@verii/server-credentialagent 1.0.0-pre.1752076816

package/src/init-operator-server.js

@@ -0,0 +1,101 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const initRequest = require('@verii/request');
+const AutoLoad = require('@fastify/autoload');
+const fastifyRoutes = require('@fastify/routes');
+const path = require('path');
+const { pick, omit } = require('lodash/fp');
+const { vnfProtocolVersionPlugin } = require('@verii/fastify-plugins');
+const {
+  authenticateVnfClientPlugin,
+  rpcProviderPlugin,
+} = require('@verii/base-contract-io');
+const { adminJwtAuthPlugin } = require('@verii/auth');
+const { validationPlugin } = require('@verii/validation');
+const Static = require('@fastify/static');
+const { autoloadRepos, validateCaoPlugin } = require('./plugins');
+const {
+  autoloadOperatorApiControllers,
+  autoloadRootApiController,
+  autoloadSaasoperatorApiControllers,
+} = require('./controllers');
+
+const initOperatorServer = (fastify) => {
+  if (!fastify.config.isTest) {
+    fastify.register(adminJwtAuthPlugin).register(authenticateVnfClientPlugin);
+  }
+  return fastify
+    .register(rpcProviderPlugin)
+    .register(vnfProtocolVersionPlugin)
+    .register(validationPlugin, {
+      ajv: fastify.config.validationPluginAjvOptions,
+    })
+    .register(fastifyRoutes)
+    .register(autoloadRepos, { path: `${__dirname}/entities` })
+    .register(autoloadOperatorApiControllers)
+    .register(autoloadRootApiController)
+    .register(autoloadSaasoperatorApiControllers)
+    .register(AutoLoad, {
+      dir: path.join(__dirname, 'controllers', 'operator'),
+      ignorePattern: /^.*index(\.ts|\.js|\.cjs|\.mjs)$/,
+      indexPattern: /^.*controller(\.ts|\.js|\.cjs|\.mjs)$/,
+      autoHooks: true,
+      cascadeHooks: true,
+    })
+    .decorate(
+      'baseVendorFetch',
+      initRequest({
+        ...omit(['bearerToken'], fastify.config),
+        prefixUrl: fastify.config.vendorUrl,
+      })
+    )
+    .decorate(
+      'baseRegistrarFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], fastify.config),
+        prefixUrl: fastify.config.oracleUrl,
+      })
+    )
+    .decorate(
+      'baseUniversalResolverFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], fastify.config),
+        prefixUrl: fastify.config.universalResolverUrl,
+      })
+    )
+    .decorate(
+      'baseFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], fastify.config),
+      })
+    )
+    .decorate(
+      'baseLibFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], fastify.config),
+        prefixUrl: fastify.config.libUrl,
+      })
+    )
+    .register(Static, {
+      root: path.join(__dirname, 'assets/public'),
+      prefix: '/public',
+      wildcard: false,
+    })
+    .register(validateCaoPlugin);
+};
+
+module.exports = { initOperatorServer };

