@authup/server-core 1.0.0-beta.35 → 1.0.0-beta.37

package/dist/adapters/http/controllers/entities/permission/module.mjs

@@ -0,0 +1,207 @@
+import { PolicyEngine as PolicyEngine$1 } from "../../../../../core/security/policy/engine.mjs";
+import "../../../../../core/index.mjs";
+import { useRequestIdentity } from "../../../request/helpers/identity.mjs";
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import "../../../middleware/index.mjs";
+import { BuiltInPolicyType, PermissionEvaluator, PolicyData } from "@authup/access";
+import { isUUID } from "@authup/kit";
+import { NotFoundError } from "@ebec/http";
+import { send, sendAccepted, sendCreated, useRequestParam } from "routup";
+import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DController, DDelete, DGet, DPath, DPost, DPut, DRequest, DResponse, DTags } from "@routup/decorators";
+//#region src/adapters/http/controllers/entities/permission/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var PermissionController = class {
+	service;
+	repository;
+	realmRepository;
+	identityPermissionProvider;
+	permissionProvider;
+	constructor(ctx) {
+		this.service = ctx.service;
+		this.repository = ctx.repository;
+		this.realmRepository = ctx.realmRepository;
+		this.identityPermissionProvider = ctx.identityPermissionProvider;
+		this.permissionProvider = ctx.permissionProvider;
+	}
+	async getMany(req, res) {
+		const actor = buildActorContext(req);
+		const { data, meta } = await this.service.getMany(useRequestQuery(req), actor);
+		return send(res, {
+			data,
+			meta
+		});
+	}
+	async add(data, req, res) {
+		const actor = buildActorContext(req);
+		return sendCreated(res, await this.service.create(data, actor));
+	}
+	async check(data, req, res) {
+		const id = useRequestParam(req, "id");
+		let criteria;
+		if (isUUID(id)) criteria = { id };
+		else {
+			const realm = await this.realmRepository.resolve(useRequestParam(req, "realmId"));
+			criteria = {
+				name: id,
+				...realm ? { realm_id: realm.id } : {}
+			};
+		}
+		const entity = await this.repository.findOneBy(criteria);
+		if (!entity) throw new NotFoundError();
+		if (typeof data[BuiltInPolicyType.IDENTITY] === "undefined") data[BuiltInPolicyType.IDENTITY] = useRequestIdentity(req);
+		const ctx = {
+			name: entity.name,
+			input: new PolicyData(data)
+		};
+		const permissionEvaluator = new PermissionEvaluator({
+			provider: this.permissionProvider,
+			policyEngine: new PolicyEngine$1(this.identityPermissionProvider)
+		});
+		let output;
+		try {
+			if (ctx.input && ctx.input.has(BuiltInPolicyType.ATTRIBUTES)) await permissionEvaluator.evaluate(ctx);
+			else await permissionEvaluator.preEvaluate(ctx);
+			output = { status: "success" };
+		} catch (e) {
+			output = {
+				status: "error",
+				data: e
+			};
+		}
+		return sendAccepted(res, output);
+	}
+	async get(id, req, res) {
+		const actor = buildActorContext(req);
+		return send(res, await this.service.getOne(id, actor, useRequestParam(req, "realmId")));
+	}
+	async edit(id, data, req, res) {
+		const actor = buildActorContext(req);
+		return sendAccepted(res, await this.service.update(id, data, actor));
+	}
+	async put(id, data, req, res) {
+		const actor = buildActorContext(req);
+		const { entity, created } = await this.service.save(id || void 0, data, actor);
+		if (created) return sendCreated(res, entity);
+		return sendAccepted(res, entity);
+	}
+	async drop(id, req, res) {
+		const actor = buildActorContext(req);
+		return sendAccepted(res, await this.service.delete(id, actor));
+	}
+};
+_ts_decorate([
+	DGet("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DRequest()),
+	_ts_param(1, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionController.prototype, "getMany", null);
+_ts_decorate([
+	DPost("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionController.prototype, "add", null);
+_ts_decorate([
+	DPost("/:id/check", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionController.prototype, "check", null);
+_ts_decorate([
+	DGet("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionController.prototype, "get", null);
+_ts_decorate([
+	DPost("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DRequest()),
+	_ts_param(3, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionController.prototype, "edit", null);
+_ts_decorate([
+	DPut("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DRequest()),
+	_ts_param(3, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionController.prototype, "put", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionController.prototype, "drop", null);
