@axinom/mosaic-id-guard 0.9.2-rc.3 → 0.10.0

package/CHANGELOG.md

@@ -3,6 +3,27 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [0.10.0](https://dev.azure.com/axinom/CMS/_git/Navy/branchCompare?baseVersion=GT@axinom/mosaic-id-guard@0.9.1&targetVersion=GT@axinom/mosaic-id-guard@0.10.0) (2021-12-09)
+
+
+### Features
+
+* add new functions to jwt tokens ([80f68a6](https://dev.azure.com/axinom/CMS/_git/Navy/commit/80f68a64fc14108bc2feb4426573069cf31dcce4))
+* change permission definition folder path ([1ea44e0](https://dev.azure.com/axinom/CMS/_git/Navy/commit/1ea44e0bb3bffe3df06ca511cb23df9b2b0fcbe3))
+* fixed failed test cases ([def2783](https://dev.azure.com/axinom/CMS/_git/Navy/commit/def2783dbf0d07d7fa1cb43e2176dd376f95c57f))
+* fixed PR commits ([a271b5c](https://dev.azure.com/axinom/CMS/_git/Navy/commit/a271b5ccb9dec8368a47932fa90d1f3fd07b449e))
+* permission structure v2 changes all ([4ddff67](https://dev.azure.com/axinom/CMS/_git/Navy/commit/4ddff677d8a9d5f39a3cd15dc608d1fc4f06d419))
+* permission structure v2 implement for api ([2db1f7c](https://dev.azure.com/axinom/CMS/_git/Navy/commit/2db1f7c90ae05786eaed49399ee943ef8687ff55))
+* refactor permission table new columns ([9faa385](https://dev.azure.com/axinom/CMS/_git/Navy/commit/9faa3850035b6d62af9e65737b61931d570820c6))
+* rename permission name in id service ([afa16b4](https://dev.azure.com/axinom/CMS/_git/Navy/commit/afa16b4d527532e7f72f30be3bae9dd2f1f6c700))
+
+
+### Bug Fixes
+
+* log improvements to id-guard ([a2d0290](https://dev.azure.com/axinom/CMS/_git/Navy/commit/a2d0290fae8ff8ec80f40430b22dc8262158ec9e))
+
+
+
 ### [0.9.1](https://dev.azure.com/axinom/CMS/_git/Navy/branchCompare?baseVersion=GT@axinom/mosaic-id-guard@0.9.0&targetVersion=GT@axinom/mosaic-id-guard@0.9.1) (2021-11-24)
 
 

package/dist/common/guard-utils.d.ts

@@ -1,4 +1,4 @@
-import { IOperationsToPermissionMappings } from '@axinom/mosaic-id-utils';
+import { PermissionDefinition } from '@axinom/mosaic-id-utils';
 import { AuthenticatedManagementSubject } from '.';
 import { AxGuardErrorInfo } from './guard-error';
 /**
@@ -14,9 +14,9 @@ export interface GqlAuthorizationOptions {
      */
     serviceId: string;
     /**
-     * Mapping of GraphQL operations to permissions that each service defines.
+     * The permission definition contains a list of permissions and optionally, mappings of GQL operations to those permissions.
      */
-    permissionMappings: IOperationsToPermissionMappings;
+    permissionDefinition: PermissionDefinition;
 }
 export interface AxGuardOptions {
     /**

package/dist/common/guard-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard-utils.d.ts","sourceRoot":"","sources":["../../src/common/guard-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,+BAA+B,EAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,GAAG,CAAC;AAEnD,OAAO,EAAgB,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,kBAAkB,EAAE,+BAA+B,CAAC;CACrD;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,wBAAwB,EAAE,OAAO,CAAC;IAElC;;OAEG;IACH,oBAAoB,EAAE,uBAAuB,CAAC;CAC/C;AAED,eAAO,MAAM,gBAAgB,SACrB,8BAA8B,GAAG,SAAS,WACvC,uBAAuB,aACrB,gBAAgB,GAAG,SAAS,KACtC,OA8CF,CAAC"}
+{"version":3,"file":"guard-utils.d.ts","sourceRoot":"","sources":["../../src/common/guard-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,GAAG,CAAC;AAEnD,OAAO,EAAgB,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,wBAAwB,EAAE,OAAO,CAAC;IAElC;;OAEG;IACH,oBAAoB,EAAE,uBAAuB,CAAC;CAC/C;AAED,eAAO,MAAM,gBAAgB,SACrB,8BAA8B,GAAG,SAAS,WACvC,uBAAuB,aACrB,gBAAgB,GAAG,SAAS,KACtC,OAmDF,CAAC"}

