@ackplus/nest-auth 0.1.35 → 0.1.36

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ackplus/nest-auth",
-  "version": "0.1.35",
+  "version": "0.1.36",
   "type": "commonjs",
   "main": "./src/index.js",
   "types": "./src/index.d.ts",

package/src/lib/auth/guards/permissions.guard.d.ts

@@ -0,0 +1,8 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+export declare class NestAuthPermissionsGuard implements CanActivate {
+    private reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): boolean;
+    private getUserPermissions;
+}

package/src/lib/auth/guards/permissions.guard.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NestAuthPermissionsGuard = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const permissions_decorator_1 = require("../../core/decorators/permissions.decorator");
+let NestAuthPermissionsGuard = class NestAuthPermissionsGuard {
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    canActivate(context) {
+        let requiredPermissions = this.reflector.getAllAndOverride(permissions_decorator_1.PERMISSIONS_KEY, [context.getHandler(), context.getClass()]);
+        if (!requiredPermissions || requiredPermissions.length === 0) {
+            return true;
+        }
+        if (typeof requiredPermissions === 'string') {
+            requiredPermissions = [requiredPermissions];
+        }
+        const request = context.switchToHttp().getRequest();
+        const user = request.user;
+        if (!user || !user.roles || !Array.isArray(user.roles)) {
+            throw new common_1.ForbiddenException('Access denied: User not authenticated or no roles assigned');
+        }
+        const userPermissions = this.getUserPermissions(user.roles);
+        const hasAllPermissions = requiredPermissions.every(permission => userPermissions.includes(permission));
+        if (!hasAllPermissions) {
+            const missingPermissions = requiredPermissions.filter(permission => !userPermissions.includes(permission));
+            throw new common_1.ForbiddenException(`Access denied: Missing required permissions: ${missingPermissions.join(', ')}`);
+        }
+        return true;
+    }
+    getUserPermissions(roles) {
+        const permissions = new Set();
+        roles.forEach(role => {
+            if (!role.isActive) {
+                return;
+            }
+            if (role.permissions && Array.isArray(role.permissions)) {
+                role.permissions.forEach(permission => permissions.add(permission));
+            }
+        });
+        return Array.from(permissions);
+    }
+};
+exports.NestAuthPermissionsGuard = NestAuthPermissionsGuard;
+exports.NestAuthPermissionsGuard = NestAuthPermissionsGuard = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [core_1.Reflector])
+], NestAuthPermissionsGuard);
+//# sourceMappingURL=permissions.guard.js.map

package/src/lib/auth/guards/permissions.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.guard.js","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/guards/permissions.guard.ts"],"names":[],"mappings":";;;;AAAA,2CAA+F;AAC/F,uCAAyC;AACzC,uFAA8E;AAGvE,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACjC,YAAoB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAI,CAAC;IAE7C,WAAW,CAAC,OAAyB;QAEjC,IAAI,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACtD,uCAAe,EACf,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC7C,CAAC;QAGF,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC;QAChB,CAAC;QAGD,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YAC1C,mBAAmB,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAG1B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,2BAAkB,CAAC,4DAA4D,CAAC,CAAC;QAC/F,CAAC;QAGD,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAG5D,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAC7D,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CACvC,CAAC;QAEF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACrB,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAC/D,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CACxC,CAAC;YAEF,MAAM,IAAI,2BAAkB,CACxB,gDAAgD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClF,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAKO,kBAAkB,CAAC,KAAY;QACnC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAEtC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAEjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjB,OAAO;YACX,CAAC;YAGD,IAAI,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YACxE,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;CACJ,CAAA;AArEY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;6CAEsB,gBAAS;GAD/B,wBAAwB,CAqEpC"}

package/src/lib/auth/index.d.ts

@@ -1,5 +1,6 @@
 export * from './guards/auth.guard';
 export * from './guards/role.guard';
+export * from './guards/permissions.guard';
 export * from './events/logged-out-all.event';
 export * from './events/logged-out.event';
 export * from './events/password-reset-requested.event';

package/src/lib/auth/index.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./guards/auth.guard"), exports);
 tslib_1.__exportStar(require("./guards/role.guard"), exports);
+tslib_1.__exportStar(require("./guards/permissions.guard"), exports);
 tslib_1.__exportStar(require("./events/logged-out-all.event"), exports);
 tslib_1.__exportStar(require("./events/logged-out.event"), exports);
 tslib_1.__exportStar(require("./events/password-reset-requested.event"), exports);

