nodefony 7.0.2 → 10.0.0-alpha.2

package/cli/builder/bundles/users-bundle/controller/api/graphql/userResolver.js

@@ -1,121 +0,0 @@
-module.exports = {
-  Query: {
-    //  provides all functions for each API endpoint
-    async user (obj, field, context, info) {
-      const user = context.getUser();
-      const usersService = context.get("users");
-      return await usersService.findOne(field.username, user);
-    },
-
-    async users (obj, field, context, info) {
-      const user = context.getUser();
-      const usersService = context.get("users");
-      const res = await usersService.find({}, {}, user);
-      return res.rows;
-    }
-  },
-  Mutation: {
-    async addUser (obj, field, context, info) {
-      const {
-        input
-      } = field;
-      const user = context.getUser();
-      const usersService = context.get("users");
-      let myuser = null;
-      let error = null;
-      if (!input.password || !input.confirm) {
-        error = new Error("Password can't be empty");
-      }
-      if (input.password !== input.confirm) {
-        error = new Error("Bad confirm password");
-      }
-      if (error) {
-        context.logger(error, "ERROR");
-        throw error;
-      }
-      try {
-        myuser = await usersService.create(input, user);
-        if (myuser) {
-          delete myuser.password;
-          delete myuser["2fa-token"];
-          return myuser;
-        }
-        throw new nodefony.Error("user not create", 400);
-      } catch (e) {
-        context.logger(e, "ERROR");
-        throw new nodefony.Error(e, 400);
-      }
-    },
-
-    updateUser (obj, field, context, info) {
-      const user = context.getUser();
-      const usersService = context.get("users");
-      const orm = context.kernel.getORM();
-      const {
-        input
-      } = field;
-      const {username} = input;
-      return usersService.findOne(username, user)
-        .then(async (myuser) => {
-          if (myuser) {
-            if (input.password) {
-              let confirm = false;
-              if (input.confirm) {
-                if (input.password !== input.confirm) {
-                  throw new Error("Bad confirm password");
-                }
-                delete input.confirm;
-                confirm = true;
-              }
-              if (input["old-password"]) {
-                const encoder = orm.getNodefonyEntity("user").getEncoder();
-                const check = await encoder.isPasswordValid(input["old-password"], myuser.password);
-                if (!check) {
-                  throw new Error(`User ${username} bad passport`);
-                }
-                delete input["old-password"];
-                confirm = true;
-              }
-              if (!confirm) {
-                throw new Error(`User ${username} no confirm passport`);
-              }
-            }
-            return usersService.update(myuser, input, user)
-              .then(async (res) => {
-                const message = `Update User ${input.username} OK`;
-                context.log(message, "INFO");
-                if (context.session && myuser.username === user.username) {
-                  if (input.username !== myuser.username) {
-                    user.username = input.username;
-                  }
-                  if (context.locale !== input.lang) {
-                    context.session.set("lang", input.lang);
-                  }
-                }
-                const newUser = await usersService.findOne(input.username, user);
-                delete newUser.password;
-                delete newUser["2fa-token"];
-                return newUser;
-              });
-          }
-          throw new Error(`User ${username} not found`);
-        });
-    },
-
-    deleteUser (obj, field, context, info) {
-      const {
-        username
-      } = field;
-      const user = context.getUser();
-      const usersService = context.get("users");
-      return usersService.delete(username, user);
-    },
-
-    deleteUsers (obj, field, context, info) {
-      const {
-        users
-      } = field;
-      return [];
-    }
-  }
-};

package/cli/builder/bundles/users-bundle/controller/api/graphql/usertype.js

@@ -1,58 +0,0 @@
-const type = `
-
-  scalar Date
-  scalar Url
-  scalar Array
-
-  type User {
-    username: String!
-    surname: String
-    name: String
-    enabled: Boolean
-    userNonExpired: Boolean
-    credentialsNonExpired : Boolean
-    accountNonLocked: Boolean
-    email : String!
-    lang : String
-    gender: String
-    url : Url
-    createdAt: Date
-    updatedAt: Date
-    image: String
-    roles : Array
-  }
-
-  input UserInput {
-    username: String!
-    surname: String
-    name: String
-    enabled: Boolean
-    password: String
-    confirm: String
-    userNonExpired: Boolean
-    credentialsNonExpired : Boolean
-    accountNonLocked: Boolean
-    email : String!
-    lang : String
-    gender: String
-    url : Url
-    image: String
-    roles : Array
-  }
-
-  # the schema allows the following query:
-  type Query {
-    user(username: String!): User
-    users: [User]
-  }
-
-  # this schema allows the following mutation:
-  type Mutation {
-    addUser(input: UserInput!): User!
-    updateUser(username:String!, input: UserInput!): User!
-    deleteUser(username:String!): User!
-    deleteUsers(users:Array!): [User]!
-  }
-`;
-
-module.exports = type;

package/cli/builder/bundles/users-bundle/controller/api/openapi/loginApiController.js

