@webda/core 4.0.0-beta.2 → 4.0.0-beta.4

package/lib/session/manager.model.js

@@ -0,0 +1,212 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import { Inject, Service } from "../services/service.js";
+import { CookieOptions, SecureCookie } from "./cookie.js";
+import { isWebContext } from "../contexts/icontext.js";
+import { getUuid } from "@webda/utils";
+import { ServiceParameters } from "../services/serviceparameters.js";
+import { Session } from "./session.js";
+import { useService, useUserResolver } from "../core/hooks.js";
+import { runAsSystem } from "../contexts/execution.js";
+import { UuidModel } from "@webda/models";
+/**
+ * Manage load and save of sessions
+ */
+export class SessionManager extends Service {
+    /**
+     * Build a stateless session from an access token (any transport)
+     * @param context - the context
+     * @param token - access token
+     * @returns the session, anonymous when the token is invalid
+     */
+    async loadFromToken(context, token) {
+        const session = new Session();
+        session.stateless = true;
+        const claims = await useService("TokenService").verifyAccess(token);
+        if (claims) {
+            session.login(claims.sub, claims.ident, { provider: claims.provider, amr: claims.amr, mfa: claims.mfa });
+            session.roles = claims.roles;
+            session.refreshFamily = claims.fam;
+            session.authAt = claims.authAt;
+            if (await this.isOutdated(session)) {
+                session.logout();
+            }
+        }
+        return session;
+    }
+    /**
+     * Whether the user of an authenticated session changed their password after the session was authenticated
+     *
+     * Costs one user read (through the registered user resolver) per load of a session carrying `authAt`. A failing
+     * read counts as outdated: the session is then anonymous for that request.
+     * @param session - loaded session
+     * @returns true when the session must be treated as anonymous
+     */
+    async isOutdated(session) {
+        if (session.userId === undefined || typeof session.authAt !== "number") {
+            return false;
+        }
+        try {
+            const user = await runAsSystem(() => useUserResolver().resolve(session.userId));
+            const changedAt = user?.password?.changedAt;
+            return typeof changedAt === "number" && changedAt > session.authAt;
+        }
+        catch (err) {
+            this.log("WARN", "Cannot check the session against the user password, session ignored", err?.message);
+            return true;
+        }
+    }
+}
+/** Persistent session data stored in a model with a TTL */
+export class SessionModel extends UuidModel {
+    ttl;
+    session;
+    /** Create a new SessionModel
+     * @param data - the session data
+     */
+    constructor(data) {
+        super(data);
+        this.ttl = data.ttl || 0;
+        this.session = data.session || {};
+    }
+}
+/** Parameters for the cookie-based session manager */
+export class CookieSessionParameters extends ServiceParameters {
+    /**
+     * Options for issue JWT token
+     */
+    jwt;
+    /**
+     * Cookie configuration for session
+     */
+    cookie;
+    /**
+     * Load parameters and initialize cookie options
+     * @param params - the service parameters
+     * @returns this for chaining
+     */
+    load(params = {}) {
+        super.load(params);
+        this.cookie = new CookieOptions(this.cookie || {});
+        return this;
+    }
+}
+/**
+ * SessionManager that store info in a cookie
+ *
+ * If SessionStore service exists, only uuid is in the cookie
+ * the rest of data is stored within the session store
+ *
+ * @WebdaModda
+ */
+let CookieSessionManager = (() => {
+    let _classSuper = SessionManager;
+    let _cryptoService_decorators;
+    let _cryptoService_initializers = [];
+    let _cryptoService_extraInitializers = [];
+    return class CookieSessionManager extends _classSuper {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _cryptoService_decorators = [Inject("CryptoService")];
+            __esDecorate(null, null, _cryptoService_decorators, { kind: "field", name: "cryptoService", static: false, private: false, access: { has: obj => "cryptoService" in obj, get: obj => obj.cryptoService, set: (obj, value) => { obj.cryptoService = value; } }, metadata: _metadata }, _cryptoService_initializers, _cryptoService_extraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        cryptoService = __runInitializers(this, _cryptoService_initializers, void 0);
+        sessionModel = __runInitializers(this, _cryptoService_extraInitializers);
+        /**
+         * @override
+         */
+        async load(context) {
+            if (!isWebContext(context)) {
+                return new Session();
+            }
+            // A Bearer scheme is authoritative: an invalid token yields an anonymous session, never the cookie
+            const authorization = context.getHttpContext().getHeader("authorization");
+            if (typeof authorization === "string" && /^bearer(\s|$)/i.test(authorization)) {
+                return this.loadFromToken(context, authorization.substring(7).trim());
+            }
+            const session = new Session();
+            const cookie = await SecureCookie.load(this.parameters.cookie.name, session, context, this.parameters.jwt);
+            if (this.sessionModel) {
+                if (cookie.sub) {
+                    Object.assign(session, (await this.sessionModel.get(cookie.sub))?.session);
+                    session.uuid = cookie.sub;
+                }
+                session.uuid ??= getUuid("base64");
+            }
+            else {
+                Object.assign(session, cookie);
+            }
+            // A password change ends the sessions authenticated before it
+            if (await this.isOutdated(session)) {
+                session.logout();
+            }
+            return session;
+        }
+        /**
+         * @override
+         */
+        async save(context, session) {
+            if (!isWebContext(context)) {
+                return;
+            }
+            if (session.stateless) {
+                return;
+            }
+            // If store is found session info are stored in db
+            if (this.sessionModel) {
+                if (await this.sessionModel.exists(session.uuid)) {
+                    await this.sessionModel.update({
+                        uuid: session.uuid,
+                        session,
+                        ttl: Date.now() + this.parameters.cookie.maxAge * 1000
+                    });
+                }
+                else {
+                    await this.sessionModel.create({
+                        uuid: session.uuid,
+                        session,
+                        ttl: Date.now() + this.parameters.cookie.maxAge * 1000
+                    });
+                }
+                SecureCookie.save(this.parameters.cookie.name, context, {}, { ...this.parameters.jwt, subject: session.uuid.toString() }, this.parameters.cookie);
+                return;
+            }
+            SecureCookie.save(this.parameters.cookie.name, context, session, this.parameters.jwt, this.parameters.cookie);
+        }
+    };
+})();
+export { CookieSessionManager };
+//# sourceMappingURL=manager.model.js.map