package/dist/common/guard-utils.js

@@ -5,8 +5,9 @@ const mosaic_id_utils_1 = require("@axinom/mosaic-id-utils");
 const error_code_enum_1 = require("./error-code.enum");
 const guard_error_1 = require("./guard-error");
 const isUserAuthorized = (user, options, errorInfo) => {
-    const { serviceId, permissionMappings, operation } = options;
-    const isAnonymousOperation = permissionMappings.ANONYMOUS.includes(operation);
+    var _a, _b;
+    const { serviceId, permissionDefinition, operation } = options;
+    const isAnonymousOperation = (_b = (_a = permissionDefinition.gqlOptions) === null || _a === void 0 ? void 0 : _a.anonymousGqlOperations) === null || _b === void 0 ? void 0 : _b.includes(operation);
     if (isAnonymousOperation) {
         return true;
     }
@@ -35,7 +36,7 @@ const isUserAuthorized = (user, options, errorInfo) => {
     // Not authorized to use this operation
     if (user.permissions !== undefined && serviceId in user.permissions) {
         const grantedPermissions = user.permissions[serviceId];
-        const requiredPermissions = mosaic_id_utils_1.getPermissionsForOperation(operation, permissionMappings);
+        const requiredPermissions = mosaic_id_utils_1.getPermissionsForOperation(operation, permissionDefinition);
         return grantedPermissions.some((permission) => requiredPermissions.includes(permission));
     }
     // Not authorized to use this service

package/dist/common/guard-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard-utils.js","sourceRoot":"","sources":["../../src/common/guard-utils.ts"],"names":[],"mappings":";;;AAAA,6DAGiC;AAEjC,uDAA8C;AAC9C,+CAA+D;AAiCxD,MAAM,gBAAgB,GAAG,CAC9B,IAAgD,EAChD,OAAgC,EAChC,SAAuC,EAC9B,EAAE;IACX,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC7D,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAE9E,IAAI,oBAAoB,EAAE;QACxB,OAAO,IAAI,CAAC;KACb;IAED,8EAA8E;IAC9E,IAAI,SAAS,KAAK,SAAS,EAAE;QAC3B,MAAM,IAAI,0BAAY,CAAC,SAAS,CAAC,CAAC;KACnC;SAAM,IAAI,CAAC,IAAI,EAAE;QAChB,MAAM,IAAI,0BAAY,CAAC;YACrB,OAAO,EAAE,gDAAgD;YACzD,IAAI,EAAE,2BAAS,CAAC,iBAAiB;YACjC,OAAO,EAAE;gBACP,IAAI,EAAE,oJAAoJ;gBAC1J,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B;SACF,CAAC,CAAC;KACJ;IAED,6BAA6B;IAC7B,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE;QAC1C,MAAM,IAAI,0BAAY,CAAC;YACrB,OAAO,EAAE,yBAAyB;YAClC,IAAI,EAAE,2BAAS,CAAC,iBAAiB;YACjC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;SAC1C,CAAC,CAAC;KACJ;IAED,uCAAuC;IACvC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE;QACnE,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAEvD,MAAM,mBAAmB,GAAG,4CAA0B,CACpD,SAAS,EACT,kBAAkB,CACnB,CAAC;QACF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5C,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,CACzC,CAAC;KACH;IAED,qCAAqC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAlDW,QAAA,gBAAgB,oBAkD3B"}
+{"version":3,"file":"guard-utils.js","sourceRoot":"","sources":["../../src/common/guard-utils.ts"],"names":[],"mappings":";;;AAAA,6DAGiC;AAEjC,uDAA8C;AAC9C,+CAA+D;AAiCxD,MAAM,gBAAgB,GAAG,CAC9B,IAAgD,EAChD,OAAgC,EAChC,SAAuC,EAC9B,EAAE;;IACX,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE/D,MAAM,oBAAoB,GACxB,MAAA,MAAA,oBAAoB,CAAC,UAAU,0CAAE,sBAAsB,0CAAE,QAAQ,CAC/D,SAAS,CACV,CAAC;IAEJ,IAAI,oBAAoB,EAAE;QACxB,OAAO,IAAI,CAAC;KACb;IAED,8EAA8E;IAC9E,IAAI,SAAS,KAAK,SAAS,EAAE;QAC3B,MAAM,IAAI,0BAAY,CAAC,SAAS,CAAC,CAAC;KACnC;SAAM,IAAI,CAAC,IAAI,EAAE;QAChB,MAAM,IAAI,0BAAY,CAAC;YACrB,OAAO,EAAE,gDAAgD;YACzD,IAAI,EAAE,2BAAS,CAAC,iBAAiB;YACjC,OAAO,EAAE;gBACP,IAAI,EAAE,oJAAoJ;gBAC1J,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B;SACF,CAAC,CAAC;KACJ;IAED,6BAA6B;IAC7B,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE;QAC1C,MAAM,IAAI,0BAAY,CAAC;YACrB,OAAO,EAAE,yBAAyB;YAClC,IAAI,EAAE,2BAAS,CAAC,iBAAiB;YACjC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;SAC1C,CAAC,CAAC;KACJ;IAED,uCAAuC;IACvC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE;QACnE,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAEvD,MAAM,mBAAmB,GAAG,4CAA0B,CACpD,SAAS,EACT,oBAAoB,CACrB,CAAC;QAEF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5C,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,CACzC,CAAC;KACH;IAED,qCAAqC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAvDW,QAAA,gBAAgB,oBAuD3B"}

