@velocitycareerlabs/server-careerwallet 1.25.0-dev-build.12642c864

package/src/controllers/api/v0.6/careerwallet/consents/latest/controller.js

@@ -0,0 +1,76 @@
+const newError = require('http-errors');
+const { isEmpty } = require('lodash/fp');
+
+const { careerWalletConsentResponseSchema } = require('../schemas');
+
+const controller = async (fastify) => {
+  fastify.get(
+    '/',
+    {
+      onRequest: fastify.verifyCareerWalletAccessToken(),
+      schema: fastify.autoSchema({
+        query: {
+          type: 'object',
+          properties: {
+            accountId: { type: 'string' },
+          },
+        },
+        response: {
+          200: {
+            type: 'object',
+            properties: {
+              consent: careerWalletConsentResponseSchema,
+            },
+          },
+        },
+      }),
+    },
+    async (req) => {
+      const { repos, user, query } = req;
+
+      validateRequestParams(req);
+
+      const accountId = query.accountId || user.sub;
+
+      const consent = await repos.consentsCareerWallet.findOne({
+        filter: { accountId },
+        sort: { createdAt: -1 },
+      });
+
+      if (isEmpty(consent)) {
+        throw newError(400, 'Consents not found');
+      }
+
+      return {
+        consent: mapConsent(consent),
+      };
+    }
+  );
+};
+
+const validateRequestParams = (req) => {
+  const hasAdminScopes = req.isServerUser;
+  if (hasAdminScopes) {
+    if (isEmpty(req.query?.accountId)) {
+      throw new newError.BadRequest('AccountId query param is missed');
+    }
+    return;
+  }
+
+  if (
+    req.query?.accountId &&
+    req.user?.sub &&
+    req.query.accountId !== req.user.sub
+  ) {
+    throw new newError.BadRequest('Param accountId and sub mismatch');
+  }
+};
+
+const mapConsent = ({ createdAt, version, accountId, ...consent }) => ({
+  createdAt,
+  accountId,
+  version,
+  id: consent._id.toString(),
+});
+
+module.exports = controller;

package/src/controllers/api/v0.6/careerwallet/consents/repo.js

@@ -0,0 +1,24 @@
+const {
+  repoFactory,
+  autoboxIdsExtension,
+} = require('@spencejs/spence-mongo-repos');
+
+module.exports = (app, options, next = () => {}) => {
+  next();
+  return repoFactory(
+    {
+      name: 'consentsCareerWallet',
+      entityName: 'consentsCareerWallet',
+      defaultProjection: {
+        _id: 1,
+        accountId: 1,
+        version: 1,
+        consentId: 1,
+        createdAt: 1,
+      },
+      timestampKeys: { createdAt: 'createdAt' },
+      extensions: [autoboxIdsExtension],
+    },
+    app
+  );
+};

package/src/controllers/api/v0.6/careerwallet/consents/schemas/careerwallet-consent-response.schema.js

@@ -0,0 +1,23 @@
+const careerWalletConsentResponseSchema = {
+  $id: 'https://velocitycareerlabs.io/carrerwallet-consent-response.schema.json',
+  title: 'career-wallet-consent-response',
+  description: 'the body of response for career wallet consent',
+  type: 'object',
+  properties: {
+    accountId: {
+      type: 'string',
+    },
+    version: {
+      type: 'string',
+    },
+    createdAt: {
+      type: 'string',
+    },
+    id: {
+      type: 'string',
+    },
+  },
+  required: ['accountId', 'version', 'createdAt', 'id'],
+};
+
+module.exports = { careerWalletConsentResponseSchema };

package/src/controllers/api/v0.6/careerwallet/consents/schemas/index.js

@@ -0,0 +1,3 @@
+module.exports = {
+  ...require('./careerwallet-consent-response.schema'),
+};

package/src/controllers/api/v0.6/create_did_key/autohooks.js

@@ -0,0 +1,10 @@
+const { verifyAccessTokenPlugin } = require('../../../../plugins');
+const { accountScopes } = require('../../../../entities');
+
+const autohooks = async (fastify) => {
+  fastify.register(verifyAccessTokenPlugin).autoSchemaPreset({
+    security: [{ bearerAuth: [accountScopes.keyCreate] }],
+  });
+};
+
+module.exports = autohooks;

