tags: [LowerCaseString!]
       created: DateTime
       updated: DateTime
       published: DateTime
-      texts: ProductTexts
-      media(limit: Int = 10, offset: Int = 0, tags: [String!]): [ProductMedia!]!
+      texts(forceLocale: String): ProductTexts
+      media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
       reviews(
         limit: Int = 10
         offset: Int = 0

package/src/schema/types/product/simple-product.js

@@ -7,11 +7,11 @@ export default [
       _id: ID!
       sequence: Int!
       status: ProductStatus!
-      tags: [String!]
+      tags: [LowerCaseString!]
       created: DateTime
       updated: DateTime
       published: DateTime
-      media(limit: Int = 10, offset: Int = 0, tags: [String!]): [ProductMedia!]!
+      media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
       texts(forceLocale: String): ProductTexts
       catalogPrice(quantity: Int = 1, currency: String): Price
       leveledCatalogPrices(currency: String): [PriceLevel!]!

package/src/schema/types/product/tokenized-product.js

@@ -0,0 +1,56 @@
+export default [
+  /* GraphQL */ `
+    input UpdateProductTokenizationInput {
+      contractAddress: String!
+      contractStandard: SmartContractStandard!
+      tokenId: String!
+      supply: Int!
+    }
+
+    enum SmartContractStandard {
+      ERC1155
+      ERC721
+    }
+
+    type ContractConfiguration {
+      tokenId: String!
+      supply: Int!
+    }
+
+    """
+    Tokenized Product (Blockchain materialized Product)
+    """
+    type TokenizedProduct implements Product {
+      _id: ID!
+      sequence: Int!
+      status: ProductStatus!
+      tags: [LowerCaseString!]
+      created: DateTime
+      updated: DateTime
+      published: DateTime
+      media(limit: Int = 10, offset: Int = 0, tags: [LowerCaseString!]): [ProductMedia!]!
+      texts(forceLocale: String): ProductTexts
+      catalogPrice(quantity: Int = 1, currency: String): Price
+      leveledCatalogPrices(currency: String): [PriceLevel!]!
+      simulatedPrice(currency: String, useNetPrice: Boolean = false, quantity: Int = 1): Price
+      simulatedDiscounts(quantity: Int = 1): [ProductDiscount!]
+      assortmentPaths(forceLocale: String): [ProductAssortmentPath!]!
+      siblings(
+        assortmentId: ID
+        limit: Int = 10
+        offset: Int = 0
+        includeInactive: Boolean = false
+      ): [Product!]!
+      reviews(
+        limit: Int = 10
+        offset: Int = 0
+        sort: [SortOptionInput!]
+        queryString: String
+      ): [ProductReview!]!
+      contractAddress: String
+      contractStandard: SmartContractStandard
+      contractConfiguration: ContractConfiguration
+      ercMetadata(forceLocale: String): JSON
+    }
+  `,
+];

package/src/schema/types/quotation.js

@@ -57,7 +57,6 @@ export default [
       country: Country
       currency: Currency
       configuration: [ProductConfigurationParameter!]
-      documents(type: QuotationDocumentType = PROPOSAL): [Media!]!
     }
   `,
 ];

