@astram/identity 0.9.3 → 0.10.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"record-authorization.d.ts","sourceRoot":"","sources":["../../../src/features/authz/record-authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAgB,EAAE,KAAK,IAAI,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,
|
|
1
|
+
{"version":3,"file":"record-authorization.d.ts","sourceRoot":"","sources":["../../../src/features/authz/record-authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAgB,EAAE,KAAK,IAAI,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAIL,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAKtD;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAa9C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,IAAI,EACV,YAAY,GAAE,SAAS,eAAe,EAAO,GAC5C,yBAAyB,CAS3B"}
|
|
@@ -30,6 +30,7 @@ const session_facts_reader_js_1 = require("./session-facts.reader.js");
|
|
|
30
30
|
*/
|
|
31
31
|
function createIdentityAuthzPool() {
|
|
32
32
|
const db = (0, guard_1.loadDbConfig)();
|
|
33
|
+
const ssl = (0, guard_1.mariadbSslOption)(db.tls);
|
|
33
34
|
return mariadb_1.default.createPool({
|
|
34
35
|
host: db.host,
|
|
35
36
|
port: db.port,
|
|
@@ -37,6 +38,8 @@ function createIdentityAuthzPool() {
|
|
|
37
38
|
password: db.password,
|
|
38
39
|
database: db.database,
|
|
39
40
|
connectionLimit: Number(process.env.APP_AUTHZ_POOL_MAX ?? 4),
|
|
41
|
+
// Phase 16: APP_DB_TLS / APP_DB_TLS_CA (production accounts are REQUIRE SSL).
|
|
42
|
+
...(ssl ? { ssl } : {}),
|
|
40
43
|
});
|
|
41
44
|
}
|
|
42
45
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-feature.module.d.ts","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAYL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"identity-feature.module.d.ts","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAYL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAgGxB;;;;;;GAMG;AACH,wBAAgB,0CAA0C,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAUnF;AAoBD;;;;;;;;;;GAUG;AACH,qBACa,qBAAqB;IAChC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,OAAO,CAAC,EACb,OAAO,EACP,YAAiB,GAClB,GAAE;QACD,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC5B,YAAY,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;KACtC,GAAG,aAAa;CAoevB"}
|
|
@@ -92,6 +92,7 @@ function assertRequestPathUsesIdentityAuthorization(authority) {
|
|
|
92
92
|
/** Map guard's env DbConfig → the engine's EngineDbConfig (adds the pool cap the engine needs). */
|
|
93
93
|
function engineDbFromEnv() {
|
|
94
94
|
const db = (0, guard_1.loadDbConfig)();
|
|
95
|
+
const ssl = (0, guard_1.mariadbSslOption)(db.tls);
|
|
95
96
|
return {
|
|
96
97
|
host: db.host,
|
|
97
98
|
port: db.port,
|
|
@@ -101,6 +102,8 @@ function engineDbFromEnv() {
|
|
|
101
102
|
// The engine's runtime CRUD pool cap. A conservative default; the app can raise it later via
|
|
102
103
|
// an explicit EngineModule.forRoot if it needs more. (ADR-0018 budget lives app-side.)
|
|
103
104
|
connectionLimit: Number(process.env.APP_DB_MAX_CONNECTIONS ?? 10),
|
|
105
|
+
// Phase 16: APP_DB_TLS / APP_DB_TLS_CA (production accounts are REQUIRE SSL).
|
|
106
|
+
...(ssl ? { ssl } : {}),
|
|
104
107
|
};
|
|
105
108
|
}
|
|
106
109
|
/**
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@astram/identity",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.10.0",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"description": "Astram framework — the framework-owned identity + tenancy model. Hosts the identity @ObjectType classes (user, company, membership, posting), framework-authored identity migrations, and the identity resolver. Top of the dependency graph: depends on @astram/engine (for @ObjectType/@Field decorators) + @astram/guard / @astram/core (for the auth ports).",
|
|
6
6
|
"type": "commonjs",
|
|
@@ -37,8 +37,8 @@
|
|
|
37
37
|
"dependencies": {
|
|
38
38
|
"mariadb": "^3.5.4",
|
|
39
39
|
"@astram/core": "1.5.0",
|
|
40
|
-
"@astram/engine": "0.
|
|
41
|
-
"@astram/guard": "0.
|
|
40
|
+
"@astram/engine": "0.6.0",
|
|
41
|
+
"@astram/guard": "0.13.0"
|
|
42
42
|
},
|
|
43
43
|
"peerDependencies": {
|
|
44
44
|
"@nestjs/common": "^11",
|