@xyo-network/sdk-js 3.0.15 → 3.1.1

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/ArchiveAccount/index.js

@@ -0,0 +1,5 @@
+import passport from 'passport';
+export const archiveAccountStrategyName = 'archiveAccount';
+export const archiveAccountStrategy = passport.authenticate(archiveAccountStrategyName, { session: false });
+export * from './archiveAccountStrategy';
+//# sourceMappingURL=index.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/ArchiveAccount/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/ArchiveAccount/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAA;AAE/B,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAA;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC,YAAY,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;AAE3G,cAAc,0BAA0B,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/ArchiveAccount/verifyOperationAllowedByAddress.d.ts

@@ -0,0 +1,5 @@
+import { NoReqQuery } from '@xylabs/sdk-api-express-ecs';
+import { ArchiveLocals, ArchivePathParams, XyoBoundWitnessWithMeta } from '@xyo-network/node-core-model';
+import { Request } from 'express';
+export declare const verifyOperationAllowedByAddress: (req: Request<ArchivePathParams, unknown, XyoBoundWitnessWithMeta[], NoReqQuery, ArchiveLocals>) => Promise<boolean>;
+//# sourceMappingURL=verifyOperationAllowedByAddress.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/ArchiveAccount/verifyOperationAllowedByAddress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyOperationAllowedByAddress.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/ArchiveAccount/verifyOperationAllowedByAddress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAIxD,OAAO,EACL,aAAa,EACb,iBAAiB,EAGjB,uBAAuB,EACxB,MAAM,8BAA8B,CAAA;AAErC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAsDjC,eAAO,MAAM,+BAA+B,QACrC,QAAQ,iBAAiB,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,KAC7F,QAAQ,OAAO,CAoBjB,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/ArchiveAccount/verifyOperationAllowedByAddress.js

