@unchainedshop/api 2.12.2 → 3.0.0-alpha2

package/lib/resolvers/mutations/assortments/addAssortmentMedia.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"addAssortmentMedia.d.ts","sourceRoot":"","sources":["../../../../src/resolvers/mutations/assortments/addAssortmentMedia.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAG5D,wBAA8B,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;;;CAAA,EAAE,OAAO,EAAE,OAAO,gFAqBrG"}

package/lib/resolvers/mutations/assortments/addAssortmentMedia.js

@@ -1,18 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { AssortmentNotFoundError, InvalidIdError } from '../../../errors.js';
-export default async function addAssortmentMedia(root, { media, assortmentId }, context) {
-    const { modules, services, userId } = context;
-    log(`mutation addAssortmentMedia ${assortmentId}`, { userId });
-    if (!assortmentId)
-        throw new InvalidIdError({ assortmentId });
-    if (!(await modules.assortments.assortmentExists({ assortmentId })))
-        throw new AssortmentNotFoundError({ assortmentId });
-    const file = await services.files.uploadFileFromStream({
-        directoryName: 'assortment-media',
-        rawFile: media,
-        meta: {},
-    }, context);
-    const assortmentMedia = await modules.assortments.media.create({ assortmentId, mediaId: file._id });
-    return assortmentMedia;
-}
-//# sourceMappingURL=addAssortmentMedia.js.map

package/lib/resolvers/mutations/assortments/addAssortmentMedia.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"addAssortmentMedia.js","sourceRoot":"","sources":["../../../../src/resolvers/mutations/assortments/addAssortmentMedia.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAE5C,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE7E,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,OAAgB;IACpG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC9C,GAAG,CAAC,+BAA+B,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/D,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAE9D,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACjE,MAAM,IAAI,uBAAuB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAEtD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CACpD;QACE,aAAa,EAAE,kBAAkB;QACjC,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,EAAE;KACT,EACD,OAAO,CACR,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpG,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/lib/resolvers/mutations/products/addProductMedia.d.ts

@@ -1,6 +0,0 @@
-import { Context, Root } from '@unchainedshop/types/api.js';
-export default function addProductMedia(root: Root, { media, productId }: {
-    media: any;
-    productId: any;
-}, context: Context): Promise<import("@unchainedshop/types/products.media.js").ProductMedia>;
-//# sourceMappingURL=addProductMedia.d.ts.map

package/lib/resolvers/mutations/products/addProductMedia.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"addProductMedia.d.ts","sourceRoot":"","sources":["../../../../src/resolvers/mutations/products/addProductMedia.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAG5D,wBAA8B,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;;;CAAA,EAAE,OAAO,EAAE,OAAO,0EAmB/F"}

package/lib/resolvers/mutations/products/addProductMedia.js

@@ -1,18 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { ProductNotFoundError, InvalidIdError } from '../../../errors.js';
-export default async function addProductMedia(root, { media, productId }, context) {
-    const { modules, services, userId } = context;
-    log(`mutation addProductMedia ${productId}`, { userId });
-    if (!productId)
-        throw new InvalidIdError({ productId });
-    const product = await modules.products.findProduct({ productId });
-    if (!product)
-        throw new ProductNotFoundError({ productId });
-    const file = await services.files.uploadFileFromStream({
-        directoryName: 'product-media',
-        rawFile: media,
-        meta: { productId },
-    }, context);
-    return modules.products.media.create({ productId, mediaId: file._id });
-}
-//# sourceMappingURL=addProductMedia.js.map

package/lib/resolvers/mutations/products/addProductMedia.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"addProductMedia.js","sourceRoot":"","sources":["../../../../src/resolvers/mutations/products/addProductMedia.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAE5C,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE1E,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,eAAe,CAAC,IAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,OAAgB;IAC9F,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC9C,GAAG,CAAC,4BAA4B,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAExD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CACpD;QACE,aAAa,EAAE,eAAe;QAC9B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,EAAE,SAAS,EAAE;KACpB,EACD,OAAO,CACR,CAAC;IAEF,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/lib/resolvers/mutations/users/updateUserAvatar.d.ts