package/src/init-server.js

@@ -0,0 +1,120 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const initRequest = require('@verii/request');
+const Static = require('@fastify/static');
+const fastifyRoutes = require('@fastify/routes');
+const { adminJwtAuthPlugin } = require('@verii/auth');
+const { vnfProtocolVersionPlugin } = require('@verii/fastify-plugins');
+const {
+  authenticateVnfClientPlugin,
+  rpcProviderPlugin,
+} = require('@verii/base-contract-io');
+const { validationPlugin } = require('@verii/validation');
+const { pick, omit } = require('lodash/fp');
+const path = require('path');
+const { autoloadRepos, validateCaoPlugin } = require('./plugins');
+const {
+  autoloadHolderApiControllers,
+  autoloadOperatorApiControllers,
+  autoloadRootApiController,
+  autoloadSaasoperatorApiControllers,
+} = require('./controllers');
+
+const convertOldPath = {
+  '/test-integration': '/test-integration',
+  '/issuing/identify': '/issuing/identify',
+  '/issuing/generate-offers': '/offers/generate',
+  '/inspection/find-or-create-applicant': '/applicant',
+  '/inspection/add-credentials-to-applicant': '/applicant/addCredentials',
+};
+
+const initMapVendorUrl = (config) => {
+  if (config.vendorVersion < 0.6) {
+    return (oldPath) => convertOldPath[oldPath];
+  }
+  return undefined;
+};
+
+const initServer = (server) => {
+  if (!server.config.isTest) {
+    server.register(adminJwtAuthPlugin).register(authenticateVnfClientPlugin);
+  }
+
+  return server
+    .addContentTypeParser('*', (req, payload, done) => {
+      let data = '';
+      // eslint-disable-next-line better-mutation/no-mutation,no-return-assign
+      payload.on('data', (chunk) => (data += chunk));
+      payload.on('end', () => {
+        done(null, data);
+      });
+    })
+    .register(rpcProviderPlugin)
+    .register(vnfProtocolVersionPlugin)
+    .register(validationPlugin, {
+      ajv: server.config.validationPluginAjvOptions,
+    })
+    .register(fastifyRoutes)
+    .register(autoloadRepos, { path: `${__dirname}/entities` })
+    .register(autoloadOperatorApiControllers)
+    .register(autoloadHolderApiControllers)
+    .register(autoloadRootApiController)
+    .register(autoloadSaasoperatorApiControllers)
+    .decorate(
+      'baseVendorFetch',
+      initRequest({
+        ...omit(['bearerToken'], server.config),
+        mapUrl: initMapVendorUrl(server.config),
+        prefixUrl: server.config.vendorUrl,
+      })
+    )
+    .decorate(
+      'baseRegistrarFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], server.config),
+        prefixUrl: server.config.oracleUrl,
+      })
+    )
+    .decorate(
+      'baseUniversalResolverFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], server.config),
+        prefixUrl: server.config.universalResolverUrl,
+      })
+    )
+    .decorate(
+      'baseFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], server.config),
+      })
+    )
+    .decorate(
+      'baseLibFetch',
+      initRequest({
+        ...pick(['nodeEnv', 'requestTimeout', 'traceIdHeader'], server.config),
+        prefixUrl: server.config.libUrl,
+      })
+    )
+    .register(Static, {
+      root: path.join(__dirname, 'assets/public'),
+      prefix: '/public',
+      wildcard: false,
+    })
+    .register(validateCaoPlugin);
+};
+
+module.exports = { initServer };

package/src/main-holder.js

@@ -0,0 +1,18 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const { startHolderAppServer } = require('./start-app-server');
+
+startHolderAppServer();

package/src/main-operator.js

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { startOperatorAppServer } = require('./start-app-server');
+
+startOperatorAppServer();

package/src/main.js

@@ -0,0 +1,18 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const { startAppServer } = require('./start-app-server');
+
+startAppServer();

package/src/plugins/autoload-repos.js

@@ -0,0 +1,28 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const fastifyAutoload = require('@fastify/autoload');
+
+const autoloadRepos = async (fastify, options) =>
+  fastify.register(fastifyAutoload, {
+    dir: options.path,
+    indexPattern: /.*dont-match-indexes(\.ts|\.js|\.cjs|\.mjs)$/,
+    scriptPattern: /.*repo(\.ts|\.js|\.cjs|\.mjs)$/,
+  });
+
+module.exports = {
+  autoloadRepos,
+};

