wcz-layout 6.7.2 → 9.4.2

package/dist/authMiddleware--HdlhhZO.mjs

@@ -0,0 +1,78 @@
+import { t as serverEnv } from "./env-CoveIivr.mjs";
+import { i as buildUser, l as getAccessToken, o as hasPermission, u as getSessionUser } from "./utils-2XiozDlV.mjs";
+import { n as getTokenOnBehalfOf, t as getAppToken } from "./msalServer-CkNOOjjH.mjs";
+import { createMiddleware } from "@tanstack/react-start";
+import axios, { AxiosError } from "axios";
+import https from "node:https";
+import * as jose from "jose";
+//#region src/middleware/apiMiddleware.ts
+const httpsAgent = new https.Agent({ rejectUnauthorized: false });
+const apiMiddleware = ({ baseURL, scopeKey }) => createMiddleware().server(async ({ next, request }) => {
+	const resolvedBaseURL = process.env[baseURL];
+	if (!resolvedBaseURL) throw new Error(`"${baseURL}" env variable is not set.`);
+	const authHeader = request.headers.get("Authorization");
+	let accessToken;
+	if (authHeader?.startsWith("Bearer ")) accessToken = await getTokenOnBehalfOf(authHeader.substring(7), scopeKey);
+	else try {
+		accessToken = await getAccessToken(scopeKey);
+	} catch {
+		accessToken = await getAppToken(scopeKey);
+	}
+	const api = axios.create({
+		baseURL: resolvedBaseURL,
+		httpsAgent,
+		headers: { Authorization: `Bearer ${accessToken}` }
+	});
+	try {
+		return await next({ context: { api } });
+	} catch (error) {
+		if (error instanceof AxiosError) throw new Error(error.response?.data?.message ?? error.message);
+		throw error;
+	}
+});
+//#endregion
+//#region src/middleware/authMiddleware.ts
+async function resolveUser(request) {
+	const authHeader = request.headers.get("Authorization");
+	if (authHeader?.startsWith("Bearer ")) {
+		let payload;
+		try {
+			payload = await verifyToken(authHeader.substring(7));
+		} catch (error) {
+			throw Response.json({ message: error instanceof Error ? error.message : "Unauthorized: Invalid access token" }, { status: 401 });
+		}
+		return buildUser(payload);
+	}
+	return getSessionUser();
+}
+const requiredAuthenticationMiddleware = createMiddleware().server(async ({ next, request }) => {
+	const user = await resolveUser(request);
+	if (!user) throw Response.json({ message: "Unauthorized: User not signed in" }, { status: 401 });
+	return next({ context: { user } });
+});
+const publicAuthenticationMiddleware = createMiddleware().server(async ({ next, request }) => {
+	return next({ context: { user: await resolveUser(request) } });
+});
+function authenticationMiddleware(options) {
+	return options?.optional ? publicAuthenticationMiddleware : requiredAuthenticationMiddleware;
+}
+const authorizationMiddleware = (permissionKey) => createMiddleware().middleware([authenticationMiddleware()]).server(async ({ next, context }) => {
+	if (hasPermission(context.user, permissionKey)) return next();
+	throw Response.json({ message: `Forbidden: User ${context.user.name} is not authorized to access this resource` }, { status: 403 });
+});
+async function verifyToken(token) {
+	const { payload } = await jose.jwtVerify(token, getJWKS(), {
+		issuer: `https://login.microsoftonline.com/${serverEnv.ENTRA_TENANT_ID}/v2.0`,
+		audience: serverEnv.ENTRA_CLIENT_ID
+	});
+	return payload;
+}
+let jwksCache = null;
+function getJWKS() {
+	jwksCache ??= jose.createRemoteJWKSet(new URL(`https://login.microsoftonline.com/${serverEnv.ENTRA_TENANT_ID}/discovery/v2.0/keys`));
