@atlasauth/backend 0.24.0 → 0.26.0

package/dist/client/iga.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.igaResource = igaResource;
+const request_1 = require("./request");
+/**
+ * Identity governance: the entitlement catalog, access requests with multi-step
+ * approvals, time-bound grants, certification campaigns, separation of duties
+ * and joiner/mover/leaver automation. Needs the `iga:read` / `iga:write` scopes.
+ */
+function igaResource(request) {
+    const P = '/v1/iga';
+    return {
+        entitlements: {
+            list: (params = {}) => request({ method: 'GET', path: `${P}/entitlements`, query: params }),
+            get: (idOrKey) => request({ method: 'GET', path: `${P}/entitlements/${(0, request_1.enc)(idOrKey)}` }),
+            create: (body) => request({ method: 'POST', path: `${P}/entitlements`, body }),
+            update: (idOrKey, body) => request({ method: 'PATCH', path: `${P}/entitlements/${(0, request_1.enc)(idOrKey)}`, body }),
+            delete: (idOrKey) => request({ method: 'DELETE', path: `${P}/entitlements/${(0, request_1.enc)(idOrKey)}` }),
+        },
+        requests: {
+            list: (params = {}) => request({ method: 'GET', path: `${P}/requests`, query: params }),
+            get: (id) => request({ method: 'GET', path: `${P}/requests/${(0, request_1.enc)(id)}` }),
+            /** File a request for a user; it follows the entitlement's approval steps. */
+            create: (body) => request({ method: 'POST', path: `${P}/requests`, body }),
+            /** Decide the open step as `approver_user_id`, or as an administrator override when omitted. */
+            decide: (id, body) => request({ method: 'POST', path: `${P}/requests/${(0, request_1.enc)(id)}/decide`, body }),
+            cancel: (id) => request({ method: 'POST', path: `${P}/requests/${(0, request_1.enc)(id)}/cancel` }),
+            /** Requests waiting on one person (their own steps and delegated ones). */
+            inbox: (approverUserId) => request({ method: 'GET', path: `${P}/approvals`, query: { approver_user_id: approverUserId } }),
+        },
+        grants: {
+            list: (params = {}) => request({ method: 'GET', path: `${P}/grants`, query: params }),
+            create: (body) => request({ method: 'POST', path: `${P}/grants`, body }),
+            revoke: (id, body = {}) => request({ method: 'POST', path: `${P}/grants/${(0, request_1.enc)(id)}/revoke`, body }),
+        },
+        delegations: {
+            list: (params = {}) => request({ method: 'GET', path: `${P}/delegations`, query: params }),
+            create: (body) => request({ method: 'POST', path: `${P}/delegations`, body }),
+            delete: (id) => request({ method: 'DELETE', path: `${P}/delegations/${(0, request_1.enc)(id)}` }),
+        },
+        sod: {
+            listRules: () => request({ method: 'GET', path: `${P}/sod_rules` }),
+            createRule: (body) => request({ method: 'POST', path: `${P}/sod_rules`, body }),
+            updateRule: (id, body) => request({ method: 'PATCH', path: `${P}/sod_rules/${(0, request_1.enc)(id)}`, body }),
+            deleteRule: (id) => request({ method: 'DELETE', path: `${P}/sod_rules/${(0, request_1.enc)(id)}` }),
+            /** The violations report. */
+            violations: (params = {}) => request({ method: 'GET', path: `${P}/sod_violations`, query: params }),
+            /** Re-check every rule against what people hold now. */
+            scan: () => request({ method: 'POST', path: `${P}/sod_violations/scan` }),
+        },
+        lifecycle: {
+            listBirthrightRules: () => request({ method: 'GET', path: `${P}/birthright_rules` }),
+            createBirthrightRule: (body) => request({ method: 'POST', path: `${P}/birthright_rules`, body }),
+            updateBirthrightRule: (id, body) => request({ method: 'PATCH', path: `${P}/birthright_rules/${(0, request_1.enc)(id)}`, body }),
+            deleteBirthrightRule: (id) => request({ method: 'DELETE', path: `${P}/birthright_rules/${(0, request_1.enc)(id)}` }),
+            /** Re-evaluate one user's birthright access now (joiner or mover). */
+            reconcile: (userId) => request({ method: 'POST', path: `${P}/users/${(0, request_1.enc)(userId)}/reconcile` }),
+            /** Offboard a leaver; with `close_account` the closure goes through the data-rights path. */
+            offboard: (userId, body = {}) => request({ method: 'POST', path: `${P}/users/${(0, request_1.enc)(userId)}/offboard`, body }),
+            settings: () => request({ method: 'GET', path: `${P}/settings` }),
+            updateSettings: (body) => request({ method: 'PUT', path: `${P}/settings`, body }),
+        },
+        campaigns: {
+            list: (params = {}) => request({ method: 'GET', path: `${P}/campaigns`, query: params }),
+            get: (id) => request({ method: 'GET', path: `${P}/campaigns/${(0, request_1.enc)(id)}` }),
+            create: (body) => request({ method: 'POST', path: `${P}/campaigns`, body }),
+            delete: (id) => request({ method: 'DELETE', path: `${P}/campaigns/${(0, request_1.enc)(id)}` }),
+            /** Freeze the review list (adopting access that was never granted through governance) and notify reviewers. */
+            launch: (id) => request({ method: 'POST', path: `${P}/campaigns/${(0, request_1.enc)(id)}/launch` }),
+            /** Close the campaign; with auto-revoke, access reviewers marked for revocation is removed. */
+            close: (id) => request({ method: 'POST', path: `${P}/campaigns/${(0, request_1.enc)(id)}/close` }),