@@ -0,0 +1,77 @@
+import { isRequestUserOwnerOfRequestedArchive } from '@xyo-network/express-node-lib';
+import { trimAddressPrefix } from '@xyo-network/node-core-lib';
+import { SetArchivePermissionsSchema, } from '@xyo-network/node-core-model';
+const defaultArchivePermissions = {
+    schema: SetArchivePermissionsSchema,
+};
+const getArchivePermissions = async (req, archive) => {
+    const permissionsArchivist = await req.app.archivePermissionsArchivistFactory(archive);
+    const permissions = await permissionsArchivist.get([archive]);
+    return permissions && permissions?.[0] ? permissions?.[0] : defaultArchivePermissions;
+};
+const verifyAccountAllowed = (address, permissions) => {
+    const allowedAddresses = permissions?.addresses?.allow;
+    const disallowedAddresses = permissions?.addresses?.reject;
+    // If there's address restrictions on the archive and this
+    // is an anonymous request
+    if ((allowedAddresses || disallowedAddresses) && !address)
+        return false;
+    // If there's rejected addresses
+    if (disallowedAddresses) {
+        // And this address is one of them
+        if (disallowedAddresses.some((disallowed) => trimAddressPrefix(disallowed.toLowerCase()) === address?.toLowerCase()))
+            return false;
+    }
+    // If there's allowed addresses
+    if (allowedAddresses) {
+        // Return true if this address is allowed, otherwise false
+        return allowedAddresses.some((allowed) => trimAddressPrefix(allowed.toLowerCase()) === address?.toLowerCase()) ? true : false;
+    }
+    return true;
+};
+const verifySchemaAllowed = (schema, permissions) => {
+    const allowedSchemas = permissions?.schemas?.allow;
+    const disallowedSchemas = permissions?.schemas?.reject;
+    // If there's no schema restrictions on the archive
+    if (!allowedSchemas && !disallowedSchemas)
+        return true;
+    // TODO: Support GLOB patterns for allowed/disallowed schemas
+    // If there's rejected schemas
+    if (disallowedSchemas) {
+        // And this schema is one of them
+        if (disallowedSchemas.some((disallowed) => disallowed.toLowerCase() === schema.toLowerCase()))
+            return false;
+    }
+    // If there's allowed schemas
+    if (allowedSchemas) {
+        // Return true if this schema is allowed, otherwise false
+        return allowedSchemas.some((allowed) => allowed.toLowerCase() === schema.toLowerCase()) ? true : false;
+    }
+    return true;
+};
+export const verifyOperationAllowedByAddress = async (req) => {
+    // NOTE: Communicate partial success for allowed/disallowed operations
+    // Short circuit & reduce all operations to binary success/failure for now
+    // Get archive permissions
+    const { archive } = req.params;
+    if (!archive)
+        return false;
+    if (isRequestUserOwnerOfRequestedArchive(req))
+        return true;
+    const permissions = await getArchivePermissions(req, archive);
+    const address = req?.user?.address ? trimAddressPrefix(req?.user?.address?.toLowerCase()) : undefined;
+    if (!verifyAccountAllowed(address, permissions))
+        return false;
+    for (let i = 0; i < req.body.length; i++) {
+        const bw = req.body[i];
+        if (bw._payloads?.length) {
+            for (let j = 0; j < bw._payloads.length; j++) {
+                const p = bw._payloads[j];
+                if (!p.schema || !verifySchemaAllowed(p.schema, permissions))
+                    return false;
+            }
+        }
+    }
+    return true;
+};
+//# sourceMappingURL=verifyOperationAllowedByAddress.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/ArchiveAccount/verifyOperationAllowedByAddress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyOperationAllowedByAddress.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/ArchiveAccount/verifyOperationAllowedByAddress.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,EAIL,2BAA2B,GAE5B,MAAM,8BAA8B,CAAA;AAIrC,MAAM,yBAAyB,GAA0B;IACvD,MAAM,EAAE,2BAA2B;CACpC,CAAA;AAED,MAAM,qBAAqB,GAAG,KAAK,EAAE,GAAiD,EAAE,OAAe,EAAkC,EAAE;IACzI,MAAM,oBAAoB,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,kCAAkC,CAAC,OAAO,CAAC,CAAA;IACtF,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7D,OAAO,WAAW,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAA;AACvF,CAAC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAAC,OAA2B,EAAE,WAAkC,EAAW,EAAE;IACxG,MAAM,gBAAgB,GAAG,WAAW,EAAE,SAAS,EAAE,KAAK,CAAA;IACtD,MAAM,mBAAmB,GAAG,WAAW,EAAE,SAAS,EAAE,MAAM,CAAA;IAE1D,0DAA0D;IAC1D,0BAA0B;IAC1B,IAAI,CAAC,gBAAgB,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAEvE,gCAAgC;IAChC,IAAI,mBAAmB,EAAE;QACvB,kCAAkC;QAClC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;YAAE,OAAO,KAAK,CAAA;KACnI;IACD,+BAA+B;IAC/B,IAAI,gBAAgB,EAAE;QACpB,0DAA0D;QAC1D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;KAC9H;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AACD,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAE,WAAkC,EAAW,EAAE;IAC1F,MAAM,cAAc,GAAG,WAAW,EAAE,OAAO,EAAE,KAAK,CAAA;IAClD,MAAM,iBAAiB,GAAG,WAAW,EAAE,OAAO,EAAE,MAAM,CAAA;IAEtD,mDAAmD;IACnD,IAAI,CAAC,cAAc,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAA;IAEtD,6DAA6D;IAE7D,8BAA8B;IAC9B,IAAI,iBAAiB,EAAE;QACrB,iCAAiC;QACjC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5G;IACD,6BAA6B;IAC7B,IAAI,cAAc,EAAE;QAClB,yDAAyD;QACzD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;KACvG;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,EAClD,GAA8F,EAC5E,EAAE;IACpB,sEAAsE;IACtE,0EAA0E;IAC1E,0BAA0B;IAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAA;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,IAAI,oCAAoC,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACrG,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE;YACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBAC5C,MAAM,CAAC,GAAe,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;gBACrC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC;oBAAE,OAAO,KAAK,CAAA;aAC3E;SACF;KACF;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/adminApiKey/adminApiKeyStrategy.d.ts

@@ -0,0 +1,12 @@
+import 'reflect-metadata';
+import { Logger } from '@xylabs/sdk-api-express-ecs';
+import { Request } from 'express';
+import { Strategy, StrategyCreated, StrategyCreatedStatic } from 'passport';
+export declare class AdminApiKeyStrategy extends Strategy {
+    readonly apiKey: string;
+    readonly logger: Logger;
+    readonly apiKeyHeader: string;
+    constructor(apiKey: string, logger: Logger, apiKeyHeader?: string);
+    authenticate(this: StrategyCreated<this, this & StrategyCreatedStatic>, req: Request, _options?: unknown): void;
+}
+//# sourceMappingURL=adminApiKeyStrategy.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/adminApiKey/adminApiKeyStrategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adminApiKeyStrategy.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/adminApiKey/adminApiKeyStrategy.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAA;AAEzB,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAE3E,qBACa,mBAAoB,SAAQ,QAAQ;aAEP,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,MAAM;aACpC,YAAY;gBAFU,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACpC,YAAY,SAAc;IAKnC,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO;CAalH"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/adminApiKey/adminApiKeyStrategy.js

