@unchainedshop/api 1.2.40 → 2.0.0-beta2

package/src/schema/types/user.js

@@ -49,6 +49,41 @@ export default [
       countryCode: String
     }
 
+    type WebAuthnMDSv3Metadata {
+      legalHeader: String
+      description: String
+      authenticatorVersion: Int
+      protocolFamily: String
+      schema: Int
+      upv: [JSON!]
+      authenticationAlgorithms: [String!]
+      publicKeyAlgAndEncodings: [String!]
+      attestationTypes: [String!]
+      userVerificationDetails: [JSON!]
+      keyProtection: [String!]
+      matcherProtection: [String!]
+      cryptoStrength: Int
+      attachmentHint: [String!]
+      tcDisplay: [JSON!]
+      attestationRootCertificates: [String!]
+      icon: String
+      authenticatorGetInfo: JSON
+    }
+
+    type WebAuthnCredentials {
+      _id: ID!
+      created: DateTime!
+      aaguid: String!
+      counter: Int!
+      mdsMetadata: WebAuthnMDSv3Metadata
+    }
+
+    type Web3Address {
+      address: String!
+      nonce: Int
+      verified: Boolean!
+    }
+
     type User {
       _id: ID!
       email: String @deprecated(reason: "Please use primaryEmail.address instead")
@@ -57,6 +92,8 @@ export default [
       isGuest: Boolean!
       isTwoFactorEnabled: Boolean!
       isInitialPassword: Boolean!
+      webAuthnCredentials: [WebAuthnCredentials!]!
+      web3Addresses: [Web3Address!]!
       name: String!
       avatar: Media
       profile: UserProfile
@@ -68,7 +105,7 @@ export default [
       primaryEmail: UserEmail
       emails: [UserEmail!]
       roles: [String!]
-      tags: [String!]
+      tags: [LowerCaseString!]
       cart(orderNumber: String): Order
       orders(includeCarts: Boolean = false, sort: [SortOptionInput!], queryString: String): [Order!]!
       quotations(sort: [SortOptionInput!], queryString: String): [Quotation!]!
@@ -76,6 +113,7 @@ export default [
       paymentCredentials: [PaymentCredentials!]!
       enrollments(sort: [SortOptionInput!], queryString: String): [Enrollment!]!
       allowedActions: [RoleAction!]!
+      tokens: [Token!]!
     }
   `,
 ];

package/src/schema/types/warehousing.js

@@ -8,9 +8,13 @@ export default [
 
     enum WarehousingProviderType {
       """
-      Physical
+      Physical warehousing providers resemble stores or facilities that hold a quantity of stocks physically in stock.
       """
       PHYSICAL
+      """
+      Virtual warehousing providers resemble software that control ownership and validity of virtual products (for ex. smart contract bridges)
+      """
+      VIRTUAL
     }
 
     enum WarehousingProviderError {
@@ -31,5 +35,23 @@ export default [
       configurationError: WarehousingProviderError
       isActive: Boolean
     }
+
+    enum TokenExportStatus {
+      CENTRALIZED
+      EXPORTING
+      DECENTRALIZED
+    }
+
+    type Token {
+      _id: ID!
+      user: User
+      walletAddress: String
+      product: TokenizedProduct!
+      status: TokenExportStatus!
+      quantity: Int!
+      contractAddress: String
+      chainId: String
+      chainTokenId: String
+    }
   `,
 ];

package/src/user-context.ts

@@ -1,6 +1,7 @@
 import { UnchainedUserContext } from '@unchainedshop/types/api';
 import { UnchainedCore } from '@unchainedshop/types/core';
-import { IncomingMessage } from 'http';
+import { IncomingMessage, OutgoingMessage } from 'http';
+import cookie from 'cookie';
 
 function isString(input) {
   return typeof input === 'string' && Object.prototype.toString.call(input) === '[object String]';
@@ -8,16 +9,28 @@ function isString(input) {
 
 export const getUserContext = async (
   req: IncomingMessage & { cookies?: any },
+  res: OutgoingMessage,
   unchainedAPI: UnchainedCore,
 ): Promise<UnchainedUserContext> => {
   // there is a possible current user connected!
-  let loginToken = req.headers['meteor-login-token'];
-  if (req.cookies?.meteor_login_token) {
-    loginToken = req.cookies.meteor_login_token;
-  }
-  if (req.cookies?.token) {
-    loginToken = req.cookies.token;
+  const cookieName = process.env.UNCHAINED_COOKIE_NAME || 'unchained_token';
+  const domain = process.env.UNCHAINED_COOKIE_DOMAIN;
+
+  let loginToken = req.cookies?.[cookieName];
+
+  function setLoginToken(token: string, expires: Date) {
+    if (!domain) return;
+    const authCookie = cookie.serialize(cookieName, token || null, {
+      domain,
+      httpOnly: true,
+      expires: token ? expires : undefined,
+      maxAge: token ? undefined : -1,
+      sameSite: 'lax',
+      secure: process.env.NODE_ENV === 'production',
+    });
+    res.setHeader('Set-Cookie', authCookie);
   }
+
   if (req.headers.authorization) {
     const [type, token] = req.headers.authorization.split(' ');
     if (type === 'Bearer') {
@@ -54,11 +67,12 @@ export const getUserContext = async (
           user: currentUser,
           userId: currentUser._id,
           loginToken: loginToken as string,
+          setLoginToken,
         };
       }
     }
-    return { loginToken: loginToken as string };
+    return { loginToken: loginToken as string, setLoginToken };
   }
 
-  return {};
+  return { setLoginToken };
 };