@application-kit/authorization 0.0.0 → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,18 @@
+# @application-kit/authorization
+
+## 0.2.0
+
+### Minor Changes
+
+- 4bcfbde: Вход `/nest`: `AuthorizationModule.forRoot({ grants })` — динамический модуль с `AbilityFactory` (токен `ABILITY_FACTORY`),
+  картой грантов `ABILITY_GRANTS`, pino-логгером `AUTHORIZATION_LOGGER` и глобальным `PoliciesGuard` (`APP_GUARD`);
+  экспортирует `ABILITY_FACTORY`, `ABILITY_GRANTS`, `AbilityFactory`. Ручная проводка провайдеров в приложении больше не нужна.
+  `PoliciesGuard` получает `Reflector` по явному токену — модуль собирается и без `emitDecoratorMetadata`.
+
+## 0.1.0
+
+### Minor Changes
+
+- 85addee: Первый выпуск: реестры ролей и subject'ов для module augmentation, `buildAbilityFor` и `composeAbilityGrants` (корень,
+  изоморфно, только `@casl/ability`); `PoliciesGuard`, `CheckPolicies`, `permitAuthenticated`, `Public`, `AbilityFactory`,
+  токены и pino-логгер `AuthorizationLogger` (вход `/nest`). Guard не зависит от `@nestjs/graphql`.

package/README.md

@@ -55,16 +55,15 @@ const ability = buildAbilityFor({ role: 'EDITOR' }, grants)
 - `Public()`, `IS_PUBLIC_KEY` — открытый обработчик; ключ читает и guard аутентификации приложения.
 - `AbilityFactory` — ability актора по карте грантов.
 
-Провайдеры токенов приносит приложение:
+Собирает механизм `AuthorizationModule.forRoot({ grants })`: фабрика ability, логгер и глобальный guard (`APP_GUARD`)
+провайдятся пакетом, приложение приносит только карту грантов. Наружу модуль отдаёт `ABILITY_FACTORY`, `ABILITY_GRANTS`
+и `AbilityFactory` — для кода, который строит ability актора сам (например, резолвер, отдающий её клиенту).
 
 ```ts
-providers: [
-  AbilityFactory,
-  { provide: ABILITY_FACTORY, useExisting: AbilityFactory },
-  { provide: ABILITY_GRANTS, useValue: grants },
-  { provide: AUTHORIZATION_LOGGER, useClass: AuthorizationLogger },
-  { provide: APP_GUARD, useClass: PoliciesGuard },
-]
+@Module({
+  imports: [AuthorizationModule.forRoot({ grants })],
+})
+export class AppModule {}
 ```
 
 `AuthorizationLogger` — pino-логгер пакета с контекстом `AuthorizationLogger`; собирается из глобального

package/dist/cjs/nest/authorization.module.d.ts

@@ -0,0 +1,8 @@
+import type { DynamicModule } from '@nestjs/common';
+import type { AbilityGrantMap } from '../types/ability-grant.js';
+export interface AuthorizationModuleOptionsInterface {
+    readonly grants: AbilityGrantMap;
+}
+export declare class AuthorizationModule {
+    static forRoot(options: AuthorizationModuleOptionsInterface): DynamicModule;
+}

package/dist/cjs/nest/authorization.module.js

@@ -0,0 +1,35 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationModule = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const ability_factory_js_1 = require("./ability.factory.js");
+const authorization_logger_js_1 = require("./authorization-logger.js");
+const constants_js_1 = require("./constants.js");
+const policies_guard_js_1 = require("./policies.guard.js");
+let AuthorizationModule = class AuthorizationModule {
+    static forRoot(options) {
+        return {
+            exports: [constants_js_1.ABILITY_FACTORY, constants_js_1.ABILITY_GRANTS, ability_factory_js_1.AbilityFactory],
+            module: this,
+            providers: [
+                ability_factory_js_1.AbilityFactory,
+                { provide: constants_js_1.ABILITY_FACTORY, useExisting: ability_factory_js_1.AbilityFactory },
+                { provide: constants_js_1.ABILITY_GRANTS, useValue: options.grants },
+                { provide: constants_js_1.AUTHORIZATION_LOGGER, useClass: authorization_logger_js_1.AuthorizationLogger },
+                policies_guard_js_1.PoliciesGuard,
+                { provide: core_1.APP_GUARD, useExisting: policies_guard_js_1.PoliciesGuard },
+            ],
+        };
+    }
+};
+exports.AuthorizationModule = AuthorizationModule;
+exports.AuthorizationModule = AuthorizationModule = __decorate([
+    (0, common_1.Module)({})
+], AuthorizationModule);

