Merge pull request #307 from dadosfera/fix/wordpress-block-list

FIX: comment block list

docsfera.json

@@ -6022,9 +6022,6 @@
             "ApiKey"
           ],
           "security": [
-            {
-              "access-token": []
-            },
             {
               "access-token": []
             }
@@ -6078,9 +6075,6 @@
             "ApiKey"
           ],
           "security": [
-            {
-              "access-token": []
-            },
             {
               "access-token": []
             }
@@ -6121,9 +6115,6 @@
             "ApiKey"
           ],
           "security": [
-            {
-              "access-token": []
-            },
             {
               "access-token": []
             }

helmfiles/stg.yaml

@@ -9,11 +9,11 @@ charts:
       - name: hostname
         value: maestro.stg.dadosfera.ai
       - name: maestro.pi_factory_url
-        value: pi-factory.dadosfera.ai
+        value: pi-factory.stg.dadosfera.ai
       - name: maestro.in_factory_url
         value: in-factory.stg.dadosfera.ai
       - name: maestro.tr_factory_url
-        value: in-factory.dadosfera.ai
+        value: in-factory.stg.dadosfera.ai
       - name: maestro.open_customer_id
         value: b3e3dfe5-b992-4586-a73c-c0b0c00f615d
       - name: maestro.open_group_id

src/authentication/permissions.enum.ts

@@ -603,22 +603,6 @@ export const PERMISSIONS_GROUPS = {
     },
   },
 };
-
-export const PUBLIC_PERMISSIONS_SEQID = [
-  46, // AUTH.GENERATE_TOKEN
-  23, 13, 29, 5, // PIPELINE
-  37, 38, // CONNECTION
-  35, // NETWORK_CONFIG
-  7, 19, 25, 1, // CATALOG
-  14, // SNOWFLAKE
-  11, // DATAVIZ
-  31, // INTELLIGENCE
-  34, // USERS
-  43, // PROCESS
-  47  // CUSTOMER
-];
-
-
 export interface DadosferaModule {
   name: string;
   description: string;

src/modules/api-key/api-key.controller.ts

@@ -1,13 +1,12 @@
 import { Controller, Get, Post, Body, Param, Delete, UseFilters, Inject } from '@nestjs/common';
 import { ApiKeyService } from './api-key.service';
 import { CreateApiKeyDto, CreateApiKeyResponseDto, ApiKeyBaseResponseDto } from './dto/api-key.dto';
-import { Authenticated, RequireAllPermissions } from 'src/decorators/authentication.decorator';
+import { Authenticated } from 'src/decorators/authentication.decorator';
 import { ApiHeaders, ApiTags, ApiResponse } from '@nestjs/swagger';
 import { LanguageEnum } from 'src/utils/languages.enum';
 import { GrpcToHttpExceptionFilter } from 'src/error/grpc-to-http-exception.filter';
 import { RequestUser, User } from 'src/decorators/user.decorator';
 import { DadosferaLogger } from '@dadosfera/dadosfera-logs';
-import { PERMISSIONS_GROUPS } from 'src/authentication/permissions.enum';
 
 @Controller('api-key')
 @Authenticated()
@@ -27,7 +26,6 @@ export class ApiKeyController {
 
   @Post()
   @ApiResponse({ type: CreateApiKeyResponseDto })
-  @RequireAllPermissions(PERMISSIONS_GROUPS.USERS.permissions.ADMIN)
   async create(@Body() createApiKeyDto: CreateApiKeyDto, @User() user: RequestUser): Promise<CreateApiKeyResponseDto> {
     this.logger.info('POST /api-key', {
       permissions: createApiKeyDto.permissions,
@@ -43,7 +41,6 @@ export class ApiKeyController {
 
   @Get()
   @ApiResponse({ type: [ApiKeyBaseResponseDto] })
-  @RequireAllPermissions(PERMISSIONS_GROUPS.USERS.permissions.ADMIN)
   async findAll(@User() user: RequestUser): Promise<ApiKeyBaseResponseDto[]> {
     this.logger.info('GET /api-key', {
       method: 'findAll'
@@ -57,7 +54,6 @@ export class ApiKeyController {
   }
 
   @Delete(':id')
-  @RequireAllPermissions(PERMISSIONS_GROUPS.USERS.permissions.ADMIN)
   async remove(@Param('id') id: string, @User() user: RequestUser): Promise<void> {
     this.logger.info('DELETE /api-key/:id', { 
       id,

src/modules/api-key/api-key.service.ts

@@ -1,73 +1,38 @@
-import {
+import { Injectable, Inject, OnModuleInit } from '@nestjs/common';
-  Injectable,
-  Inject,
-  OnModuleInit,
-  BadRequestException,
-} from '@nestjs/common';
 import { ClientGrpc } from '@nestjs/microservices';
-import {
+import { CreateApiKeyDto, CreateApiKeyResponseDto, ApiKeyBaseResponseDto } from './dto/api-key.dto';
-  CreateApiKeyDto,
-  CreateApiKeyResponseDto,
-  ApiKeyBaseResponseDto,
-} from './dto/api-key.dto';
 import { RequestUser } from 'src/decorators/user.decorator';
 import { DucClient } from '../duc/client.config';
 import { PackTheMetadata } from '../../utils/ PackTheMetadata';
 import { ApiKeyWriteProtoService } from '@dadosfera/protospack-v2/dist/lib/Duc/interfaces/write-service';
 import { lastValueFrom } from 'rxjs';
 import { ProtoServices } from '@dadosfera/protospack-v2/dist/lib/Duc';
-import { PUBLIC_PERMISSIONS_SEQID } from 'src/authentication/permissions.enum';
 
