@acorex-platform/framework-server 0.0.10 → 0.0.15

package/security/src/lib/session/optional-jwt-session.middleware.d.ts

@@ -1,22 +1,26 @@
 import { NestMiddleware } from '@nestjs/common';
 import type { NextFunction, Request, Response } from 'express';
 import { AuthService } from '../auth/auth.service';
+import { MachineTokenService } from '../auth/machine-token.service';
+import { TokenResolverService } from '../auth/token-resolver.service';
 import { CURRENT_SESSION_KEY } from './current-session.decorator';
 import type { BackendRequestSession } from './backend-session.types';
 type RequestWithSession = Request & {
     [CURRENT_SESSION_KEY]?: BackendRequestSession;
 };
 /**
- * Populates {@link CURRENT_SESSION_KEY} when a valid Bearer token is present.
+ * Populates {@link CURRENT_SESSION_KEY} when a valid access token is present.
  * Routes stay public when no token is sent (entity storage, optional auth reads).
  * Invalid or expired tokens are ignored here so unauthenticated flows (e.g. token
  * refresh) still work; routes needing enforcement use {@link JwtAuthGuard}.
  */
 export declare class OptionalJwtSessionMiddleware implements NestMiddleware {
     private readonly authService;
+    private readonly machineTokenService;
+    private readonly tokenResolver;
     private readonly logger;
-    constructor(authService: AuthService);
+    constructor(authService: AuthService, machineTokenService: MachineTokenService, tokenResolver: TokenResolverService);
     use(req: RequestWithSession, _res: Response, next: NextFunction): void;
-    private extractBearerToken;
 }
 export {};
+//# sourceMappingURL=optional-jwt-session.middleware.d.ts.map

package/security/src/lib/session/optional-jwt-session.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optional-jwt-session.middleware.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/optional-jwt-session.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAIrE,KAAK,kBAAkB,GAAG,OAAO,GAAG;IAClC,CAAC,mBAAmB,CAAC,CAAC,EAAE,qBAAqB,CAAC;CAC/C,CAAC;AAEF;;;;;GAKG;AACH,qBACa,4BAA6B,YAAW,cAAc;IAI/D,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa;IALhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;gBAGrD,WAAW,EAAE,WAAW,EACxB,mBAAmB,EAAE,mBAAmB,EACxC,aAAa,EAAE,oBAAoB;IAGtD,GAAG,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;CAoCvE"}

package/security/src/lib/session/optional-jwt-session.middleware.js

@@ -5,16 +5,20 @@ exports.OptionalJwtSessionMiddleware = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const auth_service_1 = require("../auth/auth.service");
+const machine_token_service_1 = require("../auth/machine-token.service");
+const token_resolver_service_1 = require("../auth/token-resolver.service");
 const current_session_decorator_1 = require("./current-session.decorator");
 /**
- * Populates {@link CURRENT_SESSION_KEY} when a valid Bearer token is present.
+ * Populates {@link CURRENT_SESSION_KEY} when a valid access token is present.
  * Routes stay public when no token is sent (entity storage, optional auth reads).
  * Invalid or expired tokens are ignored here so unauthenticated flows (e.g. token
  * refresh) still work; routes needing enforcement use {@link JwtAuthGuard}.
  */
 let OptionalJwtSessionMiddleware = OptionalJwtSessionMiddleware_1 = class OptionalJwtSessionMiddleware {
-    constructor(authService) {
+    constructor(authService, machineTokenService, tokenResolver) {
         this.authService = authService;
+        this.machineTokenService = machineTokenService;
+        this.tokenResolver = tokenResolver;
         this.logger = new common_1.Logger(OptionalJwtSessionMiddleware_1.name);
     }
     use(req, _res, next) {
@@ -22,13 +26,19 @@ let OptionalJwtSessionMiddleware = OptionalJwtSessionMiddleware_1 = class Option
             next();
             return;
         }
-        const token = this.extractBearerToken(req.headers?.authorization);
-        if (!token) {
+        const machineSession = this.machineTokenService.resolveSession(req.headers);
+        if (machineSession) {
+            req[current_session_decorator_1.CURRENT_SESSION_KEY] = machineSession;
+            next();
+            return;
+        }
+        const resolved = this.tokenResolver.resolveAccessToken(req.headers, req.cookies);
+        if (!resolved) {
             next();
             return;
         }
         try {
-            const payload = this.authService.verifyAccessToken(token);
+            const payload = this.authService.verifyAccessToken(resolved.token);
             req[current_session_decorator_1.CURRENT_SESSION_KEY] = {
                 userId: payload.sub,
                 username: payload.username,
@@ -41,19 +51,13 @@ let OptionalJwtSessionMiddleware = OptionalJwtSessionMiddleware_1 = class Option
         }
         next();
     }
-    extractBearerToken(authorization) {
-        const header = Array.isArray(authorization) ? authorization[0] : authorization;
-        if (!header?.startsWith('Bearer ')) {
-            return null;
-        }
-        const token = header.slice('Bearer '.length).trim();
-        return token.length > 0 ? token : null;
-    }
 };
 exports.OptionalJwtSessionMiddleware = OptionalJwtSessionMiddleware;
 exports.OptionalJwtSessionMiddleware = OptionalJwtSessionMiddleware = OptionalJwtSessionMiddleware_1 = tslib_1.__decorate([
     (0, common_1.Injectable)(),
-    tslib_1.__metadata("design:paramtypes", [auth_service_1.AuthService])
+    tslib_1.__metadata("design:paramtypes", [auth_service_1.AuthService,
+        machine_token_service_1.MachineTokenService,
+        token_resolver_service_1.TokenResolverService])
 ], OptionalJwtSessionMiddleware);
 //#endregion
 //# sourceMappingURL=optional-jwt-session.middleware.js.map

