quidproquo-actionprocessor-awslambda 0.0.262 → 0.0.263

package/lib/esm/getActionProcessor/core/event/utils/isAuthValid.js

@@ -1,55 +0,0 @@
-import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { qpqCoreUtils } from 'quidproquo-core';
-import { getCFExportNameUserPoolIdFromConfig, getConfigRuntimeResourceName } from '../../../../awsNamingUtils';
-import { getApiKeys } from '../../../../logic/apiGateway/getApiKeys';
-import { getExportedValue } from '../../../../logic/cloudformation/getExportedValue';
-import { verifyJwt } from '../../../../logic/cognito/verifyJwt';
-const isAuthValidForCognito = async (qpqConfig, authSettings, authHeader) => {
-    // If there are no auth settings ~ Its valid.
-    if (!authSettings.userDirectoryName) {
-        return true;
-    }
-    // We need a header to be able to auth
-    if (!authHeader) {
-        return false;
-    }
-    // Make sure we have a Bearer token
-    const [authType, accessToken] = authHeader.split(' ');
-    if (authType !== 'Bearer' || !accessToken) {
-        return false;
-    }
-    // Grab the user directory to auth against
-    const userDirectoryName = authSettings.userDirectoryName;
-    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-    // Resolve the user pool id
-    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);
-    // Verify the token
-    return await verifyJwt(accessToken, userPoolId, region, false);
-};
-const isAuthValidForApiKeys = async (qpqConfig, authSettings, apiKeyHeader) => {
-    const apiKeys = authSettings.apiKeys || [];
-    if (apiKeys.length === 0) {
-        return true;
-    }
-    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-    const application = qpqCoreUtils.getApplicationName(qpqConfig);
-    const service = qpqCoreUtils.getApplicationModuleName(qpqConfig);
-    const environment = qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);
-    const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);
-    const realApiKeys = await getApiKeys(region, ...apiKeys.map((apiKey) => {
-        const apiKeyApplication = apiKey.applicationName || application;
-        const apiKeyService = apiKey.serviceName || service;
-        return getConfigRuntimeResourceName(apiKey.name, apiKeyApplication, apiKeyService, environment, feature);
-    }));
-    const index = realApiKeys.findIndex((apiKey) => apiKey.value === apiKeyHeader);
-    return index >= 0;
-};
-export const isAuthValid = async (qpqConfig, authHeader, apiKeyHeader, authSettings) => {
-    // If there are no auth settings ~ Its valid.
-    if (!authSettings) {
-        return true;
-    }
-    const cognitoValid = await isAuthValidForCognito(qpqConfig, authSettings, authHeader);
-    const authKeysValid = await isAuthValidForApiKeys(qpqConfig, authSettings, apiKeyHeader);
-    return cognitoValid && authKeysValid;
-};