package/src/plugins/disclosure-loader-plugin.js

@@ -0,0 +1,56 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const newError = require('http-errors');
+const { isEmpty } = require('lodash/fp');
+const fp = require('fastify-plugin');
+
+const getDisclosureId = ({ exchange, params }) => {
+  if (exchange?.disclosureId) {
+    return exchange.disclosureId;
+  }
+  if (params.id) {
+    return params.id;
+  }
+  return null;
+};
+
+const loadDisclosure = async (req) => {
+  const disclosureId = getDisclosureId(req);
+  if (disclosureId == null) {
+    throw newError.BadRequest('No disclosureId sent by client');
+  }
+  const disclosure = await req.repos.disclosures.findById(disclosureId);
+  if (isEmpty(disclosure)) {
+    throw newError.NotFound(`Disclosure ${disclosureId} not found`);
+  }
+
+  return disclosure;
+};
+
+const disclosureLoaderPlugin = (fastify, options, next) => {
+  fastify.decorateRequest('disclosure', null);
+  fastify.addHook('preHandler', async (req) => {
+    const disclosure = await loadDisclosure(req);
+    req.disclosure = disclosure;
+  });
+  next();
+};
+
+module.exports = {
+  disclosureLoaderPlugin: fp(disclosureLoaderPlugin),
+  loadDisclosure,
+};

package/src/plugins/ensure-disclosure-active-plugin.js

@@ -0,0 +1,30 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const fp = require('fastify-plugin');
+const { getDisclosure, assertDisclosureActive } = require('../entities');
+
+const ensureDisclosureActivePlugin = (fastify, options, next) => {
+  fastify.addHook('preHandler', async (req) => {
+    const disclosure = await getDisclosure(req);
+    assertDisclosureActive(disclosure, req);
+  });
+  next();
+};
+
+module.exports = {
+  ensureDisclosureActivePlugin: fp(ensureDisclosureActivePlugin),
+};

package/src/plugins/ensure-disclosure-configuration-type-plugin.js

@@ -0,0 +1,29 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const fp = require('fastify-plugin');
+const { updateDisclosureConfigurationType } = require('../entities');
+
+const ensureDisclosureConfigurationTypePlugin = (fastify, options, next) => {
+  fastify.addHook('preHandler', updateDisclosureConfigurationType);
+  next();
+};
+
+module.exports = {
+  ensureDisclosureConfigurationTypePlugin: fp(
+    ensureDisclosureConfigurationTypePlugin
+  ),
+};

package/src/plugins/ensure-tenant-default-issuing-disclosure-id-plugin.js

@@ -0,0 +1,60 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const fp = require('fastify-plugin');
+const { isEmpty, isNull, isObject } = require('lodash/fp');
+const {
+  VendorEndpointCategory,
+  IdentificationMethods,
+} = require('../entities');
+
+const ensureTenantDefaultIssuingDisclosureIdPlugin = (
+  fastify,
+  options,
+  next
+) => {
+  fastify.addHook('preValidation', async (req) => {
+    const { tenant, repos } = req;
+    if (
+      isObject(tenant.defaultIssuingDisclosureId) ||
+      isNull(tenant.defaultIssuingDisclosureId)
+    ) {
+      return;
+    }
+    const disclosures = await repos.disclosures.find({
+      filter: {
+        identificationMethods: {
+          $ne: [IdentificationMethods.PREAUTH],
+        },
+        vendorEndpoint: {
+          $in: VendorEndpointCategory.ISSUING,
+        },
+      },
+      sort: { createdAt: -1 },
+    });
+    req.tenant = await req.repos.tenants.setDefaultIssuingDisclosure(
+      tenant._id,
+      isEmpty(disclosures) ? null : disclosures[0]._id
+    );
+  });
+  next();
+};
+
+module.exports = {
+  ensureTenantDefaultIssuingDisclosureIdPlugin: fp(
+    ensureTenantDefaultIssuingDisclosureIdPlugin
+  ),
+};

package/src/plugins/ensure-tenant-primary-address-plugin.js

@@ -0,0 +1,44 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const fp = require('fastify-plugin');
+const { KeyPurposes } = require('@verii/crypto');
+const { isEmpty } = require('lodash/fp');
+const { addPrimaryAddressToTenant } = require('../entities');
+
+const ensureTenantPrimaryAddressPlugin = (fastify, options, next) => {
+  fastify.addHook('preValidation', async (req) => {
+    const { tenant, repos } = req;
+    if (tenant.primaryAddress) {
+      return;
+    }
+    const key = await repos.keys.findOne({
+      filter: {
+        purposes: KeyPurposes.DLT_TRANSACTIONS,
+      },
+    });
+    if (isEmpty(key)) {
+      return;
+    }
+    await addPrimaryAddressToTenant(tenant, req);
+    req.tenant = await req.repos.tenants.findOne({ _id: tenant._id });
+  });
+  next();
+};
+
+module.exports = {
+  ensureTenantPrimaryAddressPlugin: fp(ensureTenantPrimaryAddressPlugin),
+};