@@ -1,210 +0,0 @@
-/**
- *    @Route ("/api/jwt")
- */
-class loginApiController extends nodefony.Controller {
-  constructor (container, context) {
-    super(container, context);
-    this.security = this.get("security");
-    this.jwtFactory = this.security.getFactory("jwt");
-    this.jwtSettings = this.bundle.settings.jwt;
-    this.usersService = this.get("users");
-    // JSON API
-    this.api = new nodefony.api.OpenApi({
-      name: "login-api",
-      version: this.bundle.version,
-      description: "Nodefony Login Api",
-      basePath: "/api/jwt"
-    }, this.context);
-  }
-
-  /**
-   *    @Method ({"GET"})
-   *    @Route (
-   *      "/documentation",
-   *      name="api-login-doc"
-   *    )
-   *    @Firewall ({bypass:true})
-   */
-  swaggerAction () {
-    return this.optionsAction();
-  }
-
-  /**
-   *    @Method ({"OPTIONS"})
-   *    @Route ( "",name="api-login-options",)
-   */
-  optionsAction () {
-    try {
-      const openApiConfig = require(path.resolve(this.bundle.path, "Resources", "swagger", "openapi", "login.js"));
-      return this.api.renderSchema(openApiConfig, this.usersService.entity);
-    } catch (e) {
-      return this.api.renderError(e, 400);
-    }
-  }
-
-  /**
-   *    @Method ({"POST"})
-   *    @Route (
-   *      "/login",
-   *      name="api-login-jwt"
-   *    )
-   */
-  async loginAction () {
-    if (!this.context.token) {
-      return this.createException("No Auth Token", 401);
-    }
-    try {
-      if (!this.context.token.user.enabled) {
-        const error = new Error(`User : ${this.context.token.user.username} disabled`);
-        throw this.createSecurityException(error);
-      }
-      const token = this.jwtFactory.generateJwtToken(
-        this.context.token.serialize(),
-        this.jwtSettings.token
-      );
-      const refreshToken = await this.jwtFactory.generateJwtRefreshToken(
-        this.context.token.user.username,
-        token,
-        this.jwtSettings.refreshToken
-      );
-      return this.api.render({
-        decodedToken: this.jwtFactory.decodeJwtToken(token),
-        token,
-        refreshToken
-      });
-    } catch (e) {
-      throw this.createException(e, 401);
-    }
-  }
-
-  /**
-   *    @Method ({"POST"})
-   *    @Route (
-   *      "/token",
-   *      name="api-login-jwt-token"
-   *    )
-   *    @Firewall ({bypass:true})
-   */
-  async tokenAction () {
-    try {
-      // get refreshToken from request
-      let sessionToken = null;
-      let refreshToken = null;
-      // for statefull
-      if (this.session) {
-        sessionToken = this.session.get("refreshToken");
-      }
-      refreshToken = this.request.headers.refreshtoken || this.query.refreshToken || sessionToken;
-      if (!refreshToken) {
-        throw this.createSecurityException("refreshToken parameter Not found");
-      }
-      // verify refreshToken expired
-      const refresh = await this.jwtFactory.verifyRefreshToken(refreshToken)
-        .catch((e) => {
-          throw this.createSecurityException(e);
-        });
-      const {username} = refresh.data;
-      if (!username) {
-        throw this.createSecurityException("username not valid");
-      }
-      const dtuser = await this.usersService.findOne(username);
-      // controll user enabled
-      if (dtuser && dtuser.enabled) {
-        // generate new token access
-        const token = this.jwtFactory.generateJwtToken({
-          user: dtuser
-        }, this.jwtSettings.token);
-        await this.jwtFactory.updateJwtRefreshToken(dtuser.username, token, refreshToken);
-        return this.api.render({
-          decodedToken: this.jwtFactory.decodeJwtToken(token),
-          token
-        });
-      }
-      throw this.createSecurityException("User not valid");
-    } catch (e) {
-      throw this.createException(e);
-    }
-  }
-
-  /**
-   *    @Method ({"POST"})
-   *    @Route (
-   *      "/refresh",
-   *      name="api-login-jwt-refresh"
-   *    )
-   */
-  async refreshAction () {
-    // get refreshToken from request
-    let sessionToken = null;
-    let sessionRefreshToken = null;
-    let refreshToken = null;
-    let token = null;
-    // for statefull
-    if (this.session) {
-      sessionToken = this.session.get("token");
-      sessionRefreshToken = this.session.get("refreshToken");
-    }
-    refreshToken = this.request.headers.refreshtoken || this.query.refreshToken || sessionRefreshToken;
-    token = this.request.headers.jwt || this.query.token || sessionToken;
-    if (!refreshToken || !token) {
-      throw this.createSecurityException("refreshToken or token parameter Not found");
-    }
-    // verify refreshToken expired
-    const refresh = await this.jwtFactory.verifyRefreshToken(refreshToken)
-      .catch((e) => {
-        throw this.createSecurityException(e);
-      });
-    const {username} = refresh.data;
-    if (!username) {
-      throw this.createSecurityException("username not valid");
-    }
-    const dtuser = await this.usersService.findOne(username);
-    // controll user enabled
-    if (dtuser && dtuser.enabled) {
-      await this.jwtFactory.truncateJwtToken(this.context.token.user.username);
-      const refreshToken = await this.jwtFactory.generateJwtRefreshToken(
-        this.context.token.user.username,
-        token,
-        this.jwtSettings.refreshToken
-      );
-      return this.api.render({
-        decodedToken: this.jwtFactory.decodeJwtToken(token),
-        token,
-        refreshToken
-      });
-    }
-    throw this.createSecurityException("User not valid");
-  }
-
-  /**
-   *    @Method ({"POST"})
-   *    @Route (
-   *      "/token/truncate",
-   *      name="api-login-jwt-truncate"
-   *    )
-   */
-  async truncateAction () {
-    try {
-      const res = await this.jwtFactory.truncateJwtToken(this.query.username);
-      return this.api.render({
-        nbDeleted: res
-      });
-    } catch (e) {
-      throw this.api.renderError(e, 401);
-    }
-  }
-
-  /**
-   *    @Method ({"POST"})
-   *    @Route ("/logout", name="api-login-jwt-logout")
-   */
-  logoutAction () {
-    return this.logout()
-      .then(() => this.api.render({
-        logout: "ok"
-      }))
-      .catch((e) => this.api.render(e, 500));
-  }
-}
-
-module.exports = loginApiController;

package/cli/builder/bundles/users-bundle/controller/api/openapi/restUserController.js

@@ -1,244 +0,0 @@
-/**
- *    @Route ("/api/users")
- */
-class restController extends nodefony.Controller {
-  constructor (container, context) {
-    super(container, context);
-    // service entity
-    this.usersService = this.get("users");
-    // api
-    this.api = new nodefony.api.OpenApi({
-      name: "users-api",
-      version: this.bundle.version,
-      description: "Nodefony Users Api",
-      basePath: "/api/users"
-    }, this.context);
-  }
-
-  checkAuthorisation (username, query) {
-    const granted = this.is_granted("ROLE_ADMIN");
-    if (username) {
-      const user = this.getUser();
-      if (!user) {
-        throw new nodefony.authorizationError("Unauthorized", 401, this.context);
-      }
-      if (user.username !== username) {
-        if (!granted) {
-          throw new nodefony.authorizationError("Unauthorized Role", 401, this.context);
-        }
-      }
-    } else if (!granted) {
-      throw new nodefony.authorizationError("Unauthorized", 401, this.context);
-    }
-    if (query && query.roles && query.roles.length) {
-      if (query.roles.indexOf("ROLE_ADMIN") >= 0 && !granted) {
-        throw new nodefony.authorizationError("Unauthorized Role", 401, this.context);
-      }
-    }
-    return true;
-  }
-
-  /**
-   *    @Method ({"GET"})
-   *    @Route ("/documentation",
-   *      name="nodefony-users-apidoc"
-   *    )
-   *    @Firewall ({bypass:true})
-   */
-  swaggerAction () {
-    return this.optionsAction();
-  }
-
-  /**
-   *    @Method ({"OPTIONS"})
-   *    @Route ( "",name="api-users-options")
-   */
-  optionsAction () {
-    try {
-      const openApiConfig = require(path.resolve(this.bundle.path, "Resources", "swagger", "openapi", "users.js"));
-      return this.api.renderSchema(openApiConfig, this.usersService.entity);
-    } catch (e) {
-      return this.api.renderError(e, 400);
-    }
-  }
-
-  /**
-   *    @Method ({"GET"})
-   *    @Route ( "/{username}",name="api-user",defaults={"username" = ""})
-   */
-  async getAction (username) {
-    let result = null;
-    const user = this.getUser();
-    try {
-      if (username) {
-        result = await this.usersService.findOne(username, this.query, user);
-        delete result.password;
-        delete result["2fa-token"];
-      } else {
-        result = await this.usersService.find(this.query.query, this.query, user);
-        result.rows.map((user) => {
-          delete user.password;
-          delete user["2fa-token"];
-        });
-      }
-      return this.api.render(result);
-    } catch (e) {
-      return this.api.renderError(e);
-    }
-  }
-
-  /**
-   *    @Method ({"HEAD"})
-   *    @Route ( "",name="api-users-head",)
-   */
-  headAction () {
-    return this.renderResponse("");
-  }
-
-  /**
-   *    @Method ({"POST"})
-   *    @Route ( "",name="api-users-post")
-   */
-  async postAction () {
-    let myuser = null;
-    let error = null;
-    if (!this.query.password || !this.query.confirm) {
-      error = new Error("Password can't be empty");
-    }
-    if (this.query.password !== this.query.confirm) {
-      error = new Error("Bad confirm password");
-    }
-    if (error) {
-      this.logger(error, "ERROR");
-      throw error;
-    }
-    try {
-      this.checkAuthorisation(null, this.query);
-      const user = this.getUser();
-      myuser = await this.usersService.create(this.query, user);
-      if (myuser) {
-        delete myuser.password;
-        delete myuser["2fa-token"];
-        const res = {
-          query: this.query,
-          user: myuser
-        };