+PermissionController = _ts_decorate([
+	DTags("permission"),
+	DController("/permissions"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof PermissionControllerContext === "undefined" ? Object : PermissionControllerContext])
+], PermissionController);
+//#endregion
+export { PermissionController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/permission/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["BuiltInPolicyType","PermissionEvaluator","PolicyData","DBody","DController","DDelete","DGet","DPath","DPost","DPut","DRequest","DResponse","DTags","isUUID","NotFoundError","send","sendAccepted","sendCreated","useRequestParam","useRequestQuery","PolicyEngine","ForceLoggedInMiddleware","buildActorContext","useRequestIdentity","PermissionController","service","repository","realmRepository","identityPermissionProvider","permissionProvider","ctx","getMany","req","res","actor","data","meta","add","entity","create","check","id","criteria","realm","resolve","name","realm_id","findOneBy","IDENTITY","input","permissionEvaluator","provider","policyEngine","output","has","ATTRIBUTES","evaluate","preEvaluate","status","e","get","getOne","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/permission/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PermissionAPICheckResponse } from '@authup/core-http-kit';\nimport type { IPermissionProvider, PermissionEvaluationContext } from '@authup/access';\nimport {\n    BuiltInPolicyType,\n    PermissionEvaluator, \n    PolicyData,\n} from '@authup/access';\nimport {\n    DBody, \n    DController, \n    DDelete, \n    DGet, \n    DPath, \n    DPost, \n    DPut, \n    DRequest, \n    DResponse, \n    DTags,\n} from '@routup/decorators';\nimport { isUUID } from '@authup/kit';\nimport { NotFoundError } from '@ebec/http';\nimport {\n    send, \n    sendAccepted, \n    sendCreated, \n    useRequestParam,\n} from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n \n    IIdentityPermissionProvider, \n    IPermissionRepository, \n    IPermissionService, \n    IRealmRepository, \n} from '../../../../../core/index.ts';\nimport { PolicyEngine } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n    useRequestIdentity,\n} from '../../../request/index.ts';\n\nexport type PermissionControllerContext = {\n    service: IPermissionService,\n    repository: IPermissionRepository,\n    realmRepository: IRealmRepository,\n    identityPermissionProvider: IIdentityPermissionProvider,\n    permissionProvider: IPermissionProvider,\n};\n\n@DTags('permission')\n@DController('/permissions')\nexport class PermissionController {\n    protected service: IPermissionService;\n\n    protected repository: IPermissionRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    protected permissionProvider: IPermissionProvider;\n\n    constructor(ctx: PermissionControllerContext) {\n        this.service = ctx.service;\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n        this.permissionProvider = ctx.permissionProvider;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const {\n            data, \n            meta, \n        } = await this.service.getMany(useRequestQuery(req), actor);\n\n        return send(res, {\n            data,\n            meta, \n        });\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.create(data, actor);\n\n        return sendCreated(res, entity);\n    }\n\n    @DPost('/:id/check', [ForceLoggedInMiddleware])\n    async check(\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const id = useRequestParam(req, 'id');\n\n        let criteria: Record<string, any>;\n        if (isUUID(id)) {\n            criteria = { id };\n        } else {\n            const realm = await this.realmRepository.resolve(useRequestParam(req, 'realmId'));\n            criteria = {\n                name: id,\n                ...(realm ? { realm_id: realm.id } : {}),\n            };\n        }\n\n        const entity = await this.repository.findOneBy(criteria);\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (typeof data[BuiltInPolicyType.IDENTITY] === 'undefined') {\n            data[BuiltInPolicyType.IDENTITY] = useRequestIdentity(req);\n        }\n\n        const ctx: PermissionEvaluationContext = {\n            name: entity.name,\n            input: new PolicyData(data),\n        };\n\n        const permissionEvaluator = new PermissionEvaluator({\n            provider: this.permissionProvider,\n            policyEngine: new PolicyEngine(this.identityPermissionProvider),\n        });\n\n        let output: