@authup/access 1.0.0-beta.27 → 1.0.0-beta.28

package/dist/index.mjs

@@ -6,20 +6,20 @@ import { z } from 'zod';
 import { guard } from '@ucast/mongo2js';
 
 class PolicyError extends AuthupError {
+    constructor(message, code){
+        super({
+            message,
+            code
+        });
+    }
     static evaluatorNotFound(type) {
         return new PolicyError(`No evaluator is registered to handle the policy: ${type}`, ErrorCode.POLICY_EVALUATOR_NOT_FOUND);
     }
     static evaluatorNotProcessable() {
-        throw new PolicyError('The evaluator can not process the policy.', ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE);
+        return new PolicyError('The evaluator can not process the policy.', ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE);
     }
     static evaluatorContextInvalid() {
-        throw new PolicyError('The evaluator context is not valid.', ErrorCode.POLICY_EVALUATOR_CONTEXT_INVALID);
-    }
-    constructor(message, code){
-        super({
-            message,
-            code
-        });
+        return new PolicyError('The evaluator context is not valid.', ErrorCode.POLICY_EVALUATOR_CONTEXT_INVALID);
     }
 }
 
@@ -83,6 +83,10 @@ class AttributeNamesPolicyValidator extends Container {
 }
 
 class AttributeNamesPolicyEvaluator {
+    validator;
+    constructor(){
+        this.validator = new AttributeNamesPolicyValidator();
+    }
     async can(ctx) {
         return ctx.config.type === BuiltInPolicyType.ATTRIBUTE_NAMES;
     }
@@ -109,9 +113,6 @@ class AttributeNamesPolicyEvaluator {
         }
         return maybeInvertPolicyOutcome(true, ctx.config.invert);
     }
-    constructor(){
-        this.validator = new AttributeNamesPolicyValidator();
-    }
 }
 
 /*
@@ -132,6 +133,10 @@ class AttributesPolicyValidator extends Container {
 }
 
 class AttributesPolicyEvaluator {
+    validator;
+    constructor(){
+        this.validator = new AttributesPolicyValidator();
+    }
     async can(ctx) {
         return ctx.config.type === BuiltInPolicyType.ATTRIBUTES;
     }
@@ -153,25 +158,30 @@ class AttributesPolicyEvaluator {
         return maybeInvertPolicyOutcome(testIt(ctx.input.attributes), ctx.config.invert);
     }
     fixQuery(query) {
-        const keys = Object.keys(query);
-        for(let i = 0; i < keys.length; i++){
-            const key = keys[i];
-            const value = query[key];
-            if (isObject(value) || Array.isArray(value)) {
-                this.fixQuery(value);
-                continue;
+        if (Array.isArray(query)) {
+            for(let i = 0; i < query.length; i++){
+                this.fixQuery(query[i]);
             }
-            if (key === '$regex' && typeof value === 'string') {
-                const fragments = value.match(/\/(.*?)\/([a-z]*)?$/i);
-                if (fragments) {
-                    query[key] = new RegExp(fragments[1], fragments[2]);
+            return;
+        }
+        if (isObject(query)) {
+            const keys = Object.keys(query);
+            for(let i = 0; i < keys.length; i++){
+                const key = keys[i];
+                const value = query[key];
+                if (isObject(value) || Array.isArray(value)) {
+                    this.fixQuery(value);
+                    continue;
+                }
+                if (key === '$regex' && typeof value === 'string') {
+                    const fragments = value.match(/\/(.*?)\/([a-z]*)?$/i);
+                    if (fragments) {
+                        query[key] = new RegExp(fragments[1], fragments[2]);
+                    }
                 }
             }
         }
     }
-    constructor(){
-        this.validator = new AttributesPolicyValidator();
-    }
 }
 
 /*
@@ -295,6 +305,10 @@ class CompositePolicyValidator extends Container {
 }
 
 class CompositePolicyEvaluator {
+    validator;
+    constructor(){
+        this.validator = new CompositePolicyValidator();
+    }
     async can(ctx) {
         return isCompositePolicy(ctx.config);
     }
@@ -335,9 +349,6 @@ class CompositePolicyEvaluator {
         }
         return maybeInvertPolicyOutcome(count > 0, ctx.config.invert);
     }
-    constructor(){
-        this.validator = new CompositePolicyValidator();
-    }
 }
 