package/src/plugins/exchange-error-handler-plugin.js

@@ -0,0 +1,51 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const fp = require('fastify-plugin');
+const { ExchangeStates } = require('../entities');
+
+const exchangeErrorHandlerPlugin = (fastify, options, next) => {
+  fastify.addHook('onError', async (req, reply, err) => {
+    const { repos, exchange, log } = req;
+    try {
+      if (!exchange || err.statusCode === 409) {
+        return;
+      }
+      await repos.exchanges.addState(
+        exchange._id,
+        calcExchangeErrorState(err.exchangeErrorState, err.statusCode),
+        {
+          err: err.message,
+        }
+      );
+    } catch (dbError) {
+      log.error(dbError, 'DB Error when setting error state');
+    }
+  });
+  next();
+};
+
+const calcExchangeErrorState = (exchangeErrorState, statusCode) => {
+  if (exchangeErrorState) {
+    return exchangeErrorState;
+  }
+  if (statusCode === 401) {
+    return ExchangeStates.NOT_IDENTIFIED;
+  }
+
+  return ExchangeStates.UNEXPECTED_ERROR;
+};
+module.exports = { exchangeErrorHandlerPlugin: fp(exchangeErrorHandlerPlugin) };

package/src/plugins/exchange-loader-plugin.js

@@ -0,0 +1,50 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const newError = require('http-errors');
+const fp = require('fastify-plugin');
+
+const parseExchangeId = ({ params, query, body }) =>
+  params?.exchangeId ??
+  query?.exchangeId ??
+  query?.exchange_id ??
+  body?.exchangeId ??
+  body?.exchange_id;
+
+const loadExchange = async (req) => {
+  const exchangeId = parseExchangeId(req);
+  if (exchangeId == null) {
+    throw newError.BadRequest('No exchangeId sent by client');
+  }
+  try {
+    const exchange = await req.repos.exchanges.findById(exchangeId);
+    return exchange;
+  } catch {
+    throw newError(404, `Exchange ${exchangeId} not found`, {
+      errorCode: 'exchange_not_found',
+    });
+  }
+};
+
+const exchangeLoaderPlugin = (fastify, options, next) => {
+  fastify.decorateRequest('exchange', null);
+  fastify.addHook('preHandler', async (req) => {
+    req.exchange = await loadExchange(req);
+  });
+  next();
+};
+
+module.exports = { exchangeLoaderPlugin: fp(exchangeLoaderPlugin) };

package/src/plugins/group-loader-plugin.js

@@ -0,0 +1,51 @@
+/**
+ * Copyright 2023 Velocity Team
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+const { mongoDb } = require('@spencejs/spence-mongo-repos');
+const fp = require('fastify-plugin');
+const { isEmpty } = require('lodash/fp');
+
+const loadGroup = async (db, req) => {
+  const { tenant } = req;
+  return db.collection('groups').findOne(
+    {
+      dids: tenant.did,
+    },
+    {
+      _id: 1,
+      dids: 1,
+    }
+  );
+};
+
+const groupLoaderPlugin = (fastify, options, next) => {
+  fastify.decorateRequest('group', null);
+  fastify.decorateRequest('caoDid', null);
+  fastify.addHook('onRequest', async (req) => {
+    req.group = await loadGroup(mongoDb(), req);
+    req.caoDid = getCaoDid(req);
+  });
+  next();
+};
+
+const getCaoDid = (context) => {
+  const { group, config } = context;
+  return isEmpty(group) ? config.caoDid : group._id;
+};
+
+module.exports = {
+  groupLoaderPlugin: fp(groupLoaderPlugin),
+};