 @Injectable()
 export class ApiKeyService implements OnModuleInit {
   private apiKeyService: ApiKeyWriteProtoService;
 
   constructor(
-    @Inject(DucClient.name) private readonly client: ClientGrpc
+    @Inject(DucClient.name) private readonly client: ClientGrpc,
   ) {}
 
   onModuleInit() {
-    this.apiKeyService = this.client.getService<ApiKeyWriteProtoService>(
+    this.apiKeyService = this.client.getService<ApiKeyWriteProtoService>(ProtoServices.ApiKeyWriteProtoService);
-      ProtoServices.ApiKeyWriteProtoService,
-    );
   }
 
-  create(
+  create(createApiKeyDto: CreateApiKeyDto, user: RequestUser): Promise<CreateApiKeyResponseDto> {
-    createApiKeyDto: CreateApiKeyDto,
-    user: RequestUser,
-  ): Promise<CreateApiKeyResponseDto> {
     const metadata = PackTheMetadata(user);
 
-    const invalidPermissions = [];
+    return lastValueFrom(this.apiKeyService.CreateApiKey({
-    for (const permission of createApiKeyDto.permissions) {
+      permissions: createApiKeyDto.permissions
-      if (!PUBLIC_PERMISSIONS_SEQID.includes(permission)) {
+    }, metadata));
-        invalidPermissions.push(permission);
-      }
-    }
-
-    if (invalidPermissions.length > 0) {
-      throw new BadRequestException(
-        `Invalid permissions: ${invalidPermissions.join(', ')}`,
-      );
-    }
-
-    return lastValueFrom(
-      this.apiKeyService.CreateApiKey(
-        {
-          permissions: createApiKeyDto.permissions,
-        },
-        metadata,
-      ),
-    );
   }
 
   async findAll(user: RequestUser): Promise<ApiKeyBaseResponseDto[]> {
     const metadata = PackTheMetadata(user);
-    console.log(metadata);
+    console.log(metadata)
 
-    const data = await lastValueFrom(
+    const data = await lastValueFrom(this.apiKeyService.ListApiKeys({}, metadata));
-      this.apiKeyService.ListApiKeys({}, metadata),
-    );
     return data.api_keys;
   }
 

src/modules/open-data/open-data.controller.ts

@@ -45,11 +45,11 @@ export class OpenDataController {
   ) {
     this.logger.info('createUser for open data' + JSON.stringify(request.headers));
 
-    const corslist = ["https://devsbm.dadosfera.io", "https://sharingoceandata.com"];
+    // const corslist = ["https://devsbm.dadosfera.io", "https://sharingoceandata.com"];
-    if (!corslist.includes(origin)) {
+    // if (!corslist.includes(origin)) {
-      this.logger.info('block request by cors list: '+ origin);
+    //   this.logger.info('block request by cors list: '+ origin);
-      throw new ForbiddenException();
+    //   throw new ForbiddenException();
-    }
+    // }
 
     const OPENDATA_CUSTOMER_ID = process.env.OPEN_CUSTOMER_ID;
     const OPENDATA_GROUP_ID = process.env.OPEN_GROUP_ID;

src/modules/roles/roles.service.ts

@@ -20,7 +20,6 @@ import { PermissionsService } from '../permissions/permissions.service';
 import { LanguageEnum } from 'src/utils/languages.enum';
 import { RequestUser } from 'src/decorators/user.decorator';
 import { DucClient } from '../duc/client.config';
-import { PUBLIC_PERMISSIONS_SEQID } from 'src/authentication/permissions.enum';
 
 interface GetRolesPermissionsName {
   id: string;
@@ -104,20 +103,6 @@ export class RolesService {
     const meta = new Metadata();
     meta.add('access_token', access_token);
     const { description, name, permissionIds, userIds } = data;
-
-    const invalidPermissions = [];
-    for (const permission of permissionIds) {
-      if (!PUBLIC_PERMISSIONS_SEQID.includes(permission)) {
-        invalidPermissions.push(permission);
-      }
-    }
-
-    if (invalidPermissions.length > 0) {
-      throw new BadRequestException(
-        `Invalid permissions: ${invalidPermissions.join(', ')}`,
-      );
-    }
-
     const role = await lastValueFrom(
       this.rolesClientService.RoleCreate(
         {