Begin refactoring middleware for service accounts

backend/src/variables/authentication.ts

@@ -0,0 +1,11 @@
+const AUTH_MODE_JWT = 'jwt';
+const AUTH_MODE_SERVICE_ACCOUNT = 'serviceAccount';
+const AUTH_MODE_SERVICE_TOKEN = 'serviceToken';
+const AUTH_MODE_API_KEY = 'apiKey'; // TODO: deprecate
+
+export {
+    AUTH_MODE_JWT,
+    AUTH_MODE_SERVICE_ACCOUNT,
+    AUTH_MODE_SERVICE_TOKEN,
+    AUTH_MODE_API_KEY
+}

backend/src/variables/index.ts

@@ -63,6 +63,16 @@ import {
   TOKEN_EMAIL_ORG_INVITATION,
   TOKEN_EMAIL_PASSWORD_RESET
 } from './token';
+import {
+  PERMISSION_READ_SECRETS,
+  PERMISSION_WRITE_SECRETS
+} from './permission';
+import {
+  AUTH_MODE_JWT,
+  AUTH_MODE_SERVICE_ACCOUNT,
+  AUTH_MODE_SERVICE_TOKEN,
+  AUTH_MODE_API_KEY
+} from './authentication';
 
 export {
   OWNER,
@@ -113,6 +123,8 @@ export {
   ACTION_UPDATE_SECRETS,
   ACTION_DELETE_SECRETS,
   ACTION_READ_SECRETS,
+  PERMISSION_READ_SECRETS,
+  PERMISSION_WRITE_SECRETS,
   getIntegrationOptions,
   SMTP_HOST_SENDGRID,
   SMTP_HOST_MAILGUN,
@@ -124,5 +136,9 @@ export {
   TOKEN_EMAIL_CONFIRMATION,
   TOKEN_EMAIL_MFA,
   TOKEN_EMAIL_ORG_INVITATION,
-  TOKEN_EMAIL_PASSWORD_RESET
+  TOKEN_EMAIL_PASSWORD_RESET,
+  AUTH_MODE_JWT,
+  AUTH_MODE_SERVICE_ACCOUNT,
+  AUTH_MODE_SERVICE_TOKEN,
+  AUTH_MODE_API_KEY
 };

backend/src/variables/permission.ts

@@ -0,0 +1,7 @@
+const PERMISSION_READ_SECRETS = 'read';
+const PERMISSION_WRITE_SECRETS = 'write';
+
+export {
+    PERMISSION_READ_SECRETS,
+    PERMISSION_WRITE_SECRETS
+}