piper-utils 1.1.60 → 1.1.61

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "piper-utils",
-    "version": "1.1.60",
+    "version": "1.1.61",
     "description": "Utility library for Piper",
     "main": "bin/main.js",
     "scripts": {

package/src/database/dbUtils/queryStringUtils/accessRightsUtils.js

@@ -333,3 +333,20 @@ export function checkWriteAccess(event, options) {
     return businessId;
 }
 
+/**
+ * Get the company-level cached settings from custom:SET.
+ *
+ * @param {object} event - The lambda event passed in by a validated api request.
+ * @returns {object} The company settings object (e.g. { auditEnabled: true })
+ */
+export function getCompanySettings(event) {
+    const jsonToParse = _.get(event, 'requestContext.authorizer.claims.custom:SET')
+        || _.get(event, 'requestContext.authorizer.custom:SET')
+        || '{}';
+    try {
+        return JSON.parse(jsonToParse);
+    } catch (e) {
+        return {};
+    }
+}
+

package/src/index.js

@@ -28,6 +28,7 @@ import { isPartnerUser as isPartnerUserImport } from './database/dbUtils/querySt
 import { getBelongsToPartnerId as getBelongsToPartnerIdImport } from './database/dbUtils/queryStringUtils/accessRightsUtils.js';
 import { getEffectivePartnerId as getEffectivePartnerIdImport } from './database/dbUtils/queryStringUtils/accessRightsUtils.js';
 import { enrichEventWithPartnerAccess as enrichEventWithPartnerAccessImport } from './database/dbUtils/queryStringUtils/accessRightsUtils.js';
+import { getCompanySettings as getCompanySettingsImport } from './database/dbUtils/queryStringUtils/accessRightsUtils.js';
 
 export const handleFile = handleFileImport;
 export const watchBucket = watchBucketImport;
@@ -60,3 +61,4 @@ export const isPartnerUser = isPartnerUserImport;
 export const getBelongsToPartnerId = getBelongsToPartnerIdImport;
 export const getEffectivePartnerId = getEffectivePartnerIdImport;
 export const enrichEventWithPartnerAccess = enrichEventWithPartnerAccessImport;
+export const getCompanySettings = getCompanySettingsImport;

package/src/requestResponse/requestResponse.js

@@ -23,7 +23,7 @@ const htmlSecurityHeaders = {
         "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://sandbox.nmi.com https://secure.nmi.com",
         "font-src 'self' https://fonts.gstatic.com",
         "frame-src https:",
-        "connect-src 'self' https://*.tokenex.com https://*.sentry.io https://*.nmi.com",
+        "connect-src 'self' https://*.tokenex.com https://*.sentry.io https://*.nmi.com https://*.apple.com",
         "img-src 'self' data:",
         "frame-ancestors *"
     ].join('; ')