backend-manager 2.4.1 → 2.4.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-manager",
-  "version": "2.4.1",
+  "version": "2.4.4",
   "description": "Quick tools for developing Firebase functions",
   "main": "src/manager/index.js",
   "bin": {
@@ -49,7 +49,7 @@
     "mocha": "^9.2.2",
     "moment": "^2.29.4",
     "node-fetch": "^2.6.7",
-    "node-powertools": "^0.0.18",
+    "node-powertools": "^0.0.19",
     "npm-api": "^1.0.1",
     "paypal-server-api": "^0.0.7",
     "pushid": "^1.0.0",
@@ -67,4 +67,4 @@
     "src/",
     "templates/"
   ]
-}
+}

package/src/manager/functions/core/actions/api/admin/create-post.js

@@ -15,7 +15,7 @@ Module.prototype.main = function () {
   const payload = self.payload;
 
   return new Promise(async function(resolve, reject) {
-    if (!payload.user.roles.admin) {
+    if (!payload.user.roles.admin || !payload.user.roles.blogger) {
       return reject(assistant.errorManager(`Admin required.`, {code: 401, sentry: false, send: false, log: false}).error)
     }
 

package/src/manager/functions/core/actions/api/firebase/get-providers.js

@@ -1,4 +1,5 @@
 const fetch = require('wonderful-fetch');
+const _ = require('lodash');
 
 function Module() {
 
@@ -13,6 +14,21 @@ Module.prototype.main = function () {
 
   return new Promise(async function(resolve, reject) {
 
+    // console.log('---self.libraries.admin', self.libraries.admin);
+    // console.log('---self.libraries.admin.credential', self.libraries.admin.credential);
+    // console.log('---self.libraries.admin.credential.cert()', self.libraries.admin.credential.cert());
+    // console.log('---self.libraries.admin.credential.refreshToken()', self.libraries.admin.credential.refreshToken());
+    // console.log('---self.libraries.admin.default', self.libraries.admin.default);
+    // console.log('---self.libraries.initializedAdmin', self.libraries.initializedAdmin);
+    // console.log('---self.libraries.admin.INTERNAL', self.libraries.admin.INTERNAL);
+    // console.log('---self.libraries.initializedAdmin.options_.credential', self.libraries.initializedAdmin.options_.credential);
+    // console.log('---self.libraries.initializedAdmin.options_.credential.refreshToken', self.libraries.initializedAdmin.options_.credential.refreshToken);
+    // console.log('---self.libraries.initializedAdmin.options_.credential.refreshToken', self.libraries.initializedAdmin.options_.credential.refreshToken);
+    // console.log('---self.libraries.initializedAdmin.INTERNAL', self.libraries.initializedAdmin.INTERNAL);
+    // const powertools = require('node-powertools');
+    // console.log('---self.libraries.admin', powertools.stringify(self.libraries.admin));
+    // console.log('---self.libraries.initializedAdmin', powertools.stringify(self.libraries.initializedAdmin));
+
     const providers = [
       { name: 'google.com', prefix: ['id_token'] },
       { name: 'facebook.com', prefix: ['access_token'] },
@@ -25,12 +41,17 @@ Module.prototype.main = function () {
     ]
     const promises = []
 
-    payload.data.payload.firebaseApiKey = payload.data.payload.firebaseApiKey || false;
+    payload.data.payload.firebaseApiKey = payload.data.payload.firebaseApiKey || _.get(Manager, 'config.firebaseConfig.apiKey') || false;
 
     if (!payload.data.payload.firebaseApiKey) {
-      return reject(assistant.errorManager(`The <firebaseApiKey> parameter is required.`, {code: 400, sentry: false, send: false, log: false}).error)
+      return reject(assistant.errorManager(`The firebaseApiKey parameter is required.`, {code: 400, sentry: false, send: false, log: false}).error)
     }
 