@@ -0,0 +1,38 @@
+import { __decorate, __metadata, __param } from "tslib";
+import 'reflect-metadata';
+import { TYPES } from '@xyo-network/node-core-types';
+import { inject, injectable } from 'inversify';
+import { Strategy } from 'passport';
+let AdminApiKeyStrategy = class AdminApiKeyStrategy extends Strategy {
+    apiKey;
+    logger;
+    apiKeyHeader;
+    constructor(apiKey, logger, apiKeyHeader = 'x-api-key') {
+        super();
+        this.apiKey = apiKey;
+        this.logger = logger;
+        this.apiKeyHeader = apiKeyHeader;
+    }
+    authenticate(req, _options) {
+        try {
+            if (req.headers[this.apiKeyHeader] !== this.apiKey) {
+                this.fail('Invalid API key');
+                return;
+            }
+            this.success(req.user || {});
+            return;
+        }
+        catch (error) {
+            this.logger.error(JSON.stringify(error, null, 2));
+            this.error({ message: 'Admin API Key Auth Error' });
+        }
+    }
+};
+AdminApiKeyStrategy = __decorate([
+    injectable(),
+    __param(0, inject(TYPES.ApiKey)),
+    __param(1, inject(TYPES.Logger)),
+    __metadata("design:paramtypes", [String, Object, Object])
+], AdminApiKeyStrategy);
+export { AdminApiKeyStrategy };
+//# sourceMappingURL=adminApiKeyStrategy.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/adminApiKey/adminApiKeyStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adminApiKeyStrategy.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/adminApiKey/adminApiKeyStrategy.ts"],"names":[],"mappings":";AAAA,OAAO,kBAAkB,CAAA;AAGzB,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEpD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAA0C,MAAM,UAAU,CAAA;AAGpE,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,QAAQ;IAEP;IACA;IACtB;IAHlB,YACwC,MAAc,EACd,MAAc,EACpC,eAAe,WAAW;QAE1C,KAAK,EAAE,CAAA;QAJ+B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACpC,iBAAY,GAAZ,YAAY,CAAc;IAG5C,CAAC;IAEQ,YAAY,CAA4D,GAAY,EAAE,QAAkB;QAC/G,IAAI;YACF,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE;gBAClD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;gBAC5B,OAAM;aACP;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;YAC5B,OAAM;SACP;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACjD,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAA;SACpD;IACH,CAAC;CACF,CAAA;AAtBY,mBAAmB;IAD/B,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACpB,WAAA,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;;GAHZ,mBAAmB,CAsB/B;SAtBY,mBAAmB"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/adminApiKey/index.d.ts

@@ -0,0 +1,4 @@
+export declare const adminApiKeyStrategyName = "adminApiKey";
+export declare const adminApiKeyStrategy: any;
+export * from './adminApiKeyStrategy';
+//# sourceMappingURL=index.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/adminApiKey/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/adminApiKey/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,gBAAgB,CAAA;AACpD,eAAO,MAAM,mBAAmB,KAAqE,CAAA;AAErG,cAAc,uBAAuB,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/adminApiKey/index.js

@@ -0,0 +1,5 @@
+import passport from 'passport';
+export const adminApiKeyStrategyName = 'adminApiKey';
+export const adminApiKeyStrategy = passport.authenticate(adminApiKeyStrategyName, { session: false });
+export * from './adminApiKeyStrategy';
+//# sourceMappingURL=index.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/adminApiKey/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/adminApiKey/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAA;AAE/B,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAA;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,YAAY,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;AAErG,cAAc,uBAAuB,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/allowUnauthenticated/allowUnauthenticatedStrategy.d.ts

@@ -0,0 +1,16 @@
+import { Request } from 'express';
+import { Strategy, StrategyCreated, StrategyCreatedStatic } from 'passport';
+/**
+ * Authentication scheme which allows for unauthenticated requests for use in
+ * routes which provide a satisfactory experience without being logged in but
+ * could also provide a richer experience for users who are logged in. If auth
+ * is supplied via API Key or Authorization header, this strategy will fail in
+ * deference to those strategies, allowing those strategies to take precedence
+ * if supplied.
+ */
+export declare class AllowUnauthenticatedStrategy extends Strategy {
+    readonly apiKeyHeader: string;
+    constructor(apiKeyHeader?: string);
+    authenticate(this: StrategyCreated<this, this & StrategyCreatedStatic>, req: Request, _options?: unknown): void;
+}
+//# sourceMappingURL=allowUnauthenticatedStrategy.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/allowUnauthenticated/allowUnauthenticatedStrategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowUnauthenticatedStrategy.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/allowUnauthenticated/allowUnauthenticatedStrategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAE3E;;;;;;;GAOG;AACH,qBAAa,4BAA6B,SAAQ,QAAQ;aAC5B,YAAY;gBAAZ,YAAY,SAAc;IAI7C,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO;CAoBlH"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/allowUnauthenticated/allowUnauthenticatedStrategy.js