package/security/src/lib/session/optional-jwt-session.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"optional-jwt-session.middleware.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/optional-jwt-session.middleware.ts"],"names":[],"mappings":";;;;;AAAA,2CAAoE;AAEpE,uDAAmD;AACnD,2EAAkE;AASlE;;;;;GAKG;AAEI,IAAM,4BAA4B,oCAAlC,MAAM,4BAA4B;IAGvC,YAA6B,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;QAFpC,WAAM,GAAG,IAAI,eAAM,CAAC,8BAA4B,CAAC,IAAI,CAAC,CAAC;IAEhB,CAAC;IAEzD,GAAG,CAAC,GAAuB,EAAE,IAAc,EAAE,IAAkB;QAC7D,IAAI,GAAG,CAAC,+CAAmB,CAAC,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1D,GAAG,CAAC,+CAAmB,CAAC,GAAG;gBACzB,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG;gBACrB,aAAa,EAAE,OAAO,CAAC,GAAG;aAC3B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;IAEO,kBAAkB,CAAC,aAAiC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QAC/E,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;CACF,CAAA;AAxCY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;6CAI+B,0BAAW;GAH1C,4BAA4B,CAwCxC;AAED,YAAY"}
+{"version":3,"file":"optional-jwt-session.middleware.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/optional-jwt-session.middleware.ts"],"names":[],"mappings":";;;;;AAAA,2CAAoE;AAEpE,uDAAmD;AACnD,yEAAoE;AACpE,2EAAsE;AACtE,2EAAkE;AASlE;;;;;GAKG;AAEI,IAAM,4BAA4B,oCAAlC,MAAM,4BAA4B;IAGvC,YACmB,WAAwB,EACxB,mBAAwC,EACxC,aAAmC;QAFnC,gBAAW,GAAX,WAAW,CAAa;QACxB,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,kBAAa,GAAb,aAAa,CAAsB;QALrC,WAAM,GAAG,IAAI,eAAM,CAAC,8BAA4B,CAAC,IAAI,CAAC,CAAC;IAMrE,CAAC;IAEJ,GAAG,CAAC,GAAuB,EAAE,IAAc,EAAE,IAAkB;QAC7D,IAAI,GAAG,CAAC,+CAAmB,CAAC,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5E,IAAI,cAAc,EAAE,CAAC;YACnB,GAAG,CAAC,+CAAmB,CAAC,GAAG,cAAc,CAAC;YAC1C,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CACpD,GAAG,CAAC,OAAwD,EAC5D,GAAG,CAAC,OAAkC,CACvC,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnE,GAAG,CAAC,+CAAmB,CAAC,GAAG;gBACzB,MAAM,EAAE,OAAO,CAAC,GAAG;gBACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG;gBACrB,aAAa,EAAE,OAAO,CAAC,GAAG;aAC3B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;CACF,CAAA;AA7CY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;6CAKqB,0BAAW;QACH,2CAAmB;QACzB,6CAAoB;GAN3C,4BAA4B,CA6CxC;AAED,YAAY"}

package/security/src/lib/session/session-access-policy.util.d.ts

@@ -0,0 +1,9 @@
+import type { SessionModulesAndFeaturesDto } from './session-context.types';
+/** Permission keys are scoped as `{ModuleName}:...` (e.g. `SecurityManagement:Permission:User.View`). */
+export declare function extractPermissionModuleName(permission: string): string | null;
+/**
+ * Returns only permissions whose module prefix is enabled for the current application edition.
+ * When edition modules are unknown, no permissions are exposed.
+ */
+export declare function filterPermissionsByEnabledModules(permissions: string[], modulesAndFeatures: SessionModulesAndFeaturesDto | null): string[];
+//# sourceMappingURL=session-access-policy.util.d.ts.map

package/security/src/lib/session/session-access-policy.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-access-policy.util.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session-access-policy.util.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAI5E,yGAAyG;AACzG,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAO7E;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,MAAM,EAAE,EACrB,kBAAkB,EAAE,4BAA4B,GAAG,IAAI,GACtD,MAAM,EAAE,CAWV"}

