@unchainedshop/api 2.14.2 → 3.0.0-alpha3

package/src/resolvers/mutations/accounts/linkOAuthAccount.ts

@@ -1,51 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-import { AuthOperationFailedError } from '../../../errors.js';
-
-export default async function linkOAuthAccount(
-  root: Root,
-  {
-    provider,
-    redirectUrl,
-    authorizationCode,
-  }: { provider: string; redirectUrl: string; authorizationCode: string },
-  context: Context,
-) {
-  const { userId, user } = context;
-
-  log(`mutation linkOAuthAccount ${user.username}`, {
-    userId,
-  });
-  try {
-    const { modules } = context;
-
-    const authorizationToken = await modules.accounts.oAuth2.getAuthorizationToken(
-      provider,
-      authorizationCode,
-      redirectUrl,
-    );
-
-    if (!authorizationToken) throw new Error('Unable to authorize user');
-
-    const { id, ...data } = await modules.accounts.oAuth2.getAccountData(provider, authorizationToken);
-
-    await modules.users.updateUser(
-      { _id: userId },
-      {
-        $push: {
-          [`services.oauth.${provider}`]: {
-            id,
-            authorizationToken,
-            authorizationCode,
-            data,
-          },
-        },
-      },
-      { upsert: true },
-    );
-
-    return true;
-  } catch {
-    throw new AuthOperationFailedError({});
-  }
-}

package/src/resolvers/mutations/accounts/loginWithOAuth.ts

@@ -1,38 +0,0 @@
-import { Context } from '@unchainedshop/types/api.js';
-import { log } from '@unchainedshop/logger';
-import {
-  AuthOperationFailedError,
-  EmailAlreadyExistsError,
-  UsernameAlreadyExistsError,
-  UsernameOrEmailRequiredError,
-} from '../../../errors.js';
-
-const loginWithOAuth = async (
-  _,
-  {
-    provider,
-    authorizationCode,
-    redirectUrl,
-  }: { provider: string; authorizationCode: string; redirectUrl: string },
-  context: Context,
-): Promise<any | null> => {
-  log(`mutation loginWithOAuth ${provider} ${authorizationCode}`);
-  try {
-    return context.modules.accounts.loginWithService(
-      {
-        service: 'oauth2',
-        authorizationCode,
-        provider,
-        redirectUrl,
-      },
-      context,
-    );
-  } catch (e) {
-    if (e.code === 'EmailAlreadyExists') throw new EmailAlreadyExistsError({});
-    else if (e.code === 'UsernameAlreadyExists') throw new UsernameAlreadyExistsError({});
-    else if (e.code === 'UsernameOrEmailRequired') throw new UsernameOrEmailRequiredError({});
-    else throw new AuthOperationFailedError({});
-  }
-};
-
-export default loginWithOAuth;

package/src/resolvers/mutations/accounts/logoutAllSessions.ts

@@ -1,27 +0,0 @@
-import { Context, Root } from '@unchainedshop/types/api.js';
-import { log, LogLevel } from '@unchainedshop/logger';
-
-export default async function logoutAllSessions(root: Root, _: any, context: Context) {
-  const { modules, userId, setLoginToken } = context;
-
-  log('mutation logoutAllSessions', { userId });
-
-  const loggedOut = await modules.accounts.logout(
-    {
-      loginToken: context.loginToken,
-      userId: context.userId,
-    },
-    context,
-  );
-
-  if (loggedOut.error) {
-    log('Error while logging out', {
-      logLevel: LogLevel.Error,
-      ...loggedOut.error,
-    });
-  } else {
-    setLoginToken(context.res, null);
-  }
-
-  return { success: loggedOut.success };
-}

package/src/resolvers/mutations/accounts/stopImpersonation.ts

@@ -1,31 +0,0 @@
-import { UserNotFoundError } from '@unchainedshop/api/errors.js';
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-
-export default async function stopImpersonation(root: Root, _, context: Context) {
-  const { userId, modules, loginToken } = context;
-
-  log(`mutation stopImpersonation for ${userId}`);
-
-  const impersonatedUser = await modules.users.findUserById(userId);
-
-  if (!impersonatedUser) throw new UserNotFoundError({ userId });
-  const impersonatedUserToken = impersonatedUser?.services?.resume?.loginTokens.find(
-    ({ hashedToken, impersonatorId }) =>
-      hashedToken === modules.accounts.createHashLoginToken(loginToken) && impersonatorId,
-  );
-
-  if (!impersonatedUserToken) throw new Error('Current session is not being impersonated');
-
-  await modules.accounts.logout({ loginToken }, context);
-
-  const accountsServer = modules.accounts.getAccountsServer();
-
-  const { token } = await accountsServer.loginWithUser(impersonatedUserToken.impersonatorId);
-
-  return {
-    id: impersonatedUserToken.impersonatorId,
-    token: token.token,
-    tokenExpires: token.when,
-  };
-}