@@ -0,0 +1,37 @@
+import { getHttpHeader } from '@xylabs/sdk-api-express-ecs';
+import { Strategy } from 'passport';
+/**
+ * Authentication scheme which allows for unauthenticated requests for use in
+ * routes which provide a satisfactory experience without being logged in but
+ * could also provide a richer experience for users who are logged in. If auth
+ * is supplied via API Key or Authorization header, this strategy will fail in
+ * deference to those strategies, allowing those strategies to take precedence
+ * if supplied.
+ */
+export class AllowUnauthenticatedStrategy extends Strategy {
+    apiKeyHeader;
+    constructor(apiKeyHeader = 'x-api-key') {
+        super();
+        this.apiKeyHeader = apiKeyHeader;
+    }
+    authenticate(req, _options) {
+        try {
+            const apiKey = getHttpHeader(this.apiKeyHeader, req);
+            if (apiKey) {
+                this.fail('API key header supplied');
+                return;
+            }
+            const authHeader = req.headers.authorization;
+            if (authHeader) {
+                this.fail('Authorization header supplied');
+                return;
+            }
+            this.success(req.user || {});
+            return;
+        }
+        catch (error) {
+            this.error({ message: 'AllowUnauthenticated Auth Error' });
+        }
+    }
+}
+//# sourceMappingURL=allowUnauthenticatedStrategy.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/allowUnauthenticated/allowUnauthenticatedStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowUnauthenticatedStrategy.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/allowUnauthenticated/allowUnauthenticatedStrategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAE3D,OAAO,EAAE,QAAQ,EAA0C,MAAM,UAAU,CAAA;AAE3E;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA6B,SAAQ,QAAQ;IAC5B;IAA5B,YAA4B,eAAe,WAAW;QACpD,KAAK,EAAE,CAAA;QADmB,iBAAY,GAAZ,YAAY,CAAc;IAEtD,CAAC;IAEQ,YAAY,CAA4D,GAAY,EAAE,QAAkB;QAC/G,IAAI;YACF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;YACpD,IAAI,MAAM,EAAE;gBACV,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;gBACpC,OAAM;aACP;YAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAA;YAC5C,IAAI,UAAU,EAAE;gBACd,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;gBAC1C,OAAM;aACP;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;YAC5B,OAAM;SACP;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAA;SAC3D;IACH,CAAC;CACF"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/allowUnauthenticated/index.d.ts

@@ -0,0 +1,4 @@
+export declare const allowUnauthenticatedStrategyName = "allowUnauthenticated";
+export declare const allowUnauthenticatedStrategy: any;
+export * from './allowUnauthenticatedStrategy';
+//# sourceMappingURL=index.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/allowUnauthenticated/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/allowUnauthenticated/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gCAAgC,yBAAyB,CAAA;AACtE,eAAO,MAAM,4BAA4B,KAA8E,CAAA;AAEvH,cAAc,gCAAgC,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/allowUnauthenticated/index.js

@@ -0,0 +1,5 @@
+import passport from 'passport';
+export const allowUnauthenticatedStrategyName = 'allowUnauthenticated';
+export const allowUnauthenticatedStrategy = passport.authenticate(allowUnauthenticatedStrategyName, { session: false });
+export * from './allowUnauthenticatedStrategy';
+//# sourceMappingURL=index.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/allowUnauthenticated/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/allowUnauthenticated/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAA;AAE/B,MAAM,CAAC,MAAM,gCAAgC,GAAG,sBAAsB,CAAA;AACtE,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC,YAAY,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;AAEvH,cAAc,gCAAgC,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveAccessControl/archiveAccessControlStrategy.d.ts

@@ -0,0 +1,9 @@
+import { NoReqBody, NoReqQuery, NoResBody } from '@xylabs/sdk-api-express-ecs';
+import { ArchiveLocals, ArchivePathParams } from '@xyo-network/node-core-model';
+import { Request } from 'express';
+import { Strategy, StrategyCreated, StrategyCreatedStatic } from 'passport';
+export declare class ArchiveAccessControlStrategy extends Strategy {
+    constructor();
+    authenticate(this: StrategyCreated<this, this & StrategyCreatedStatic>, req: Request<ArchivePathParams, NoResBody, NoReqBody, NoReqQuery, ArchiveLocals>, _options?: unknown): void;
+}
+//# sourceMappingURL=archiveAccessControlStrategy.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveAccessControl/archiveAccessControlStrategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archiveAccessControlStrategy.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveAccessControl/archiveAccessControlStrategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAA;AAE9E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAE3E,qBAAa,4BAA6B,SAAQ,QAAQ;;IAI/C,YAAY,CACnB,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,qBAAqB,CAAC,EACzD,GAAG,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,EAChF,QAAQ,CAAC,EAAE,OAAO;CAuBrB"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveAccessControl/archiveAccessControlStrategy.js

