stack/packages/stack-shared/src/interface/adminInterface.ts

import { ServerAuthApplicationOptions, StackServerInterface } from "./serverInterface";
import { ProjectJson, ReadonlyTokenStore, SharedProvider, StandardProvider, TokenStore } from "./clientInterface";

export type AdminAuthApplicationOptions = Readonly<
  ServerAuthApplicationOptions &
  (
    | {
      superSecretAdminKey: string,
    }
    | {
      projectOwnerTokens: ReadonlyTokenStore,
    }
  )
>

export type OauthProviderUpdateOptions = {
  id: string,
  enabled: boolean,
} & (
  | {
    type: SharedProvider,
  }
  | {
    type: StandardProvider,
    clientId: string,
    clientSecret: string,
    tenantId?: string,
  }
)

export type ProjectUpdateOptions = {
  isProductionMode?: boolean,
  config?: {
    domains?: {
      domain: string,
      handlerPath: string,
    }[],
    oauthProviders?: OauthProviderUpdateOptions[],
    credentialEnabled?: boolean,
    allowLocalhost?: boolean,
  },
};

export type ApiKeySetBaseJson = {
  id: string,
  description: string,
  expiresAtMillis: number,
  manuallyRevokedAtMillis: number | null,
  createdAtMillis: number,
};

export type ApiKeySetFirstViewJson = ApiKeySetBaseJson & {
  publishableClientKey?: string,
  secretServerKey?: string,
  superSecretAdminKey?: string,
};

export type ApiKeySetJson = ApiKeySetBaseJson & {
  publishableClientKey: null | {
    lastFour: string,
  },
  secretServerKey: null | {
    lastFour: string,
  },
  superSecretAdminKey: null | {
    lastFour: string,
  },
};

export type ApiKeySetCreateOptions = {
  hasPublishableClientKey: boolean,
  hasSecretServerKey: boolean,
  hasSuperSecretAdminKey: boolean,
  expiresAt: Date,
  description: string,
};

export class StackAdminInterface extends StackServerInterface {
  constructor(public readonly options: AdminAuthApplicationOptions) {
    super(options);
  }

  protected async sendAdminRequest(path: string, options: RequestInit, tokenStore: TokenStore | null) {
    return await this.sendServerRequest(
      path,
      {
        ...options,
        headers: {
          "x-stack-super-secret-admin-key": "superSecretAdminKey" in this.options ? this.options.superSecretAdminKey : "",
          ...options.headers,
        },
      },
      tokenStore,
    );
  }

  async getProject(options?: { showDisabledOauth?: boolean }): Promise<ProjectJson> {
    const response = await this.sendAdminRequest(
      "/projects/" + encodeURIComponent(this.projectId),
      {
        method: "POST",
        headers: {
          "content-type": "application/json",
        },
        body: JSON.stringify(options ?? {}),
      },
      null,
    );
    return await response.json();
  }

  async updateProject(update: ProjectUpdateOptions): Promise<ProjectJson> {
    const response = await this.sendAdminRequest(
      "/projects/" + encodeURIComponent(this.projectId),
      {
        method: "PUT",
        headers: {
          "content-type": "application/json",
        },
        body: JSON.stringify(update),
      },
      null,
    );
    return await response.json();
  }

  async createApiKeySet(
    options: ApiKeySetCreateOptions,
  ): Promise<ApiKeySetFirstViewJson> {
    const response = await this.sendServerRequest(
      "/api-keys",
      {
        method: "POST",
        headers: {
          "content-type": "application/json",
        },
        body: JSON.stringify(options),
      },
      null,
    );
    return await response.json();
  }

  async listApiKeySets(): Promise<ApiKeySetJson[]> {
    const response = await this.sendAdminRequest("/api-keys", {}, null);
    const json = await response.json();
    return json.map((k: ApiKeySetJson) => k);
  }

  async revokeApiKeySetById(id: string) {
    await this.sendAdminRequest(
      `/api-keys/${id}`, {
        method: "PUT",
        headers: {
          "content-type": "application/json",
        },
        body: JSON.stringify({
          revoke: true,
        }),
      },
      null,
    );
  }

  async getApiKeySet(id: string, tokenStore: TokenStore): Promise<ApiKeySetJson> {
    const response = await this.sendAdminRequest(`/api-keys/${id}`, {}, tokenStore);
    return await response.json();
  }
}