+	return jwksCache;
+}
+//#endregion
+export { authorizationMiddleware as n, apiMiddleware as r, authenticationMiddleware as t };
+
+//# sourceMappingURL=authMiddleware--HdlhhZO.mjs.map

package/dist/authMiddleware--HdlhhZO.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware--HdlhhZO.mjs","names":["createMiddleware","axios","AxiosError","https","serverEnv","scopes","definedScopes","getAppToken","getTokenOnBehalfOf","getAccessToken","ApiMiddlewareOptions","baseURL","scopeKey","httpsAgent","Agent","rejectUnauthorized","apiMiddleware","server","next","request","resolvedBaseURL","process","env","Error","authHeader","headers","get","accessToken","startsWith","substring","length","api","create","Authorization","context","error","response","data","message","createMiddleware","jose","permissions","serverEnv","getSessionUser","buildUser","hasPermission","TokenPayload","User","resolveUser","request","Request","Promise","authHeader","headers","get","startsWith","payload","verifyToken","substring","length","error","Response","json","message","Error","status","requiredAuthenticationMiddleware","server","user","next","context","publicAuthenticationMiddleware","authenticationMiddleware","options","optional","authorizationMiddleware","permissionKey","middleware","name","token","jwtVerify","getJWKS","issuer","ENTRA_TENANT_ID","audience","ENTRA_CLIENT_ID","jwksCache","ReturnType","createRemoteJWKSet","URL"],"sources":["../src/middleware/apiMiddleware.ts","../src/middleware/authMiddleware.ts"],"sourcesContent":["import { createMiddleware } from \"@tanstack/react-start\";\nimport axios, { AxiosError } from \"axios\";\nimport https from \"node:https\";\nimport type { serverEnv } from \"virtual:wcz-layout\";\nimport { scopes as definedScopes } from \"virtual:wcz-layout\";\nimport { getAppToken, getTokenOnBehalfOf } from \"~/lib/auth/msalServer\";\nimport { getAccessToken } from \"~/lib/auth/user\";\n\ninterface ApiMiddlewareOptions {\n  baseURL: keyof typeof serverEnv & `${string}BASE_URL${string}`;\n  scopeKey: keyof typeof definedScopes;\n}\n\nconst httpsAgent = new https.Agent({\n  rejectUnauthorized: false,\n});\n\nexport const apiMiddleware = ({ baseURL, scopeKey }: ApiMiddlewareOptions) =>\n  createMiddleware().server(async ({ next, request }) => {\n    const resolvedBaseURL = process.env[baseURL];\n    if (!resolvedBaseURL) throw new Error(`\"${baseURL}\" env variable is not set.`);\n\n    const authHeader = request.headers.get(\"Authorization\");\n    let accessToken: string;\n    if (authHeader?.startsWith(\"Bearer \")) {\n      accessToken = await getTokenOnBehalfOf(authHeader.substring(\"Bearer \".length), scopeKey);\n    } else {\n      try {\n        accessToken = await getAccessToken(scopeKey);\n      } catch {\n        accessToken = await getAppToken(scopeKey);\n      }\n    }\n\n    const api = axios.create({\n      baseURL: resolvedBaseURL,\n      httpsAgent,\n      headers: { Authorization: `Bearer ${accessToken}` },\n    });\n\n    try {\n      return await next({ context: { api } });\n    } catch (error) {\n      if (error instanceof AxiosError)\n        throw new Error(error.response?.data?.message ?? error.message);\n      throw error;\n    }\n  });\n","import { createMiddleware } from \"@tanstack/react-start\";\nimport * as jose from \"jose\";\nimport type { permissions } from \"virtual:wcz-layout\";\nimport { serverEnv } from \"~/env\";\nimport { getSessionUser } from \"~/lib/auth/user\";\nimport { buildUser, hasPermission } from \"~/lib/utils\";\nimport type { TokenPayload } from \"~/models/TokenPayload\";\nimport type { User } from \"~/models/User\";\n\nasync function resolveUser(request: Request): Promise<User | null> {\n  const authHeader = request.headers.get(\"Authorization\");\n\n  if (authHeader?.startsWith(\"Bearer \")) {\n    let payload: TokenPayload;\n    try {\n      payload = await verifyToken(authHeader.substring(\"Bearer \".length));\n    } catch (error) {\n      throw Response.json(\n        { message: error instanceof Error ? error.message : \"Unauthorized: Invalid access token\" },\n        { status: 401 },\n      );\n    }\n    return buildUser(payload);\n  }\n\n  return getSessionUser();\n}\n\nconst requiredAuthenticationMiddleware = createMiddleware().server<{ user: User }>(\n  async ({ next, request }) => {\n    const user = await resolveUser(request);\n\n    if (!user)\n      throw Response.json({ message: \"Unauthorized: User not signed in\" }, { status: 401 });\n\n    return next({ context: { user } });\n  },\n);\n\nconst publicAuthenticationMiddleware = createMiddleware().server<{ user: User | null }>(\n  async ({ next, request }) => {\n    const user = await resolveUser(request);\n    return next({ context: { user } });\n  },\n);\n\nexport function authenticationMiddleware(options?: {\n  optional?: false;\n}): typeof requiredAuthenticationMiddleware;\n\nexport function authenticationMiddleware(options: {\n  optional: true;\n}): typeof publicAuthenticationMiddleware;\n\nexport function authenticationMiddleware(options: {\n  optional: boolean;\n}): typeof requiredAuthenticationMiddleware | typeof publicAuthenticationMiddleware;\n\nexport function authenticationMiddleware(options?: { optional?: boolean }) {\n  return options?.optional ? publicAuthenticationMiddleware : requiredAuthenticationMiddleware;\n}\n\nexport const authorizationMiddleware = (permissionKey: keyof typeof permissions) =>\n  createMiddleware()\n    .middleware([authenticationMiddleware()])\n    .server(async ({ next, context }) => {\n      if (hasPermission(context.user, permissionKey)) return next();\n      throw Response.json(\n        {\n          message: `Forbidden: User ${context.user.name} is not authorized to access this resource`,\n        },\n        { status: 403 },\n      );\n    });\n\nasync function verifyToken(token: string): Promise<TokenPayload> {\n  const { payload } = await jose.jwtVerify(token, getJWKS(), {\n    issuer: `https://login.microsoftonline.com/${serverEnv.ENTRA_TENANT_ID}/v2.0`,\n    audience: serverEnv.ENTRA_CLIENT_ID,\n  });\n  return payload as unknown as TokenPayload;\n}\n\nlet jwksCache: ReturnType<typeof jose.createRemoteJWKSet> | null = null;\n\nfunction getJWKS() {\n  jwksCache ??= jose.createRemoteJWKSet(\n    new URL(`https://login.microsoftonline.com/${serverEnv.ENTRA_TENANT_ID}/discovery/v2.0/keys`),\n  );\n  return