@authup/server-core 1.0.0-beta.19 → 1.0.0-beta.20

package/dist/http/controllers/identity-provider/utils/validation.js

@@ -6,21 +6,19 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IdentityProviderRequestValidator = void 0;
+exports.IdentityProviderValidator = void 0;
 const core_kit_1 = require("@authup/core-kit");
 const http_1 = require("@ebec/http");
-const zod_1 = require("zod");
-const core_1 = require("../../../../core");
-const domains_1 = require("../../../../domains");
-const utils_1 = require("../../../../utils");
+const adapter_validator_1 = require("@validup/adapter-validator");
+const validup_1 = require("validup");
 const request_1 = require("../../../request");
-class IdentityProviderRequestValidator extends core_1.RequestDatabaseValidator {
-    constructor() {
-        super(domains_1.IdentityProviderEntity);
-        this.mount();
+class IdentityProviderValidator extends validup_1.Container {
+    constructor(options = {}) {
+        super(options);
+        this.mountAll();
     }
-    mount() {
-        this.add('slug')
+    mountAll() {
+        this.mount('slug', (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
             .notEmpty()
             .isString()
@@ -31,70 +29,33 @@ class IdentityProviderRequestValidator extends core_1.RequestDatabaseValidator {
                 throw new http_1.BadRequestError('Only the characters [a-z0-9-_]+ are allowed.');
             }
             return isValid;
-        });
-        this.add('name')
+        })));
+        this.mount('name', (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
             .notEmpty()
             .isString()
-            .isLength({ min: 5, max: 128 });
-        this.addOneOf([
-            this.create('protocol')
-                .exists()
-                .notEmpty()
-                .isIn(Object.values(core_kit_1.IdentityProviderProtocol)),
-            this.create('preset')
-                .exists()
-                .notEmpty()
-                .isIn(Object.values(core_kit_1.IdentityProviderPreset)),
-        ]);
-        this.add('enabled')
+            .isLength({ min: 5, max: 128 })));
+        this.mount('display_name', (0, adapter_validator_1.createValidator)((chain) => chain
+            .isString()
+            .isLength({ min: 3, max: 256 })
+            .optional({ values: 'null' })));
+        const container = new validup_1.Container({ oneOf: true });
+        container.mount('protocol', (0, adapter_validator_1.createValidator)((chain) => chain.exists()
+            .notEmpty()
+            .isIn(Object.values(core_kit_1.IdentityProviderProtocol))));
+        container.mount('preset', (0, adapter_validator_1.createValidator)((chain) => chain.exists()
+            .notEmpty()
+            .isIn(Object.values(core_kit_1.IdentityProviderPreset))));
+        this.mount(container);
+        this.mount('enabled', (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
             .notEmpty()
-            .isBoolean();
-        this.addTo(request_1.RequestHandlerOperation.CREATE, 'realm_id')
+            .isBoolean()));
+        this.mount('realm_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
             .isUUID()
-            .optional({ nullable: true });
-    }
-    async executeWithAttributes(req, options = {}) {
-        const data = await this.execute(req, options);
-        let protocol;
-        if (data.preset) {
-            protocol = (0, core_kit_1.getIdentityProviderProtocolForPreset)(data.preset);
-        }
-        else {
-            protocol = data.protocol;
-        }
-        if (!protocol) {
-            throw new http_1.BadRequestError('A protocol could not be determined.');
-        }
-        let attributes = {};
-        try {
-            switch (protocol) {
-                case core_kit_1.IdentityProviderProtocol.OAUTH2:
-                case core_kit_1.IdentityProviderProtocol.OIDC: {
-                    attributes = (0, domains_1.validateOAuth2IdentityProviderProtocol)(req, data.preset);
-                    break;
-                }
-                case core_kit_1.IdentityProviderProtocol.LDAP: {
-                    attributes = (0, domains_1.validateLdapIdentityProviderProtocol)(req);
-                    break;
-                }
-            }
-        }
-        catch (e) {
-            if (e instanceof zod_1.ZodError) {
-                throw new http_1.BadRequestError((0, utils_1.buildErrorMessageForZodError)(e));
-            }
-            if (e instanceof Error) {
-                throw new http_1.BadRequestError(e.message, {
-                    cause: e,
-                });
-            }
-            throw e;
-        }
-        return [data, attributes];
+            .optional({ nullable: true })));
     }
 }
-exports.IdentityProviderRequestValidator = IdentityProviderRequestValidator;
+exports.IdentityProviderValidator = IdentityProviderValidator;
 //# sourceMappingURL=validation.js.map

