@ytsaurus/ui 1.12.2 → 1.13.1

package/build/esm/server/controllers/logout.js

@@ -0,0 +1,11 @@
+import { getOAuthLogoutPath, isOAuthAllowed, isUserOAuthLogged } from '../components/oauth';
+import { YTAuthLogout, isYtAuthEnabled } from '../components/yt-auth';
+export function handleLogout(req, res) {
+  if (isOAuthAllowed(req) && isUserOAuthLogged(req)) {
+    res.redirect(getOAuthLogoutPath(req));
+  } else if (isYtAuthEnabled(req.ctx.config)) {
+    YTAuthLogout(res);
+  }
+  res.redirect('/');
+}
+// #sourceMappingURL=logout.js.map

package/build/esm/server/controllers/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getOAuthLogoutPath","isOAuthAllowed","isUserOAuthLogged","YTAuthLogout","isYtAuthEnabled","handleLogout","req","res","redirect","ctx","config"],"sources":["logout.ts"],"sourcesContent":["import type {Request, Response} from 'express';\nimport {getOAuthLogoutPath, isOAuthAllowed, isUserOAuthLogged} from '../components/oauth';\nimport {YTAuthLogout, isYtAuthEnabled} from '../components/yt-auth';\n\nexport function handleLogout(req: Request, res: Response) {\n    if (isOAuthAllowed(req) && isUserOAuthLogged(req)) {\n        res.redirect(getOAuthLogoutPath(req));\n    } else if (isYtAuthEnabled(req.ctx.config)) {\n        YTAuthLogout(res);\n    }\n    res.redirect('/');\n}\n"],"mappings":"AACA,SAAQA,kBAAkB,EAAEC,cAAc,EAAEC,iBAAiB,QAAO,qBAAqB;AACzF,SAAQC,YAAY,EAAEC,eAAe,QAAO,uBAAuB;AAEnE,OAAO,SAASC,YAAYA,CAACC,GAAY,EAAEC,GAAa,EAAE;EACtD,IAAIN,cAAc,CAACK,GAAG,CAAC,IAAIJ,iBAAiB,CAACI,GAAG,CAAC,EAAE;IAC/CC,GAAG,CAACC,QAAQ,CAACR,kBAAkB,CAACM,GAAG,CAAC,CAAC;EACzC,CAAC,MAAM,IAAIF,eAAe,CAACE,GAAG,CAACG,GAAG,CAACC,MAAM,CAAC,EAAE;IACxCP,YAAY,CAACI,GAAG,CAAC;EACrB;EACAA,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC;AACrB"}

package/build/esm/server/controllers/oauth-login.d.ts

@@ -0,0 +1,4 @@
+import type { Request, Response } from 'express';
+export declare function oauthLogin(req: Request, res: Response): void;
+export declare function oauthLogout(_: Request, res: Response): void;
+export declare function oauthCallback(req: Request, res: Response): Promise<void>;

package/build/esm/server/controllers/oauth-login.js

@@ -0,0 +1,50 @@
+import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
+import _regeneratorRuntime from "@babel/runtime/regenerator";
+import { exchangeOAuthToken, getOAuthLoginPath, removeOAuthCookies, saveOAuthTokensInCookies } from '../components/oauth';
+export function oauthLogin(req, res) {
+  res.redirect(getOAuthLoginPath(req));
+}
+export function oauthLogout(_, res) {
+  removeOAuthCookies(res);
+  res.redirect('/');
+}
+export function oauthCallback(_x, _x2) {
+  return _oauthCallback.apply(this, arguments);
+}
+function _oauthCallback() {
+  _oauthCallback = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(req, res) {
+    var code, tokens, message;
+    return _regeneratorRuntime.wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          code = req.query.code;
+          if (code) {
+            _context.next = 3;
+            break;
+          }
+          throw new Error('Authorization code is not specified');
+        case 3:
+          _context.prev = 3;
+          _context.next = 6;
+          return exchangeOAuthToken(req, code);
+        case 6:
+          tokens = _context.sent;
+          saveOAuthTokensInCookies(res, tokens);
+          res.redirect('/');
+          _context.next = 16;
+          break;
+        case 11:
+          _context.prev = 11;
+          _context.t0 = _context["catch"](3);
+          req.ctx.logError('exchange token error', _context.t0);
+          message = _context.t0 instanceof Error ? _context.t0.message : 'Unknown error';
+          res.status(500).send(message);
+        case 16:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee, null, [[3, 11]]);
+  }));
+  return _oauthCallback.apply(this, arguments);
+}
+// #sourceMappingURL=oauth-login.js.map

package/build/esm/server/controllers/oauth-login.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["exchangeOAuthToken","getOAuthLoginPath","removeOAuthCookies","saveOAuthTokensInCookies","oauthLogin","req","res","redirect","oauthLogout","_","oauthCallback","_x","_x2","_oauthCallback","apply","arguments","_asyncToGenerator","_regeneratorRuntime","mark","_callee","code","tokens","message","wrap","_callee$","_context","prev","next","query","Error","sent","t0","ctx","logError","status","send","stop"],"sources":["oauth-login.ts"],"sourcesContent":["import type {Request, Response} from 'express';\nimport {\n    exchangeOAuthToken,\n    getOAuthLoginPath,\n    removeOAuthCookies,\n    saveOAuthTokensInCookies,\n} from '../components/oauth';\n\nexport function oauthLogin(req: Request, res: Response) {\n    res.redirect(getOAuthLoginPath(req));\n}\n\nexport function oauthLogout(_: Request, res: Response) {\n    removeOAuthCookies(res);\n    res.redirect('/');\n}\n\nexport async function oauthCallback(req: Request, res: Response) {\n    const {code} = req.query;\n    if (!code) {\n        throw new Error('Authorization code is not specified');\n    }\n\n    try {\n        const tokens = await exchangeOAuthToken(req, code as string);\n\n        saveOAuthTokensInCookies(res, tokens);\n\n        res.redirect('/');\n    } catch (e) {\n        req.ctx.logError('exchange token error', e);\n        const message = e instanceof Error ? e.message : 'Unknown error';\n        res.status(500).send(message);\n    }\n}\n"],"mappings":";;AACA,SACIA,kBAAkB,EAClBC,iBAAiB,EACjBC,kBAAkB,EAClBC,wBAAwB,QACrB,qBAAqB;AAE5B,OAAO,SAASC,UAAUA,CAACC,GAAY,EAAEC,GAAa,EAAE;EACpDA,GAAG,CAACC,QAAQ,CAACN,iBAAiB,CAACI,GAAG,CAAC,CAAC;AACxC;AAEA,OAAO,SAASG,WAAWA,CAACC,CAAU,EAAEH,GAAa,EAAE;EACnDJ,kBAAkB,CAACI,GAAG,CAAC;EACvBA,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC;AACrB;AAEA,gBAAsBG,aAAaA,CAAAC,EAAA,EAAAC,GAAA;EAAA,OAAAC,cAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA;AAiBlC,SAAAF,eAAA;EAAAA,cAAA,GAAAG,iBAAA,eAAAC,mBAAA,CAAAC,IAAA,CAjBM,SAAAC,QAA6Bd,GAAY,EAAEC,GAAa;IAAA,IAAAc,IAAA,EAAAC,MAAA,EAAAC,OAAA;IAAA,OAAAL,mBAAA,CAAAM,IAAA,UAAAC,SAAAC,QAAA;MAAA,kBAAAA,QAAA,CAAAC,IAAA,GAAAD,QAAA,CAAAE,IAAA;QAAA;UACpDP,IAAI,GAAIf,GAAG,CAACuB,KAAK,CAAjBR,IAAI;UAAA,IACNA,IAAI;YAAAK,QAAA,CAAAE,IAAA;YAAA;UAAA;UAAA,MACC,IAAIE,KAAK,CAAC,qCAAqC,CAAC;QAAA;UAAAJ,QAAA,CAAAC,IAAA;UAAAD,QAAA,CAAAE,IAAA;UAAA,OAIjC3B,kBAAkB,CAACK,GAAG,EAAEe,IAAc,CAAC;QAAA;UAAtDC,MAAM,GAAAI,QAAA,CAAAK,IAAA;UAEZ3B,wBAAwB,CAACG,GAAG,EAAEe,MAAM,CAAC;UAErCf,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC;UAACkB,QAAA,CAAAE,IAAA;UAAA;QAAA;UAAAF,QAAA,CAAAC,IAAA;UAAAD,QAAA,CAAAM,EAAA,GAAAN,QAAA;UAElBpB,GAAG,CAAC2B,GAAG,CAACC,QAAQ,CAAC,sBAAsB,EAAAR,QAAA,CAAAM,EAAG,CAAC;UACrCT,OAAO,GAAGG,QAAA,CAAAM,EAAA,YAAaF,KAAK,GAAGJ,QAAA,CAAAM,EAAA,CAAET,OAAO,GAAG,eAAe;UAChEhB,GAAG,CAAC4B,MAAM,CAAC,GAAG,CAAC,CAACC,IAAI,CAACb,OAAO,CAAC;QAAC;QAAA;UAAA,OAAAG,QAAA,CAAAW,IAAA;MAAA;IAAA,GAAAjB,OAAA;EAAA,CAErC;EAAA,OAAAN,cAAA,CAAAC,KAAA,OAAAC,SAAA;AAAA"}

package/build/esm/server/index.js

@@ -1,10 +1,14 @@
+import _toConsumableArray from "@babel/runtime/helpers/toConsumableArray";
 var _nodekit$config$adjus, _nodekit$config3;
 import path from 'path';
 import { NodeKit } from '@gravity-ui/nodekit';
 import { ExpressKit } from '@gravity-ui/expresskit';
 import { configureApp } from './configure-app';
-import { createYTAuthMiddleware } from './middlewares/yt-auth';
+import { createYTAuthorizationResolver } from './middlewares/yt-auth';
 import routes from './routes';
+import { createOAuthAuthorizationResolver } from './middlewares/oauth';
+import { createAuthMiddleware } from './middlewares/authorization';
+import { authorizationResolver } from './utils/authorization';
 var nodekit = new NodeKit({
   configsPath: path.resolve(__dirname, './configs')
 });
@@ -26,7 +30,8 @@ if (ytAuthCluster) {
   if (appAuthHandler) {
     nodekit.ctx.fail(new Error('"appAuthHandler" option will be ignored cause "ytAuthCluster" option is provided.'));
   }
-  nodekit.config.appAuthHandler = createYTAuthMiddleware(ytAuthCluster);
+  nodekit.config.appBeforeAuthMiddleware = [].concat(_toConsumableArray(nodekit.config.appBeforeAuthMiddleware || []), [authorizationResolver(createOAuthAuthorizationResolver()), authorizationResolver(createYTAuthorizationResolver())]);
+  nodekit.config.appAuthHandler = createAuthMiddleware(ytAuthCluster);
 }
 (_nodekit$config$adjus = (_nodekit$config3 = nodekit.config).adjustAppConfig) === null || _nodekit$config$adjus === void 0 || _nodekit$config$adjus.call(_nodekit$config3, nodekit);
 var app = new ExpressKit(nodekit, routes);