-        return this.api.render(res);
-      }
-      return this.api.render({
-        query: this.query,
-        user: null
-      });
-    } catch (e) {
-      this.log(e, "ERROR");
-      return this.api.renderError(e, 400);
-    }
-  }
-
-  /**
-   *    @Method ({"PUT"})
-   *    @Route ( "/{username}",name="api-user-put")
-   */
-  async putAction (username) {
-    this.checkAuthorisation(this.query.username, this.query);
-    const user = this.getUser();
-    return this.usersService.findOne(username, user)
-      .then(async (myuser) => {
-        if (myuser) {
-          if (this.query.password) {
-            let confirm = false;
-            if (this.query.confirm) {
-              if (this.query.password !== this.query.confirm) {
-                throw new Error("Bad confirm password");
-              }
-              delete this.query.confirm;
-              confirm = true;
-            }
-            if (this.query["old-password"]) {
-              const encoder = this.getNodefonyEntity("user").getEncoder();
-              const check = await encoder.isPasswordValid(this.query["old-password"], myuser.password);
-              if (!check) {
-                throw new Error(`User ${username} bad passport`);
-              }
-              delete this.query["old-password"];
-              confirm = true;
-            }
-            if (!confirm) {
-              throw new Error(`User ${username} no confirm passport`);
-            }
-          }
-          return this.usersService.update(myuser, this.query, user)
-            .then(async (res) => {
-              const message = `Update User ${this.query.username} OK`;
-              this.log(message, "INFO");
-              const currentUser = this.getUser();
-              if (this.session && myuser.username === currentUser.username) {
-                if (this.query.username !== myuser.username) {
-                  currentUser.username = this.query.username;
-                }
-                if (this.getLocale() !== this.query.lang) {
-                  this.session.set("lang", this.query.lang);
-                }
-              }
-              const newUser = await this.usersService.findOne(this.query.username, user);
-              delete newUser.password;
-              delete newUser["2fa-token"];
-              return this.api.render({
-                query: this.query,
-                user: newUser
-              });
-            });
-        }
-        throw new Error(`User ${username} not found`);
-      })
-      .catch((error) => {
-        this.log(error, "ERROR");
-        throw error;
-      });
-  }
-
-  /**
-   *    @Method ({"PATCH"})
-   *    @Route ( "/{username}",name="api-user-patch")
-   */
-  // TODO
-  async patchAction (username) {
-    this.log(username);
-  }
-
-  /**
-   *    @Method ({"DELETE"})
-   *    @Route ( "/{username}",name="api-user-delete")
-   */
-  async deleteAction (username) {
-    try {
-      this.checkAuthorisation(this.query.username, this.query);
-      const user = this.getUser();
-      return this.usersService.delete(username, user)
-        .then((user) => {
-          delete user.password;
-          delete user["2fa-token"];
-          return this.api.render({
-            user
-          });
-        })
-        .catch((error) => {
-          throw error;
-        });
-    } catch (e) {
-      return this.api.renderError(e, e.code || 400);
-    }
-  }
-
-  /**
-   *    @Method ({"TRACE"})
-   *
-   */
-  traceAction () {
-    return this.renderResponse(JSON.stringify(this.request.request.headers, null, " "), 200, {
-      "Content-Type": "message/http"
-    });
-  }
-}
-
-module.exports = restController;