package/src/resolvers/mutations/accounts/unlinkOAuthAccount.ts

@@ -1,24 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-
-export default async function unlinkOAuthAccount(
-  root: Root,
-  { provider, oAuthAccountId }: { provider: string; oAuthAccountId: string },
-  context: Context,
-) {
-  const { modules, userId } = context;
-
-  log(`mutation unlinkOAuthAccount ${provider} ${oAuthAccountId}`, {
-    userId,
-  });
-
-  return modules.users.updateUser(
-    { _id: userId },
-    {
-      $pull: {
-        [`services.oauth.${provider}`]: { id: oAuthAccountId },
-      },
-    },
-    { upsert: true },
-  );
-}

package/src/resolvers/mutations/assortments/addAssortmentMedia.ts

@@ -1,26 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-import { AssortmentNotFoundError, InvalidIdError } from '../../../errors.js';
-
-export default async function addAssortmentMedia(root: Root, { media, assortmentId }, context: Context) {
-  const { modules, services, userId } = context;
-  log(`mutation addAssortmentMedia ${assortmentId}`, { userId });
-
-  if (!assortmentId) throw new InvalidIdError({ assortmentId });
-
-  if (!(await modules.assortments.assortmentExists({ assortmentId })))
-    throw new AssortmentNotFoundError({ assortmentId });
-
-  const file = await services.files.uploadFileFromStream(
-    {
-      directoryName: 'assortment-media',
-      rawFile: media,
-      meta: {},
-    },
-    context,
-  );
-
-  const assortmentMedia = await modules.assortments.media.create({ assortmentId, mediaId: file._id });
-
-  return assortmentMedia;
-}

package/src/resolvers/mutations/products/addProductMedia.ts

@@ -1,24 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-import { ProductNotFoundError, InvalidIdError } from '../../../errors.js';
-
-export default async function addProductMedia(root: Root, { media, productId }, context: Context) {
-  const { modules, services, userId } = context;
-  log(`mutation addProductMedia ${productId}`, { userId });
-
-  if (!productId) throw new InvalidIdError({ productId });
-
-  const product = await modules.products.findProduct({ productId });
-  if (!product) throw new ProductNotFoundError({ productId });
-
-  const file = await services.files.uploadFileFromStream(
-    {
-      directoryName: 'product-media',
-      rawFile: media,
-      meta: { productId },
-    },
-    context,
-  );
-
-  return modules.products.media.create({ productId, mediaId: file._id });
-}

package/src/resolvers/mutations/users/updateUserAvatar.ts

@@ -1,39 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-import { UserNotFoundError } from '../../../errors.js';
-
-export default async function updateUserAvatar(
-  root: Root,
-  params: { avatar: any; userId: string },
-  context: Context,
-) {
-  const { modules, services, userId } = context;
-  const normalizedUserId = params.userId || userId;
-
-  log(`mutation updateUserAvatar ${normalizedUserId}`, { userId });
-
-  if (!(await modules.users.userExists({ userId: normalizedUserId })))
-    throw new UserNotFoundError({ userId: normalizedUserId });
-
-  const user = await modules.users.findUserById(normalizedUserId);
-
-  const file = await services.files.uploadFileFromStream(
-    {
-      directoryName: 'user-avatars',
-      rawFile: params.avatar,
-      meta: { userId: normalizedUserId },
-    },
-    context,
-  );
-
-  if (user?.avatarId) {
-    await services.files.removeFiles(
-      {
-        fileIds: [user.avatarId as string],
-      },
-      context,
-    );
-  }
-
-  return modules.users.updateAvatar(normalizedUserId, file._id);
-}

package/src/resolvers/queries/users/impersonator.ts

@@ -1,19 +0,0 @@
-import { log } from '@unchainedshop/logger';
-import { Context, Root } from '@unchainedshop/types/api.js';
-
-export default async function impersonator(
-  root: Root,
-  params: any,
-  { userId, user, remoteAddress, modules, loginToken }: Context,
-) {
-  log(`query impersonator ${remoteAddress}`, { userId });
-  if (!user?.services || !user?.services?.resume || !user?.services?.resume?.loginTokens) return null;
-
-  const { loginTokens } = user.services.resume;
-  const impersonatedSession = loginTokens.find(
-    ({ hashedToken, impersonatorId }) =>
-      hashedToken === modules.accounts.createHashLoginToken(loginToken) && impersonatorId,
-  );
-  if (!impersonatedSession) return null;
-  return modules.users.findUserById(impersonatedSession.impersonatorId);
-}

