@verii/server-credentialagent 1.0.0-pre.1752076816

package/src/entities/users/factories/user-factory.js

@@ -0,0 +1,36 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { ObjectId } = require('mongodb');
+const { register } = require('@spencejs/spence-factories');
+const { userRepoPlugin } = require('../repos');
+const { initTenantFactory } = require('../../tenants');
+
+const initUserFactory = (app) => {
+  const initRepo = userRepoPlugin(app);
+
+  return register('vendorUserIdMapping', async (overrides, { getOrBuild }) => {
+    const tenant = await getOrBuild('tenant', initTenantFactory(app));
+    return {
+      item: {
+        vendorUserId: 'abcdefg123454',
+        ...overrides(),
+      },
+      repo: initRepo({ tenant: { ...tenant, _id: new ObjectId(tenant._id) } }),
+    };
+  });
+};
+module.exports = { initUserFactory };

package/src/entities/users/index.js

@@ -0,0 +1,20 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./factories'),
+  ...require('./repos'),
+};

package/src/entities/users/repos/add-anonymous-user-repo-extension.js

@@ -0,0 +1,23 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const { nanoid } = require('nanoid');
+
+const addAnonymousUserRepoExtension = (parent) => ({
+  addAnonymousUser: () => parent.insert({ _id: `anonymous|${nanoid()}` }),
+  extensions: parent.extensions.concat(['addAnonymousUserRepoExtension']),
+});
+
+module.exports = { addAnonymousUserRepoExtension };

package/src/entities/users/repos/find-or-insert-vendor-user-repo-extension.js

@@ -0,0 +1,30 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const findOrInsertVendorUserRepoExtension = (parent, { tenant }) => ({
+  findOrInsertVendorUser: (vendorUser) =>
+    parent.findOrInsert(
+      {
+        vendorUserId: vendorUser.vendorUserId,
+        tenantId: tenant._id,
+      },
+      ['vendorUserId', 'tenantId'],
+      { _id: 1 }
+    ),
+  extensions: parent.extensions.concat(['findOrInsertVendorUserRepoExtension']),
+});
+
+module.exports = { findOrInsertVendorUserRepoExtension };

package/src/entities/users/repos/index.js

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  userRepoPlugin: require('./repo'),
+};

package/src/entities/users/repos/repo.js

@@ -0,0 +1,50 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const {
+  repoFactory,
+  autoboxIdsExtension,
+} = require('@spencejs/spence-mongo-repos');
+const { multitenantExtension } = require('@verii/spencer-mongo-extensions');
+const {
+  findOrInsertVendorUserRepoExtension,
+} = require('./find-or-insert-vendor-user-repo-extension');
+const {
+  addAnonymousUserRepoExtension,
+} = require('./add-anonymous-user-repo-extension');
+
+module.exports = (app, options, next = () => {}) => {
+  next();
+  return repoFactory(
+    {
+      name: 'vendorUserIdMappings',
+      entityName: 'vendorUserIdMapping',
+      defaultProjection: {
+        _id: 1,
+        vendorUserId: 1,
+        createdAt: 1,
+        updatedAt: 1,
+      },
+      extensions: [
+        autoboxIdsExtension,
+        findOrInsertVendorUserRepoExtension,
+        multitenantExtension(),
+        addAnonymousUserRepoExtension,
+      ],
+    },
+    app
+  );
+};

package/src/fetchers/index.js

@@ -0,0 +1,20 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./operator'),
+  ...require('./push-gateway'),
+};

package/src/fetchers/operator/identify-fetcher.js

@@ -0,0 +1,36 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { setAuthHeader } = require('./webhook-auth-header');
+
+const identifyUserOnVendor = (payload, context) => {
+  const { tenant, vendorFetch } = context;
+  const { webhookUrl } = tenant;
+
+  return vendorFetch
+    .post('issuing/identify', {
+      json: payload,
+      ...(webhookUrl ? { prefixUrl: webhookUrl } : {}),
+      headers: {
+        ...setAuthHeader(context),
+      },
+    })
+    .json();
+};
+
+module.exports = {
+  identifyUserOnVendor,
+};

