quidproquo-actionprocessor-awslambda 0.0.261 → 0.0.263

package/lib/commonjs/getActionProcessor/core/event/utils/isAuthValid.js

@@ -1,68 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.isAuthValid = void 0;
-const quidproquo_config_aws_1 = require("quidproquo-config-aws");
-const quidproquo_core_1 = require("quidproquo-core");
-const awsNamingUtils_1 = require("../../../../awsNamingUtils");
-const getApiKeys_1 = require("../../../../logic/apiGateway/getApiKeys");
-const getExportedValue_1 = require("../../../../logic/cloudformation/getExportedValue");
-const verifyJwt_1 = require("../../../../logic/cognito/verifyJwt");
-const isAuthValidForCognito = (qpqConfig, authSettings, authHeader) => __awaiter(void 0, void 0, void 0, function* () {
-    // If there are no auth settings ~ Its valid.
-    if (!authSettings.userDirectoryName) {
-        return true;
-    }
-    // We need a header to be able to auth
-    if (!authHeader) {
-        return false;
-    }
-    // Make sure we have a Bearer token
-    const [authType, accessToken] = authHeader.split(' ');
-    if (authType !== 'Bearer' || !accessToken) {
-        return false;
-    }
-    // Grab the user directory to auth against
-    const userDirectoryName = authSettings.userDirectoryName;
-    const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-    // Resolve the user pool id
-    const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
-    // Verify the token
-    return yield (0, verifyJwt_1.verifyJwt)(accessToken, userPoolId, region, false);
-});
-const isAuthValidForApiKeys = (qpqConfig, authSettings, apiKeyHeader) => __awaiter(void 0, void 0, void 0, function* () {
-    const apiKeys = authSettings.apiKeys || [];
-    if (apiKeys.length === 0) {
-        return true;
-    }
-    const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-    const application = quidproquo_core_1.qpqCoreUtils.getApplicationName(qpqConfig);
-    const service = quidproquo_core_1.qpqCoreUtils.getApplicationModuleName(qpqConfig);
-    const environment = quidproquo_core_1.qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);
-    const feature = quidproquo_core_1.qpqCoreUtils.getApplicationModuleFeature(qpqConfig);
-    const realApiKeys = yield (0, getApiKeys_1.getApiKeys)(region, ...apiKeys.map((apiKey) => {
-        const apiKeyApplication = apiKey.applicationName || application;
-        const apiKeyService = apiKey.serviceName || service;
-        return (0, awsNamingUtils_1.getConfigRuntimeResourceName)(apiKey.name, apiKeyApplication, apiKeyService, environment, feature);
-    }));
-    const index = realApiKeys.findIndex((apiKey) => apiKey.value === apiKeyHeader);
-    return index >= 0;
-});
-const isAuthValid = (qpqConfig, authHeader, apiKeyHeader, authSettings) => __awaiter(void 0, void 0, void 0, function* () {
-    // If there are no auth settings ~ Its valid.
-    if (!authSettings) {
-        return true;
-    }
-    const cognitoValid = yield isAuthValidForCognito(qpqConfig, authSettings, authHeader);
-    const authKeysValid = yield isAuthValidForApiKeys(qpqConfig, authSettings, apiKeyHeader);
-    return cognitoValid && authKeysValid;
-});
-exports.isAuthValid = isAuthValid;

package/lib/esm/getActionProcessor/core/event/utils/isAuthValid.d.ts

@@ -1,3 +0,0 @@
-import { QPQConfig } from 'quidproquo-core';
-import { RouteAuthSettings } from 'quidproquo-webserver';
-export declare const isAuthValid: (qpqConfig: QPQConfig, authHeader?: string | null, apiKeyHeader?: string | null, authSettings?: RouteAuthSettings) => Promise<boolean>;

package/lib/esm/getActionProcessor/core/event/utils/isAuthValid.js

@@ -1,55 +0,0 @@
-import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { qpqCoreUtils } from 'quidproquo-core';
-import { getCFExportNameUserPoolIdFromConfig, getConfigRuntimeResourceName } from '../../../../awsNamingUtils';
-import { getApiKeys } from '../../../../logic/apiGateway/getApiKeys';
-import { getExportedValue } from '../../../../logic/cloudformation/getExportedValue';
-import { verifyJwt } from '../../../../logic/cognito/verifyJwt';
-const isAuthValidForCognito = async (qpqConfig, authSettings, authHeader) => {
-    // If there are no auth settings ~ Its valid.
-    if (!authSettings.userDirectoryName) {
-        return true;
-    }
-    // We need a header to be able to auth
-    if (!authHeader) {
-        return false;
-    }
-    // Make sure we have a Bearer token
-    const [authType, accessToken] = authHeader.split(' ');
-    if (authType !== 'Bearer' || !accessToken) {
-        return false;
-    }
-    // Grab the user directory to auth against
-    const userDirectoryName = authSettings.userDirectoryName;
-    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-    // Resolve the user pool id
-    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);
-    // Verify the token
-    return await verifyJwt(accessToken, userPoolId, region, false);
-};
-const isAuthValidForApiKeys = async (qpqConfig, authSettings, apiKeyHeader) => {
-    const apiKeys = authSettings.apiKeys || [];
-    if (apiKeys.length === 0) {
-        return true;
-    }
-    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-    const application = qpqCoreUtils.getApplicationName(qpqConfig);
-    const service = qpqCoreUtils.getApplicationModuleName(qpqConfig);
-    const environment = qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);
-    const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);
-    const realApiKeys = await getApiKeys(region, ...apiKeys.map((apiKey) => {
-        const apiKeyApplication = apiKey.applicationName || application;
-        const apiKeyService = apiKey.serviceName || service;
-        return getConfigRuntimeResourceName(apiKey.name, apiKeyApplication, apiKeyService, environment, feature);
-    }));
-    const index = realApiKeys.findIndex((apiKey) => apiKey.value === apiKeyHeader);
-    return index >= 0;
-};
-export const isAuthValid = async (qpqConfig, authHeader, apiKeyHeader, authSettings) => {
-    // If there are no auth settings ~ Its valid.
-    if (!authSettings) {
-        return true;
-    }
-    const cognitoValid = await isAuthValidForCognito(qpqConfig, authSettings, authHeader);
-    const authKeysValid = await isAuthValidForApiKeys(qpqConfig, authSettings, apiKeyHeader);
-    return cognitoValid && authKeysValid;
-};