@@ -1,6 +0,0 @@
-import { Context, Root } from '@unchainedshop/types/api.js';
-export default function updateUserAvatar(root: Root, params: {
-    avatar: any;
-    userId: string;
-}, context: Context): Promise<import("@unchainedshop/types/user.js").User>;
-//# sourceMappingURL=updateUserAvatar.d.ts.map

package/lib/resolvers/mutations/users/updateUserAvatar.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"updateUserAvatar.d.ts","sourceRoot":"","sources":["../../../../src/resolvers/mutations/users/updateUserAvatar.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAG5D,wBAA8B,gBAAgB,CAC5C,IAAI,EAAE,IAAI,EACV,MAAM,EAAE;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACvC,OAAO,EAAE,OAAO,wDA+BjB"}

package/lib/resolvers/mutations/users/updateUserAvatar.js

@@ -1,22 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { UserNotFoundError } from '../../../errors.js';
-export default async function updateUserAvatar(root, params, context) {
-    const { modules, services, userId } = context;
-    const normalizedUserId = params.userId || userId;
-    log(`mutation updateUserAvatar ${normalizedUserId}`, { userId });
-    if (!(await modules.users.userExists({ userId: normalizedUserId })))
-        throw new UserNotFoundError({ userId: normalizedUserId });
-    const user = await modules.users.findUserById(normalizedUserId);
-    const file = await services.files.uploadFileFromStream({
-        directoryName: 'user-avatars',
-        rawFile: params.avatar,
-        meta: { userId: normalizedUserId },
-    }, context);
-    if (user?.avatarId) {
-        await services.files.removeFiles({
-            fileIds: [user.avatarId],
-        }, context);
-    }
-    return modules.users.updateAvatar(normalizedUserId, file._id);
-}
-//# sourceMappingURL=updateUserAvatar.js.map

package/lib/resolvers/mutations/users/updateUserAvatar.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"updateUserAvatar.js","sourceRoot":"","sources":["../../../../src/resolvers/mutations/users/updateUserAvatar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,gBAAgB,CAC5C,IAAU,EACV,MAAuC,EACvC,OAAgB;IAEhB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC9C,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;IAEjD,GAAG,CAAC,6BAA6B,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEjE,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACjE,MAAM,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAEhE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CACpD;QACE,aAAa,EAAE,cAAc;QAC7B,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;KACnC,EACD,OAAO,CACR,CAAC;IAEF,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnB,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,CAC9B;YACE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAkB,CAAC;SACnC,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC"}

package/lib/resolvers/queries/users/impersonator.d.ts

@@ -1,3 +0,0 @@
-import { Context, Root } from '@unchainedshop/types/api.js';
-export default function impersonator(root: Root, params: any, { userId, user, remoteAddress, modules, loginToken }: Context): Promise<import("@unchainedshop/types/user.js").User>;
-//# sourceMappingURL=impersonator.d.ts.map

package/lib/resolvers/queries/users/impersonator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"impersonator.d.ts","sourceRoot":"","sources":["../../../../src/resolvers/queries/users/impersonator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAE5D,wBAA8B,YAAY,CACxC,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,GAAG,EACX,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,OAAO,wDAY9D"}

package/lib/resolvers/queries/users/impersonator.js

@@ -1,12 +0,0 @@
-import { log } from '@unchainedshop/logger';
-export default async function impersonator(root, params, { userId, user, remoteAddress, modules, loginToken }) {
-    log(`query impersonator ${remoteAddress}`, { userId });
-    if (!user?.services || !user?.services?.resume || !user?.services?.resume?.loginTokens)
-        return null;
-    const { loginTokens } = user.services.resume;
-    const impersonatedSession = loginTokens.find(({ hashedToken, impersonatorId }) => hashedToken === modules.accounts.createHashLoginToken(loginToken) && impersonatorId);
-    if (!impersonatedSession)
-        return null;
-    return modules.users.findUserById(impersonatedSession.impersonatorId);
-}
-//# sourceMappingURL=impersonator.js.map