package/dist/http/controllers/identity-provider/utils/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAK0B;AAC1B,qCAA6C;AAE7C,6BAA+B;AAE/B,2CAA4D;AAC5D,iDAI6B;AAC7B,6CAAiE;AACjE,8CAA2D;AAE3D,MAAa,gCAAiC,SAAQ,+BAAgD;IAClG;QACI,KAAK,CAAC,gCAAsB,CAAC,CAAC;QAE9B,IAAI,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,KAAK;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,MAAM,OAAO,GAAG,IAAA,qCAA0B,EAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM,IAAI,sBAAe,CAAC,8CAA8C,CAAC,CAAC;YAC9E,CAAC;YAED,OAAO,OAAO,CAAC;QACnB,CAAC,CAAC,CAAC;QAEP,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,QAAQ,CACT;YACI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;iBAClB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAwB,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;iBAChB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iCAAsB,CAAC,CAAC;SACnD,CACJ,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;aACd,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,SAAS,EAAE,CAAC;QAEjB,IAAI,CAAC,KAAK,CAAC,iCAAuB,CAAC,MAAM,EAAE,UAAU,CAAC;aACjD,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,qBAAqB,CACvB,GAAY,EACZ,UAAkE,EAAE;QAEpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9C,IAAI,QAAoD,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,QAAQ,GAAG,IAAA,+CAAoC,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACJ,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,sBAAe,CAAC,qCAAqC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,UAAU,GAAyB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACD,QAAQ,QAAQ,EAAE,CAAC;gBACf,KAAK,mCAAwB,CAAC,MAAM,CAAC;gBACrC,KAAK,mCAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;oBACjC,UAAU,GAAG,IAAA,gDAAsC,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBACtE,MAAM;gBACV,CAAC;gBACD,KAAK,mCAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;oBACjC,UAAU,GAAG,IAAA,8CAAoC,EAAC,GAAG,CAAC,CAAC;oBACvD,MAAM;gBACV,CAAC;YACL,CAAC;QACL,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,cAAQ,EAAE,CAAC;gBACxB,MAAM,IAAI,sBAAe,CAAC,IAAA,oCAA4B,EAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;gBACrB,MAAM,IAAI,sBAAe,CAAC,CAAC,CAAC,OAAO,EAAE;oBACjC,KAAK,EAAE,CAAC;iBACX,CAAC,CAAC;YACP,CAAC;YAED,MAAM,CAAC,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9B,CAAC;CACJ;AAnGD,4EAmGC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAI0B;AAC1B,qCAA6C;AAC7C,kEAA6D;AAE7D,qCAAoC;AAEpC,8CAA2D;AAE3D,MAAa,yBAA0B,SAAQ,mBAAiC;IAC5E,YAAY,UAAoD,EAAE;QAC9D,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,QAAQ;QACJ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC9C,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,MAAM,OAAO,GAAG,IAAA,qCAA0B,EAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM,IAAI,sBAAe,CAAC,8CAA8C,CAAC,CAAC;YAC9E,CAAC;YAED,OAAO,OAAO,CAAC;QACnB,CAAC,CAAC,CAAC,CAAC,CAAC;QAET,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC9C,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACtD,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,MAAM,SAAS,GAAG,IAAI,mBAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE;aAChE,QAAQ,EAAE;aACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAwB,CAAC,CAAC,CAAC,CAAC,CAAC;QAErD,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE;aAC9D,QAAQ,EAAE;aACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iCAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEtB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACjD,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,SAAS,EAAE,CAAC,CAAC,CAAC;QAEnB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC7F,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;CACJ;AAtDD,8DAsDC"}