package/src/resolvers/type/oauth-account.ts

@@ -1,8 +0,0 @@
-import { Context } from '@unchainedshop/types/api.js';
-
-export const OAuthAccount = {
-  _id: (account) => account.id,
-  provider: async (account, _: never, { modules }: Context) => {
-    return modules.accounts.oAuth2.getProvider(account.provider);
-  },
-};

package/src/resolvers/type/oauth-provider.ts

@@ -1,5 +0,0 @@
-export const OAuthProvider = {
-  _id: (adapter) => adapter.provider,
-  clientId: (adapter) => adapter.config?.clientId,
-  scopes: (adapter) => adapter.config?.scopes || [],
-};

package/src/user-context.ts

@@ -1,94 +0,0 @@
-import { IncomingMessage, OutgoingMessage } from 'http';
-import { UnchainedUserContext } from '@unchainedshop/types/api.js';
-import { UnchainedCore } from '@unchainedshop/types/core.js';
-import cookie from 'cookie';
-
-function isString(input) {
-  return typeof input === 'string' && Object.prototype.toString.call(input) === '[object String]';
-}
-
-const {
-  UNCHAINED_COOKIE_NAME = 'unchained_token',
-  UNCHAINED_COOKIE_PATH = '/',
-  UNCHAINED_COOKIE_DOMAIN,
-  NODE_ENV,
-} = process.env;
-
-function setLoginToken(res: OutgoingMessage, token: string | null, expires?: Date) {
-  const cookieName = UNCHAINED_COOKIE_NAME;
-  const domain = UNCHAINED_COOKIE_DOMAIN;
-  const path = UNCHAINED_COOKIE_PATH;
-
-  if (!domain) return;
-
-  const authCookie = cookie.serialize(cookieName, token || null, {
-    domain,
-    httpOnly: true,
-    path,
-    expires: token && expires ? expires : undefined,
-    maxAge: token ? undefined : -1,
-    sameSite: 'lax',
-    secure: NODE_ENV === 'production',
-  });
-  res.setHeader('Set-Cookie', authCookie);
-}
-
-export const getUserContext = async (
-  req: IncomingMessage & { cookies?: any },
-  res: OutgoingMessage,
-  unchainedAPI: UnchainedCore,
-): Promise<UnchainedUserContext> => {
-  // there is a possible current user connected!
-  const cookieName = UNCHAINED_COOKIE_NAME;
-  let loginToken = req.cookies?.[cookieName];
-
-  if (req.headers.authorization) {
-    const [type, token] = req.headers.authorization.split(' ');
-    if (type === 'Bearer') {
-      loginToken = token;
-    }
-  }
-  if (loginToken) {
-    // throw an error if the token is not a string
-    if (!isString(loginToken)) throw new Error('Access Token is not a string');
-
-    // the hashed token is the key to find the possible current user in the db
-    const hashedToken = unchainedAPI.modules.accounts.createHashLoginToken(loginToken as string);
-
-    const currentUser = await unchainedAPI.modules.users.findUserByToken({
-      hashedToken,
-    });
-
-    // the current user exists
-    if (currentUser) {
-      // find the right login token corresponding, the current user may have
-      // several sessions logged on different browsers / computers
-      const tokenInformation = currentUser.services.resume.loginTokens.find(
-        (tokenInfo) => tokenInfo.hashedToken === hashedToken,
-      ); // eslint-disable-line
-
-      // true if the token is expired
-      const isExpired = new Date(tokenInformation.when) < new Date();
-
-      // if the token is still valid, give access to the current user
-      // information in the resolvers context
-      if (!isExpired) {
-        // return a new context object with the current user & her id
-        return {
-          user: currentUser,
-          userId: currentUser._id,
-          loginToken: loginToken as string,
-          setLoginToken,
-        };
-      }
-    }
-
-    // If there is no user with this token or the token is expires/invalid,
-    // we should remove that cookie from the client
-    setLoginToken(res, null);
-
-    return { loginToken: loginToken as string, setLoginToken };
-  }
-
-  return { setLoginToken };
-};