PermissionAPICheckResponse;\n        try {\n            if (\n                ctx.input &&\n                ctx.input.has(BuiltInPolicyType.ATTRIBUTES)\n            ) {\n                await permissionEvaluator.evaluate(ctx);\n            } else {\n                await permissionEvaluator.preEvaluate(ctx);\n            }\n\n            output = { status: 'success' };\n        } catch (e) {\n            output = {\n                status: 'error',\n                data: e as Error,\n            };\n        }\n\n        return sendAccepted(res, output);\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async get(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.getOne(\n            id,\n            actor,\n            useRequestParam(req, 'realmId'),\n        );\n\n        return send(res, entity);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        return sendAccepted(res, entity);\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const {\n            entity, \n            created, \n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        if (created) {\n            return sendCreated(res, entity);\n        }\n\n        return sendAccepted(res, entity);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.delete(id, actor);\n\n        return sendAccepted(res, entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAsDD,IAAawB,uBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAAkC;AAC1C,OAAKL,UAAUK,IAAIL;AACnB,OAAKC,aAAaI,IAAIJ;AACtB,OAAKC,kBAAkBG,IAAIH;AAC3B,OAAKC,6BAA6BE,IAAIF;AACtC,OAAKC,qBAAqBC,IAAID;;CAGlC,MACME,QACF,KACA,KACY;EACZ,MAAMG,QAAQZ,kBAAkBU,IAAAA;EAChC,MAAM,EACFG,MACAC,SACA,MAAM,KAAKX,QAAQM,QAAQZ,gBAAgBa,IAAAA,EAAME,MAAAA;AAErD,SAAOnB,KAAKkB,KAAK;GACbE;GACAC;GACJ,CAAA;;CAGJ,MACMC,IACF,MACA,KACA,KACY;EACZ,MAAMH,QAAQZ,kBAAkBU,IAAAA;AAGhC,SAAOf,YAAYgB,KAAKK,MAFH,KAAKb,QAAQc,OAAOJ,MAAMD,MAAAA,CAEvBI;;CAG5B,MACME,MACF,MACA,KACA,KACY;EACZ,MAAMC,KAAKvB,gBAAgBc,KAAK,KAAA;EAEhC,IAAIU;AACJ,MAAI7B,OAAO4B,GAAAA,CACPC,YAAW,EAAED,IAAG;OACb;GACH,MAAME,QAAQ,MAAM,KAAKhB,gBAAgBiB,QAAQ1B,gBAAgBc,KAAK,UAAA,CAAA;AACtEU,cAAW;IACPG,MAAMJ;IACN,GAAIE,QAAQ,EAAEG,UAAUH,MAAMF,IAAG,GAAI,EAAE;IAC3C;;EAGJ,MAAMH,SAAS,MAAM,KAAKZ,WAAWqB,UAAUL,SAAAA;AAC/C,MAAI,CAACJ,OACD,OAAM,IAAIxB,eAAAA;AAGd,MAAI,OAAOqB,KAAKnC,kBAAkBgD,cAAc,YAC5Cb,MAAKnC,kBAAkBgD,YAAYzB,mBAAmBS,IAAAA;EAG1D,MAAMF,MAAmC;GACrCe,MAAMP,OAAOO;GACbI,OAAO,IAAI/C,WAAWiC,KAAAA;GAC1B;EAEA,MAAMe,sBAAsB,IAAIjD,oBAAoB;GAChDkD,UAAU,KAAKtB;GACfuB,cAAc,IAAIhC,eAAa,KAAKQ,2BAA0B;GAClE,CAAA;EAEA,IAAIyB;AACJ,MAAI;AACA,OACIvB,IAAImB,SACJnB,IAAImB,MAAMK,IAAItD,kBAAkBuD,WAAU,CAE1C,OAAML,oBAAoBM,SAAS1B,IAAAA;OAEnC,OAAMoB,oBAAoBO,YAAY3B,IAAAA;AAG1CuB,YAAS,EAAEK,QAAQ,WAAU;WACxBC,GAAG;AACRN,YAAS;IACLK,QAAQ;IACRvB,MAAMwB;IACV;;AAGJ,SAAO3C,aAAaiB,KAAKoB,OAAAA;;CAG7B,MACMO,IACF,IACA,KACA,KACY;EACZ,MAAM1B,QAAQZ,kBAAkBU,IAAAA;AAOhC,SAAOjB,KAAKkB,KAAKK,MANI,KAAKb,QAAQoC,OAC9BpB,IACAP,OACAhB,gBAAgBc,KAAK,UAAA,CAAA,CAGRM;;CAGrB,MACMwB,KACF,IACA,MACA,KACA,KACY;EACZ,MAAM5B,QAAQZ,kBAAkBU,IAAAA;AAOhC,SAAOhB,aAAaiB,KAAKK,MANJ,KAAKb,QAAQsC,OAC9BtB,IACAN,MACAD,MAAAA,CAGqBI;;CAG7B,MACM0B,IACF,IACA,MACA,KACA,KACY;EACZ,MAAM9B,QAAQZ,kBAAkBU,IAAAA;EAChC,MAAM,EACFM,QACA2B,YACA,MAAM,KAAKxC,QAAQyC,KACnBzB,MAAM0B,KAAAA,GACNhC,MACAD,MAAAA;AAGJ,MAAI+B,QACA,QAAOhD,YAAYgB,KAAKK,OAAAA;AAG5B,SAAOtB,aAAaiB,KAAKK,OAAAA;;CAG7B,MACM8B,KACF,IACA,KACA,KACY;EACZ,MAAMlC,QAAQZ,kBAAkBU,IAAAA;AAGhC,SAAOhB,aAAaiB,KAAKK,MAFJ,KAAKb,QAAQ4C,OAAO5B,IAAIP,MAAAA,CAEpBI;;;;WA3JlBjB,wBAAAA,CAAAA;;;;;;;;YAiBCA,wBAAAA,CAAAA;;;;;;;;;;;;;sBAYUA,wBAAAA,CAAAA;;;;;;;;;;;;;eA4DPA,wBAAAA,CAAAA;;;;;;;;;;;;;gBAgBCA,wBAAAA,CAAAA;;;;;;;;;;;;;;;eAiBDA,wBAAAA,CAAAA;;;;;;;;;;;;;;;kBAwBGA,wBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/permission-policy/index.mjs

@@ -0,0 +1,2 @@
+import { PermissionPolicyController } from "./module.mjs";
+export { PermissionPolicyController };

package/dist/adapters/http/controllers/entities/permission-policy/module.mjs

@@ -0,0 +1,105 @@
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import "../../../middleware/index.mjs";
+import { send, sendAccepted, sendCreated } from "routup";
+import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DController, DDelete, DGet, DPath, DPost, DRequest, DResponse, DTags } from "@routup/decorators";
+//#region src/adapters/http/controllers/entities/permission-policy/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var PermissionPolicyController = class {
+	service;
+	constructor(ctx) {
+		this.service = ctx.service;
+	}
+	async getMany(req, res) {
+		const actor = buildActorContext(req);