package/dist/http/controllers/permission/handlers/check.d.ts

@@ -0,0 +1,3 @@
+import type { Request, Response } from 'routup';
+export declare function checkPermissionRouteHandler(req: Request, res: Response): Promise<any>;
+//# sourceMappingURL=check.d.ts.map

package/dist/http/controllers/permission/handlers/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/check.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA+D5F"}

package/dist/http/controllers/permission/handlers/check.js

@@ -0,0 +1,74 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkPermissionRouteHandler = checkPermissionRouteHandler;
+const kit_1 = require("@authup/kit");
+const http_1 = require("@ebec/http");
+const adapter_routup_1 = require("@validup/adapter-routup");
+const routup_1 = require("routup");
+const typeorm_extension_1 = require("typeorm-extension");
+const domains_1 = require("../../../../domains");
+const security_1 = require("../../../../security");
+const request_1 = require("../../../request");
+async function checkPermissionRouteHandler(req, res) {
+    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = dataSource.getRepository(domains_1.PermissionEntity);
+    let criteria;
+    if ((0, kit_1.isUUID)(id)) {
+        criteria = {
+            id,
+        };
+    }
+    else {
+        const realm = await (0, domains_1.resolveRealm)((0, routup_1.useRequestParam)(req, 'realmId'));
+        criteria = {
+            name: id,
+            ...(realm ? { realm_id: realm.id } : {}),
+        };
+    }
+    const entity = await repository.findOneBy(criteria);
+    if (!entity) {
+        throw new http_1.NotFoundError();
+    }
+    const validator = new kit_1.PolicyDataValidator();
+    const validatorAdapter = new adapter_routup_1.RoutupContainerAdapter(validator);
+    const data = await validatorAdapter.run(req);
+    if (!data.identity &&
+        data.identity !== null) {
+        data.identity = (0, request_1.useRequestIdentity)(req);
+    }
+    const ctx = {
+        name: entity.name,
+        data,
+    };
+    const permissionChecker = new kit_1.PermissionChecker({
+        provider: new security_1.PermissionDBProvider(dataSource),
+        policyEngine: new security_1.PolicyEngine(),
+    });
+    let output;
+    try {
+        if (ctx.data.attributes) {
+            await permissionChecker.check(ctx);
+        }
+        else {
+            await permissionChecker.preCheck(ctx);
+        }
+        output = {
+            status: 'success',
+        };
+    }
+    catch (e) {
+        output = {
+            status: 'error',
+            data: e,
+        };
+    }
+    return (0, routup_1.sendAccepted)(res, output);
+}
+//# sourceMappingURL=check.js.map

package/dist/http/controllers/permission/handlers/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/check.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAcH,kEA+DC;AAzED,qCAA6E;AAC7E,qCAA2C;AAC3C,4DAAiE;AAEjE,mCAAuD;AACvD,yDAAkD;AAClD,iDAAqE;AACrE,mDAA0E;AAC1E,8CAAsD;AAE/C,KAAK,UAAU,2BAA2B,CAAC,GAAY,EAAE,GAAa;IACzE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,IAAI,QAAoC,CAAC;IAEzC,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,QAAQ,GAAG;YACP,EAAE;SACL,CAAC;IACN,CAAC;SAAM,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,QAAQ,GAAG;YACP,IAAI,EAAE,EAAE;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,yBAAmB,EAAE,CAAC;IAC5C,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7C,IACI,CAAC,IAAI,CAAC,QAAQ;QACd,IAAI,CAAC,QAAQ,KAAK,IAAI,EACxB,CAAC;QACC,IAAI,CAAC,QAAQ,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,GAAG,GAAmC;QACxC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI;KACP,CAAC;IAEF,MAAM,iBAAiB,GAAG,IAAI,uBAAiB,CAAC;QAC5C,QAAQ,EAAE,IAAI,+BAAoB,CAAC,UAAU,CAAC;QAC9C,YAAY,EAAE,IAAI,uBAAY,EAAE;KACnC,CAAC,CAAC;IAEH,IAAI,MAAmC,CAAC;IACxC,IAAI,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACJ,MAAM,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,GAAG;YACL,MAAM,EAAE,SAAS;SACpB,CAAC;IACN,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,GAAG;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,CAAC;SACV,CAAC;IACN,CAAC;IAED,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/permission/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/delete.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgC7F"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA4B7F"}

