ToolJet/plugins/packages/openapi/lib/index.ts
Muhsin Shah C P 80ee7b7cac
[Improvement] Auth flow improvements for RestAPI, OpenAPI & GraphQL (#5324)
* Added access token url headers option to open api

* removing and adding code

* add authentication in GraphQL as RestAPI (#6687)

* add authentication in GraphQL as RestAPI

* fix: remove double header check

---------

Co-authored-by: Jean-Baptiste PIN <jeanbaptiste@idruide.com>

* refactor auth flows for restapi, openapi & graphql

* fix type errors

* remove redundant declarations

* fix openapi build error

* update authUrl for OAuth

* fix oauth check

---------

Co-authored-by: Akshay Sasidharan <akshaysasidharan93@gmail.com>
Co-authored-by: Jean-Baptiste PIN <jibet.pin@gmail.com>
Co-authored-by: Jean-Baptiste PIN <jeanbaptiste@idruide.com>
2023-07-21 15:38:56 +05:30

123 lines
3.7 KiB
TypeScript

import {
QueryResult,
User,
App,
OAuthUnauthorizedClientError,
QueryError,
QueryService,
getRefreshedToken,
validateAndSetRequestOptionsBasedOnAuthType,
getAuthUrl,
} from '@tooljet-plugins/common';
import { SourceOptions, QueryOptions, RestAPIResult } from './types';
import got, { HTTPError, OptionsOfTextResponseBody } from 'got';
import urrl from 'url';
export default class Openapi implements QueryService {
private resolvePathParams(params: any, path: string) {
let newString = path;
Object.entries(params).map(([key, value]) => {
newString = newString.replace(`{${key}}`, value as any);
});
return newString;
}
private sanitizeObject(params: any) {
Object.keys(params).forEach((key) => (params[key] === '' ? delete params[key] : {}));
return params;
}
async run(
sourceOptions: SourceOptions,
queryOptions: QueryOptions,
dataSourceId: string,
dataSourceUpdatedAt: string,
context?: { user?: User; app?: App }
): Promise<RestAPIResult> {
const { host, path, operation, params } = queryOptions;
const { request, query, header, path: pathParams } = params;
const url = new URL(host + this.resolvePathParams(pathParams, path));
const json = operation !== 'get' ? this.sanitizeObject(request) : undefined;
const _requestOptions: OptionsOfTextResponseBody = {
method: operation,
headers: header,
searchParams: {
...query,
},
json,
};
const authValidatedRequestOptions: QueryResult = validateAndSetRequestOptionsBasedOnAuthType(
sourceOptions,
context,
_requestOptions,
{ url }
);
const { status, data } = authValidatedRequestOptions;
if (status === 'needs_oauth') return authValidatedRequestOptions;
const requestOptions = data as OptionsOfTextResponseBody;
let result = {};
let requestObject = {};
let responseObject = {};
let responseHeaders = {};
try {
const response = await got(url, requestOptions);
result = JSON.parse(response.body);
requestObject = {
requestUrl: response.request.requestUrl,
method: response.request.options.method,
headers: response.request.options.headers,
params: urrl.parse(response.request.requestUrl.toString(), true).query,
};
responseObject = {
body: response.body,
statusCode: response.statusCode,
};
responseHeaders = response.headers;
} catch (error) {
console.log(error);
if (error instanceof HTTPError) {
result = {
requestObject: {
requestUrl: error.request.requestUrl,
requestHeaders: error.request.options.headers,
requestParams: urrl.parse(error.request.requestUrl.toString(), true).query,
},
responseObject: {
statusCode: error.response.statusCode,
responseBody: error.response.body,
},
responseHeaders: error.response.headers,
};
}
if (sourceOptions['auth_type'] === 'oauth2' && error?.response?.statusCode == 401) {
throw new OAuthUnauthorizedClientError('Unauthorized status from API server', error.message, result);
}
throw new QueryError('Query could not be completed', error.message, result);
}
return {
status: 'ok',
data: result,
request: requestObject,
response: responseObject,
responseHeaders,
};
}
authUrl(sourceOptions: SourceOptions): string {
return getAuthUrl(sourceOptions);
}
async refreshToken(sourceOptions: any, error: any, userId: string, isAppPublic: boolean) {
return getRefreshedToken(sourceOptions, error, userId, isAppPublic);
}
}