File

src/auth/client/adapters/internal-clients.service.ts

Index

Methods

Constructor

constructor(configService: ConfigService, repo: Repository<ClientEntity>, configImportService: ConfigImportService)
Parameters :
Name Type Optional
configService ConfigService No
repo Repository<ClientEntity> No
configImportService ConfigImportService No

Methods

Async addClient
addClient(tenantId: string, dto: CreateClientDto, secret: unknown)
Parameters :
Name Type Optional Default value
tenantId string No
dto CreateClientDto No
secret unknown No randomBytes(32).toString("hex")
Returns : unknown
getClient
getClient(tenantId: string, clientId: string)
Parameters :
Name Type Optional
tenantId string No
clientId string No
Returns : any
getClients
getClients(tenantId: string)
Parameters :
Name Type Optional
tenantId string No
Returns : any
getClientSecret
getClientSecret(sub: string, id: string)
Parameters :
Name Type Optional
sub string No
id string No
Returns : Promise<string>
Async import
import()
Returns : any
Async onApplicationBootstrap
onApplicationBootstrap()
Returns : unknown
Async removeClient
removeClient(tenantId: string, clientId: string)
Parameters :
Name Type Optional
tenantId string No
clientId string No
Returns : any
updateClient
updateClient(tenantId: string, clientId: string, updateClientDto: UpdateClientDto)
Parameters :
Name Type Optional
tenantId string No
clientId string No
updateClientDto UpdateClientDto No
Returns : any
validateClientCredentials
validateClientCredentials(clientId: string, clientSecret: string)
Parameters :
Name Type Optional
clientId string No
clientSecret string No
Returns : any
import { Injectable, OnApplicationBootstrap } from "@nestjs/common";
import { ConfigService } from "@nestjs/config";
import { InjectRepository } from "@nestjs/typeorm";
import { plainToClass } from "class-transformer";
import { randomBytes } from "crypto";
import { readFileSync } from "fs";
import { Repository } from "typeorm";
import { ConfigImportService } from "../../../utils/config-import/config-import.service";
import { Role } from "../../roles/role.enum";
import { ClientsProvider } from "../client.provider";
import { CreateClientDto } from "../dto/create-client.dto";
import { UpdateClientDto } from "../dto/update-client.dto";
import { ClientEntity } from "../entities/client.entity";

@Injectable()
export class InternalClientsProvider
    implements ClientsProvider, OnApplicationBootstrap
{
    constructor(
        private configService: ConfigService,
        @InjectRepository(ClientEntity) private repo: Repository<ClientEntity>,
        private configImportService: ConfigImportService,
    ) {}

    async onApplicationBootstrap() {
        //add the root user

        const clientId = this.configService.getOrThrow("AUTH_CLIENT_ID");
        const clientSecret =
            this.configService.getOrThrow("AUTH_CLIENT_SECRET");
        await this.getClient("root", clientId).catch(() => {
            return this.repo.save({
                clientId,
                secret: clientSecret,
                description: "Internal client",
                roles: [Role.Tenants],
            });
        });

        return this.import();
    }

    async import() {
        await this.configImportService.importConfigs<ClientEntity>({
            subfolder: "clients",
            fileExtension: ".json",
            validationClass: ClientEntity,
            resourceType: "client config",
            loadData: (filePath) => {
                const payload = JSON.parse(readFileSync(filePath, "utf8"));
                return plainToClass(ClientEntity, payload);
            },
            checkExists: async (tenantId, data) => {
                return this.getClient(tenantId, (data as any).clientId)
                    .then(() => true)
                    .catch(() => false);
            },
            deleteExisting: async (tenantId, data) => {
                await this.repo.delete({
                    clientId: (data as any).clientId,
                    tenant: { id: tenantId },
                });
            },
            processItem: async (tenantId, data, file) => {
                const secret =
                    (data as any).secret ?? randomBytes(32).toString("hex");
                await this.addClient(tenantId, data as any, secret);
            },
        });
    }

    getClients(tenantId: string) {
        return this.repo
            .find({ where: { tenant: { id: tenantId } } })
            .then((list) =>
                list.map((e) => ({
                    clientId: e.clientId,
                    description: e.description,
                    tenantId,
                    roles: e.roles,
                })),
            );
    }

    getClient(tenantId: string, clientId: string) {
        return this.repo
            .findOneByOrFail({ clientId, tenant: { id: tenantId } })
            .then((e) => ({
                clientId: e.clientId,
                description: e.description,
                tenantId,
                roles: e.roles,
            }));
    }

    getClientSecret(sub: string, id: string): Promise<string> {
        return this.repo
            .findOneByOrFail({ clientId: id, tenant: { id: sub } })
            .then((e) => e.secret!);
    }

    async addClient(
        tenantId: string,
        dto: CreateClientDto,
        secret = randomBytes(32).toString("hex"),
    ) {
        const entity = await this.repo.save({
            ...dto,
            secret,
            tenant: { id: tenantId },
        });
        return {
            clientId: entity.clientId,
            description: entity.description,
            tenantId,
            roles: entity.roles,
            clientSecret: secret,
        };
    }

    updateClient(
        tenantId: string,
        clientId: string,
        updateClientDto: UpdateClientDto,
    ) {
        return this.repo.update(
            { clientId, tenant: { id: tenantId } },
            updateClientDto,
        );
    }

    async removeClient(tenantId: string, clientId: string) {
        await this.repo.delete({ clientId, tenant: { id: tenantId } });
    }

    validateClientCredentials(clientId: string, clientSecret: string) {
        return this.repo.findOne({ where: { clientId, secret: clientSecret } });
    }
}

results matching ""

    No results matching ""