jwksCache;\n}\n"],"mappings":";;;;;;;;AAaA,MAAMa,aAAa,IAAIV,MAAMW,MAAM,EACjCC,oBAAoB,MACtB,CAAC;AAED,MAAaC,iBAAiB,EAAEL,SAASC,eACvCZ,iBAAiB,CAAC,CAACiB,OAAO,OAAO,EAAEC,MAAMC,cAAc;CACrD,MAAMC,kBAAkBC,QAAQC,IAAIX;CACpC,IAAI,CAACS,iBAAiB,MAAM,IAAIG,MAAM,IAAIZ,QAAO,2BAA4B;CAE7E,MAAMa,aAAaL,QAAQM,QAAQC,IAAI,eAAe;CACtD,IAAIC;CACJ,IAAIH,YAAYI,WAAW,SAAS,GAClCD,cAAc,MAAMnB,mBAAmBgB,WAAWK,UAAU,CAAgB,GAAGjB,QAAQ;MAEvF,IAAI;EACFe,cAAc,MAAMlB,eAAeG,QAAQ;CAC7C,QAAQ;EACNe,cAAc,MAAMpB,YAAYK,QAAQ;CAC1C;CAGF,MAAMmB,MAAM9B,MAAM+B,OAAO;EACvBrB,SAASS;EACTP;EACAY,SAAS,EAAEQ,eAAe,UAAUN,cAAc;CACpD,CAAC;CAED,IAAI;EACF,OAAO,MAAMT,KAAK,EAAEgB,SAAS,EAAEH,IAAI,EAAE,CAAC;CACxC,SAASI,OAAO;EACd,IAAIA,iBAAiBjC,YACnB,MAAM,IAAIqB,MAAMY,MAAMC,UAAUC,MAAMC,WAAWH,MAAMG,OAAO;EAChE,MAAMH;CACR;AACF,CAAC;;;ACtCH,eAAea,YAAYC,SAAwC;CACjE,MAAMG,aAAaH,QAAQI,QAAQC,IAAI,eAAe;CAEtD,IAAIF,YAAYG,WAAW,SAAS,GAAG;EACrC,IAAIC;EACJ,IAAI;GACFA,UAAU,MAAMC,YAAYL,WAAWM,UAAU,CAAgB,CAAC;EACpE,SAASE,OAAO;GACd,MAAMC,SAASC,KACb,EAAEC,SAASH,iBAAiBI,QAAQJ,MAAMG,UAAU,qCAAqC,GACzF,EAAEE,QAAQ,IAAI,CAChB;EACF;EACA,OAAOrB,UAAUY,OAAO;CAC1B;CAEA,OAAOb,eAAe;AACxB;AAEA,MAAMuB,mCAAmC3B,iBAAiB,CAAC,CAAC4B,OAC1D,OAAO,EAAEE,MAAMpB,cAAc;CAC3B,MAAMmB,OAAO,MAAMpB,YAAYC,OAAO;CAEtC,IAAI,CAACmB,MACH,MAAMP,SAASC,KAAK,EAAEC,SAAS,mCAAmC,GAAG,EAAEE,QAAQ,IAAI,CAAC;CAEtF,OAAOI,KAAK,EAAEC,SAAS,EAAEF,KAAK,EAAE,CAAC;AACnC,CACF;AAEA,MAAMG,iCAAiChC,iBAAiB,CAAC,CAAC4B,OACxD,OAAO,EAAEE,MAAMpB,cAAc;CAE3B,OAAOoB,KAAK,EAAEC,SAAS,EAAEF,MAAAA,MADNpB,YAAYC,OAAO,EACR,EAAE,CAAC;AACnC,CACF;AAcA,SAAgBuB,yBAAyBC,SAAkC;CACzE,OAAOA,SAASC,WAAWH,iCAAiCL;AAC9D;AAEA,MAAaS,2BAA2BC,kBACtCrC,iBAAiB,CAAC,CACfsC,WAAW,CAACL,yBAAyB,CAAC,CAAC,CAAC,CACxCL,OAAO,OAAO,EAAEE,MAAMC,cAAc;CACnC,IAAIzB,cAAcyB,QAAQF,MAAMQ,aAAa,GAAG,OAAOP,KAAK;CAC5D,MAAMR,SAASC,KACb,EACEC,SAAS,mBAAmBO,QAAQF,KAAKU,KAAI,4CAC/C,GACA,EAAEb,QAAQ,IAAI,CAChB;AACF,CAAC;AAEL,eAAeR,YAAYsB,OAAsC;CAC/D,MAAM,EAAEvB,YAAY,MAAMhB,KAAKwC,UAAUD,OAAOE,QAAQ,GAAG;EACzDC,QAAQ,qCAAqCxC,UAAUyC,gBAAe;EACtEC,UAAU1C,UAAU2C;CACtB,CAAC;CACD,OAAO7B;AACT;AAEA,IAAI8B,YAA+D;AAEnE,SAASL,UAAU;CACjBK,cAAc9C,KAAKgD,mBACjB,IAAIC,IAAI,qCAAqC/C,UAAUyC,gBAAe,qBAAsB,CAC9F;CACA,OAAOG;AACT"}

package/dist/components.d.mts

@@ -0,0 +1,107 @@
+import { t as FileMeta } from "./FileMeta-ILLTOjaM.mjs";
+import { BoxProps, ButtonProps, FabProps, IconButtonProps, LinkProps, ListItemButtonProps, SxProps, TabProps, Theme, TypographyProps } from "@mui/material";
+import React$1, { ComponentType, FC, ReactNode } from "react";
+import * as z$2 from "zod";
+import { ErrorComponentProps, LinkComponent } from "@tanstack/react-router";
+import { DropzoneOptions } from "react-dropzone";
+import { GridActionsCellItemProps, GridColumnHeaderParams, GridValidRowModel } from "@mui/x-data-grid-premium";
+
+//#region src/components/core/TypographyWithIcon.d.ts
+interface TypographyWithIconProps extends TypographyProps {
+  startIcon?: React.ReactNode;
+  endIcon?: React.ReactNode;
+  gap?: number | string;
+}
+declare const TypographyWithIcon: React.FC<TypographyWithIconProps>;
+//#endregion
+//#region src/components/core/Fullscreen.d.ts
+declare const Fullscreen: FC<BoxProps>;
+//#endregion
+//#region src/components/file/Dropzone.d.ts
+interface DropzoneProps extends DropzoneOptions {
+  sx?: SxProps<Theme>;
+  progress?: number;
+}
+declare const Dropzone: FC<DropzoneProps>;
+//#endregion
+//#region src/models/file/FileActions.d.ts
+declare const FileActionsSchema: z$2.ZodObject<{
+  download: z$2.ZodOptional<z$2.ZodBoolean>;
+  delete: z$2.ZodOptional<z$2.ZodBoolean>;
+}, z$2.core.$strip>;
+type FileActions = z$2.infer<typeof FileActionsSchema>;
+//#endregion
+//#region src/components/file/fileViewer/FileViewerGrid.d.ts
+type FileViewerGridItemBar = "hidden" | "always" | "onMouseEnter";
+interface FileViewerGridProps {
+  size?: number;
