node-server-engine 1.1.6 → 1.1.8

package/dist/middleware/authAdmin/authAdmin.js

@@ -1,105 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.authAdmin = authAdmin;
-var _const = require("../../const");
-var _EngineError = require("../../entities/EngineError");
-var _WebError = require("../../entities/WebError");
-var _utils = require("../../utils");
-require("./authAdmin.types");
-const namespace = 'engine:middleware:authAdmin';
-
-/** Generate a middleware to authenticate the client connection with a Admin api */
-function authAdmin(options) {
-  if (!options.permission) throw new _EngineError.EngineError({
-    message: 'Endpoint using admin auth type must specify permission'
-  });
-  return async (request, response, next) => {
-    const [scheme, credentials] = request.headers?.authorization?.split(' ') ?? [];
-    // No bearer token has been sent
-    if (!credentials || scheme.toLowerCase() !== 'bearer') {
-      throw new _WebError.WebError({
-        errorCode: 'unauthorized',
-        statusCode: 401,
-        message: 'No bearer token found',
-        data: {
-          authorization: request.headers?.authorization
-        }
-      });
-    }
-    (0, _utils.reportDebug)({
-      namespace,
-      message: 'Performing JWT authentication',
-      data: {
-        scheme,
-        credentials
-      }
-    });
-    // Verify token and extract its payload
-    const payload = await (0, _utils.jwtVerify)(credentials, _const.TokenIssuer.ADMIN_API);
-    (0, _utils.reportDebug)({
-      namespace,
-      message: 'Extracted user data from JWT',
-      data: {
-        payload,
-        credentials
-      }
-    });
-    if (!payload.per) throw new _WebError.WebError({
-      errorCode: 'unauthorized',
-      statusCode: 401,
-      message: `User token does not contain any permission claim`
-    });
-
-    // User Permission
-    const permissions = payload.per;
-    const userPermissions = permissions instanceof Array ? permissions : [permissions];
-    (0, _utils.reportDebug)({
-      namespace,
-      message: 'Performing Admin Permission check',
-      data: {
-        permissions,
-        endpointPermission: options.permission,
-        adminPermissions: userPermissions
-      }
-    });
-    if (!checkUserPermissions(userPermissions, options.permission)) {
-      throw new _WebError.WebError({
-        errorCode: 'unauthorized',
-        statusCode: 401,
-        message: `User does not have required permission "${options.permission}"`,
-        data: {
-          userPermissions
-        }
-      });
-    }
-
-    // The user object on the request is hydrated with data from the token
-    request.admin = {
-      ...request.admin,
-      email: payload.sub,
-      permissions: userPermissions
-    };
-    next();
-  };
-}
-
-/** */
-function checkUserPermissions(userPermissions, endpointPermission) {
-  const endpointPermissionParts = endpointPermission.split(':');
-  userPermissionLoop: for (const permission of userPermissions) {
-    const permissionParts = permission.split(':');
-
-    // Ignore if both are not same length
-    if (permissionParts.length !== endpointPermissionParts.length) continue userPermissionLoop;
-    for (let i = 0; i < permissionParts.length; i++) {
-      // Wildcards get automatic validation, otherwise it must match with the same part of the endpoint permission
-      if (permissionParts[i] !== '*' && permissionParts[i] !== endpointPermissionParts[i]) continue userPermissionLoop;
-    }
-    return true;
-  }
-  return false;
-}
-//# sourceMappingURL=authAdmin.js.map