package/lib/session/manager.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.model.js","sourceRoot":"","sources":["../../src/session/manager.model.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAW,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAoC,SAAS,EAAE,MAAM,eAAe,CAAC;AAE5E;;GAEG;AACH,MAAM,OAAgB,cAAgE,SAAQ,OAAU;IAatG;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,KAAa;QACjD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACzG,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC7B,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC;YACnC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;OAOG;IACO,KAAK,CAAC,UAAU,CAAC,OAAgB;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAQ,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC;YAC5C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,qEAAqE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACtG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,2DAA2D;AAC3D,MAAM,OAAO,YAAa,SAAQ,SAAS;IACzC,GAAG,CAAS;IACZ,OAAO,CAAM;IACb;;OAEG;IACH,YAAY,IAAS;QACnB,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,CAAC;CACF;AAED,sDAAsD;AACtD,MAAM,OAAO,uBAAwB,SAAQ,iBAAiB;IAC5D;;OAEG;IACH,GAAG,CAAc;IACjB;;OAEG;IACH,MAAM,CAAiB;IAEvB;;;;OAIG;IACH,IAAI,CAAC,MAAM,GAAQ,EAAE;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;;;GAOG;IACU,oBAAoB;sBAEvB,cAAc;;;;iBAFX,oBAEX,SAAQ,WAAiB;;;yCACxB,MAAM,CAAC,eAAe,CAAC;YACxB,yLAAA,aAAa,6BAAb,aAAa,qGAAgB;;;QAA7B,aAAa,gEAAgB;QAE7B,YAAY,6DAAuC;QAEnD;;WAEG;QACH,KAAK,CAAC,IAAI,CAAC,OAAgB;YACzB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,CAAC;YACD,mGAAmG;YACnG,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC1E,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9E,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC3G,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;oBACf,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC3E,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC;gBAC5B,CAAC;gBACD,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,CAAC;YACD,8DAA8D;YAC9D,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,IAAI,CAAC,OAAgB,EAAE,OAAgB;YAC3C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,kDAAkD;YAClD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;wBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,OAAO;wBACP,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI;qBACvD,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;wBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,OAAO;wBACP,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI;qBACvD,CAAC,CAAC;gBACL,CAAC;gBACD,YAAY,CAAC,IAAI,CACf,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAC3B,OAAO,EACP,EAAE,EACF,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAC5D,IAAI,CAAC,UAAU,CAAC,MAAM,CACvB,CAAC;gBACF,OAAO;YACT,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAChH,CAAC;;;SAzEU,oBAAoB"}

