stsbroker/lib/commands/request.js

CLI to configure and interact with your own AWS STS Broker.

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const command_1 = require("@oclif/command");
const inquirer = require('inquirer');
const axios_1 = require("axios");
const cli_ux_1 = require("cli-ux");
const storage = require("node-persist");
var tmp = require('tmp');
const fs = require("fs");
const cognito_1 = require("../cognito");
const chalk = require('chalk');
var jwtDecode = require('jwt-decode');
class Request extends command_1.Command {
    async run() {
        const { flags } = this.parse(Request);
        await storage.init({ dir: this.config.configDir });
        const config = await storage.getItem('config');
        var tmpobj = tmp.fileSync();
        fs.writeFileSync(tmpobj.name, JSON.stringify(config));
        try {
            const cognitoToken = await cognito_1.getToken({
                hostedUI: tmpobj.name,
                reset: flags.reset
            });
            cli_ux_1.default.action.start(chalk.blue("Let's check what policies are available for you"));
            axios_1.default.defaults.headers.common['Authorization'] = cognitoToken;
            axios_1.default.defaults.headers.post['Content-Type'] = 'application/json';
            const response = await axios_1.default.get(config.endpoint + '/policies');
            var decoded = jwtDecode(cognitoToken);
            cli_ux_1.default.action.stop(chalk.blue("Done!"));
            var policies = response.data;
            if (policies) {
                var choices = policies.map(obj => {
                    return {
                        "name": obj.policy_id + " - " + obj.description,
                        "value": obj.policy_id
                    };
                });
                let policy = "";
                let policy_response = await inquirer.prompt([{
                        name: 'policy',
                        message: 'What STS Broker policy would you like to request access?',
                        type: 'list',
                        choices: choices,
                    }]);
                policy = policy_response.policy;
                let duration_response = await inquirer.prompt([{
                        name: 'sessionDuration',
                        message: 'What session duration would you like to request?',
                        type: 'list',
                        choices: [{ name: '15 minutes', value: 900 }, { name: '1 hour', value: 3600 }, { name: '6 hours', value: 21600 }, { name: '12 hours', value: 43200 }],
                    }]);
                var sessionDuration = duration_response.sessionDuration;
                var channel_choices = [{ name: 'E-mail', value: 'email' }];
                if (decoded["phone_number"])
                    channel_choices.push({ name: 'SMS', value: 'sms' });
                if (decoded["slack_channel"])
                    channel_choices.push({ name: 'Slack', value: 'slack' });
                let channel_response = await inquirer.prompt([{
                        name: 'notificationChannel',
                        message: 'Where do you want to be reached once the request is approved?',
                        type: 'list',
                        choices: channel_choices,
                    }]);
                var notificationChannel = channel_response.notificationChannel;
                cli_ux_1.default.action.start(chalk.blue("Making the permission request"));
                const { data: response } = await axios_1.default.post(config.endpoint + '/credentials/request', {
                    policy: policy,
                    sessionDuration: sessionDuration,
                    notificationChannel: notificationChannel
                });
                cli_ux_1.default.action.stop(chalk.blue(response));
            }
            else {
                this.error("No STS Broker policies are available for you.");
            }
            process.exit();
        }
        catch (error) {
            this.error(chalk.red("Sorry, it seems something went wrong while contacting your STS Broker: " + JSON.stringify(error.response.data)));
            process.exit();
        }
    }
}
exports.default = Request;
Request.description = 'Make a permission request to the STS Broker';
Request.flags = {
    reset: command_1.flags.boolean({ description: "Reset Cognito credentials" })
};