package/dist/http/controllers/permission/handlers/delete.js

@@ -13,13 +13,10 @@ const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
 const request_1 = require("../../../request");
-const utils_1 = require("../../../utils");
 async function deletePermissionRouteHandler(req, res) {
-    const id = (0, request_1.useRequestIDParam)(req);
-    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
-        throw new http_1.ForbiddenError('You are not allowed to drop a permission.');
-    }
+    const id = (0, request_1.useRequestParamID)(req);
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheck({ name: core_kit_1.PermissionName.PERMISSION_DELETE });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.PermissionEntity);
     const entity = await repository.findOneBy({ id });
@@ -29,9 +26,7 @@ async function deletePermissionRouteHandler(req, res) {
     if (entity.built_in) {
         throw new http_1.BadRequestError('A built-in permission can not be deleted.');
     }
-    if (!ability.can(core_kit_1.PermissionName.PERMISSION_DELETE, { attributes: entity })) {
-        throw new http_1.ForbiddenError();
-    }
+    await permissionChecker.check({ name: core_kit_1.PermissionName.PERMISSION_DELETE, data: { attributes: entity } });
     const { id: entityId } = entity;
     await repository.remove(entity);
     entity.id = entityId;

package/dist/http/controllers/permission/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,oEAgCC;AA1CD,qCAA4E;AAE5E,+CAAkD;AAElD,mCAAsC;AACtC,yDAAkD;AAClD,iDAAuD;AACvD,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAc,CAAC,2CAA2C,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAe,CAAC,2CAA2C,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAUH,oEA4BC;AApCD,qCAA4D;AAC5D,+CAAkD;AAElD,mCAAsC;AACtC,yDAAkD;AAClD,iDAAuD;AACvD,8CAAoE;AAE7D,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAe,CAAC,2CAA2C,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,iBAAiB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAExG,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/permission/handlers/index.d.ts

@@ -1,5 +1,5 @@
-export * from './create';
+export * from './check';
+export * from './write';
 export * from './delete';
 export * from './read';
-export * from './update';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/controllers/permission/handlers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC"}

package/dist/http/controllers/permission/handlers/index.js

@@ -20,8 +20,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./create"), exports);
+__exportStar(require("./check"), exports);
+__exportStar(require("./write"), exports);
 __exportStar(require("./delete"), exports);
 __exportStar(require("./read"), exports);
-__exportStar(require("./update"), exports);
 //# sourceMappingURL=index.js.map

package/dist/http/controllers/permission/handlers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,2CAAyB;AACzB,yCAAuB;AACvB,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,0CAAwB;AACxB,0CAAwB;AACxB,2CAAyB;AACzB,yCAAuB"}

package/dist/http/controllers/permission/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/read.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAoC7F;AAED,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAoC5F"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/read.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAoC7F;AAED,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAoC5F"}

package/dist/http/controllers/permission/handlers/read.js

@@ -16,21 +16,22 @@ const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const domains_1 = require("../../../../domains");
 const request_1 = require("../../../request");
-const utils_1 = require("../../../utils");
 async function getManyPermissionRouteHandler(req, res) {
-    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_READ) &&
-        !ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE) &&
-        !ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
-        throw new http_1.ForbiddenError();
-    }
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.PERMISSION_READ,
+            core_kit_1.PermissionName.PERMISSION_UPDATE,
+            core_kit_1.PermissionName.PERMISSION_DELETE,
+        ],
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.PermissionEntity);
     const query = repository.createQueryBuilder('permission');
     const { pagination } = (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
         defaultAlias: 'permission',
         filters: {
-            allowed: ['id', 'name', 'built_in'],
+            allowed: ['id', 'display_name', 'name', 'built_in'],
         },
         pagination: {
             maxLimit: 50,
@@ -49,14 +50,16 @@ async function getManyPermissionRouteHandler(req, res) {
     });
 }
 async function getOnePermissionRouteHandler(req, res) {
-    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_READ) &&
-        !ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE) &&
-        !ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
-        throw new http_1.ForbiddenError();
-    }
-    const id = (0, request_1.useRequestIDParam)(req, {
-        strict: false,
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.PERMISSION_READ,
+            core_kit_1.PermissionName.PERMISSION_UPDATE,
+            core_kit_1.PermissionName.PERMISSION_DELETE,
+        ],
+    });
+    const id = (0, request_1.useRequestParamID)(req, {
+        isUUID: false,
     });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.PermissionEntity);

