alp-node-auth 5.3.1 → 6.0.0

package/src/.eslintrc.json

@@ -7,7 +7,7 @@
   "plugins": ["@typescript-eslint"],
   "extends": [
     "@pob/eslint-config-typescript",
-    "@pob/eslint-config-typescript-node"
+    "@pob/eslint-config-typescript/node"
   ],
   "ignorePatterns": ["*.d.ts"],
   "rules": {
@@ -15,5 +15,22 @@
     "@typescript-eslint/no-unsafe-assignment": "warn",
     "@typescript-eslint/no-unsafe-call": "warn",
     "@typescript-eslint/no-unsafe-member-access": "warn"
-  }
+  },
+  "overrides": [
+    {
+      "files": ["**/*.test.ts", "__tests__/**/*.ts"],
+      "extends": ["@pob/eslint-config-typescript/test"],
+      "env": {
+        "jest": true
+      },
+      "rules": {
+        "import/no-extraneous-dependencies": [
+          "error",
+          {
+            "devDependencies": true
+          }
+        ]
+      }
+    }
+  ]
 }

package/src/MongoUsersManager.ts

@@ -3,7 +3,7 @@ import type { User, Account, UserSanitized } from '../types.d';
 
 export default class MongoUsersManager<
   U extends User = User,
-  USanitized extends UserSanitized = UserSanitized
+  USanitized extends UserSanitized = UserSanitized,
 > {
   store: MongoStore<U>;
 
@@ -52,6 +52,7 @@ export default class MongoUsersManager<
       };
     }
 
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
     return this.store.findOne(query);
   }
 

package/src/authApolloContext.ts

@@ -1,6 +1,6 @@
 import type { IncomingMessage } from 'http';
 import type { NodeConfig } from 'alp-types';
-import Logger from 'nightingale-logger';
+import { Logger } from 'nightingale-logger';
 import type { User } from '../types.d';
 import type MongoUsersManager from './MongoUsersManager';
 import { getTokenFromRequest, COOKIE_NAME } from './utils/cookies';
@@ -24,9 +24,7 @@ export const createAuthApolloContext = <U extends User = User>(
   usersManager: MongoUsersManager<U>,
 ): any => {
   const findConnectedAndUser = createFindConnectedAndUser(
-    config
-      .get<Map<string, string>>('authentication')
-      .get('secretKey') as string,
+    config.get<Map<string, string>>('authentication').get('secretKey')!,
     usersManager,
     logger,
   );
@@ -38,11 +36,13 @@ export const createAuthApolloContext = <U extends User = User>(
 
     if (!req) return null;
 
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
     const token = getTokenFromReq(req);
 
     if (!token) return { user: undefined };
 
     const [, user] = await findConnectedAndUser(
+      // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
       req.headers['user-agent'],
       token,
     );

package/src/authSocketIO.ts

@@ -1,6 +1,6 @@
 import type { NodeApplication } from 'alp-types';
 import type { Option } from 'cookies';
-import Logger from 'nightingale-logger';
+import { Logger } from 'nightingale-logger';
 import type { User } from '../types.d';
 import type MongoUsersManager from './MongoUsersManager';
 import { getTokenFromRequest } from './utils/cookies';
@@ -11,13 +11,12 @@ const logger = new Logger('alp:auth');
 export const authSocketIO = <U extends User = User>(
   app: NodeApplication,
   usersManager: MongoUsersManager<U>,
+  // eslint-disable-next-line @typescript-eslint/explicit-module-boundary-types
   io: any,
   options?: Pick<Option, Exclude<keyof Option, 'secure'>>,
 ): void => {
   const findConnectedAndUser = createFindConnectedAndUser(
-    app.config
-      .get<Map<string, string>>('authentication')
-      .get('secretKey') as string,
+    app.config.get<Map<string, string>>('authentication').get('secretKey')!,
     usersManager,
     logger,
   );
@@ -27,11 +26,13 @@ export const authSocketIO = <U extends User = User>(
 