package/lib/resolvers/queries/users/impersonator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"impersonator.js","sourceRoot":"","sources":["../../../../src/resolvers/queries/users/impersonator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAG5C,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,YAAY,CACxC,IAAU,EACV,MAAW,EACX,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAW;IAE7D,GAAG,CAAC,sBAAsB,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW;QAAE,OAAO,IAAI,CAAC;IAEpG,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC7C,MAAM,mBAAmB,GAAG,WAAW,CAAC,IAAI,CAC1C,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,EAAE,CAClC,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,cAAc,CACtF,CAAC;IACF,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;AACxE,CAAC"}

package/lib/resolvers/type/oauth-account.d.ts

@@ -1,6 +0,0 @@
-import { Context } from '@unchainedshop/types/api.js';
-export declare const OAuthAccount: {
-    _id: (account: any) => any;
-    provider: (account: any, _: never, { modules }: Context) => Promise<import("@unchainedshop/types/accounts.js").IOAuth2Adapter>;
-};
-//# sourceMappingURL=oauth-account.d.ts.map

package/lib/resolvers/type/oauth-account.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-account.d.ts","sourceRoot":"","sources":["../../../src/resolvers/type/oauth-account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAEtD,eAAO,MAAM,YAAY;;gCAEM,KAAK,eAAe,OAAO;CAGzD,CAAC"}

package/lib/resolvers/type/oauth-account.js

@@ -1,7 +0,0 @@
-export const OAuthAccount = {
-    _id: (account) => account.id,
-    provider: async (account, _, { modules }) => {
-        return modules.accounts.oAuth2.getProvider(account.provider);
-    },
-};
-//# sourceMappingURL=oauth-account.js.map

package/lib/resolvers/type/oauth-account.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-account.js","sourceRoot":"","sources":["../../../src/resolvers/type/oauth-account.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE;IAC5B,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAQ,EAAE,EAAE,OAAO,EAAW,EAAE,EAAE;QAC1D,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/D,CAAC;CACF,CAAC"}

package/lib/resolvers/type/oauth-provider.d.ts

@@ -1,6 +0,0 @@
-export declare const OAuthProvider: {
-    _id: (adapter: any) => any;
-    clientId: (adapter: any) => any;
-    scopes: (adapter: any) => any;
-};
-//# sourceMappingURL=oauth-provider.d.ts.map

package/lib/resolvers/type/oauth-provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-provider.d.ts","sourceRoot":"","sources":["../../../src/resolvers/type/oauth-provider.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;;;;CAIzB,CAAC"}

package/lib/resolvers/type/oauth-provider.js

@@ -1,6 +0,0 @@
-export const OAuthProvider = {
-    _id: (adapter) => adapter.provider,
-    clientId: (adapter) => adapter.config?.clientId,
-    scopes: (adapter) => adapter.config?.scopes || [],
-};
-//# sourceMappingURL=oauth-provider.js.map

package/lib/resolvers/type/oauth-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-provider.js","sourceRoot":"","sources":["../../../src/resolvers/type/oauth-provider.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ;IAClC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ;IAC/C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE;CAClD,CAAC"}

package/lib/user-context.d.ts

@@ -1,7 +0,0 @@
-import { IncomingMessage, OutgoingMessage } from 'http';
-import { UnchainedUserContext } from '@unchainedshop/types/api.js';
-import { UnchainedCore } from '@unchainedshop/types/core.js';
-export declare const getUserContext: (req: IncomingMessage & {
-    cookies?: any;
-}, res: OutgoingMessage, unchainedAPI: UnchainedCore) => Promise<UnchainedUserContext>;
-//# sourceMappingURL=user-context.d.ts.map

package/lib/user-context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-context.d.ts","sourceRoot":"","sources":["../src/user-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAc7D,eAAO,MAAM,cAAc,QACpB,eAAe,GAAG;IAAE,OAAO,CAAC,EAAE,GAAG,CAAA;CAAE,OACnC,eAAe,gBACN,aAAa,KAC1B,OAAO,CAAC,oBAAoB,CAkE9B,CAAC"}

