backend-manager 3.2.172 → 3.2.173

package/dist/manager/functions/core/actions/api/user/oauth2.js

@@ -1,476 +0,0 @@
-const _ = require('lodash')
-const fetch = require('wonderful-fetch');
-const { arrayify } = require('node-powertools');
-
-function Module() {
-
-}
-
-/*
-  authorize: redirect or send back the URL for authorization, which will go to UJ page that sends the data back to bm_api
-    - if no client_id is provided, fetch from ITW/APP
-  tokenize: save the credentials in firestore and redirect or respond with URL to the desired end page
-  deauthorize: delete from firestore
-  refresh: call refresh on token
-*/
-
-Module.prototype.main = function () {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    Api.resolveUser({adminRequired: true})
-    .then(async (user) => {
-
-      self.ultimateJekyllOAuth2Url = assistant.isDevelopment()
-        ? `http://localhost:4000/oauth2`
-        : `${Manager.config.brand.url}/oauth2`
-      self.oauth2 = null;
-      self.omittedPayloadFields = ['redirect', 'referrer', 'provider', 'state'];
-
-      // self.ultimateJekyllOAuth2Url = `${Manager.config.brand.url}/oauth2`;
-
-      // Options
-      // payload.data.payload.uid = payload.data.payload.uid;
-      payload.data.payload.redirect = typeof payload.data.payload.redirect === 'undefined'
-        ? true
-        : payload.data.payload.redirect
-
-      payload.data.payload.referrer = typeof payload.data.payload.referrer === 'undefined'
-        ? (assistant.isDevelopment() ? `http://localhost:4000/account` : `${Manager.config.brand.url}/account`)
-        : payload.data.payload.referrer
-
-      payload.data.payload.serverUrl = typeof payload.data.payload.serverUrl === 'undefined'
-        ? (assistant.isDevelopment() ? `${Manager.project.functionsUrl}/bm_api` : `${Manager.project.functionsUrl}/bm_api`)
-        : payload.data.payload.serverUrl
-
-      payload.data.payload.provider = payload.data.payload.provider || '';
-      payload.data.payload.state = payload.data.payload.state || 'authorize'; // authorize, tokenize, deauthorize, refresh, get
-      payload.data.payload.redirect_uri = payload.data.payload.redirect_uri
-        ? payload.data.payload.redirect_uri
-        : payload.data.payload.referrer;
-
-      // payload.data.payload.parameters = payload.data.payload.parameters || {}
-
-      // payload.data.payload.client_id = payload.data.payload.client_id;
-      // payload.data.payload.scope = payload.data.payload.scope;
-
-      let newUrl;
-      const client_id = _.get(Manager.config, `oauth2.${payload.data.payload.provider}.client_id`);
-      const state = {
-        code: 'success',
-        provider: payload.data.payload.provider,
-        authenticationToken: payload.data.authenticationToken,
-        serverUrl: payload.data.payload.serverUrl,
-        referrer: payload.data.payload.referrer,
-        redirectUrl: payload.data.payload.redirect_uri,
-      }
-
-      assistant.log('OAuth2 payload', payload.data.payload);
-
-      if (!payload.data.payload.provider) {
-        return reject(new Error(`The provider parameter is required.`));
-      }
-
-      try {
-        self.oauth2 = new (require(`./oauth2/${payload.data.payload.provider}.js`))();
-        self.oauth2.parent = self;
-        self.oauth2.Manager = self.Manager;
-        self.oauth2.assistant = self.assistant;
-
-        newUrl = self.oauth2.urls[payload.data.payload.state]
-
-        // Set parameters
-        if (newUrl) {
-          newUrl = new URL(newUrl)
-
-          if (payload.data.payload.state === 'authorize') {
-            if (!client_id) {
-              throw new Error(`Missing client_id for ${payload.data.payload.provider} provider`)
-            }
-            newUrl.searchParams.set('state', JSON.stringify(state));
-            newUrl.searchParams.set('client_id', client_id);
-            newUrl.searchParams.set('scope', arrayify(payload.data.payload.scope).join(' '));
-            newUrl.searchParams.set('redirect_uri', self.ultimateJekyllOAuth2Url);
-
-            newUrl.searchParams.set('access_type', typeof payload.data.payload.access_type === 'undefined' ? 'offline' : payload.data.payload.access_type)