package/dist/middleware/authAdmin/authAdmin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authAdmin.js","names":["_const","require","_EngineError","_WebError","_utils","namespace","authAdmin","options","permission","EngineError","message","request","response","next","scheme","credentials","headers","authorization","split","toLowerCase","WebError","errorCode","statusCode","data","reportDebug","payload","jwtVerify","TokenIssuer","ADMIN_API","per","permissions","userPermissions","Array","endpointPermission","adminPermissions","checkUserPermissions","admin","email","sub","endpointPermissionParts","userPermissionLoop","permissionParts","length","i"],"sources":["../../../src/middleware/authAdmin/authAdmin.ts"],"sourcesContent":["import { Request, Response, NextFunction } from 'express';\nimport { TokenIssuer } from 'const';\nimport { EndpointAuthParams, EndpointAuthType } from 'entities/Endpoint';\nimport { EngineError } from 'entities/EngineError';\nimport { WebError } from 'entities/WebError';\nimport { reportDebug, jwtVerify } from 'utils';\nimport {} from './authAdmin.types';\n\nconst namespace = 'engine:middleware:authAdmin';\n\n/** Generate a middleware to authenticate the client connection with a Admin api */\nexport function authAdmin(\n  options: EndpointAuthParams<EndpointAuthType.ADMIN>\n): (request: Request, response: Response, next: NextFunction) => Promise<void> {\n  if (!options.permission)\n    throw new EngineError({\n      message: 'Endpoint using admin auth type must specify permission'\n    });\n  return async (\n    request: Request,\n    response: Response,\n    next: NextFunction\n  ): Promise<void> => {\n    const [scheme, credentials] =\n      request.headers?.authorization?.split(' ') ?? [];\n    // No bearer token has been sent\n    if (!credentials || scheme.toLowerCase() !== 'bearer') {\n      throw new WebError({\n        errorCode: 'unauthorized',\n        statusCode: 401,\n        message: 'No bearer token found',\n        data: { authorization: request.headers?.authorization }\n      });\n    }\n    reportDebug({\n      namespace,\n      message: 'Performing JWT authentication',\n      data: { scheme, credentials }\n    });\n    // Verify token and extract its payload\n    const payload = await jwtVerify(credentials, TokenIssuer.ADMIN_API);\n    reportDebug({\n      namespace,\n      message: 'Extracted user data from JWT',\n      data: { payload, credentials }\n    });\n\n    if (!payload.per)\n      throw new WebError({\n        errorCode: 'unauthorized',\n        statusCode: 401,\n        message: `User token does not contain any permission claim`\n      });\n\n    // User Permission\n    const permissions = payload.per;\n    const userPermissions =\n      permissions instanceof Array ? permissions : [permissions];\n\n    reportDebug({\n      namespace,\n      message: 'Performing Admin Permission check',\n      data: {\n        permissions,\n        endpointPermission: options.permission,\n        adminPermissions: userPermissions\n      }\n    });\n\n    if (!checkUserPermissions(userPermissions, options.permission)) {\n      throw new WebError({\n        errorCode: 'unauthorized',\n        statusCode: 401,\n        message: `User does not have required permission \"${options.permission}\"`,\n        data: { userPermissions }\n      });\n    }\n\n    // The user object on the request is hydrated with data from the token\n    