+    // Default
+    payload.response.data.password = true;
+
+    assistant.log('Checking providers for firebaseApiKey', payload.data.payload.firebaseApiKey);
+
     function request(provider) {
       return new Promise(function(resolve, reject) {
         let prefix = '';
@@ -63,9 +84,10 @@ Module.prototype.main = function () {
               if (error.message.includes('OPERATION_NOT_ALLOWED') || error.message.includes('INVALID_CREDENTIAL_OR_PROVIDER_ID')) {
                 result = false;
               }
+              assistant.log('Provider check', provider.name, error);
             });
 
-            assistant.log('Provider details', provider.name, result);
+            assistant.log('Provider response', provider.name, result);
 
             payload.response.data[provider.name] = result;
           } catch (e) {
@@ -90,7 +112,36 @@ Module.prototype.main = function () {
     await Promise.all(promises)
     .then(response => {
       // console.log('--payload.response.data', promises.length, payload.response.data);
-      return resolve({data: payload.response.data});
+
+      fetch(`https://us-central1-itw-creative-works.cloudfunctions.net/getApp`, {
+        method: 'post',
+        response: 'json',
+        body: {
+          id: Manager.config.app.id,
+        }
+      })
+      .then(response => {
+        assistant.log('getApp response', response);
+        response.authentication = response.authentication || {};
+
+        Object.keys(response.authentication)
+        .forEach((provider, i) => {
+          response.authentication[provider] = response.authentication[provider] || {};
+
+          if (typeof response.authentication[provider].enabled !== 'undefined') {
+            payload.response.data[provider] = false;
+            assistant.log(`Overwriting ${provider}...`, {environment: 'development'});
+          }
+        });
+
+      })
+      .catch(e => {
+        assistant.errorManager(`Error getting app data: ${e}`, {sentry: false, send: false, log: true})
+      })
+      .finally(r => {
+        return resolve({data: payload.response.data});
+      })
+
     })
     .catch(e => {
       return reject(assistant.errorManager(`Failed to check providers: ${e}`, {code: 500, sentry: false, send: false, log: false}).error)
@@ -100,5 +151,4 @@ Module.prototype.main = function () {
 
 };
 
-
 module.exports = Module;

package/src/manager/functions/core/actions/api/user/oauth2/discord.js

@@ -0,0 +1,92 @@
+const decode = require('jwt-decode')
+const _ = require('lodash')
+const fetch = require('wonderful-fetch')
+
+function OAuth2() {
+  const self = this;
+  self.provider = 'discord';
+  self.name = 'Discord';
+  self.urls = {
+    // var oauthURL = 'https://discord.com/api/oauth2/authorize?client_id=701375931918581810&redirect_uri=URL&response_type=code&scope=identify';
+
+    authorize: 'https://discord.com/api/oauth2/authorize',
+    tokenize: 'https://discord.com/api/oauth2/token',
+    status: ''
+  }
+}
+
+OAuth2.prototype.buildUrl = function (state, url) {
+  const self = this;
+
+  return new Promise(function(resolve, reject) {
+    if (state === 'authorize') {
+      // do something with url
+      return resolve()
+    } else {
+      return resolve()
+    }
+  });
+};
+
+OAuth2.prototype.verifyIdentity = function (tokenizeResult) {
+  const self = this;
+  const Manager = self.Manager;
+
+  return new Promise(function(resolve, reject) {
+    const decoded = decode(tokenizeResult.id_token);
+
+    // console.log('---decoded', decoded);
+
+    // Check if exists
+    Manager.libraries.admin.firestore().collection(`users`)
+    .where(`oauth2.${self.provider}.identity.email`, '==', decoded.email)
+    .get()
+    .then(async (snap) => {
+      if (snap.size === 0) {
+        return resolve(decoded);
+      } else {
+        return reject(new Error(`This ${self.name} account is already connected to a ${Manager.config.brand.name} account`));
+      }
+    })
+    .catch((e) => {
+      return reject(e);
+    });
+
+  });
+};
+
+// OAuth2.prototype.verifyConnection = function (newUrl, token) {
+//   const self = this;
+//   const Manager = self.Manager;
+//
+//   return new Promise(function(resolve, reject) {
+//
+//     fetch(newUrl, {
+//       method: 'post',
+//       timeout: 60000,
+//       response: 'json',
+//       tries: 1,
+//       log: true,
+//       cacheBreaker: false,
+//       body: {
+//         id_token: token,
+//       }
+//     })
+//     .then(json => {
+//       // console.log('---json', json);
+//       return resolve('connected');
+//     })
+//     .catch(e => {
+//       try {
+//         const parsed = JSON.parse(e.message);
+//         return reject(new Error(`${parsed.error}: ${parsed.error_description}`))
+//       } catch (e2) {
+//         return reject(e);
+//       }
+//     })
+//
+//   });
+// };
+
+
+module.exports = OAuth2;