package/dist/http/controllers/permission/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAeH,sEAoCC;AAED,oEAoCC;AAvFD,+CAAkD;AAClD,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAE2B;AAC3B,qCAA2D;AAC3D,iDAAqE;AACrE,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,6BAA6B,CAAC,GAAY,EAAE,GAAa;IAC3E,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC;QAC5C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC;QAC9C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAChD,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,YAAY;QAC1B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;SACtD;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC;QAC5C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC;QAC9C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAChD,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAE1D,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,IAAI,KAAK,EAAE,CAAC;YACR,KAAK,CAAC,QAAQ,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAcH,sEAoCC;AAED,oEAoCC;AAtFD,+CAAkD;AAClD,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAE2B;AAC3B,qCAA2C;AAC3C,iDAAqE;AACrE,8CAAoE;AAE7D,KAAK,UAAU,6BAA6B,CAAC,GAAY,EAAE,GAAa;IAC3E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,eAAe;YAC9B,yBAAc,CAAC,iBAAiB;YAChC,yBAAc,CAAC,iBAAiB;SACnC;KACJ,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,YAAY;QAC1B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC;SACtD;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;SACtD;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,eAAe;YAC9B,yBAAc,CAAC,iBAAiB;YAChC,yBAAc,CAAC,iBAAiB;SACnC;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAE1D,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,IAAI,KAAK,EAAE,CAAC;YACR,KAAK,CAAC,QAAQ,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/permission/handlers/write.d.ts

@@ -0,0 +1,5 @@
+import type { Request, Response } from 'routup';
+export declare function writePermissionRouteHandler(req: Request, res: Response, options?: {
+    updateOnly?: boolean;
+}): Promise<any>;
+//# sourceMappingURL=write.d.ts.map

package/dist/http/controllers/permission/handlers/write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/write.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAYhD,wBAAsB,2BAA2B,CAC7C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,OAAO,GAAE;IACL,UAAU,CAAC,EAAE,OAAO,CAAA;CAClB,GACN,OAAO,CAAC,GAAG,CAAC,CA4Hf"}

