@verii/server-credentialagent 1.0.0-pre.1752076816

package/src/entities/feeds/factories/feed-factory.js

@@ -0,0 +1,47 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { register } = require('@spencejs/spence-factories');
+const { ObjectId } = require('mongodb');
+const { feedRepoPlugin } = require('../repos');
+const { initTenantFactory } = require('../../tenants');
+const { initDisclosureFactory } = require('../../disclosures');
+
+const initFeedFactory = (app) => {
+  const initRepo = feedRepoPlugin(app);
+  return register('feed', async (overrides, { getOrBuild }) => {
+    const tenant = await getOrBuild('tenant', initTenantFactory(app));
+    const disclosure = await getOrBuild(
+      'disclosure',
+      initDisclosureFactory(app)
+    );
+
+    return {
+      item: {
+        vendorUserId: 'fooVendorUserId',
+        preauthCode: 'fooPreauthCode',
+        disclosureId: new ObjectId(disclosure._id),
+        ...overrides(),
+      },
+      repo: initRepo({
+        tenant: { ...tenant, _id: new ObjectId(tenant._id) },
+        disclosure: { ...disclosure, _id: new ObjectId(disclosure._id) },
+      }),
+    };
+  });
+};
+
+module.exports = { initFeedFactory };

package/src/entities/feeds/factories/index.js

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./feed-factory'),
+};

package/src/entities/feeds/index.js

@@ -0,0 +1,20 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./repos'),
+  ...require('./factories'),
+};

package/src/entities/feeds/repos/index.js

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  feedRepoPlugin: require('./repo'),
+};

package/src/entities/feeds/repos/repo.js

@@ -0,0 +1,95 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const {
+  repoFactory,
+  autoboxIdsExtension,
+} = require('@spencejs/spence-mongo-repos');
+const {
+  multitenantExtension,
+  refreshTokenExtension,
+} = require('@verii/spencer-mongo-extensions');
+
+module.exports = (app, options, next = () => {}) => {
+  next();
+  return repoFactory(
+    {
+      name: 'feeds',
+      entityName: 'feed',
+      defaultProjection,
+      extensions: [
+        autoboxIdsExtension,
+        multitenantExtension(),
+        refreshTokenExtension,
+        feedExtensions,
+      ],
+    },
+    app
+  );
+};
+
+const defaultProjection = {
+  _id: 1,
+  feedTimestamp: 1,
+  clientId: 1,
+  vendorUserId: 1,
+  preauthCode: 1,
+  refreshToken: 1,
+  createdAt: 1,
+  updatedAt: 1,
+};
+
+const feedExtensions = (parent, context) => {
+  return {
+    prepFilter: (filter) => {
+      const preppedFilter = {
+        ...filter,
+      };
+      if (context.disclosure) {
+        preppedFilter.disclosureId = context.disclosure._id;
+      }
+
+      return parent.prepFilter(preppedFilter);
+    },
+    prepModification: (val, ...args) => {
+      const preppedModification = {
+        ...val,
+      };
+      if (context.disclosure) {
+        preppedModification.disclosureId = context.disclosure._id;
+      }
+      return parent.prepModification(preppedModification, ...args);
+    },
+    updateLatestFeedTimestamp: async (filter) => {
+      const preppedFilter = parent.prepFilter(filter);
+      const t = new Date();
+      const updateDoc = {
+        $set: { feedTimestamp: t, updatedAt: t },
+      };
+      const updateResult = await parent
+        .collection()
+        .findOneAndUpdate(preppedFilter, updateDoc, {
+          projection: defaultProjection,
+          returnDocument: 'after',
+          includeResultMetadata: true,
+          sort: {
+            updatedAt: -1,
+          },
+        });
+      return updateResult.value;
+    },
+  };
+};

package/src/entities/groups/domains/format-group.js

@@ -0,0 +1,11 @@
+const { omit } = require('lodash/fp');
+
+const formatGroup = (group) => ({
+  ...omit(['_id'], group),
+  did: group._id,
+  id: group._id,
+});
+
+module.exports = {
+  formatGroup,
+};

package/src/entities/groups/domains/index.js

@@ -0,0 +1,3 @@
+module.exports = {
+  ...require('./format-group'),
+};

