@sourceloop/ctrl-plane-tenant-management-service
Version:
Tenant Management microservice for SaaS control plane
170 lines • 7.14 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.Auth0IdpProvider = void 0;
const tslib_1 = require("tslib");
const types_1 = require("../../types");
const auth0_1 = require("auth0");
const repository_1 = require("@loopback/repository");
const crypto_1 = require("crypto");
const rest_1 = require("@loopback/rest");
const repositories_1 = require("../../repositories");
const STATUS_OK = 200;
const STATUS_NOT_FOUND = 404;
let Auth0IdpProvider = class Auth0IdpProvider {
constructor(tenantConfigRepository) {
this.tenantConfigRepository = tenantConfigRepository;
}
value() {
return payload => this.configure(payload);
}
async configure(payload) {
var _a, _b, _c;
this.management = new auth0_1.ManagementClient({
domain: (_a = process.env.AUTH0_DOMAIN) !== null && _a !== void 0 ? _a : '',
clientId: (_b = process.env.AUTH0_CLIENT_ID) !== null && _b !== void 0 ? _b : '',
clientSecret: (_c = process.env.AUTH0_CLIENT_SECRET) !== null && _c !== void 0 ? _c : '',
audience: process.env.AUTH0_AUDIENCE,
});
const tenant = payload.tenant;
const planTier = payload.plan.tier;
const tenantConfig = await this.tenantConfigRepository.find({
where: { tenantId: tenant.id, configKey: types_1.IdPKey.AUTH0 },
});
if (!tenantConfig) {
throw new rest_1.HttpErrors.NotFound(`Tenant configuration not found for tenant: ${tenant.id}`);
}
const configValue = tenantConfig[0].configValue;
/**Organization name for silo tenants will be its key
* whereas for pooled tenants it will be the plan tier
* all the pooled tenants will be under the same organization
*/
const orgName = planTier === 'PREMIUM' ? tenant.key : planTier.toLowerCase();
const organizationData = {
name: orgName,
// eslint-disable-next-line
display_name: orgName,
branding: {
// eslint-disable-next-line
logo_url: configValue.logo_url,
colors: {
primary: configValue.primary_color,
// eslint-disable-next-line
page_background: configValue.page_background,
},
},
// eslint-disable-next-line
enabled_connections: configValue.enabled_connections,
};
function generateStrongPassword(length) {
const regex = /[A-Za-z0-9!@#$%^&*()_+~`|}{[\]:;?><,./-=]/; //NOSONAR
const validChars = [];
const ASCII_PRINTABLE_START = 33;
const ASCII_PRINTABLE_END = 126;
for (let i = ASCII_PRINTABLE_START; i <= ASCII_PRINTABLE_END; i++) {
const char = String.fromCharCode(i);
if (regex.test(char)) {
validChars.push(char);
}
}
const randomBytesArray = (0, crypto_1.randomBytes)(length);
const password = Array.from(randomBytesArray)
.map(byte => validChars[byte % validChars.length])
.join('');
return password;
}
const passwordLength = 20;
const password = generateStrongPassword(passwordLength);
const userData = {
email: tenant.contacts[0].email,
connection: configValue.connection,
/* saving a constant password for now
** this will a random generated string that will be temporary password
** the user will be forced to change it on first login
** need to check actions in auth0 to see how we can achieve this
**/
password: password,
// eslint-disable-next-line
verify_email: configValue.verify_email,
// eslint-disable-next-line
phone_number: configValue.phone_number,
// eslint-disable-next-line
user_metadata: configValue.user_metadata,
blocked: configValue.blocked,
// eslint-disable-next-line
email_verified: configValue.email_verified,
// eslint-disable-next-line
app_metadata: configValue.app_metadata,
// eslint-disable-next-line
given_name: configValue.given_name,
// eslint-disable-next-line
family_name: configValue.family_name,
nickname: configValue.nickname,
picture: configValue.picture,
// eslint-disable-next-line
user_id: configValue.user_id,
};
let organizationId;
if (planTier === 'PREMIUM') {
const organization = await this.createOrganization(organizationData);
organizationId = organization.data.id;
}
else {
try {
const organizationResponse = await this.management.organizations.getByName({ name: orgName });
if (organizationResponse.status === STATUS_OK) {
organizationId = organizationResponse.data.id;
}
}
catch (error) {
if (error.statusCode === STATUS_NOT_FOUND) {
const organization = await this.createOrganization(organizationData);
organizationId = organization.data.id;
}
else {
throw new Error(`Error checking organization: ${error.message}`);
}
}
}
if (!organizationId) {
throw new Error('Failed to retrieve or create organization ID.');
}
const user = await this.createUser(userData);
const userId = user.data.user_id;
await this.addMemberToOrganization(organizationId, userId);
return {
authId: userId,
};
}
async createOrganization(data) {
try {
return await this.management.organizations.create(data);
}
catch (error) {
throw new Error(`Error creating organization: ${error.message}`);
}
}
async createUser(userData) {
try {
return await this.management.users.create(userData);
}
catch (error) {
throw new Error(`Error creating user: ${error.message}`);
}
}
async addMemberToOrganization(organizationId, userId) {
try {
return await this.management.organizations.addMembers({ id: organizationId }, {
members: [userId],
});
}
catch (error) {
throw new Error(`Error adding member to organization: ${error.message}`);
}
}
};
exports.Auth0IdpProvider = Auth0IdpProvider;
exports.Auth0IdpProvider = Auth0IdpProvider = tslib_1.__decorate([
tslib_1.__param(0, (0, repository_1.repository)(repositories_1.TenantMgmtConfigRepository)),
tslib_1.__metadata("design:paramtypes", [repositories_1.TenantMgmtConfigRepository])
], Auth0IdpProvider);
//# sourceMappingURL=idp-auth0.provider.js.map