package/security/src/lib/session/session-access-policy.util.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractPermissionModuleName = extractPermissionModuleName;
+exports.filterPermissionsByEnabledModules = filterPermissionsByEnabledModules;
+//#region ----- Permission filtering -----
+/** Permission keys are scoped as `{ModuleName}:...` (e.g. `SecurityManagement:Permission:User.View`). */
+function extractPermissionModuleName(permission) {
+    const separatorIndex = permission.indexOf(':');
+    if (separatorIndex <= 0) {
+        return null;
+    }
+    return permission.slice(0, separatorIndex);
+}
+/**
+ * Returns only permissions whose module prefix is enabled for the current application edition.
+ * When edition modules are unknown, no permissions are exposed.
+ */
+function filterPermissionsByEnabledModules(permissions, modulesAndFeatures) {
+    const enabledModules = modulesAndFeatures?.modules ?? [];
+    if (enabledModules.length === 0) {
+        return [];
+    }
+    const enabledModuleSet = new Set(enabledModules);
+    return permissions.filter((permission) => {
+        const moduleName = extractPermissionModuleName(permission);
+        return moduleName !== null && enabledModuleSet.has(moduleName);
+    });
+}
+//#endregion
+//# sourceMappingURL=session-access-policy.util.js.map

package/security/src/lib/session/session-access-policy.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-access-policy.util.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session-access-policy.util.ts"],"names":[],"mappings":";;AAKA,kEAOC;AAMD,8EAcC;AA9BD,0CAA0C;AAE1C,yGAAyG;AACzG,SAAgB,2BAA2B,CAAC,UAAkB;IAC5D,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,SAAgB,iCAAiC,CAC/C,WAAqB,EACrB,kBAAuD;IAEvD,MAAM,cAAc,GAAG,kBAAkB,EAAE,OAAO,IAAI,EAAE,CAAC;IACzD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACjD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE;QACvC,MAAM,UAAU,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC3D,OAAO,UAAU,KAAK,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,YAAY"}

package/security/src/lib/session/session-context.service.d.ts

@@ -1,5 +1,5 @@
 import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
-import type { ApplicationConfigurationDto, SessionApplicationItemDto, SessionContextListResponseDto, SessionTenantItemDto } from './session-context.types';
+import type { SessionAccessPolicyDto, SessionApplicationItemDto, SessionContextListResponseDto, SessionTenantItemDto } from './session-context.types';
 export declare class SessionContextService {
     private readonly entityStorage;
     constructor(entityStorage: EntityStorageMiddlewareService);
@@ -11,7 +11,8 @@ export declare class SessionContextService {
      * deterministic regardless of `tid`, we fall back to the user's active tenant memberships.
      */
     private resolveScopedTenantIds;
-    getApplicationConfiguration(userId: string): Promise<ApplicationConfigurationDto>;
+    getAccessPolicy(userId: string, tenantId?: string, applicationId?: string): Promise<SessionAccessPolicyDto>;
+    private resolveModulesAndFeatures;
     private getUserPermissions;
     private extractPermissions;
     private extractRoleIds;
@@ -19,3 +20,4 @@ export declare class SessionContextService {
     private mapTenant;
     private mapApplication;
 }
+//# sourceMappingURL=session-context.service.d.ts.map

package/security/src/lib/session/session-context.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-context.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session-context.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAIxF,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAE7B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAkBjC,qBACa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAAb,aAAa,EAAE,8BAA8B;IAEpE,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC,oBAAoB,CAAC,CAAC;IAsCxG,+BAA+B,CACnC,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;IAoDpE;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAuBxB,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,sBAAsB,CAAC;YAQpB,yBAAyB;YAsCzB,kBAAkB;IAoBhC,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,cAAc;YAcR,YAAY;IAS1B,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,cAAc;CA8CvB"}

