aloux-iam 0.0.6 → 0.0.8

package/lib/auth.js

@@ -0,0 +1,91 @@
+const jwt = require('jsonwebtoken')
+const User = require('./models/User')
+const Permission = require('./models/Permission')
+
+const getAccess = (user, resource) => {
+    for(let i in user._functions){
+        for(let j in user._functions[i]._permissions){
+            if(user._functions[i]._permissions[j].status === 'Activo'){
+                const permissionBack = user._functions[i]._permissions[j].method + ' ' + user._functions[i]._permissions[j].endpoint
+                if(permissionBack === resource.method + ' ' + resource.endpoint){
+                    return true
+                }
+            }
+        }
+    }
+    return false
+}
+
+const auth = async(req, res, next) => {
+
+    try {
+        
+        let token = req.cookies.token || req.header('Authorization')
+
+        if (!token) {
+            throw {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: 'Endpoint requiere token',
+                suggestion: 'Vuelve a iniciar sesion',
+                error: new Error()
+              }
+        }
+
+        token = token.replace('Bearer ', '')
+
+        const data = jwt.verify(token, process.env.AUTH_SECRET)
+        const user = await User.findOne({ _id: data._id, 'tokens.token': token, status: 'Activo' }, {"tokens":0,pwd:0}).populate({ path: "_functions", populate: [{ path: "_permissions"}] }).lean()
+        
+        if (!user) {
+            throw {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: 'No se encontró el usuario',
+                suggestion: 'Vuelve a iniciar sesion',
+                error: new Error()
+              }
+        }
+
+        const resource = await Permission.findOne({ method: req.originalMethod, endpoint: req.route.path }).lean()
+        if(!resource){
+            throw {
+                code: 403,
+                title: 'Error de recurso',
+                detail: 'No se encontro  dado de alta el privilegio del endpoint: [' + req.route.path + ']',
+                suggestion: 'Contacta con el administrador',
+                error: new Error()
+              }
+        }
+
+        if(!resource.default){
+            const access = getAccess(user, resource)
+            if (!access) {
+                throw {
+                    code: 403,
+                    title: 'Error de permisos',
+                    detail: 'No cuentas con permisos para el recurso [' + resource.api +'] que: ' + (resource ? resource.description : 'Recurso indefinido' ),
+                    suggestion: 'Contacta con el administrador',
+                    error: new Error()
+                  }
+            }
+        }
+
+        req.user = user
+        req.token = token
+        next()
+    } catch (error) {
+        let obj = error
+        if(!error.code){
+            obj = {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: error.message,
+                suggestion: 'Vuelve a iniciar sesion'
+            }
+        }
+        res.status(obj.code).send(obj)
+    }
+}
+
+module.exports = auth

package/lib/models/User.js

@@ -5,7 +5,7 @@ const ObjectId = mongoose.Schema.Types.ObjectId
 
 const adminSchema = mongoose.Schema({
   name:        { type: String, required: true, trim: true },
-  lastName:    { type: String, required: true, trim: true },
+  lastName:    { type: String, required: false, trim: true },
   email:       { type: String, required: true, trim: true, unique: true, lowercase: true },
   pwd:         { type: String, required: true, trim: true, minLength: 8 },
   phone:       { type: String, trim: true, maxLength: 13 },

package/lib/router.js

@@ -13,7 +13,7 @@ router.post('/iam/auth/email',                     auth.email)
 router.post('/iam/auth/login',                     auth.login)
 router.post('/iam/auth/forgot/password',           auth.recoverpassword) 
 router.post('/iam/auth/validate/code',             auth.verifyCode) 
-router.post('/iam/auth/verify/mail',               auth.sendVerifyMailAccount)// sin documentar
+router.post('/iam/auth/verify/mail',               auth.sendVerifyMailAccount)
 router.get('/iam/auth/verify/mail/token/:token',   auth.verifyMailTokenAccount)
 router.post('/iam/auth/reset/password',            auth.resetPassword)
 router.post('/iam/auth/signup',                    auth.createCustomer)

package/lib/swagger.yaml

@@ -71,7 +71,7 @@ paths:
                 type: object
                 items: 
                   type: string
-  /iam/auth/send/verify/mail: 
+  /iam/auth/verify/mail: 
     post: 
       tags: 
         - users - self 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "aloux-iam",
-    "version": "0.0.6",
+    "version": "0.0.8",
     "description": "Aloux IAM for APIs ",
     "main": "index.js",
     "scripts": {