package/lib/session/session.d.ts

@@ -0,0 +1,100 @@
+/**
+ * MFA progress of a session
+ */
+export type MfaState = "none" | "pending" | "verified";
+/**
+ * Options for {@link Session.login}
+ */
+export interface LoginOptions {
+    provider?: string;
+    amr?: string[];
+    mfa?: MfaState;
+}
+/**
+ * Session
+ */
+export declare class Session {
+    protected changed: boolean;
+    /**
+     * Session uuid
+     */
+    uuid: string;
+    /**
+     * User id
+     */
+    userId?: string;
+    /**
+     * Ident used
+     */
+    identUsed: string;
+    /**
+     * User current roles
+     */
+    roles: string[];
+    /**
+     * Authentication provider used
+     */
+    provider?: string;
+    /**
+     * Authentication methods used
+     */
+    amr?: string[];
+    /**
+     * MFA state of the session
+     */
+    mfa?: MfaState;
+    /**
+     * Refresh token family identifier
+     */
+    refreshFamily?: string;
+    /**
+     * When the session was authenticated (ms timestamp, stamped by the Authentication service): a session older than
+     * the last password change of its user is loaded as anonymous
+     */
+    authAt?: number;
+    /**
+     * Session is stateless (not persisted in cookies)
+     */
+    stateless?: boolean;
+    /**
+     * Login
+     * @param userId - the user identifier
+     * @param identUsed - the identity used
+     * @param options - login options including provider, amr, and mfa state
+     */
+    login(userId: string, identUsed: string, options?: LoginOptions): void;
+    /**
+     * Logout
+     */
+    logout(): void;
+    /**
+     * If session is authenticated
+     * @returns true if the condition is met
+     */
+    isLogged(): boolean;
+    /**
+     * If session is pending MFA verification
+     * @returns true if the condition is met
+     */
+    isPending(): boolean;
+    /**
+     * Session is dirty and requires save
+     * @returns true if the condition is met
+     */
+    isDirty(): boolean;
+    /**
+     * Get the proxy to be able to track modification
+     * @returns this for chaining
+     */
+    getProxy(): this;
+}
+/**
+ * Unknown session that allows all keys
+ */
+export declare class UnknownSession extends Session {
+    /**
+     * Allow any type of fields
+     */
+    [key: string]: any;
+}
+//# sourceMappingURL=session.d.ts.map

package/lib/session/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/session/session.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB;AAED;;GAEG;AACH,qBAAa,OAAO;IAElB,SAAS,CAAC,OAAO,EAAE,OAAO,CAAS;IACnC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IAEf;;OAEG;IACH,GAAG,CAAC,EAAE,QAAQ,CAAC;IAEf;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IAEH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;;;;OAKG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,QAMlE;IACD;;OAEG;IACH,MAAM,SASL;IAED;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAElB;IAED;;;OAGG;IACH,SAAS,IAAI,OAAO,CAEnB;IAED;;;OAGG;IACH,OAAO,IAAI,OAAO,CAEjB;IAED;;;OAGG;IACH,QAAQ,IAAI,IAAI,CAef;CACF;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,OAAO;IACzC;;OAEG;IACH,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB"}