package/security/src/lib/session/session-context.service.js

@@ -5,8 +5,8 @@ const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const core_1 = require("@acorex-platform/framework-server/core");
 const abstract_1 = require("@acorex-platform/framework-server/jql/abstract");
-const platform_root_user_util_1 = require("../authorization/platform-root-user.util");
 const lodash_es_1 = require("lodash-es");
+const session_access_policy_util_1 = require("./session-access-policy.util");
 //#region ---- Entity keys ----
 const USER_ENTITY = 'SecurityManagement.User';
 const ROLE_ENTITY = 'SecurityManagement.Role';
@@ -15,6 +15,7 @@ const TENANT_USER_ENTITY = 'TenantManagement.TenantUser';
 const SUBSCRIPTION_ENTITY = 'SubscriptionManagement.Subscription';
 const SUBSCRIPTION_PLAN_ITEM_ENTITY = 'SubscriptionManagement.SubscriptionPlanItem';
 const APPLICATION_ENTITY = 'ApplicationManagement.Application';
+const EDITION_ENTITY = 'ApplicationManagement.Edition';
 const ACTIVE_STATUS = 'active';
 const SUBSCRIBER_TYPE_TENANT = 'Tenant';
 //#endregion
@@ -51,17 +52,16 @@ let SessionContextService = class SessionContextService {
             this.listEntities(TENANT_USER_ENTITY),
         ]);
         const activeApplications = applications.filter((application) => application['statusId'] === ACTIVE_STATUS);
-        if ((0, platform_root_user_util_1.isPlatformRootUserId)(userId)) {
-            return { items: activeApplications.map((application) => this.mapApplication(application)) };
+        if (!tenantId) {
+            return { items: [] };
         }
         const scopedTenantIds = this.resolveScopedTenantIds(userId, tenantId, tenantUsers);
-        if (scopedTenantIds.length === 0) {
+        if (!scopedTenantIds.includes(tenantId)) {
             return { items: [] };
         }
         const planIds = subscriptions
             .filter((subscription) => subscription['subscriberType'] === SUBSCRIBER_TYPE_TENANT &&
-            typeof subscription['subscriberId'] === 'string' &&
-            scopedTenantIds.includes(String(subscription['subscriberId'])) &&
+            String(subscription['subscriberId']) === tenantId &&
             subscription['statusId'] === ACTIVE_STATUS &&
             subscription['planId'])
             .map((subscription) => String(subscription['planId']));
@@ -96,22 +96,42 @@ let SessionContextService = class SessionContextService {
         }
         return [...membershipTenantIds];
     }
-    async getApplicationConfiguration(userId) {
-        const permissions = await this.getUserPermissions(userId);
-        const grantedPolicies = Object.fromEntries(permissions.map((permission) => [permission, true]));
-        return { auth: { grantedPolicies } };
+    async getAccessPolicy(userId, tenantId, applicationId) {
+        const modulesAndFeatures = await this.resolveModulesAndFeatures(userId, tenantId, applicationId);
+        const allPermissions = await this.getUserPermissions(userId);
+        const permissions = (0, session_access_policy_util_1.filterPermissionsByEnabledModules)(allPermissions, modulesAndFeatures);
+        return { permissions, modulesAndFeatures };
     }
-    async getUserPermissions(userId) {
-        if ((0, platform_root_user_util_1.isPlatformRootUserId)(userId)) {
-            return [platform_root_user_util_1.PLATFORM_OPERATOR_WILDCARD_PERMISSION];
+    async resolveModulesAndFeatures(userId, tenantId, applicationId) {
+        if (!tenantId || !applicationId) {
+            return null;
+        }
+        const applications = await this.getApplicationsForCurrentTenant(userId, tenantId);
+        const application = applications.items.find((item) => item.id === applicationId);
+        const editionId = application?.edition?.id;
+        if (!editionId) {
+            return null;
         }
+        const edition = (await this.entityStorage.getOne(EDITION_ENTITY, editionId));
+        if (!edition) {
+            return null;
+        }
+        const raw = edition['modulesAndFeatures'];
+        if (!raw) {
+            return null;
+        }
+        return {
+            modules: Array.isArray(raw.modules) ? raw.modules.filter((item) => typeof item === 'string') : [],
+            features: raw.features && typeof raw.features === 'object' && !Array.isArray(raw.features)
+                ? raw.features
+                : {},
+        };
+    }
+    async getUserPermissions(userId) {
         const user = (await this.entityStorage.getOne(USER_ENTITY, userId));
         if (!user) {
             return [];
         }
-        if ((0, platform_root_user_util_1.isPlatformRootUserRecord)(user)) {
-            return [platform_root_user_util_1.PLATFORM_OPERATOR_WILDCARD_PERMISSION];
-        }
         const roleIds = this.extractRoleIds(user);
         if (roleIds.length === 0) {
             return [];
@@ -121,11 +141,7 @@ let SessionContextService = class SessionContextService {
         const permissions = roles
             .filter((role) => roleIdSet.has(String(role['id'])))
             .flatMap((role) => this.extractPermissions(role));
-        const uniquePermissions = [...new Set(permissions)];
-        if ((0, platform_root_user_util_1.hasPlatformOperatorWildcardPermission)(uniquePermissions)) {
-            return [platform_root_user_util_1.PLATFORM_OPERATOR_WILDCARD_PERMISSION];
-        }
-        return uniquePermissions;
+        return [...new Set(permissions)];
     }
     extractPermissions(role) {
         const raw = role['permissions'];
@@ -161,7 +177,7 @@ let SessionContextService = class SessionContextService {
             name: String(tenant['name'] ?? (fallbackName || 'default-name')),
             title,
             description: tenant['description'],
-            logo: tenant['logo'],
+            logo: typeof tenant['logo'] === 'string' ? tenant['logo'] : undefined,
         };
     }
     mapApplication(application, subscribedEditionIds) {
@@ -185,6 +201,12 @@ let SessionContextService = class SessionContextService {
             description: application['description'],
             icon: application['icon'],
             color: application['color'],
+            logo: application['logo'] ?? application['logoUrl'],
+            logoUrl: typeof application['logo'] === 'string'
+                ? application['logo']
+                : typeof application['logoUrl'] === 'string'
+                    ? application['logoUrl']
+                    : undefined,
             edition: edition
                 ? {
                     id: String(edition['id']),