package/build/esm/server/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["path","NodeKit","ExpressKit","configureApp","createYTAuthMiddleware","routes","nodekit","configsPath","resolve","__dirname","_nodekit$config","config","appName","appEnv","appInstallation","appDevMode","ctx","log","_nodekit$config2","ytAuthCluster","appAuthHandler","fail","Error","_nodekit$config$adjus","_nodekit$config3","adjustAppConfig","call","app","require","main","module","run"],"sources":["index.ts"],"sourcesContent":["import path from 'path';\nimport _reduce from 'lodash/reduce';\nimport {NodeKit} from '@gravity-ui/nodekit';\nimport {ExpressKit} from '@gravity-ui/expresskit';\n\nimport {configureApp} from './configure-app';\n\nimport {createYTAuthMiddleware} from './middlewares/yt-auth';\nimport routes from './routes';\n\nconst nodekit = new NodeKit({configsPath: path.resolve(__dirname, './configs')});\n\nconst {appName, appEnv, appInstallation, appDevMode} = nodekit.config;\nnodekit.ctx.log('AppConfig details', {\n    appName,\n    appEnv,\n    appInstallation,\n    appDevMode,\n});\n\nconst {ytAuthCluster, appAuthHandler} = nodekit.config;\n\nif (ytAuthCluster) {\n    if (appAuthHandler) {\n        nodekit.ctx.fail(\n            new Error(\n                '\"appAuthHandler\" option will be ignored cause \"ytAuthCluster\" option is provided.',\n            ),\n        );\n    }\n\n    nodekit.config.appAuthHandler = createYTAuthMiddleware(ytAuthCluster);\n}\n\nnodekit.config.adjustAppConfig?.(nodekit);\n\nconst app = new ExpressKit(nodekit, routes);\nconfigureApp(app);\n\nif (require.main === module) {\n    app.run();\n}\n\nexport default app;\n"],"mappings":";AAAA,OAAOA,IAAI,MAAM,MAAM;AAEvB,SAAQC,OAAO,QAAO,qBAAqB;AAC3C,SAAQC,UAAU,QAAO,wBAAwB;AAEjD,SAAQC,YAAY,QAAO,iBAAiB;AAE5C,SAAQC,sBAAsB,QAAO,uBAAuB;AAC5D,OAAOC,MAAM,MAAM,UAAU;AAE7B,IAAMC,OAAO,GAAG,IAAIL,OAAO,CAAC;EAACM,WAAW,EAAEP,IAAI,CAACQ,OAAO,CAACC,SAAS,EAAE,WAAW;AAAC,CAAC,CAAC;AAEhF,IAAAC,eAAA,GAAuDJ,OAAO,CAACK,MAAM;EAA9DC,OAAO,GAAAF,eAAA,CAAPE,OAAO;EAAEC,MAAM,GAAAH,eAAA,CAANG,MAAM;EAAEC,eAAe,GAAAJ,eAAA,CAAfI,eAAe;EAAEC,UAAU,GAAAL,eAAA,CAAVK,UAAU;AACnDT,OAAO,CAACU,GAAG,CAACC,GAAG,CAAC,mBAAmB,EAAE;EACjCL,OAAO,EAAPA,OAAO;EACPC,MAAM,EAANA,MAAM;EACNC,eAAe,EAAfA,eAAe;EACfC,UAAU,EAAVA;AACJ,CAAC,CAAC;AAEF,IAAAG,gBAAA,GAAwCZ,OAAO,CAACK,MAAM;EAA/CQ,aAAa,GAAAD,gBAAA,CAAbC,aAAa;EAAEC,cAAc,GAAAF,gBAAA,CAAdE,cAAc;AAEpC,IAAID,aAAa,EAAE;EACf,IAAIC,cAAc,EAAE;IAChBd,OAAO,CAACU,GAAG,CAACK,IAAI,CACZ,IAAIC,KAAK,CACL,mFACJ,CACJ,CAAC;EACL;EAEAhB,OAAO,CAACK,MAAM,CAACS,cAAc,GAAGhB,sBAAsB,CAACe,aAAa,CAAC;AACzE;AAEA,CAAAI,qBAAA,IAAAC,gBAAA,GAAAlB,OAAO,CAACK,MAAM,EAACc,eAAe,cAAAF,qBAAA,eAA9BA,qBAAA,CAAAG,IAAA,CAAAF,gBAAA,EAAiClB,OAAO,CAAC;AAEzC,IAAMqB,GAAG,GAAG,IAAIzB,UAAU,CAACI,OAAO,EAAED,MAAM,CAAC;AAC3CF,YAAY,CAACwB,GAAG,CAAC;AAEjB,IAAIC,OAAO,CAACC,IAAI,KAAKC,MAAM,EAAE;EACzBH,GAAG,CAACI,GAAG,CAAC,CAAC;AACb;AAEA,eAAeJ,GAAG"}
+{"version":3,"names":["path","NodeKit","ExpressKit","configureApp","createYTAuthorizationResolver","routes","createOAuthAuthorizationResolver","createAuthMiddleware","authorizationResolver","nodekit","configsPath","resolve","__dirname","_nodekit$config","config","appName","appEnv","appInstallation","appDevMode","ctx","log","_nodekit$config2","ytAuthCluster","appAuthHandler","fail","Error","appBeforeAuthMiddleware","concat","_toConsumableArray","_nodekit$config$adjus","_nodekit$config3","adjustAppConfig","call","app","require","main","module","run"],"sources":["index.ts"],"sourcesContent":["import path from 'path';\nimport _reduce from 'lodash/reduce';\nimport {NodeKit} from '@gravity-ui/nodekit';\nimport {ExpressKit} from '@gravity-ui/expresskit';\n\nimport {configureApp} from './configure-app';\n\nimport {createYTAuthorizationResolver} from './middlewares/yt-auth';\nimport routes from './routes';\nimport {createOAuthAuthorizationResolver} from './middlewares/oauth';\nimport {createAuthMiddleware} from './middlewares/authorization';\nimport {authorizationResolver} from './utils/authorization';\n\nconst nodekit = new NodeKit({configsPath: path.resolve(__dirname, './configs')});\n\nconst {appName, appEnv, appInstallation, appDevMode} = nodekit.config;\nnodekit.ctx.log('AppConfig details', {\n    appName,\n    appEnv,\n    appInstallation,\n    appDevMode,\n});\n\nconst {ytAuthCluster, appAuthHandler} = nodekit.config;\n\nif (ytAuthCluster) {\n    if (appAuthHandler) {\n        nodekit.ctx.fail(\n            new Error(\n                '\"appAuthHandler\" option will be ignored cause \"ytAuthCluster\" option is provided.',\n            ),\n        );\n    }\n\n    nodekit.config.appBeforeAuthMiddleware = [\n        ...(nodekit.config.appBeforeAuthMiddleware || []),\n        authorizationResolver(createOAuthAuthorizationResolver()),\n        authorizationResolver(createYTAuthorizationResolver()),\n    ];\n    nodekit.config.appAuthHandler = createAuthMiddleware(ytAuthCluster);\n}\n\nnodekit.config.adjustAppConfig?.(nodekit);\n\nconst app = new ExpressKit(nodekit, routes);\nconfigureApp(app);\n\nif (require.main === module) {\n    app.run();\n}\n\nexport default app;\n"],"mappings":";;AAAA,OAAOA,IAAI,MAAM,MAAM;AAEvB,SAAQC,OAAO,QAAO,qBAAqB;AAC3C,SAAQC,UAAU,QAAO,wBAAwB;AAEjD,SAAQC,YAAY,QAAO,iBAAiB;AAE5C,SAAQC,6BAA6B,QAAO,uBAAuB;AACnE,OAAOC,MAAM,MAAM,UAAU;AAC7B,SAAQC,gCAAgC,QAAO,qBAAqB;AACpE,SAAQC,oBAAoB,QAAO,6BAA6B;AAChE,SAAQC,qBAAqB,QAAO,uBAAuB;AAE3D,IAAMC,OAAO,GAAG,IAAIR,OAAO,CAAC;EAACS,WAAW,EAAEV,IAAI,CAACW,OAAO,CAACC,SAAS,EAAE,WAAW;AAAC,CAAC,CAAC;AAEhF,IAAAC,eAAA,GAAuDJ,OAAO,CAACK,MAAM;EAA9DC,OAAO,GAAAF,eAAA,CAAPE,OAAO;EAAEC,MAAM,GAAAH,eAAA,CAANG,MAAM;EAAEC,eAAe,GAAAJ,eAAA,CAAfI,eAAe;EAAEC,UAAU,GAAAL,eAAA,CAAVK,UAAU;AACnDT,OAAO,CAACU,GAAG,CAACC,GAAG,CAAC,mBAAmB,EAAE;EACjCL,OAAO,EAAPA,OAAO;EACPC,MAAM,EAANA,MAAM;EACNC,eAAe,EAAfA,eAAe;EACfC,UAAU,EAAVA;AACJ,CAAC,CAAC;AAEF,IAAAG,gBAAA,GAAwCZ,OAAO,CAACK,MAAM;EAA/CQ,aAAa,GAAAD,gBAAA,CAAbC,aAAa;EAAEC,cAAc,GAAAF,gBAAA,CAAdE,cAAc;AAEpC,IAAID,aAAa,EAAE;EACf,IAAIC,cAAc,EAAE;IAChBd,OAAO,CAACU,GAAG,CAACK,IAAI,CACZ,IAAIC,KAAK,CACL,mFACJ,CACJ,CAAC;EACL;EAEAhB,OAAO,CAACK,MAAM,CAACY,uBAAuB,MAAAC,MAAA,CAAAC,kBAAA,CAC9BnB,OAAO,CAACK,MAAM,CAACY,uBAAuB,IAAI,EAAE,IAChDlB,qBAAqB,CAACF,gCAAgC,CAAC,CAAC,CAAC,EACzDE,qBAAqB,CAACJ,6BAA6B,CAAC,CAAC,CAAC,EACzD;EACDK,OAAO,CAACK,MAAM,CAACS,cAAc,GAAGhB,oBAAoB,CAACe,aAAa,CAAC;AACvE;AAEA,CAAAO,qBAAA,IAAAC,gBAAA,GAAArB,OAAO,CAACK,MAAM,EAACiB,eAAe,cAAAF,qBAAA,eAA9BA,qBAAA,CAAAG,IAAA,CAAAF,gBAAA,EAAiCrB,OAAO,CAAC;AAEzC,IAAMwB,GAAG,GAAG,IAAI/B,UAAU,CAACO,OAAO,EAAEJ,MAAM,CAAC;AAC3CF,YAAY,CAAC8B,GAAG,CAAC;AAEjB,IAAIC,OAAO,CAACC,IAAI,KAAKC,MAAM,EAAE;EACzBH,GAAG,CAACI,GAAG,CAAC,CAAC;AACb;AAEA,eAAeJ,GAAG"}

