drapcode-utility 1.4.6 → 1.4.8

package/build/encryption/index.d.ts

@@ -1,6 +1,6 @@
 import { AwsConfig, Encryption } from "./model";
-export declare const crypt: (data: any, fields: Array<object>, encryption: Encryption, decrypt: boolean) => Promise<any>;
-export declare const processItemEncryptDecrypt: (item: any, fields: Array<object>, encryption: Encryption, decrypt: boolean) => Promise<any>;
+export declare const crypt: (data: any, fields: Array<object>, encryption: Encryption, decrypt: boolean, encrypedRefCollections?: Array<object>) => Promise<any>;
+export declare const processItemEncryptDecrypt: (item: any, fields: Array<object>, encryption: Encryption, decrypt: boolean, encrypedRefCollections?: Array<object>) => Promise<any>;
 export declare const processDataEncryptionDecryption: (data: string, encryption: Encryption, decrypt: boolean) => Promise<string>;
 /**
  * This method is used to generate private KEY for KMS ARN

package/build/encryption/index.js

@@ -41,83 +41,115 @@ var client_kms_1 = require("@aws-sdk/client-kms");
 var crypt_1 = require("./crypt");
 var file_1 = require("./file");
 var KMS_1 = require("./KMS");
-var crypt = function (data, fields, encryption, decrypt) { return __awaiter(void 0, void 0, void 0, function () {
-    var _a, accessKeyId, secretAccessKey, region, config, plainTextData, promises;
-    return __generator(this, function (_b) {
-        switch (_b.label) {
-            case 0:
-                if (!(encryption.encryptionType === "KMS")) return [3 /*break*/, 2];
-                _a = encryption.awsConfig, accessKeyId = _a.accessKeyId, secretAccessKey = _a.secretAccessKey, region = _a.region;
-                config = {
-                    region: region,
-                    accessKeyId: accessKeyId,
-                    secretAccessKey: secretAccessKey,
-                };
-                return [4 /*yield*/, exports.processKMSDecryption(config, encryption.dataKey, {})];
-            case 1:
-                plainTextData = _b.sent();
-                if (plainTextData.status === "FAILED") {
-                    return [2 /*return*/, plainTextData];
-                }
-                encryption.dataKey = plainTextData.data;
-                _b.label = 2;
-            case 2:
-                if (!Array.isArray(data)) return [3 /*break*/, 4];
-                promises = data.map(function (item) {
-                    return exports.processItemEncryptDecrypt(item, fields, encryption, decrypt);
-                });
-                return [4 /*yield*/, Promise.all(promises)];
-            case 3:
-                data = _b.sent();
-                return [3 /*break*/, 6];
-            case 4: return [4 /*yield*/, exports.processItemEncryptDecrypt(data, fields, encryption, decrypt)];
-            case 5:
-                data = _b.sent();
-                _b.label = 6;
-            case 6: return [2 /*return*/, data];
-        }
+var drapcode_constant_1 = require("drapcode-constant");
+var crypt = function (data, fields, encryption, decrypt, encrypedRefCollections) {
+    if (encrypedRefCollections === void 0) { encrypedRefCollections = []; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        var _a, accessKeyId, secretAccessKey, region, config, plainTextData, promises;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    if (!(encryption.encryptionType === "KMS")) return [3 /*break*/, 2];
+                    _a = encryption.awsConfig, accessKeyId = _a.accessKeyId, secretAccessKey = _a.secretAccessKey, region = _a.region;
+                    config = {
+                        region: region,
+                        accessKeyId: accessKeyId,
+                        secretAccessKey: secretAccessKey,
+                    };
+                    return [4 /*yield*/, exports.processKMSDecryption(config, encryption.dataKey, {})];
+                case 1:
+                    plainTextData = _b.sent();
+                    if (plainTextData.status === "FAILED") {
+                        return [2 /*return*/, plainTextData];
+                    }
+                    encryption.dataKey = plainTextData.data;
+                    _b.label = 2;
+                case 2:
+                    if (!Array.isArray(data)) return [3 /*break*/, 4];
+                    promises = data.map(function (item) {
+                        return exports.processItemEncryptDecrypt(item, fields, encryption, decrypt, encrypedRefCollections);
+                    });
+                    return [4 /*yield*/, Promise.all(promises)];
+                case 3:
+                    data = _b.sent();
+                    return [3 /*break*/, 6];
+                case 4: return [4 /*yield*/, exports.processItemEncryptDecrypt(data, fields, encryption, decrypt, encrypedRefCollections)];
+                case 5:
+                    data = _b.sent();
+                    _b.label = 6;
+                case 6: return [2 /*return*/, data];
+            }
+        });
     });
-}); };
+};
 exports.crypt = crypt;
-var processItemEncryptDecrypt = function (item, fields, encryption, decrypt) { return __awaiter(void 0, void 0, void 0, function () {
-    var _loop_1, _i, _a, fieldName;
-    return __generator(this, function (_b) {
-        switch (_b.label) {
-            case 0:
-                if (!(item && typeof item === "object")) return [3 /*break*/, 4];
-                _loop_1 = function (fieldName) {
-                    var field, _c, _d;
-                    return __generator(this, function (_e) {
-                        switch (_e.label) {
-                            case 0:
-                                field = fields.find(function (field) { return field.fieldName === fieldName; });
-                                if (!(field && field.encrypted)) return [3 /*break*/, 2];
-                                _c = item;
-                                _d = fieldName;
-                                return [4 /*yield*/, exports.processDataEncryptionDecryption(item[fieldName], encryption, decrypt)];
-                            case 1:
-                                _c[_d] = _e.sent();
-                                _e.label = 2;
-                            case 2: return [2 /*return*/];
-                        }
-                    });
-                };
-                _i = 0, _a = Object.keys(item);
-                _b.label = 1;
-            case 1:
-                if (!(_i < _a.length)) return [3 /*break*/, 4];
-                fieldName = _a[_i];
-                return [5 /*yield**/, _loop_1(fieldName)];
-            case 2:
-                _b.sent();
-                _b.label = 3;
-            case 3:
-                _i++;
-                return [3 /*break*/, 1];
-            case 4: return [2 /*return*/, item];
-        }
+var processItemEncryptDecrypt = function (item, fields, encryption, decrypt, encrypedRefCollections) {
