ti2 1.0.0

package/migrations/20200114173707-addTCApp.js

@@ -0,0 +1,20 @@
+const assert = require('assert');
+const faker = require('faker');
+
+module.exports = {
+  up: async queryInterface => {
+    const payload = {
+      name: 'tourconnect',
+      packageName: 'ti2-tourconnect',
+      adminEmail: 'ti2@tourconnect.com',
+      createdAt: new Date(),
+      updatedAt: new Date(),
+    };
+    await queryInterface.bulkInsert('Integrations', [payload]);
+  },
+  down: async queryInterface => {
+    await queryInterface.bulkDelete('Integrations', [{
+      name: 'tourconnect',
+    }]);
+  },
+};

package/migrations/20200128162519-deletedAtForIntegrations.js

@@ -0,0 +1,14 @@
+
+module.exports = {
+  up: (queryInterface, Sequelize) => queryInterface.addColumn(
+    'Integrations',
+    'deletedAt',
+    {
+      type: Sequelize.DATE,
+      allowNull: true,
+      validate: {
+      },
+    },
+  ),
+  down: queryInterface => queryInterface.removeColumn('Integrations', 'deletedAt'),
+};

package/migrations/20210408024232-expand-JWT-field-size.js

@@ -0,0 +1,10 @@
+module.exports = {
+  up: (queryInterface, Sequelize) => queryInterface.changeColumn('UserAppKeys', 'appKey', {
+    type: Sequelize.TEXT,
+    allowNull: false,
+  }),
+  down: (queryInterface, Sequelize) =>  queryInterface.changeColumn('UserAppKeys', 'appKey', {
+    type: Sequelize.STRING,
+    allowNull: false,
+  })
+};

package/models/db.js

@@ -0,0 +1,16 @@
+const Sequelize = require('sequelize');
+
+const {
+  env: {
+    DB_URL,
+  },
+} = process;
+
+const options = {
+  operatorsAliases: false,
+  logging: false,
+};
+
+const sequelize = new Sequelize(DB_URL, options);
+
+module.exports = sequelize;

package/models/index.js

@@ -0,0 +1,27 @@
+const fs = require('fs');
+const path = require('path');
+const Sequelize = require('sequelize');
+const sequelize = require('./db');
+
+const basename = path.basename(__filename);
+const models = {};
+
+fs
+  .readdirSync(__dirname)
+  .filter(file => (file.indexOf('.') !== 0) && (file !== basename) && (file.slice(-3) === '.js'))
+  .forEach(file => {
+    const model = require(path.join(__dirname, file));
+    models[model.name] = model;
+  });
+
+Object.keys(models).forEach(modelName => {
+  if (models[modelName].associate) {
+    models[modelName].associate(models);
+  }
+});
+
+module.exports = {
+  ...models,
+  sequelize,
+  Sequelize,
+};

package/models/integration.js

@@ -0,0 +1,71 @@
+const crypto = require('crypto');
+const Sequelize = require('sequelize');
+const db = require('./db');
+
+const { env: { dbCryptoKey } } = process;
+const generateKey = () => {
+  const newKey = `${crypto.randomBytes(5).toString('base64').replace(/\W/g, '')}.${crypto.randomBytes(32).toString('base64').replace(/\W/g, '')}`;
+  return newKey;
+};
+
+const encrypt = text => {
+  const iv = crypto.randomBytes(16);
+  const cipher = crypto.createCipheriv('aes-256-cbc', Buffer.from(dbCryptoKey, 'base64'), iv);
+  let encrypted = cipher.update(text);
+  encrypted = Buffer.concat([encrypted, cipher.final()]);
+  return `${iv.toString('hex')}%${encrypted.toString('hex')}`;
+};
+
+const decrypt = text => {
+  const iv = Buffer.from(text.split('%')[0], 'hex');
+  const encryptedText = Buffer.from(text.split('%')[1], 'hex');
+  const decipher = crypto.createDecipheriv('aes-256-cbc', Buffer.from(dbCryptoKey, 'base64'), iv);
+  let decrypted = decipher.update(encryptedText);
+  decrypted = Buffer.concat([decrypted, decipher.final()]);
+  return decrypted.toString();
+};
+
+const Integration = db.define('Integration', {
+  name: {
+    type: Sequelize.STRING,
+    primaryKey: true,
+    allowNull: false,
+    validate: {
+      is: /^((?!true|false|TRUE|FALSE).){1,255}$/,
+    },
+  },
+  packageName: Sequelize.STRING,
+  adminEmail: Sequelize.STRING,
+  apiKey: {
+    type: Sequelize.STRING,
+    defaultValue: () => {
+      const newKey = generateKey();
+      return encrypt(newKey);
+    },
+  },
+  lastSeen: Sequelize.INTEGER,
+}, {
+  paranoid: true,
+  getterMethods: {
+    apiKey() {
+      if (!this.getDataValue('apiKey')) { // there is no secret, probably is a combined request
+        return generateKey();
+      }
+      return decrypt(this.getDataValue('apiKey'));
+    },
+  },
+  setterMethods: {
+    apiKey(value) {
+      return encrypt(value);
+    },
+  },
+});
+
+Integration.associate = models => {
+  Integration.hasMany(models.UserAppKey, {
+    foreignKey: 'integrationId',
+  });
+};
+Integration.generateKey = generateKey;
+
+module.exports = Integration;