package/build/esm/server/middlewares/authorization.d.ts

@@ -0,0 +1,2 @@
+import { AppMiddleware } from '@gravity-ui/expresskit';
+export declare function createAuthMiddleware(ytAuthCluster: string): AppMiddleware;

package/build/esm/server/middlewares/authorization.js

@@ -0,0 +1,74 @@
+import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
+import _createClass from "@babel/runtime/helpers/createClass";
+import _classCallCheck from "@babel/runtime/helpers/classCallCheck";
+import _inherits from "@babel/runtime/helpers/inherits";
+import _createSuper from "@babel/runtime/helpers/createSuper";
+import _wrapNativeSuper from "@babel/runtime/helpers/wrapNativeSuper";
+import _regeneratorRuntime from "@babel/runtime/regenerator";
+import axios from 'axios';
+import { isAuthorized } from '../utils/authorization';
+import { getUserYTApiSetup } from '../components/requestsSetup';
+import { getXSRFToken } from '../components/cluster-queries';
+import { sendError } from '../utils';
+var AuthError = /*#__PURE__*/function (_Error) {
+  _inherits(AuthError, _Error);
+  var _super = _createSuper(AuthError);
+  function AuthError() {
+    _classCallCheck(this, AuthError);
+    return _super.call(this, 'Authorization required');
+  }
+  return _createClass(AuthError);
+}( /*#__PURE__*/_wrapNativeSuper(Error));
+function isAuthError(e) {
+  var _e$response;
+  return e instanceof AuthError || axios.isAxiosError(e) && ((_e$response = e.response) === null || _e$response === void 0 ? void 0 : _e$response.status) === 401;
+}
+export function createAuthMiddleware(ytAuthCluster) {
+  return /*#__PURE__*/function () {
+    var _authMiddleware = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(req, res, next) {
+      var cfg, _yield$getXSRFToken, login, isAuthFailed, error;
+      return _regeneratorRuntime.wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            if (isAuthorized(req)) {
+              _context.next = 3;
+              break;
+            }
+            throw new AuthError();
+          case 3:
+            cfg = getUserYTApiSetup(ytAuthCluster, req);
+            _context.next = 6;
+            return getXSRFToken(req, cfg);
+          case 6:
+            _yield$getXSRFToken = _context.sent;
+            login = _yield$getXSRFToken.login;
+            req.yt.login = login;
+            _context.next = 18;
+            break;
+          case 11:
+            _context.prev = 11;
+            _context.t0 = _context["catch"](0);
+            isAuthFailed = isAuthError(_context.t0);
+            error = isAuthFailed ? undefined : _context.t0;
+            if (!(!req.routeInfo.ui && isAuthFailed)) {
+              _context.next = 18;
+              break;
+            }
+            sendError(res, error, 401);
+            return _context.abrupt("return");
+          case 18:
+            next();
+          case 19:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee, null, [[0, 11]]);
+    }));
+    function authMiddleware(_x, _x2, _x3) {
+      return _authMiddleware.apply(this, arguments);
+    }
+    return authMiddleware;
+  }();
+}
+// #sourceMappingURL=authorization.js.map

package/build/esm/server/middlewares/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["axios","isAuthorized","getUserYTApiSetup","getXSRFToken","sendError","AuthError","_Error","_inherits","_super","_createSuper","_classCallCheck","call","_createClass","_wrapNativeSuper","Error","isAuthError","e","_e$response","isAxiosError","response","status","createAuthMiddleware","ytAuthCluster","_authMiddleware","_asyncToGenerator","_regeneratorRuntime","mark","_callee","req","res","next","cfg","_yield$getXSRFToken","login","isAuthFailed","error","wrap","_callee$","_context","prev","sent","yt","t0","undefined","routeInfo","ui","abrupt","stop","authMiddleware","_x","_x2","_x3","apply","arguments"],"sources":["authorization.ts"],"sourcesContent":["import axios from 'axios';\nimport {isAuthorized} from '../utils/authorization';\nimport {getUserYTApiSetup} from '../components/requestsSetup';\nimport {AppMiddleware} from '@gravity-ui/expresskit';\nimport {getXSRFToken} from '../components/cluster-queries';\nimport {sendError} from '../utils';\n\nclass AuthError extends Error {\n    constructor() {\n        super('Authorization required');\n    }\n}\n\nfunction isAuthError(e: unknown) {\n    return e instanceof AuthError || (axios.isAxiosError(e) && e.response?.status === 401);\n}\n\nexport function createAuthMiddleware(ytAuthCluster: string): AppMiddleware {\n    return async function authMiddleware(req, res, next) {\n        try {\n            if (!isAuthorized(req)) {\n                throw new AuthError();\n            }\n\n            const cfg = getUserYTApiSetup(ytAuthCluster, req);\n            const {login} = await getXSRFToken(req, cfg);\n            req.yt.login = login;\n        } catch (e) {\n            const isAuthFailed = isAuthError(e);\n            const error = isAuthFailed ? undefined : e;\n\n            if (!req.routeInfo.ui && isAuthFailed) {\n                sendError(res, error, 401);\n                return;\n            }\n        }\n\n        next();\n    };\n}\n"],"mappings":";;;;;;;AAAA,OAAOA,KAAK,MAAM,OAAO;AACzB,SAAQC,YAAY,QAAO,wBAAwB;AACnD,SAAQC,iBAAiB,QAAO,6BAA6B;AAE7D,SAAQC,YAAY,QAAO,+BAA+B;AAC1D,SAAQC,SAAS,QAAO,UAAU;AAAC,IAE7BC,SAAS,0BAAAC,MAAA;EAAAC,SAAA,CAAAF,SAAA,EAAAC,MAAA;EAAA,IAAAE,MAAA,GAAAC,YAAA,CAAAJ,SAAA;EACX,SAAAA,UAAA,EAAc;IAAAK,eAAA,OAAAL,SAAA;IAAA,OAAAG,MAAA,CAAAG,IAAA,OACJ,wBAAwB;EAClC;EAAC,OAAAC,YAAA,CAAAP,SAAA;AAAA,gBAAAQ,gBAAA,CAHmBC,KAAK;AAM7B,SAASC,WAAWA,CAACC,CAAU,EAAE;EAAA,IAAAC,WAAA;EAC7B,OAAOD,CAAC,YAAYX,SAAS,IAAKL,KAAK,CAACkB,YAAY,CAACF,CAAC,CAAC,IAAI,EAAAC,WAAA,GAAAD,CAAC,CAACG,QAAQ,cAAAF,WAAA,uBAAVA,WAAA,CAAYG,MAAM,MAAK,GAAI;AAC1F;AAEA,OAAO,SAASC,oBAAoBA,CAACC,aAAqB,EAAiB;EACvE;IAAA,IAAAC,eAAA,GAAAC,iBAAA,eAAAC,mBAAA,CAAAC,IAAA,CAAO,SAAAC,QAA8BC,GAAG,EAAEC,GAAG,EAAEC,IAAI;MAAA,IAAAC,GAAA,EAAAC,mBAAA,EAAAC,KAAA,EAAAC,YAAA,EAAAC,KAAA;MAAA,OAAAV,mBAAA,CAAAW,IAAA,UAAAC,SAAAC,QAAA;QAAA,kBAAAA,QAAA,CAAAC,IAAA,GAAAD,QAAA,CAAAR,IAAA;UAAA;YAAAQ,QAAA,CAAAC,IAAA;YAAA,IAEtCtC,YAAY,CAAC2B,GAAG,CAAC;cAAAU,QAAA,CAAAR,IAAA;cAAA;YAAA;YAAA,MACZ,IAAIzB,SAAS,CAAC,CAAC;UAAA;YAGnB0B,GAAG,GAAG7B,iBAAiB,CAACoB,aAAa,EAAEM,GAAG,CAAC;YAAAU,QAAA,CAAAR,IAAA;YAAA,OAC3B3B,YAAY,CAACyB,GAAG,EAAEG,GAAG,CAAC;UAAA;YAAAC,mBAAA,GAAAM,QAAA,CAAAE,IAAA;YAArCP,KAAK,GAAAD,mBAAA,CAALC,KAAK;YACZL,GAAG,CAACa,EAAE,CAACR,KAAK,GAAGA,KAAK;YAACK,QAAA,CAAAR,IAAA;YAAA;UAAA;YAAAQ,QAAA,CAAAC,IAAA;YAAAD,QAAA,CAAAI,EAAA,GAAAJ,QAAA;YAEfJ,YAAY,GAAGnB,WAAW,CAAAuB,QAAA,CAAAI,EAAE,CAAC;YAC7BP,KAAK,GAAGD,YAAY,GAAGS,SAAS,GAAAL,QAAA,CAAAI,EAAI;YAAA,MAEtC,CAACd,GAAG,CAACgB,SAAS,CAACC,EAAE,IAAIX,YAAY;cAAAI,QAAA,CAAAR,IAAA;cAAA;YAAA;YACjC1B,SAAS,CAACyB,GAAG,EAAEM,KAAK,EAAE,GAAG,CAAC;YAAC,OAAAG,QAAA,CAAAQ,MAAA;UAAA;YAKnChB,IAAI,CAAC,CAAC;UAAC;UAAA;YAAA,OAAAQ,QAAA,CAAAS,IAAA;QAAA;MAAA,GAAApB,OAAA;IAAA,CACV;IAAA,SApBqBqB,cAAcA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA;MAAA,OAAA5B,eAAA,CAAA6B,KAAA,OAAAC,SAAA;IAAA;IAAA,OAAdL,cAAc;EAAA;AAqBxC"}