+    if (encrypedRefCollections === void 0) { encrypedRefCollections = []; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        var _loop_1, _i, _a, fieldName;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    if (!(item && typeof item === "object")) return [3 /*break*/, 4];
+                    _loop_1 = function (fieldName) {
+                        var field, _c, _d, refField, _e, _f, _g, _h;
+                        return __generator(this, function (_j) {
+                            switch (_j.label) {
+                                case 0:
+                                    field = fields.find(function (field) { return field.fieldName === fieldName; });
+                                    if (!(field && field.encrypted)) return [3 /*break*/, 2];
+                                    _c = item;
+                                    _d = fieldName;
+                                    return [4 /*yield*/, exports.processDataEncryptionDecryption(item[fieldName], encryption, decrypt)];
+                                case 1:
+                                    _c[_d] = _j.sent();
+                                    _j.label = 2;
+                                case 2:
+                                    if (!decrypt) return [3 /*break*/, 6];
+                                    if (![drapcode_constant_1.FieldTypes.reference.id, drapcode_constant_1.FieldTypes.createdBy.id].includes(field === null || field === void 0 ? void 0 : field.type)) return [3 /*break*/, 4];
+                                    refField = field;
+                                    if (!refField.refCollection &&
+                                        field.type === drapcode_constant_1.FieldTypes.createdBy.id) {
+                                        refField.refCollection = {
+                                            collectionField: "userName",
+                                            collectionName: "user",
+                                        };
+                                    }
+                                    _e = item;
+                                    _f = fieldName;
+                                    return [4 /*yield*/, processReferenceItemDecrypt(item[fieldName], encryption, decrypt, refField, encrypedRefCollections)];
+                                case 3:
+                                    _e[_f] = _j.sent();
+                                    return [3 /*break*/, 6];
+                                case 4:
+                                    if (!((field === null || field === void 0 ? void 0 : field.type) === drapcode_constant_1.FieldTypes.dynamic_option.id)) return [3 /*break*/, 6];
+                                    _g = item;
+                                    _h = fieldName;
+                                    return [4 /*yield*/, processDynamicFieldDecrypt(item[fieldName], encryption, decrypt, field, encrypedRefCollections)];
+                                case 5:
+                                    _g[_h] = _j.sent();
+                                    _j.label = 6;
+                                case 6: return [2 /*return*/];
+                            }
+                        });
+                    };
+                    _i = 0, _a = Object.keys(item);
+                    _b.label = 1;
+                case 1:
+                    if (!(_i < _a.length)) return [3 /*break*/, 4];
+                    fieldName = _a[_i];
+                    return [5 /*yield**/, _loop_1(fieldName)];
+                case 2:
+                    _b.sent();
+                    _b.label = 3;
+                case 3:
+                    _i++;
+                    return [3 /*break*/, 1];
+                case 4: return [2 /*return*/, item];
+            }
+        });
     });
-}); };
+};
 exports.processItemEncryptDecrypt = processItemEncryptDecrypt;
 var processDataEncryptionDecryption = function (data, encryption, decrypt) { return __awaiter(void 0, void 0, void 0, function () {
     var encryptionType, dataKey, _a, result, _b;
@@ -150,6 +182,56 @@ var processDataEncryptionDecryption = function (data, encryption, decrypt) { ret
     });
 }); };
 exports.processDataEncryptionDecryption = processDataEncryptionDecryption;
+var processReferenceItemDecrypt = function (data, encryption, decrypt, refField, encrypedRefCollections) { return __awaiter(void 0, void 0, void 0, function () {
+    var refCollection, promises;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                refCollection = getEncryptedReferenceCollection(encrypedRefCollections, refField).refCollection;
+                if (!refCollection) return [3 /*break*/, 2];
+                if (!Array.isArray(data)) return [3 /*break*/, 2];
+                promises = data.map(function (item) {
+                    return exports.processItemEncryptDecrypt(item, refCollection.fields, encryption, decrypt);
+                });
+                return [4 /*yield*/, Promise.all(promises)];
+            case 1:
+                data = _a.sent();
+                _a.label = 2;
+            case 2: return [2 /*return*/, data];
+        }
+    });
+}); };
+var processDynamicFieldDecrypt = function (data, encryption, decrypt, refField, encrypedRefCollections) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, refCollectionFieldName, refCollection, refCollectionField, promises;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                _a = getEncryptedReferenceCollection(encrypedRefCollections, refField), refCollectionFieldName = _a.refCollectionFieldName, refCollection = _a.refCollection;
+                if (!refCollection) return [3 /*break*/, 2];
+                refCollectionField = refCollection.fields.find(function (field) { return field.fieldName === refCollectionFieldName; });
+                if (!(refCollectionField && refCollectionField.encrypted)) return [3 /*break*/, 2];
+                if (!Array.isArray(data)) return [3 /*break*/, 2];
+                promises = data.map(function (item) {
+                    return exports.processDataEncryptionDecryption(item, encryption, decrypt);
+                });
+                return [4 /*yield*/, Promise.all(promises)];
+            case 1:
+                data = _b.sent();
+                _b.label = 2;
+            case 2: return [2 /*return*/, data];
+        }
+    });
+}); };
+var getEncryptedReferenceCollection = function (encrypedRefCollections, refField) {
+    var _a = refField === null || refField === void 0 ? void 0 : refField.refCollection, refCollectionName = _a.collectionName, refCollectionFieldName = _a.collectionField;
+    var refCollection;
+    if (encrypedRefCollections.length) {
+        if (refCollectionName) {
+            refCollection = encrypedRefCollections.find(function (encColl) { return encColl.collectionName === refCollectionName; });
+        }
+    }
+    return { refCollectionName: refCollectionName, refCollectionFieldName: refCollectionFieldName, refCollection: refCollection };
+};
 /**
  * This method is used to generate private KEY for KMS ARN
  * It requires KMS config and ARN