-            newUrl.searchParams.set('prompt', typeof payload.data.payload.prompt === 'undefined' ? 'consent' : payload.data.payload.prompt)
-            newUrl.searchParams.set('include_granted_scopes', typeof payload.data.payload.include_granted_scopes === 'undefined' ? 'true' : payload.data.payload.include_granted_scopes)
-            newUrl.searchParams.set('response_type', typeof payload.data.payload.response_type === 'undefined' ? 'code' : payload.data.payload.response_type)
-          }
-
-          assistant.log('OAuth2 newUrl', newUrl);
-
-          await self.oauth2.buildUrl(payload.data.payload.state, newUrl)
-          .then(url => {
-            if (url) {
-              newUrl = url;
-            }
-          })
-          .catch(e => { throw e; });
-        }
-
-      } catch (e) {
-        return reject(e);
-      }
-
-      // Process by state
-      if (payload.data.payload.state === 'authorize') {
-        self.processState_authorize(newUrl, user)
-        .then(r => {resolve(r)})
-        .catch(e => {reject(e)})
-      } else if (payload.data.payload.state === 'tokenize') {
-        self.processState_tokenize(newUrl, user)
-        .then(r => {resolve(r)})
-        .catch(e => {reject(e)})
-      } else if (payload.data.payload.state === 'refresh') {
-        self.processState_refresh(newUrl, user)
-        .then(r => {resolve(r)})
-        .catch(e => {reject(e)})
-      } else if (payload.data.payload.state === 'deauthorize') {
-        self.processState_deauthorize(newUrl, user)
-        .then(r => {resolve(r)})
-        .catch(e => {reject(e)})
-      } else if (payload.data.payload.state === 'status') {
-        self.processState_status(newUrl, user)
-        .then(r => {resolve(r)})
-        .catch(e => {reject(e)})
-      }
-    })
-    .catch(e => {
-      return reject(e);
-    })
-  });
-
-};
-
-Module.prototype.processState_authorize = function (newUrl, user) {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    const finalUrl = newUrl.toString();
-
-    return resolve({
-      data: {
-        url: finalUrl,
-      },
-      redirect: payload.data.payload.redirect ? finalUrl : null
-    });
-  });
-};
-
-Module.prototype.processState_tokenize = function (newUrl, user) {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    const finalUrl = newUrl.toString();
-
-    assistant.log('Running processState_tokenize()');
-
-    const body = {
-      client_id: _.get(Manager.config, `oauth2.${payload.data.payload.provider}.client_id`),
-      client_secret: _.get(Manager.config, `oauth2.${payload.data.payload.provider}.client_secret`),
-      grant_type: 'authorization_code',
-      redirect_uri: self.ultimateJekyllOAuth2Url,
-      code: payload.data.payload.code,
-      // scope: '',
-    };
-
-    assistant.log('body', body);
-
-    const tokenizeResponse = await fetch(finalUrl, {
-      method: 'POST',
-      timeout: 60000,
-      response: 'json',
-      tries: 1,
-      log: true,
-      body: new URLSearchParams(body),
-      cacheBreaker: false,
-      headers: {
-        'Content-Type': 'application/x-www-form-urlencoded',
-      },
-    })
-    .then(json => json)
-    .catch(e => e)
-
-    assistant.log('tokenizeResponse', tokenizeResponse);
-
-    if (tokenizeResponse instanceof Error) {
-      return reject(tokenizeResponse);
-    }
-
-    // Determine identity
-    const verifiedIdentity = await self.oauth2.verifyIdentity(tokenizeResponse)
-    .then(identity => identity)
-    .catch(e => e);
-
-    assistant.log('verifiedIdentity', verifiedIdentity);
-
-    if (verifiedIdentity instanceof Error) {
-      return reject(verifiedIdentity);
-    } else if (tokenizeResponse && !tokenizeResponse.refresh_token) {
-      return reject(new Error(`Missing "refresh_token" in response. This is likely because you disconnected your account and tried to reconnect it. Visit ${self.oauth2.urls.removeAccess} and remove our app from your account and then try again or contact us if you need help!`));
-    }
-
-    const storeResponse = await self.libraries.admin.firestore().doc(`users/${user.auth.uid}`)
-      .set({
-        oauth2: {