package/src/manager/functions/core/actions/api/user/oauth2/google.js

@@ -1,12 +1,16 @@
 const decode = require('jwt-decode')
+const _ = require('lodash')
+const fetch = require('wonderful-fetch')
 
 function OAuth2() {
   const self = this;
-  self.service = 'google';
+  self.provider = 'google';
   self.name = 'Google';
   self.urls = {
     authorize: 'https://accounts.google.com/o/oauth2/v2/auth',
     tokenize: 'https://oauth2.googleapis.com/token',
+    // status: 'https://oauth2.googleapis.com/tokeninfo?id_token={token}'
+    status: 'https://oauth2.googleapis.com/tokeninfo'
   }
 }
 
@@ -34,7 +38,7 @@ OAuth2.prototype.verifyIdentity = function (tokenizeResult) {
 
     // Check if exists
     Manager.libraries.admin.firestore().collection(`users`)
-    .where(`oauth2.${self.service}.identity.email`, '==', decoded.email)
+    .where(`oauth2.${self.provider}.identity.email`, '==', decoded.email)
     .get()
     .then(async (snap) => {
       if (snap.size === 0) {
@@ -50,4 +54,38 @@ OAuth2.prototype.verifyIdentity = function (tokenizeResult) {
   });
 };
 
+// OAuth2.prototype.verifyConnection = function (newUrl, token) {
+//   const self = this;
+//   const Manager = self.Manager;
+//
+//   return new Promise(function(resolve, reject) {
+//
+//     fetch(newUrl, {
+//       method: 'post',
+//       timeout: 60000,
+//       response: 'json',
+//       tries: 1,
+//       log: true,
+//       cacheBreaker: false,
+//       body: {
+//         id_token: token,
+//       }
+//     })
+//     .then(json => {
+//       // console.log('---json', json);
+//       return resolve('connected');
+//     })
+//     .catch(e => {
+//       try {
+//         const parsed = JSON.parse(e.message);
+//         return reject(new Error(`${parsed.error}: ${parsed.error_description}`))
+//       } catch (e2) {
+//         return reject(e);
+//       }
+//     })
+//
+//   });
+// };
+
+
 module.exports = OAuth2;

package/src/manager/functions/core/actions/api/user/oauth2.js

@@ -28,7 +28,7 @@ Module.prototype.main = function () {
         ? `http://localhost:4000/oauth2`
         : `${Manager.config.brand.url}/oauth2`
       self.oauth2 = null;
-      self.omittedPayloadFields = ['redirect', 'referrer', 'service', 'state'];
+      self.omittedPayloadFields = ['redirect', 'referrer', 'provider', 'state'];
 
       // self.ultimateJekyllOAuth2Url = `${Manager.config.brand.url}/oauth2`;
 
@@ -42,11 +42,11 @@ Module.prototype.main = function () {
         ? (assistant.meta.environment === 'development' ? `http://localhost:4000/oauth2` : `${Manager.config.brand.url}/oauth2`)
         : payload.data.payload.referrer
 