package/lib/session/session.js

@@ -0,0 +1,175 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import { NotEnumerable } from "@webda/tsc-esm";
+/**
+ * Session
+ */
+let Session = (() => {
+    let _changed_decorators;
+    let _changed_initializers = [];
+    let _changed_extraInitializers = [];
+    let _stateless_decorators;
+    let _stateless_initializers = [];
+    let _stateless_extraInitializers = [];
+    return class Session {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(null) : void 0;
+            _changed_decorators = [NotEnumerable];
+            _stateless_decorators = [NotEnumerable];
+            __esDecorate(null, null, _changed_decorators, { kind: "field", name: "changed", static: false, private: false, access: { has: obj => "changed" in obj, get: obj => obj.changed, set: (obj, value) => { obj.changed = value; } }, metadata: _metadata }, _changed_initializers, _changed_extraInitializers);
+            __esDecorate(null, null, _stateless_decorators, { kind: "field", name: "stateless", static: false, private: false, access: { has: obj => "stateless" in obj, get: obj => obj.stateless, set: (obj, value) => { obj.stateless = value; } }, metadata: _metadata }, _stateless_initializers, _stateless_extraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        changed = __runInitializers(this, _changed_initializers, false);
+        /**
+         * Session uuid
+         */
+        uuid = __runInitializers(this, _changed_extraInitializers);
+        /**
+         * User id
+         */
+        userId;
+        /**
+         * Ident used
+         */
+        identUsed;
+        /**
+         * User current roles
+         */
+        roles;
+        /**
+         * Authentication provider used
+         */
+        provider;
+        /**
+         * Authentication methods used
+         */
+        amr;
+        /**
+         * MFA state of the session
+         */
+        mfa;
+        /**
+         * Refresh token family identifier
+         */
+        refreshFamily;
+        /**
+         * When the session was authenticated (ms timestamp, stamped by the Authentication service): a session older than
+         * the last password change of its user is loaded as anonymous
+         */
+        authAt;
+        /**
+         * Session is stateless (not persisted in cookies)
+         */
+        stateless = __runInitializers(this, _stateless_initializers, void 0);
+        /**
+         * Login
+         * @param userId - the user identifier
+         * @param identUsed - the identity used
+         * @param options - login options including provider, amr, and mfa state
+         */
+        login(userId, identUsed, options = {}) {
+            this.userId = userId;
+            this.identUsed = identUsed;
+            this.provider = options.provider;
+            this.amr = options.amr ?? [];
+            this.mfa = options.mfa ?? "none";
+        }
+        /**
+         * Logout
+         */
+        logout() {
+            delete this.userId;
+            delete this.identUsed;
+            delete this.roles;
+            delete this.provider;
+            delete this.amr;
+            delete this.mfa;
+            delete this.refreshFamily;
+            delete this.authAt;
+        }
+        /**
+         * If session is authenticated
+         * @returns true if the condition is met
+         */
+        isLogged() {
+            return this.userId !== undefined && this.mfa !== "pending";
+        }
+        /**
+         * If session is pending MFA verification
+         * @returns true if the condition is met
+         */
+        isPending() {
+            return this.userId !== undefined && this.mfa === "pending";
+        }
+        /**
+         * Session is dirty and requires save
+         * @returns true if the condition is met
+         */
+        isDirty() {
+            return this.changed;
+        }
+        /**
+         * Get the proxy to be able to track modification
+         * @returns this for chaining
+         */
+        getProxy() {
+            const proxyHandler = {
+                set: (obj, property, value) => {
+                    this.changed = true;
+                    obj[property] = value;
+                    return true;
+                },
+                get: (obj, property) => {
+                    if (typeof obj[property] === "object") {
+                        return new Proxy(obj[property], proxyHandler);
+                    }
+                    return obj[property];
+                }
+            };
+            return new Proxy(this, proxyHandler);
+        }
+        constructor() {
+            __runInitializers(this, _stateless_extraInitializers);
+        }
+    };
+})();
+export { Session };
+/**
+ * Unknown session that allows all keys
+ */
+export class UnknownSession extends Session {
+}
+//# sourceMappingURL=session.js.map