 class DatePolicyValidator extends Container {
@@ -362,6 +373,10 @@ function toDate$1(input) {
     return input;
 }
 class DatePolicyEvaluator {
+    validator;
+    constructor(){
+        this.validator = new DatePolicyValidator();
+    }
     async can(ctx) {
         return ctx.config.type === BuiltInPolicyType.DATE;
     }
@@ -392,9 +407,6 @@ class DatePolicyEvaluator {
         }
         return maybeInvertPolicyOutcome(true, ctx.config.invert);
     }
-    constructor(){
-        this.validator = new DatePolicyValidator();
-    }
 }
 
 class IdentityPolicyValidator extends Container {
@@ -405,6 +417,10 @@ class IdentityPolicyValidator extends Container {
 }
 
 class IdentityPolicyEvaluator {
+    validator;
+    constructor(){
+        this.validator = new IdentityPolicyValidator();
+    }
     async can(ctx) {
         return ctx.config.type === BuiltInPolicyType.IDENTITY;
     }
@@ -425,9 +441,6 @@ class IdentityPolicyEvaluator {
         const typeAllowed = types.indexOf(ctx.input.identity.type) !== -1;
         return maybeInvertPolicyOutcome(typeAllowed, ctx.config.invert);
     }
-    constructor(){
-        this.validator = new IdentityPolicyValidator();
-    }
 }
 
 class PermissionBindingPolicyValidator extends Container {
@@ -435,6 +448,10 @@ class PermissionBindingPolicyValidator extends Container {
 }
 
 class PermissionBindingPolicyEvaluator {
+    validator;
+    constructor(){
+        this.validator = new PermissionBindingPolicyValidator();
+    }
     async can(ctx) {
         return ctx.config.type === BuiltInPolicyType.PERMISSION_BINDING;
     }
@@ -451,9 +468,6 @@ class PermissionBindingPolicyEvaluator {
         // todo: this must be changed when the permission-checker not only checks owned permissions.
         return maybeInvertPolicyOutcome(true, ctx.config.invert);
     }
-    constructor(){
-        this.validator = new PermissionBindingPolicyValidator();
-    }
 }
 
 class RealmMatchPolicyValidator extends Container {
@@ -469,6 +483,10 @@ class RealmMatchPolicyValidator extends Container {
 }
 
 class RealmMatchPolicyEvaluator {
+    validator;
+    constructor(){
+        this.validator = new RealmMatchPolicyValidator();
+    }
     async can(ctx) {
         return ctx.config.type === BuiltInPolicyType.REALM_MATCH;
     }
@@ -553,9 +571,6 @@ class RealmMatchPolicyEvaluator {
         }
         return maybeInvertPolicyOutcome(count > 0, ctx.config.invert);
     }
-    constructor(){
-        this.validator = new RealmMatchPolicyValidator();
-    }
 }
 
 /*
@@ -586,7 +601,7 @@ class TimePolicyValidator extends Container {
         super.initialize();
         this.mount('dayOfWeek', createValidator(z.number().min(0).max(6).or(z.null()).or(z.undefined()).optional()));
         this.mount('dayOfMonth', createValidator(z.number().min(1).max(31).or(z.null()).or(z.undefined()).optional()));
-        this.mount('dayOfYear', createValidator(z.number().min(1).max(366).or(z.null()).or(z.undefined()).optional()));
+        this.mount('dayOfYear', createValidator(z.number().min(1).max(365).or(z.null()).or(z.undefined()).optional()));
         this.mount('start', createValidator(z.date().or(z.string().datetime()).or(z.string().time()).or(z.number()).or(z.null()).or(z.undefined()).optional()));
         this.mount('end', createValidator(z.date().or(z.string().datetime()).or(z.string().time()).or(z.number()).or(z.null()).or(z.undefined()).optional()));
         this.mount('interval', createValidator(z.nativeEnum(TimePolicyInterval).or(z.null()).or(z.undefined()).optional()));
@@ -616,6 +631,10 @@ function toDate(input, dateRef) {
     return input;
 }
 class TimePolicyEvaluator {
+    validator;
+    constructor(){
+        this.validator = new TimePolicyValidator();
+    }
     async can(ctx) {
         return ctx.config.type === BuiltInPolicyType.TIME;
     }
@@ -667,9 +686,6 @@ class TimePolicyEvaluator {
         }
         return maybeInvertPolicyOutcome(true, ctx.config.invert);
     }
-    constructor(){
-        this.validator = new TimePolicyValidator();
-    }
 }
 