   io.use(async (socket: any, next: any) => {
     const handshakeData = socket.request;
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
     const token = getTokenFromRequest(handshakeData);
 
     if (!token) return next();
 
     const [connected, user] = await findConnectedAndUser(
+      // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
       handshakeData.headers['user-agent'],
       token,
     );

package/src/createAuthController.ts

@@ -14,7 +14,7 @@ import type {
 export interface CreateAuthControllerParams<
   StrategyKeys extends AllowedStrategyKeys,
   U extends User = User,
-  USanitized extends UserSanitized = UserSanitized
+  USanitized extends UserSanitized = UserSanitized,
 > {
   authenticationService: AuthenticationService<StrategyKeys, U, UserSanitized>;
   homeRouterKey?: string;
@@ -47,7 +47,7 @@ export interface AuthHooks<StrategyKeys extends AllowedStrategyKeys>
 export function createAuthController<
   StrategyKeys extends AllowedStrategyKeys,
   U extends User = User,
-  USanitized extends UserSanitized = UserSanitized
+  USanitized extends UserSanitized = UserSanitized,
 >({
   usersManager,
   authenticationService,

package/src/index.ts

@@ -3,7 +3,7 @@ import { promisify } from 'util';
 import type { Context } from 'alp-node';
 import type { ContextState, NodeApplication } from 'alp-types';
 import jsonwebtoken from 'jsonwebtoken';
-import Logger from 'nightingale-logger';
+import { Logger } from 'nightingale-logger';
 import type { User, UserSanitized } from '../types.d';
 import type MongoUsersManager from './MongoUsersManager';
 import type {
@@ -21,7 +21,6 @@ import type { AccountService } from './services/user/types';
 import { getTokenFromRequest, COOKIE_NAME } from './utils/cookies';
 import { createFindConnectedAndUser } from './utils/createFindConnectedAndUser';
 
-export { AuthenticationService };
 export { default as MongoUsersManager } from './MongoUsersManager';
 export { default as UserAccountGoogleService } from './services/user/UserAccountGoogleService';
 export { default as UserAccountSlackService } from './services/user/UserAccountSlackService';
@@ -30,6 +29,7 @@ export { createAuthApolloContext } from './authApolloContext';
 export { STATUSES } from './services/user/UserAccountsService';
 
 declare module 'alp-types' {
+  // eslint-disable-next-line @typescript-eslint/no-shadow
   interface ContextState {
     connected: NonNullable<ContextState['user']>['_id'] | null | undefined;
     user: User | null | undefined;
@@ -58,11 +58,12 @@ const signPromisified: any = promisify(jsonwebtoken.sign);
 
 export type AuthController = AuthControllerType;
 export type AuthRoutes = AuthRoutesType;
+export { AuthenticationService } from './services/authentification/AuthenticationService';
 
 export default function init<
   StrategyKeys extends AllowedStrategyKeys = 'google',
   U extends User = User,
-  USanitized extends UserSanitized = UserSanitized
+  USanitized extends UserSanitized = UserSanitized,
 >({
   homeRouterKey,
   usersManager,
@@ -80,6 +81,7 @@ export default function init<
   authHooks?: AuthHooks<StrategyKeys>;
   jwtAudience?: string;
 }) {
+  // eslint-disable-next-line @typescript-eslint/explicit-module-boundary-types
   return (app: NodeApplication) => {
     const userAccountsService = new UserAccountsService(
       usersManager,
@@ -125,6 +127,7 @@ export default function init<
         },
       );
 