package/src/entities/groups/factories/group-factory.js

@@ -0,0 +1,40 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { register } = require('@spencejs/spence-factories');
+const { nanoid } = require('nanoid/non-secure');
+const { groupRepoPlugin } = require('../repos');
+
+const initGroupsFactory = (app) => {
+  const initRepo = groupRepoPlugin(app);
+
+  return register('group', async (overrides) => {
+    const identifier = nanoid();
+    const at = new Date();
+    return {
+      item: {
+        _id: `did:velocity:${identifier}`,
+        slug: `slug-${identifier}`,
+        dids: [],
+        createdAt: at,
+        updatedAt: at,
+        ...overrides(),
+      },
+      repo: initRepo(),
+    };
+  });
+};
+module.exports = { initGroupsFactory };

package/src/entities/groups/factories/index.js

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./group-factory'),
+};

package/src/entities/groups/index.js

@@ -0,0 +1,22 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./factories'),
+  ...require('./repos'),
+  ...require('./domains'),
+  ...require('./orchestrators'),
+};

package/src/entities/groups/orchestrators/find-group-or-error.js

@@ -0,0 +1,16 @@
+const newError = require('http-errors');
+
+const findGroupOrError = async (id, req) => {
+  const { repos } = req;
+  try {
+    return await repos.groups.findById(id);
+  } catch (error) {
+    throw newError(404, 'Group does not exist', {
+      errorCode: 'group_does_not_exist',
+    });
+  }
+};
+
+module.exports = {
+  findGroupOrError,
+};

package/src/entities/groups/orchestrators/index.js

@@ -0,0 +1,6 @@
+module.exports = {
+  ...require('./validate-group'),
+  ...require('./validate-group-by-user'),
+  ...require('./find-group-or-error'),
+  ...require('./validate-did'),
+};

package/src/entities/groups/orchestrators/validate-did.js

@@ -0,0 +1,24 @@
+const { isEmpty } = require('lodash/fp');
+const newError = require('http-errors');
+
+const validateDid = async (id, did, context) => {
+  const { repos } = context;
+  const group = await repos.groups.findOne({
+    filter: {
+      _id: { $ne: id },
+      dids: did,
+    },
+  });
+
+  if (isEmpty(group)) {
+    return;
+  }
+
+  throw newError(400, 'Did already linked to a group', {
+    errorCode: 'did_already_in_group',
+  });
+};
+
+module.exports = {
+  validateDid,
+};

package/src/entities/groups/orchestrators/validate-group-by-user.js

@@ -0,0 +1,16 @@
+const { isEmpty } = require('lodash/fp');
+const { findGroupOrError } = require('./find-group-or-error');
+
+const validateGroupByUser = async (context) => {
+  const { user } = context;
+
+  if (isEmpty(user.groupId)) {
+    return;
+  }
+
+  await findGroupOrError(user.groupId, context);
+};
+
+module.exports = {
+  validateGroupByUser,
+};

package/src/entities/groups/orchestrators/validate-group.js

@@ -0,0 +1,39 @@
+const { isEmpty, partition } = require('lodash/fp');
+const newError = require('http-errors');
+
+const validateGroup = async ({ slug, did }, context) => {
+  const { repos } = context;
+  const groups = await repos.groups.find({
+    filter: {
+      $or: [
+        {
+          slug,
+        },
+        {
+          _id: did,
+        },
+      ],
+    },
+  });
+
+  const [groupWithSlug, groupWithDid] = partition(
+    (g) => g.slug === slug,
+    groups
+  );
+
+  if (!isEmpty(groupWithSlug)) {
+    throw newError(400, 'Group with the given SLUG already exists', {
+      errorCode: 'slug_already_exist',
+    });
+  }
+
+  if (!isEmpty(groupWithDid)) {
+    throw newError(400, 'Group with the given DID already exists', {
+      errorCode: 'did_already_exist',
+    });
+  }
+};
+
+module.exports = {
+  validateGroup,
+};

package/src/entities/groups/repos/delete-tenant-extension.js

@@ -0,0 +1,13 @@
+const deleteTenantExtension = (parent) => ({
+  deleteTenant: async (did) => {
+    return parent
+      .collection()
+      .findOneAndUpdate(
+        { dids: did },
+        { $pull: { dids: did }, $set: { updatedAt: new Date() } }
+      );
+  },
+  extensions: parent.extensions.concat(['deleteTenant']),
+});
+
+module.exports = { deleteTenantExtension };