+  itemBar?: FileViewerGridItemBar;
+  sx?: SxProps<Theme>;
+}
+//#endregion
+//#region src/components/file/fileViewer/FileViewerList.d.ts
+interface FileViewerListProps {
+  sx?: SxProps<Theme>;
+}
+//#endregion
+//#region src/components/file/FileViewer.d.ts
+interface FileViewerComponent {
+  Grid: ComponentType<FileViewerGridProps>;
+  List: ComponentType<FileViewerListProps>;
+}
+interface FileViewerProps {
+  appName: string;
+  subId: string;
+  onDelete?: (params: {
+    remainingFileMetas: Array<FileMeta>;
+    deletedFileMeta: FileMeta;
+  }) => void;
+  actions?: FileActions;
+  children: (component: FileViewerComponent) => ReactNode;
+}
+declare const FileViewer: FC<FileViewerProps>;
+//#endregion
+//#region src/components/data-grid/EditableColumnHeader.d.ts
+declare const EditableColumnHeader: <T extends GridValidRowModel>({
+  colDef
+}: GridColumnHeaderParams<T>) => import("react").JSX.Element;
+//#endregion
+//#region src/components/router/RouterButton.d.ts
+declare const Component$6: React$1.ForwardRefExoticComponent<Omit<ButtonProps<"a">, "ref"> & React$1.RefAttributes<HTMLAnchorElement>>;
+declare const RouterButton: LinkComponent<typeof Component$6>;
+//#endregion
+//#region src/components/router/RouterFab.d.ts
+declare const Component$5: React$1.ForwardRefExoticComponent<Omit<FabProps<"a">, "ref"> & React$1.RefAttributes<HTMLAnchorElement>>;
+declare const RouterFab: LinkComponent<typeof Component$5>;
+//#endregion
+//#region src/components/router/RouterGridActionsCellItem.d.ts
+declare const Component$4: React$1.ForwardRefExoticComponent<GridActionsCellItemProps & React$1.RefAttributes<HTMLButtonElement>>;
+declare const RouterGridActionsCellItem: LinkComponent<typeof Component$4>;
+//#endregion
+//#region src/components/router/RouterIconButton.d.ts
+declare const Component$3: React$1.ForwardRefExoticComponent<Omit<IconButtonProps<"a">, "ref"> & React$1.RefAttributes<HTMLAnchorElement>>;
+declare const RouterIconButton: LinkComponent<typeof Component$3>;
+//#endregion
+//#region src/components/router/RouterLink.d.ts
+declare const Component$2: React$1.ForwardRefExoticComponent<Omit<LinkProps, "ref"> & React$1.RefAttributes<HTMLAnchorElement>>;
+declare const RouterLink: LinkComponent<typeof Component$2>;
+//#endregion
+//#region src/components/router/RouterTab.d.ts
+declare const Component$1: React$1.ForwardRefExoticComponent<Omit<TabProps<"a">, "ref"> & React$1.RefAttributes<HTMLAnchorElement>>;
+declare const RouterTab: LinkComponent<typeof Component$1>;
+//#endregion
+//#region src/components/router/RouterListItemButton.d.ts
+declare const Component: React$1.ForwardRefExoticComponent<Omit<ListItemButtonProps<"a">, "ref"> & React$1.RefAttributes<HTMLAnchorElement>>;
+declare const RouterListItemButton: LinkComponent<typeof Component>;
+//#endregion
+//#region src/components/router/RouterNotFound.d.ts
+declare function RouterNotFound(): import("react").JSX.Element;
+//#endregion
+//#region src/components/router/RouterError.d.ts
+interface RouterErrorProps {
+  error: ErrorComponentProps["error"];
+}
+declare const RouterError: FC<RouterErrorProps>;
+//#endregion
+export { Dropzone, EditableColumnHeader, FileViewer, Fullscreen, RouterButton, RouterError, RouterFab, RouterGridActionsCellItem, RouterIconButton, RouterLink, RouterListItemButton, RouterNotFound, RouterTab, TypographyWithIcon };
+//# sourceMappingURL=components.d.mts.map