package/security/src/lib/session/session-context.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-context.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session-context.service.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,iEAAwF;AACxF,6EAAkG;AAClG,sFAKkD;AAClD,yCAAgC;AAQhC,+BAA+B;AAE/B,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AACzD,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAClE,MAAM,6BAA6B,GAAG,6CAA6C,CAAC;AACpF,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAE/D,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAExC,YAAY;AAGL,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YAA6B,aAA6C;QAA7C,kBAAa,GAAb,aAAa,CAAgC;IAAG,CAAC;IAE9E,KAAK,CAAC,0BAA0B,CAAC,MAAc;QAC7C,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9D,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC,CAAC;QACvF,MAAM,0BAA0B,GAAG,IAAI,GAAG,CACxC,aAAa;aACV,MAAM,CACL,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,gBAAgB,CAAC,KAAK,sBAAsB;YACzD,YAAY,CAAC,UAAU,CAAC,KAAK,aAAa;YAC1C,OAAO,YAAY,CAAC,cAAc,CAAC,KAAK,QAAQ,CACnD;aACA,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAC/D,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,WAAW;aACR,MAAM,CACL,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,aAAa,IAAI,UAAU,CAAC,UAAU,CAAC,CACxG;aACA,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CACvD,CAAC;QAEF,MAAM,KAAK,GAAG,aAAa;aACxB,MAAM,CACL,CAAC,MAAM,EAAE,EAAE,CACT,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAC7C;aACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAE3C,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,+BAA+B,CACnC,MAAc,EACd,QAAiB;QAEjB,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9E,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC,CAAC;QAE3G,IAAI,IAAA,8CAAoB,EAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC9F,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,OAAO,GAAG,aAAa;aAC1B,MAAM,CACL,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,gBAAgB,CAAC,KAAK,sBAAsB;YACzD,OAAO,YAAY,CAAC,cAAc,CAAC,KAAK,QAAQ;YAChD,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;YAC9D,YAAY,CAAC,UAAU,CAAC,KAAK,aAAa;YAC1C,YAAY,CAAC,QAAQ,CAAC,CACzB;aACA,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,SAAS;aACN,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;aAC3F,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CACpD,CAAC;QAEF,MAAM,KAAK,GAAG,kBAAkB;aAC7B,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE;YACtB,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YAC7C,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBACzB,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAC5E,CAAC;QACJ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAEhF,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,sBAAsB,CAC5B,MAAc,EACd,QAA4B,EAC5B,WAAsC;QAEtC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,WAAW;aACR,MAAM,CACL,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM;YAC/B,UAAU,CAAC,UAAU,CAAC,KAAK,aAAa;YACxC,UAAU,CAAC,UAAU,CAAC,CACzB;aACA,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CACvD,CAAC;QAEF,IAAI,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QAED,OAAO,CAAC,GAAG,mBAAmB,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,MAAc;QAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAEhG,OAAO,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,MAAc;QAC7C,IAAI,IAAA,8CAAoB,EAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,+DAAqC,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAmC,CAAC;QACtG,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,IAAA,kDAAwB,EAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,+DAAqC,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,KAAK;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACnD,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpD,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QACpD,IAAI,IAAA,+DAAqC,EAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,+DAAqC,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAEO,kBAAkB,CAAC,IAA6B;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QAEhC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,EAAwB,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,GAAG,YAAY,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAwB,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,cAAc,CAAC,IAA6B;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC;iBACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;iBAC5G,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,UAAkB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAC3C,UAAU,EACV,IAAA,2CAAgC,EAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAC1D,CAAC;QACF,MAAM,KAAK,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAA8B,CAAC;QACpE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,CAAC;IAEO,SAAS,CAAC,MAA+B;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE9D,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YAChE,KAAK;YACL,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC;YAClC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;SACrB,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,WAAoC,EACpC,oBAAkC;QAElC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACrD,CAAC,CAAE,WAAW,CAAC,UAAU,CAA+B;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3E,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEnB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,SAAS,GACb,IAAI,KAAK,WAAW;YAClB,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvE,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;gBACxC,cAAc,CAAC;QAErB,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI;YACJ,IAAI,EAAE,SAAS;YACf,KAAK;YACL,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACpF,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC;YACvC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC;oBACE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACzB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrC,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC;iBACpC;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;CACF,CAAA;AA9PY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;6CAEiC,qCAA8B;GAD/D,qBAAqB,CA8PjC;AAED,YAAY"}
+{"version":3,"file":"session-context.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session-context.service.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,iEAAwF;AACxF,6EAAkG;AAClG,yCAAgC;AAChC,6EAAiF;AASjF,+BAA+B;AAE/B,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AACzD,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAClE,MAAM,6BAA6B,GAAG,6CAA6C,CAAC;AACpF,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAExC,YAAY;AAGL,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YAA6B,aAA6C;QAA7C,kBAAa,GAAb,aAAa,CAAgC;IAAG,CAAC;IAE9E,KAAK,CAAC,0BAA0B,CAAC,MAAc;QAC7C,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9D,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC,CAAC;QACvF,MAAM,0BAA0B,GAAG,IAAI,GAAG,CACxC,aAAa;aACV,MAAM,CACL,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,gBAAgB,CAAC,KAAK,sBAAsB;YACzD,YAAY,CAAC,UAAU,CAAC,KAAK,aAAa;YAC1C,OAAO,YAAY,CAAC,cAAc,CAAC,KAAK,QAAQ,CACnD;aACA,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAC/D,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,WAAW;aACR,MAAM,CACL,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,aAAa,IAAI,UAAU,CAAC,UAAU,CAAC,CACxG;aACA,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CACvD,CAAC;QAEF,MAAM,KAAK,GAAG,aAAa;aACxB,MAAM,CACL,CAAC,MAAM,EAAE,EAAE,CACT,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAC7C;aACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAE3C,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,+BAA+B,CACnC,MAAc,EACd,QAAiB;QAEjB,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9E,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC,CAAC;QAE3G,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnF,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,OAAO,GAAG,aAAa;aAC1B,MAAM,CACL,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,gBAAgB,CAAC,KAAK,sBAAsB;YACzD,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,KAAK,QAAQ;YACjD,YAAY,CAAC,UAAU,CAAC,KAAK,aAAa;YAC1C,YAAY,CAAC,QAAQ,CAAC,CACzB;aACA,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,SAAS;aACN,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;aAC3F,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CACpD,CAAC;QAEF,MAAM,KAAK,GAAG,kBAAkB;aAC7B,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE;YACtB,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YAC7C,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBACzB,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAC5E,CAAC;QACJ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAEhF,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,sBAAsB,CAC5B,MAAc,EACd,QAA4B,EAC5B,WAAsC;QAEtC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,WAAW;aACR,MAAM,CACL,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM;YAC/B,UAAU,CAAC,UAAU,CAAC,KAAK,aAAa;YACxC,UAAU,CAAC,UAAU,CAAC,CACzB;aACA,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CACvD,CAAC;QAEF,IAAI,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QAED,OAAO,CAAC,GAAG,mBAAmB,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,MAAc,EACd,QAAiB,EACjB,aAAsB;QAEtB,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACjG,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAA,8DAAiC,EAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAE1F,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,MAAc,EACd,QAAiB,EACjB,aAAsB;QAEtB,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,CAGnE,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAA6C,CAAC;QACtF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACjH,QAAQ,EACN,GAAG,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC9E,CAAC,CAAE,GAAG,CAAC,QAAoC;gBAC3C,CAAC,CAAC,EAAE;SACT,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,MAAc;QAC7C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAmC,CAAC;QACtG,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,KAAK;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACnD,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,kBAAkB,CAAC,IAA6B;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QAEhC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,EAAwB,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,GAAG,YAAY,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAwB,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,cAAc,CAAC,IAA6B;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC;iBACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;iBAC5G,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,UAAkB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAC3C,UAAU,EACV,IAAA,2CAAgC,EAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAC1D,CAAC;QACF,MAAM,KAAK,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAA8B,CAAC;QACpE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,CAAC;IAEO,SAAS,CAAC,MAA+B;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE9D,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;YAChE,KAAK;YACL,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC;YAClC,IAAI,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SACtE,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,WAAoC,EACpC,oBAAkC;QAElC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACrD,CAAC,CAAE,WAAW,CAAC,UAAU,CAA+B;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3E,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEnB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,SAAS,GACb,IAAI,KAAK,WAAW;YAClB,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvE,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;gBACxC,cAAc,CAAC;QAErB,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI;YACJ,IAAI,EAAE,SAAS;YACf,KAAK;YACL,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACpF,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC;YACvC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC;YAC3B,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC;YACnD,OAAO,EACL,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,QAAQ;gBACrC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;gBACrB,CAAC,CAAC,OAAO,WAAW,CAAC,SAAS,CAAC,KAAK,QAAQ;oBAC1C,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;oBACxB,CAAC,CAAC,SAAS;YACjB,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC;oBACE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACzB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrC,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC;iBACpC;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;CACF,CAAA;AAlSY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;6CAEiC,qCAA8B;GAD/D,qBAAqB,CAkSjC;AAED,YAAY"}

