@webiny/api-audit-logs 6.0.0-beta.0 → 6.0.0-rc.1

package/subscriptions/mailer/handlers/AuditLogMailerSettingsAfterSaveHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","MailerSettingsAfterSaveHandler","AuditLogsContext","AUDIT","getAuditConfig","AuditLogMailerSettingsAfterSaveHandlerImpl","constructor","context","handle","event","settings","payload","createAuditLog","MAILER","SETTINGS","UPDATE","after","error","from","message","code","AuditLogMailerSettingsAfterSaveHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogMailerSettingsAfterSaveHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { MailerSettingsAfterSaveHandler } from \"@webiny/api-mailer/features/SaveSettings/index.js\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\n\nclass AuditLogMailerSettingsAfterSaveHandlerImpl\n    implements MailerSettingsAfterSaveHandler.Interface\n{\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: MailerSettingsAfterSaveHandler.Event): Promise<void> {\n        try {\n            const { settings } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.MAILER.SETTINGS.UPDATE);\n\n            await createAuditLog(\"Settings updated\", { after: settings }, \"-\", this.context);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogMailerSettingsAfterSaveHandler\",\n                code: \"AUDIT_LOGS_AFTER_MAILER_SETTINGS_SAVE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogMailerSettingsAfterSaveHandler =\n    MailerSettingsAfterSaveHandler.createImplementation({\n        implementation: AuditLogMailerSettingsAfterSaveHandlerImpl,\n        dependencies: [AuditLogsContext]\n    });\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,8BAA8B,QAAQ,mDAAmD;AAClG,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAEvB,MAAMC,0CAA0C,CAEhD;EACIC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAA2C,EAAiB;IACrE,IAAI;MACA,MAAM;QAAEC;MAAS,CAAC,GAAGD,KAAK,CAACE,OAAO;MAClC,MAAMC,cAAc,GAAGR,cAAc,CAACD,KAAK,CAACU,MAAM,CAACC,QAAQ,CAACC,MAAM,CAAC;MAEnE,MAAMH,cAAc,CAAC,kBAAkB,EAAE;QAAEI,KAAK,EAAEN;MAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAACH,OAAO,CAAC;IACpF,CAAC,CAAC,OAAOU,KAAK,EAAE;MACZ,MAAMjB,WAAW,CAACkB,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,8DAA8D;QACvEC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,sCAAsC,GAC/CpB,8BAA8B,CAACqB,oBAAoB,CAAC;EAChDC,cAAc,EAAElB,0CAA0C;EAC1DmB,YAAY,EAAE,CAACtB,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/mailer/index.d.ts

@@ -1,2 +1,2 @@
-import { AuditLogsContext } from "../../types";
-export declare const createMailerHooks: (context: AuditLogsContext) => void;
+import { AuditLogsContext } from "../../abstractions.js";
+export declare const createMailerHooks: (context: AuditLogsContext.Interface) => void;

package/subscriptions/mailer/index.js

@@ -1,13 +1,7 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createMailerHooks = void 0;
-var _settings = require("./settings");
-const createMailerHooks = context => {
-  (0, _settings.onSettingsAfterUpdateHook)(context);
+import { AuditLogMailerSettingsAfterSaveHandler } from "./handlers/AuditLogMailerSettingsAfterSaveHandler.js";
+export const createMailerHooks = context => {
+  // Register mailer settings event handlers
+  context.container.register(AuditLogMailerSettingsAfterSaveHandler);
 };
-exports.createMailerHooks = createMailerHooks;
 
 //# sourceMappingURL=index.js.map

package/subscriptions/mailer/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_settings","require","createMailerHooks","context","onSettingsAfterUpdateHook","exports"],"sources":["index.ts"],"sourcesContent":["import { onSettingsAfterUpdateHook } from \"./settings\";\n\nimport { AuditLogsContext } from \"~/types\";\n\nexport const createMailerHooks = (context: AuditLogsContext) => {\n    onSettingsAfterUpdateHook(context);\n};\n"],"mappings":";;;;;;AAAA,IAAAA,SAAA,GAAAC,OAAA;AAIO,MAAMC,iBAAiB,GAAIC,OAAyB,IAAK;EAC5D,IAAAC,mCAAyB,EAACD,OAAO,CAAC;AACtC,CAAC;AAACE,OAAA,CAAAH,iBAAA,GAAAA,iBAAA","ignoreList":[]}
+{"version":3,"names":["AuditLogMailerSettingsAfterSaveHandler","createMailerHooks","context","container","register"],"sources":["index.ts"],"sourcesContent":["import { AuditLogMailerSettingsAfterSaveHandler } from \"./handlers/AuditLogMailerSettingsAfterSaveHandler.js\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\n\nexport const createMailerHooks = (context: AuditLogsContext.Interface) => {\n    // Register mailer settings event handlers\n    context.container.register(AuditLogMailerSettingsAfterSaveHandler);\n};\n"],"mappings":"AAAA,SAASA,sCAAsC;AAG/C,OAAO,MAAMC,iBAAiB,GAAIC,OAAmC,IAAK;EACtE;EACAA,OAAO,CAACC,SAAS,CAACC,QAAQ,CAACJ,sCAAsC,CAAC;AACtE,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogApiKeyAfterCreateHandler.d.ts

@@ -0,0 +1,11 @@
+import { ApiKeyAfterCreateHandler } from "@webiny/api-core/features/CreateApiKey";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogApiKeyAfterCreateHandlerImpl implements ApiKeyAfterCreateHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: ApiKeyAfterCreateHandler.Event): Promise<void>;
+}
+export declare const AuditLogApiKeyAfterCreateHandler: typeof AuditLogApiKeyAfterCreateHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/CreateApiKey").ApiKeyAfterCreateEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogApiKeyAfterCreateHandler.js

@@ -0,0 +1,47 @@
+import WebinyError from "@webiny/error";
+import { ApiKeyAfterCreateHandler } from "@webiny/api-core/features/CreateApiKey";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+/**
+ * We need to remove the token from the API Key object, as it is a security risk.
+ *
+ * We assign the API Key object explicitly, so we do not miss any new properties that might be added in the future - and they should not be in the log.
+ */
+const cleanupApiKey = apiKey => {
+  return {
+    id: apiKey.id,
+    slug: apiKey.slug,
+    createdBy: apiKey.createdBy,
+    createdOn: apiKey.createdOn,
+    description: apiKey.description,
+    name: apiKey.name,
+    permissions: apiKey.permissions
+  };
+};
+class AuditLogApiKeyAfterCreateHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        apiKey: initialApiKey
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.API_KEY.CREATE);
+      const apiKey = cleanupApiKey(initialApiKey);
+      await createAuditLog("API key created", apiKey, apiKey.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogApiKeyAfterCreateHandler",
+        code: "AUDIT_LOGS_AFTER_API_KEY_CREATE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogApiKeyAfterCreateHandler = ApiKeyAfterCreateHandler.createImplementation({
+  implementation: AuditLogApiKeyAfterCreateHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogApiKeyAfterCreateHandler.js.map

package/subscriptions/security/handlers/AuditLogApiKeyAfterCreateHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","ApiKeyAfterCreateHandler","AuditLogsContext","AUDIT","getAuditConfig","cleanupApiKey","apiKey","id","slug","createdBy","createdOn","description","name","permissions","AuditLogApiKeyAfterCreateHandlerImpl","constructor","context","handle","event","initialApiKey","payload","createAuditLog","SECURITY","API_KEY","CREATE","error","from","message","code","AuditLogApiKeyAfterCreateHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogApiKeyAfterCreateHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { ApiKeyAfterCreateHandler } from \"@webiny/api-core/features/CreateApiKey\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\nimport type { ApiKey } from \"@webiny/api-core/types/security.js\";\n\n/**\n * We need to remove the token from the API Key object, as it is a security risk.\n *\n * We assign the API Key object explicitly, so we do not miss any new properties that might be added in the future - and they should not be in the log.\n */\nconst cleanupApiKey = (apiKey: ApiKey): Omit<ApiKey, \"token\"> => {\n    return {\n        id: apiKey.id,\n        slug: apiKey.slug,\n        createdBy: apiKey.createdBy,\n        createdOn: apiKey.createdOn,\n        description: apiKey.description,\n        name: apiKey.name,\n        permissions: apiKey.permissions\n    };\n};\n\nclass AuditLogApiKeyAfterCreateHandlerImpl implements ApiKeyAfterCreateHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: ApiKeyAfterCreateHandler.Event): Promise<void> {\n        try {\n            const { apiKey: initialApiKey } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.API_KEY.CREATE);\n\n            const apiKey = cleanupApiKey(initialApiKey);\n\n            await createAuditLog(\"API key created\", apiKey, apiKey.id, this.context);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogApiKeyAfterCreateHandler\",\n                code: \"AUDIT_LOGS_AFTER_API_KEY_CREATE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogApiKeyAfterCreateHandler = ApiKeyAfterCreateHandler.createImplementation({\n    implementation: AuditLogApiKeyAfterCreateHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,wBAAwB,QAAQ,wCAAwC;AACjF,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAGvB;AACA;AACA;AACA;AACA;AACA,MAAMC,aAAa,GAAIC,MAAc,IAA4B;EAC7D,OAAO;IACHC,EAAE,EAAED,MAAM,CAACC,EAAE;IACbC,IAAI,EAAEF,MAAM,CAACE,IAAI;IACjBC,SAAS,EAAEH,MAAM,CAACG,SAAS;IAC3BC,SAAS,EAAEJ,MAAM,CAACI,SAAS;IAC3BC,WAAW,EAAEL,MAAM,CAACK,WAAW;IAC/BC,IAAI,EAAEN,MAAM,CAACM,IAAI;IACjBC,WAAW,EAAEP,MAAM,CAACO;EACxB,CAAC;AACL,CAAC;AAED,MAAMC,oCAAoC,CAA+C;EACrFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAqC,EAAiB;IAC/D,IAAI;MACA,MAAM;QAAEZ,MAAM,EAAEa;MAAc,CAAC,GAAGD,KAAK,CAACE,OAAO;MAC/C,MAAMC,cAAc,GAAGjB,cAAc,CAACD,KAAK,CAACmB,QAAQ,CAACC,OAAO,CAACC,MAAM,CAAC;MAEpE,MAAMlB,MAAM,GAAGD,aAAa,CAACc,aAAa,CAAC;MAE3C,MAAME,cAAc,CAAC,iBAAiB,EAAEf,MAAM,EAAEA,MAAM,CAACC,EAAE,EAAE,IAAI,CAACS,OAAO,CAAC;IAC5E,CAAC,CAAC,OAAOS,KAAK,EAAE;MACZ,MAAMzB,WAAW,CAAC0B,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,wDAAwD;QACjEC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,gCAAgC,GAAG5B,wBAAwB,CAAC6B,oBAAoB,CAAC;EAC1FC,cAAc,EAAEjB,oCAAoC;EACpDkB,YAAY,EAAE,CAAC9B,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogApiKeyAfterDeleteHandler.d.ts

@@ -0,0 +1,11 @@
+import { ApiKeyAfterDeleteHandler } from "@webiny/api-core/features/DeleteApiKey";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogApiKeyAfterDeleteHandlerImpl implements ApiKeyAfterDeleteHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: ApiKeyAfterDeleteHandler.Event): Promise<void>;
+}
+export declare const AuditLogApiKeyAfterDeleteHandler: typeof AuditLogApiKeyAfterDeleteHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/DeleteApiKey").ApiKeyAfterDeleteEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogApiKeyAfterDeleteHandler.js

@@ -0,0 +1,47 @@
+import WebinyError from "@webiny/error";
+import { ApiKeyAfterDeleteHandler } from "@webiny/api-core/features/DeleteApiKey";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+/**
+ * We need to remove the token from the API Key object, as it is a security risk.
+ *
+ * We assign the API Key object explicitly, so we do not miss any new properties that might be added in the future - and they should not be in the log.
+ */
+const cleanupApiKey = apiKey => {
+  return {
+    id: apiKey.id,
+    slug: apiKey.slug,
+    createdBy: apiKey.createdBy,
+    createdOn: apiKey.createdOn,
+    description: apiKey.description,
+    name: apiKey.name,
+    permissions: apiKey.permissions
+  };
+};
+class AuditLogApiKeyAfterDeleteHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        apiKey: initialApiKey
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.API_KEY.DELETE);
+      const apiKey = cleanupApiKey(initialApiKey);
+      await createAuditLog("API key deleted", apiKey, apiKey.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogApiKeyAfterDeleteHandler",
+        code: "AUDIT_LOGS_AFTER_API_KEY_DELETE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogApiKeyAfterDeleteHandler = ApiKeyAfterDeleteHandler.createImplementation({
+  implementation: AuditLogApiKeyAfterDeleteHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogApiKeyAfterDeleteHandler.js.map

package/subscriptions/security/handlers/AuditLogApiKeyAfterDeleteHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","ApiKeyAfterDeleteHandler","AuditLogsContext","AUDIT","getAuditConfig","cleanupApiKey","apiKey","id","slug","createdBy","createdOn","description","name","permissions","AuditLogApiKeyAfterDeleteHandlerImpl","constructor","context","handle","event","initialApiKey","payload","createAuditLog","SECURITY","API_KEY","DELETE","error","from","message","code","AuditLogApiKeyAfterDeleteHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogApiKeyAfterDeleteHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { ApiKeyAfterDeleteHandler } from \"@webiny/api-core/features/DeleteApiKey\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\nimport type { ApiKey } from \"@webiny/api-core/types/security.js\";\n\n/**\n * We need to remove the token from the API Key object, as it is a security risk.\n *\n * We assign the API Key object explicitly, so we do not miss any new properties that might be added in the future - and they should not be in the log.\n */\nconst cleanupApiKey = (apiKey: ApiKey): Omit<ApiKey, \"token\"> => {\n    return {\n        id: apiKey.id,\n        slug: apiKey.slug,\n        createdBy: apiKey.createdBy,\n        createdOn: apiKey.createdOn,\n        description: apiKey.description,\n        name: apiKey.name,\n        permissions: apiKey.permissions\n    };\n};\n\nclass AuditLogApiKeyAfterDeleteHandlerImpl implements ApiKeyAfterDeleteHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: ApiKeyAfterDeleteHandler.Event): Promise<void> {\n        try {\n            const { apiKey: initialApiKey } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.API_KEY.DELETE);\n\n            const apiKey = cleanupApiKey(initialApiKey);\n\n            await createAuditLog(\"API key deleted\", apiKey, apiKey.id, this.context);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogApiKeyAfterDeleteHandler\",\n                code: \"AUDIT_LOGS_AFTER_API_KEY_DELETE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogApiKeyAfterDeleteHandler = ApiKeyAfterDeleteHandler.createImplementation({\n    implementation: AuditLogApiKeyAfterDeleteHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,wBAAwB,QAAQ,wCAAwC;AACjF,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAGvB;AACA;AACA;AACA;AACA;AACA,MAAMC,aAAa,GAAIC,MAAc,IAA4B;EAC7D,OAAO;IACHC,EAAE,EAAED,MAAM,CAACC,EAAE;IACbC,IAAI,EAAEF,MAAM,CAACE,IAAI;IACjBC,SAAS,EAAEH,MAAM,CAACG,SAAS;IAC3BC,SAAS,EAAEJ,MAAM,CAACI,SAAS;IAC3BC,WAAW,EAAEL,MAAM,CAACK,WAAW;IAC/BC,IAAI,EAAEN,MAAM,CAACM,IAAI;IACjBC,WAAW,EAAEP,MAAM,CAACO;EACxB,CAAC;AACL,CAAC;AAED,MAAMC,oCAAoC,CAA+C;EACrFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAqC,EAAiB;IAC/D,IAAI;MACA,MAAM;QAAEZ,MAAM,EAAEa;MAAc,CAAC,GAAGD,KAAK,CAACE,OAAO;MAC/C,MAAMC,cAAc,GAAGjB,cAAc,CAACD,KAAK,CAACmB,QAAQ,CAACC,OAAO,CAACC,MAAM,CAAC;MAEpE,MAAMlB,MAAM,GAAGD,aAAa,CAACc,aAAa,CAAC;MAE3C,MAAME,cAAc,CAAC,iBAAiB,EAAEf,MAAM,EAAEA,MAAM,CAACC,EAAE,EAAE,IAAI,CAACS,OAAO,CAAC;IAC5E,CAAC,CAAC,OAAOS,KAAK,EAAE;MACZ,MAAMzB,WAAW,CAAC0B,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,wDAAwD;QACjEC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,gCAAgC,GAAG5B,wBAAwB,CAAC6B,oBAAoB,CAAC;EAC1FC,cAAc,EAAEjB,oCAAoC;EACpDkB,YAAY,EAAE,CAAC9B,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogApiKeyAfterUpdateHandler.d.ts

@@ -0,0 +1,11 @@
+import { ApiKeyAfterUpdateHandler } from "@webiny/api-core/features/UpdateApiKey";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogApiKeyAfterUpdateHandlerImpl implements ApiKeyAfterUpdateHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: ApiKeyAfterUpdateHandler.Event): Promise<void>;
+}
+export declare const AuditLogApiKeyAfterUpdateHandler: typeof AuditLogApiKeyAfterUpdateHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/UpdateApiKey").ApiKeyAfterUpdateEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogApiKeyAfterUpdateHandler.js

@@ -0,0 +1,52 @@
+import WebinyError from "@webiny/error";
+import { ApiKeyAfterUpdateHandler } from "@webiny/api-core/features/UpdateApiKey";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+/**
+ * We need to remove the token from the API Key object, as it is a security risk.
+ *
+ * We assign the API Key object explicitly, so we do not miss any new properties that might be added in the future - and they should not be in the log.
+ */
+const cleanupApiKey = apiKey => {
+  return {
+    id: apiKey.id,
+    slug: apiKey.slug,
+    createdBy: apiKey.createdBy,
+    createdOn: apiKey.createdOn,
+    description: apiKey.description,
+    name: apiKey.name,
+    permissions: apiKey.permissions
+  };
+};
+class AuditLogApiKeyAfterUpdateHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        updated: initialApiKey,
+        original: initialOriginalApiKey
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.API_KEY.UPDATE);
+      const apiKey = cleanupApiKey(initialApiKey);
+      const original = cleanupApiKey(initialOriginalApiKey);
+      await createAuditLog("API key updated", {
+        before: original,
+        after: apiKey
+      }, apiKey.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogApiKeyAfterUpdateHandler",
+        code: "AUDIT_LOGS_AFTER_API_KEY_UPDATE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogApiKeyAfterUpdateHandler = ApiKeyAfterUpdateHandler.createImplementation({
+  implementation: AuditLogApiKeyAfterUpdateHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogApiKeyAfterUpdateHandler.js.map

package/subscriptions/security/handlers/AuditLogApiKeyAfterUpdateHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","ApiKeyAfterUpdateHandler","AuditLogsContext","AUDIT","getAuditConfig","cleanupApiKey","apiKey","id","slug","createdBy","createdOn","description","name","permissions","AuditLogApiKeyAfterUpdateHandlerImpl","constructor","context","handle","event","updated","initialApiKey","original","initialOriginalApiKey","payload","createAuditLog","SECURITY","API_KEY","UPDATE","before","after","error","from","message","code","AuditLogApiKeyAfterUpdateHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogApiKeyAfterUpdateHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { ApiKeyAfterUpdateHandler } from \"@webiny/api-core/features/UpdateApiKey\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\nimport type { ApiKey } from \"@webiny/api-core/types/security.js\";\n\n/**\n * We need to remove the token from the API Key object, as it is a security risk.\n *\n * We assign the API Key object explicitly, so we do not miss any new properties that might be added in the future - and they should not be in the log.\n */\nconst cleanupApiKey = (apiKey: ApiKey): Omit<ApiKey, \"token\"> => {\n    return {\n        id: apiKey.id,\n        slug: apiKey.slug,\n        createdBy: apiKey.createdBy,\n        createdOn: apiKey.createdOn,\n        description: apiKey.description,\n        name: apiKey.name,\n        permissions: apiKey.permissions\n    };\n};\n\nclass AuditLogApiKeyAfterUpdateHandlerImpl implements ApiKeyAfterUpdateHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: ApiKeyAfterUpdateHandler.Event): Promise<void> {\n        try {\n            const { updated: initialApiKey, original: initialOriginalApiKey } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.API_KEY.UPDATE);\n\n            const apiKey = cleanupApiKey(initialApiKey);\n            const original = cleanupApiKey(initialOriginalApiKey);\n\n            await createAuditLog(\n                \"API key updated\",\n                {\n                    before: original,\n                    after: apiKey\n                },\n                apiKey.id,\n                this.context\n            );\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogApiKeyAfterUpdateHandler\",\n                code: \"AUDIT_LOGS_AFTER_API_KEY_UPDATE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogApiKeyAfterUpdateHandler = ApiKeyAfterUpdateHandler.createImplementation({\n    implementation: AuditLogApiKeyAfterUpdateHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,wBAAwB,QAAQ,wCAAwC;AACjF,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAGvB;AACA;AACA;AACA;AACA;AACA,MAAMC,aAAa,GAAIC,MAAc,IAA4B;EAC7D,OAAO;IACHC,EAAE,EAAED,MAAM,CAACC,EAAE;IACbC,IAAI,EAAEF,MAAM,CAACE,IAAI;IACjBC,SAAS,EAAEH,MAAM,CAACG,SAAS;IAC3BC,SAAS,EAAEJ,MAAM,CAACI,SAAS;IAC3BC,WAAW,EAAEL,MAAM,CAACK,WAAW;IAC/BC,IAAI,EAAEN,MAAM,CAACM,IAAI;IACjBC,WAAW,EAAEP,MAAM,CAACO;EACxB,CAAC;AACL,CAAC;AAED,MAAMC,oCAAoC,CAA+C;EACrFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAqC,EAAiB;IAC/D,IAAI;MACA,MAAM;QAAEC,OAAO,EAAEC,aAAa;QAAEC,QAAQ,EAAEC;MAAsB,CAAC,GAAGJ,KAAK,CAACK,OAAO;MACjF,MAAMC,cAAc,GAAGpB,cAAc,CAACD,KAAK,CAACsB,QAAQ,CAACC,OAAO,CAACC,MAAM,CAAC;MAEpE,MAAMrB,MAAM,GAAGD,aAAa,CAACe,aAAa,CAAC;MAC3C,MAAMC,QAAQ,GAAGhB,aAAa,CAACiB,qBAAqB,CAAC;MAErD,MAAME,cAAc,CAChB,iBAAiB,EACjB;QACII,MAAM,EAAEP,QAAQ;QAChBQ,KAAK,EAAEvB;MACX,CAAC,EACDA,MAAM,CAACC,EAAE,EACT,IAAI,CAACS,OACT,CAAC;IACL,CAAC,CAAC,OAAOc,KAAK,EAAE;MACZ,MAAM9B,WAAW,CAAC+B,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,wDAAwD;QACjEC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,gCAAgC,GAAGjC,wBAAwB,CAACkC,oBAAoB,CAAC;EAC1FC,cAAc,EAAEtB,oCAAoC;EACpDuB,YAAY,EAAE,CAACnC,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogRoleAfterCreateHandler.d.ts

@@ -0,0 +1,11 @@
+import { AuditLogsContext } from "../../../abstractions.js";
+import { RoleAfterCreateHandler } from "@webiny/api-core/features/security/roles/CreateRole/index.js";
+declare class AuditLogRoleAfterCreateHandlerImpl implements RoleAfterCreateHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: RoleAfterCreateHandler.Event): Promise<void>;
+}
+export declare const AuditLogRoleAfterCreateHandler: typeof AuditLogRoleAfterCreateHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/security/roles/CreateRole/events").RoleAfterCreateEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogRoleAfterCreateHandler.js

@@ -0,0 +1,30 @@
+import WebinyError from "@webiny/error";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+import { RoleAfterCreateHandler } from "@webiny/api-core/features/security/roles/CreateRole/index.js";
+class AuditLogRoleAfterCreateHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        role
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.ROLE.CREATE);
+      await createAuditLog("Role created", role, role.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogRoleAfterCreateHandler",
+        code: "AUDIT_LOGS_AFTER_ROLE_CREATE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogRoleAfterCreateHandler = RoleAfterCreateHandler.createImplementation({
+  implementation: AuditLogRoleAfterCreateHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogRoleAfterCreateHandler.js.map

package/subscriptions/security/handlers/AuditLogRoleAfterCreateHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","AuditLogsContext","AUDIT","getAuditConfig","RoleAfterCreateHandler","AuditLogRoleAfterCreateHandlerImpl","constructor","context","handle","event","role","payload","createAuditLog","SECURITY","ROLE","CREATE","id","error","from","message","code","AuditLogRoleAfterCreateHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogRoleAfterCreateHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\nimport { RoleAfterCreateHandler } from \"@webiny/api-core/features/security/roles/CreateRole/index.js\";\n\nclass AuditLogRoleAfterCreateHandlerImpl implements RoleAfterCreateHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: RoleAfterCreateHandler.Event): Promise<void> {\n        try {\n            const { role } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.ROLE.CREATE);\n\n            await createAuditLog(\"Role created\", role, role.id, this.context);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogRoleAfterCreateHandler\",\n                code: \"AUDIT_LOGS_AFTER_ROLE_CREATE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogRoleAfterCreateHandler = RoleAfterCreateHandler.createImplementation({\n    implementation: AuditLogRoleAfterCreateHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AACvB,SAASC,sBAAsB,QAAQ,8DAA8D;AAErG,MAAMC,kCAAkC,CAA6C;EACjFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAmC,EAAiB;IAC7D,IAAI;MACA,MAAM;QAAEC;MAAK,CAAC,GAAGD,KAAK,CAACE,OAAO;MAC9B,MAAMC,cAAc,GAAGT,cAAc,CAACD,KAAK,CAACW,QAAQ,CAACC,IAAI,CAACC,MAAM,CAAC;MAEjE,MAAMH,cAAc,CAAC,cAAc,EAAEF,IAAI,EAAEA,IAAI,CAACM,EAAE,EAAE,IAAI,CAACT,OAAO,CAAC;IACrE,CAAC,CAAC,OAAOU,KAAK,EAAE;MACZ,MAAMjB,WAAW,CAACkB,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,sDAAsD;QAC/DC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,8BAA8B,GAAGjB,sBAAsB,CAACkB,oBAAoB,CAAC;EACtFC,cAAc,EAAElB,kCAAkC;EAClDmB,YAAY,EAAE,CAACvB,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogRoleAfterDeleteHandler.d.ts

@@ -0,0 +1,11 @@
+import { RoleAfterDeleteHandler } from "@webiny/api-core/features/security/roles/DeleteRole/index.js";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogRoleAfterDeleteHandlerImpl implements RoleAfterDeleteHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: RoleAfterDeleteHandler.Event): Promise<void>;
+}
+export declare const AuditLogRoleAfterDeleteHandler: typeof AuditLogRoleAfterDeleteHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/security/roles/DeleteRole/events").RoleAfterDeleteEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogRoleAfterDeleteHandler.js

@@ -0,0 +1,30 @@
+import WebinyError from "@webiny/error";
+import { RoleAfterDeleteHandler } from "@webiny/api-core/features/security/roles/DeleteRole/index.js";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+class AuditLogRoleAfterDeleteHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        role
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.ROLE.DELETE);
+      await createAuditLog("Role deleted", role, role.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogRoleAfterDeleteHandler",
+        code: "AUDIT_LOGS_AFTER_ROLE_DELETE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogRoleAfterDeleteHandler = RoleAfterDeleteHandler.createImplementation({
+  implementation: AuditLogRoleAfterDeleteHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogRoleAfterDeleteHandler.js.map

package/subscriptions/security/handlers/AuditLogRoleAfterDeleteHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","RoleAfterDeleteHandler","AuditLogsContext","AUDIT","getAuditConfig","AuditLogRoleAfterDeleteHandlerImpl","constructor","context","handle","event","role","payload","createAuditLog","SECURITY","ROLE","DELETE","id","error","from","message","code","AuditLogRoleAfterDeleteHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogRoleAfterDeleteHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { RoleAfterDeleteHandler } from \"@webiny/api-core/features/security/roles/DeleteRole/index.js\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\n\nclass AuditLogRoleAfterDeleteHandlerImpl implements RoleAfterDeleteHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: RoleAfterDeleteHandler.Event): Promise<void> {\n        try {\n            const { role } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.ROLE.DELETE);\n\n            await createAuditLog(\"Role deleted\", role, role.id, this.context);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogRoleAfterDeleteHandler\",\n                code: \"AUDIT_LOGS_AFTER_ROLE_DELETE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogRoleAfterDeleteHandler = RoleAfterDeleteHandler.createImplementation({\n    implementation: AuditLogRoleAfterDeleteHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,sBAAsB,QAAQ,8DAA8D;AACrG,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAEvB,MAAMC,kCAAkC,CAA6C;EACjFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAmC,EAAiB;IAC7D,IAAI;MACA,MAAM;QAAEC;MAAK,CAAC,GAAGD,KAAK,CAACE,OAAO;MAC9B,MAAMC,cAAc,GAAGR,cAAc,CAACD,KAAK,CAACU,QAAQ,CAACC,IAAI,CAACC,MAAM,CAAC;MAEjE,MAAMH,cAAc,CAAC,cAAc,EAAEF,IAAI,EAAEA,IAAI,CAACM,EAAE,EAAE,IAAI,CAACT,OAAO,CAAC;IACrE,CAAC,CAAC,OAAOU,KAAK,EAAE;MACZ,MAAMjB,WAAW,CAACkB,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,sDAAsD;QAC/DC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,8BAA8B,GAAGpB,sBAAsB,CAACqB,oBAAoB,CAAC;EACtFC,cAAc,EAAElB,kCAAkC;EAClDmB,YAAY,EAAE,CAACtB,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogRoleAfterUpdateHandler.d.ts

@@ -0,0 +1,11 @@
+import { RoleAfterUpdateHandler } from "@webiny/api-core/features/security/roles/UpdateRole/index.js";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogRoleAfterUpdateHandlerImpl implements RoleAfterUpdateHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: RoleAfterUpdateHandler.Event): Promise<void>;
+}
+export declare const AuditLogRoleAfterUpdateHandler: typeof AuditLogRoleAfterUpdateHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/security/roles/UpdateRole/events").RoleAfterUpdateEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogRoleAfterUpdateHandler.js

@@ -0,0 +1,34 @@
+import WebinyError from "@webiny/error";
+import { RoleAfterUpdateHandler } from "@webiny/api-core/features/security/roles/UpdateRole/index.js";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+class AuditLogRoleAfterUpdateHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        updated,
+        original
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.ROLE.UPDATE);
+      await createAuditLog("Role updated", {
+        before: original,
+        after: updated
+      }, updated.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogRoleAfterUpdateHandler",
+        code: "AUDIT_LOGS_AFTER_ROLE_UPDATE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogRoleAfterUpdateHandler = RoleAfterUpdateHandler.createImplementation({
+  implementation: AuditLogRoleAfterUpdateHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogRoleAfterUpdateHandler.js.map

package/subscriptions/security/handlers/AuditLogRoleAfterUpdateHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","RoleAfterUpdateHandler","AuditLogsContext","AUDIT","getAuditConfig","AuditLogRoleAfterUpdateHandlerImpl","constructor","context","handle","event","updated","original","payload","createAuditLog","SECURITY","ROLE","UPDATE","before","after","id","error","from","message","code","AuditLogRoleAfterUpdateHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogRoleAfterUpdateHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { RoleAfterUpdateHandler } from \"@webiny/api-core/features/security/roles/UpdateRole/index.js\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\n\nclass AuditLogRoleAfterUpdateHandlerImpl implements RoleAfterUpdateHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: RoleAfterUpdateHandler.Event): Promise<void> {\n        try {\n            const { updated, original } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.ROLE.UPDATE);\n\n            await createAuditLog(\n                \"Role updated\",\n                { before: original, after: updated },\n                updated.id,\n                this.context\n            );\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogRoleAfterUpdateHandler\",\n                code: \"AUDIT_LOGS_AFTER_ROLE_UPDATE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogRoleAfterUpdateHandler = RoleAfterUpdateHandler.createImplementation({\n    implementation: AuditLogRoleAfterUpdateHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,sBAAsB,QAAQ,8DAA8D;AACrG,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAEvB,MAAMC,kCAAkC,CAA6C;EACjFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAmC,EAAiB;IAC7D,IAAI;MACA,MAAM;QAAEC,OAAO;QAAEC;MAAS,CAAC,GAAGF,KAAK,CAACG,OAAO;MAC3C,MAAMC,cAAc,GAAGT,cAAc,CAACD,KAAK,CAACW,QAAQ,CAACC,IAAI,CAACC,MAAM,CAAC;MAEjE,MAAMH,cAAc,CAChB,cAAc,EACd;QAAEI,MAAM,EAAEN,QAAQ;QAAEO,KAAK,EAAER;MAAQ,CAAC,EACpCA,OAAO,CAACS,EAAE,EACV,IAAI,CAACZ,OACT,CAAC;IACL,CAAC,CAAC,OAAOa,KAAK,EAAE;MACZ,MAAMpB,WAAW,CAACqB,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,sDAAsD;QAC/DC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,8BAA8B,GAAGvB,sBAAsB,CAACwB,oBAAoB,CAAC;EACtFC,cAAc,EAAErB,kCAAkC;EAClDsB,YAAY,EAAE,CAACzB,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogTeamAfterCreateHandler.d.ts

@@ -0,0 +1,11 @@
+import { TeamAfterCreateHandler } from "@webiny/api-core/features/CreateTeam";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogTeamAfterCreateHandlerImpl implements TeamAfterCreateHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: TeamAfterCreateHandler.Event): Promise<void>;
+}
+export declare const AuditLogTeamAfterCreateHandler: typeof AuditLogTeamAfterCreateHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/security/teams/CreateTeam/events").TeamAfterCreateEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogTeamAfterCreateHandler.js

@@ -0,0 +1,30 @@
+import WebinyError from "@webiny/error";
+import { TeamAfterCreateHandler } from "@webiny/api-core/features/CreateTeam";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+class AuditLogTeamAfterCreateHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        team
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.TEAM.CREATE);
+      await createAuditLog("Team created", team, team.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogTeamAfterCreateHandler",
+        code: "AUDIT_LOGS_AFTER_TEAM_CREATE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogTeamAfterCreateHandler = TeamAfterCreateHandler.createImplementation({
+  implementation: AuditLogTeamAfterCreateHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogTeamAfterCreateHandler.js.map

package/subscriptions/security/handlers/AuditLogTeamAfterCreateHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","TeamAfterCreateHandler","AuditLogsContext","AUDIT","getAuditConfig","AuditLogTeamAfterCreateHandlerImpl","constructor","context","handle","event","team","payload","createAuditLog","SECURITY","TEAM","CREATE","id","error","from","message","code","AuditLogTeamAfterCreateHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogTeamAfterCreateHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { TeamAfterCreateHandler } from \"@webiny/api-core/features/CreateTeam\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\n\nclass AuditLogTeamAfterCreateHandlerImpl implements TeamAfterCreateHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: TeamAfterCreateHandler.Event): Promise<void> {\n        try {\n            const { team } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.TEAM.CREATE);\n\n            await createAuditLog(\"Team created\", team, team.id, this.context);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogTeamAfterCreateHandler\",\n                code: \"AUDIT_LOGS_AFTER_TEAM_CREATE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogTeamAfterCreateHandler = TeamAfterCreateHandler.createImplementation({\n    implementation: AuditLogTeamAfterCreateHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,sBAAsB,QAAQ,sCAAsC;AAC7E,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAEvB,MAAMC,kCAAkC,CAA6C;EACjFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAmC,EAAiB;IAC7D,IAAI;MACA,MAAM;QAAEC;MAAK,CAAC,GAAGD,KAAK,CAACE,OAAO;MAC9B,MAAMC,cAAc,GAAGR,cAAc,CAACD,KAAK,CAACU,QAAQ,CAACC,IAAI,CAACC,MAAM,CAAC;MAEjE,MAAMH,cAAc,CAAC,cAAc,EAAEF,IAAI,EAAEA,IAAI,CAACM,EAAE,EAAE,IAAI,CAACT,OAAO,CAAC;IACrE,CAAC,CAAC,OAAOU,KAAK,EAAE;MACZ,MAAMjB,WAAW,CAACkB,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,sDAAsD;QAC/DC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,8BAA8B,GAAGpB,sBAAsB,CAACqB,oBAAoB,CAAC;EACtFC,cAAc,EAAElB,kCAAkC;EAClDmB,YAAY,EAAE,CAACtB,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogTeamAfterDeleteHandler.d.ts

@@ -0,0 +1,11 @@
+import { TeamAfterDeleteHandler } from "@webiny/api-core/features/DeleteTeam";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogTeamAfterDeleteHandlerImpl implements TeamAfterDeleteHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: TeamAfterDeleteHandler.Event): Promise<void>;
+}
+export declare const AuditLogTeamAfterDeleteHandler: typeof AuditLogTeamAfterDeleteHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/DeleteTeam").TeamAfterDeleteEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogTeamAfterDeleteHandler.js

@@ -0,0 +1,30 @@
+import WebinyError from "@webiny/error";
+import { TeamAfterDeleteHandler } from "@webiny/api-core/features/DeleteTeam";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+class AuditLogTeamAfterDeleteHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        team
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.TEAM.DELETE);
+      await createAuditLog("Team deleted", team, team.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogTeamAfterDeleteHandler",
+        code: "AUDIT_LOGS_AFTER_TEAM_DELETE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogTeamAfterDeleteHandler = TeamAfterDeleteHandler.createImplementation({
+  implementation: AuditLogTeamAfterDeleteHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogTeamAfterDeleteHandler.js.map

package/subscriptions/security/handlers/AuditLogTeamAfterDeleteHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","TeamAfterDeleteHandler","AuditLogsContext","AUDIT","getAuditConfig","AuditLogTeamAfterDeleteHandlerImpl","constructor","context","handle","event","team","payload","createAuditLog","SECURITY","TEAM","DELETE","id","error","from","message","code","AuditLogTeamAfterDeleteHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogTeamAfterDeleteHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { TeamAfterDeleteHandler } from \"@webiny/api-core/features/DeleteTeam\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\n\nclass AuditLogTeamAfterDeleteHandlerImpl implements TeamAfterDeleteHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: TeamAfterDeleteHandler.Event): Promise<void> {\n        try {\n            const { team } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.TEAM.DELETE);\n\n            await createAuditLog(\"Team deleted\", team, team.id, this.context);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogTeamAfterDeleteHandler\",\n                code: \"AUDIT_LOGS_AFTER_TEAM_DELETE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogTeamAfterDeleteHandler = TeamAfterDeleteHandler.createImplementation({\n    implementation: AuditLogTeamAfterDeleteHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,sBAAsB,QAAQ,sCAAsC;AAC7E,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAEvB,MAAMC,kCAAkC,CAA6C;EACjFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAmC,EAAiB;IAC7D,IAAI;MACA,MAAM;QAAEC;MAAK,CAAC,GAAGD,KAAK,CAACE,OAAO;MAC9B,MAAMC,cAAc,GAAGR,cAAc,CAACD,KAAK,CAACU,QAAQ,CAACC,IAAI,CAACC,MAAM,CAAC;MAEjE,MAAMH,cAAc,CAAC,cAAc,EAAEF,IAAI,EAAEA,IAAI,CAACM,EAAE,EAAE,IAAI,CAACT,OAAO,CAAC;IACrE,CAAC,CAAC,OAAOU,KAAK,EAAE;MACZ,MAAMjB,WAAW,CAACkB,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,sDAAsD;QAC/DC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,8BAA8B,GAAGpB,sBAAsB,CAACqB,oBAAoB,CAAC;EACtFC,cAAc,EAAElB,kCAAkC;EAClDmB,YAAY,EAAE,CAACtB,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogTeamAfterUpdateHandler.d.ts

@@ -0,0 +1,11 @@
+import { TeamAfterUpdateHandler } from "@webiny/api-core/features/UpdateTeam";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogTeamAfterUpdateHandlerImpl implements TeamAfterUpdateHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: TeamAfterUpdateHandler.Event): Promise<void>;
+}
+export declare const AuditLogTeamAfterUpdateHandler: typeof AuditLogTeamAfterUpdateHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/UpdateTeam").TeamAfterUpdateEvent>>;
+};
+export {};

package/subscriptions/security/handlers/AuditLogTeamAfterUpdateHandler.js

@@ -0,0 +1,34 @@
+import WebinyError from "@webiny/error";
+import { TeamAfterUpdateHandler } from "@webiny/api-core/features/UpdateTeam";
+import { AuditLogsContext } from "../../../abstractions.js";
+import { AUDIT } from "../../../config.js";
+import { getAuditConfig } from "../../../utils/getAuditConfig.js";
+class AuditLogTeamAfterUpdateHandlerImpl {
+  constructor(context) {
+    this.context = context;
+  }
+  async handle(event) {
+    try {
+      const {
+        updated,
+        original
+      } = event.payload;
+      const createAuditLog = getAuditConfig(AUDIT.SECURITY.TEAM.UPDATE);
+      await createAuditLog("Team updated", {
+        before: original,
+        after: updated
+      }, updated.id, this.context);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while executing AuditLogTeamAfterUpdateHandler",
+        code: "AUDIT_LOGS_AFTER_TEAM_UPDATE_HANDLER"
+      });
+    }
+  }
+}
+export const AuditLogTeamAfterUpdateHandler = TeamAfterUpdateHandler.createImplementation({
+  implementation: AuditLogTeamAfterUpdateHandlerImpl,
+  dependencies: [AuditLogsContext]
+});
+
+//# sourceMappingURL=AuditLogTeamAfterUpdateHandler.js.map

package/subscriptions/security/handlers/AuditLogTeamAfterUpdateHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","TeamAfterUpdateHandler","AuditLogsContext","AUDIT","getAuditConfig","AuditLogTeamAfterUpdateHandlerImpl","constructor","context","handle","event","updated","original","payload","createAuditLog","SECURITY","TEAM","UPDATE","before","after","id","error","from","message","code","AuditLogTeamAfterUpdateHandler","createImplementation","implementation","dependencies"],"sources":["AuditLogTeamAfterUpdateHandler.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { TeamAfterUpdateHandler } from \"@webiny/api-core/features/UpdateTeam\";\nimport { AuditLogsContext } from \"~/abstractions.js\";\nimport { AUDIT } from \"~/config.js\";\nimport { getAuditConfig } from \"~/utils/getAuditConfig.js\";\n\nclass AuditLogTeamAfterUpdateHandlerImpl implements TeamAfterUpdateHandler.Interface {\n    constructor(private context: AuditLogsContext.Interface) {}\n\n    async handle(event: TeamAfterUpdateHandler.Event): Promise<void> {\n        try {\n            const { updated, original } = event.payload;\n            const createAuditLog = getAuditConfig(AUDIT.SECURITY.TEAM.UPDATE);\n\n            await createAuditLog(\n                \"Team updated\",\n                { before: original, after: updated },\n                updated.id,\n                this.context\n            );\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing AuditLogTeamAfterUpdateHandler\",\n                code: \"AUDIT_LOGS_AFTER_TEAM_UPDATE_HANDLER\"\n            });\n        }\n    }\n}\n\nexport const AuditLogTeamAfterUpdateHandler = TeamAfterUpdateHandler.createImplementation({\n    implementation: AuditLogTeamAfterUpdateHandlerImpl,\n    dependencies: [AuditLogsContext]\n});\n"],"mappings":"AAAA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,sBAAsB,QAAQ,sCAAsC;AAC7E,SAASC,gBAAgB;AACzB,SAASC,KAAK;AACd,SAASC,cAAc;AAEvB,MAAMC,kCAAkC,CAA6C;EACjFC,WAAWA,CAASC,OAAmC,EAAE;IAAA,KAArCA,OAAmC,GAAnCA,OAAmC;EAAG;EAE1D,MAAMC,MAAMA,CAACC,KAAmC,EAAiB;IAC7D,IAAI;MACA,MAAM;QAAEC,OAAO;QAAEC;MAAS,CAAC,GAAGF,KAAK,CAACG,OAAO;MAC3C,MAAMC,cAAc,GAAGT,cAAc,CAACD,KAAK,CAACW,QAAQ,CAACC,IAAI,CAACC,MAAM,CAAC;MAEjE,MAAMH,cAAc,CAChB,cAAc,EACd;QAAEI,MAAM,EAAEN,QAAQ;QAAEO,KAAK,EAAER;MAAQ,CAAC,EACpCA,OAAO,CAACS,EAAE,EACV,IAAI,CAACZ,OACT,CAAC;IACL,CAAC,CAAC,OAAOa,KAAK,EAAE;MACZ,MAAMpB,WAAW,CAACqB,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,sDAAsD;QAC/DC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ;AAEA,OAAO,MAAMC,8BAA8B,GAAGvB,sBAAsB,CAACwB,oBAAoB,CAAC;EACtFC,cAAc,EAAErB,kCAAkC;EAClDsB,YAAY,EAAE,CAACzB,gBAAgB;AACnC,CAAC,CAAC","ignoreList":[]}

package/subscriptions/security/handlers/AuditLogUserAfterCreateHandler.d.ts

@@ -0,0 +1,11 @@
+import { UserAfterCreateHandler } from "@webiny/api-core/features/CreateUser";
+import { AuditLogsContext } from "../../../abstractions.js";
+declare class AuditLogUserAfterCreateHandlerImpl implements UserAfterCreateHandler.Interface {
+    private context;
+    constructor(context: AuditLogsContext.Interface);
+    handle(event: UserAfterCreateHandler.Event): Promise<void>;
+}
+export declare const AuditLogUserAfterCreateHandler: typeof AuditLogUserAfterCreateHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/CreateUser").UserAfterCreateEvent>>;
+};
+export {};