package/src/fetchers/operator/index.js

@@ -0,0 +1,21 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./identify-fetcher'),
+  ...require('./inspection-fetcher'),
+  ...require('./issuing-fetcher'),
+};

package/src/fetchers/operator/inspection-fetcher.js

@@ -0,0 +1,35 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { setAuthHeader } = require('./webhook-auth-header');
+
+const sendCredentials = async (vendorEndpoint, payload, context) => {
+  const { tenant, vendorFetch } = context;
+  const { webhookUrl } = tenant;
+
+  const { numProcessed } = await vendorFetch
+    .post(`inspection/${vendorEndpoint}`, {
+      json: payload,
+      ...(webhookUrl ? { prefixUrl: webhookUrl } : {}),
+      headers: {
+        ...setAuthHeader(context),
+      },
+    })
+    .json();
+  return numProcessed;
+};
+
+module.exports = { sendCredentials };

package/src/fetchers/operator/issuing-fetcher.js

@@ -0,0 +1,50 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { setAuthHeader } = require('./webhook-auth-header');
+
+const requestOffersFromVendor = (payload, context) => {
+  const { tenant, vendorFetch } = context;
+  const { webhookUrl } = tenant;
+
+  return vendorFetch.post('issuing/generate-offers', {
+    json: payload,
+    responseType: 'json',
+    ...(webhookUrl ? { prefixUrl: webhookUrl } : {}),
+    headers: {
+      ...setAuthHeader(context),
+    },
+  });
+};
+
+const issuedCredentialsNotificationCallback = (payload, context) => {
+  const { tenant, vendorFetch } = context;
+  const { webhookUrl } = tenant;
+
+  return vendorFetch.post('issuing/receive-issued-credentials', {
+    json: payload,
+    responseType: 'json',
+    ...(webhookUrl ? { prefixUrl: webhookUrl } : {}),
+    headers: {
+      ...setAuthHeader(context),
+    },
+  });
+};
+
+module.exports = {
+  requestOffersFromVendor,
+  issuedCredentialsNotificationCallback,
+};

package/src/fetchers/operator/webhook-auth-header.js

@@ -0,0 +1,45 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { decrypt } = require('@verii/crypto');
+
+const setAuthHeader = ({ tenant, config }) => {
+  const { bearerToken } = config;
+  const { webhookAuth, webhookUrl } = tenant;
+
+  if (
+    webhookAuth &&
+    webhookUrl &&
+    webhookAuth.type === 'bearer' &&
+    webhookAuth.bearerToken
+  ) {
+    return {
+      Authorization: `Bearer ${decrypt(
+        webhookAuth.bearerToken,
+        config.mongoSecret
+      )}`,
+    };
+  }
+
+  if (bearerToken) {
+    return { Authorization: `Bearer ${bearerToken}` };
+  }
+  return {};
+};
+
+module.exports = {
+  setAuthHeader,
+};

package/src/fetchers/push-gateway/generate-push-gateway-token.js

@@ -0,0 +1,40 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const canonicalize = require('canonicalize');
+const { KeyPurposes, createCommitment } = require('@verii/crypto');
+const { toDidUrl } = require('@verii/did-doc');
+
+const generatePushGatewayToken = async (body, pushUrl, context) => {
+  const audience = new URL(pushUrl).origin;
+  const { tenant, tenantKeysByPurpose, traceId, kms } = context;
+
+  const hash = createCommitment(canonicalize(body));
+  const exchangesKey = tenantKeysByPurpose[KeyPurposes.EXCHANGES];
+  const token = await kms.signJwt({ hash }, exchangesKey.keyId, {
+    subject: body.data.exchangeId,
+    audience,
+    jti: traceId,
+    issuer: tenant.did,
+    kid: toDidUrl(tenant.did, exchangesKey.kidFragment),
+    nbf: new Date(),
+    expiresIn: '1w',
+  });
+
+  return `Bearer ${token}`;
+};
+
+module.exports = { generatePushGatewayToken };

