@aeriajs/security 0.0.46 → 0.0.48

package/dist/define.mjs

@@ -1,3 +1,4 @@
-export var defineSecurityPolicy = function(policy) {
-    return policy;
+"use strict";
+export const defineSecurityPolicy = (policy) => {
+  return policy;
 };

package/dist/immutability.mjs

@@ -1,326 +1,50 @@
-function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
-    try {
-        var info = gen[key](arg);
-        var value = info.value;
-    } catch (error) {
-        reject(error);
-        return;
-    }
-    if (info.done) {
-        resolve(value);
-    } else {
-        Promise.resolve(value).then(_next, _throw);
-    }
-}
-function _async_to_generator(fn) {
-    return function() {
-        var self = this, args = arguments;
-        return new Promise(function(resolve, reject) {
-            var gen = fn.apply(self, args);
-            function _next(value) {
-                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
-            }
-            function _throw(err) {
-                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
-            }
-            _next(undefined);
-        });
-    };
-}
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _object_spread(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
-        }
-        ownKeys.forEach(function(key) {
-            _define_property(target, key, source[key]);
-        });
-    }
-    return target;
-}
-function ownKeys(object, enumerableOnly) {
-    var keys = Object.keys(object);
-    if (Object.getOwnPropertySymbols) {
-        var symbols = Object.getOwnPropertySymbols(object);
-        if (enumerableOnly) {
-            symbols = symbols.filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(object, sym).enumerable;
-            });
-        }
-        keys.push.apply(keys, symbols);
-    }
-    return keys;
-}
-function _object_spread_props(target, source) {
-    source = source != null ? source : {};
-    if (Object.getOwnPropertyDescriptors) {
-        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
-    } else {
-        ownKeys(Object(source)).forEach(function(key) {
-            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
-        });
-    }
-    return target;
-}
-function _ts_generator(thisArg, body) {
-    var f, y, t, g, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    };
-    return g = {
-        next: verb(0),
-        "throw": verb(1),
-        "return": verb(2)
-    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
-    }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(_)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
-        }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
-        };
-    }
-}
+"use strict";
 import { ACErrors } from "@aeriajs/types";
 import { ObjectId } from "mongodb";
 import { left, right, isLeft } from "@aeriajs/common";
-var internalCheckImmutability = function() {
-    var _ref = _async_to_generator(function(props, context) {
-        var _props_propertyName, propertyName, parentId, childId, payload, description, source, property, immutable, currentDocument, fulfilled;
-        return _ts_generator(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    _props_propertyName = props.propertyName, propertyName = _props_propertyName === void 0 ? "" : _props_propertyName, parentId = props.parentId, childId = props.childId, payload = props.payload;
-                    description = context.description;
-                    source = "what" in payload ? payload.what : payload.filters;
-                    property = description.properties[propertyName];
-                    if (!property) {
-                        return [
-                            2,
-                            right(props.payload)
-                        ];
-                    }
-                    immutable = parentId && (description.immutable === true || Array.isArray(description.immutable) && description.immutable.includes(propertyName));
-                    return [
-                        4,
-                        context.collection.model.findOne({
-                            _id: new ObjectId(parentId)
-                        })
-                    ];
-                case 1:
-                    currentDocument = _state.sent();
-                    if (!currentDocument) {
-                        return [
-                            2,
-                            left(ACErrors.ImmutabilityParentNotFound)
-                        ];
-                    }
-                    if (childId) {
-                        if (Array.isArray(currentDocument[propertyName]) && !currentDocument[propertyName].some(function(child) {
-                            return child.toString() === childId;
-                        }) || !Array.isArray(currentDocument[propertyName]) && currentDocument[propertyName] && currentDocument[propertyName] !== childId.toString()) {
-                            return [
-                                2,
-                                left(ACErrors.ImmutabilityIncorrectChild)
-                            ];
-                        }
-                    }
-                    fulfilled = currentDocument[propertyName] && typeof currentDocument[propertyName] === "object" && !Object.keys(currentDocument[propertyName]).length;
-                    if (immutable && fulfilled && (property.inline || currentDocument[propertyName].toString() !== source[propertyName])) {
-                        return [