@@ -0,0 +1,33 @@
+import { isLegacyPrivateArchive, isRequestUserOwnerOfRequestedArchive } from '@xyo-network/express-node-lib';
+import { StatusCodes } from 'http-status-codes';
+import { Strategy } from 'passport';
+export class ArchiveAccessControlStrategy extends Strategy {
+    constructor() {
+        super();
+    }
+    authenticate(req, _options) {
+        try {
+            // If it's not a public archive
+            if (isLegacyPrivateArchive(req.res?.locals?.archive)) {
+                // We require auth
+                if (!req?.user?.id) {
+                    this.fail('Archive requires authorization', StatusCodes.UNAUTHORIZED);
+                    return;
+                }
+                else {
+                    // Check if user has access to this archive
+                    if (!isRequestUserOwnerOfRequestedArchive(req)) {
+                        this.fail('User not authorized for archive', StatusCodes.FORBIDDEN);
+                        return;
+                    }
+                }
+            }
+            this.success(req.user || {});
+            return;
+        }
+        catch (error) {
+            this.error({ message: 'ArchiveAccessControlStrategy Auth Error' });
+        }
+    }
+}
+//# sourceMappingURL=archiveAccessControlStrategy.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveAccessControl/archiveAccessControlStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archiveAccessControlStrategy.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveAccessControl/archiveAccessControlStrategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AAG5G,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAA0C,MAAM,UAAU,CAAA;AAE3E,MAAM,OAAO,4BAA6B,SAAQ,QAAQ;IACxD;QACE,KAAK,EAAE,CAAA;IACT,CAAC;IACQ,YAAY,CAEnB,GAAgF,EAChF,QAAkB;QAElB,IAAI;YACF,+BAA+B;YAC/B,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;gBACpD,kBAAkB;gBAClB,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;oBAClB,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE,WAAW,CAAC,YAAY,CAAC,CAAA;oBACrE,OAAM;iBACP;qBAAM;oBACL,2CAA2C;oBAC3C,IAAI,CAAC,oCAAoC,CAAC,GAAG,CAAC,EAAE;wBAC9C,IAAI,CAAC,IAAI,CAAC,iCAAiC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;wBACnE,OAAM;qBACP;iBACF;aACF;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;YAC5B,OAAM;SACP;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAA;SACnE;IACH,CAAC;CACF"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveAccessControl/index.d.ts

@@ -0,0 +1,4 @@
+export declare const archiveAccessControlStrategyName = "archiveAccessControl";
+export declare const archiveAccessControlStrategy: any;
+export * from './archiveAccessControlStrategy';
+//# sourceMappingURL=index.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveAccessControl/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveAccessControl/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gCAAgC,yBAAyB,CAAA;AACtE,eAAO,MAAM,4BAA4B,KAA8E,CAAA;AAEvH,cAAc,gCAAgC,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveAccessControl/index.js

@@ -0,0 +1,5 @@
+import passport from 'passport';
+export const archiveAccessControlStrategyName = 'archiveAccessControl';
+export const archiveAccessControlStrategy = passport.authenticate(archiveAccessControlStrategyName, { session: false });
+export * from './archiveAccessControlStrategy';
+//# sourceMappingURL=index.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveAccessControl/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveAccessControl/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAA;AAE/B,MAAM,CAAC,MAAM,gCAAgC,GAAG,sBAAsB,CAAA;AACtE,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC,YAAY,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;AAEvH,cAAc,gCAAgC,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveApiKey/archiveApiKeyStrategy.d.ts