package/models/user.js

@@ -0,0 +1,17 @@
+const Sequelize = require('sequelize');
+const db = require('./db');
+
+const User = db.define('User', {
+  userId: {
+    type: Sequelize.STRING,
+    primaryKey: true,
+  },
+}, {});
+User.associate = models => {
+  User.hasMany(models.UserAppKey, {
+    foreignKey: 'userId',
+  });
+  // associations can be defined here
+};
+
+module.exports = User;

package/models/userappkey.js

@@ -0,0 +1,59 @@
+const jwt = require('jsonwebtoken');
+const Sequelize = require('sequelize');
+const { omit } = require('ramda');
+const db = require('./db');
+
+const { env: { dbCryptoKey } } = process;
+
+const UserAppKey = db.define('UserAppKey', {
+  id: {
+    allowNull: false,
+    type: Sequelize.INTEGER(10),
+    primaryKey: true,
+    autoIncrement: true,
+  },
+  userId: {
+    type: Sequelize.STRING,
+    allowNull: false,
+    validate: {
+      is: /^((?!true|false|TRUE|FALSE).){1,255}$/,
+    },
+  },
+  integrationId: {
+    type: Sequelize.STRING,
+    allowNull: false,
+    validate: {
+      is: /^((?!true|false|TRUE|FALSE).){1,255}$/,
+    },
+  },
+  hint: {
+    type: Sequelize.STRING,
+    allowNull: false,
+    validate: {
+      is: /^((?!true|false|TRUE|FALSE).){1,255}$/,
+    },
+  },
+  appKey: {
+    type: Sequelize.TEXT,
+    allowNull: false,
+    set: function setter(value, field) {
+      const newValue = jwt.sign(value, dbCryptoKey);
+      this.setDataValue(field, newValue);
+    },
+    get: function getter(field) {
+      const retValue = jwt.verify(this.getDataValue(field), dbCryptoKey);
+      return omit(['iat'], retValue);
+    },
+  },
+}, {});
+UserAppKey.associate = models => {
+  UserAppKey.belongsTo(models.User, {
+    foreignKey: 'userId',
+    as: 'user',
+  });
+  UserAppKey.belongsTo(models.Integration, {
+    foreignKey: 'integrationId',
+    as: 'integration',
+  });
+};
+module.exports = UserAppKey;

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "ti2",
+  "version": "1.0.0",
+  "description": "Tourist Industry Exchange (TI2)",
+  "main": "index.js",
+  "scripts": {
+    "test": "jest",
+    "sequelize": "sequelize-cli"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/TourConnect/ti2.git"
+  },
+  "author": "",
+  "license": "GPL-3",
+  "bugs": {
+    "url": "https://github.com/TourConnect/ti2/issues"
+  },
+  "homepage": "https://github.com/TourConnect/ti2#readme",
+  "dependencies": {
+    "bluebird": "^3.7.2",
+    "express": "^4.17.2",
+    "js-yaml": "^4.1.0",
+    "jsonwebtoken": "^8.5.1",
+    "jwt-promise": "^1.0.0",
+    "mysql2": "^2.3.3",
+    "ramda": "^0.28.0",
+    "seque": "^1.2.1",
+    "sequelize": "^6.13.0",
+    "swagger-express-middleware": "^3.0.0-alpha.5",
+    "swagger-routes-express": "^3.3.1",
+    "swagger-ui-express": "^4.3.0",
+    "uninstall": "^0.0.0"
+  },
+  "devDependencies": {
+    "eslint": "^8.7.0",
+    "eslint-config-airbnb-base": "^15.0.0",
+    "eslint-plugin-import": "^2.25.4",
+    "sequelize-cli": "^6.4.1"
+  }
+}