-          [payload.data.payload.provider]: {
-            code: _.omit(
-              _.merge({}, payload.data.payload),
-              self.omittedPayloadFields,
-            ),
-            token: tokenizeResponse,
-            identity: verifiedIdentity,
-            updated: {
-              timestamp: assistant.meta.startTime.timestamp,
-              timestampUNIX: assistant.meta.startTime.timestampUNIX,
-            }
-          }
-        },
-        metadata: Manager.Metadata().set({tag: 'user:oauth2'}),
-      }, { merge: true })
-      .then(r => r)
-      .catch(e => e)
-
-    assistant.log('storeResponse', user.auth.uid, storeResponse);
-
-    if (storeResponse instanceof Error) {
-      return reject(storeResponse);
-    }
-
-    return resolve({
-      data: {success: true}
-    })
-
-  });
-};
-
-Module.prototype.processState_refresh = function (newUrl, user) {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    const finalUrl = newUrl.toString();
-
-    assistant.log('Running processState_refresh()');
-
-    const body = {
-      client_id: _.get(Manager.config, `oauth2.${payload.data.payload.provider}.client_id`),
-      client_secret: _.get(Manager.config, `oauth2.${payload.data.payload.provider}.client_secret`),
-      grant_type: 'refresh_token',
-      refresh_token: _.get(user, `oauth2.${payload.data.payload.provider}.token.refresh_token`),
-    };
-
-    assistant.log('body', body);
-
-    const refreshResponse = await fetch(finalUrl, {
-      method: 'POST',
-      timeout: 60000,
-      response: 'json',
-      tries: 1,
-      log: true,
-      body: new URLSearchParams(body),
-      cacheBreaker: false,
-      headers: {
-        'Content-Type': 'application/x-www-form-urlencoded',
-      },
-    })
-    .then(json => json)
-    .catch(e => e)
-
-    assistant.log('refreshResponse', refreshResponse);
-
-    if (refreshResponse instanceof Error) {
-      return reject(refreshResponse);
-    }
-
-    // DISABLED .verifyIdentity() BECAUSE IT WILL TRY TO CHECK IF IT EXISTS
-    // Determine identity
-    // const verifiedIdentity = await self.oauth2.verifyIdentity(refreshResponse)
-    // .then(identity => identity)
-    // .catch(e => e);
-
-    // assistant.log('verifiedIdentity', verifiedIdentity);
-
-    // if (verifiedIdentity instanceof Error) {
-    //   return reject(verifiedIdentity);
-    // } else if (refreshResponse && !refreshResponse.refresh_token) {
-    //   return reject(new Error(`Missing "refresh_token" in response. This is likely because you disconnected your account and tried to reconnect it. Visit ${self.oauth2.urls.removeAccess} and remove our app from your account and then try again or contact us if you need help!`));
-    // }
-
-    const storeResponse = await self.libraries.admin.firestore().doc(`users/${user.auth.uid}`)
-      .set({
-        oauth2: {
-          [payload.data.payload.provider]: {
-            token: refreshResponse,
-            // identity: verifiedIdentity,
-            updated: {
-              timestamp: assistant.meta.startTime.timestamp,
-              timestampUNIX: assistant.meta.startTime.timestampUNIX,
-            }
-          }
-        },
-        metadata: Manager.Metadata().set({tag: 'user:oauth2'}),
-      }, { merge: true })
-      .then(r => r)
-      .catch(e => e)
-
-    assistant.log('storeResponse', user.auth.uid, storeResponse);
-
-    if (storeResponse instanceof Error) {
-      return reject(storeResponse);
-    }
-
-    return resolve({
-      data: {success: true}
-    })
-
-  });
-};
-
-
-Module.prototype.processState_deauthorize = function (newUrl, user) {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    self.libraries.admin.firestore().doc(`users/${user.auth.uid}`)
-      .set({
-        oauth2: {
-          [payload.data.payload.provider]: {},
-          updated: {
-            timestamp: assistant.meta.startTime.timestamp,
-            timestampUNIX: assistant.meta.startTime.timestampUNIX,
-          }
-        },
-        metadata: Manager.Metadata().set({tag: 'user:oauth2'}),
-      }, { merge: true })
-      .then(function(data) {
-        return resolve({
-          data: {success: true},