package/src/controllers/api/v0.6/create_did_key/controller.js

@@ -0,0 +1,84 @@
+const newError = require('http-errors');
+const { isEmpty, uniqBy, find } = require('lodash/fp');
+const { initKmsClient } = require('@velocitycareerlabs/aws-clients');
+const { getDidUriFromJwk } = require('@velocitycareerlabs/did-doc');
+const { jwkDidResponse, jwkDidRequest } = require('./schemas');
+const {
+  mergeScopes,
+  generateJwk,
+  accountScopes,
+} = require('../../../../entities');
+
+const newScopes = [
+  accountScopes.jwt,
+  accountScopes.keyCreate,
+  accountScopes.inbox,
+  accountScopes.account,
+];
+
+const сontroller = async (fastify) => {
+  const awsKmsClient = initKmsClient(fastify.config);
+
+  fastify.post(
+    '/',
+    {
+      onRequest: [
+        fastify.verifyCareerWalletAccessToken([accountScopes.keyCreate]),
+      ],
+      schema: fastify.autoSchema({
+        tags: ['careerwallet'],
+        body: jwkDidRequest,
+        response: {
+          200: jwkDidResponse,
+        },
+      }),
+    },
+    async (req) => {
+      const {
+        body,
+        user: { sub },
+        repos,
+      } = req;
+      const { crv } = body;
+      const account = await repos.accounts.findOne({ filter: { _id: sub } });
+
+      const didKeyMetadatum = account.didKeyMetadatum ?? [];
+      const didKeyMetadatumByCrv = find(
+        ({ publicJwk }) => publicJwk.crv === crv,
+        didKeyMetadatum
+      );
+      if (!isEmpty(didKeyMetadatumByCrv)) {
+        throw newError(400, 'DID key with crv already exists', {
+          errorCode: 'account_did_exist',
+        });
+      }
+
+      const { publicKey, keyId } = await generateJwk(crv, {
+        ...req,
+        awsKmsClient,
+      });
+      const didJwk = getDidUriFromJwk(publicKey);
+      await repos.accounts.update(account._id, {
+        didKeyMetadatum: uniqBy('keyId', [
+          ...didKeyMetadatum,
+          {
+            publicJwk: publicKey,
+            keyId,
+            kid: `${didJwk}#0`,
+            did: didJwk,
+          },
+        ]),
+        keyId,
+        scope: mergeScopes(account.scope, newScopes),
+      });
+      return {
+        publicJwk: publicKey,
+        keyId,
+        kid: `${didJwk}#0`,
+        did: didJwk,
+      };
+    }
+  );
+};
+
+module.exports = сontroller;

package/src/controllers/api/v0.6/create_did_key/schemas/index.js

@@ -0,0 +1,4 @@
+module.exports = {
+  ...require('./jwk-did-response.schema'),
+  ...require('./jwk-did-request.schema'),
+};

package/src/controllers/api/v0.6/create_did_key/schemas/jwk-did-request.schema.js

@@ -0,0 +1,20 @@
+const jwkDidRequest = {
+  title: 'jwk-did-request',
+  $id: 'https://velocitycareerlabs.io/jwk-did-request.schema.json',
+  description: 'jwk did request schema',
+  type: 'object',
+  properties: {
+    crv: {
+      type: 'string',
+      enum: ['secp256k1', 'P-256'],
+    },
+    didMethod: {
+      type: 'string',
+      enum: ['did:jwk'],
+      default: 'did:jwk',
+    },
+  },
+  required: ['crv'],
+};
+
+module.exports = { jwkDidRequest };

package/src/controllers/api/v0.6/create_did_key/schemas/jwk-did-response.schema.js

@@ -0,0 +1,41 @@
+const jwkDidResponse = {
+  title: 'jwk-did-response',
+  $id: 'https://velocitycareerlabs.io/jwk-did-response.schema.json',
+  description: 'jwk did response schema',
+  type: 'object',
+  properties: {
+    did: {
+      type: 'string',
+    },
+    kid: {
+      type: 'string',
+    },
+    keyId: {
+      type: 'string',
+    },
+    publicJwk: {
+      type: 'object',
+      required: ['kty'],
+      properties: {
+        kty: { type: 'string' },
+        use: { type: 'string' },
+        key_ops: { type: 'string' },
+        x5u: { type: 'string' },
+        x5c: { type: 'string' },
+        x5t: { type: 'string' },
+        'x5t#S256': { type: 'string' },
+        alg: { type: 'string' },
+        kid: { type: 'string' },
+        exp: { type: 'string' },
+        crv: { type: 'string' },
+        y: { type: 'string' },
+        x: { type: 'string' },
+        n: { type: 'string' },
+        e: { type: 'string' },
+      },
+    },
+  },
+  required: ['did', 'publicJwk'],
+};
+
+module.exports = { jwkDidResponse };