package/build/esm/server/middlewares/oauth.d.ts

@@ -0,0 +1,2 @@
+import { AppMiddleware } from '@gravity-ui/expresskit';
+export declare function createOAuthAuthorizationResolver(): AppMiddleware;

package/build/esm/server/middlewares/oauth.js

@@ -0,0 +1,50 @@
+import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
+import _regeneratorRuntime from "@babel/runtime/regenerator";
+import { getOAuthAccessToken, isOAuthAllowed, isUserOAuthLogged } from '../components/oauth';
+export function createOAuthAuthorizationResolver() {
+  return /*#__PURE__*/function () {
+    var _resoleOAuthAuthorize = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(req, res, next) {
+      var token;
+      return _regeneratorRuntime.wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            if (!(!isOAuthAllowed(req) || !isUserOAuthLogged(req))) {
+              _context.next = 3;
+              break;
+            }
+            next();
+            return _context.abrupt("return");
+          case 3:
+            _context.prev = 3;
+            _context.next = 6;
+            return getOAuthAccessToken(req, res);
+          case 6:
+            token = _context.sent;
+            req.yt = {
+              ytApiAuthHeaders: {
+                Authorization: "OAuth ".concat(token)
+              }
+            };
+            req.ctx.log('OAuth: provide a token');
+            _context.next = 14;
+            break;
+          case 11:
+            _context.prev = 11;
+            _context.t0 = _context["catch"](3);
+            req.ctx.logError('Can not resolve access token', _context.t0);
+          case 14:
+            next();
+            return _context.abrupt("return");
+          case 16:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee, null, [[3, 11]]);
+    }));
+    function resoleOAuthAuthorize(_x, _x2, _x3) {
+      return _resoleOAuthAuthorize.apply(this, arguments);
+    }
+    return resoleOAuthAuthorize;
+  }();
+}
+// #sourceMappingURL=oauth.js.map

package/build/esm/server/middlewares/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getOAuthAccessToken","isOAuthAllowed","isUserOAuthLogged","createOAuthAuthorizationResolver","_resoleOAuthAuthorize","_asyncToGenerator","_regeneratorRuntime","mark","_callee","req","res","next","token","wrap","_callee$","_context","prev","abrupt","sent","yt","ytApiAuthHeaders","Authorization","concat","ctx","log","t0","logError","stop","resoleOAuthAuthorize","_x","_x2","_x3","apply","arguments"],"sources":["oauth.ts"],"sourcesContent":["import {AppMiddleware} from '@gravity-ui/expresskit';\nimport type {Request, Response} from 'express';\nimport {getOAuthAccessToken, isOAuthAllowed, isUserOAuthLogged} from '../components/oauth';\n\nexport function createOAuthAuthorizationResolver(): AppMiddleware {\n    return async function resoleOAuthAuthorize(req: Request, res: Response, next) {\n        if (!isOAuthAllowed(req) || !isUserOAuthLogged(req)) {\n            next();\n            return;\n        }\n        try {\n            const token = await getOAuthAccessToken(req, res);\n            req.yt = {\n                ytApiAuthHeaders: {\n                    Authorization: `OAuth ${token}`,\n                },\n            };\n            req.ctx.log('OAuth: provide a token');\n        } catch (e) {\n            req.ctx.logError('Can not resolve access token', e);\n        }\n        next();\n        return;\n    };\n}\n"],"mappings":";;AAEA,SAAQA,mBAAmB,EAAEC,cAAc,EAAEC,iBAAiB,QAAO,qBAAqB;AAE1F,OAAO,SAASC,gCAAgCA,CAAA,EAAkB;EAC9D;IAAA,IAAAC,qBAAA,GAAAC,iBAAA,eAAAC,mBAAA,CAAAC,IAAA,CAAO,SAAAC,QAAoCC,GAAY,EAAEC,GAAa,EAAEC,IAAI;MAAA,IAAAC,KAAA;MAAA,OAAAN,mBAAA,CAAAO,IAAA,UAAAC,SAAAC,QAAA;QAAA,kBAAAA,QAAA,CAAAC,IAAA,GAAAD,QAAA,CAAAJ,IAAA;UAAA;YAAA,MACpE,CAACV,cAAc,CAACQ,GAAG,CAAC,IAAI,CAACP,iBAAiB,CAACO,GAAG,CAAC;cAAAM,QAAA,CAAAJ,IAAA;cAAA;YAAA;YAC/CA,IAAI,CAAC,CAAC;YAAC,OAAAI,QAAA,CAAAE,MAAA;UAAA;YAAAF,QAAA,CAAAC,IAAA;YAAAD,QAAA,CAAAJ,IAAA;YAAA,OAIaX,mBAAmB,CAACS,GAAG,EAAEC,GAAG,CAAC;UAAA;YAA3CE,KAAK,GAAAG,QAAA,CAAAG,IAAA;YACXT,GAAG,CAACU,EAAE,GAAG;cACLC,gBAAgB,EAAE;gBACdC,aAAa,WAAAC,MAAA,CAAWV,KAAK;cACjC;YACJ,CAAC;YACDH,GAAG,CAACc,GAAG,CAACC,GAAG,CAAC,wBAAwB,CAAC;YAACT,QAAA,CAAAJ,IAAA;YAAA;UAAA;YAAAI,QAAA,CAAAC,IAAA;YAAAD,QAAA,CAAAU,EAAA,GAAAV,QAAA;YAEtCN,GAAG,CAACc,GAAG,CAACG,QAAQ,CAAC,8BAA8B,EAAAX,QAAA,CAAAU,EAAG,CAAC;UAAC;YAExDd,IAAI,CAAC,CAAC;YAAC,OAAAI,QAAA,CAAAE,MAAA;UAAA;UAAA;YAAA,OAAAF,QAAA,CAAAY,IAAA;QAAA;MAAA,GAAAnB,OAAA;IAAA,CAEV;IAAA,SAlBqBoB,oBAAoBA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA;MAAA,OAAA3B,qBAAA,CAAA4B,KAAA,OAAAC,SAAA;IAAA;IAAA,OAApBL,oBAAoB;EAAA;AAmB9C"}

package/build/esm/server/middlewares/yt-auth.d.ts

@@ -1,2 +1,2 @@
 import { AppMiddleware } from '@gravity-ui/expresskit';
-export declare function createYTAuthMiddleware(ytAuthCluster: string): AppMiddleware;
+export declare function createYTAuthorizationResolver(): AppMiddleware;

package/build/esm/server/middlewares/yt-auth.js

@@ -1,80 +1,30 @@
 import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
-import _createClass from "@babel/runtime/helpers/createClass";
-import _classCallCheck from "@babel/runtime/helpers/classCallCheck";
-import _inherits from "@babel/runtime/helpers/inherits";
-import _createSuper from "@babel/runtime/helpers/createSuper";
-import _wrapNativeSuper from "@babel/runtime/helpers/wrapNativeSuper";
 import _regeneratorRuntime from "@babel/runtime/regenerator";
-import axios from 'axios';
 import { YT_CYPRESS_COOKIE_NAME } from '../../shared/constants';
-import { getXSRFToken } from '../components/cluster-queries';
-import { getUserYTApiSetup } from '../components/requestsSetup';
-import { sendError } from '../utils';
-var AuthError = /*#__PURE__*/function (_Error) {
-  _inherits(AuthError, _Error);
-  var _super = _createSuper(AuthError);
-  function AuthError() {
-    _classCallCheck(this, AuthError);
-    return _super.call(this, 'Authorization required');
-  }
-  return _createClass(AuthError);
-}( /*#__PURE__*/_wrapNativeSuper(Error));
-function isAuthError(e) {
-  var _e$response;
-  return e instanceof AuthError || axios.isAxiosError(e) && ((_e$response = e.response) === null || _e$response === void 0 ? void 0 : _e$response.status) === 401;
-}
-export function createYTAuthMiddleware(ytAuthCluster) {
+export function createYTAuthorizationResolver() {
   return /*#__PURE__*/function () {
-    var _ytAuthMiddleware = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(req, res, next) {
-      var secret, cfg, _yield$getXSRFToken, login, isAuthFailed, error;
+    var _resoleOAuthAuthorize = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(req, _, next) {
+      var secret;
       return _regeneratorRuntime.wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            _context.prev = 0;
             secret = req.cookies[YT_CYPRESS_COOKIE_NAME];
             req.yt = {
               ytApiAuthHeaders: {
                 Cookie: "".concat(YT_CYPRESS_COOKIE_NAME, "=").concat(secret, ";")
               }
             };
-            if (secret) {
-              _context.next = 5;
-              break;
-            }
-            throw new AuthError();
-          case 5:
-            cfg = getUserYTApiSetup(ytAuthCluster, req);
-            _context.next = 8;
-            return getXSRFToken(req, cfg);
-          case 8:
-            _yield$getXSRFToken = _context.sent;
-            login = _yield$getXSRFToken.login;
-            req.yt.login = login;
-            _context.next = 20;
-            break;
-          case 13:
-            _context.prev = 13;
-            _context.t0 = _context["catch"](0);
-            isAuthFailed = isAuthError(_context.t0);
-            error = isAuthFailed ? undefined : _context.t0;
-            if (!(!req.routeInfo.ui && isAuthFailed)) {
-              _context.next = 20;
-              break;
-            }
-            sendError(res, error, 401);
-            return _context.abrupt("return");
-          case 20:
             next();
-          case 21:
+          case 3:
           case "end":
             return _context.stop();
         }
-      }, _callee, null, [[0, 13]]);
+      }, _callee);
     }));
-    function ytAuthMiddleware(_x, _x2, _x3) {
-      return _ytAuthMiddleware.apply(this, arguments);
+    function resoleOAuthAuthorize(_x, _x2, _x3) {
+      return _resoleOAuthAuthorize.apply(this, arguments);
     }
-    return ytAuthMiddleware;
+    return resoleOAuthAuthorize;
   }();
 }
 // #sourceMappingURL=yt-auth.js.map