-      payload.data.payload.service = payload.data.payload.service || '';
+      payload.data.payload.provider = payload.data.payload.provider || '';
       payload.data.payload.state = payload.data.payload.state || 'authorize'; // authorize, tokenize, deauthorize, refresh, get
       payload.data.payload.redirect_uri = payload.data.payload.redirect_uri
         ? payload.data.payload.redirect_uri
-        : `${Manager.config.brand.url}/authentication/account`;
+        : payload.data.payload.referrer;
 
       // payload.data.payload.parameters = payload.data.payload.parameters || {}
 
@@ -54,9 +54,10 @@ Module.prototype.main = function () {
       // payload.data.payload.scope = payload.data.payload.scope;
 
       let newUrl;
+      const client_id = _.get(Manager.config, `oauth2.${payload.data.payload.provider}.client_id`);
       const state = {
         code: 'success',
-        service: payload.data.payload.service,
+        provider: payload.data.payload.provider,
         authenticationToken: payload.data.authenticationToken,
         serverUrl: `${Manager.project.functionsUrl}/bm_api`,
         referrer: payload.data.payload.referrer,
@@ -66,7 +67,7 @@ Module.prototype.main = function () {
       assistant.log('OAuth2 payload', payload.data.payload);
 
       try {
-        self.oauth2 = new (require(`./oauth2/${payload.data.payload.service}.js`))();
+        self.oauth2 = new (require(`./oauth2/${payload.data.payload.provider}.js`))();
         self.oauth2.parent = self;
         self.oauth2.Manager = self.Manager;
 
@@ -77,8 +78,11 @@ Module.prototype.main = function () {
           newUrl = new URL(newUrl)
 
           if (payload.data.payload.state === 'authorize') {
+            if (!client_id) {
+              throw new Error(`Missing client_id for ${payload.data.payload.provider} provider`)
+            }
             newUrl.searchParams.set('state', JSON.stringify(state));
-            newUrl.searchParams.set('client_id', _.get(Manager.config, `oauth2.${payload.data.payload.service}.client_id`));
+            newUrl.searchParams.set('client_id', client_id);
             newUrl.searchParams.set('scope', payload.data.payload.scope);
             newUrl.searchParams.set('redirect_uri', self.ultimateJekyllOAuth2Url);
 
@@ -113,6 +117,10 @@ Module.prototype.main = function () {
         self.processState_deauthorize(newUrl)
         .then(r => {resolve(r)})
         .catch(e => {reject(e)})
+      } else if (payload.data.payload.state === 'status') {
+        self.processState_status(newUrl)
+        .then(r => {resolve(r)})
+        .catch(e => {reject(e)})
       }
     })
     .catch(e => {
@@ -134,7 +142,7 @@ Module.prototype.processState_authorize = function (newUrl) {
 
     return resolve({
       data: {
-        authorizationUrl: finalUrl,
+        url: finalUrl,
       },
       redirect: payload.data.payload.redirect ? finalUrl : null
     });
@@ -152,8 +160,8 @@ Module.prototype.processState_tokenize = function (newUrl) {
     const finalUrl = newUrl.toString();
 
     const body = {
-      client_id: _.get(Manager.config, `oauth2.${payload.data.payload.service}.client_id`),
-      client_secret: _.get(Manager.config, `oauth2.${payload.data.payload.service}.client_secret`),
+      client_id: _.get(Manager.config, `oauth2.${payload.data.payload.provider}.client_id`),
+      client_secret: _.get(Manager.config, `oauth2.${payload.data.payload.provider}.client_secret`),
       grant_type: 'authorization_code',
       redirect_uri: self.ultimateJekyllOAuth2Url,
       code: payload.data.payload.code,
@@ -197,7 +205,7 @@ Module.prototype.processState_tokenize = function (newUrl) {
     const storeResponse = await self.libraries.admin.firestore().doc(`users/${payload.user.auth.uid}`)
     .set({
       oauth2: {
-        [payload.data.payload.service]: {
+        [payload.data.payload.provider]: {
           code: _.omit(
             _.merge({}, payload.data.payload),
             self.omittedPayloadFields,
@@ -238,7 +246,7 @@ Module.prototype.processState_deauthorize = function () {
     self.libraries.admin.firestore().doc(`users/${payload.user.auth.uid}`)
     .set({
       oauth2: {
-        [payload.data.payload.service]: {},
+        [payload.data.payload.provider]: {},
         updated: {
           timestamp: assistant.meta.startTime.timestamp,
           timestampUNIX: assistant.meta.startTime.timestampUNIX,
@@ -256,7 +264,81 @@ Module.prototype.processState_deauthorize = function () {
   });
 };
 
