nexus_cqrs_auth 0.0.3 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d3d598f2e967a8b70e16c7eb5da21b63725fc986f04a83d1b5ea96f271117cad
-  data.tar.gz: edb9a9febb1aa1b97648ce83a471c81f05b90686dc735273a7a9d4f45cda30e0
+  metadata.gz: d1daefed67dc89410ebe057a05c3c35342aff0129283d729784b285dd0b3bd01
+  data.tar.gz: e6cc7a5d8ae88e769bfeb9efacfaaa43c1886f06866239ad006c5b66bd6d171a
 SHA512:
-  metadata.gz: 1be25f5a7a0f63f7a989df0332930ce51c340a5712d9288f5e60713e9c787bb7ed03c2903bb0b182528411dc97031ea5778705c84f88e580b07d9774f8ee1e8d
-  data.tar.gz: 1a4a782f0ffe7cc70c94fa57152f8277594d4e4b25abf372008773d37eb777ed25a0ecd17b74c627e2e9bac3f99ef81cc1efd7f24c50998a0991708c14fc674e
+  metadata.gz: 82134ce951fe252f5bdfac8f375e7945d422d7f0aab33b40529bc65e0eee39131f8957a6bacf10d46725427898270004557209de20d0413b47337110e4f089a9
+  data.tar.gz: d70ab29cc24370907317039af7b23c6590fdf4341e8d6739b045a35dbd89453631264065b4bea8d55dccf5ccd99ad9bcb8e1a3f1b9f8621e1ab323720b01f37f

data/.gitlab-ci.yml

@@ -22,7 +22,7 @@ release:
     - if: '$CI_COMMIT_TAG'
   script:
     - mkdir -p ~/.gem
-    - cp /builds/pub/nexus_cqrs_auth.tmp/RUBYGEMS_CREDENTIALS ~/.gem/credentials
+    - cp $RUBYGEMS_CREDENTIALS ~/.gem/credentials
     - chmod 0600 ~/.gem/credentials
     - gem update --system
     - ruby --version

data/Gemfile

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 source 'https://rubygems.org'
 
 gemspec

data/README.md

@@ -70,6 +70,10 @@ end
 
 You can then write various policies to setup authorisation in CQRS flows.
 
+More information about policies can be found in the [Pundit documentation](https://github.com/varvet/pundit).
+
+Remember to create a base policy at: `app/policies/application_policy.rb`
+
 ### Bus level policy
 
 Create a policy class in `app/policies/my_message_policy.rb`

data/lib/nexus_cqrs_auth/helper.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'pundit'
 require 'strings-case'
 
@@ -6,12 +7,20 @@ module NexusCqrsAuth
   def authorize(command, record, query = nil, policy_class: nil)
     query ||= Strings::Case.snakecase(command.demodularised_class_name) + '?'
     @command_user = command.metadata[:current_user]
+    @global_permissions = command.metadata[:global_permissions]
     super_ = super(record, query, policy_class: policy_class)
     @command_user = nil
+    @global_permissions = nil
     super_
   end
 
   def pundit_user
-    @command_user || super
+    UserContext.new(@command_user, @global_permissions)
+  end
+
+  def current_user
+    return super if defined?(super)
+
+    nil
   end
 end

data/lib/nexus_cqrs_auth/middleware.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'nexus_cqrs'
 require 'pundit'
 

data/lib/nexus_cqrs_auth/permission_provider.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+module NexusCqrsAuth
+  class PermissionProvider
+    def initialize(user_id, global_permissions)
+      @user_id = user_id
+      @global_permissions = parse_permissions_array(global_permissions)
+    end
+
+    #
+    # has_permission? 'collection:destroy'
+    #
+    # has_permission? 'collection:edit', CollectionPermission, collection.id
+    #
+    def has_permission?(permission_key, permission_model = nil, entity_id = nil)
+      return true if @global_permissions.include?(permission_key)
+
+      # check entity-specific permissions
+      unless permission_model.nil?
+        return true if permission_model.where(permission: permission_key, entity_id: entity_id,
+user_id: @user_id).exists?
+      end
+
+      false
+    end
+
+    private
+
+    def parse_permissions_array(permissions_array)
+      return [] if permissions_array.nil?
+
+      permissions = []
+
+      permissions_array.each do |entity, action_array|
+        action_array.each do |action|
+          permissions << entity + ":" + action
+        end
+      end
+
+      permissions
+    end
+  end
+end

data/lib/nexus_cqrs_auth/user_context.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+module NexusCqrsAuth
+  # Class used to provide additional context into pundit. This enables us to not only pass the user model, but also the
+  # global permissions for that user - as those are pulled from the user's request, not the model.
+  class UserContext
+    attr_reader :user, :global_permissions
+
+    def initialize(user, global_permissions)
+      @user = user
+      @global_permissions = global_permissions
+    end
+  end
+end

data/lib/nexus_cqrs_auth/version.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 module NexusCqrsAuth
-  VERSION = '0.0.3'
+  VERSION = '1.0.0'
 end

data/lib/nexus_cqrs_auth.rb

@@ -1,2 +1,5 @@
+# frozen_string_literal: true
 require 'nexus_cqrs_auth/helper'
 require 'nexus_cqrs_auth/middleware'
+require 'nexus_cqrs_auth/permission_provider'
+require 'nexus_cqrs_auth/user_context'

data/nexus_cqrs_auth.gemspec

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require_relative 'lib/nexus_cqrs_auth/version'
 
 Gem::Specification.new do |spec|
@@ -15,7 +16,7 @@ Gem::Specification.new do |spec|
     %x(git ls-files -z).split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
   end
   spec.require_paths = ['lib']
-  spec.add_dependency('nexus_cqrs', '~>0.1.1')
+  spec.add_dependency('nexus_cqrs', '~>0.2')
   spec.add_dependency('pundit')
   spec.add_dependency('strings-case')
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: nexus_cqrs_auth
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 1.0.0
 platform: ruby
 authors:
 - Chris Harrison
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-10-01 00:00:00.000000000 Z
+date: 2021-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nexus_cqrs
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.1
+        version: '0.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.1
+        version: '0.2'
 - !ruby/object:Gem::Dependency
   name: pundit
   requirement: !ruby/object:Gem::Requirement
@@ -68,6 +68,8 @@ files:
 - lib/nexus_cqrs_auth.rb
 - lib/nexus_cqrs_auth/helper.rb
 - lib/nexus_cqrs_auth/middleware.rb
+- lib/nexus_cqrs_auth/permission_provider.rb
+- lib/nexus_cqrs_auth/user_context.rb
 - lib/nexus_cqrs_auth/version.rb
 - nexus_cqrs_auth.gemspec
 homepage: 
@@ -88,7 +90,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.2.29
 signing_key: 
 specification_version: 4
 summary: Authorisation for the Nexus CQRS pattern