package/lib/user-context.js

@@ -1,64 +0,0 @@
-import cookie from 'cookie';
-function isString(input) {
-    return typeof input === 'string' && Object.prototype.toString.call(input) === '[object String]';
-}
-const { UNCHAINED_COOKIE_NAME = 'unchained_token', UNCHAINED_COOKIE_PATH = '/', UNCHAINED_COOKIE_DOMAIN, NODE_ENV, } = process.env;
-export const getUserContext = async (req, res, unchainedAPI) => {
-    // there is a possible current user connected!
-    const cookieName = UNCHAINED_COOKIE_NAME;
-    const domain = UNCHAINED_COOKIE_DOMAIN;
-    const path = UNCHAINED_COOKIE_PATH;
-    let loginToken = req.cookies?.[cookieName];
-    function setLoginToken(token, expires) {
-        if (!domain)
-            return;
-        const authCookie = cookie.serialize(cookieName, token || null, {
-            domain,
-            httpOnly: true,
-            path,
-            expires: token ? expires : undefined,
-            maxAge: token ? undefined : -1,
-            sameSite: 'lax',
-            secure: NODE_ENV === 'production',
-        });
-        res.setHeader('Set-Cookie', authCookie);
-    }
-    if (req.headers.authorization) {
-        const [type, token] = req.headers.authorization.split(' ');
-        if (type === 'Bearer') {
-            loginToken = token;
-        }
-    }
-    if (loginToken) {
-        // throw an error if the token is not a string
-        if (!isString(loginToken))
-            throw new Error('Access Token is not a string');
-        // the hashed token is the key to find the possible current user in the db
-        const hashedToken = unchainedAPI.modules.accounts.createHashLoginToken(loginToken);
-        const currentUser = await unchainedAPI.modules.users.findUserByToken({
-            hashedToken,
-        });
-        // the current user exists
-        if (currentUser) {
-            // find the right login token corresponding, the current user may have
-            // several sessions logged on different browsers / computers
-            const tokenInformation = currentUser.services.resume.loginTokens.find((tokenInfo) => tokenInfo.hashedToken === hashedToken); // eslint-disable-line
-            // true if the token is expired
-            const isExpired = new Date(tokenInformation.when) < new Date();
-            // if the token is still valid, give access to the current user
-            // information in the resolvers context
-            if (!isExpired) {
-                // return a new context object with the current user & her id
-                return {
-                    user: currentUser,
-                    userId: currentUser._id,
-                    loginToken: loginToken,
-                    setLoginToken,
-                };
-            }
-        }
-        return { loginToken: loginToken, setLoginToken };
-    }
-    return { setLoginToken };
-};
-//# sourceMappingURL=user-context.js.map

package/lib/user-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-context.js","sourceRoot":"","sources":["../src/user-context.ts"],"names":[],"mappings":"AAGA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,SAAS,QAAQ,CAAC,KAAK;IACrB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,iBAAiB,CAAC;AAClG,CAAC;AAED,MAAM,EACJ,qBAAqB,GAAG,iBAAiB,EACzC,qBAAqB,GAAG,GAAG,EAC3B,uBAAuB,EACvB,QAAQ,GACT,GAAG,OAAO,CAAC,GAAG,CAAC;AAEhB,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,GAAwC,EACxC,GAAoB,EACpB,YAA2B,EACI,EAAE;IACjC,8CAA8C;IAC9C,MAAM,UAAU,GAAG,qBAAqB,CAAC;IACzC,MAAM,MAAM,GAAG,uBAAuB,CAAC;IACvC,MAAM,IAAI,GAAG,qBAAqB,CAAC;IAEnC,IAAI,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IAE3C,SAAS,aAAa,CAAC,KAAa,EAAE,OAAa;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE;YAC7D,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACpC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,QAAQ,KAAK,YAAY;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,8CAA8C;QAC9C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAE3E,0EAA0E;QAC1E,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,UAAoB,CAAC,CAAC;QAE7F,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;YACnE,WAAW;SACZ,CAAC,CAAC;QAEH,0BAA0B;QAC1B,IAAI,WAAW,EAAE,CAAC;YAChB,sEAAsE;YACtE,4DAA4D;YAC5D,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CACnE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,WAAW,CACrD,CAAC,CAAC,sBAAsB;YAEzB,+BAA+B;YAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;YAE/D,+DAA+D;YAC/D,uCAAuC;YACvC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,6DAA6D;gBAC7D,OAAO;oBACL,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,WAAW,CAAC,GAAG;oBACvB,UAAU,EAAE,UAAoB;oBAChC,aAAa;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,UAAoB,EAAE,aAAa,EAAE,CAAC;IAC7D,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,CAAC;AAC3B,CAAC,CAAC"}

