@velocitycareerlabs/server-careerwallet 1.25.0-dev-build.12642c864

package/package.json

@@ -0,0 +1,84 @@
+{
+  "name": "@velocitycareerlabs/server-careerwallet",
+  "version": "1.25.0-dev-build.12642c864",
+  "description": "Career Wallet application",
+  "repository": "https://github.com/velocitycareerlabs/packages",
+  "engines": {
+    "node": ">=20.5.1"
+  },
+  "main": "src/index.js",
+  "scripts": {
+    "test": "jest --config ./jest.config.js --runInBand --coverage",
+    "start": "node src/index.js",
+    "start:dev": "nodemon src/standalone.js",
+    "lint": "eslint . --format json >> eslint.json",
+    "lint:fix": "eslint --fix --ext .js .",
+    "migrate:status": "./node_modules/.bin/migrate-mongo status --file migrate-mongo.config.js",
+    "migrate:create": "./node_modules/.bin/migrate-mongo create --file migrate-mongo.config.js",
+    "migrate:up": "./node_modules/.bin/migrate-mongo up --file migrate-mongo.config.js",
+    "migrate:down": "./node_modules/.bin/migrate-mongo down --file migrate-mongo.config.js"
+  },
+  "author": "Nassan Paul",
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@fastify/autoload": "5.10.0",
+    "@fastify/bearer-auth": "~9.4.0",
+    "@fastify/static": "7.0.4",
+    "@getyoti/sdk-sandbox": "1.7.0",
+    "@spencejs/spence-mongo-repos": "^0.10.2",
+    "@velocitycareerlabs/auth": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/aws-clients": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/common-fetchers": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/common-functions": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/common-schemas": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/config": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/country-data": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/crypto": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/did-doc": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/fastify-plugins": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/jwt": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/migrations": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/organizations-registry": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/request": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/server-provider": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/spencer-mongo-extensions": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/verifiable-credentials": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/yoti-integration-plugin": "1.25.0-dev-build.12642c864",
+    "aws-sdk": "2.1692.0",
+    "canonicalize": "^2.0.0",
+    "date-fns": "^3.0.0",
+    "env-var": "^7.0.0",
+    "fastify-plugin": "~4.5.0",
+    "firebase-admin": "^12.0.0",
+    "http-errors": "2.0.0",
+    "iso8601-duration": "2.1.2",
+    "lodash": "^4.17.21",
+    "migrate-mongo": "~11.0.0",
+    "mongodb": "~6.14.0",
+    "nanoid": "~3.3.1",
+    "uuid": "11.0.5"
+  },
+  "devDependencies": {
+    "@spencejs/spence-factories": "0.10.2",
+    "@velocitycareerlabs/test-regexes": "1.25.0-dev-build.12642c864",
+    "@velocitycareerlabs/tests-helpers": "1.25.0-dev-build.12642c864",
+    "dotenv": "16.4.7",
+    "eslint": "8.57.1",
+    "eslint-config-airbnb-base": "14.2.1",
+    "eslint-config-prettier": "8.10.0",
+    "eslint-plugin-autofix": "1.1.0",
+    "eslint-plugin-better-mutation": "1.6.0",
+    "eslint-plugin-import": "2.31.0",
+    "eslint-plugin-prefer-arrow-functions": "3.6.2",
+    "eslint-plugin-prettier": "4.2.1",
+    "eslint-watch": "7.0.0",
+    "jest": "29.7.0",
+    "nock": "13.5.6",
+    "nodemon": "3.1.9",
+    "prettier": "2.8.8"
+  },
+  "gitHead": "ca5028aa212670198151cabf1147bacf59f10851"
+}