package/lib/session/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/session/session.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAgB/C;;GAEG;IACU,OAAO;;;;;;;iBAAP,OAAO;;;mCACjB,aAAa;qCAiDb,aAAa;YAhDd,uKAAU,OAAO,6BAAP,OAAO,yFAAkB;YAiDnC,6KAAA,SAAS,6BAAT,SAAS,6FAAW;;;QAjDV,OAAO,kDAAY,KAAK,EAAC;QACnC;;WAEG;QACH,IAAI,uDAAS;QACb;;WAEG;QACH,MAAM,CAAU;QAChB;;WAEG;QACH,SAAS,CAAS;QAElB;;WAEG;QACH,KAAK,CAAW;QAEhB;;WAEG;QACH,QAAQ,CAAU;QAElB;;WAEG;QACH,GAAG,CAAY;QAEf;;WAEG;QACH,GAAG,CAAY;QAEf;;WAEG;QACH,aAAa,CAAU;QAEvB;;;WAGG;QACH,MAAM,CAAU;QAEhB;;WAEG;QAEH,SAAS,4DAAW;QAEpB;;;;;WAKG;QACH,KAAK,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAO,GAAiB,EAAE;YACjE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YACjC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC;QACnC,CAAC;QACD;;WAEG;QACH,MAAM;YACJ,OAAO,IAAI,CAAC,MAAM,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;YACtB,OAAO,IAAI,CAAC,KAAK,CAAC;YAClB,OAAO,IAAI,CAAC,QAAQ,CAAC;YACrB,OAAO,IAAI,CAAC,GAAG,CAAC;YAChB,OAAO,IAAI,CAAC,GAAG,CAAC;YAChB,OAAO,IAAI,CAAC,aAAa,CAAC;YAC1B,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED;;;WAGG;QACH,QAAQ;YACN,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;QAC7D,CAAC;QAED;;;WAGG;QACH,SAAS;YACP,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;QAC7D,CAAC;QAED;;;WAGG;QACH,OAAO;YACL,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QAED;;;WAGG;QACH,QAAQ;YACN,MAAM,YAAY,GAAG;gBACnB,GAAG,EAAE,CAAC,GAAS,EAAE,QAAgB,EAAE,KAAU,EAAE,EAAE;oBAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;oBACpB,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;oBACtB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,GAAG,EAAE,CAAC,GAAS,EAAE,QAAgB,EAAE,EAAE;oBACnC,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;wBACtC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;oBAChD,CAAC;oBACD,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;aACF,CAAC;YACF,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvC,CAAC;;;;;;SA3HU,OAAO;AA8HpB;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,OAAO;CAK1C"}

package/lib/stores/istore.d.ts

@@ -0,0 +1,99 @@
+import { Attributes, FilterAttributes } from "@webda/tsc-esm";
+import type { WebdaQLString } from "@webda/ql";
+/**
+ * This represent the injected methods of Store into the Model
+ */
+export interface StoreHelper<T extends object = object> {
+    /**
+     * Get data from the store
+     * @param uuid
+     * @returns
+     */
+    get(uuid: string): Promise<T>;
+    /**
+     * Create data in the store
+     * @param uuid
+     * @param data
+     * @returns
+     */
+    create(uuid: string, data: T): Promise<T>;
+    /**
+     * Update data in the store, replacing the object
+     * @param uuid
+     * @param data
+     * @returns
+     */
+    update<K extends Attributes<T>>(uuid: string, data: T, conditionField?: K, condition?: T[K]): Promise<void>;
+    /**
+     * Patch data in the store, patching the object
+     * @param uuid
+     * @param data
+     * @returns
+     */
+    patch<K extends Attributes<T>>(uuid: string, data: Partial<T>, conditionField?: K, condition?: T[K]): Promise<void>;
+    /**
+     * Query the store
+     * @param query
+     * @returns
+     */
+    query(query: WebdaQLString<T>): Promise<T[]>;
+    /**
+     * Delete data from the store
+     * @param uuid
+     * @returns
+     */
+    delete<K extends Attributes<T>>(uuid: string, conditionField?: K, condition?: T[K]): Promise<void>;
+    /**
+     * Verify if the object exists
+     * @param uuid
+     * @returns
+     */
+    exists(uuid: string): Promise<boolean>;
+    /**
+     * Increment attributes of an object
+     * @param uuid
+     * @param info
+     * @returns
+     */
+    incrementAttributes<K extends Attributes<T>, L extends FilterAttributes<T, number>>(uuid: string, info: ({
+        property: L;
+        value?: number;
+    } | L)[], conditionField?: K, condition?: T[K]): Promise<void>;
+    /**
+     * Upsert an item to a collection
+     * @param uuid
+     * @param collection
+     * @param item
+     * @param index
+     * @param itemWriteCondition
+     * @param itemWriteConditionField
+     * @returns
+     */
+    upsertItemToCollection<K extends FilterAttributes<T, Array<any>>>(uuid: string, collection: K, item: any, index?: number, itemWriteConditionField?: any, itemWriteCondition?: any): Promise<void>;
+    /**
+     * Delete item from a collection
+     * @param uuid
+     * @param collection
+     * @param index
+     * @param itemWriteCondition
+     * @param itemWriteConditionField
+     * @returns
+     */
+    deleteItemFromCollection<K extends FilterAttributes<T, Array<any>>>(uuid: string, collection: K, index: number, itemWriteConditionField?: any, itemWriteCondition?: any): Promise<void>;
+    /**
+     * Remove an attribute from an object
+     * @param uuid
+     * @param attribute
+     * @returns
+     */
+    removeAttribute<L extends Attributes<T>, K extends Attributes<T>>(uuid: string, attribute: K, conditionField?: L, condition?: T[L]): Promise<void>;
+}
+/**
+ * A mapping service allow to link two object together
+ *
+ * Therefore they need to handle the cascadeDelete
+ */
+export interface MappingService<T = any> {
+    newModel(object: any): T;
+}
+//# sourceMappingURL=istore.d.ts.map