+		const { data, meta } = await this.service.getMany(useRequestQuery(req), actor);
+		return send(res, {
+			data,
+			meta
+		});
+	}
+	async add(data, req, res) {
+		const actor = buildActorContext(req);
+		return sendCreated(res, await this.service.create(data, actor));
+	}
+	async getOne(id, req, res) {
+		const actor = buildActorContext(req);
+		return send(res, await this.service.getOne(id, actor));
+	}
+	async drop(id, req, res) {
+		const actor = buildActorContext(req);
+		return sendAccepted(res, await this.service.delete(id, actor));
+	}
+};
+_ts_decorate([
+	DGet("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DRequest()),
+	_ts_param(1, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionPolicyController.prototype, "getMany", null);
+_ts_decorate([
+	DPost("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionPolicyController.prototype, "add", null);
+_ts_decorate([
+	DGet("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionPolicyController.prototype, "getOne", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PermissionPolicyController.prototype, "drop", null);
+PermissionPolicyController = _ts_decorate([
+	DTags("permission"),
+	DController("/permission-policies"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof PermissionPolicyControllerContext === "undefined" ? Object : PermissionPolicyControllerContext])
+], PermissionPolicyController);
+//#endregion
+export { PermissionPolicyController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/permission-policy/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DBody","DController","DDelete","DGet","DPath","DPost","DRequest","DResponse","DTags","send","sendAccepted","sendCreated","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","PermissionPolicyController","service","ctx","getMany","req","res","actor","data","meta","add","entity","create","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/permission-policy/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody, \n    DController, \n    DDelete, \n    DGet, \n    DPath, \n    DPost, \n    DRequest, \n    DResponse, \n    DTags,\n} from '@routup/decorators';\nimport { send, sendAccepted, sendCreated } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { IPermissionPolicyService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type PermissionPolicyControllerContext = {\n    service: IPermissionPolicyService,\n};\n\n@DTags('permission')\n@DController('/permission-policies')\nexport class PermissionPolicyController {\n    protected service: IPermissionPolicyService;\n\n    constructor(ctx: PermissionPolicyControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const {\n            data, \n            meta, \n        } = await this.service.getMany(useRequestQuery(req), actor);\n\n        return send(res, {\n            data,\n            meta, \n        });\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n\n        const entity = await this.service.create(data, actor);\n\n        return sendCreated(res, entity);\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.getOne(id, actor);\n\n        return send(res, entity);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.delete(id, actor);\n\n        return sendAccepted(res, entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA8BA,IAAae,6BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAwC;AAChD,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,KACA,KACY;EACZ,MAAMG,QAAQP,kBAAkBK,IAAAA;EAChC,MAAM,EACFG,MACAC,SACA,MAAM,KAAKP,QAAQE,QAAQN,gBAAgBO,IAAAA,EAAME,MAAAA;AAErD,SAAOZ,KAAKW,KAAK;GACbE;GACAC;GACJ,CAAA;;CAGJ,MACMC,IACF,MACA,KACA,KACY;EACZ,MAAMH,QAAQP,kBAAkBK,IAAAA;AAIhC,SAAOR,YAAYS,KAAKK,MAFH,KAAKT,QAAQU,OAAOJ,MAAMD,MAAAA,CAEvBI;;CAG5B,MACME,OACF,IACA,KACA,KACY;EACZ,MAAMN,QAAQP,kBAAkBK,IAAAA;AAGhC,SAAOV,KAAKW,KAAKK,MAFI,KAAKT,QAAQW,OAAOC,IAAIP,MAAAA,CAE5BI;;CAGrB,MACMI,KACF,IACA,KACA,KACY;EACZ,MAAMR,QAAQP,kBAAkBK,IAAAA;AAGhC,SAAOT,aAAaU,KAAKK,MAFJ,KAAKT,QAAQc,OAAOF,IAAIP,MAAAA,CAEpBI;;;;WAnDlBZ,wBAAAA,CAAAA;;;;;;;;YAiBCA,wBAAAA,CAAAA;;;;;;;;;;;;;eAaGA,wBAAAA,CAAAA;;;;;;;;;;;;;kBAYGA,wBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/policy/index.mjs

@@ -0,0 +1,5 @@
+import { PolicyController } from "./module.mjs";
+import { PolicyAttributesValidator } from "./utils/attributes-validator.mjs";
+import { PolicyValidator } from "./utils/validation.mjs";
+import "./utils/index.mjs";
+export { PolicyAttributesValidator, PolicyController, PolicyValidator };

package/dist/adapters/http/controllers/entities/policy/module.mjs

@@ -0,0 +1,216 @@
+import { PolicyEngine as PolicyEngine$1 } from "../../../../../core/security/policy/engine.mjs";