request.admin = {\n      ...request.admin,\n      email: payload.sub,\n      permissions: userPermissions\n    };\n\n    next();\n  };\n}\n\n/** */\nfunction checkUserPermissions(\n  userPermissions: Array<string>,\n  endpointPermission: string\n): boolean {\n  const endpointPermissionParts = endpointPermission.split(':');\n  userPermissionLoop: for (const permission of userPermissions) {\n    const permissionParts = permission.split(':');\n\n    // Ignore if both are not same length\n    if (permissionParts.length !== endpointPermissionParts.length)\n      continue userPermissionLoop;\n\n    for (let i = 0; i < permissionParts.length; i++) {\n      // Wildcards get automatic validation, otherwise it must match with the same part of the endpoint permission\n      if (\n        permissionParts[i] !== '*' &&\n        permissionParts[i] !== endpointPermissionParts[i]\n      )\n        continue userPermissionLoop;\n    }\n    return true;\n  }\n  return false;\n}\n"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AAEA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AACAA,OAAA;AAEA,MAAMI,SAAS,GAAG,6BAA6B;;AAE/C;AACO,SAASC,SAASA,CACvBC,OAAmD,EAC0B;EAC7E,IAAI,CAACA,OAAO,CAACC,UAAU,EACrB,MAAM,IAAIC,wBAAW,CAAC;IACpBC,OAAO,EAAE;EACX,CAAC,CAAC;EACJ,OAAO,OACLC,OAAgB,EAChBC,QAAkB,EAClBC,IAAkB,KACA;IAClB,MAAM,CAACC,MAAM,EAAEC,WAAW,CAAC,GACzBJ,OAAO,CAACK,OAAO,EAAEC,aAAa,EAAEC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;IAClD;IACA,IAAI,CAACH,WAAW,IAAID,MAAM,CAACK,WAAW,CAAC,CAAC,KAAK,QAAQ,EAAE;MACrD,MAAM,IAAIC,kBAAQ,CAAC;QACjBC,SAAS,EAAE,cAAc;QACzBC,UAAU,EAAE,GAAG;QACfZ,OAAO,EAAE,uBAAuB;QAChCa,IAAI,EAAE;UAAEN,aAAa,EAAEN,OAAO,CAACK,OAAO,EAAEC;QAAc;MACxD,CAAC,CAAC;IACJ;IACA,IAAAO,kBAAW,EAAC;MACVnB,SAAS;MACTK,OAAO,EAAE,+BAA+B;MACxCa,IAAI,EAAE;QAAET,MAAM;QAAEC;MAAY;IAC9B,CAAC,CAAC;IACF;IACA,MAAMU,OAAO,GAAG,MAAM,IAAAC,gBAAS,EAACX,WAAW,EAAEY,kBAAW,CAACC,SAAS,CAAC;IACnE,IAAAJ,kBAAW,EAAC;MACVnB,SAAS;MACTK,OAAO,EAAE,8BAA8B;MACvCa,IAAI,EAAE;QAAEE,OAAO;QAAEV;MAAY;IAC/B,CAAC,CAAC;IAEF,IAAI,CAACU,OAAO,CAACI,GAAG,EACd,MAAM,IAAIT,kBAAQ,CAAC;MACjBC,SAAS,EAAE,cAAc;MACzBC,UAAU,EAAE,GAAG;MACfZ,OAAO,EAAE;IACX,CAAC,CAAC;;IAEJ;IACA,MAAMoB,WAAW,GAAGL,OAAO,CAACI,GAAG;IAC/B,MAAME,eAAe,GACnBD,WAAW,YAAYE,KAAK,GAAGF,WAAW,GAAG,CAACA,WAAW,CAAC;IAE5D,IAAAN,kBAAW,EAAC;MACVnB,SAAS;MACTK,OAAO,EAAE,mCAAmC;MAC5Ca,IAAI,EAAE;QACJO,WAAW;QACXG,kBAAkB,EAAE1B,OAAO,CAACC,UAAU;QACtC0B,gBAAgB,EAAEH;MACpB;IACF,CAAC,CAAC;IAEF,IAAI,CAACI,oBAAoB,CAACJ,eAAe,EAAExB,OAAO,CAACC,UAAU,CAAC,EAAE;MAC9D,MAAM,IAAIY,kBAAQ,CAAC;QACjBC,SAAS,EAAE,cAAc;QACzBC,UAAU,EAAE,GAAG;QACfZ,OAAO,EAAE,2CAA2CH,OAAO,CAACC,UAAU,GAAG;QACzEe,IAAI,EAAE;UAAEQ;QAAgB;MAC1B,CAAC,CAAC;IACJ;;IAEA;IACApB,OAAO,CAACyB,KAAK,GAAG;MACd,GAAGzB,OAAO,CAACyB,KAAK;MAChBC,KAAK,EAAEZ,OAAO,CAACa,GAAG;MAClBR,WAAW,EAAEC;IACf,CAAC;IAEDlB,IAAI,CAAC,CAAC;EACR,CAAC;AACH;;AAEA;AACA,SAASsB,oBAAoBA,CAC3BJ,eAA8B,EAC9BE,kBAA0B,EACjB;EACT,MAAMM,uBAAuB,GAAGN,kBAAkB,CAACf,KAAK,CAAC,GAAG,CAAC;EAC7DsB,kBAAkB,EAAE,KAAK,MAAMhC,UAAU,IAAIuB,eAAe,EAAE;IAC5D,MAAMU,eAAe,GAAGjC,UAAU,CAACU,KAAK,CAAC,GAAG,CAAC;;IAE7C;IACA,IAAIuB,eAAe,CAACC,MAAM,KAAKH,uBAAuB,CAACG,MAAM,EAC3D,SAASF,kBAAkB;IAE7B,KAAK,IAAIG,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGF,eAAe,CAACC,MAAM,EAAEC,CAAC,EAAE,EAAE;MAC/C;MACA,IACEF,eAAe,CAACE,CAAC,CAAC,KAAK,GAAG,IAC1BF,eAAe,CAACE,CAAC,CAAC,KAAKJ,uBAAuB,CAACI,CAAC,CAAC,EAEjD,SAASH,kBAAkB;IAC/B;IACA,OAAO,IAAI;EACb;EACA,OAAO,KAAK;AACd","ignoreList":[]}

