@anteros/core 0.0.1-alpha.6 → 0.0.1-alpha.8

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@anteros/core",
   "module": "index.ts",
-  "version": "0.0.1-alpha.6",
+  "version": "0.0.1-alpha.8",
   "type": "module",
   "description": "Anteros Core",
   "private": false,

package/server/api.ts

@@ -69,6 +69,15 @@ async function checkFileAccess(
         throw new AppError('Access denied', { status: 401, code: 'ACCESS_DENIED' });
     }
 
+    // Boolean `true` → allow without requiring a token
+    if (typeof rule === 'boolean') {
+        if (!rule) {
+            throw new AppError(`${operation} not allowed`, { status: 401, code: 'ACCESS_DENIED' });
+        }
+        return;
+    }
+
+    // Function → requires a valid token
     const t = c.get('token');
     const accessToken = { value: t?.value ?? null, decoded: t?.decoded ?? null, provided: t?.provided ?? false, expired: t?.expired ?? false };
 
@@ -79,13 +88,8 @@ async function checkFileAccess(
         throw new AppError('Authentication required', { status: 401, code: 'AUTH_REQUIRED' });
     }
 
-    let allowed: boolean;
-    if (typeof rule === 'function') {
-        const rest = new useRest({ internal: false, tenant_id });
-        allowed = await rule({ rest, error: fn.error, jwt: func.jwt, token: accessToken });
-    } else {
-        allowed = rule;
-    }
+    const rest = new useRest({ internal: false, tenant_id });
+    const allowed = await (rule as Function)({ rest, error: fn.error, jwt: func.jwt, token: accessToken });
     if (!allowed) {
         throw new AppError(`${operation} not allowed`, { status: 401, code: 'ACCESS_DENIED' });
     }