package/build/encryption/utility.d.ts

@@ -0,0 +1 @@
+export declare const getEncryptedReferenceFieldsQuery: (collectionFields: any, projectId: any) => any;

package/build/encryption/utility.js

@@ -0,0 +1,50 @@
+"use strict";
+var __spreadArray = (this && this.__spreadArray) || function (to, from) {
+    for (var i = 0, il = from.length, j = to.length; i < il; i++, j++)
+        to[j] = from[i];
+    return to;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getEncryptedReferenceFieldsQuery = void 0;
+var drapcode_constant_1 = require("drapcode-constant");
+var getEncryptedReferenceFieldsQuery = function (collectionFields, projectId) {
+    var collectionsNamesArr = [];
+    collectionFields.map(function (field) {
+        if (__spreadArray(__spreadArray([], drapcode_constant_1.onlyReferenceField), [
+            drapcode_constant_1.FieldTypes.dynamic_option.id,
+            drapcode_constant_1.FieldTypes.createdBy.id,
+        ]).includes(field.type)) {
+            if (!field.refCollection && field.type === drapcode_constant_1.FieldTypes.createdBy.id) {
+                collectionsNamesArr.push("user");
+            }
+            else {
+                var collectionName = field.refCollection.collectionName;
+                collectionsNamesArr.push(collectionName);
+            }
+        }
+    });
+    var query = [
+        {
+            $match: {
+                projectId: projectId,
+                collectionName: { $in: __spreadArray([], collectionsNamesArr) },
+                fields: { $elemMatch: { encrypted: true } },
+            },
+        },
+        {
+            $project: {
+                _id: 0,
+                collectionName: 1,
+                fields: {
+                    $filter: {
+                        input: "$fields",
+                        as: "item",
+                        cond: { $eq: ["$$item.encrypted", true] },
+                    },
+                },
+            },
+        },
+    ];
+    return query;
+};
+exports.getEncryptedReferenceFieldsQuery = getEncryptedReferenceFieldsQuery;