package/src/entities/groups/repos/index.js

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  groupRepoPlugin: require('./repo'),
+};

package/src/entities/groups/repos/repo.js

@@ -0,0 +1,38 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { repoFactory } = require('@spencejs/spence-mongo-repos');
+const { updateOrErrorExtension } = require('./update-or-error-extension');
+const { deleteTenantExtension } = require('./delete-tenant-extension');
+
+module.exports = (app, options, next = () => {}) => {
+  next();
+  return repoFactory(
+    {
+      name: 'groups',
+      entityName: 'group',
+      defaultProjection: {
+        _id: 1,
+        slug: 1,
+        dids: 1,
+        createdAt: 1,
+        updatedAt: 1,
+      },
+      extensions: [updateOrErrorExtension, deleteTenantExtension],
+    },
+    app
+  );
+};

package/src/entities/groups/repos/update-or-error-extension.js

@@ -0,0 +1,46 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { isEmpty } = require('lodash/fp');
+const newError = require('http-errors');
+
+const updateOrErrorExtension = (parent) => ({
+  updateOrError: async (groupId, updateDocument) => {
+    const result = await parent.collection().findOneAndUpdate(
+      { _id: groupId },
+      {
+        ...updateDocument,
+        $set: {
+          ...updateDocument.$set,
+          updatedAt: new Date(),
+        },
+      },
+      {
+        returnDocument: 'after',
+        includeResultMetadata: true,
+      }
+    );
+    if (isEmpty(result.value)) {
+      throw newError(404, 'Group does not exist', {
+        errorCode: 'group_does_not_exist',
+      });
+    }
+    return result.value;
+  },
+  extensions: parent.extensions.concat(['updateOrError']),
+});
+
+module.exports = { updateOrErrorExtension };

package/src/entities/index.js

@@ -0,0 +1,37 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./common'),
+  ...require('./credentials'),
+  ...require('./deep-links'),
+  ...require('./disclosures'),
+  ...require('./exchanges'),
+  ...require('./feeds'),
+  ...require('./keys'),
+  ...require('./notifications'),
+  ...require('./metadata-list-allocations'),
+  ...require('./offers'),
+  ...require('./presentations'),
+  ...require('./groups'),
+  ...require('./revocation-list-allocations'),
+  ...require('./schemas'),
+  ...require('./tenants'),
+  ...require('./tokens'),
+  ...require('./users'),
+  ...require('./redirect'),
+  ...require('./push-delegate'),
+};

package/src/entities/keys/domains/constants.js

@@ -0,0 +1,37 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const KeyAlgorithms = {
+  SECP256K1: 'SECP256K1',
+};
+
+const KeyEncodings = {
+  HEX: 'hex',
+  JWK: 'jwk',
+};
+
+const KeyErrorMessages = {
+  UNRECOGNIZED_PURPOSE_DETECTED: 'Unrecognized purpose detected',
+  DUPLICATE_PURPOSE_DETECTED: 'Duplicate key purposes detected',
+  UNRECOGNIZED_ALGORITHM: 'Unrecognized algorithm',
+  UNRECOGNIZED_ENCODING: 'Unrecognized encoding',
+};
+
+module.exports = {
+  KeyAlgorithms,
+  KeyEncodings,
+  KeyErrorMessages,
+};

package/src/entities/keys/domains/index.js

@@ -0,0 +1,21 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./constants'),
+  ...require('./validate-key'),
+  ...require('./is-matching-private-key-kid'),
+};

package/src/entities/keys/domains/is-matching-private-key-kid.js

@@ -0,0 +1,41 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const {
+  generateDocJwt,
+  jwtVerify,
+  jwkFromSecp256k1Key,
+} = require('@verii/jwt');
+const { extractVerificationKey } = require('@verii/did-doc');
+
+const isMatchingPrivateKeyKid = async (doc, key, kid) => {
+  const signedValue = await generateDocJwt({ field: 'value' }, key, {
+    kid,
+    issuer: doc.id,
+  });
+
+  const verificationKey = extractVerificationKey(doc, kid);
+
+  try {
+    await jwtVerify(signedValue, jwkFromSecp256k1Key(verificationKey, false));
+    return true;
+  } catch (ex) {
+    return false;
+  }
+};
+module.exports = {
+  isMatchingPrivateKeyKid,
+};