package/src/schema/types/user.js

@@ -49,6 +49,35 @@ export default [
       countryCode: String
     }
 
+    type WebAuthnMDSv3Metadata {
+      legalHeader: String
+      description: String
+      authenticatorVersion: Int
+      protocolFamily: String
+      schema: Int
+      upv: [JSON!]
+      authenticationAlgorithms: [String!]
+      publicKeyAlgAndEncodings: [String!]
+      attestationTypes: [String!]
+      userVerificationDetails: [JSON!]
+      keyProtection: [String!]
+      matcherProtection: [String!]
+      cryptoStrength: Int
+      attachmentHint: [String!]
+      tcDisplay: [JSON!]
+      attestationRootCertificates: [String!]
+      icon: String
+      authenticatorGetInfo: JSON
+    }
+
+    type WebAuthnCredentials {
+      _id: ID!
+      created: DateTime!
+      aaguid: String!
+      counter: Int!
+      mdsMetadata: WebAuthnMDSv3Metadata
+    }
+
     type User {
       _id: ID!
       email: String @deprecated(reason: "Please use primaryEmail.address instead")
@@ -57,6 +86,7 @@ export default [
       isGuest: Boolean!
       isTwoFactorEnabled: Boolean!
       isInitialPassword: Boolean!
+      webAuthnCredentials: [WebAuthnCredentials!]!
       name: String!
       avatar: Media
       profile: UserProfile
@@ -68,7 +98,7 @@ export default [
       primaryEmail: UserEmail
       emails: [UserEmail!]
       roles: [String!]
-      tags: [String!]
+      tags: [LowerCaseString!]
       cart(orderNumber: String): Order
       orders(includeCarts: Boolean = false, sort: [SortOptionInput!], queryString: String): [Order!]!
       quotations(sort: [SortOptionInput!], queryString: String): [Quotation!]!
@@ -76,6 +106,7 @@ export default [
       paymentCredentials: [PaymentCredentials!]!
       enrollments(sort: [SortOptionInput!], queryString: String): [Enrollment!]!
       allowedActions: [RoleAction!]!
+      tokens: [Token!]!
     }
   `,
 ];

package/src/schema/types/warehousing.js

@@ -8,9 +8,13 @@ export default [
 
     enum WarehousingProviderType {
       """
-      Physical
+      Physical warehousing providers resemble stores or facilities that hold a quantity of stocks physically in stock.
       """
       PHYSICAL
+      """
+      Virtual warehousing providers resemble software that control ownership and validity of virtual products (for ex. smart contract bridges)
+      """
+      VIRTUAL
     }
 
     enum WarehousingProviderError {
@@ -31,5 +35,23 @@ export default [
       configurationError: WarehousingProviderError
       isActive: Boolean
     }
+
+    enum TokenExportStatus {
+      CENTRALIZED
+      EXPORTING
+      DECENTRALIZED
+    }
+
+    type Token {
+      _id: ID!
+      user: User
+      walletAddress: String
+      product: TokenizedProduct!
+      status: TokenExportStatus!
+      quantity: Int!
+      contractAddress: String
+      chainId: String
+      chainTokenId: String
+    }
   `,
 ];

package/src/user-context.ts

@@ -1,6 +1,7 @@
 import { UnchainedUserContext } from '@unchainedshop/types/api';
 import { UnchainedCore } from '@unchainedshop/types/core';
-import { IncomingMessage } from 'http';
+import { IncomingMessage, OutgoingMessage } from 'http';
+import cookie from 'cookie';
 
 function isString(input) {
   return typeof input === 'string' && Object.prototype.toString.call(input) === '[object String]';
@@ -8,16 +9,28 @@ function isString(input) {
 
 export const getUserContext = async (
   req: IncomingMessage & { cookies?: any },
+  res: OutgoingMessage,
   unchainedAPI: UnchainedCore,
 ): Promise<UnchainedUserContext> => {
   // there is a possible current user connected!
-  let loginToken = req.headers['meteor-login-token'];
-  if (req.cookies?.meteor_login_token) {
-    loginToken = req.cookies.meteor_login_token;
-  }
-  if (req.cookies?.token) {
-    loginToken = req.cookies.token;
+  const cookieName = process.env.UNCHAINED_COOKIE_NAME || 'unchained_token';
+  const domain = process.env.UNCHAINED_COOKIE_DOMAIN;
+
+  let loginToken = req.cookies?.[cookieName];
+
+  function setLoginToken(token: string, expires: Date) {
+    if (!domain) return;
+    const authCookie = cookie.serialize(cookieName, token || null, {
+      domain,
+      httpOnly: true,
+      expires: token ? expires : undefined,
+      maxAge: token ? undefined : -1,
+      sameSite: 'lax',
+      secure: process.env.NODE_ENV === 'production',
+    });
+    res.setHeader('Set-Cookie', authCookie);
   }
+
   if (req.headers.authorization) {
     const [type, token] = req.headers.authorization.split(' ');
     if (type === 'Bearer') {
@@ -54,11 +67,12 @@ export const getUserContext = async (
           user: currentUser,
           userId: currentUser._id,
           loginToken: loginToken as string,
+          setLoginToken,
         };
       }
     }
-    return { loginToken: loginToken as string };
+    return { loginToken: loginToken as string, setLoginToken };
   }
 
-  return {};
+  return { setLoginToken };
 };