package/dist/http/controllers/permission/handlers/write.js

@@ -0,0 +1,127 @@
+"use strict";
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writePermissionRouteHandler = writePermissionRouteHandler;
+const http_1 = require("@ebec/http");
+const kit_1 = require("@authup/kit");
+const core_kit_1 = require("@authup/core-kit");
+const routup_1 = require("routup");
+const typeorm_extension_1 = require("typeorm-extension");
+const adapter_routup_1 = require("@validup/adapter-routup");
+const database_1 = require("../../../../database");
+const domains_1 = require("../../../../domains");
+const utils_1 = require("../utils");
+const request_1 = require("../../../request");
+async function writePermissionRouteHandler(req, res, options = {}) {
+    let group;
+    const id = (0, request_1.getRequestParamID)(req, { isUUID: false });
+    const realmId = (0, request_1.getRequestBodyRealmID)(req);
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = dataSource.getRepository(domains_1.PermissionEntity);
+    let entity;
+    if (id) {
+        const where = {};
+        if ((0, kit_1.isUUID)(id)) {
+            where.id = id;
+        }
+        else {
+            where.name = id;
+        }
+        if (realmId) {
+            where.realm_id = realmId;
+        }
+        entity = await repository.findOneBy(where);
+        if (!entity && options.updateOnly) {
+            throw new http_1.NotFoundError();
+        }
+    }
+    else if (options.updateOnly) {
+        throw new http_1.NotFoundError();
+    }
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    if (entity) {
+        await permissionChecker.preCheck({ name: core_kit_1.PermissionName.PERMISSION_UPDATE });
+        group = request_1.RequestHandlerOperation.UPDATE;
+    }
+    else {
+        await permissionChecker.preCheck({ name: core_kit_1.PermissionName.PERMISSION_CREATE });
+        group = request_1.RequestHandlerOperation.CREATE;
+    }
+    const validator = new utils_1.PermissionRequestValidator();
+    const validatorAdapter = new adapter_routup_1.RoutupContainerAdapter(validator);
+    const data = await validatorAdapter.run(req, {
+        group,
+    });
+    await (0, typeorm_extension_1.validateEntityJoinColumns)(data, {
+        dataSource,
+        entityTarget: domains_1.PermissionEntity,
+    });
+    if (entity) {
+        if (entity.built_in &&
+            (0, kit_1.isPropertySet)(data, 'name') &&
+            entity.name !== data.name) {
+            throw new http_1.BadRequestError('The name of a built-in permission can not be changed.');
+        }
+        await permissionChecker.check({
+            name: core_kit_1.PermissionName.PERMISSION_UPDATE,
+            data: {
+                attributes: {
+                    ...entity,
+                    ...data,
+                },
+            },
+        });
+    }
+    else {
+        if (!data.realm_id) {
+            const identity = (0, request_1.useRequestIdentityOrFail)(req);
+            if (!(0, request_1.isRequestIdentityMasterRealmMember)(identity)) {
+                data.realm_id = identity.realmId;
+            }
+        }
+        await permissionChecker.check({
+            name: core_kit_1.PermissionName.PERMISSION_CREATE,
+            data: {
+                attributes: data,
+            },
+        });
+    }
+    const isUnique = await (0, typeorm_extension_1.isEntityUnique)({
+        dataSource,
+        entityTarget: domains_1.PermissionEntity,
+        entity: data,
+        entityExisting: entity,
+    });
+    if (!isUnique) {
+        throw new database_1.DatabaseConflictError();
+    }
+    if (entity) {
+        entity = repository.merge(entity, data);
+        await repository.save(entity);
+        return (0, routup_1.sendAccepted)(res, entity);
+    }
+    entity = repository.create(data);
+    await dataSource.transaction(async (entityManager) => {
+        const transactionRepository = entityManager.getRepository(domains_1.PermissionEntity);
+        await transactionRepository.save(entity);
+        const roleRepository = new domains_1.RoleRepository(entityManager);
+        const role = await roleRepository.findOneBy({
+            name: core_kit_1.ROLE_ADMIN_NAME,
+            realm_id: null,
+        });
+        const rolePermissionRepository = entityManager.getRepository(domains_1.RolePermissionEntity);
+        await rolePermissionRepository.insert({
+            role_id: role.id,
+            role_realm_id: role.realm_id,
+            permission_id: entity.id,
+            permission_realm_id: entity.realm_id,
+        });
+    });
+    return (0, routup_1.sendCreated)(res, entity);
+}
+//# sourceMappingURL=write.js.map