+Module.prototype.processState_status = function (newUrl) {
+  const self = this;
+  const Manager = self.Manager;
+  const Api = self.Api;
+  const assistant = self.assistant;
+  const payload = self.payload;
+
+  return new Promise(async function(resolve, reject) {
+    const finalUrl = newUrl.toString();
+
+    payload.data.payload.removeInvalidTokens = typeof payload.data.payload.removeInvalidTokens === 'undefined'
+      ? true
+      : payload.data.payload.removeInvalidTokens;
+
+    function _remove() {
+      return new Promise(function(resolve, reject) {
+        if (!payload.data.payload.removeInvalidTokens) {
+          return resolve();
+        }
+
+        Manager.libraries.admin.firestore().doc(`users/${payload.user.auth.uid}`)
+        .set({
+          oauth2: {
+            [payload.data.payload.provider]: {},
+            updated: {
+              timestamp: assistant.meta.startTime.timestamp,
+              timestampUNIX: assistant.meta.startTime.timestampUNIX,
+            }
+          }
+        }, { merge: true })
+        .then(async () => {
+          assistant.log(`Removed disconnected token for user: ${payload.user.auth.uid}`)
+        })
+        .catch((e) => e)
+        .finally(() => {
+          return resolve();
+        })
+      });
+    }
 
+    Manager.libraries.admin.firestore().doc(`users/${payload.user.auth.uid}`)
+    .get()
+    .then(async (doc) => {
+      const data = doc.data();
+      const token = _.get(data, `oauth2.${payload.data.payload.provider}.token.refresh_token`, '');
+      // const token = _.get(data, `oauth2.${payload.data.payload.provider}.token.access_token`, '');
+      if (!token) {
+        return resolve({
+          data: {status: 'disconnected'}
+        });
+      } else if (!self.oauth2.verifyConnection) {
+        return resolve({
+          data: {status: 'connected'}
+        });
+      } else {
+        // self.oauth2.verifyConnection(finalUrl.replace(/{token}/ig, encodeURIComponent(token)), token)
+        self.oauth2.verifyConnection(finalUrl.replace(/{token}/ig, token), token)
+        .then(async (status) => {
+          if (status === 'disconnected') {
+            await _remove();
+          }
+          return resolve({
+            data: {status: status},
+          })
+        })
+        .catch(async (e) => {
+          await _remove();
+          return resolve({
+            data: {status: 'error', error: e.message},
+          })
+        })
+      }
+    })
+  });
+};
 
 
 Module.prototype.processState_template = function (newUrl) {
@@ -271,11 +353,13 @@ Module.prototype.processState_template = function (newUrl) {
 
     return resolve({
       data: {
-        authorizationUrl: finalUrl,
+        url: finalUrl,
       },
       redirect: payload.data.payload.redirect ? finalUrl : null
     });
   });
 };
 
+
+
 module.exports = Module;

package/templates/backend-manager-config.json

@@ -22,5 +22,15 @@
   },
   "google_analytics": {
     "id": "UA-123456789-1"
+  },
+  "firebaseConfig": {
+    "apiKey": "123-456",
+    "authDomain": "PROJECT-ID.firebaseapp.com",
+    "databaseURL": "https://PROJECT-ID.firebaseio.com",
+    "projectId": "PROJECT-ID",
+    "storageBucket": "PROJECT-ID.appspot.com",
+    "messagingSenderId": "123",
+    "appId": "1:123:web:456",
+    "measurementId": "G-0123456789"    
   }
 }