package/build/index.d.ts

@@ -15,5 +15,6 @@ export * from "./utils/check-error";
 export * from "./utils/prepare-query";
 export * from "./utils/s3-util";
 export * from "./encryption/index";
+export * from "./encryption/utility";
 export * from "./format-fields/index";
 export * from "./utils/token";

package/build/index.js

@@ -27,5 +27,6 @@ __exportStar(require("./utils/check-error"), exports);
 __exportStar(require("./utils/prepare-query"), exports);
 __exportStar(require("./utils/s3-util"), exports);
 __exportStar(require("./encryption/index"), exports);
+__exportStar(require("./encryption/utility"), exports);
 __exportStar(require("./format-fields/index"), exports);
 __exportStar(require("./utils/token"), exports);

package/build/utils/prepare-query.d.ts

@@ -112,6 +112,12 @@ export declare const prepareCollectionQuery: (matchQuery: object, filterId: stri
                 })[];
             };
         };
+        permissionLevelSecurity: {
+            $first: string;
+        };
+        rowLevelSecurityFilter: {
+            $first: string;
+        };
     };
     $match?: undefined;
     $addFields?: undefined;
@@ -132,6 +138,8 @@ export declare const prepareCollectionQuery: (matchQuery: object, filterId: stri
         projectId: number;
         isPrivate: number;
         fields: number;
+        permissionLevelSecurity: number;
+        rowLevelSecurityFilter: number;
     };
     $match?: undefined;
     $addFields?: undefined;

package/build/utils/prepare-query.js

@@ -74,6 +74,8 @@ var prepareCollectionQuery = function (matchQuery, filterId) {
                         ],
                     },
                 },
+                permissionLevelSecurity: { $first: "$permissionLevelSecurity" },
+                rowLevelSecurityFilter: { $first: "$rowLevelSecurityFilter" },
             },
         },
         {
@@ -91,6 +93,8 @@ var prepareCollectionQuery = function (matchQuery, filterId) {
                 projectId: 1,
                 isPrivate: 1,
                 fields: 1,
+                permissionLevelSecurity: 1,
+                rowLevelSecurityFilter: 1,
             },
         },
     ];

package/build/utils/query-parser.d.ts

@@ -1,4 +1,4 @@
-export declare const queryParser: (collectionName: string, query: any, constants: any[], externalParams: any, currentUser: any, timezone: string, searchObj?: any, refCollectionFieldsInItems?: any, searchQueryTypeObj?: any, currentTenant?: any, currentUserSetting?: any, lookupConfig?: any) => Promise<string>;
+export declare const queryParser: (collectionName: string, query: any, constants: any[], externalParams: any, currentUser: any, timezone: string, searchObj: any, refCollectionFieldsInItems: any, searchQueryTypeObj: any, currentTenant: any, currentUserSetting: any, lookupConfig: any, rowLevelSecurityFilter: any) => Promise<string>;
 export declare const isEntityInCondition: (value: any) => boolean;
 export declare const getMinMaxValue: (value: any) => {
     startValue: any;