package/lib/stores/istore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"istore.d.ts","sourceRoot":"","sources":["../../src/stores/istore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAgB,MAAM,gBAAgB,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IACpD;;;;OAIG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,MAAM,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5G;;;;;OAKG;IACH,KAAK,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpH;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7C;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC;;;;;OAKG;IACH,mBAAmB,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,EAChF,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC;QAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,CAAC,EAAE,EAC7C,cAAc,CAAC,EAAE,CAAC,EAClB,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GACf,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;;OASG;IACH,sBAAsB,CAAC,CAAC,SAAS,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAC9D,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,CAAC,EACb,IAAI,EAAE,GAAG,EACT,KAAK,CAAC,EAAE,MAAM,EACd,uBAAuB,CAAC,EAAE,GAAG,EAC7B,kBAAkB,CAAC,EAAE,GAAG,GACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;OAQG;IACH,wBAAwB,CAAC,CAAC,SAAS,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAChE,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,CAAC,EACb,KAAK,EAAE,MAAM,EACb,uBAAuB,CAAC,EAAE,GAAG,EAC7B,kBAAkB,CAAC,EAAE,GAAG,GACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;OAKG;IACH,eAAe,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAC9D,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,CAAC,EACZ,cAAc,CAAC,EAAE,CAAC,EAClB,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GACf,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,GAAG;IACrC,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;CAC1B"}

package/lib/stores/istore.js

@@ -0,0 +1,26 @@
+export {};
+/*
+export type CRUDHelper<T extends object> = {
+  [K in keyof Omit<StoreHelper<T>, "create" | "query" | "get" | "update">]: OmitFirstArg<StoreHelper<T>[K]>;
+} & {
+  setAttribute<K extends Attributes<T>, L extends Attributes<T>>(
+    property: K,
+    value: T[K],
+    itemWriteConditionField?: L,
+    itemWriteCondition?: T[L]
+  ): Promise<void>;
+  incrementAttribute<K extends FilterAttributes<T, number>, L extends Attributes<T>>(
+    property: K,
+    value?: number,
+    itemWriteConditionField?: L,
+    itemWriteCondition?: T[L]
+  ): Promise<void>;
+  upsert(data: T): Promise<T>;
+  create(data: T, withSave?: boolean): Promise<T>;
+};
+
+export type CRUDModel<T extends object = object> = Omit<CRUDHelper<T>, "upsert" | "create" | "exists" | "update"> &
+  T & { save(full?: boolean | keyof T, ...fields: (keyof T)[]): Promise<T> };
+
+*/
+//# sourceMappingURL=istore.js.map

package/lib/stores/istore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"istore.js","sourceRoot":"","sources":["../../src/stores/istore.ts"],"names":[],"mappings":";AA0HA;;;;;;;;;;;;;;;;;;;;;;;EAuBE"}