package/src/express/createApolloMiddleware.ts

@@ -1,40 +0,0 @@
-import cors from 'cors';
-import { expressMiddleware } from '@apollo/server/express4';
-import graphqlUploadExpress from 'graphql-upload/graphqlUploadExpress.mjs';
-import e from 'express';
-import { getCurrentContextResolver } from '../context.js';
-
-export default function createApolloMiddleware(apolloGraphQLServer, { corsOrigins = undefined } = {}) {
-  const contextResolver = getCurrentContextResolver();
-
-  const originFn =
-    corsOrigins && Array.isArray(corsOrigins)
-      ? (origin, callback) => {
-          if (corsOrigins.length === 0 || !origin) {
-            callback(null, true);
-            return;
-          }
-          if (corsOrigins.indexOf(origin) !== -1) {
-            callback(null, true);
-          } else {
-            callback(new Error('Not allowed by CORS'));
-          }
-        }
-      : corsOrigins;
-
-  return [
-    cors(
-      !originFn
-        ? undefined
-        : {
-            origin: originFn,
-            credentials: true,
-          },
-    ),
-    e.json(),
-    graphqlUploadExpress({ maxFileSize: 10000000, maxFiles: 10 }),
-    expressMiddleware(apolloGraphQLServer, {
-      context: contextResolver,
-    }),
-  ];
-}

package/src/express/createSingleSignOnMiddleware.ts

@@ -1,92 +0,0 @@
-/// <reference lib="dom" />
-import { IncomingMessage } from 'http';
-import { createLogger } from '@unchainedshop/logger';
-import { UnchainedCore } from '@unchainedshop/types/core.js';
-import cookie from 'cookie';
-import { getCurrentContextResolver } from '../context.js';
-
-const {
-  ROOT_URL,
-  NODE_ENV,
-  UNCHAINED_CLOUD_ENDPOINT,
-  UNCHAINED_COOKIE_NAME = 'unchained_token',
-  UNCHAINED_COOKIE_DOMAIN,
-} = process.env;
-
-const logger = createLogger('unchained:unchained-cloud-sso');
-
-const loginWithSingleSignOn = async (remoteToken, context: UnchainedCore) => {
-  const domain = UNCHAINED_COOKIE_DOMAIN || new URL(ROOT_URL).hostname || 'localhost';
-  const result = await fetch(UNCHAINED_CLOUD_ENDPOINT, {
-    method: 'POST',
-    headers: {
-      'content-type': 'application/json',
-    },
-    // eslint-disable-next-line
-    // @ts-ignore
-    duplex: 'half',
-    body: JSON.stringify({
-      operationName: 'consume',
-      variables: {
-        token: remoteToken,
-      },
-      query:
-        'mutation consume($token: ID!) { controlConsumeSingleSignOnToken(token: $token) { domain } }',
-    }),
-  });
-  const json: any = await result.json();
-  if (json?.errors?.length > 0) {
-    throw new Error(json.errors[0].message);
-  }
-
-  if (domain === 'localhost' || domain === json?.data?.controlConsumeSingleSignOnToken?.domain) {
-    // create sso user if not exist and login
-    const ssoUserId =
-      (await context.modules.users.findUser({ username: 'sso' }))?._id ||
-      (await context.modules.accounts.createUser(
-        {
-          username: 'sso',
-          roles: ['admin'],
-          email: 'sso@unchained.local',
-          password: null,
-          guest: false,
-        },
-        { skipMessaging: true },
-      ));
-    const { tokenExpires, token } = await context.modules.accounts.createLoginToken(ssoUserId, context);
-    const expires = new Date(tokenExpires || new Date().getTime() + 100000);
-    const authCookie = cookie.serialize(UNCHAINED_COOKIE_NAME, token, {
-      domain,
-      httpOnly: true,
-      expires,
-      path: '/',
-      sameSite: 'strict',
-      secure: NODE_ENV === 'production',
-    });
-
-    return authCookie;
-  }
-  throw new Error('Invalid token/domain pair');
-};
-
-export default async function singleSignOnMiddleware(req: IncomingMessage & { query?: any }, res, next) {
-  try {
-    if (req.query?.token && UNCHAINED_CLOUD_ENDPOINT) {
-      const contextResolver = getCurrentContextResolver();
-      const context = await contextResolver({ req, res });
-      const authCookie = await loginWithSingleSignOn(req.query.token, context);
-
-      if (authCookie) {
-        res.writeHead(303, {
-          'Set-Cookie': authCookie,
-          Location: '/',
-        });
-        res.end();
-        return;
-      }
-    }
-  } catch (e) {
-    logger.error(e.message);
-  }
-  next();
-}