package/dist/middleware/authAdmin/authAdmin.types.d.ts

@@ -1,16 +0,0 @@
-declare global {
-    namespace Express {
-        /** Express request object */
-        interface Request {
-            /** User that identified using a JWT */
-            admin?: RequestAdminProps;
-        }
-    }
-}
-/** Admin auth properties of the request */
-export interface RequestAdminProps {
-    /** Email address of the user */
-    email: string;
-    /** List of permissions that the user has */
-    permissions: Array<string>;
-}

package/dist/middleware/authAdmin/authAdmin.types.js

@@ -1,2 +0,0 @@
-"use strict";
-//# sourceMappingURL=authAdmin.types.js.map

package/dist/middleware/authAdmin/authAdmin.types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authAdmin.types.js","names":[],"sources":["../../../src/middleware/authAdmin/authAdmin.types.ts"],"sourcesContent":["// Override the Express request object to add the files\ndeclare global {\n  // eslint-disable-next-line @typescript-eslint/no-namespace\n  namespace Express {\n    /** Express request object */\n    interface Request {\n      /** User that identified using a JWT */\n      admin?: RequestAdminProps;\n    }\n  }\n}\n\n/** Admin auth properties of the request */\nexport interface RequestAdminProps {\n  /** Email address of the user */\n  email: string;\n  /** List of permissions that the user has */\n  permissions: Array<string>;\n}\n"],"mappings":"","ignoreList":[]}

package/dist/middleware/authAdmin/index.d.ts

@@ -1,2 +0,0 @@
-export * from './authAdmin';
-export * from './authAdmin.types';

package/dist/middleware/authAdmin/index.js

@@ -1,28 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-var _authAdmin = require("./authAdmin");
-Object.keys(_authAdmin).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (key in exports && exports[key] === _authAdmin[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _authAdmin[key];
-    }
-  });
-});
-var _authAdmin2 = require("./authAdmin.types");
-Object.keys(_authAdmin2).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (key in exports && exports[key] === _authAdmin2[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _authAdmin2[key];
-    }
-  });
-});
-//# sourceMappingURL=index.js.map

package/dist/middleware/authAdmin/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":["_authAdmin","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_authAdmin2"],"sources":["../../../src/middleware/authAdmin/index.ts"],"sourcesContent":["export * from './authAdmin';\nexport * from './authAdmin.types';\n"],"mappings":";;;;;AAAA,IAAAA,UAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,UAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,UAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,UAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,WAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,WAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,WAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,WAAA,CAAAL,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/dist/utils/getDynamicLink/getDynamicLink.d.ts

@@ -1,3 +0,0 @@
-import { getDynamicLinksOptions } from './getDynamicLink.types';
-/** Fetch a dynamic link from the links service */
-export declare function getDynamicLink(path: string, options?: getDynamicLinksOptions): Promise<string>;

package/dist/utils/getDynamicLink/getDynamicLink.js

@@ -1,28 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.getDynamicLink = getDynamicLink;
-var _getDynamicLink = require("./getDynamicLink.validate");
-var _tlsRequest = require("../tlsRequest");
-/** Fetch a dynamic link from the links service */
-async function getDynamicLink(path, options = {}) {
-  (0, _getDynamicLink.validateDynamicLinkEnvironment)();
-  const option = {
-    method: 'get',
-    url: '/link',
-    baseURL: process.env.LINKS_SERVICE_URL,
-    params: {
-      path,
-      short: options.short ?? true
-    }
-  };
-  const {
-    data: {
-      link
-    }
-  } = await (0, _tlsRequest.tlsRequest)(option);
-  return link;
-}
-//# sourceMappingURL=getDynamicLink.js.map