+      // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
       this.cookies.set(COOKIE_NAME, token, {
         httpOnly: true,
         secure: this.config.get('allowHttps'),

package/src/services/authentification/AuthenticationService.ts

@@ -1,9 +1,11 @@
+/* eslint-disable @typescript-eslint/no-unsafe-argument */
+/* eslint-disable @typescript-eslint/explicit-module-boundary-types */
 /* eslint-disable @typescript-eslint/no-unsafe-assignment */
 /* eslint-disable camelcase, max-lines */
 import { EventEmitter } from 'events';
 import 'alp-router';
 import type { Context, NodeConfig } from 'alp-types';
-import Logger from 'nightingale-logger';
+import { Logger } from 'nightingale-logger';
 import type { OAuthClient } from 'simple-oauth2';
 import type { AccountId, User, Account, UserSanitized } from '../../../types.d';
 import { randomHex } from '../../utils/generators';
@@ -58,7 +60,7 @@ export interface AccessResponseHooks<StrategyKeys, U extends User = User> {
 export class AuthenticationService<
   StrategyKeys extends AllowedStrategyKeys,
   U extends User = User,
-  USanitized extends UserSanitized = UserSanitized
+  USanitized extends UserSanitized = UserSanitized,
 > extends EventEmitter {
   config: NodeConfig;
 
@@ -296,7 +298,7 @@ export class AuthenticationService<
     }
     return this.refreshToken(account.provider as StrategyKeys, {
       // accessToken: account.accessToken,
-      refreshToken: account.refreshToken as string,
+      refreshToken: account.refreshToken!,
     }).then((tokens: Tokens) => {
       if (!tokens) {
         // serviceGoogle.updateFields({ accessToken:null, refreshToken:null, status: .OUTDATED });

package/src/services/user/UserAccountGoogleService.ts

@@ -1,9 +1,12 @@
-/* global fetch */
+/* eslint-disable @typescript-eslint/no-unsafe-argument */
+/* eslint-disable @typescript-eslint/explicit-module-boundary-types */
+import { fetch } from 'alp-node';
 import type { Tokens } from '../authentification/types';
 import type { AccountService, FullName } from './types';
 
 export default class UserAccountGoogleService<ScopeKeys extends 'login'>
-  implements AccountService<ScopeKeys> {
+  implements AccountService<ScopeKeys>
+{
   scopeKeyToScope: Record<ScopeKeys, string>;
 
   constructor(scopeKeyToScope: Record<Exclude<'login', ScopeKeys>, string>) {
@@ -57,8 +60,8 @@ export default class UserAccountGoogleService<ScopeKeys extends 'login'>
   getScope(oldScope: string[] | undefined, newScope: string): string[] {
     return !oldScope
       ? newScope.split(' ')
-      : oldScope
-          .concat(newScope.split(' '))
-          .filter((item: any, i: any, ar: string[]) => ar.indexOf(item) === i);
+      : [...oldScope, ...newScope.split(' ')].filter(
+          (item, i, ar) => ar.indexOf(item) === i,
+        );
   }
 }

package/src/services/user/UserAccountSlackService.ts

@@ -1,11 +1,13 @@
-/* global fetch */
+/* eslint-disable @typescript-eslint/explicit-module-boundary-types */
+import { fetch } from 'alp-node';
 import type { Tokens } from '../authentification/types';
 import type { AccountService, FullName } from './types';
 
 // https://api.slack.com/methods/users.identity
 
 export default class UserAccountSlackService<ScopeKeys extends 'login'>
-  implements AccountService<ScopeKeys> {
+  implements AccountService<ScopeKeys>
+{
   scopeKeyToScope: Record<ScopeKeys, string>;
 
   constructor(scopeKeyToScope: Record<Exclude<'login', ScopeKeys>, string>) {
@@ -61,8 +63,8 @@ export default class UserAccountSlackService<ScopeKeys extends 'login'>
   getScope(oldScope: string[] | undefined, newScope: string): string[] {
     return !oldScope
       ? newScope.split(' ')
-      : oldScope
-          .concat(newScope.split(' '))
-          .filter((item: any, i: any, ar: string[]) => ar.indexOf(item) === i);
+      : [...oldScope, ...newScope.split(' ')].filter(
+          (item, i, ar) => ar.indexOf(item) === i,
+        );
   }
 }