package/src/hashPassword.ts

@@ -1,5 +0,0 @@
-import crypto from 'crypto';
-
-export const hashPassword = (password: string): string => {
-  return crypto.createHash('sha256').update(password).digest('hex');
-};

package/src/resolvers/mutations/accounts/buildSecretTOTPAuthURL.ts

@@ -1,8 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-
-export default async function buildTOTPSecret(root: Root, _: any, { modules, userId }: Context) {
-  log('mutation buildTOTPSecret', { userId });
-
-  return modules.accounts.buildTOTPSecret();
-}

package/src/resolvers/mutations/accounts/disableTOTP.ts

@@ -1,36 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-import {
-  TwoFactorCodeDidNotMatchError,
-  TwoFactorNotSetError,
-  UserNotFoundError,
-} from '../../../errors.js';
-
-export default async function disableTOTP(
-  root: Root,
-  params: { code: string; userId: string },
-  { modules, userId }: Context,
-) {
-  const normalizedUserId = params.userId || userId;
-
-  log(`mutation disableTOTP ${params.code} ${normalizedUserId}`, {
-    userId,
-  });
-
-  const user = await modules.users.findUserById(normalizedUserId);
-  if (!user) throw new UserNotFoundError({ userId: normalizedUserId });
-  try {
-    await modules.accounts.disableTOTP(normalizedUserId, params.code);
-  } catch (e) {
-    if (e?.message?.includes("2FA code didn't match"))
-      throw new TwoFactorCodeDidNotMatchError({
-        submittedCode: params.code,
-        userId: params?.userId || userId,
-      });
-    else if (e?.message?.includes('2FA not set'))
-      throw new TwoFactorNotSetError({ userId: params?.userId || userId });
-    else throw e;
-  }
-
-  return user;
-}

package/src/resolvers/mutations/accounts/enableTOTP.ts

@@ -1,23 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-import { TwoFactorAlreadySetError, TwoFactorCodeDidNotMatchError } from '../../../errors.js';
-
-export default async function enableTOTP(
-  root: Root,
-  params: { code: string; secretBase32: string },
-  { modules, userId }: Context,
-) {
-  log(`mutation enableTOTP ${params.code}`, {
-    userId,
-  });
-  try {
-    await modules.accounts.enableTOTP(userId, params.secretBase32, params.code);
-  } catch (e) {
-    if (e?.message?.includes("2FA code didn't match"))
-      throw new TwoFactorCodeDidNotMatchError({ submittedCode: params.code, userId });
-    else if (e?.message?.includes('2FA already set')) throw new TwoFactorAlreadySetError({ userId });
-    else throw e;
-  }
-
-  return modules.users.findUserById(userId);
-}