package/dist/utils/getDynamicLink/getDynamicLink.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"getDynamicLink.js","names":["_getDynamicLink","require","_tlsRequest","getDynamicLink","path","options","validateDynamicLinkEnvironment","option","method","url","baseURL","process","env","LINKS_SERVICE_URL","params","short","data","link","tlsRequest"],"sources":["../../../src/utils/getDynamicLink/getDynamicLink.ts"],"sourcesContent":["import { AxiosRequestConfig } from 'axios';\nimport {\n  getDynamicLinksOptions,\n  DynamicLinkResponseBody\n} from './getDynamicLink.types';\nimport { validateDynamicLinkEnvironment } from './getDynamicLink.validate';\nimport { tlsRequest } from 'utils/tlsRequest';\n\n/** Fetch a dynamic link from the links service */\nexport async function getDynamicLink(\n  path: string,\n  options: getDynamicLinksOptions = {}\n): Promise<string> {\n  validateDynamicLinkEnvironment();\n  const option: AxiosRequestConfig = {\n    method: 'get',\n    url: '/link',\n    baseURL: process.env.LINKS_SERVICE_URL,\n    params: {\n      path,\n      short: options.short ?? true\n    }\n  };\n  const {\n    data: { link }\n  } = await tlsRequest<DynamicLinkResponseBody>(option);\n  return link;\n}\n"],"mappings":";;;;;;AAKA,IAAAA,eAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AAEA;AACO,eAAeE,cAAcA,CAClCC,IAAY,EACZC,OAA+B,GAAG,CAAC,CAAC,EACnB;EACjB,IAAAC,8CAA8B,EAAC,CAAC;EAChC,MAAMC,MAA0B,GAAG;IACjCC,MAAM,EAAE,KAAK;IACbC,GAAG,EAAE,OAAO;IACZC,OAAO,EAAEC,OAAO,CAACC,GAAG,CAACC,iBAAiB;IACtCC,MAAM,EAAE;MACNV,IAAI;MACJW,KAAK,EAAEV,OAAO,CAACU,KAAK,IAAI;IAC1B;EACF,CAAC;EACD,MAAM;IACJC,IAAI,EAAE;MAAEC;IAAK;EACf,CAAC,GAAG,MAAM,IAAAC,sBAAU,EAA0BX,MAAM,CAAC;EACrD,OAAOU,IAAI;AACb","ignoreList":[]}

package/dist/utils/getDynamicLink/getDynamicLink.types.d.ts

@@ -1,10 +0,0 @@
-/** Options to fetch dynamic links */
-export interface getDynamicLinksOptions {
-    /** Make a shortened link */
-    short?: boolean;
-}
-/** Dynamic link query server response */
-export interface DynamicLinkResponseBody {
-    /** The generated dynamic link */
-    link: string;
-}

package/dist/utils/getDynamicLink/getDynamicLink.types.js

@@ -1,2 +0,0 @@
-"use strict";
-//# sourceMappingURL=getDynamicLink.types.js.map

package/dist/utils/getDynamicLink/getDynamicLink.types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"getDynamicLink.types.js","names":[],"sources":["../../../src/utils/getDynamicLink/getDynamicLink.types.ts"],"sourcesContent":["/** Options to fetch dynamic links */\nexport interface getDynamicLinksOptions {\n  /** Make a shortened link */\n  short?: boolean;\n}\n\n/** Dynamic link query server response */\nexport interface DynamicLinkResponseBody {\n  /** The generated dynamic link */\n  link: string;\n}\n"],"mappings":"","ignoreList":[]}

package/dist/utils/getDynamicLink/getDynamicLink.validate.d.ts

@@ -1,2 +0,0 @@
-/** Environment variable validator for get dynamic link from LinkService */
-export declare function validateDynamicLinkEnvironment(): void;

package/dist/utils/getDynamicLink/getDynamicLink.validate.js

@@ -1,14 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.validateDynamicLinkEnvironment = validateDynamicLinkEnvironment;
-var _ = require("./..");
-/** Environment variable validator for get dynamic link from LinkService */
-function validateDynamicLinkEnvironment() {
-  (0, _.assertEnvironment)({
-    LINKS_SERVICE_URL: _.envAssert.isURL()
-  });
-}
-//# sourceMappingURL=getDynamicLink.validate.js.map