package/src/lib/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/nest-auth/src/lib/auth/index.ts"],"names":[],"mappings":";;;AACA,8DAAoC;AACpC,8DAAoC;AAGpC,wEAA8C;AAC9C,oEAA0C;AAC1C,kFAAwD;AACxD,wEAA8C;AAC9C,2EAAiD;AACjD,wEAA8C;AAC9C,4EAAkD;AAClD,yEAA+C;AAG/C,kEAAwC;AACxC,oEAA0C;AAC1C,iEAAuC;AAGvC,wEAA8C;AAC9C,uEAA6C;AAG7C,2EAAiD;AACjD,4EAAkD;AAClD,kFAAwD;AACxD,qFAA2D;AAC3D,oFAA0D;AAC1D,mFAAyD;AACzD,mFAAyD;AACzD,gFAAsD;AACtD,uFAA6D;AAC7D,4EAAkD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/nest-auth/src/lib/auth/index.ts"],"names":[],"mappings":";;;AACA,8DAAoC;AACpC,8DAAoC;AACpC,qEAA2C;AAG3C,wEAA8C;AAC9C,oEAA0C;AAC1C,kFAAwD;AACxD,wEAA8C;AAC9C,2EAAiD;AACjD,wEAA8C;AAC9C,4EAAkD;AAClD,yEAA+C;AAG/C,kEAAwC;AACxC,oEAA0C;AAC1C,iEAAuC;AAGvC,wEAA8C;AAC9C,uEAA6C;AAG7C,2EAAiD;AACjD,4EAAkD;AAClD,kFAAwD;AACxD,qFAA2D;AAC3D,oFAA0D;AAC1D,mFAAyD;AACzD,mFAAyD;AACzD,gFAAsD;AACtD,uFAA6D;AAC7D,4EAAkD"}

package/src/lib/core/decorators/permissions.decorator.d.ts

@@ -0,0 +1,2 @@
+export declare const PERMISSIONS_KEY = "nest_auth_permissions";
+export declare function NestAuthPermissions(permissions: string[] | string): (target: any, key?: string, descriptor?: PropertyDescriptor) => PropertyDescriptor;

package/src/lib/core/decorators/permissions.decorator.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PERMISSIONS_KEY = void 0;
+exports.NestAuthPermissions = NestAuthPermissions;
+exports.PERMISSIONS_KEY = 'nest_auth_permissions';
+function NestAuthPermissions(permissions) {
+    return (target, key, descriptor) => {
+        if (descriptor) {
+            Reflect.defineMetadata(exports.PERMISSIONS_KEY, permissions, descriptor.value);
+        }
+        return descriptor;
+    };
+}
+//# sourceMappingURL=permissions.decorator.js.map

package/src/lib/core/decorators/permissions.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.decorator.js","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/core/decorators/permissions.decorator.ts"],"names":[],"mappings":";;;AASA,kDAOC;AAdY,QAAA,eAAe,GAAG,uBAAuB,CAAC;AAOvD,SAAgB,mBAAmB,CAAC,WAA8B;IAC9D,OAAO,CAAC,MAAW,EAAE,GAAY,EAAE,UAA+B,EAAE,EAAE;QAClE,IAAI,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,cAAc,CAAC,uBAAe,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC,CAAC;AACN,CAAC"}

package/src/lib/core/index.d.ts

@@ -1,4 +1,5 @@
 export * from './decorators/role.decorator';
+export * from './decorators/permissions.decorator';
 export * from './decorators/skip-mfa.decorator';
 export * from './interfaces/auth-module-options.interface';
 export * from './interfaces/mfa-options.interface';

package/src/lib/core/index.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./decorators/role.decorator"), exports);
+tslib_1.__exportStar(require("./decorators/permissions.decorator"), exports);
 tslib_1.__exportStar(require("./decorators/skip-mfa.decorator"), exports);
 tslib_1.__exportStar(require("./interfaces/auth-module-options.interface"), exports);
 tslib_1.__exportStar(require("./interfaces/mfa-options.interface"), exports);

package/src/lib/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/nest-auth/src/lib/core/index.ts"],"names":[],"mappings":";;;AACA,sEAA4C;AAC5C,0EAAgD;AAGhD,qFAA2D;AAC3D,6EAAmD;AACnD,iFAAuD;AACvD,+EAAqD;AAGrD,qDAA2B;AAG3B,qEAA2C;AAI3C,qFAA2D;AAC3D,6EAAmD;AACnD,iFAAuD;AACvD,+EAAqD;AACrD,qEAA2C;AAG3C,0EAAgD;AAChD,0EAAgD;AAChD,wEAA8C;AAC9C,2EAAiD;AACjD,6EAAmD;AACnD,0EAAgD;AAIhD,oFAA0D;AAC1D,iEAAuC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/nest-auth/src/lib/core/index.ts"],"names":[],"mappings":";;;AACA,sEAA4C;AAC5C,6EAAmD;AACnD,0EAAgD;AAGhD,qFAA2D;AAC3D,6EAAmD;AACnD,iFAAuD;AACvD,+EAAqD;AAGrD,qDAA2B;AAG3B,qEAA2C;AAI3C,qFAA2D;AAC3D,6EAAmD;AACnD,iFAAuD;AACvD,+EAAqD;AACrD,qEAA2C;AAG3C,0EAAgD;AAChD,0EAAgD;AAChD,wEAA8C;AAC9C,2EAAiD;AACjD,6EAAmD;AACnD,0EAAgD;AAIhD,oFAA0D;AAC1D,iEAAuC"}