package/src/resolvers/mutations/accounts/impersonate.ts

@@ -1,21 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context } from '@unchainedshop/types/api.js';
-import { ImpersonatingAdminUserError, UserNotFoundError } from '../../../errors.js';
-
-const impersonate = async (root, { userId }, context: Context) => {
-  log(`mutation impersonate ${userId}`, { userId: context.userId });
-
-  const userToImpersonate = await context.modules.users.findUserById(userId);
-
-  if (!userToImpersonate) {
-    throw new UserNotFoundError({ userId });
-  }
-
-  if ((userToImpersonate.roles || []).includes('admin')) {
-    throw new ImpersonatingAdminUserError({ impersonatedUserId: userId, userId: context.userId });
-  }
-
-  return context.modules.accounts.createImpersonationToken(userToImpersonate._id, context);
-};
-
-export default impersonate;

package/src/resolvers/mutations/accounts/linkOAuthAccount.ts

@@ -1,51 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-import { AuthOperationFailedError } from '../../../errors.js';
-
-export default async function linkOAuthAccount(
-  root: Root,
-  {
-    provider,
-    redirectUrl,
-    authorizationCode,
-  }: { provider: string; redirectUrl: string; authorizationCode: string },
-  context: Context,
-) {
-  const { userId, user } = context;
-
-  log(`mutation linkOAuthAccount ${user.username}`, {
-    userId,
-  });
-  try {
-    const { modules } = context;
-
-    const authorizationToken = await modules.accounts.oAuth2.getAuthorizationToken(
-      provider,
-      authorizationCode,
-      redirectUrl,
-    );
-
-    if (!authorizationToken) throw new Error('Unable to authorize user');
-
-    const { id, ...data } = await modules.accounts.oAuth2.getAccountData(provider, authorizationToken);
-
-    await modules.users.updateUser(
-      { _id: userId },
-      {
-        $push: {
-          [`services.oauth.${provider}`]: {
-            id,
-            authorizationToken,
-            authorizationCode,
-            data,
-          },
-        },
-      },
-      { upsert: true },
-    );
-
-    return true;
-  } catch (e) {
-    throw new AuthOperationFailedError({});
-  }
-}

package/src/resolvers/mutations/accounts/loginWithOAuth.ts

@@ -1,38 +0,0 @@
-import { Context } from '@unchainedshop/types/api.js';
-import { log } from '@unchainedshop/logger';
-import {
-  AuthOperationFailedError,
-  EmailAlreadyExistsError,
-  UsernameAlreadyExistsError,
-  UsernameOrEmailRequiredError,
-} from '../../../errors.js';
-
-const loginWithOAuth = async (
-  _,
-  {
-    provider,
-    authorizationCode,
-    redirectUrl,
-  }: { provider: string; authorizationCode: string; redirectUrl: string },
-  context: Context,
-): Promise<any | null> => {
-  log(`mutation loginWithOAuth ${provider} ${authorizationCode}`);
-  try {
-    return context.modules.accounts.loginWithService(
-      {
-        service: 'oauth2',
-        authorizationCode,
-        provider,
-        redirectUrl,
-      },
-      context,
-    );
-  } catch (e) {
-    if (e.code === 'EmailAlreadyExists') throw new EmailAlreadyExistsError({});
-    else if (e.code === 'UsernameAlreadyExists') throw new UsernameAlreadyExistsError({});
-    else if (e.code === 'UsernameOrEmailRequired') throw new UsernameOrEmailRequiredError({});
-    else throw new AuthOperationFailedError({});
-  }
-};
-
-export default loginWithOAuth;

package/src/resolvers/mutations/accounts/logoutAllSessions.ts

@@ -1,27 +0,0 @@
-import { Context, Root } from '@unchainedshop/types/api.js';
-import { log, LogLevel } from '@unchainedshop/logger';
-
-export default async function logoutAllSessions(root: Root, _: any, context: Context) {
-  const { modules, userId, setLoginToken } = context;
-
-  log('mutation logoutAllSessions', { userId });
-
-  const loggedOut = await modules.accounts.logout(
-    {
-      loginToken: context.loginToken,
-      userId: context.userId,
-    },
-    context,
-  );
-
-  if (loggedOut.error) {
-    log('Error while logging out', {
-      logLevel: LogLevel.Error,
-      ...loggedOut.error,
-    });
-  } else {
-    setLoginToken(null);
-  }
-
-  return { success: loggedOut.success };
-}