+import "../../../../../core/index.mjs";
+import { useRequestIdentity } from "../../../request/helpers/identity.mjs";
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import "../../../middleware/index.mjs";
+import { BuiltInPolicyType, PolicyData, definePolicyEvaluationContext } from "@authup/access";
+import { isUUID } from "@authup/kit";
+import { NotFoundError } from "@ebec/http";
+import { send, sendAccepted, sendCreated, useRequestParam } from "routup";
+import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DController, DDelete, DGet, DPath, DPost, DPut, DRequest, DResponse, DTags } from "@routup/decorators";
+//#region src/adapters/http/controllers/entities/policy/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var PolicyController = class {
+	service;
+	repository;
+	realmRepository;
+	identityPermissionProvider;
+	constructor(ctx) {
+		this.service = ctx.service;
+		this.repository = ctx.repository;
+		this.realmRepository = ctx.realmRepository;
+		this.identityPermissionProvider = ctx.identityPermissionProvider;
+	}
+	async getMany(req, res) {
+		const actor = buildActorContext(req);
+		const { data, meta } = await this.service.getMany(useRequestQuery(req), actor);
+		return send(res, {
+			data,
+			meta
+		});
+	}
+	async getOneExpanded(id, req, res) {
+		return this.getOne(id, req, res, { expanded: true });
+	}
+	async getOne(id, req, res, options = {}) {
+		const actor = buildActorContext(req);
+		return send(res, await this.service.getOne(id, actor, useRequestParam(req, "realmId")));
+	}
+	async check(id, data, req, res) {
+		const paramId = useRequestParam(req, "id");
+		let criteria;
+		if (isUUID(paramId)) criteria = { id: paramId };
+		else {
+			const realm = await this.realmRepository.resolve(useRequestParam(req, "realmId"));
+			criteria = {
+				name: paramId,
+				...realm ? { realm_id: realm.id } : {}
+			};
+		}
+		const entity = await this.repository.findOneBy(criteria);
+		if (!entity) throw new NotFoundError();
+		if (!data[BuiltInPolicyType.IDENTITY] && data[BuiltInPolicyType.IDENTITY] !== null) data[BuiltInPolicyType.IDENTITY] = useRequestIdentity(req);
+		const policyEngine = new PolicyEngine$1(this.identityPermissionProvider);
+		let output;
+		try {
+			await policyEngine.evaluate(entity, definePolicyEvaluationContext({ data: new PolicyData(data) }));
+			output = { status: "success" };
+		} catch (e) {
+			output = {
+				status: "error",
+				data: e
+			};
+		}
+		return sendAccepted(res, output);
+	}
+	async update(id, data, req, res) {
+		const actor = buildActorContext(req);
+		return sendAccepted(res, await this.service.update(id, data, actor));
+	}
+	async replace(id, data, req, res) {
+		const actor = buildActorContext(req);
+		const { entity, created } = await this.service.save(id || void 0, data, actor);
+		if (created) return sendCreated(res, entity);
+		return sendAccepted(res, entity);
+	}
+	async drop(id, req, res) {
+		const actor = buildActorContext(req);
+		return sendAccepted(res, await this.service.delete(id, actor));
+	}
+	async create(data, req, res) {
+		const actor = buildActorContext(req);
+		return sendCreated(res, await this.service.create(data, actor));
+	}
+};
+_ts_decorate([
+	DGet("", []),
+	_ts_param(0, DRequest()),
+	_ts_param(1, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "getMany", null);
+_ts_decorate([
+	DGet("/:id/expanded", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "getOneExpanded", null);
+_ts_decorate([
+	DGet("/:id", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "getOne", null);
+_ts_decorate([
+	DPost("/:id/check", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DRequest()),
+	_ts_param(3, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "check", null);
+_ts_decorate([
+	DPost("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DRequest()),
+	_ts_param(3, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "update", null);
+_ts_decorate([
+	DPut("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DRequest()),
+	_ts_param(3, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "replace", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "drop", null);
+_ts_decorate([
+	DPost("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		Object,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "create", null);
+PolicyController = _ts_decorate([
+	DTags("policy"),
+	DController("/policies"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof PolicyControllerContext === "undefined" ? Object : PolicyControllerContext])