package/build/esm/server/middlewares/yt-auth.js.map

@@ -1 +1 @@
-{"version":3,"names":["axios","YT_CYPRESS_COOKIE_NAME","getXSRFToken","getUserYTApiSetup","sendError","AuthError","_Error","_inherits","_super","_createSuper","_classCallCheck","call","_createClass","_wrapNativeSuper","Error","isAuthError","e","_e$response","isAxiosError","response","status","createYTAuthMiddleware","ytAuthCluster","_ytAuthMiddleware","_asyncToGenerator","_regeneratorRuntime","mark","_callee","req","res","next","secret","cfg","_yield$getXSRFToken","login","isAuthFailed","error","wrap","_callee$","_context","prev","cookies","yt","ytApiAuthHeaders","Cookie","concat","sent","t0","undefined","routeInfo","ui","abrupt","stop","ytAuthMiddleware","_x","_x2","_x3","apply","arguments"],"sources":["yt-auth.ts"],"sourcesContent":["import axios from 'axios';\n\nimport {AppMiddleware} from '@gravity-ui/expresskit';\n\nimport {YT_CYPRESS_COOKIE_NAME} from '../../shared/constants';\nimport {getXSRFToken} from '../components/cluster-queries';\nimport {getUserYTApiSetup} from '../components/requestsSetup';\nimport {sendError} from '../utils';\n\nclass AuthError extends Error {\n    constructor() {\n        super('Authorization required');\n    }\n}\n\nfunction isAuthError(e: unknown) {\n    return e instanceof AuthError || (axios.isAxiosError(e) && e.response?.status === 401);\n}\n\nexport function createYTAuthMiddleware(ytAuthCluster: string): AppMiddleware {\n    return async function ytAuthMiddleware(req, res, next) {\n        try {\n            const secret: string = req.cookies[YT_CYPRESS_COOKIE_NAME];\n\n            req.yt = {\n                ytApiAuthHeaders: {\n                    Cookie: `${YT_CYPRESS_COOKIE_NAME}=${secret};`,\n                },\n            };\n\n            if (!secret) {\n                throw new AuthError();\n            }\n\n            const cfg = getUserYTApiSetup(ytAuthCluster, req);\n            const {login} = await getXSRFToken(req, cfg);\n            req.yt.login = login;\n        } catch (e) {\n            const isAuthFailed = isAuthError(e);\n            const error = isAuthFailed ? undefined : e;\n\n            if (!req.routeInfo.ui && isAuthFailed) {\n                sendError(res, error, 401);\n                return;\n            }\n        }\n\n        next();\n    };\n}\n"],"mappings":";;;;;;;AAAA,OAAOA,KAAK,MAAM,OAAO;AAIzB,SAAQC,sBAAsB,QAAO,wBAAwB;AAC7D,SAAQC,YAAY,QAAO,+BAA+B;AAC1D,SAAQC,iBAAiB,QAAO,6BAA6B;AAC7D,SAAQC,SAAS,QAAO,UAAU;AAAC,IAE7BC,SAAS,0BAAAC,MAAA;EAAAC,SAAA,CAAAF,SAAA,EAAAC,MAAA;EAAA,IAAAE,MAAA,GAAAC,YAAA,CAAAJ,SAAA;EACX,SAAAA,UAAA,EAAc;IAAAK,eAAA,OAAAL,SAAA;IAAA,OAAAG,MAAA,CAAAG,IAAA,OACJ,wBAAwB;EAClC;EAAC,OAAAC,YAAA,CAAAP,SAAA;AAAA,gBAAAQ,gBAAA,CAHmBC,KAAK;AAM7B,SAASC,WAAWA,CAACC,CAAU,EAAE;EAAA,IAAAC,WAAA;EAC7B,OAAOD,CAAC,YAAYX,SAAS,IAAKL,KAAK,CAACkB,YAAY,CAACF,CAAC,CAAC,IAAI,EAAAC,WAAA,GAAAD,CAAC,CAACG,QAAQ,cAAAF,WAAA,uBAAVA,WAAA,CAAYG,MAAM,MAAK,GAAI;AAC1F;AAEA,OAAO,SAASC,sBAAsBA,CAACC,aAAqB,EAAiB;EACzE;IAAA,IAAAC,iBAAA,GAAAC,iBAAA,eAAAC,mBAAA,CAAAC,IAAA,CAAO,SAAAC,QAAgCC,GAAG,EAAEC,GAAG,EAAEC,IAAI;MAAA,IAAAC,MAAA,EAAAC,GAAA,EAAAC,mBAAA,EAAAC,KAAA,EAAAC,YAAA,EAAAC,KAAA;MAAA,OAAAX,mBAAA,CAAAY,IAAA,UAAAC,SAAAC,QAAA;QAAA,kBAAAA,QAAA,CAAAC,IAAA,GAAAD,QAAA,CAAAT,IAAA;UAAA;YAAAS,QAAA,CAAAC,IAAA;YAEvCT,MAAc,GAAGH,GAAG,CAACa,OAAO,CAACxC,sBAAsB,CAAC;YAE1D2B,GAAG,CAACc,EAAE,GAAG;cACLC,gBAAgB,EAAE;gBACdC,MAAM,KAAAC,MAAA,CAAK5C,sBAAsB,OAAA4C,MAAA,CAAId,MAAM;cAC/C;YACJ,CAAC;YAAC,IAEGA,MAAM;cAAAQ,QAAA,CAAAT,IAAA;cAAA;YAAA;YAAA,MACD,IAAIzB,SAAS,CAAC,CAAC;UAAA;YAGnB2B,GAAG,GAAG7B,iBAAiB,CAACmB,aAAa,EAAEM,GAAG,CAAC;YAAAW,QAAA,CAAAT,IAAA;YAAA,OAC3B5B,YAAY,CAAC0B,GAAG,EAAEI,GAAG,CAAC;UAAA;YAAAC,mBAAA,GAAAM,QAAA,CAAAO,IAAA;YAArCZ,KAAK,GAAAD,mBAAA,CAALC,KAAK;YACZN,GAAG,CAACc,EAAE,CAACR,KAAK,GAAGA,KAAK;YAACK,QAAA,CAAAT,IAAA;YAAA;UAAA;YAAAS,QAAA,CAAAC,IAAA;YAAAD,QAAA,CAAAQ,EAAA,GAAAR,QAAA;YAEfJ,YAAY,GAAGpB,WAAW,CAAAwB,QAAA,CAAAQ,EAAE,CAAC;YAC7BX,KAAK,GAAGD,YAAY,GAAGa,SAAS,GAAAT,QAAA,CAAAQ,EAAI;YAAA,MAEtC,CAACnB,GAAG,CAACqB,SAAS,CAACC,EAAE,IAAIf,YAAY;cAAAI,QAAA,CAAAT,IAAA;cAAA;YAAA;YACjC1B,SAAS,CAACyB,GAAG,EAAEO,KAAK,EAAE,GAAG,CAAC;YAAC,OAAAG,QAAA,CAAAY,MAAA;UAAA;YAKnCrB,IAAI,CAAC,CAAC;UAAC;UAAA;YAAA,OAAAS,QAAA,CAAAa,IAAA;QAAA;MAAA,GAAAzB,OAAA;IAAA,CACV;IAAA,SA5BqB0B,gBAAgBA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA;MAAA,OAAAjC,iBAAA,CAAAkC,KAAA,OAAAC,SAAA;IAAA;IAAA,OAAhBL,gBAAgB;EAAA;AA6B1C"}
+{"version":3,"names":["YT_CYPRESS_COOKIE_NAME","createYTAuthorizationResolver","_resoleOAuthAuthorize","_asyncToGenerator","_regeneratorRuntime","mark","_callee","req","_","next","secret","wrap","_callee$","_context","prev","cookies","yt","ytApiAuthHeaders","Cookie","concat","stop","resoleOAuthAuthorize","_x","_x2","_x3","apply","arguments"],"sources":["yt-auth.ts"],"sourcesContent":["import type {Request, Response} from 'express';\nimport {AppMiddleware} from '@gravity-ui/expresskit';\nimport {YT_CYPRESS_COOKIE_NAME} from '../../shared/constants';\n\nexport function createYTAuthorizationResolver(): AppMiddleware {\n    return async function resoleOAuthAuthorize(req: Request, _: Response, next) {\n        const secret: string = req.cookies[YT_CYPRESS_COOKIE_NAME];\n        req.yt = {\n            ytApiAuthHeaders: {\n                Cookie: `${YT_CYPRESS_COOKIE_NAME}=${secret};`,\n            },\n        };\n        next();\n    };\n}\n"],"mappings":";;AAEA,SAAQA,sBAAsB,QAAO,wBAAwB;AAE7D,OAAO,SAASC,6BAA6BA,CAAA,EAAkB;EAC3D;IAAA,IAAAC,qBAAA,GAAAC,iBAAA,eAAAC,mBAAA,CAAAC,IAAA,CAAO,SAAAC,QAAoCC,GAAY,EAAEC,CAAW,EAAEC,IAAI;MAAA,IAAAC,MAAA;MAAA,OAAAN,mBAAA,CAAAO,IAAA,UAAAC,SAAAC,QAAA;QAAA,kBAAAA,QAAA,CAAAC,IAAA,GAAAD,QAAA,CAAAJ,IAAA;UAAA;YAChEC,MAAc,GAAGH,GAAG,CAACQ,OAAO,CAACf,sBAAsB,CAAC;YAC1DO,GAAG,CAACS,EAAE,GAAG;cACLC,gBAAgB,EAAE;gBACdC,MAAM,KAAAC,MAAA,CAAKnB,sBAAsB,OAAAmB,MAAA,CAAIT,MAAM;cAC/C;YACJ,CAAC;YACDD,IAAI,CAAC,CAAC;UAAC;UAAA;YAAA,OAAAI,QAAA,CAAAO,IAAA;QAAA;MAAA,GAAAd,OAAA;IAAA,CACV;IAAA,SARqBe,oBAAoBA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA;MAAA,OAAAtB,qBAAA,CAAAuB,KAAA,OAAAC,SAAA;IAAA;IAAA,OAApBL,oBAAoB;EAAA;AAS9C"}

package/build/esm/server/routes.js

@@ -9,12 +9,14 @@ import { handleClusterInfo } from './controllers/cluster-info';
 import { clusterVersions } from './controllers/clusters';
 import { tableColumnPresetGet, tableColumnPresetSave } from './controllers/table-column-preset';
 import { ping } from './controllers/ping';
-import { handleChangePassword, handleLogin, handleLogout } from './controllers/login';
+import { handleChangePassword, handleLogin } from './controllers/login';
 import { getClusterPools } from './controllers/scheduling-pools';
 import { markdownToHtmlHandler } from './controllers/markdown-to-html';
 import { odinProxyApi } from './controllers/odin-proxy-api';
 import { getClustersAvailability } from './controllers/availability';
 import { chytProxyApi } from './controllers/chyt-api';
+import { oauthCallback, oauthLogin, oauthLogout } from './controllers/oauth-login';
+import { handleLogout } from './controllers/logout';
 var HOME_INDEX_TARGET = {
   handler: homeIndex,
   ui: true
@@ -42,10 +44,22 @@ var routes = {
     handler: handleLogin,
     ui: true
   },
-  'POST /api/yt/logout': {
+  'GET /api/yt/logout': {
     handler: handleLogout,
     ui: true
   },
+  'GET /oauth/login': {
+    handler: oauthLogin,
+    ui: true
+  },
+  'GET /api/oauth/callback': {
+    handler: oauthCallback,
+    ui: true
+  },
+  'GET /api/oauth/logout/callback': {
+    handler: oauthLogout,
+    ui: true
+  },
   'POST /api/yt/change-password': {
     handler: handleChangePassword,
     ui: true