-        });
-      })
-      .catch(function(e) {
-        return reject(e);
-      })
-  });
-};
-
-Module.prototype.processState_status = function (newUrl, user) {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    const finalUrl = newUrl.toString();
-
-    payload.data.payload.removeInvalidTokens = typeof payload.data.payload.removeInvalidTokens === 'undefined'
-      ? true
-      : payload.data.payload.removeInvalidTokens;
-
-    function _remove() {
-      return new Promise(function(resolve, reject) {
-        if (!payload.data.payload.removeInvalidTokens) {
-          return resolve();
-        }
-
-        Manager.libraries.admin.firestore().doc(`users/${user.auth.uid}`)
-          .set({
-            oauth2: {
-              [payload.data.payload.provider]: {},
-              updated: {
-                timestamp: assistant.meta.startTime.timestamp,
-                timestampUNIX: assistant.meta.startTime.timestampUNIX,
-              }
-            },
-            metadata: Manager.Metadata().set({tag: 'user:oauth2'}),
-          }, { merge: true })
-          .then(async () => {
-            assistant.log(`Removed disconnected token for user: ${user.auth.uid}`)
-          })
-          .catch((e) => e)
-          .finally(() => {
-            return resolve();
-          })
-      });
-    }
-
-    Manager.libraries.admin.firestore().doc(`users/${user.auth.uid}`)
-    .get()
-    .then(async (doc) => {
-      const data = doc.data();
-      const token = _.get(data, `oauth2.${payload.data.payload.provider}.token.refresh_token`, '');
-      // const token = _.get(data, `oauth2.${payload.data.payload.provider}.token.access_token`, '');
-      if (!token) {
-        return resolve({
-          data: {status: 'disconnected'}
-        });
-      } else if (!self.oauth2.verifyConnection) {
-        return resolve({
-          data: {status: 'connected'}
-        });
-      } else {
-        // self.oauth2.verifyConnection(finalUrl.replace(/{token}/ig, encodeURIComponent(token)), token)
-        self.oauth2.verifyConnection(finalUrl.replace(/{token}/ig, token), token)
-        .then(async (status) => {
-          if (status === 'disconnected') {
-            await _remove();
-          }
-          return resolve({
-            data: {status: status},
-          })
-        })
-        .catch(async (e) => {
-          await _remove();
-          return resolve({
-            data: {status: 'error', error: e.message},
-          })
-        })
-      }
-    })
-  });
-};
-
-
-Module.prototype.processState_template = function (newUrl) {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    const finalUrl = newUrl.toString();
-
-    return resolve({
-      data: {
-        url: finalUrl,
-      },
-      redirect: payload.data.payload.redirect ? finalUrl : null
-    });
-  });
-};
-
-
-
-module.exports = Module;

package/dist/manager/functions/core/actions/api/user/regenerate-api-keys.js

@@ -1,54 +0,0 @@
-const uuid4 = require('uuid').v4;
-const UIDGenerator = require('uid-generator');
-const _ = require('lodash')
-const powertools = require('node-powertools')
-const uidgen = new UIDGenerator(256);
-
-function Module() {
-
-}
-
-Module.prototype.main = function () {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    Api.resolveUser({adminRequired: true})
-    .then(async (user) => {
-      const keys = powertools.arrayify(_.get(payload.data.payload, 'keys') || ['clientId', 'privateKey']);
-      const newKeys = {};
-
-      keys
-      .forEach(key => {
-        if (key.match(/client/ig)) {
-          newKeys.clientId = uuid4();
-        } else if (key.match(/private/ig)) {
-          newKeys.privateKey = uidgen.generateSync();
-        }
-      });
-
-      self.libraries.admin.firestore().doc(`users/${user.auth.uid}`)
-      .set({
-        api: newKeys,
-        metadata: Manager.Metadata().set({tag: 'user:regenerate-api-keys'}),
-      }, {merge: true})
-      .then(r => {
-        return resolve({data: newKeys});
-      })
-      .catch(e => {
-        return reject(assistant.errorify(`Failed to generate keys: ${e}`, {code: 500, sentry: true}));
-      })