package/src/fetchers/push-gateway/index.js

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./push-fetcher'),
+};

package/src/fetchers/push-gateway/push-fetcher.js

@@ -0,0 +1,39 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { generatePushGatewayToken } = require('./generate-push-gateway-token');
+
+const sendPush = async (body, pushDelegate, context) => {
+  const { pushUrl } = pushDelegate;
+
+  try {
+    return await context.fetch
+      .post(pushUrl, {
+        headers: {
+          Authorization: await generatePushGatewayToken(body, pushUrl, context),
+        },
+        json: body,
+      })
+      .json();
+  } catch (error) {
+    context.log.warn(error);
+    return error;
+  }
+};
+
+module.exports = {
+  sendPush,
+};

package/src/index.js

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  ...require('./start-app-server'),
+};

package/src/init-holder-server.js

@@ -0,0 +1,108 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const initRequest = require('@verii/request');
+const Static = require('@fastify/static');
+const fastifyRoutes = require('@fastify/routes');
+const { pick, omit } = require('lodash/fp');
+const { vnfProtocolVersionPlugin } = require('@verii/fastify-plugins');
+const { rpcProviderPlugin } = require('@verii/base-contract-io');
+const { validationPlugin } = require('@verii/validation');
+const path = require('path');
+const { autoloadRepos, validateCaoPlugin } = require('./plugins');
+const {
+  autoloadHolderApiControllers,
+  autoloadRootApiController,
+} = require('./controllers');
+
+const convertOldPath = {
+  '/test-integration': '/test-integration',
+  '/issuing/identify': '/issuing/identify',
+  '/issuing/generate-offers': '/offers/generate',
+  '/inspection/find-or-create-applicant': '/applicant',
+  '/inspection/add-credentials-to-applicant': '/applicant/addCredentials',
+};
+
+const initMapVendorUrl = (config) => {
+  if (config.vendorVersion < 0.6) {
+    return (oldPath) => convertOldPath[oldPath];
+  }
+  return undefined;
+};
+
+const initHolderServer = (fastify) => {
+  return fastify
+    .addContentTypeParser('*', (req, payload, done) => {
+      let data = '';
+      // eslint-disable-next-line better-mutation/no-mutation,no-return-assign
+      payload.on('data', (chunk) => (data += chunk));
+      payload.on('end', () => {
+        done(null, data);
+      });
+    })
+    .register(rpcProviderPlugin)
+    .register(vnfProtocolVersionPlugin)
+    .register(validationPlugin, {
+      ajv: fastify.config.validationPluginAjvOptions,
+    })
+    .register(fastifyRoutes)
+    .register(autoloadRepos, { path: `${__dirname}/entities` })
+    .register(autoloadHolderApiControllers)
+    .register(autoloadRootApiController)
+    .decorate(
+      'baseVendorFetch',
+      initRequest({
+        ...omit(['bearerToken'], fastify.config),
+        mapUrl: initMapVendorUrl(fastify.config),
+        prefixUrl: fastify.config.vendorUrl,
+      })
+    )
+    .decorate(
+      'baseRegistrarFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], fastify.config),
+        prefixUrl: fastify.config.oracleUrl,
+      })
+    )
+    .decorate(
+      'baseUniversalResolverFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], fastify.config),
+        prefixUrl: fastify.config.universalResolverUrl,
+      })
+    )
+    .decorate(
+      'baseFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], fastify.config),
+      })
+    )
+    .decorate(
+      'baseLibFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], fastify.config),
+        prefixUrl: fastify.config.libUrl,
+      })
+    )
+    .register(Static, {
+      root: path.join(__dirname, 'assets/public'),
+      prefix: '/public',
+      wildcard: false,
+    })
+    .register(validateCaoPlugin);
+};
+
+module.exports = { initHolderServer };