package/security/src/lib/session/session-context.types.d.ts

@@ -6,7 +6,7 @@ export interface SessionTenantItemDto {
     name: string;
     title: string;
     description?: unknown;
-    logo?: unknown;
+    logo?: string;
 }
 export interface SessionApplicationEditionDto {
     id: string;
@@ -22,10 +22,16 @@ export interface SessionApplicationItemDto {
     description?: unknown;
     icon?: unknown;
     color?: unknown;
+    logo?: unknown;
+    logoUrl?: string;
     edition?: SessionApplicationEditionDto;
 }
-export interface ApplicationConfigurationDto {
-    auth: {
-        grantedPolicies: Record<string, boolean>;
-    };
+export interface SessionAccessPolicyDto {
+    permissions: string[];
+    modulesAndFeatures: SessionModulesAndFeaturesDto | null;
+}
+export interface SessionModulesAndFeaturesDto {
+    modules: string[];
+    features: Record<string, unknown>;
 }
+//# sourceMappingURL=session-context.types.d.ts.map

package/security/src/lib/session/session-context.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-context.types.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session-context.types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,6BAA6B,CAAC,CAAC;IAC9C,KAAK,EAAE,CAAC,EAAE,CAAC;CACZ;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,4BAA4B,CAAC;CACxC;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,EAAE,4BAA4B,GAAG,IAAI,CAAC;CACzD;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC"}

package/security/src/lib/session/session-context.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-context.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session-context.types.ts"],"names":[],"mappings":";AAAA,6CAA6C;;AAsC7C,YAAY"}
+{"version":3,"file":"session-context.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session-context.types.ts"],"names":[],"mappings":";AAAA,6CAA6C;;AA4C7C,YAAY"}