-
-    })
-    .catch(e => {
-      return reject(e);
-    })
-  });
-
-};
-
-
-module.exports = Module;

package/dist/manager/functions/core/actions/api/user/resolve.js

@@ -1,32 +0,0 @@
-const _ = require('lodash')
-
-function Module() {
-
-}
-
-Module.prototype.main = function () {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    Api.resolveUser({adminRequired: true})
-    .then(async (user) => {
-      // TODO: resolve the account and send back
-      // - Limits for the account
-      // - Usage for the account
-      // - Plan for the account
-
-      // used in EM, WM when signing in or running account().resolve()
-      // on WM, it should hide and show the auth-xxx-xxx things in WM
-    })
-    .catch(e => {
-      return reject(e);
-    })
-  });
-
-};
-
-module.exports = Module;

package/dist/manager/functions/core/actions/api/user/sign-out-all-sessions.js

@@ -1,118 +0,0 @@
-const _ = require('lodash')
-const powertools = require('node-powertools')
-
-function Module() {
-
-}
-
-Module.prototype.main = function () {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-
-    Api.resolveUser({adminRequired: true})
-    .then(async (user) => {
-      const uid = _.get(user, 'auth.uid', null);
-      const id = _.get(payload.data.payload, 'id', 'app');
-      const session = `sessions/${id}`;
-
-      let count = 0;
-
-      try {
-        await self.signOutOfSession(uid, session)
-          .then(r => count += r)
-
-        // Legacy for somiibo and old electron-manager
-        await self.signOutOfSession(uid, 'gatherings/online')
-          .then(r => count += r)
-
-        await self.libraries.admin
-          .auth()
-          .revokeRefreshTokens(uid)
-          .then(() => {
-            return resolve({data: {sessions: count, message: `Successfully signed ${uid} out of all sessions`}});
-          })
-          .catch(e => {
-            return reject(assistant.errorify(`Failed to sign out of all sessions: ${e}`, {code: 500}));
-          })
-      } catch (e) {
-        return reject(assistant.errorify(`Failed to sign out of all sessions: ${e}`, {code: 500}));
-      }
-    })
-    .catch(e => {
-      return reject(e);
-    })
-  });
-
-};
-
-Module.prototype.signOutOfSession = function (uid, session) {
-  const self = this;
-  const Manager = self.Manager;
-  const Api = self.Api;
-  const assistant = self.assistant;
-  const payload = self.payload;
-
-  return new Promise(async function(resolve, reject) {
-    let count = 0;
-
-    await self.libraries.admin.database().ref(session)
-      .orderByChild('uid')
-      .equalTo(uid)
-      .once('value')
-      .then(async (snap) => {
-        const data = snap.val() || {};
-        const keys = Object.keys(data);
-
-        const promises = [];
-
-        assistant.log(`Signing out of ${keys.length} active sessions for ${uid} @ ${session}`)
-
-        for (var i = 0; i < keys.length; i++) {
-          promises.push((async () => {
-            const key = keys[i];
-
-            assistant.log(`Signing out ${session}/${key}...`);
-
-            // Send signout command
-            await self.libraries.admin.database().ref(`${session}/${key}/command`)
-              .set('signout')
-              .catch(e => assistant.error(`Failed to signout of session ${key}`, e))
-
-            // Delay so the client has time to react to the command
-            await powertools.wait(5000);
-
-            // Delete session
-            await self.libraries.admin.database().ref(`${session}/${key}`)
-              .remove()
-              .catch(e => assistant.error(`Failed to delete session ${key}`, e))
-
-            assistant.log(`Signed out successfully: ${key}`);
-
-            count++;
-          })())
-        }
-
-        // Run all promises
-        await Promise.all(promises)
-        .then(() => {
-          return resolve(count);
-        })
-        .catch((e) => {
-          return reject(e);
-        })
-
-      })
-      .catch(e => {
-        assistant.errorify(`Session query error for session ${session}: ${e}`, {code: 500, sentry: true});
-
-        return reject(e);
-      })
-  });
-}
-
-module.exports = Module;