+], PolicyController);
+//#endregion
+export { PolicyController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/policy/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["BuiltInPolicyType","PolicyData","definePolicyEvaluationContext","isUUID","NotFoundError","DBody","DController","DDelete","DGet","DPath","DPost","DPut","DRequest","DResponse","DTags","useRequestQuery","send","sendAccepted","sendCreated","useRequestParam","PolicyEngine","ForceLoggedInMiddleware","buildActorContext","useRequestIdentity","PolicyController","service","repository","realmRepository","identityPermissionProvider","ctx","getMany","req","res","actor","data","meta","getOneExpanded","id","getOne","expanded","options","entity","check","paramId","criteria","realm","resolve","name","realm_id","findOneBy","IDENTITY","policyEngine","output","evaluate","status","e","update","replace","created","save","undefined","drop","delete","create"],"sources":["../../../../../../src/adapters/http/controllers/entities/policy/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyAPICheckResponse } from '@authup/core-http-kit';\nimport { BuiltInPolicyType, PolicyData, definePolicyEvaluationContext } from '@authup/access';\nimport { isUUID } from '@authup/kit';\nimport { NotFoundError } from '@ebec/http';\nimport {\n    DBody, \n    DController, \n    DDelete, \n    DGet, \n    DPath, \n    DPost, \n    DPut, \n    DRequest, \n    DResponse, \n    DTags,\n} from '@routup/decorators';\nimport { useRequestQuery } from '@routup/basic/query';\nimport {\n    send, \n    sendAccepted, \n    sendCreated, \n    useRequestParam,\n} from 'routup';\nimport type {\n \n    IIdentityPermissionProvider, \n    IPolicyRepository, \n    IPolicyService, \n    IRealmRepository, \n} from '../../../../../core/index.ts';\nimport { PolicyEngine } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n    useRequestIdentity,\n} from '../../../request/index.ts';\n\nexport type PolicyControllerContext = {\n    service: IPolicyService,\n    repository: IPolicyRepository,\n    realmRepository: IRealmRepository,\n    identityPermissionProvider: IIdentityPermissionProvider,\n};\n\n@DTags('policy')\n@DController('/policies')\nexport class PolicyController {\n    protected service: IPolicyService;\n\n    protected repository: IPolicyRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    constructor(ctx: PolicyControllerContext) {\n        this.service = ctx.service;\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n    }\n\n    @DGet('', [])\n    async getMany(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const {\n            data, \n            meta, \n        } = await this.service.getMany(useRequestQuery(req), actor);\n\n        return send(res, {\n            data,\n            meta, \n        });\n    }\n\n    @DGet('/:id/expanded', [])\n    async getOneExpanded(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        return this.getOne(id, req, res, { expanded: true });\n    }\n\n    @DGet('/:id', [])\n    async getOne(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n        // eslint-disable-next-line @typescript-eslint/no-unused-vars\n        options: { expanded?: boolean } = {},\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.getOne(\n            id,\n            actor,\n            useRequestParam(req, 'realmId'),\n        );\n\n        return send(res, entity);\n    }\n\n    @DPost('/:id/check', [ForceLoggedInMiddleware])\n    async check(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const paramId = useRequestParam(req, 'id');\n\n        let criteria: Record<string, any>;\n        if (isUUID(paramId)) {\n            criteria = { id: paramId };\n        } else {\n            const realm = await this.realmRepository.resolve(useRequestParam(req, 'realmId'));\n            criteria = {\n                name: paramId,\n                ...(realm ? { realm_id: realm.id } : {}),\n            };\n        }\n\n        const entity = await this.repository.findOneBy(criteria);\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (\n            !data[BuiltInPolicyType.IDENTITY] &&\n            data[BuiltInPolicyType.IDENTITY] !