@abtnode/constant 1.8.31 → 1.8.32

package/index.js

@@ -14,54 +14,81 @@ const ROLES = Object.freeze({
   GUEST: 'guest',
 });
 
+const SERVER_ROLES = Object.freeze({
+  ...ROLES,
+  CI: 'ci',
+  CERTIFICATE: 'certificate',
+  BLOCKLET: 'blocklet',
+  EXTERNAL_BLOCKLET_CONTROLLER: 'external-blocklet-controller',
+  EXTERNAL_BLOCKLETS_MANAGER: 'external-blocklets-manager',
+});
+
+const AUTH_CERT_TYPE = {
+  USER: 'user',
+  OWNERSHIP_NFT: 'ownership_nft',
+  BLOCKLET: 'blocklet',
+  BLOCKLET_CONTROLLER: 'blocklet_controller',
+};
+
 const RBAC_CONFIG = {
   roles: Object.freeze([
     {
-      name: ROLES.OWNER,
+      name: SERVER_ROLES.OWNER,
       title: 'Owner',
       description: 'Has full administrative access to the Blocklet Server',
       passport: true,
     },
     {
-      name: ROLES.ADMIN,
+      name: SERVER_ROLES.ADMIN,
       title: 'Admin',
       description:
         'Has full permissions to manage blocklet and Blocklet Server such as install/remove/start/stop blocklet, manage blocklet URL mapping and certificates, manage blocklet team, manage node integrations and access keys, upgrade node to a new version',
       passport: true,
     },
     {
-      name: ROLES.MEMBER,
+      name: SERVER_ROLES.MEMBER,
       title: 'Member',
       description:
         'Has permissions to manage blocklets, such as install/remove/start/stop blocklet, manage blocklet URL mapping and certificates',
       passport: true,
     },
     {
-      name: ROLES.GUEST,
+      name: SERVER_ROLES.GUEST,
       title: 'Guest',
       description: 'Has all read permissions on Blocklet Server',
       passport: true,
     },
     {
-      name: 'ci',
+      name: SERVER_ROLES.CI,
       title: 'CI',
       description: 'Deploy blocklet to Blocklet Server',
       passport: true,
-      ci: true,
+      noHuman: true,
     },
     {
-      name: 'certificate',
+      name: SERVER_ROLES.CERTIFICATE,
       title: 'Certificate',
       description: 'Manage https certificates for blocklets on the Blocklet Server',
       passport: true,
-      ci: true,
+      noHuman: true,
     },
     {
-      name: 'blocklet',
+      name: SERVER_ROLES.BLOCKLET,
       title: 'Blocklet',
       // passport: true, // TODO enable this when we support access key for manage single blocklet
-      ci: true, // do not issue this passport to human
     },
+    {
+      name: SERVER_ROLES.EXTERNAL_BLOCKLET_CONTROLLER,
+      title: 'External Blocklet Controller',
+    },
+    {
+      name: SERVER_ROLES.EXTERNAL_BLOCKLETS_MANAGER,
+      title: 'External Blocklets Manager',
+      description: 'Manage external blocklets in the Blocklet Server',
+      passport: true,
+      noHuman: true,
+    },
+    // for backward compatibility
     {
       name: NODE_SERVICES.AUTH_SERVICE,
       title: 'Auth Service',
@@ -147,7 +174,7 @@ const RBAC_CONFIG = {
     },
   ]),
   grants: Object.freeze({
-    [ROLES.GUEST]: [
+    [SERVER_ROLES.GUEST]: [
       'query_blocklet',
       'query_router',
       'query_webhook',
@@ -157,20 +184,30 @@ const RBAC_CONFIG = {
       'query_node',
       'query_session',
     ],
-    [ROLES.MEMBER]: [ROLES.GUEST, 'mutate_blocklet', 'mutate_router', 'mutate_notification', 'mutate_session'],
-    [ROLES.ADMIN]: [
-      ROLES.MEMBER,
+    [SERVER_ROLES.MEMBER]: [
+      SERVER_ROLES.GUEST,
+      'mutate_blocklet',
+      'mutate_router',
+      'mutate_notification',
+      'mutate_session',
+    ],
+    [SERVER_ROLES.ADMIN]: [
+      SERVER_ROLES.MEMBER,
       'mutate_team',
       'mutate_webhook',
       'mutate_accessKey',
       'mutate_node',
       'mutate_certificate',
     ],
-    [ROLES.OWNER]: [ROLES.ADMIN],
-    '@abtnode/auth-service': ['query_team', 'mutate_team'],
-    ci: ['query_blocklet', 'mutate_blocklet'],
-    certificate: ['query_certificate', 'mutate_certificate'],
-    blocklet: ['query_team', 'mutate_team', 'manage_blocklet'],
+    [SERVER_ROLES.OWNER]: [ROLES.ADMIN],
+    [SERVER_ROLES.CI]: ['query_blocklet', 'mutate_blocklet'],
+    [SERVER_ROLES.CERTIFICATE]: ['query_certificate', 'mutate_certificate'],
+    [SERVER_ROLES.BLOCKLET]: ['query_team', 'mutate_team', 'manage_blocklet'],
+    [SERVER_ROLES.EXTERNAL_BLOCKLET_CONTROLLER]: ['query_blocklet', 'mutate_blocklet'],
+    [SERVER_ROLES.EXTERNAL_BLOCKLETS_MANAGER]: ['query_blocklet', 'mutate_blocklet'],
+
+    // for backwards compatibility
+    [NODE_SERVICES.AUTH_SERVICE]: ['query_team', 'mutate_team'],
   }),
 };
 
@@ -223,6 +260,7 @@ module.exports = Object.freeze({
   VC_TYPE_NODE_PASSPORT: 'ABTNodePassport',
   VC_TYPE_GENERAL_PASSPORT: 'NFTPassport',
 
+  VC_TYPE_SERVER_SHARE: 'BlockletServerShareCertificate',
   NFT_TYPE_SERVER_OWNERSHIP: 'BlockletServerOwnershipNFT',
 
   NODE_PACKAGE_NAME: '@abtnode/cli', // deprecated in 1.6.0
@@ -316,6 +354,8 @@ module.exports = Object.freeze({
 
   // Team
   ROLES,
+  SERVER_ROLES,
+  AUTH_CERT_TYPE,
   RBAC_CONFIG,
   genPermissionName: (resource, action = 'access') => `${action}_${resource.replace('_', '-')}`, // resource cannot include '_'
   PASSPORT_STATUS: {
@@ -341,4 +381,6 @@ module.exports = Object.freeze({
 
   // Store
   STORE_DETAIL_PAGE_PATH_PREFIX: '/blocklets',
+
+  MAX_USER_PAGE_SIZE: 100,
 });

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.8.31",
+  "version": "1.8.32",
   "description": "ABT Node constants",
   "main": "index.js",
   "files": [
@@ -20,5 +20,5 @@
   "devDependencies": {
     "jest": "^27.5.1"
   },
-  "gitHead": "f3cc8becdca1b8c5e645eb8cf751fa780cf09cfe"
+  "gitHead": "8502244aeda5926b3433c1dd9142e63233e3c23c"
 }