package/dist/utils/getDynamicLink/getDynamicLink.validate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"getDynamicLink.validate.js","names":["_","require","validateDynamicLinkEnvironment","assertEnvironment","LINKS_SERVICE_URL","envAssert","isURL"],"sources":["../../../src/utils/getDynamicLink/getDynamicLink.validate.ts"],"sourcesContent":["import { assertEnvironment, envAssert } from 'utils';\n\n/** Environment variable validator for get dynamic link from LinkService */\nexport function validateDynamicLinkEnvironment(): void {\n  assertEnvironment({ LINKS_SERVICE_URL: envAssert.isURL() });\n}\n"],"mappings":";;;;;;AAAA,IAAAA,CAAA,GAAAC,OAAA;AAEA;AACO,SAASC,8BAA8BA,CAAA,EAAS;EACrD,IAAAC,mBAAiB,EAAC;IAAEC,iBAAiB,EAAEC,WAAS,CAACC,KAAK,CAAC;EAAE,CAAC,CAAC;AAC7D","ignoreList":[]}

package/dist/utils/getDynamicLink/index.d.ts

@@ -1,2 +0,0 @@
-export * from './getDynamicLink';
-export * from './getDynamicLink.types';

package/dist/utils/getDynamicLink/index.js

@@ -1,28 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-var _getDynamicLink = require("./getDynamicLink");
-Object.keys(_getDynamicLink).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (key in exports && exports[key] === _getDynamicLink[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _getDynamicLink[key];
-    }
-  });
-});
-var _getDynamicLink2 = require("./getDynamicLink.types");
-Object.keys(_getDynamicLink2).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (key in exports && exports[key] === _getDynamicLink2[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _getDynamicLink2[key];
-    }
-  });
-});
-//# sourceMappingURL=index.js.map

package/dist/utils/getDynamicLink/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":["_getDynamicLink","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_getDynamicLink2"],"sources":["../../../src/utils/getDynamicLink/index.ts"],"sourcesContent":["export * from './getDynamicLink';\nexport * from './getDynamicLink.types';\n"],"mappings":";;;;;AAAA,IAAAA,eAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,eAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,eAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,eAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,gBAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,gBAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,gBAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,gBAAA,CAAAL,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/src/middleware/authAdmin/authAdmin.test.ts