== null\n        ) {\n            data[BuiltInPolicyType.IDENTITY] = useRequestIdentity(req);\n        }\n\n        const policyEngine = new PolicyEngine(this.identityPermissionProvider);\n\n        let output: PolicyAPICheckResponse;\n        try {\n            await policyEngine.evaluate(entity, definePolicyEvaluationContext({ data: new PolicyData(data) }));\n\n            output = { status: 'success' };\n        } catch (e) {\n            output = {\n                status: 'error',\n                data: e as Error,\n            };\n        }\n\n        return sendAccepted(res, output);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async update(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        return sendAccepted(res, entity);\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async replace(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n\n        const {\n            entity, \n            created, \n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        if (created) {\n            return sendCreated(res, entity);\n        }\n\n        return sendAccepted(res, entity);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.delete(id, actor);\n\n        return sendAccepted(res, entity);\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async create(\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.create(data, actor);\n\n        return sendCreated(res, entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAgDD,IAAawB,mBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA8B;AACtC,OAAKJ,UAAUI,IAAIJ;AACnB,OAAKC,aAAaG,IAAIH;AACtB,OAAKC,kBAAkBE,IAAIF;AAC3B,OAAKC,6BAA6BC,IAAID;;CAG1C,MACME,QACF,KACA,KACY;EACZ,MAAMG,QAAQX,kBAAkBS,IAAAA;EAChC,MAAM,EACFG,MACAC,SACA,MAAM,KAAKV,QAAQK,QAAQf,gBAAgBgB,IAAAA,EAAME,MAAAA;AAErD,SAAOjB,KAAKgB,KAAK;GACbE;GACAC;GACJ,CAAA;;CAGJ,MACMC,eACF,IACA,KACA,KACY;AACZ,SAAO,KAAKE,OAAOD,IAAIN,KAAKC,KAAK,EAAEO,UAAU,MAAK,CAAA;;CAGtD,MACMD,OACF,IACA,KACA,KAEAE,UAAkC,EAAE,EACxB;EACZ,MAAMP,QAAQX,kBAAkBS,IAAAA;AAOhC,SAAOf,KAAKgB,KAAKS,MANI,KAAKhB,QAAQa,OAC9BD,IACAJ,OACAd,gBAAgBY,KAAK,UAAA,CAAA,CAGRU;;CAGrB,MACMC,MACF,IACA,MACA,KACA,KACY;EACZ,MAAMC,UAAUxB,gBAAgBY,KAAK,KAAA;EAErC,IAAIa;AACJ,MAAIzC,OAAOwC,QAAAA,CACPC,YAAW,EAAEP,IAAIM,SAAQ;OACtB;GACH,MAAME,QAAQ,MAAM,KAAKlB,gBAAgBmB,QAAQ3B,gBAAgBY,KAAK,UAAA,CAAA;AACtEa,cAAW;IACPG,MAAMJ;IACN,GAAIE,QAAQ,EAAEG,UAAUH,MAAMR,IAAG,GAAI,EAAE;IAC3C;;EAGJ,MAAMI,SAAS,MAAM,KAAKf,WAAWuB,UAAUL,SAAAA;AAC/C,MAAI,CAACH,OACD,OAAM,IAAIrC,eAAAA;AAGd,MACI,CAAC8B,KAAKlC,kBAAkBkD,aACxBhB,KAAKlC,kBAAkBkD,cAAc,KAErChB,MAAKlC,kBAAkBkD,YAAY3B,mBAAmBQ,IAAAA;EAG1D,MAAMoB,eAAe,IAAI/B,eAAa,KAAKQ,2BAA0B;EAErE,IAAIwB;AACJ,MAAI;AACA,SAAMD,aAAaE,SAASZ,QAAQvC,8BAA8B,EAAEgC,MAAM,IAAIjC,WAAWiC,KAAAA,EAAM,CAAA,CAAA;AAE/FkB,YAAS,EAAEE,QAAQ,WAAU;WACxBC,GAAG;AACRH,YAAS;IACLE,QAAQ;IACRpB,MAAMqB;IACV;;AAGJ,SAAOtC,aAAae,KAAKoB,OAAAA;;CAG7B,MACMI,OACF,IACA,MACA,KACA,KACY;EACZ,MAAMvB,QAAQX,kBAAkBS,IAAAA;AAOhC,SAAOd,aAAae,KAAKS,MANJ,KAAKhB,QAAQ+B,OAC9BnB,IACAH,MACAD,MAAAA,CAGqBQ;;CAG7B,MACMgB,QACF,IACA,MACA,KACA,KACY;EACZ,MAAMxB,QAAQX,kBAAkBS,IAAAA;EAEhC,MAAM,EACFU,QACAiB,YACA,MAAM,KAAKjC,QAAQkC,KACnBtB,MAAMuB,KAAAA,GACN1B,MACAD,MAAAA;AAGJ,MAAIyB,QACA,QAAOxC,YAAYc,KAAKS,OAAAA;AAG5B,SAAOxB,aAAae,KAAKS,OAAAA;;CAG7B,MACMoB,KACF,IACA,KACA,KACY;EACZ,MAAM5B,QAAQX,kBAAkBS,IAAAA;AAGhC,SAAOd,aAAae,KAAKS,MAFJ,KAAKhB,QAAQqC,OAAOzB,IAAIJ,MAAAA,CAEpBQ;;CAG7B,MACMsB,OACF,MACA,KACA,KACY;EACZ,MAAM9B,QAAQX,kBAAkBS,IAAAA;AAGhC,SAAOb,YAAYc,KAAKS,MAFH,KAAKhB,QAAQsC,OAAO7B,MAAMD,MAAAA,CAEvBQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAhHNpB,wBAAAA,CAAAA;;;;;;;;;;;;;;;gBAiDNA,wBAAAA,CAAAA;;;;;;;;;;;;;;;eAiBDA,wBAAAA,CAAAA;;;;;;;;;;;;;;;kBAyBGA,wBAAAA,CAAAA;;;;;;;;;;;;;YAYNA,wBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/policy/utils/attributes-validator.mjs

@@ -0,0 +1,42 @@
+import { AttributeNamesPolicyValidator, AttributesPolicyValidator, BuiltInPolicyType, DatePolicyValidator, TimePolicyValidator } from "@authup/access";
+import { omitRecord } from "@authup/kit";
+import { Container } from "validup";
+//#region src/adapters/http/controllers/entities/policy/utils/attributes-validator.ts
+var PolicyAttributesValidator = class extends Container {
+	attributeNames;
+	attributesOptionsValidator;
+	attributeNamesOptionsValidator;
+	dateOptionsValidator;
+	timeOptionsValidator;
+	constructor(options) {
+		super(options);
+		this.attributeNames = options.attributeNames || [];
+		this.attributesOptionsValidator = new AttributesPolicyValidator();
+		this.attributeNamesOptionsValidator = new AttributeNamesPolicyValidator();
+		this.dateOptionsValidator = new DatePolicyValidator();
+		this.timeOptionsValidator = new TimePolicyValidator();
+	}
+	async run(data) {
+		let attributes = {};
+		switch (data.type) {
+			case BuiltInPolicyType.ATTRIBUTES:
+				attributes = await this.attributesOptionsValidator.run(data);
+				break;
+			case BuiltInPolicyType.ATTRIBUTE_NAMES:
+				attributes = await this.attributeNamesOptionsValidator.run(data);