+            items: (id, params = {}) => request({ method: 'GET', path: `${P}/campaigns/${(0, request_1.enc)(id)}/items`, query: params }),
+            progress: (id) => request({ method: 'GET', path: `${P}/campaigns/${(0, request_1.enc)(id)}/progress` }),
+            /** Audit evidence as JSON. People appear by id only; free-text comments are never included. */
+            evidence: (id, params = {}) => request({ method: 'GET', path: `${P}/campaigns/${(0, request_1.enc)(id)}/evidence`, query: params }),
+            /** The same evidence as CSV text. */
+            evidenceCsv: (id, params = {}) => request({ method: 'GET', path: `${P}/campaigns/${(0, request_1.enc)(id)}/evidence`, query: { ...params, format: 'csv' }, raw: true }),
+            decide: (itemId, body) => request({ method: 'POST', path: `${P}/campaign_items/${(0, request_1.enc)(itemId)}/decide`, body }),
+        },
+    };
+}
+//# sourceMappingURL=iga.js.map

package/dist/client/iga.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iga.js","sourceRoot":"","sources":["../../src/client/iga.ts"],"names":[],"mappings":";;AAoJA,kCAuEC;AA3ND,uCAAgD;AA+IhD;;;;GAIG;AACH,SAAgB,WAAW,CAAC,OAAkB;IAC5C,MAAM,CAAC,GAAG,SAAS,CAAC;IACpB,OAAO;QACL,YAAY,EAAE;YACZ,IAAI,EAAE,CAAC,SAA6B,EAAE,EAAiC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC9I,GAAG,EAAE,CAAC,OAAe,EAA2B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,iBAAiB,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACxH,MAAM,EAAE,CAAC,IAAyB,EAA2B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;YAC5H,MAAM,EAAE,CAAC,OAAe,EAAE,IAAwD,EAA2B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,iBAAiB,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;YAC7L,MAAM,EAAE,CAAC,OAAe,EAAuC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,iBAAiB,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,CAAC;SAC3I;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,CAAC,SAA4H,EAAE,EAA6B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACrO,GAAG,EAAE,CAAC,EAAU,EAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACtG,8EAA8E;YAC9E,MAAM,EAAE,CAAC,IAA6H,EAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;YACxN,gGAAgG;YAChG,MAAM,EAAE,CAAC,EAAU,EAAE,IAAmF,EAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;YAC5M,MAAM,EAAE,CAAC,EAAU,EAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC;YACjH,2EAA2E;YAC3E,KAAK,EAAE,CAAC,cAAsB,EAA6B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,CAAC;SAC9J;QACD,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,SAAgH,EAAE,EAA2B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACrN,MAAM,EAAE,CAAC,IAA6F,EAAqB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;YACpL,MAAM,EAAE,CAAC,EAAU,EAAE,OAA4B,EAAE,EAAqB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;SACpJ;QACD,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,SAAyC,EAAE,EAAgC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACxJ,MAAM,EAAE,CAAC,IAAkG,EAA0B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;YACnM,MAAM,EAAE,CAAC,EAAU,EAAsC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,gBAAgB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC;SAC/H;QACD,GAAG,EAAE;YACH,SAAS,EAAE,GAA8B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9F,UAAU,EAAE,CAAC,IAA8K,EAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;YAC9Q,UAAU,EAAE,CAAC,EAAU,EAAE,IAAiI,EAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;YACzP,UAAU,EAAE,CAAC,EAAU,EAAoC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9H,6BAA6B;YAC7B,UAAU,EAAE,CAAC,SAAwD,EAAE,EAAkC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAClL,wDAAwD;YACxD,IAAI,EAAE,GAAyE,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,sBAAsB,EAAE,CAAC;SAChJ;QACD,SAAS,EAAE;YACT,mBAAmB,EAAE,GAAqC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC;YACtH,oBAAoB,EAAE,CAAC,IAA4H,EAA8B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;YACpP,oBAAoB,EAAE,CAAC,EAAU,EAAE,IAAmI,EAA8B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;YACnR,oBAAoB,EAAE,CAAC,EAAU,EAA2C,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACtJ,sEAAsE;YACtE,SAAS,EAAE,CAAC,MAAc,EAAyF,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9L,6FAA6F;YAC7F,QAAQ,EAAE,CAAC,MAAc,EAAE,OAA6E,EAAE,EAA2B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;YACrN,QAAQ,EAAE,GAAyB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;YACvF,cAAc,EAAE,CAAC,IAA0C,EAAwB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;SAC9I;QACD,SAAS,EAAE;YACT,IAAI,EAAE,CAAC,SAA6C,EAAE,EAA8B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACxJ,GAAG,EAAE,CAAC,EAAU,EAA4D,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5I,MAAM,EAAE,CAAC,IAAsB,EAAwB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;YACnH,MAAM,EAAE,CAAC,EAAU,EAAoC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1H,+GAA+G;YAC/G,MAAM,EAAE,CAAC,EAAU,EAAwB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC;YACnH,+FAA+F;YAC/F,KAAK,EAAE,CAAC,EAAU,EAAwB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;YACjH,KAAK,EAAE,CAAC,EAAU,EAAE,SAAgF,EAAE,EAAkC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC7N,QAAQ,EAAE,CAAC,EAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9H,+FAA+F;YAC/F,QAAQ,EAAE,CAAC,EAAU,EAAE,SAAsC,EAAE,EAAwB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/K,qCAAqC;YACrC,WAAW,EAAE,CAAC,EAAU,EAAE,SAAsC,EAAE,EAAmB,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAC9M,MAAM,EAAE,CAAC,MAAc,EAAE,IAAqF,EAA4B,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,mBAAmB,IAAA,aAAG,EAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;SAClO;KACF,CAAC;AACJ,CAAC"}