@@ -1,199 +0,0 @@
-import { factory, generateAccessToken, getBearer } from 'backend-test-tools';
-import { expect } from 'chai';
-import { Request, Response } from 'express';
-import { faker } from '@faker-js/faker';
-import { fake } from 'sinon';
-import { authAdmin } from './authAdmin';
-import {} from './authAdmin.types';
-
-describe('Middleware - Auth Admin', () => {
-  it('should authenticate with a JWT (auth-service)', async () => {
-    const email = faker.internet.email();
-    const permission = faker.lorem.word();
-    const request = {
-      headers: {
-        authorization: `Bearer ${generateAccessToken(
-          email,
-          {
-            audience: [process.env.ADMIN_API_ACCESS_TOKEN_AUDIENCE as string],
-            issuer: process.env.ADMIN_ACCESS_TOKEN_ISSUER
-          },
-          { per: permission }
-        )}`
-      }
-    } as unknown as Request;
-    const next = fake();
-
-    await authAdmin({ permission })(
-      request,
-      undefined as unknown as Response,
-      next
-    );
-
-    expect(next).to.have.been.calledOnceWithExactly();
-  });
-
-  it('should populate the admin object in the request (auth-service)', async () => {
-    const email = faker.internet.email();
-    const permission = faker.lorem.word();
-    const permissions = [permission, faker.lorem.word(), faker.lorem.word()];
-    const request = {
-      headers: {
-        authorization: `Bearer ${generateAccessToken(
-          email,
-          {
-            audience: [process.env.ADMIN_API_ACCESS_TOKEN_AUDIENCE as string],
-            issuer: process.env.ADMIN_ACCESS_TOKEN_ISSUER
-          },
-          { per: permissions }
-        )}`
-      }
-    } as unknown as Request;
-    const next = fake();
-
-    await authAdmin({ permission })(
-      request,
-      undefined as unknown as Response,
-      next
-    );
-
-    expect(request.admin?.email).to.equal(email);
-    expect(request.admin?.permissions).to.deep.members(permissions);
-  });
-
-  it('should throw an error if there is no token', async () => {
-    const request = { headers: {} } as unknown as Request;
-    const next = fake();
-
-    await expect(
-      authAdmin({ permission: faker.lorem.word() })(
-        request,
-        undefined as unknown as Response,
-        next
-      )
-    ).to.eventually.be.rejected;
-  });
-
-  it('should throw an error if the audience is not valid', async () => {
-    const user = factory.build('user');
-    const permission = faker.lorem.word();
-    const request = {
-      headers: {
-        authorization: getBearer(
-          user.id,
-          { audience: faker.internet.url() },
-          { per: permission }
-        )
-      }
-    } as unknown as Request;
-    const next = fake();
-
-    await expect(
-      authAdmin({ permission })(request, undefined as unknown as Response, next)
-    ).to.eventually.be.rejected;
-  });
-
-  it('should check user has permission', async () => {
-    const email = faker.internet.email();
-    const permissions = [faker.lorem.word(), faker.lorem.word()];
-    const request = {
-      headers: {
-        authorization: `Bearer ${generateAccessToken(
-          email,
-          {
-            audience: [process.env.ADMIN_API_ACCESS_TOKEN_AUDIENCE as string],
-            issuer: process.env.ADMIN_ACCESS_TOKEN_ISSUER
-          },
-          { per: permissions }
-        )}`
-      }
-    } as unknown as Request;
-    const next = fake();
-
-    await authAdmin({ permission: permissions[0] })(
-      request,
-      undefined as unknown as Response,
-      next
-    );
-
-    expect(request.admin?.email).to.equal(email);
-    expect(request.admin?.permissions).to.deep.members(permissions);
-  });
-
-  it('should all user has endpoint permission', async () => {
-    const email = faker.internet.email();
-    const permission = faker.lorem.word();
-    const request = {
-      headers: {
-        authorization: `Bearer ${generateAccessToken(
-          email,
-          {
-            audience: [process.env.ADMIN_API_ACCESS_TOKEN_AUDIENCE as string],
-            issuer: process.env.ADMIN_ACCESS_TOKEN_ISSUER
-          },
-          { per: permission }
-        )}`
-      }
-    } as unknown as Request;
-    const next = fake();
-
-    await authAdmin({ permission })(
-      request,
-      undefined as unknown as Response,
-      next
-    );
-
-    expect(request.admin?.email).to.equal(email);
-    expect(request.admin?.permissions).to.includes(permission);
-  });
-
-  it('should throw error if user does not have permission', async () => {
-    const email = faker.internet.email();
-    const permissions = [faker.lorem.word(), faker.lorem.word()];
-    const request = {
-      headers: {
-        authorization: `Bearer ${generateAccessToken(
-          email,
-          {
-            audience: [process.env.ADMIN_API_ACCESS_TOKEN_AUDIENCE as string],
-            issuer: process.env.ADMIN_ACCESS_TOKEN_ISSUER
-          },
-          { per: permissions }
-        )}`
-      }
-    } as unknown as Request;
-    const next = fake();
-
-    await expect(
-      authAdmin({ permission: faker.lorem.word() })(
-        request,
-        undefined as unknown as Response,
-        next
-      )
-    ).to.eventually.rejected;
-  });
-
-  it('should allow wildcard permissions', async () => {
-    const email = faker.internet.email();
-    const permission = faker.lorem.word();
-    const request = {
-      headers: {
-        authorization: `Bearer ${generateAccessToken(
-          email,
-          {
-            audience: [process.env.ADMIN_API_ACCESS_TOKEN_AUDIENCE as string],
-            issuer: process.env.ADMIN_ACCESS_TOKEN_ISSUER
-          },
-          { per: `${permission}:*` }
-        )}`
-      }
-    } as unknown as Request;
-    const next = fake();
-
-    await authAdmin({ permission: `${permission}:${faker.lorem.word()}` })(
-      request,
-      undefined as unknown as Response,
-      next
-    );
-  });
-});