package/dist/cjs/nest/index.d.ts

@@ -1,6 +1,7 @@
 export * from './ability.factory.js';
 export * from './authorization-logger.js';
 export * from './authorization-logger.interface.js';
+export * from './authorization.module.js';
 export * from './check-policies.decorator.js';
 export * from './constants.js';
 export * from './policies.guard.js';

package/dist/cjs/nest/index.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./ability.factory.js"), exports);
 __exportStar(require("./authorization-logger.js"), exports);
 __exportStar(require("./authorization-logger.interface.js"), exports);
+__exportStar(require("./authorization.module.js"), exports);
 __exportStar(require("./check-policies.decorator.js"), exports);
 __exportStar(require("./constants.js"), exports);
 __exportStar(require("./policies.guard.js"), exports);

package/dist/cjs/nest/policies.guard.js

@@ -72,6 +72,7 @@ let PoliciesGuard = class PoliciesGuard {
 exports.PoliciesGuard = PoliciesGuard;
 exports.PoliciesGuard = PoliciesGuard = __decorate([
     (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(core_1.Reflector)),
     __param(1, (0, common_1.Inject)(constants_js_1.ABILITY_FACTORY)),
     __param(2, (0, common_1.Inject)(constants_js_1.AUTHORIZATION_LOGGER)),
     __metadata("design:paramtypes", [core_1.Reflector, Function, Object])

package/dist/esm/nest/authorization.module.d.ts

@@ -0,0 +1,8 @@
+import type { DynamicModule } from '@nestjs/common';
+import type { AbilityGrantMap } from '../types/ability-grant.js';
+export interface AuthorizationModuleOptionsInterface {
+    readonly grants: AbilityGrantMap;
+}
+export declare class AuthorizationModule {
+    static forRoot(options: AuthorizationModuleOptionsInterface): DynamicModule;
+}

package/dist/esm/nest/authorization.module.js

@@ -0,0 +1,32 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Module } from '@nestjs/common';
+import { APP_GUARD } from '@nestjs/core';
+import { AbilityFactory } from './ability.factory.js';
+import { AuthorizationLogger } from './authorization-logger.js';
+import { ABILITY_FACTORY, ABILITY_GRANTS, AUTHORIZATION_LOGGER } from './constants.js';
+import { PoliciesGuard } from './policies.guard.js';
+let AuthorizationModule = class AuthorizationModule {
+    static forRoot(options) {
+        return {
+            exports: [ABILITY_FACTORY, ABILITY_GRANTS, AbilityFactory],
+            module: this,
+            providers: [
+                AbilityFactory,
+                { provide: ABILITY_FACTORY, useExisting: AbilityFactory },
+                { provide: ABILITY_GRANTS, useValue: options.grants },
+                { provide: AUTHORIZATION_LOGGER, useClass: AuthorizationLogger },
+                PoliciesGuard,
+                { provide: APP_GUARD, useExisting: PoliciesGuard },
+            ],
+        };
+    }
+};
+AuthorizationModule = __decorate([
+    Module({})
+], AuthorizationModule);
+export { AuthorizationModule };

package/dist/esm/nest/index.d.ts

@@ -1,6 +1,7 @@
 export * from './ability.factory.js';
 export * from './authorization-logger.js';
 export * from './authorization-logger.interface.js';
+export * from './authorization.module.js';
 export * from './check-policies.decorator.js';
 export * from './constants.js';
 export * from './policies.guard.js';

package/dist/esm/nest/index.js

@@ -1,6 +1,7 @@
 export * from './ability.factory.js';
 export * from './authorization-logger.js';
 export * from './authorization-logger.interface.js';
+export * from './authorization.module.js';
 export * from './check-policies.decorator.js';
 export * from './constants.js';
 export * from './policies.guard.js';

package/dist/esm/nest/policies.guard.js

@@ -68,6 +68,7 @@ let PoliciesGuard = class PoliciesGuard {
 };
 PoliciesGuard = __decorate([
     Injectable(),
+    __param(0, Inject(Reflector)),
     __param(1, Inject(ABILITY_FACTORY)),
     __param(2, Inject(AUTHORIZATION_LOGGER)),
     __metadata("design:paramtypes", [Reflector, Function, Object])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@application-kit/authorization",
-  "version": "0.0.0",
+  "version": "0.2.0",
   "description": "Авторизация на CASL для NestJS и браузера: реестры subject'ов и ролей, ability из грантов модулей, глобальный guard политик",
   "keywords": [
     "authorization",