-                            2,
-                            left(ACErrors.ImmutabilityTargetImmutable)
-                        ];
-                    }
-                    return [
-                        2,
-                        right(props.payload)
-                    ];
-            }
-        });
-    });
-    return function internalCheckImmutability(props, context) {
-        return _ref.apply(this, arguments);
-    };
-}();
-export var checkImmutability = function() {
-    var _ref = _async_to_generator(function(props, context) {
-        var _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, propertyName, result, err;
-        return _ts_generator(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    if (!props.parentId) {
-                        return [
-                            2,
-                            right(props.payload)
-                        ];
-                    }
-                    _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-                    _state.label = 1;
-                case 1:
-                    _state.trys.push([
-                        1,
-                        6,
-                        7,
-                        8
-                    ]);
-                    _iterator = Object.keys(props.payload)[Symbol.iterator]();
-                    _state.label = 2;
-                case 2:
-                    if (!!(_iteratorNormalCompletion = (_step = _iterator.next()).done)) return [
-                        3,
-                        5
-                    ];
-                    propertyName = _step.value;
-                    return [
-                        4,
-                        internalCheckImmutability(_object_spread_props(_object_spread({}, props), {
-                            propertyName: propertyName
-                        }), context)
-                    ];
-                case 3:
-                    result = _state.sent();
-                    if (isLeft(result)) {
-                        return [
-                            2,
-                            result
-                        ];
-                    }
-                    _state.label = 4;
-                case 4:
-                    _iteratorNormalCompletion = true;
-                    return [
-                        3,
-                        2
-                    ];
-                case 5:
-                    return [
-                        3,
-                        8
-                    ];
-                case 6:
-                    err = _state.sent();
-                    _didIteratorError = true;
-                    _iteratorError = err;
-                    return [
-                        3,
-                        8
-                    ];
-                case 7:
-                    try {
-                        if (!_iteratorNormalCompletion && _iterator.return != null) {
-                            _iterator.return();
-                        }
-                    } finally{
-                        if (_didIteratorError) {
-                            throw _iteratorError;
-                        }
-                    }
-                    return [
-                        7
-                    ];
-                case 8:
-                    return [
-                        2,
-                        internalCheckImmutability(props, context)
-                    ];
-            }
-        });
-    });
-    return function checkImmutability(props, context) {
-        return _ref.apply(this, arguments);
-    };
-}();
+const internalCheckImmutability = async (props, context) => {
+  const {
+    propertyName = "",
+    parentId,
+    childId,
+    payload
+  } = props;
+  const { description } = context;
+  const source = "what" in payload ? payload.what : payload.filters;
+  const property = description.properties[propertyName];
+  if (!property) {
+    return right(props.payload);
+  }
+  const immutable = parentId && (description.immutable === true || Array.isArray(description.immutable) && description.immutable.includes(propertyName));
+  const currentDocument = await context.collection.model.findOne({
+    _id: new ObjectId(parentId)
+  });
+  if (!currentDocument) {
+    return left(ACErrors.ImmutabilityParentNotFound);
+  }
+  if (childId) {
+    if (Array.isArray(currentDocument[propertyName]) && !currentDocument[propertyName].some((child) => child.toString() === childId) || !Array.isArray(currentDocument[propertyName]) && currentDocument[propertyName] && currentDocument[propertyName] !== childId.toString()) {
+      return left(ACErrors.ImmutabilityIncorrectChild);
+    }
+  }
+  const fulfilled = currentDocument[propertyName] && (typeof currentDocument[propertyName] === "object" && !Object.keys(currentDocument[propertyName]).length);
+  if (immutable && fulfilled && (property.inline || currentDocument[propertyName].toString() !== source[propertyName])) {
+    return left(ACErrors.ImmutabilityTargetImmutable);
+  }
+  return right(props.payload);
+};
+export const checkImmutability = async (props, context) => {
+  if (!props.parentId) {
+    return right(props.payload);
+  }
+  for (const propertyName of Object.keys(props.payload)) {
+    const result = await internalCheckImmutability({
+      ...props,
+      propertyName
+    }, context);
+    if (isLeft(result)) {
+      return result;
+    }
+  }
+  return internalCheckImmutability(props, context);
+};