@@ -0,0 +1,13 @@
+import 'reflect-metadata';
+import { ArchiveArchivist, ArchiveKeyRepository, UserManager } from '@xyo-network/node-core-model';
+import { Request } from 'express';
+import { Strategy, StrategyCreated, StrategyCreatedStatic } from 'passport';
+export declare class ArchiveApiKeyStrategy extends Strategy {
+    readonly archiveArchivist: ArchiveArchivist;
+    readonly archiveKeyRepository: ArchiveKeyRepository;
+    readonly userManager: UserManager;
+    readonly apiKeyHeader: string;
+    constructor(archiveArchivist: ArchiveArchivist, archiveKeyRepository: ArchiveKeyRepository, userManager: UserManager, apiKeyHeader?: string);
+    authenticate(this: StrategyCreated<this, this & StrategyCreatedStatic>, req: Request, _options?: unknown): Promise<void>;
+}
+//# sourceMappingURL=archiveApiKeyStrategy.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveApiKey/archiveApiKeyStrategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archiveApiKeyStrategy.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveApiKey/archiveApiKeyStrategy.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAA;AAIzB,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAElG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAE3E,qBACa,qBAAsB,SAAQ,QAAQ;aAEC,gBAAgB,EAAE,gBAAgB;aAC9B,oBAAoB,EAAE,oBAAoB;aACnD,WAAW,EAAE,WAAW;aACnD,YAAY;gBAHoB,gBAAgB,EAAE,gBAAgB,EAC9B,oBAAoB,EAAE,oBAAoB,EACnD,WAAW,EAAE,WAAW,EACnD,YAAY,SAAc;IAI7B,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO;CAiDxH"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveApiKey/archiveApiKeyStrategy.js

@@ -0,0 +1,78 @@
+import { __decorate, __metadata, __param } from "tslib";
+import 'reflect-metadata';
+import { exists } from '@xylabs/exists';
+import { getHttpHeader } from '@xylabs/sdk-api-express-ecs';
+import { TYPES } from '@xyo-network/node-core-types';
+import { inject, injectable } from 'inversify';
+import { Strategy } from 'passport';
+let ArchiveApiKeyStrategy = class ArchiveApiKeyStrategy extends Strategy {
+    archiveArchivist;
+    archiveKeyRepository;
+    userManager;
+    apiKeyHeader;
+    constructor(archiveArchivist, archiveKeyRepository, userManager, apiKeyHeader = 'x-api-key') {
+        super();
+        this.archiveArchivist = archiveArchivist;
+        this.archiveKeyRepository = archiveKeyRepository;
+        this.userManager = userManager;
+        this.apiKeyHeader = apiKeyHeader;
+    }
+    async authenticate(req, _options) {
+        try {
+            const apiKey = getHttpHeader(this.apiKeyHeader, req)?.toLowerCase();
+            if (!apiKey) {
+                this.fail('Missing API key in header');
+                return;
+            }
+            let { archive } = req.params;
+            // If the request pertains to an archive
+            if (archive) {
+                // Validate API Key is valid for the archive
+                const result = await this.archiveKeyRepository.find({ archive });
+                const keys = result.filter(exists).map((key) => key.key.toLowerCase());
+                if (!keys.includes(apiKey)) {
+                    this.fail('Invalid API key');
+                    return;
+                }
+            }
+            else {
+                // Otherwise validate the API Key is a valid key in general
+                const exists = await this.archiveKeyRepository.find({ key: apiKey });
+                const archiveForKey = exists.pop()?.archive;
+                if (archiveForKey) {
+                    archive = archiveForKey;
+                }
+                else {
+                    this.fail('Invalid API key');
+                    return;
+                }
+            }
+            // Get the archive owner
+            const existingArchives = await this.archiveArchivist.get([archive]);
+            const existingArchive = existingArchives.pop();
+            if (!existingArchive || !existingArchive?.user) {
+                this.fail('Invalid user');
+                return;
+            }
+            const user = await this.userManager.findById(existingArchive.user);
+            if (!user) {
+                this.fail('Invalid user');
+                return;
+            }
+            this.success(user);
+            return;
+        }
+        catch (error) {
+            this.error({ message: 'Archive API Key Auth Error' });
+        }
+    }
+};
+ArchiveApiKeyStrategy = __decorate([
+    injectable(),
+    __param(0, inject(TYPES.ArchiveArchivist)),
+    __param(1, inject(TYPES.ArchiveKeyRepository)),
+    __param(2, inject(TYPES.UserManager)),
+    __metadata("design:paramtypes", [Object, Object, Object, Object])
+], ArchiveApiKeyStrategy);
+export { ArchiveApiKeyStrategy };
+//# sourceMappingURL=archiveApiKeyStrategy.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveApiKey/archiveApiKeyStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archiveApiKeyStrategy.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveApiKey/archiveApiKeyStrategy.ts"],"names":[],"mappings":";AAAA,OAAO,kBAAkB,CAAA;AAEzB,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAE3D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEpD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAA0C,MAAM,UAAU,CAAA;AAGpE,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,QAAQ;IAEC;IACI;IACT;IAC3B;IAJlB,YACkD,gBAAkC,EAC9B,oBAA0C,EACnD,WAAwB,EACnD,eAAe,WAAW;QAE1C,KAAK,EAAE,CAAA;QALyC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAC9B,yBAAoB,GAApB,oBAAoB,CAAsB;QACnD,gBAAW,GAAX,WAAW,CAAa;QACnD,iBAAY,GAAZ,YAAY,CAAc;IAG5C,CAAC;IACQ,KAAK,CAAC,YAAY,CAA4D,GAAY,EAAE,QAAkB;QACrH,IAAI;YACF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAA;YACnE,IAAI,CAAC,MAAM,EAAE;gBACX,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;gBACtC,OAAM;aACP;YAED,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAA;YAC5B,wCAAwC;YACxC,IAAI,OAAO,EAAE;gBACX,4CAA4C;gBAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;gBAChE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;gBACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;oBAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;oBAC5B,OAAM;iBACP;aACF;iBAAM;gBACL,2DAA2D;gBAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;gBACpE,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,CAAA;gBAC3C,IAAI,aAAa,EAAE;oBACjB,OAAO,GAAG,aAAa,CAAA;iBACxB;qBAAM;oBACL,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;oBAC5B,OAAM;iBACP;aACF;YAED,wBAAwB;YACxB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;YACnE,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAA;YAC9C,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE;gBAC9C,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;gBACzB,OAAM;aACP;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;YAClE,IAAI,CAAC,IAAI,EAAE;gBACT,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;gBACzB,OAAM;aACP;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAClB,OAAM;SACP;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAA;SACtD;IACH,CAAC;CACF,CAAA;AA1DY,qBAAqB;IADjC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC9B,WAAA,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAClC,WAAA,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;;GAJjB,qBAAqB,CA0DjC;SA1DY,qBAAqB"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveApiKey/index.d.ts