package/src/assets/credentialCategories.json

@@ -0,0 +1,119 @@
+[
+  {
+    "title": "Identity",
+    "icon": "identity",
+    "color": "#007AFF",
+    "types": [
+      "IdDocument",
+      "Phone",
+      "Email",
+      "IdDocumentV1.0",
+      "DriversLicenseV1.0",
+      "NationalIdCardV1.0",
+      "PassportV1.0",
+      "ResidentPermitV1.0",
+      "EmailV1.0",
+      "PhoneV1.0",
+      "ProofOfAgeV1.0"
+    ],
+    "isIdentity": true,
+    "iconSize": 20
+  },
+  {
+    "title": "Education",
+    "icon": "education",
+    "color": "#5856D6",
+    "types": [
+      "EducationDegree",
+      "EducationDegreeRegistrationV1.0",
+      "EducationDegreeStudyV1.0",
+      "EducationDegreeGraduationV1.0",
+      "EducationDegreeRegistrationV1.1",
+      "EducationDegreeStudyV1.1",
+      "EducationDegreeGraduationV1.1"
+    ],
+    "iconSize": 16
+  },
+  {
+    "title": "Employment History",
+    "icon": "employment",
+    "color": "#FF2D55",
+    "types": [
+      "PastEmploymentPosition",
+      "CurrentEmploymentPosition",
+      "EmploymentCurrentV1.0",
+      "EmploymentPastV1.0",
+      "EmploymentCurrentV1.1",
+      "EmploymentPastV1.1"
+    ],
+    "iconSize": 16
+  },
+  {
+    "title": "Certifications & Licenses",
+    "icon": "certification",
+    "color": "#5AC8FA",
+    "types": [
+      "Certification",
+      "CertificationV1.0",
+      "LicenseV1.0",
+      "CertificationV1.1",
+      "LicenseV1.1",
+      "NCSBNMultiLicenseV1.0"
+    ],
+    "iconSize": 18
+  },
+  {
+    "title": "Training & Development",
+    "icon": "training",
+    "color": "#FF9500",
+    "types": [
+      "Course",
+      "CourseRegistrationV1.0",
+      "CourseCompletionV1.0",
+      "CourseAttendanceV1.0",
+      "CourseRegistrationV1.1",
+      "CourseCompletionV1.1",
+      "CourseAttendanceV1.1"
+    ],
+    "iconSize": 18
+  },
+  {
+    "title": "Assessments",
+    "icon": "assessment",
+    "color": "#34AADC",
+    "types": [
+      "AssessmentV1.0",
+      "AssessmentV1.1"
+    ],
+    "iconSize": 18
+  },
+  {
+    "title": "Badges & Achievements",
+    "icon": "badge",
+    "color": "#FFCC00",
+    "types": [
+      "Badge",
+      "BadgeV1.1",
+      "OpenBadgeV1.0",
+      "OpenBadgeV2.0",
+      "OpenBadgeCredential"
+    ],
+    "iconSize": 18
+  },
+  {
+    "title": "Gig Works",
+    "icon": "gig",
+    "color": "#AF52DE",
+    "types": [],
+    "iconSize": 18
+  },
+  {
+    "title": "Health",
+    "icon": "pharmacy",
+    "color": "#3DE192",
+    "types": [
+      "VaccinationCertificate-Apr2021"
+    ],
+    "iconSize": 18
+  }
+]