package/src/middleware/authAdmin/authAdmin.ts

@@ -1,114 +0,0 @@
-import { Request, Response, NextFunction } from 'express';
-import { TokenIssuer } from 'const';
-import { EndpointAuthParams, EndpointAuthType } from 'entities/Endpoint';
-import { EngineError } from 'entities/EngineError';
-import { WebError } from 'entities/WebError';
-import { reportDebug, jwtVerify } from 'utils';
-import {} from './authAdmin.types';
-
-const namespace = 'engine:middleware:authAdmin';
-
-/** Generate a middleware to authenticate the client connection with a Admin api */
-export function authAdmin(
-  options: EndpointAuthParams<EndpointAuthType.ADMIN>
-): (request: Request, response: Response, next: NextFunction) => Promise<void> {
-  if (!options.permission)
-    throw new EngineError({
-      message: 'Endpoint using admin auth type must specify permission'
-    });
-  return async (
-    request: Request,
-    response: Response,
-    next: NextFunction
-  ): Promise<void> => {
-    const [scheme, credentials] =
-      request.headers?.authorization?.split(' ') ?? [];
-    // No bearer token has been sent
-    if (!credentials || scheme.toLowerCase() !== 'bearer') {
-      throw new WebError({
-        errorCode: 'unauthorized',
-        statusCode: 401,
-        message: 'No bearer token found',
-        data: { authorization: request.headers?.authorization }
-      });
-    }
-    reportDebug({
-      namespace,
-      message: 'Performing JWT authentication',
-      data: { scheme, credentials }
-    });
-    // Verify token and extract its payload
-    const payload = await jwtVerify(credentials, TokenIssuer.ADMIN_API);
-    reportDebug({
-      namespace,
-      message: 'Extracted user data from JWT',
-      data: { payload, credentials }
-    });
-
-    if (!payload.per)
-      throw new WebError({
-        errorCode: 'unauthorized',
-        statusCode: 401,
-        message: `User token does not contain any permission claim`
-      });
-
-    // User Permission
-    const permissions = payload.per;
-    const userPermissions =
-      permissions instanceof Array ? permissions : [permissions];
-
-    reportDebug({
-      namespace,
-      message: 'Performing Admin Permission check',
-      data: {
-        permissions,
-        endpointPermission: options.permission,
-        adminPermissions: userPermissions
-      }
-    });
-
-    if (!checkUserPermissions(userPermissions, options.permission)) {
-      throw new WebError({
-        errorCode: 'unauthorized',
-        statusCode: 401,
-        message: `User does not have required permission "${options.permission}"`,
-        data: { userPermissions }
-      });
-    }
-
-    // The user object on the request is hydrated with data from the token
-    request.admin = {
-      ...request.admin,
-      email: payload.sub,
-      permissions: userPermissions
-    };
-
-    next();
-  };
-}
-
-/** */
-function checkUserPermissions(
-  userPermissions: Array<string>,
-  endpointPermission: string
-): boolean {
-  const endpointPermissionParts = endpointPermission.split(':');
-  userPermissionLoop: for (const permission of userPermissions) {
-    const permissionParts = permission.split(':');
-
-    // Ignore if both are not same length
-    if (permissionParts.length !== endpointPermissionParts.length)
-      continue userPermissionLoop;
-
-    for (let i = 0; i < permissionParts.length; i++) {
-      // Wildcards get automatic validation, otherwise it must match with the same part of the endpoint permission
-      if (
-        permissionParts[i] !== '*' &&
-        permissionParts[i] !== endpointPermissionParts[i]
-      )
-        continue userPermissionLoop;
-    }
-    return true;
-  }
-  return false;
-}

package/src/middleware/authAdmin/authAdmin.types.ts

@@ -1,19 +0,0 @@
-// Override the Express request object to add the files
-declare global {
-  // eslint-disable-next-line @typescript-eslint/no-namespace
-  namespace Express {
-    /** Express request object */
-    interface Request {
-      /** User that identified using a JWT */
-      admin?: RequestAdminProps;
-    }
-  }
-}
-
-/** Admin auth properties of the request */
-export interface RequestAdminProps {
-  /** Email address of the user */
-  email: string;
-  /** List of permissions that the user has */
-  permissions: Array<string>;
-}

package/src/middleware/authAdmin/index.ts

@@ -1,2 +0,0 @@
-export * from './authAdmin';
-export * from './authAdmin.types';