package/build/esm/server/routes.js.map

@@ -1 +1 @@
-{"version":3,"names":["AuthPolicy","clusterParams","ytTvmApiHandler","handleRemoteCopy","ytProxyApi","settingsCreate","settingsDeleteItem","settingsGet","settingsGetItem","settingsSetItem","homeIndex","homeRedirect","handleClusterInfo","clusterVersions","tableColumnPresetGet","tableColumnPresetSave","ping","handleChangePassword","handleLogin","handleLogout","getClusterPools","markdownToHtmlHandler","odinProxyApi","getClustersAvailability","chytProxyApi","HOME_INDEX_TARGET","handler","ui","routes","authPolicy","disabled"],"sources":["routes.ts"],"sourcesContent":["import {AppRouteDescription, AppRoutes, AuthPolicy} from '@gravity-ui/expresskit';\nimport {clusterParams} from './controllers/cluster-params';\nimport {ytTvmApiHandler} from './controllers/yt-api';\nimport {handleRemoteCopy} from './controllers/remote-copy';\nimport {ytProxyApi} from './controllers/yt-proxy-api';\nimport {\n    settingsCreate,\n    settingsDeleteItem,\n    settingsGet,\n    settingsGetItem,\n    settingsSetItem,\n} from './controllers/settings';\nimport {homeIndex, homeRedirect} from './controllers/home';\nimport {handleClusterInfo} from './controllers/cluster-info';\n\nimport {clusterVersions} from './controllers/clusters';\nimport {tableColumnPresetGet, tableColumnPresetSave} from './controllers/table-column-preset';\nimport {ping} from './controllers/ping';\nimport {handleChangePassword, handleLogin, handleLogout} from './controllers/login';\nimport {getClusterPools} from './controllers/scheduling-pools';\nimport {markdownToHtmlHandler} from './controllers/markdown-to-html';\nimport {odinProxyApi} from './controllers/odin-proxy-api';\nimport {getClustersAvailability} from './controllers/availability';\nimport {chytProxyApi} from './controllers/chyt-api';\n\nconst HOME_INDEX_TARGET: AppRouteDescription = {handler: homeIndex, ui: true};\n\nconst routes: AppRoutes = {\n    'GET /change-password/': HOME_INDEX_TARGET,\n    'GET /': HOME_INDEX_TARGET,\n    'GET /ping': {handler: ping, authPolicy: AuthPolicy.disabled},\n    'GET /api/cluster-info/:cluster': {handler: handleClusterInfo},\n    'GET /api/cluster-params/:cluster': {handler: clusterParams},\n    'GET /api/clusters/versions': {handler: clusterVersions},\n    'GET /api/pool-names/:cluster': {handler: getClusterPools},\n    'POST /api/yt/login': {handler: handleLogin, ui: true},\n    'POST /api/yt/logout': {handler: handleLogout, ui: true},\n    'POST /api/yt/change-password': {handler: handleChangePassword, ui: true},\n    'POST /api/remote-copy': {handler: handleRemoteCopy},\n\n    'POST /api/markdown-to-html': {handler: markdownToHtmlHandler},\n\n    'GET  /api/yt/:cluster/api/:version/:command': {handler: ytTvmApiHandler},\n    'POST /api/yt/:cluster/api/:version/:command': {handler: ytTvmApiHandler},\n    'PUT  /api/yt/:cluster/api/:version/:command': {handler: ytTvmApiHandler},\n\n    'GET /api/yt-proxy/:cluster/:command': {handler: ytProxyApi},\n\n    'GET /api/odin/proxy/:action/:cluster?': {handler: odinProxyApi},\n    'GET /api/odin/clusters/availability': {handler: getClustersAvailability},\n\n    'POST /api/chyt/:cluster/:action': {handler: chytProxyApi},\n\n    'GET    /api/settings/:username': {handler: settingsGet},\n    'POST   /api/settings/:username': {handler: settingsCreate},\n    'GET    /api/settings/:username/:path': {handler: settingsGetItem},\n    'PUT    /api/settings/:username/:path': {handler: settingsSetItem},\n    'DELETE /api/settings/:username/:path': {handler: settingsDeleteItem},\n\n    'GET  /api/table-column-preset/:hash': {\n        handler: tableColumnPresetGet,\n    },\n    'POST /api/table-column-preset': {handler: tableColumnPresetSave},\n\n    'GET /:cluster/': HOME_INDEX_TARGET,\n    'GET /:cluster/maintenance': {handler: homeRedirect},\n    'GET /:cluster/:page': HOME_INDEX_TARGET,\n    'GET /:cluster/:page/:tab': HOME_INDEX_TARGET,\n    'GET /:cluster/:page/:operation/:tab': HOME_INDEX_TARGET,\n    'GET /:cluster/:page/:operation/:job/:tab': HOME_INDEX_TARGET,\n};\n\nexport default routes;\n"],"mappings":"AAAA,SAAwCA,UAAU,QAAO,wBAAwB;AACjF,SAAQC,aAAa,QAAO,8BAA8B;AAC1D,SAAQC,eAAe,QAAO,sBAAsB;AACpD,SAAQC,gBAAgB,QAAO,2BAA2B;AAC1D,SAAQC,UAAU,QAAO,4BAA4B;AACrD,SACIC,cAAc,EACdC,kBAAkB,EAClBC,WAAW,EACXC,eAAe,EACfC,eAAe,QACZ,wBAAwB;AAC/B,SAAQC,SAAS,EAAEC,YAAY,QAAO,oBAAoB;AAC1D,SAAQC,iBAAiB,QAAO,4BAA4B;AAE5D,SAAQC,eAAe,QAAO,wBAAwB;AACtD,SAAQC,oBAAoB,EAAEC,qBAAqB,QAAO,mCAAmC;AAC7F,SAAQC,IAAI,QAAO,oBAAoB;AACvC,SAAQC,oBAAoB,EAAEC,WAAW,EAAEC,YAAY,QAAO,qBAAqB;AACnF,SAAQC,eAAe,QAAO,gCAAgC;AAC9D,SAAQC,qBAAqB,QAAO,gCAAgC;AACpE,SAAQC,YAAY,QAAO,8BAA8B;AACzD,SAAQC,uBAAuB,QAAO,4BAA4B;AAClE,SAAQC,YAAY,QAAO,wBAAwB;AAEnD,IAAMC,iBAAsC,GAAG;EAACC,OAAO,EAAEhB,SAAS;EAAEiB,EAAE,EAAE;AAAI,CAAC;AAE7E,IAAMC,MAAiB,GAAG;EACtB,uBAAuB,EAAEH,iBAAiB;EAC1C,OAAO,EAAEA,iBAAiB;EAC1B,WAAW,EAAE;IAACC,OAAO,EAAEV,IAAI;IAAEa,UAAU,EAAE7B,UAAU,CAAC8B;EAAQ,CAAC;EAC7D,gCAAgC,EAAE;IAACJ,OAAO,EAAEd;EAAiB,CAAC;EAC9D,kCAAkC,EAAE;IAACc,OAAO,EAAEzB;EAAa,CAAC;EAC5D,4BAA4B,EAAE;IAACyB,OAAO,EAAEb;EAAe,CAAC;EACxD,8BAA8B,EAAE;IAACa,OAAO,EAAEN;EAAe,CAAC;EAC1D,oBAAoB,EAAE;IAACM,OAAO,EAAER,WAAW;IAAES,EAAE,EAAE;EAAI,CAAC;EACtD,qBAAqB,EAAE;IAACD,OAAO,EAAEP,YAAY;IAAEQ,EAAE,EAAE;EAAI,CAAC;EACxD,8BAA8B,EAAE;IAACD,OAAO,EAAET,oBAAoB;IAAEU,EAAE,EAAE;EAAI,CAAC;EACzE,uBAAuB,EAAE;IAACD,OAAO,EAAEvB;EAAgB,CAAC;EAEpD,4BAA4B,EAAE;IAACuB,OAAO,EAAEL;EAAqB,CAAC;EAE9D,6CAA6C,EAAE;IAACK,OAAO,EAAExB;EAAe,CAAC;EACzE,6CAA6C,EAAE;IAACwB,OAAO,EAAExB;EAAe,CAAC;EACzE,6CAA6C,EAAE;IAACwB,OAAO,EAAExB;EAAe,CAAC;EAEzE,qCAAqC,EAAE;IAACwB,OAAO,EAAEtB;EAAU,CAAC;EAE5D,uCAAuC,EAAE;IAACsB,OAAO,EAAEJ;EAAY,CAAC;EAChE,qCAAqC,EAAE;IAACI,OAAO,EAAEH;EAAuB,CAAC;EAEzE,iCAAiC,EAAE;IAACG,OAAO,EAAEF;EAAY,CAAC;EAE1D,gCAAgC,EAAE;IAACE,OAAO,EAAEnB;EAAW,CAAC;EACxD,gCAAgC,EAAE;IAACmB,OAAO,EAAErB;EAAc,CAAC;EAC3D,sCAAsC,EAAE;IAACqB,OAAO,EAAElB;EAAe,CAAC;EAClE,sCAAsC,EAAE;IAACkB,OAAO,EAAEjB;EAAe,CAAC;EAClE,sCAAsC,EAAE;IAACiB,OAAO,EAAEpB;EAAkB,CAAC;EAErE,qCAAqC,EAAE;IACnCoB,OAAO,EAAEZ;EACb,CAAC;EACD,+BAA+B,EAAE;IAACY,OAAO,EAAEX;EAAqB,CAAC;EAEjE,gBAAgB,EAAEU,iBAAiB;EACnC,2BAA2B,EAAE;IAACC,OAAO,EAAEf;EAAY,CAAC;EACpD,qBAAqB,EAAEc,iBAAiB;EACxC,0BAA0B,EAAEA,iBAAiB;EAC7C,qCAAqC,EAAEA,iBAAiB;EACxD,0CAA0C,EAAEA;AAChD,CAAC;AAED,eAAeG,MAAM"}