package/dist/index.mjs

@@ -1,3 +1,4 @@
+"use strict";
 export * from "./define.mjs";
 export * from "./immutability.mjs";
 export * from "./ownership.mjs";

package/dist/ownership.mjs

@@ -1,180 +1,29 @@
-function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
-    try {
-        var info = gen[key](arg);
-        var value = info.value;
-    } catch (error) {
-        reject(error);
-        return;
+"use strict";
+import { ACErrors } from "@aeriajs/types";
+import { left, right } from "@aeriajs/common";
+export const checkOwnershipRead = async (props, context) => {
+  const { token, description } = context;
+  const payload = Object.assign({}, props.payload);
+  if (token.authenticated && description.owned) {
+    if (!token.roles.includes("root")) {
+      payload.filters.owner = token.sub;
     }
-    if (info.done) {
-        resolve(value);
+  }
+  return right(payload);
+};
+export const checkOwnershipWrite = async (props, context) => {
+  const { token, description } = context;
+  const { parentId } = props;
+  const payload = Object.assign({}, props.payload);
+  if (token.authenticated && description.owned) {
+    if (!payload.what._id || description.owned === "always") {
+      payload.what.owner = token.sub;
     } else {
-        Promise.resolve(value).then(_next, _throw);
-    }
-}
-function _async_to_generator(fn) {
-    return function() {
-        var self = this, args = arguments;
-        return new Promise(function(resolve, reject) {
-            var gen = fn.apply(self, args);
-            function _next(value) {
-                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
-            }
-            function _throw(err) {
-                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
-            }
-            _next(undefined);
-        });
-    };
-}
-function _ts_generator(thisArg, body) {
-    var f, y, t, g, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    };
-    return g = {
-        next: verb(0),
-        "throw": verb(1),
-        "return": verb(2)
-    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
+      return right(payload);
     }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(_)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
-        }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
-        };
-    }
-}
-import { ACErrors } from "@aeriajs/types";
-import { left, right } from "@aeriajs/common";
-export var checkOwnershipRead = function() {
-    var _ref = _async_to_generator(function(props, context) {
-        var token, description, payload;
-        return _ts_generator(this, function(_state) {
-            token = context.token, description = context.description;
-            payload = Object.assign({}, props.payload);
-            if (token.authenticated && description.owned) {
-                if (!token.roles.includes("root")) {
-                    payload.filters.owner = token.sub;
-                }
-            }
-            return [
-                2,
-                right(payload)
-            ];
-        });
-    });
-    return function checkOwnershipRead(props, context) {
-        return _ref.apply(this, arguments);
-    };
-}();
-export var checkOwnershipWrite = function() {
-    var _ref = _async_to_generator(function(props, context) {
-        var token, description, parentId, payload;
-        return _ts_generator(this, function(_state) {
-            token = context.token, description = context.description;
-            parentId = props.parentId;
-            payload = Object.assign({}, props.payload);
-            if (token.authenticated && description.owned) {
-                if (!payload.what._id || description.owned === "always") {
-                    payload.what.owner = token.sub;
-                } else {
-                    return [
-                        2,
-                        right(payload)
-                    ];
-                }
-            }
-            if (!payload.what.owner && !parentId && context.description.owned) {
-                return [
-                    2,
-                    left(ACErrors.OwnershipError)
-                ];
-            }
-            return [
-                2,
-                right(payload)
-            ];
-        });
-    });
-    return function checkOwnershipWrite(props, context) {
-        return _ref.apply(this, arguments);
-    };
-}();
+  }
+  if (!payload.what.owner && !parentId && context.description.owned) {
+    return left(ACErrors.OwnershipError);
+  }
+  return right(payload);
+};