 /*
@@ -688,6 +704,12 @@ class TimePolicyEvaluator {
  * The policy engine is a component that interprets defined policies and makes decisions
  * on whether to allow or deny a particular access.
  */ class PolicyEngine {
+    evaluators;
+    constructor(evaluators = {}){
+        this.evaluators = {};
+        this.registerDefaultEvaluators();
+        this.registerEvaluators(evaluators);
+    }
     registerEvaluator(type, evaluator) {
         this.evaluators[type] = evaluator;
     }
@@ -718,14 +740,18 @@ class TimePolicyEvaluator {
             evaluators: this.evaluators
         });
     }
-    constructor(evaluators = {}){
-        this.evaluators = {};
-        this.registerDefaultEvaluators();
-        this.registerEvaluators(evaluators);
-    }
 }
 
 class PermissionError extends AuthupError {
+    policy;
+    policyError;
+    constructor(options = {}){
+        super({
+            ...options,
+            message: options.message || 'A permission error occurred.',
+            statusCode: options.statusCode || 403
+        });
+    }
     static notFound(name) {
         return new PermissionError({
             message: `The permission ${name} was not found.`,
@@ -760,13 +786,6 @@ class PermissionError extends AuthupError {
         }
         return error;
     }
-    constructor(options = {}){
-        super({
-            ...options,
-            message: options.message || 'A permission error occurred.',
-            statusCode: options.statusCode || 403
-        });
-    }
 }
 
 /*
@@ -828,6 +847,10 @@ function mergePermissionItems(input) {
 }
 
 class PermissionMemoryProvider {
+    items = {};
+    constructor(items = []){
+        this.setMany(items);
+    }
     async get(options) {
         return this.items[buildPermissionItemKey(options)];
     }
@@ -837,13 +860,32 @@ class PermissionMemoryProvider {
             return prev;
         }, {});
     }
-    constructor(items = []){
-        this.items = {};
-        this.setMany(items);
-    }
 }
 
 class PermissionChecker {
+    provider;
+    policyEngine;
+    clientId;
+    realmId;
+    // ----------------------------------------------
+    constructor(options = {}){
+        if (options.provider) {
+            this.provider = options.provider;
+        } else {
+            this.provider = new PermissionMemoryProvider();
+        }
+        if (options.clientId) {
+            this.clientId = options.clientId;
+        }
+        if (options.realmId) {
+            this.realmId = options.realmId;
+        }
+        if (options.policyEngine) {
+            this.policyEngine = options.policyEngine;
+        } else {
+            this.policyEngine = new PolicyEngine();
+        }
+    }
     // ----------------------------------------------
     /**
      * Get a permission.
@@ -991,25 +1033,6 @@ class PermissionChecker {
             }
         });
     }
-    // ----------------------------------------------
-    constructor(options = {}){
-        if (options.provider) {
-            this.provider = options.provider;
-        } else {
-            this.provider = new PermissionMemoryProvider();
-        }
-        if (options.clientId) {
-            this.clientId = options.clientId;
-        }
-        if (options.realmId) {
-            this.realmId = options.realmId;
-        }
-        if (options.policyEngine) {
-            this.policyEngine = options.policyEngine;
-        } else {
-            this.policyEngine = new PolicyEngine();
-        }
-    }
 }
 
 export { AttributeNamesPolicyEvaluator, AttributeNamesPolicyValidator, AttributesPolicyEvaluator, AttributesPolicyValidator, BuiltInPolicyType, CompositePolicyEvaluator, CompositePolicyValidator, DatePolicyEvaluator, DatePolicyValidator, DecisionStrategy, IdentityPolicyEvaluator, IdentityPolicyValidator, PermissionBindingPolicyEvaluator, PermissionBindingPolicyValidator, PermissionChecker, PermissionError, PermissionMemoryProvider, PolicyDataIdentityValidator, PolicyDataPermissionValidator, PolicyDataValidator, PolicyEngine, PolicyError, RealmMatchPolicyEvaluator, RealmMatchPolicyValidator, TimePolicyEvaluator, TimePolicyInterval, TimePolicyValidator, buildPermissionItemKey, defineAttributesPolicy, definePolicyWithType, evaluatePolicy, isCompositePolicy, isIntervalForDayOfMonth, isIntervalForDayOfWeek, isIntervalForDayOfYear, isPermissionItemEqual, maybeInvertPolicyOutcome, mergePermissionItems };