+{"version":3,"names":["AuthPolicy","clusterParams","ytTvmApiHandler","handleRemoteCopy","ytProxyApi","settingsCreate","settingsDeleteItem","settingsGet","settingsGetItem","settingsSetItem","homeIndex","homeRedirect","handleClusterInfo","clusterVersions","tableColumnPresetGet","tableColumnPresetSave","ping","handleChangePassword","handleLogin","getClusterPools","markdownToHtmlHandler","odinProxyApi","getClustersAvailability","chytProxyApi","oauthCallback","oauthLogin","oauthLogout","handleLogout","HOME_INDEX_TARGET","handler","ui","routes","authPolicy","disabled"],"sources":["routes.ts"],"sourcesContent":["import {AppRouteDescription, AppRoutes, AuthPolicy} from '@gravity-ui/expresskit';\nimport {clusterParams} from './controllers/cluster-params';\nimport {ytTvmApiHandler} from './controllers/yt-api';\nimport {handleRemoteCopy} from './controllers/remote-copy';\nimport {ytProxyApi} from './controllers/yt-proxy-api';\nimport {\n    settingsCreate,\n    settingsDeleteItem,\n    settingsGet,\n    settingsGetItem,\n    settingsSetItem,\n} from './controllers/settings';\nimport {homeIndex, homeRedirect} from './controllers/home';\nimport {handleClusterInfo} from './controllers/cluster-info';\n\nimport {clusterVersions} from './controllers/clusters';\nimport {tableColumnPresetGet, tableColumnPresetSave} from './controllers/table-column-preset';\nimport {ping} from './controllers/ping';\nimport {handleChangePassword, handleLogin} from './controllers/login';\nimport {getClusterPools} from './controllers/scheduling-pools';\nimport {markdownToHtmlHandler} from './controllers/markdown-to-html';\nimport {odinProxyApi} from './controllers/odin-proxy-api';\nimport {getClustersAvailability} from './controllers/availability';\nimport {chytProxyApi} from './controllers/chyt-api';\nimport {oauthCallback, oauthLogin, oauthLogout} from './controllers/oauth-login';\nimport {handleLogout} from './controllers/logout';\n\nconst HOME_INDEX_TARGET: AppRouteDescription = {handler: homeIndex, ui: true};\n\nconst routes: AppRoutes = {\n    'GET /change-password/': HOME_INDEX_TARGET,\n    'GET /': HOME_INDEX_TARGET,\n    'GET /ping': {handler: ping, authPolicy: AuthPolicy.disabled},\n    'GET /api/cluster-info/:cluster': {handler: handleClusterInfo},\n    'GET /api/cluster-params/:cluster': {handler: clusterParams},\n    'GET /api/clusters/versions': {handler: clusterVersions},\n    'GET /api/pool-names/:cluster': {handler: getClusterPools},\n    'POST /api/yt/login': {handler: handleLogin, ui: true},\n    'GET /api/yt/logout': {handler: handleLogout, ui: true},\n\n    'GET /oauth/login': {handler: oauthLogin, ui: true},\n    'GET /api/oauth/callback': {handler: oauthCallback, ui: true},\n    'GET /api/oauth/logout/callback': {handler: oauthLogout, ui: true},\n\n    'POST /api/yt/change-password': {handler: handleChangePassword, ui: true},\n    'POST /api/remote-copy': {handler: handleRemoteCopy},\n\n    'POST /api/markdown-to-html': {handler: markdownToHtmlHandler},\n\n    'GET  /api/yt/:cluster/api/:version/:command': {handler: ytTvmApiHandler},\n    'POST /api/yt/:cluster/api/:version/:command': {handler: ytTvmApiHandler},\n    'PUT  /api/yt/:cluster/api/:version/:command': {handler: ytTvmApiHandler},\n\n    'GET /api/yt-proxy/:cluster/:command': {handler: ytProxyApi},\n\n    'GET /api/odin/proxy/:action/:cluster?': {handler: odinProxyApi},\n    'GET /api/odin/clusters/availability': {handler: getClustersAvailability},\n\n    'POST /api/chyt/:cluster/:action': {handler: chytProxyApi},\n\n    'GET    /api/settings/:username': {handler: settingsGet},\n    'POST   /api/settings/:username': {handler: settingsCreate},\n    'GET    /api/settings/:username/:path': {handler: settingsGetItem},\n    'PUT    /api/settings/:username/:path': {handler: settingsSetItem},\n    'DELETE /api/settings/:username/:path': {handler: settingsDeleteItem},\n\n    'GET  /api/table-column-preset/:hash': {\n        handler: tableColumnPresetGet,\n    },\n    'POST /api/table-column-preset': {handler: tableColumnPresetSave},\n\n    'GET /:cluster/': HOME_INDEX_TARGET,\n    'GET /:cluster/maintenance': {handler: homeRedirect},\n    'GET /:cluster/:page': HOME_INDEX_TARGET,\n    'GET /:cluster/:page/:tab': HOME_INDEX_TARGET,\n    'GET /:cluster/:page/:operation/:tab': HOME_INDEX_TARGET,\n    'GET /:cluster/:page/:operation/:job/:tab': HOME_INDEX_TARGET,\n};\n\nexport default routes;\n"],"mappings":"AAAA,SAAwCA,UAAU,QAAO,wBAAwB;AACjF,SAAQC,aAAa,QAAO,8BAA8B;AAC1D,SAAQC,eAAe,QAAO,sBAAsB;AACpD,SAAQC,gBAAgB,QAAO,2BAA2B;AAC1D,SAAQC,UAAU,QAAO,4BAA4B;AACrD,SACIC,cAAc,EACdC,kBAAkB,EAClBC,WAAW,EACXC,eAAe,EACfC,eAAe,QACZ,wBAAwB;AAC/B,SAAQC,SAAS,EAAEC,YAAY,QAAO,oBAAoB;AAC1D,SAAQC,iBAAiB,QAAO,4BAA4B;AAE5D,SAAQC,eAAe,QAAO,wBAAwB;AACtD,SAAQC,oBAAoB,EAAEC,qBAAqB,QAAO,mCAAmC;AAC7F,SAAQC,IAAI,QAAO,oBAAoB;AACvC,SAAQC,oBAAoB,EAAEC,WAAW,QAAO,qBAAqB;AACrE,SAAQC,eAAe,QAAO,gCAAgC;AAC9D,SAAQC,qBAAqB,QAAO,gCAAgC;AACpE,SAAQC,YAAY,QAAO,8BAA8B;AACzD,SAAQC,uBAAuB,QAAO,4BAA4B;AAClE,SAAQC,YAAY,QAAO,wBAAwB;AACnD,SAAQC,aAAa,EAAEC,UAAU,EAAEC,WAAW,QAAO,2BAA2B;AAChF,SAAQC,YAAY,QAAO,sBAAsB;AAEjD,IAAMC,iBAAsC,GAAG;EAACC,OAAO,EAAEnB,SAAS;EAAEoB,EAAE,EAAE;AAAI,CAAC;AAE7E,IAAMC,MAAiB,GAAG;EACtB,uBAAuB,EAAEH,iBAAiB;EAC1C,OAAO,EAAEA,iBAAiB;EAC1B,WAAW,EAAE;IAACC,OAAO,EAAEb,IAAI;IAAEgB,UAAU,EAAEhC,UAAU,CAACiC;EAAQ,CAAC;EAC7D,gCAAgC,EAAE;IAACJ,OAAO,EAAEjB;EAAiB,CAAC;EAC9D,kCAAkC,EAAE;IAACiB,OAAO,EAAE5B;EAAa,CAAC;EAC5D,4BAA4B,EAAE;IAAC4B,OAAO,EAAEhB;EAAe,CAAC;EACxD,8BAA8B,EAAE;IAACgB,OAAO,EAAEV;EAAe,CAAC;EAC1D,oBAAoB,EAAE;IAACU,OAAO,EAAEX,WAAW;IAAEY,EAAE,EAAE;EAAI,CAAC;EACtD,oBAAoB,EAAE;IAACD,OAAO,EAAEF,YAAY;IAAEG,EAAE,EAAE;EAAI,CAAC;EAEvD,kBAAkB,EAAE;IAACD,OAAO,EAAEJ,UAAU;IAAEK,EAAE,EAAE;EAAI,CAAC;EACnD,yBAAyB,EAAE;IAACD,OAAO,EAAEL,aAAa;IAAEM,EAAE,EAAE;EAAI,CAAC;EAC7D,gCAAgC,EAAE;IAACD,OAAO,EAAEH,WAAW;IAAEI,EAAE,EAAE;EAAI,CAAC;EAElE,8BAA8B,EAAE;IAACD,OAAO,EAAEZ,oBAAoB;IAAEa,EAAE,EAAE;EAAI,CAAC;EACzE,uBAAuB,EAAE;IAACD,OAAO,EAAE1B;EAAgB,CAAC;EAEpD,4BAA4B,EAAE;IAAC0B,OAAO,EAAET;EAAqB,CAAC;EAE9D,6CAA6C,EAAE;IAACS,OAAO,EAAE3B;EAAe,CAAC;EACzE,6CAA6C,EAAE;IAAC2B,OAAO,EAAE3B;EAAe,CAAC;EACzE,6CAA6C,EAAE;IAAC2B,OAAO,EAAE3B;EAAe,CAAC;EAEzE,qCAAqC,EAAE;IAAC2B,OAAO,EAAEzB;EAAU,CAAC;EAE5D,uCAAuC,EAAE;IAACyB,OAAO,EAAER;EAAY,CAAC;EAChE,qCAAqC,EAAE;IAACQ,OAAO,EAAEP;EAAuB,CAAC;EAEzE,iCAAiC,EAAE;IAACO,OAAO,EAAEN;EAAY,CAAC;EAE1D,gCAAgC,EAAE;IAACM,OAAO,EAAEtB;EAAW,CAAC;EACxD,gCAAgC,EAAE;IAACsB,OAAO,EAAExB;EAAc,CAAC;EAC3D,sCAAsC,EAAE;IAACwB,OAAO,EAAErB;EAAe,CAAC;EAClE,sCAAsC,EAAE;IAACqB,OAAO,EAAEpB;EAAe,CAAC;EAClE,sCAAsC,EAAE;IAACoB,OAAO,EAAEvB;EAAkB,CAAC;EAErE,qCAAqC,EAAE;IACnCuB,OAAO,EAAEf;EACb,CAAC;EACD,+BAA+B,EAAE;IAACe,OAAO,EAAEd;EAAqB,CAAC;EAEjE,gBAAgB,EAAEa,iBAAiB;EACnC,2BAA2B,EAAE;IAACC,OAAO,EAAElB;EAAY,CAAC;EACpD,qBAAqB,EAAEiB,iBAAiB;EACxC,0BAA0B,EAAEA,iBAAiB;EAC7C,qCAAqC,EAAEA,iBAAiB;EACxD,0CAA0C,EAAEA;AAChD,CAAC;AAED,eAAeG,MAAM"}

