nexus_cqrs_auth 0.0.4 → 1.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 26eebafb47f52358431b983d83a6f850926f2a26e650603cb25451488e8ec8d8
-  data.tar.gz: 18e62542c4ee5e180bda9ff8227a9193ecf026050542adf8fed02972b42b049e
+  metadata.gz: 94d379370fd1bbf839449f70e7e1cd89c9b25329b676c1677af766fa367f0c50
+  data.tar.gz: e4d381029b3088546bee61e8cfa025c186389d9f45a2dc41cc115f0ccc101f24
 SHA512:
-  metadata.gz: 2883708fb78909af81ad2f0839e82d08ae5c54a931c6f05ad3727766b7a4153e6c3958efa1e69ee0a867903423b2bfefb14bf14d3b0690afd3c64c783df35720
-  data.tar.gz: 894a40035cde2e7a02fa424836ef18af5b179953bbf81b262270a55f1fd048e1543cb0ab5cf6fcc0fee15dd8d183f9d18d91eb7751ab91bba260e7a316216c21
+  metadata.gz: 87b9c424f4f467ffcd0ea920055f38233ba76b0fb44347efb02b9c8673fbac46117b4b81509dc97c475451f0d68fd36125fd8590dc8ad60bbababdc853e16163
+  data.tar.gz: 17a6d172b728387267afe182d2259b7d76000fd9a9486619265046704d265e02b8bbbf7b9482bf9222ad72e9e670d2aa2169fb22be8f92e2aa09cb6a551781a2

data/.gitlab-ci.yml

@@ -22,7 +22,7 @@ release:
     - if: '$CI_COMMIT_TAG'
   script:
     - mkdir -p ~/.gem
-    - cp /builds/pub/nexus_cqrs_auth.tmp/RUBYGEMS_CREDENTIALS ~/.gem/credentials
+    - cp $RUBYGEMS_CREDENTIALS ~/.gem/credentials
     - chmod 0600 ~/.gem/credentials
     - gem update --system
     - ruby --version

data/Gemfile

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 source 'https://rubygems.org'
 
 gemspec

data/lib/nexus_cqrs_auth/helper.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'pundit'
 require 'strings-case'
 
@@ -6,12 +7,26 @@ module NexusCqrsAuth
   def authorize(command, record, query = nil, policy_class: nil)
     query ||= Strings::Case.snakecase(command.demodularised_class_name) + '?'
     @command_user = command.metadata[:current_user]
+    @global_permissions = command.metadata[:global_permissions]
     super_ = super(record, query, policy_class: policy_class)
     @command_user = nil
+    @global_permissions = nil
     super_
   end
 
+  # Helper method for creating a permissions provider object from a query object. This allows certain permissions
+  # to be checked inside the command handler, as opposed to inside the policy
+  def permission_provider(query)
+    PermissionProvider.new(query.metadata[:current_user], query.metadata[:global_permissions])
+  end
+
   def pundit_user
-    @command_user || super
+    UserContext.new(@command_user, @global_permissions)
+  end
+
+  def current_user
+    return super if defined?(super)
+
+    nil
   end
 end

data/lib/nexus_cqrs_auth/middleware.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'nexus_cqrs'
 require 'pundit'
 

data/lib/nexus_cqrs_auth/permission_provider.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+module NexusCqrsAuth
+  class PermissionProvider
+    def initialize(user_id, global_permissions)
+      @user_id = user_id
+      @global_permissions = parse_permissions_array(global_permissions)
+    end
+
+    #
+    # has_permission? 'collection:destroy'
+    #
+    # has_permission? 'collection:edit', CollectionPermission, collection.id
+    #
+    def has_permission?(permission_key, permission_model = nil, entity_id = nil)
+      return false if @user_id.nil?
+
+      return true if @global_permissions.include?(permission_key)
+
+      # check entity-specific permissions
+      unless permission_model.nil?
+        return true if permission_model.where(permission: permission_key, entity_id: entity_id,
+user_id: @user_id).exists?
+      end
+
+      false
+    end
+
+    private
+
+    def parse_permissions_array(permissions_array)
+      return [] if permissions_array.nil?
+
+      permissions = []
+
+      permissions_array.each do |entity, action_array|
+        action_array.each do |action|
+          permissions << entity + ":" + action
+        end
+      end
+
+      permissions
+    end
+  end
+end

data/lib/nexus_cqrs_auth/user_context.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+module NexusCqrsAuth
+  # Class used to provide additional context into pundit. This enables us to not only pass the user model, but also the
+  # global permissions for that user - as those are pulled from the user's request, not the model.
+  class UserContext
+    attr_reader :user, :global_permissions
+
+    def initialize(user, global_permissions)
+      @user = user
+      @global_permissions = global_permissions
+    end
+  end
+end

data/lib/nexus_cqrs_auth/version.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 module NexusCqrsAuth
-  VERSION = '0.0.4'
+  VERSION = '1.1.0'
 end

data/lib/nexus_cqrs_auth.rb

@@ -1,2 +1,5 @@
+# frozen_string_literal: true
 require 'nexus_cqrs_auth/helper'
 require 'nexus_cqrs_auth/middleware'
+require 'nexus_cqrs_auth/permission_provider'
+require 'nexus_cqrs_auth/user_context'

data/nexus_cqrs_auth.gemspec

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require_relative 'lib/nexus_cqrs_auth/version'
 
 Gem::Specification.new do |spec|
@@ -15,7 +16,7 @@ Gem::Specification.new do |spec|
     %x(git ls-files -z).split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
   end
   spec.require_paths = ['lib']
-  spec.add_dependency('nexus_cqrs', '~>0.1.1')
+  spec.add_dependency('nexus_cqrs', '~>0.2')
   spec.add_dependency('pundit')
   spec.add_dependency('strings-case')
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: nexus_cqrs_auth
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 1.1.0
 platform: ruby
 authors:
 - Chris Harrison
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-11-10 00:00:00.000000000 Z
+date: 2021-10-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nexus_cqrs
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.1
+        version: '0.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.1
+        version: '0.2'
 - !ruby/object:Gem::Dependency
   name: pundit
   requirement: !ruby/object:Gem::Requirement
@@ -68,6 +68,8 @@ files:
 - lib/nexus_cqrs_auth.rb
 - lib/nexus_cqrs_auth/helper.rb
 - lib/nexus_cqrs_auth/middleware.rb
+- lib/nexus_cqrs_auth/permission_provider.rb
+- lib/nexus_cqrs_auth/user_context.rb
 - lib/nexus_cqrs_auth/version.rb
 - nexus_cqrs_auth.gemspec
 homepage: 
@@ -88,7 +90,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.2.29
 signing_key: 
 specification_version: 4
 summary: Authorisation for the Nexus CQRS pattern