package/security/src/lib/session/session.controller.d.ts

@@ -0,0 +1,12 @@
+import { BackendSessionService } from './backend-session.service';
+import { SessionContextService } from './session-context.service';
+import type { SessionAccessPolicyDto, SessionApplicationItemDto, SessionContextListResponseDto, SessionTenantItemDto } from './session-context.types';
+export declare class SessionController {
+    private readonly sessionContext;
+    private readonly backendSession;
+    constructor(sessionContext: SessionContextService, backendSession: BackendSessionService);
+    getTenants(): Promise<SessionContextListResponseDto<SessionTenantItemDto>>;
+    getApplications(): Promise<SessionContextListResponseDto<SessionApplicationItemDto>>;
+    getAccessPolicy(): Promise<SessionAccessPolicyDto>;
+}
+//# sourceMappingURL=session.controller.d.ts.map

package/security/src/lib/session/session.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.controller.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAIjC,qBAEa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBADd,cAAc,EAAE,qBAAqB,EACrC,cAAc,EAAE,qBAAqB;IAOxD,UAAU,IAAI,OAAO,CAAC,6BAA6B,CAAC,oBAAoB,CAAC,CAAC;IAS1E,eAAe,IAAI,OAAO,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;IAWpF,eAAe,IAAI,OAAO,CAAC,sBAAsB,CAAC;CAQnD"}

package/security/src/lib/session/session.controller.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionController = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const jwt_auth_guard_1 = require("../auth/jwt-auth.guard");
+const backend_session_service_1 = require("./backend-session.service");
+const session_context_service_1 = require("./session-context.service");
+//#region ---- Session REST API ----
+let SessionController = class SessionController {
+    constructor(sessionContext, backendSession) {
+        this.sessionContext = sessionContext;
+        this.backendSession = backendSession;
+    }
+    getTenants() {
+        const session = this.backendSession.requireAuthenticated();
+        return this.sessionContext.getAvailableTenantsForUser(session.userId);
+    }
+    getApplications() {
+        const session = this.backendSession.requireAuthenticated();
+        return this.sessionContext.getApplicationsForCurrentTenant(session.userId, session.tenantId);
+    }
+    getAccessPolicy() {
+        const session = this.backendSession.requireAuthenticated();
+        return this.sessionContext.getAccessPolicy(session.userId, session.tenantId, session.applicationId);
+    }
+};
+exports.SessionController = SessionController;
+tslib_1.__decorate([
+    (0, common_1.Get)('tenants'),
+    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, swagger_1.ApiOperation)({ summary: 'List tenants available for the authenticated user' }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], SessionController.prototype, "getTenants", null);
+tslib_1.__decorate([
+    (0, common_1.Get)('applications'),
+    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, swagger_1.ApiOperation)({ summary: 'List applications available for the current tenant session' }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], SessionController.prototype, "getApplications", null);
+tslib_1.__decorate([
+    (0, common_1.Get)('access-policy'),
+    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Return permissions and edition module/feature policy for the current session',
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], SessionController.prototype, "getAccessPolicy", null);
+exports.SessionController = SessionController = tslib_1.__decorate([
+    (0, swagger_1.ApiTags)('session'),
+    (0, common_1.Controller)('v1/session'),
+    tslib_1.__metadata("design:paramtypes", [session_context_service_1.SessionContextService,
+        backend_session_service_1.BackendSessionService])
+], SessionController);
+//#endregion
+//# sourceMappingURL=session.controller.js.map

package/security/src/lib/session/session.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/session/session.controller.ts"],"names":[],"mappings":";;;;AAAA,2CAA4D;AAC5D,6CAAuE;AACvE,2DAAsD;AACtD,uEAAkE;AAClE,uEAAkE;AAQlE,oCAAoC;AAI7B,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC5B,YACmB,cAAqC,EACrC,cAAqC;QADrC,mBAAc,GAAd,cAAc,CAAuB;QACrC,mBAAc,GAAd,cAAc,CAAuB;IACrD,CAAC;IAMJ,UAAU;QACR,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IAMD,eAAe;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,+BAA+B,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/F,CAAC;IAQD,eAAe;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,eAAe,CACxC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,aAAa,CACtB,CAAC;IACJ,CAAC;CACF,CAAA;AAtCY,8CAAiB;AAU5B;IAJC,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;;;;mDAI9E;AAMD;IAJC,IAAA,YAAG,EAAC,cAAc,CAAC;IACnB,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;;;;wDAIvF;AAQD;IANC,IAAA,YAAG,EAAC,eAAe,CAAC;IACpB,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8EAA8E;KACxF,CAAC;;;;wDAQD;4BArCU,iBAAiB;IAF7B,IAAA,iBAAO,EAAC,SAAS,CAAC;IAClB,IAAA,mBAAU,EAAC,YAAY,CAAC;6CAGY,+CAAqB;QACrB,+CAAqB;GAH7C,iBAAiB,CAsC7B;AAED,YAAY"}