package/build/esm/server/utils/authorization.d.ts

@@ -0,0 +1,6 @@
+import type { Request } from 'express';
+import { AppMiddleware } from '@gravity-ui/expresskit';
+import { AuthWay } from '../../shared/constants';
+export declare function isAuthorized(req: Request): boolean;
+export declare function getAuthWay(req: Request): AuthWay | undefined;
+export declare function authorizationResolver(resolver: AppMiddleware): AppMiddleware;

package/build/esm/server/utils/authorization.js

@@ -0,0 +1,28 @@
+import { isUserOAuthLogged } from '../components/oauth';
+export function isAuthorized(req) {
+  if (req.yt) {
+    var _req$yt$ytApiAuthHead;
+    return Boolean(Object.keys((_req$yt$ytApiAuthHead = req.yt.ytApiAuthHeaders) !== null && _req$yt$ytApiAuthHead !== void 0 ? _req$yt$ytApiAuthHead : {}));
+  }
+  return false;
+}
+export function getAuthWay(req) {
+  if (!isAuthorized(req)) {
+    return undefined;
+  }
+  if (isUserOAuthLogged(req)) {
+    return 'oauth';
+  }
+  return 'passwd';
+}
+export function authorizationResolver(resolver) {
+  return function (req, res, next) {
+    if (isAuthorized(req)) {
+      next();
+      return;
+    }
+    resolver(req, res, next);
+    return;
+  };
+}
+// #sourceMappingURL=authorization.js.map

package/build/esm/server/utils/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["isUserOAuthLogged","isAuthorized","req","yt","_req$yt$ytApiAuthHead","Boolean","Object","keys","ytApiAuthHeaders","getAuthWay","undefined","authorizationResolver","resolver","res","next"],"sources":["authorization.ts"],"sourcesContent":["import type {Request} from 'express';\nimport {AppMiddleware} from '@gravity-ui/expresskit';\nimport {AuthWay} from '../../shared/constants';\nimport {isUserOAuthLogged} from '../components/oauth';\n\nexport function isAuthorized(req: Request) {\n    if (req.yt) {\n        return Boolean(Object.keys(req.yt.ytApiAuthHeaders ?? {}));\n    }\n    return false;\n}\n\nexport function getAuthWay(req: Request): AuthWay | undefined {\n    if (!isAuthorized(req)) {\n        return undefined;\n    }\n    if (isUserOAuthLogged(req)) {\n        return 'oauth';\n    }\n    return 'passwd';\n}\n\nexport function authorizationResolver(resolver: AppMiddleware): AppMiddleware {\n    return (req, res, next) => {\n        if (isAuthorized(req)) {\n            next();\n            return;\n        }\n        resolver(req, res, next);\n        return;\n    };\n}\n"],"mappings":"AAGA,SAAQA,iBAAiB,QAAO,qBAAqB;AAErD,OAAO,SAASC,YAAYA,CAACC,GAAY,EAAE;EACvC,IAAIA,GAAG,CAACC,EAAE,EAAE;IAAA,IAAAC,qBAAA;IACR,OAAOC,OAAO,CAACC,MAAM,CAACC,IAAI,EAAAH,qBAAA,GAACF,GAAG,CAACC,EAAE,CAACK,gBAAgB,cAAAJ,qBAAA,cAAAA,qBAAA,GAAI,CAAC,CAAC,CAAC,CAAC;EAC9D;EACA,OAAO,KAAK;AAChB;AAEA,OAAO,SAASK,UAAUA,CAACP,GAAY,EAAuB;EAC1D,IAAI,CAACD,YAAY,CAACC,GAAG,CAAC,EAAE;IACpB,OAAOQ,SAAS;EACpB;EACA,IAAIV,iBAAiB,CAACE,GAAG,CAAC,EAAE;IACxB,OAAO,OAAO;EAClB;EACA,OAAO,QAAQ;AACnB;AAEA,OAAO,SAASS,qBAAqBA,CAACC,QAAuB,EAAiB;EAC1E,OAAO,UAACV,GAAG,EAAEW,GAAG,EAAEC,IAAI,EAAK;IACvB,IAAIb,YAAY,CAACC,GAAG,CAAC,EAAE;MACnBY,IAAI,CAAC,CAAC;MACN;IACJ;IACAF,QAAQ,CAACV,GAAG,EAAEW,GAAG,EAAEC,IAAI,CAAC;IACxB;EACJ,CAAC;AACL"}

package/build/esm/shared/constants/index.d.ts

@@ -2,6 +2,9 @@ export declare const YT_API_REQUEST_ID_HEADER = "X-Custom-Request-Id";
 export declare const YT_CYPRESS_COOKIE_NAME = "YTCypressCookie";
 export declare const YT_LOCAL_CLUSTER_ID = "ui";
 export declare const ODIN_PAGE_ID = "odin";
+export declare const YT_OAUTH_ACCESS_TOKEN_NAME = "yt_oauth_access_token";
+export declare const YT_OAUTH_REFRESH_TOKEN_NAME = "yt_oauth_refresh_token";
+export type AuthWay = 'oauth' | 'passwd';
 /**
  * Allows to succeed requests when master are in read-only mode and the transaction coordinator cell is evicted
  */

package/build/esm/shared/constants/index.js

@@ -2,7 +2,8 @@ export var YT_API_REQUEST_ID_HEADER = 'X-Custom-Request-Id';
 export var YT_CYPRESS_COOKIE_NAME = 'YTCypressCookie';
 export var YT_LOCAL_CLUSTER_ID = 'ui';
 export var ODIN_PAGE_ID = 'odin';
-
+export var YT_OAUTH_ACCESS_TOKEN_NAME = 'yt_oauth_access_token';
+export var YT_OAUTH_REFRESH_TOKEN_NAME = 'yt_oauth_refresh_token';
 /**
  * Allows to succeed requests when master are in read-only mode and the transaction coordinator cell is evicted
  */

package/build/esm/shared/constants/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["YT_API_REQUEST_ID_HEADER","YT_CYPRESS_COOKIE_NAME","YT_LOCAL_CLUSTER_ID","ODIN_PAGE_ID","USE_SUPRESS_SYNC","suppress_transaction_coordinator_sync","suppress_upstream_sync"],"sources":["index.ts"],"sourcesContent":["export const YT_API_REQUEST_ID_HEADER = 'X-Custom-Request-Id';\nexport const YT_CYPRESS_COOKIE_NAME = 'YTCypressCookie';\nexport const YT_LOCAL_CLUSTER_ID = 'ui';\nexport const ODIN_PAGE_ID = 'odin';\n\n/**\n * Allows to succeed requests when master are in read-only mode and the transaction coordinator cell is evicted\n */\nexport const USE_SUPRESS_SYNC = {\n    suppress_transaction_coordinator_sync: true,\n    suppress_upstream_sync: true,\n};\n"],"mappings":"AAAA,OAAO,IAAMA,wBAAwB,GAAG,qBAAqB;AAC7D,OAAO,IAAMC,sBAAsB,GAAG,iBAAiB;AACvD,OAAO,IAAMC,mBAAmB,GAAG,IAAI;AACvC,OAAO,IAAMC,YAAY,GAAG,MAAM;;AAElC;AACA;AACA;AACA,OAAO,IAAMC,gBAAgB,GAAG;EAC5BC,qCAAqC,EAAE,IAAI;EAC3CC,sBAAsB,EAAE;AAC5B,CAAC"}
+{"version":3,"names":["YT_API_REQUEST_ID_HEADER","YT_CYPRESS_COOKIE_NAME","YT_LOCAL_CLUSTER_ID","ODIN_PAGE_ID","YT_OAUTH_ACCESS_TOKEN_NAME","YT_OAUTH_REFRESH_TOKEN_NAME","USE_SUPRESS_SYNC","suppress_transaction_coordinator_sync","suppress_upstream_sync"],"sources":["index.ts"],"sourcesContent":["export const YT_API_REQUEST_ID_HEADER = 'X-Custom-Request-Id';\nexport const YT_CYPRESS_COOKIE_NAME = 'YTCypressCookie';\nexport const YT_LOCAL_CLUSTER_ID = 'ui';\nexport const ODIN_PAGE_ID = 'odin';\n\nexport const YT_OAUTH_ACCESS_TOKEN_NAME = 'yt_oauth_access_token';\nexport const YT_OAUTH_REFRESH_TOKEN_NAME = 'yt_oauth_refresh_token';\n\nexport type AuthWay = 'oauth' | 'passwd';\n\n/**\n * Allows to succeed requests when master are in read-only mode and the transaction coordinator cell is evicted\n */\nexport const USE_SUPRESS_SYNC = {\n    suppress_transaction_coordinator_sync: true,\n    suppress_upstream_sync: true,\n};\n"],"mappings":"AAAA,OAAO,IAAMA,wBAAwB,GAAG,qBAAqB;AAC7D,OAAO,IAAMC,sBAAsB,GAAG,iBAAiB;AACvD,OAAO,IAAMC,mBAAmB,GAAG,IAAI;AACvC,OAAO,IAAMC,YAAY,GAAG,MAAM;AAElC,OAAO,IAAMC,0BAA0B,GAAG,uBAAuB;AACjE,OAAO,IAAMC,2BAA2B,GAAG,wBAAwB;AAInE;AACA;AACA;AACA,OAAO,IAAMC,gBAAgB,GAAG;EAC5BC,qCAAqC,EAAE,IAAI;EAC3CC,sBAAsB,EAAE;AAC5B,CAAC"}

package/build/esm/shared/yt-types.d.ts

@@ -233,6 +233,8 @@ export interface ConfigData {
     uiSettings?: UISettings;
     metrikaCounterId?: number;
     allowLoginDialog?: boolean;
+    allowOAuth?: boolean;
+    oauthButtonLabel?: string;
     allowUserColumnPresets?: boolean;
     odinPageEnabled: boolean;
 }