package/src/services/user/UserAccountsService.ts

@@ -1,5 +1,6 @@
+/* eslint-disable @typescript-eslint/no-shadow */
 import { EventEmitter } from 'events';
-import Logger from 'nightingale-logger';
+import { Logger } from 'nightingale-logger';
 import type { AccountId, User, Account, UserSanitized } from '../../../types.d';
 import type MongoUsersManager from '../../MongoUsersManager';
 import type { AllowedStrategyKeys } from '../authentification/types';
@@ -15,7 +16,7 @@ export const STATUSES = {
 export default class UserAccountsService<
   StrategyKeys extends AllowedStrategyKeys,
   U extends User = User,
-  USanitized extends UserSanitized = UserSanitized
+  USanitized extends UserSanitized = UserSanitized,
 > extends EventEmitter {
   private readonly strategyToService: Record<StrategyKeys, AccountService<any>>;
 
@@ -109,13 +110,12 @@ export default class UserAccountsService<
 
     const emails = service.getEmails(profile);
 
-    let user:
-      | Partial<U>
-      | undefined = await this.usersManager.findOneByAccountOrEmails({
-      provider: service.providerKey,
-      accountId,
-      emails,
-    });
+    let user: Partial<U> | undefined =
+      await this.usersManager.findOneByAccountOrEmails({
+        provider: service.providerKey,
+        accountId,
+        emails,
+      });
 
     logger.info(!user ? 'create user' : 'existing user', { emails, user });
 
@@ -168,6 +168,7 @@ export default class UserAccountsService<
     });
 
     user.emailDomains = [
+      // eslint-disable-next-line unicorn/no-array-reduce
       ...user.emails.reduce(
         (domains: Set<string>, email: string) =>
           domains.add(email.split('@', 2)[1]),

package/src/utils/cookies.ts

@@ -8,7 +8,8 @@ export const getTokenFromRequest = (
   req: IncomingMessage,
   options?: Pick<Option, Exclude<keyof Option, 'secure'>>,
 ): string | undefined => {
-  const cookies = new Cookies(req, (null as unknown) as any, {
+  // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
+  const cookies = new Cookies(req, null as unknown as any, {
     ...options,
     secure: true,
   });

package/src/utils/createFindConnectedAndUser.ts

@@ -6,7 +6,7 @@ import type {
   VerifyOptions,
 } from 'jsonwebtoken';
 import jsonwebtoken from 'jsonwebtoken';
-import type Logger from 'nightingale-logger';
+import type { Logger } from 'nightingale-logger';
 import type { User, UserSanitized } from '../../types.d';
 import type MongoUsersManager from '../MongoUsersManager';
 
@@ -24,16 +24,15 @@ const verifyPromisified = promisify<
   Parameters<VerifyCallback>[1]
 >(jsonwebtoken.verify as Verify);
 
-const createDecodeJWT = (secretKey: string) => async (
-  token: string,
-  jwtAudience: string,
-): Promise<string | undefined> => {
-  const result = await verifyPromisified(token, secretKey, {
-    algorithms: ['HS512'],
-    audience: jwtAudience,
-  });
-  return (result as any)?.connected as string | undefined;
-};
+const createDecodeJWT =
+  (secretKey: string) =>
+  async (token: string, jwtAudience: string): Promise<string | undefined> => {
+    const result = await verifyPromisified(token, secretKey, {
+      algorithms: ['HS512'],
+      audience: jwtAudience,
+    });
+    return (result as any)?.connected as string | undefined;
+  };
 
 export type FindConnectedAndUser<U extends User> = (
   jwtAudience?: string,
@@ -42,7 +41,7 @@ export type FindConnectedAndUser<U extends User> = (
 
 export const createFindConnectedAndUser = <
   U extends User,
-  USanitized extends UserSanitized
+  USanitized extends UserSanitized,
 >(
   secretKey: string,
   usersManager: MongoUsersManager<U, USanitized>,

package/strategies/dropbox.js

@@ -1,11 +1,9 @@
-'use strict';
+import { create } from 'simple-oauth2';
 