+				break;
+			case BuiltInPolicyType.DATE:
+				attributes = await this.dateOptionsValidator.run(data);
+				break;
+			case BuiltInPolicyType.TIME:
+				attributes = await this.timeOptionsValidator.run(data);
+				break;
+			default: if (typeof this.attributeNames !== "undefined") attributes = omitRecord(data, this.attributeNames);
+		}
+		return attributes;
+	}
+};
+//#endregion
+export { PolicyAttributesValidator };
+
+//# sourceMappingURL=attributes-validator.mjs.map

package/dist/adapters/http/controllers/entities/policy/utils/attributes-validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"attributes-validator.mjs","names":["AttributeNamesPolicyValidator","AttributesPolicyValidator","BuiltInPolicyType","DatePolicyValidator","TimePolicyValidator","omitRecord","Container","PolicyAttributesValidator","attributeNames","attributesOptionsValidator","attributeNamesOptionsValidator","dateOptionsValidator","timeOptionsValidator","options","run","data","attributes","type","ATTRIBUTES","ATTRIBUTE_NAMES","DATE","TIME"],"sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/attributes-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AttributeNamesPolicyValidator,\n    AttributesPolicyValidator,\n    BuiltInPolicyType,\n    DatePolicyValidator,\n    TimePolicyValidator,\n} from '@authup/access';\nimport { omitRecord } from '@authup/kit';\nimport type { ContainerOptions } from 'validup';\nimport { Container } from 'validup';\n\ntype PolicyContainerRunOptions<T> = ContainerOptions<T> & {\n    attributeNames?: string[]\n};\n\nexport class PolicyAttributesValidator extends Container<Record<string, any>> {\n    protected attributeNames : string[];\n\n    protected attributesOptionsValidator : AttributesPolicyValidator;\n\n    protected attributeNamesOptionsValidator : AttributeNamesPolicyValidator;\n\n    protected dateOptionsValidator : DatePolicyValidator;\n\n    protected timeOptionsValidator : TimePolicyValidator;\n\n    constructor(options: PolicyContainerRunOptions<Record<string, any>>) {\n        super(options);\n\n        this.attributeNames = options.attributeNames || [];\n\n        this.attributesOptionsValidator = new AttributesPolicyValidator();\n        this.attributeNamesOptionsValidator = new AttributeNamesPolicyValidator();\n        this.dateOptionsValidator = new DatePolicyValidator();\n        this.timeOptionsValidator = new TimePolicyValidator();\n    }\n\n    override async run(\n        data: Record<string, any>,\n    ) : Promise<Record<string, any>> {\n        let attributes : Record<string, any> = {};\n\n        switch (data.type) {\n            case BuiltInPolicyType.ATTRIBUTES: {\n                attributes = await this.attributesOptionsValidator.run(data);\n                break;\n            }\n            case BuiltInPolicyType.ATTRIBUTE_NAMES: {\n                attributes = await this.attributeNamesOptionsValidator.run(data);\n                break;\n            }\n            case BuiltInPolicyType.DATE: {\n                attributes = await this.dateOptionsValidator.run(data);\n                break;\n            }\n            case BuiltInPolicyType.TIME: {\n                attributes = await this.timeOptionsValidator.run(data);\n                break;\n            }\n            default: {\n                if (typeof this.attributeNames !== 'undefined') {\n                    attributes = omitRecord(data, this.attributeNames);\n                    // todo: maybe limit attributes size\n                }\n            }\n        }\n\n        return attributes;\n    }\n}\n"],"mappings":";;;;AAsBA,IAAaO,4BAAb,cAA+CD,UAAAA;CACjCE;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,SAAyD;AACjE,QAAMA,QAAAA;AAEN,OAAKL,iBAAiBK,QAAQL,kBAAkB,EAAE;AAElD,OAAKC,6BAA6B,IAAIR,2BAAAA;AACtC,OAAKS,iCAAiC,IAAIV,+BAAAA;AAC1C,OAAKW,uBAAuB,IAAIR,qBAAAA;AAChC,OAAKS,uBAAuB,IAAIR,qBAAAA;;CAGpC,MAAeU,IACXC,MAC6B;EAC7B,IAAIC,aAAmC,EAAC;AAExC,UAAQD,KAAKE,MAAb;GACI,KAAKf,kBAAkBgB;AACnBF,iBAAa,MAAM,KAAKP,2BAA2BK,IAAIC,KAAAA;AACvD;GAEJ,KAAKb,kBAAkBiB;AACnBH,iBAAa,MAAM,KAAKN,+BAA+BI,IAAIC,KAAAA;AAC3D;GAEJ,KAAKb,kBAAkBkB;AACnBJ,iBAAa,MAAM,KAAKL,qBAAqBG,IAAIC,KAAAA;AACjD;GAEJ,KAAKb,kBAAkBmB;AACnBL,iBAAa,MAAM,KAAKJ,qBAAqBE,IAAIC,KAAAA;AACjD;GAEJ,QACI,KAAI,OAAO,KAAKP,mBAAmB,YAC/BQ,cAAaX,WAAWU,MAAM,KAAKP,eAAc;;AAM7D,SAAOQ"}

package/dist/adapters/http/controllers/entities/policy/utils/index.mjs

@@ -0,0 +1,3 @@
+import { PolicyAttributesValidator } from "./attributes-validator.mjs";
+import { PolicyValidator } from "./validation.mjs";
+export { PolicyAttributesValidator, PolicyValidator };