@@ -0,0 +1,4 @@
+export declare const archiveApiKeyStrategyName = "archiveApiKey";
+export declare const archiveApiKeyStrategy: any;
+export * from './archiveApiKeyStrategy';
+//# sourceMappingURL=index.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveApiKey/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveApiKey/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,yBAAyB,kBAAkB,CAAA;AACxD,eAAO,MAAM,qBAAqB,KAAuE,CAAA;AAEzG,cAAc,yBAAyB,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveApiKey/index.js

@@ -0,0 +1,5 @@
+import passport from 'passport';
+export const archiveApiKeyStrategyName = 'archiveApiKey';
+export const archiveApiKeyStrategy = passport.authenticate(archiveApiKeyStrategyName, { session: false });
+export * from './archiveApiKeyStrategy';
+//# sourceMappingURL=index.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveApiKey/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveApiKey/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAA;AAE/B,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAA;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,YAAY,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;AAEzG,cAAc,yBAAyB,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/archiveOwnerStrategy.d.ts

@@ -0,0 +1,7 @@
+import { Request } from 'express';
+import { Strategy, StrategyCreated, StrategyCreatedStatic } from 'passport';
+export declare class ArchiveOwnerStrategy extends Strategy {
+    constructor();
+    authenticate(this: StrategyCreated<this, this & StrategyCreatedStatic>, req: Request, _options?: unknown): Promise<void>;
+}
+//# sourceMappingURL=archiveOwnerStrategy.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/archiveOwnerStrategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archiveOwnerStrategy.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveOwner/archiveOwnerStrategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAI3E,qBAAa,oBAAqB,SAAQ,QAAQ;;IAIjC,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO;CAkBxH"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/archiveOwnerStrategy.js

@@ -0,0 +1,28 @@
+import { StatusCodes } from 'http-status-codes';
+import { Strategy } from 'passport';
+import { verifyArchiveOwner } from './verifyArchiveOwner';
+export class ArchiveOwnerStrategy extends Strategy {
+    constructor() {
+        super();
+    }
+    async authenticate(req, _options) {
+        try {
+            const { user } = req;
+            if (!user) {
+                this.fail('Invalid user');
+                return;
+            }
+            const isArchiveOwner = await verifyArchiveOwner(req);
+            if (!isArchiveOwner) {
+                this.fail('User not authorized for archive', StatusCodes.FORBIDDEN);
+                return;
+            }
+            this.success(user);
+            return;
+        }
+        catch (error) {
+            this.error({ message: 'ArchiveOwner Auth Error' });
+        }
+    }
+}
+//# sourceMappingURL=archiveOwnerStrategy.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/archiveOwnerStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archiveOwnerStrategy.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveOwner/archiveOwnerStrategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAA0C,MAAM,UAAU,CAAA;AAE3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAEzD,MAAM,OAAO,oBAAqB,SAAQ,QAAQ;IAChD;QACE,KAAK,EAAE,CAAA;IACT,CAAC;IACQ,KAAK,CAAC,YAAY,CAA4D,GAAY,EAAE,QAAkB;QACrH,IAAI;YACF,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAA;YACpB,IAAI,CAAC,IAAI,EAAE;gBACT,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;gBACzB,OAAM;aACP;YACD,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAA;YACpD,IAAI,CAAC,cAAc,EAAE;gBACnB,IAAI,CAAC,IAAI,CAAC,iCAAiC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;gBACnE,OAAM;aACP;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAClB,OAAM;SACP;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAA;SACnD;IACH,CAAC;CACF"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/index.d.ts

