nexus_cqrs_auth 0.1.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9e062f14cca2a6a41d143bf648edbe21a6e661056fa5f8a408aeaea5c75d9b69
-  data.tar.gz: 686b79c46f969565dc23ba210bc48ff4a42f9c2f309b2592f82e0174e9e652b9
+  metadata.gz: d1daefed67dc89410ebe057a05c3c35342aff0129283d729784b285dd0b3bd01
+  data.tar.gz: e6cc7a5d8ae88e769bfeb9efacfaaa43c1886f06866239ad006c5b66bd6d171a
 SHA512:
-  metadata.gz: 3168a7a3ae6bb2070a2b3790043c5630560502515d7305d87a64d36cdfd0ed88f969c036d292452a6be6758f5f045f147a0a6c25ff46463ad3b697b2d418b935
-  data.tar.gz: 7f64fc4f86f877b19621728360d1f9cbd1ed1afedbff3c8808dc250e9b729af99477c0148af58b64042fa75c88d785296c71d7c55119285b06b05b0bec3db63b
+  metadata.gz: 82134ce951fe252f5bdfac8f375e7945d422d7f0aab33b40529bc65e0eee39131f8957a6bacf10d46725427898270004557209de20d0413b47337110e4f089a9
+  data.tar.gz: d70ab29cc24370907317039af7b23c6590fdf4341e8d6739b045a35dbd89453631264065b4bea8d55dccf5ccd99ad9bcb8e1a3f1b9f8621e1ab323720b01f37f

data/Gemfile

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 source 'https://rubygems.org'
 
 gemspec

data/lib/nexus_cqrs_auth/helper.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'pundit'
 require 'strings-case'
 
@@ -6,13 +7,15 @@ module NexusCqrsAuth
   def authorize(command, record, query = nil, policy_class: nil)
     query ||= Strings::Case.snakecase(command.demodularised_class_name) + '?'
     @command_user = command.metadata[:current_user]
+    @global_permissions = command.metadata[:global_permissions]
     super_ = super(record, query, policy_class: policy_class)
     @command_user = nil
+    @global_permissions = nil
     super_
   end
 
   def pundit_user
-    @command_user || super || nil
+    UserContext.new(@command_user, @global_permissions)
   end
 
   def current_user

data/lib/nexus_cqrs_auth/middleware.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'nexus_cqrs'
 require 'pundit'
 

data/lib/nexus_cqrs_auth/permission_provider.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+module NexusCqrsAuth
+  class PermissionProvider
+    def initialize(user_id, global_permissions)
+      @user_id = user_id
+      @global_permissions = parse_permissions_array(global_permissions)
+    end
+
+    #
+    # has_permission? 'collection:destroy'
+    #
+    # has_permission? 'collection:edit', CollectionPermission, collection.id
+    #
+    def has_permission?(permission_key, permission_model = nil, entity_id = nil)
+      return true if @global_permissions.include?(permission_key)
+
+      # check entity-specific permissions
+      unless permission_model.nil?
+        return true if permission_model.where(permission: permission_key, entity_id: entity_id,
+user_id: @user_id).exists?
+      end
+
+      false
+    end
+
+    private
+
+    def parse_permissions_array(permissions_array)
+      return [] if permissions_array.nil?
+
+      permissions = []
+
+      permissions_array.each do |entity, action_array|
+        action_array.each do |action|
+          permissions << entity + ":" + action
+        end
+      end
+
+      permissions
+    end
+  end
+end

data/lib/nexus_cqrs_auth/user_context.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+module NexusCqrsAuth
+  # Class used to provide additional context into pundit. This enables us to not only pass the user model, but also the
+  # global permissions for that user - as those are pulled from the user's request, not the model.
+  class UserContext
+    attr_reader :user, :global_permissions
+
+    def initialize(user, global_permissions)
+      @user = user
+      @global_permissions = global_permissions
+    end
+  end
+end

data/lib/nexus_cqrs_auth/version.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 module NexusCqrsAuth
-  VERSION = '0.1.0'
+  VERSION = '1.0.0'
 end

data/lib/nexus_cqrs_auth.rb

@@ -1,2 +1,5 @@
+# frozen_string_literal: true
 require 'nexus_cqrs_auth/helper'
 require 'nexus_cqrs_auth/middleware'
+require 'nexus_cqrs_auth/permission_provider'
+require 'nexus_cqrs_auth/user_context'

data/nexus_cqrs_auth.gemspec

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require_relative 'lib/nexus_cqrs_auth/version'
 
 Gem::Specification.new do |spec|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: nexus_cqrs_auth
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 1.0.0
 platform: ruby
 authors:
 - Chris Harrison
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-08-25 00:00:00.000000000 Z
+date: 2021-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nexus_cqrs
@@ -68,6 +68,8 @@ files:
 - lib/nexus_cqrs_auth.rb
 - lib/nexus_cqrs_auth/helper.rb
 - lib/nexus_cqrs_auth/middleware.rb
+- lib/nexus_cqrs_auth/permission_provider.rb
+- lib/nexus_cqrs_auth/user_context.rb
 - lib/nexus_cqrs_auth/version.rb
 - nexus_cqrs_auth.gemspec
 homepage: 
@@ -88,7 +90,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.26
+rubygems_version: 3.2.29
 signing_key: 
 specification_version: 4
 summary: Authorisation for the Nexus CQRS pattern