package/swagger/src/index.d.ts

@@ -3,4 +3,10 @@ export * from './lib/swagger.types';
 export * from './lib/swagger.helpers';
 export * from './lib/entity-storage-swagger.service';
 export * from './lib/entity-storage-swagger.module';
+export * from './lib/runtime-openapi.types';
+export * from './lib/runtime-openapi.service';
+export * from './lib/runtime-openapi-catalog.provider';
+export * from './lib/runtime-openapi.controller';
+export * from './lib/runtime-openapi.module';
 export * from './lib/swagger.setup';
+//# sourceMappingURL=index.d.ts.map

package/swagger/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../libs/framework/server/swagger/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC"}

package/swagger/src/index.js

@@ -6,5 +6,10 @@ tslib_1.__exportStar(require("./lib/swagger.types"), exports);
 tslib_1.__exportStar(require("./lib/swagger.helpers"), exports);
 tslib_1.__exportStar(require("./lib/entity-storage-swagger.service"), exports);
 tslib_1.__exportStar(require("./lib/entity-storage-swagger.module"), exports);
+tslib_1.__exportStar(require("./lib/runtime-openapi.types"), exports);
+tslib_1.__exportStar(require("./lib/runtime-openapi.service"), exports);
+tslib_1.__exportStar(require("./lib/runtime-openapi-catalog.provider"), exports);
+tslib_1.__exportStar(require("./lib/runtime-openapi.controller"), exports);
+tslib_1.__exportStar(require("./lib/runtime-openapi.module"), exports);
 tslib_1.__exportStar(require("./lib/swagger.setup"), exports);
 //# sourceMappingURL=index.js.map

package/swagger/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/framework/server/swagger/src/index.ts"],"names":[],"mappings":";;;AAAA,+DAAqC;AACrC,8DAAoC;AACpC,gEAAsC;AACtC,+EAAqD;AACrD,8EAAoD;AACpD,8DAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/framework/server/swagger/src/index.ts"],"names":[],"mappings":";;;AAAA,+DAAqC;AACrC,8DAAoC;AACpC,gEAAsC;AACtC,+EAAqD;AACrD,8EAAoD;AACpD,sEAA4C;AAC5C,wEAA8C;AAC9C,iFAAuD;AACvD,2EAAiD;AACjD,uEAA6C;AAC7C,8DAAoC"}

package/swagger/src/lib/entity-storage-swagger.module.d.ts

@@ -1,2 +1,3 @@
 export declare class EntityStorageSwaggerModule {
 }
+//# sourceMappingURL=entity-storage-swagger.module.d.ts.map

package/swagger/src/lib/entity-storage-swagger.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-storage-swagger.module.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/swagger/src/lib/entity-storage-swagger.module.ts"],"names":[],"mappings":"AAKA,qBAIa,0BAA0B;CAAG"}

package/swagger/src/lib/entity-storage-swagger.service.d.ts

@@ -9,3 +9,4 @@ export declare class EntityStorageSwaggerService {
     private loadEntityDefinition;
     private buildEntityBasePath;
 }
+//# sourceMappingURL=entity-storage-swagger.service.d.ts.map

package/swagger/src/lib/entity-storage-swagger.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-storage-swagger.service.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/swagger/src/lib/entity-storage-swagger.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yDAAyD,CAAC;AAE7F,OAAO,EACL,sBAAsB,EAEvB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAW7D,qBACa,2BAA2B;IAG1B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAFzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgD;gBAE1C,YAAY,EAAE,sBAAsB;IAE3D,eAAe,CACnB,QAAQ,EAAE,aAAa,EACvB,SAAS,EAAE,qBAAqB,EAAE,EAClC,YAAY,GAAE,MAA8B,GAC3C,OAAO,CAAC,IAAI,CAAC;YA6JF,oBAAoB;IAalC,OAAO,CAAC,mBAAmB;CAS5B"}

package/swagger/src/lib/runtime-openapi-catalog.provider.d.ts

@@ -0,0 +1,12 @@
+import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
+import type { RuntimeOpenApiCatalogEntry, RuntimeOpenApiCatalogProvider } from './runtime-openapi.types';
+export declare class RuntimeOpenApiEntityCatalogProvider implements RuntimeOpenApiCatalogProvider {
+    private readonly storage;
+    private readonly logger;
+    constructor(storage: EntityStorageMiddlewareService | null);
+    loadCommands(): Promise<RuntimeOpenApiCatalogEntry[]>;
+    loadQueries(): Promise<RuntimeOpenApiCatalogEntry[]>;
+    private load;
+    private mapRow;
+}
+//# sourceMappingURL=runtime-openapi-catalog.provider.d.ts.map

package/swagger/src/lib/runtime-openapi-catalog.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-openapi-catalog.provider.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/swagger/src/lib/runtime-openapi-catalog.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EACV,0BAA0B,EAC1B,6BAA6B,EAG9B,MAAM,yBAAyB,CAAC;AAQjC,qBACa,mCAAoC,YAAW,6BAA6B;IAIzE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwD;gBAGhD,OAAO,EAAE,8BAA8B,GAAG,IAAI;IAGvE,YAAY,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAIrD,WAAW,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;YAI5C,IAAI;IAwBlB,OAAO,CAAC,MAAM;CAqBf"}