package/build/utils/query-parser.js

@@ -50,7 +50,7 @@ var drapcode_constant_1 = require("drapcode-constant");
 var date_util_1 = require("./date-util");
 var util_1 = require("./util");
 var prepare_query_1 = require("./prepare-query");
-var queryParser = function (collectionName, query, constants, externalParams, currentUser, timezone, searchObj, refCollectionFieldsInItems, searchQueryTypeObj, currentTenant, currentUserSetting, lookupConfig) {
+var queryParser = function (collectionName, query, constants, externalParams, currentUser, timezone, searchObj, refCollectionFieldsInItems, searchQueryTypeObj, currentTenant, currentUserSetting, lookupConfig, rowLevelSecurityFilter) {
     if (currentUser === void 0) { currentUser = {}; }
     if (searchObj === void 0) { searchObj = null; }
     if (refCollectionFieldsInItems === void 0) { refCollectionFieldsInItems = null; }
@@ -59,10 +59,10 @@ var queryParser = function (collectionName, query, constants, externalParams, cu
     if (currentUserSetting === void 0) { currentUserSetting = {}; }
     if (lookupConfig === void 0) { lookupConfig = []; }
     return __awaiter(void 0, void 0, void 0, function () {
-        var filterQuery, aggregateQuery, queryStr, searchQueryObj, _a, searchAggregateQuery, likeQuery, finalQuery, _b, searchAggregateQuery, likeQuery, projection, finder, sortBy, orderBy, offset, limit, direction, str;
-        var _c, _d;
-        return __generator(this, function (_e) {
-            switch (_e.label) {
+        var filterQuery, rlsFilterQuery, aggregateQuery, queryStr, searchQueryObj, _a, searchAggregateQuery, likeQuery, finalQuery, _b, searchAggregateQuery, likeQuery, projection, finder, sortBy, orderBy, offset, limit, direction, str;
+        var _c, _d, _e;
+        return __generator(this, function (_f) {
+            switch (_f.label) {
                 case 0:
                     if (!collectionName)
                         return [2 /*return*/, ""];
@@ -80,6 +80,13 @@ var queryParser = function (collectionName, query, constants, externalParams, cu
                     console.log("searchQueryTypeObj", JSON.stringify(searchQueryTypeObj));
                     filterQuery = mongoFilterQuery(query, externalParams, constants, currentUser, currentTenant, currentUserSetting, timezone);
                     console.log("filterQuery", JSON.stringify(filterQuery));
+                    rlsFilterQuery = [];
+                    if (rowLevelSecurityFilter && rowLevelSecurityFilter.conditions.length) {
+                        rlsFilterQuery = mongoFilterQuery(rowLevelSecurityFilter, externalParams, constants, currentUser, currentTenant, currentUserSetting, timezone);
+                        console.log("**************************");
+                        console.log("rlsFilterQuery", JSON.stringify(rlsFilterQuery));
+                    }
+                    console.log("==> searchQueryTypeObj :>>", searchQueryTypeObj);
                     aggregateQuery = [];
                     queryStr = ".aggregate([])";
                     if (filterQuery.length &&
@@ -97,8 +104,13 @@ var queryParser = function (collectionName, query, constants, externalParams, cu
                         console.log("aggregateQuery After search object condition", JSON.stringify(aggregateQuery));
                         console.log("searchQueryObj", JSON.stringify(searchQueryObj));
                         finalQuery = { $and: filterQuery };
+                        if (rlsFilterQuery.length &&
+                            ((rlsFilterQuery[0].$or && rlsFilterQuery[0].$or.length) ||
+                                (rlsFilterQuery[0].$and && rlsFilterQuery[0].$and.length))) {
+                            (_c = finalQuery.$and).push.apply(_c, rlsFilterQuery);
+                        }
                         if (searchQueryObj) {
-                            (_c = finalQuery.$and).push.apply(_c, searchQueryObj);
+                            (_d = finalQuery.$and).push.apply(_d, searchQueryObj);
                         }
                         console.log("finalQuery after", JSON.stringify(finalQuery));
                         aggregateQuery.push({ $match: finalQuery });
@@ -121,8 +133,8 @@ var queryParser = function (collectionName, query, constants, externalParams, cu
                             return prepare_query_1.commonLookupSetting(field, lookupConfig, aggregateQuery);
                         }))];
                 case 1:
-                    _e.sent();
-                    _e.label = 2;
+                    _f.sent();
+                    _f.label = 2;
                 case 2:
                     if (finder != "COUNT" && !util_1.isEmpty(projection)) {
                         aggregateQuery.push({ $project: projection });
@@ -138,7 +150,7 @@ var queryParser = function (collectionName, query, constants, externalParams, cu
                     }
                     if (finder != "COUNT" && sortBy) {
                         direction = orderBy && orderBy == "asc" ? 1 : -1;
-                        aggregateQuery.push({ $sort: (_d = {}, _d[sortBy] = direction, _d._id = 1, _d) });
+                        aggregateQuery.push({ $sort: (_e = {}, _e[sortBy] = direction, _e._id = 1, _e) });
                     }
                     if (finder != "COUNT" && limit) {
                         aggregateQuery.push({ $skip: +offset }, { $limit: +limit });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drapcode-utility",
-  "version": "1.4.6",
+  "version": "1.4.8",
   "description": "",
   "main": "build/index.js",
   "types": "build/index.d.ts",