package/dist/http/controllers/permission/handlers/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/write.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAiBH,kEAkIC;AAjJD,qCAA4D;AAC5D,qCAAoD;AACpD,+CAAmE;AAEnE,mCAAmD;AAEnD,yDAA6F;AAC7F,4DAAiE;AACjE,mDAA6D;AAC7D,iDAA6F;AAC7F,oCAAsD;AACtD,8CAE0B;AAEnB,KAAK,UAAU,2BAA2B,CAC7C,GAAY,EACZ,GAAa,EACb,UAEI,EAAE;IAEN,IAAI,KAAa,CAAC;IAClB,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAA,+BAAqB,EAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,IAAI,MAAqC,CAAC;IAC1C,IAAI,EAAE,EAAE,CAAC;QACL,MAAM,KAAK,GAAuC,EAAE,CAAC;QACrD,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;YACb,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC;QAClB,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACV,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,oBAAa,EAAE,CAAC;QAC9B,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAE7E,KAAK,GAAG,iCAAuB,CAAC,MAAM,CAAC;IAC3C,CAAC;SAAM,CAAC;QACJ,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAE7E,KAAK,GAAG,iCAAuB,CAAC,MAAM,CAAC;IAC3C,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,kCAA0B,EAAE,CAAC;IACnD,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;QACzC,KAAK;KACR,CAAC,CAAC;IAEH,MAAM,IAAA,6CAAyB,EAAC,IAAI,EAAE;QAClC,UAAU;QACV,YAAY,EAAE,0BAAgB;KACjC,CAAC,CAAC;IAEH,IAAI,MAAM,EAAE,CAAC;QACT,IACI,MAAM,CAAC,QAAQ;YACf,IAAA,mBAAa,EAAC,IAAI,EAAE,MAAM,CAAC;YAC3B,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAC3B,CAAC;YACC,MAAM,IAAI,sBAAe,CAAC,uDAAuD,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,iBAAiB,CAAC,KAAK,CAAC;YAC1B,IAAI,EAAE,yBAAc,CAAC,iBAAiB;YACtC,IAAI,EAAE;gBACF,UAAU,EAAE;oBACR,GAAG,MAAM;oBACT,GAAG,IAAI;iBACV;aACJ;SACJ,CAAC,CAAC;IACP,CAAC;SAAM,CAAC;QACJ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,IAAA,kCAAwB,EAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAA,4CAAkC,EAAC,QAAQ,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;YACrC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,CAAC,KAAK,CAAC;YAC1B,IAAI,EAAE,yBAAc,CAAC,iBAAiB;YACtC,IAAI,EAAE;gBACF,UAAU,EAAE,IAAI;aACnB;SACJ,CAAC,CAAC;IACP,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,kCAAc,EAAC;QAClC,UAAU;QACV,YAAY,EAAE,0BAAgB;QAC9B,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,MAAM;KACzB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,MAAM,IAAI,gCAAqB,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjC,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;QACjD,MAAM,qBAAqB,GAAG,aAAa,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;QAC5E,MAAM,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,0BAAe;YACrB,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,MAAM,wBAAwB,GAAG,aAAa,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;QACnF,MAAM,wBAAwB,CAAC,MAAM,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;YAC5B,aAAa,EAAE,MAAM,CAAC,EAAE;YACxB,mBAAmB,EAAE,MAAM,CAAC,QAAQ;SACvC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/permission/module.d.ts

@@ -1,9 +1,13 @@
+import { PermissionAPICheckResponse } from '@authup/core-http-kit';
+import { PolicyData } from '@authup/kit';
 import type { Permission } from '@authup/core-kit';
 export declare class PermissionController {
     getPermissions(req: any, res: any): Promise<Permission[]>;
-    getPermission(id: string, req: any, res: any): Promise<Permission>;
     add(user: NonNullable<Permission>, req: any, res: any): Promise<Permission[]>;
+    check(data: NonNullable<PolicyData>, req: any, res: any): Promise<PermissionAPICheckResponse>;
+    getPermission(id: string, req: any, res: any): Promise<Permission>;
     edit(id: string, user: NonNullable<Permission>, req: any, res: any): Promise<Permission>;
+    put(id: string, user: NonNullable<Permission>, req: any, res: any): Promise<Permission>;
     drop(id: string, req: any, res: any): Promise<Permission>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/http/controllers/permission/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/permission/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAUnD,qBAEa,oBAAoB;IAEvB,cAAc,CACJ,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,UAAU,EAAE,CAAC;IAKlB,aAAa,CACF,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,UAAU,CAAC;IAKhB,GAAG,CACI,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,EACtB,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,UAAU,EAAE,CAAC;IAKlB,IAAI,CACO,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,EAC1B,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,UAAU,CAAC;IAKjB,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,UAAU,CAAC;CAG1B"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/permission/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAUnD,qBAEa,oBAAoB;IAEvB,cAAc,CACJ,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,UAAU,EAAE,CAAC;IAKlB,GAAG,CACI,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,EACtB,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,UAAU,EAAE,CAAC;IAKlB,KAAK,CACE,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,EACtB,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,0BAA0B,CAAC;IAKhC,aAAa,CACF,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,UAAU,CAAC;IAKhB,IAAI,CACO,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,EAC1B,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,UAAU,CAAC;IAOjB,GAAG,CACQ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,EAC1B,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,UAAU,CAAC;IAKjB,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,UAAU,CAAC;CAG1B"}