package/src/controllers/api/v0.6/create_jwk/autohooks.js

@@ -0,0 +1,10 @@
+const { verifyAccessTokenPlugin } = require('../../../../plugins');
+const { accountScopes } = require('../../../../entities');
+
+const autohooks = async (fastify) => {
+  fastify.register(verifyAccessTokenPlugin).autoSchemaPreset({
+    security: [{ bearerAuth: [accountScopes.keyCreate] }],
+  });
+};
+
+module.exports = autohooks;

package/src/controllers/api/v0.6/create_jwk/controller.js

@@ -0,0 +1,46 @@
+const { initKmsClient } = require('@velocitycareerlabs/aws-clients');
+const { jwkResponse } = require('./schemas');
+const { generateJwk, accountScopes } = require('../../../../entities');
+
+const controller = async (fastify) => {
+  const awsKmsClient = initKmsClient(fastify.config);
+
+  fastify.post(
+    '/',
+    {
+      onRequest: [
+        fastify.verifyCareerWalletAccessToken([accountScopes.keyCreate]),
+      ],
+      schema: fastify.autoSchema({
+        tags: ['careerwallet'],
+        body: {
+          type: 'object',
+          properties: {
+            crv: {
+              type: 'string',
+              enum: ['secp256k1', 'P-256'],
+            },
+          },
+          required: ['crv'],
+        },
+        response: {
+          200: jwkResponse,
+        },
+      }),
+    },
+    async (req) => {
+      const { body } = req;
+      const { crv } = body;
+      const { publicKey, keyId } = await generateJwk(crv, {
+        ...req,
+        awsKmsClient,
+      });
+      return {
+        jwk: publicKey,
+        keyId,
+      };
+    }
+  );
+};
+
+module.exports = controller;

package/src/controllers/api/v0.6/create_jwk/schemas/index.js

@@ -0,0 +1,3 @@
+module.exports = {
+  ...require('./jwk-response.schema'),
+};

package/src/controllers/api/v0.6/create_jwk/schemas/jwk-response.schema.js

@@ -0,0 +1,33 @@
+const jwkResponse = {
+  title: 'jwk-response',
+  $id: 'https://velocitycareerlabs.io/jwk-response.schema.json',
+  description: 'jwk response schema',
+  type: 'object',
+  properties: {
+    jwk: {
+      type: 'object',
+      required: ['kty'],
+      properties: {
+        kty: { type: 'string' },
+        use: { type: 'string' },
+        key_ops: { type: 'string' },
+        x5u: { type: 'string' },
+        x5c: { type: 'string' },
+        x5t: { type: 'string' },
+        'x5t#S256': { type: 'string' },
+        alg: { type: 'string' },
+        kid: { type: 'string' },
+        exp: { type: 'string' },
+        crv: { type: 'string' },
+        y: { type: 'string' },
+        x: { type: 'string' },
+        n: { type: 'string' },
+        e: { type: 'string' },
+      },
+    },
+    keyId: { type: 'string' },
+  },
+  required: ['jwk', 'keyId'],
+};
+
+module.exports = { jwkResponse };

package/src/controllers/api/v0.6/credential-categories/controller.js

@@ -0,0 +1,35 @@
+const fileName = 'credentialCategories.json';
+
+const сontroller = async (fastify) => {
+  fastify.get(
+    '/',
+    {
+      schema: fastify.autoSchema({
+        tags: ['careerwallet'],
+        response: {
+          200: {
+            type: 'array',
+            items: {
+              type: 'object',
+              properties: {
+                title: { type: 'string' },
+                icon: { type: 'string' },
+                color: { type: 'string' },
+                types: { type: 'array', items: { type: 'string' } },
+                iconSize: { type: 'integer' },
+                isIdentity: { type: 'boolean' },
+              },
+            },
+          },
+        },
+      }),
+    },
+    async (req, reply) => {
+      return reply
+        .type('application/json; charset=utf-8')
+        .sendFile(fileName, { cacheControl: false });
+    }
+  );
+};
+
+module.exports = сontroller;

package/src/controllers/api/v0.6/devices/autohooks.js

@@ -0,0 +1,11 @@
+const { verifyAccessTokenPlugin } = require('../../../../plugins');
+const { deviceSchema } = require('./schemas');
+
+const autohooks = async (fastify) => {
+  fastify
+    .addSchema(deviceSchema)
+    .autoSchemaPreset({ tags: ['careerwallet'] })
+    .register(verifyAccessTokenPlugin);
+};
+
+module.exports = autohooks;