-const oauth2 = require('simple-oauth2').create;
-
-module.exports = function dropboxStrategy(config) {
+export default function dropboxStrategy(config) {
   return {
     type: 'oauth2',
-    oauth2: oauth2({
+    oauth2: create({
       client: {
         id: config.get('dropbox').get('clientId'),
         secret: config.get('dropbox').get('clientSecret'),
@@ -17,4 +15,4 @@ module.exports = function dropboxStrategy(config) {
       },
     }),
   };
-};
+}

package/strategies/facebook.js

@@ -1,11 +1,9 @@
-'use strict';
+import { create } from 'simple-oauth2';
 
-const oauth2 = require('simple-oauth2').create;
-
-module.exports = function facebookStrategy(config) {
+export default function facebookStrategy(config) {
   return {
     type: 'oauth2',
-    oauth2: oauth2({
+    oauth2: create({
       client: {
         id: config.get('facebook').get('clientId'),
         secret: config.get('facebook').get('clientSecret'),
@@ -17,4 +15,4 @@ module.exports = function facebookStrategy(config) {
       },
     }),
   };
-};
+}

package/strategies/foursquare.js

@@ -1,11 +1,9 @@
-'use strict';
+import { create } from 'simple-oauth2';
 
-const oauth2 = require('simple-oauth2').create;
-
-module.exports = function foursquareStrategy(config) {
+export default function foursquareStrategy(config) {
   return {
     type: 'oauth2',
-    oauth2: oauth2({
+    oauth2: create({
       client: {
         id: config.get('foursquare').get('clientId'),
         secret: config.get('foursquare').get('clientSecret'),
@@ -17,4 +15,4 @@ module.exports = function foursquareStrategy(config) {
       },
     }),
   };
-};
+}

package/strategies/github.js

@@ -1,11 +1,9 @@
-'use strict';
+import { create } from 'simple-oauth2';
 
-const oauth2 = require('simple-oauth2').create;
-
-module.exports = function githubStrategy(config) {
+export default function githubStrategy(config) {
   return {
     type: 'oauth2',
-    oauth2: oauth2({
+    oauth2: create({
       client: {
         id: config.get('github').get('clientId'),
         secret: config.get('github').get('clientSecret'),
@@ -17,4 +15,4 @@ module.exports = function githubStrategy(config) {
       },
     }),
   };
-};
+}

package/strategies/google.js

@@ -1,11 +1,9 @@
-'use strict';
+import { create } from 'simple-oauth2';
 
-const oauth2 = require('simple-oauth2').create;
-
-module.exports = function googleStrategy(config) {
+export default function googleStrategy(config) {
   return {
     type: 'oauth2',
-    oauth2: oauth2({
+    oauth2: create({
       client: {
         id: config.get('google').get('clientId'),
         secret: config.get('google').get('clientSecret'),
@@ -17,4 +15,4 @@ module.exports = function googleStrategy(config) {
       },
     }),
   };
-};
+}

package/strategies/slack.js

@@ -1,11 +1,9 @@
-'use strict';
+import { create } from 'simple-oauth2';
 
-const oauth2 = require('simple-oauth2').create;
-
-module.exports = function slackStrategy(config) {
+export default function slackStrategy(config) {
   return {
     type: 'oauth2',
-    oauth2: oauth2({
+    oauth2: create({
       client: {
         id: config.get('slack').get('clientId'),
         secret: config.get('slack').get('clientSecret'),
@@ -17,4 +15,4 @@ module.exports = function slackStrategy(config) {
       },
     }),
   };
-};
+}