@@ -0,0 +1,4 @@
+export declare const archiveOwnerStrategyName = "archiveOwner";
+export declare const archiveOwnerStrategy: any;
+export * from './archiveOwnerStrategy';
+//# sourceMappingURL=index.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveOwner/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,wBAAwB,iBAAiB,CAAA;AACtD,eAAO,MAAM,oBAAoB,KAAsE,CAAA;AAEvG,cAAc,wBAAwB,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/index.js

@@ -0,0 +1,5 @@
+import passport from 'passport';
+export const archiveOwnerStrategyName = 'archiveOwner';
+export const archiveOwnerStrategy = passport.authenticate(archiveOwnerStrategyName, { session: false });
+export * from './archiveOwnerStrategy';
+//# sourceMappingURL=index.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveOwner/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAA;AAE/B,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAA;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAC,YAAY,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;AAEvG,cAAc,wBAAwB,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/verifyArchiveOwner.d.ts

@@ -0,0 +1,3 @@
+import { Request } from 'express';
+export declare const verifyArchiveOwner: (req: Request) => Promise<boolean>;
+//# sourceMappingURL=verifyArchiveOwner.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/verifyArchiveOwner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyArchiveOwner.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveOwner/verifyArchiveOwner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,eAAO,MAAM,kBAAkB,QAAe,OAAO,KAAG,QAAQ,OAAO,CAetE,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/verifyArchiveOwner.js

@@ -0,0 +1,17 @@
+export const verifyArchiveOwner = async (req) => {
+    // Validate user from request
+    const { user } = req;
+    if (!user || !user.id) {
+        return false;
+    }
+    // Validate archive from request
+    const { archive } = req.params;
+    if (!archive) {
+        return false;
+    }
+    const existingArchives = await req.app.archiveArchivist.get([archive]);
+    const existingArchive = existingArchives.pop();
+    // Validate user is archive owner
+    return !!existingArchive && existingArchive.user === user.id;
+};
+//# sourceMappingURL=verifyArchiveOwner.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/archiveOwner/verifyArchiveOwner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyArchiveOwner.js","sourceRoot":"","sources":["../../../../../src/auth/strategy/archiveOwner/verifyArchiveOwner.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,GAAY,EAAoB,EAAE;IACzE,6BAA6B;IAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAA;IACpB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;QACrB,OAAO,KAAK,CAAA;KACb;IACD,gCAAgC;IAChC,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAA;IAC9B,IAAI,CAAC,OAAO,EAAE;QACZ,OAAO,KAAK,CAAA;KACb;IACD,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;IACtE,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAA;IAC9C,iCAAiC;IACjC,OAAO,CAAC,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAA;AAC9D,CAAC,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/index.d.ts

@@ -0,0 +1,10 @@
+export * from './adminApiKey';
+export * from './allowUnauthenticated';
+export * from './archiveAccessControl';
+export * from './ArchiveAccount';
+export * from './archiveApiKey';
+export * from './archiveOwner';
+export * from './jwt';
+export * from './local';
+export * from './web3';
+//# sourceMappingURL=index.d.ts.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/auth/strategy/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,OAAO,CAAA;AACrB,cAAc,SAAS,CAAA;AACvB,cAAc,QAAQ,CAAA"}

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/index.js

@@ -0,0 +1,10 @@
+export * from './adminApiKey';
+export * from './allowUnauthenticated';
+export * from './archiveAccessControl';
+export * from './ArchiveAccount';
+export * from './archiveApiKey';
+export * from './archiveOwner';
+export * from './jwt';
+export * from './local';
+export * from './web3';
+//# sourceMappingURL=index.js.map

package/packages/node/packages/express/middleware/dist/esm/auth/strategy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/auth/strategy/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,OAAO,CAAA;AACrB,cAAc,SAAS,CAAA;AACvB,cAAc,QAAQ,CAAA"}