Secure your code as it's written. Use Snyk Code to scan source code in minutes - no build needed - and fix issues immediately.
},
{
basic: "*",
scopes: "*",
secrets: "*"
}
)
)
) {
throw new ForbiddenError(
"You do not have permission to create this authorization"
);
}
// Create a new authorization.
const authorization = await Authorization.write(
tx,
{
id: authorizationId,
enabled: true,
userId,
grantId: null,
secret: randomBytes(16).toString("hex"),
scopes: [`${realm}:**:**`]
},
{
recordId: v4(),
createdByAuthorizationId: authorizationId,
createdByCredentialId: credential.id,
createdAt: new Date()
}
);
tx.query("INSERT INTO authx.credential (id) VALUES ($1)", [
credential.data.id
]),
tx.query("INSERT INTO authx.role (id) VALUES ($1)", [role.data.id]),
tx.query("INSERT INTO authx.authorization (id) VALUES ($1)", [
authorization.data.id
])
]);
// insert the records
await Promise.all([
User.write(tx, user.data, user.metadata),
PasswordAuthority.write(tx, authority.data, authority.metadata),
PasswordCredential.write(tx, credential.data, credential.metadata),
Role.write(tx, role.data, role.metadata),
Authorization.write(tx, authorization.data, authorization.metadata)
]);
}
},
{
basic: "*",
scopes: "*",
secrets: "*"
}
)
)
) {
throw new ForbiddenError(
"You do not have permission to create this authorization"
);
}
// Create a new authorization.
const authorization = await Authorization.write(
tx,
{
id: authorizationId,
enabled: true,
userId: credential.userId,
grantId: null,
secret: randomBytes(16).toString("hex"),
scopes: [`${realm}:**:**`]
},
{
recordId: v4(),
createdByAuthorizationId: authorizationId,
createdByCredentialId: credential.id,
createdAt: new Date()
}
);
},
{
basic: "*",
scopes: "*",
secrets: "*"
}
)
)
) {
throw new ForbiddenError(
"You do not have permission to create this authorization"
);
}
// create a new authorization
const authorization = await Authorization.write(
tx,
{
id: authorizationId,
enabled: true,
userId: credential.userId,
grantId: null,
secret: randomBytes(16).toString("hex"),
scopes: [`${realm}:**:**`]
},
{
recordId: v4(),
createdByAuthorizationId: authorizationId,
createdByCredentialId: credential.id,
createdAt: new Date()
}
);
insert: (tx: PoolClient) =>
Authorization.write(
tx,
{
id: "c70da498-27ed-4c3b-a318-38bb220cef48",
enabled: true,
userId: "a6a0946d-eeb4-45cd-83c6-c7920f2272eb",
grantId: "e4670762-beb7-435c-94af-055b951f97e6",
secret:
"8f57395ecd9d6fcb884145f8f6feff357fead2fbd83607e87d71a7c372cf37ad",
scopes: ["**:**:**"]
},
{
recordId: "ce1a45cd-af9c-42fb-9879-aec6bc8b12a1",
createdByAuthorizationId: "f0e54748-c7bb-4724-ad8b-7dabb66aafa9",
createdByCredentialId: null,
createdAt: new Date("2019-03-06T21:07:59.814Z")
}