8877569246

Committed 29 Apr 2024 11:10AM UTC coverage: 91.796% (-0.06%) from 91.854%

Build # 8877569246

Build Type

Pull #1468

github

Committed by

iamacook

Commit Message

Update comment

Pull Request Pull Request #1468: Authorise saving emails relative to JWT authentication

Run Details

1911 of 2354 branches covered (81.18%)

Branch coverage included in aggregate %.

17 of 18 new or added lines in 5 files covered. (94.44%)

1 existing line in 1 file now uncovered.

6884 of 7227 relevant lines covered (95.25%)

312.35 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

82.76

/src/domain/auth/auth.repository.ts

import { Inject, Injectable } from '@nestjs/common';
import { IJwtService } from '@/datasources/jwt/jwt.service.interface';
import { IAuthRepository } from '@/domain/auth/auth.repository.interface';
import {
  AuthPayload,
  AuthPayloadSchema,
} from '@/domain/auth/entities/auth-payload.entity';
import {
  JwtClaimsSchema,
  JwtPayloadWithClaims,
} from '@/datasources/jwt/jwt-claims.entity';
import { ISafeRepository } from '@/domain/safe/safe.repository.interface';

@Injectable()
export class AuthRepository implements IAuthRepository {
  constructor(
    @Inject(IJwtService)
    private readonly jwtService: IJwtService,
    @Inject(ISafeRepository)
    private readonly safeRepository: ISafeRepository,
  ) {}

  signToken<T extends AuthPayload>(
    payload: T,
    options?: {
      expiresIn?: number;
      notBefore?: number;
    },
  ): string {
    return this.jwtService.sign(payload, options);
  }

  verifyToken(accessToken: string): AuthPayload {
    const payload = this.jwtService.verify(accessToken);
    return AuthPayloadSchema.parse(payload);
  }

  decodeToken(accessToken: string): JwtPayloadWithClaims<AuthPayload> {
    const decoded = this.jwtService.decode(accessToken);
    return AuthPayloadSchema.merge(JwtClaimsSchema).parse(decoded);
  }

  isChain(args: { chainId: string; authPayload?: AuthPayload }): boolean {
    return args.authPayload?.chain_id === args.chainId;
  }

  isSigner(args: {
    signerAddress: `0x${string}`;
    authPayload?: AuthPayload;
  }): boolean {
    // Lowercase ensures a mixture of (non-)checksummed addresses are compared correctly
    return (
      args.authPayload?.signer_address.toLowerCase() ===
      args.signerAddress.toLowerCase()
    );
  }

  async isSafeOwner(args: {
    safeAddress: `0x${string}`;
    authPayload?: AuthPayload;
  }): Promise<boolean> {
    if (!args.authPayload) {
      return false;
    }
    return await this.safeRepository
      .isOwner({
        safeAddress: args.safeAddress,
        chainId: args.authPayload.chain_id,
        address: args.authPayload.signer_address,
      })
      // Swallow error so as to not leak information
      .catch(() => false);
  }
}

1	import { Inject, Injectable } from '@nestjs/common';	98✔
2	import { IJwtService } from '@/datasources/jwt/jwt.service.interface';	98✔
3	import { IAuthRepository } from '@/domain/auth/auth.repository.interface';
4	import {	98✔
5	AuthPayload,
6	AuthPayloadSchema,
7	} from '@/domain/auth/entities/auth-payload.entity';
8	import {	98✔
9	JwtClaimsSchema,
10	JwtPayloadWithClaims,
11	} from '@/datasources/jwt/jwt-claims.entity';
12	import { ISafeRepository } from '@/domain/safe/safe.repository.interface';	98✔
13
14	@Injectable()
15	export class AuthRepository implements IAuthRepository {	98✔
16	constructor(
17	@Inject(IJwtService)
18	private readonly jwtService: IJwtService,	206✔
19	@Inject(ISafeRepository)
20	private readonly safeRepository: ISafeRepository,	206✔
21	) {}
22
23	signToken<T extends AuthPayload>(
24	payload: T,
25	options?: {
26	expiresIn?: number;
27	notBefore?: number;
28	},
29	): string {
30	return this.jwtService.sign(payload, options);	2✔
31	}
32
33	verifyToken(accessToken: string): AuthPayload {
34	const payload = this.jwtService.verify(accessToken);	62✔
35	return AuthPayloadSchema.parse(payload);	44✔
36	}
37
38	decodeToken(accessToken: string): JwtPayloadWithClaims<AuthPayload> {
39	const decoded = this.jwtService.decode(accessToken);	2✔
40	return AuthPayloadSchema.merge(JwtClaimsSchema).parse(decoded);	2✔
41	}
42
43	isChain(args: { chainId: string; authPayload?: AuthPayload }): boolean {
44	return args.authPayload?.chain_id === args.chainId;	24!
45	}
46
47	isSigner(args: {
48	signerAddress: `0x${string}`;
49	authPayload?: AuthPayload;
50	}): boolean {
51	// Lowercase ensures a mixture of (non-)checksummed addresses are compared correctly
52	return (	24✔
53	args.authPayload?.signer_address.toLowerCase() ===	36!
54	args.signerAddress.toLowerCase()
55	);
56	}
57
58	async isSafeOwner(args: {
59	safeAddress: `0x${string}`;
60	authPayload?: AuthPayload;
61	}): Promise<boolean> {
62	if (!args.authPayload) {	8!
NEW 63	return false;	×
64	}
65	return await this.safeRepository	8✔
66	.isOwner({
67	safeAddress: args.safeAddress,
68	chainId: args.authPayload.chain_id,
69	address: args.authPayload.signer_address,
70	})
71	// Swallow error so as to not leak information
72	.catch(() => false);	2✔
73	}
74	}

safe-global / safe-client-gateway / 8877569246

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous