* limit access to resources according to user scope
* fix error change
* speech credentials validation
* fix speech credentials validation
* fix the issues that didnt allow tests to pass
* speech credential validation
* retrieve speech cred list
* fixt speech credential test valodation
* check scope of smpp-gateways
* check scope of smpp-gateways
* testing time
* /signin for hosted system needs to return scope in jwt
* fix user delete route and adjust tests
* get refactor
---------
Co-authored-by: eglehelms <e.helms@cognigy.com>
Co-authored-by: Dave Horton <daveh@beachdognet.com>
Co-authored-by: Guilherme Rauen <g.rauen@cognigy.com>
* Improved invalidation of JWT in redis
* use jwt as default value in generateRedisKey
* import logger in app.js
---------
Co-authored-by: Markus Frindt <m.frindt@cognigy.com>
* prevent updates to users that would move them to a different account or service provider, or make them admin users
* bugfix: when updating account as admin user, verify the account sid
* validate account sid when SP user tries to update
* user will always be attached to SP, thus always provide SP sid
* add another fallback for service_provider_sid
* fix the email and username check in user creation that was crashing the server
* not allow same names for shared and account carriers
Co-authored-by: eglehelms <e.helms@cognigy.com>
* initial changes for jwt auth
* return permissions as an array of string
* basic GET, POST, DELETE user api calls
* add permission checks
* hide hashed_password
* cleanup
* add check if admin user is active
* return account and serviceProvider sid un user object
* add more values to user PUT
* logout user after self delete, fix scope assignment
* add admin scope user tests
* fix test case and align jwt and api key data model in req.user
* fixes for ibm speech
* add limits license_count and voice_call_minutes
* update limits enum again
* rebase to main
* allow predefined carriers and speech credentials for Account user
* reverse the hasAccountPermissions changes
* SpeechCredentials permissions
* fix /Users/me api non-saas jambonz
Co-authored-by: Dave Horton <daveh@beachdognet.com>
Co-authored-by: eglehelms <e.helms@cognigy.com>
* initial changes for jwt auth
* return permissions as an array of string
* Add JWT expiration environment variable (#74)
* allow fromHost in createCall REST API
* add JWT_EXPIRES_IN=<mins> env variable, 60 mins by default
* add jwt expiration in register.js and signin.js
* fix tests - add permissions and scope to encoded obj in jwt
Co-authored-by: Dave Horton <daveh@beachdognet.com>
Co-authored-by: eglehelms <e.helms@cognigy.com>
* return only the jwt-token in the api response
* update swagger.yaml
* add /users api
* apply review comments
* add users test case
* added User model
* bugfix: admin user should be able to create a carrier for a service provider
Co-authored-by: EgleH <egle.helms@gmail.com>
Co-authored-by: eglehelms <e.helms@cognigy.com>
Hoan Luu Huu