package/src/config/config.js

@@ -0,0 +1,156 @@
+const env = require('env-var');
+const { genericConfig } = require('@velocitycareerlabs/config');
+const { yotiConfig } = require('@velocitycareerlabs/yoti-integration-plugin');
+const packageJson = require('../../package.json');
+const { accountScopes } = require('../entities');
+
+const { isTest } = genericConfig;
+
+const swaggerInfo = {
+  info: {
+    title: 'VNF Services Openapi',
+    description:
+      'Combined set of APIs for the career wallet, phone & email verifier and the push notification gateway',
+    version: '0.7.3',
+  },
+  tags: [
+    {
+      name: 'careerwallet',
+      description: 'VCL Career Wallet',
+    },
+    {
+      name: 'careerwallet_jwt',
+      description: 'VCL Secure JWT Signing & Verifying',
+    },
+    {
+      name: 'credential_issuer_id',
+      description: 'VCL Id Issuer',
+    },
+    {
+      name: 'credential_issuer_contact',
+      description: 'VCL Id Email & Phone',
+    },
+  ],
+  components: {
+    securitySchemes: {
+      bearerAuth: {
+        type: 'http',
+        description: 'Use an auth token',
+        scheme: 'bearer',
+        bearerFormat: 'JWT',
+      },
+    },
+  },
+};
+
+const sharedConfig = {
+  ...genericConfig,
+  swaggerInfo,
+  sentryDsn: env.get('SENTRY_DSN').required(!isTest).asString(),
+  enableProfiling: env.get('ENABLE_PROFILING').default('false').asBool(),
+  enableSentryDebug: env.get('ENABLE_SENTRY_DEBUG').default('false').asBool(),
+  customFastifyOptions: {
+    http2: false,
+  },
+  version: packageJson.version,
+  allowedCorsOrigins: env.get('ALLOWED_CORS_ORIGINS').default('').asArray(),
+};
+
+const holderAppServerConfig = {
+  libUrl: env.get('LIB_URL').required(!isTest).asString(),
+  registrarUrl: env.get('REGISTRAR_URL').required(!isTest).asString(),
+  mongoSecret: env.get('MONGO_SECRET').required(!isTest).asString(),
+  holderAppServerOAuthScopes: `${accountScopes.jwt} ${accountScopes.keyCreate} ${accountScopes.inbox} ${accountScopes.account}`,
+  holderAppServerOAuthAudience: 'walletapi.velocitycareerlabs.io',
+  holderAppServerOAuthHolderAppClientId: env
+    .get('HOLDER_APP_CLIENT_ID')
+    .required()
+    .asString(),
+  oauthVclCredentialVerificationPublicKey: env
+    .get('OAUTH_VCL_CREDENTIAL_VERIFICATION_PUBLIC_KEY')
+    .required()
+    .asJson(),
+  holderAppServerHolderAppProviderDid: env
+    .get('HOLDER_APP_PROVIDER_DID')
+    .required()
+    .asString(),
+  holderAppServerAccessTokenSigningKey: env
+    .get('ACCESS_TOKEN_SIGNING_KEY')
+    .required()
+    .asString(),
+  holderAppServerAccessTokenPublicKey: env
+    .get('ACCESS_TOKEN_PUBLIC_KEY')
+    .required()
+    .asJson(),
+  holderAppServerAccessTokenExpiresIn: env
+    .get('ACCESS_TOKEN_EXPIRES_IN')
+    .default('1h')
+    .asString(),
+  adminUserName: env.get('ADMIN_USER_NAME').required(!isTest).asString(),
+  managedAccountsKeyId: env
+    .get('MANAGED_ACCOUNTS_KEY_ID')
+    .required(!isTest)
+    .asString(),
+  oauthVerificationDisabledEndpoints: env
+    .get('OAUTH_VERIFICATION_DISABLED_ENDPOINTS')
+    .default('')
+    .asArray(),
+  auth0Domain: env.get('OAUTH0_DOMAIN').required(!isTest).asString(),
+  auth0CareerWalletAudience: env
+    .get('AUTH0_CAREER_WALLET_AUDIENCE')
+    .default('https://webwallet.velocitycareerlabs.io')
+    .asString(),
+  oauth0WebappClientId: env
+    .get('OAUTH0_WEBAPP_CLIENT_ID')
+    .required()
+    .asString(),
+  careerwalletSupportEmail: env
+    .get('CAREERWALLET_SUPPORT_EMAIL')
+    .required()
+    .asString(),
+};
+
+const verifierConfig = {
+  rootDid: env.get('ROOT_DID').required(!isTest).asString(),
+  agentUrl: env.get('AGENT_URL').required().asString(),
+  attemptsThreshold: env.get('ATTEMPTS_THRESHOLD').default(3).asIntPositive(),
+  smsAppVerificationHash: env
+    .get('SMS_APP_VERIFICATION_HASH')
+    .required(!isTest)
+    .asString(),
+  awsRegion: env.get('AWS_REGION').default('us-east-1').required().asString(),
+  awsEndpoint: env.get('AWS_ENDPOINT').default('').asString(),
+  verificationSenderEmail: env
+    .get('VERIFICATION_SENDER_EMAIL')
+    .required(!isTest)
+    .asString(),
+  ...yotiConfig,
+  twilioAccountSid: env.get('TWILIO_ACCOUNT_SID').required(!isTest).asString(),
+  twilioHostNumber: env.get('TWILIO_HOST_NUMBER').required(!isTest).asString(),
+  twilioAuthToken: env.get('TWILIO_AUTH_TOKEN').required(!isTest).asString(),
+  onlyTwilioSms: env.get('ONLY_TWILIO_SMS').default('false').asBool(),
+};
+
+const firebaseAccount = {
+  firebaseType: env.get('FIREBASE_TYPE').asString(),
+  firebaseProjectId: env.get('FIREBASE_PROJECT_ID').asString(),
+  firebasePrivateKeyId: env.get('FIREBASE_PRIVATE_KEY_ID').asString(),
+  firebasePrivateKey: env.get('FIREBASE_PRIVATE_KEY').asString(),
+  firebaseClientEmail: env.get('FIREBASE_CLIENT_EMAIL').asString(),
+  firebaseClientId: env.get('FIREBASE_CLIENT_ID').asString(),
+  firebaseAuthUri: env.get('FIREBASE_AUTH_URI').asString(),
+  firebaseTokenUri: env.get('FIREBASE_TOKEN_URI').asString(),
+  firebaseAuthProviderX509CertUrl: env
+    .get('FIREBASE_AUTH_PROVIDER_X509_CERT_URL')
+    .asString(),
+  firebaseClientX509CertUrl: env
+    .get('FIREBASE_CLIENT_X509_CERT_URL')
+    .asString(),
+};
+
+module.exports = {
+  ...sharedConfig,
+  ...holderAppServerConfig,
+  ...verifierConfig,
+  ...firebaseAccount,
+};

package/src/controllers/api/v0.6/accounts/autohooks.js

@@ -0,0 +1,36 @@
+const { oauthPlugin } = require('@velocitycareerlabs/auth');
+const { verifyAccessTokenPlugin } = require('../../../../plugins');
+const {
+  careerWalletAccountsRequestSchema,
+  careerWalletAccountsResponseSchema,
+  careerWalletGetAccountResponseSchema,
+  careerWalletAccountsDidKeyMetadatumResponseSchema,
+} = require('./schemas');
+
+const autohooks = async (fastify) => {
+  fastify
+    .register(oauthPlugin, {
+      domain: fastify.config.auth0Domain,
+      audience: [fastify.config.oauth0WebappClientId],
+      extractToken: (req) => {
+        if (req.headers.authorization) {
+          return req.headers.authorization;
+        }
+        const {
+          body: {
+            account: { id_token: idToken },
+          },
+        } = req;
+
+        return idToken;
+      },
+    })
+    .register(verifyAccessTokenPlugin)
+    .addSchema(careerWalletAccountsRequestSchema)
+    .addSchema(careerWalletAccountsResponseSchema)
+    .addSchema(careerWalletGetAccountResponseSchema)
+    .addSchema(careerWalletAccountsDidKeyMetadatumResponseSchema)
+    .autoSchemaPreset({ tags: ['careerwallet'] });
+};
+
+module.exports = autohooks;