package/dist/common/parse-jwt-token.d.ts

@@ -1,4 +1,4 @@
-import { ConsumerAuthenticationContext, ManagementAuthenticationContext } from '.';
+import { AuthenticatedConsumer, AuthenticatedManagementSubject, ConsumerAuthenticationContext, ManagementAuthenticationContext } from '.';
 import { AuthenticationConfig } from './authentication-config.interface';
 /**
  * Parses a JWT token to produce an ManagementAuthenticationContext or a ConsumeAuthenticationContext with subject information and error information, if some error occurred during token processing.
@@ -7,4 +7,16 @@ import { AuthenticationConfig } from './authentication-config.interface';
  * @param authType The type of Token that's being passed. Should be either `MANAGEMENT` or `CONSUMER`.
  */
 export declare const parseJwtToken: (token: string | undefined, authConfig: string | AuthenticationConfig, authType?: "MANAGEMENT" | "CONSUMER" | undefined) => Promise<ManagementAuthenticationContext | ConsumerAuthenticationContext>;
+/**
+ *
+ * @param token The raw JWT which should be decoded
+ * @returns An object of type `AuthenticatedManagementSubject`
+ */
+export declare const decodeManagementAccessToken: (token: string) => AuthenticatedManagementSubject;
+/**
+ *
+ * @param token The raw JWT which should be decoded
+ * @returns An object of type `AuthenticatedConsumer`
+ */
+export declare const decodeConsumerAccessToken: (token: string) => AuthenticatedConsumer;
 //# sourceMappingURL=parse-jwt-token.d.ts.map

package/dist/common/parse-jwt-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse-jwt-token.d.ts","sourceRoot":"","sources":["../../src/common/parse-jwt-token.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,6BAA6B,EAK7B,+BAA+B,EAChC,MAAM,GAAG,CAAC;AACX,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAGzE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,UACjB,MAAM,GAAG,SAAS,cACb,MAAM,GAAG,oBAAoB,uDAExC,QAAQ,+BAA+B,GAAG,6BAA6B,CAiFzE,CAAC"}
+{"version":3,"file":"parse-jwt-token.d.ts","sourceRoot":"","sources":["../../src/common/parse-jwt-token.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,6BAA6B,EAK7B,+BAA+B,EAChC,MAAM,GAAG,CAAC;AACX,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAGzE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,UACjB,MAAM,GAAG,SAAS,cACb,MAAM,GAAG,oBAAoB,uDAExC,QAAQ,+BAA+B,GAAG,6BAA6B,CAkFzE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,UAC/B,MAAM,KACZ,8BAEF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,UAC7B,MAAM,KACZ,qBAEF,CAAC"}

package/dist/common/parse-jwt-token.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseJwtToken = void 0;
+exports.decodeConsumerAccessToken = exports.decodeManagementAccessToken = exports.parseJwtToken = void 0;
+const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
 const fs = require("fs");
 const jwt = require("jsonwebtoken");
 const jwks = require("jwks-rsa");
@@ -48,6 +49,7 @@ const parseJwtToken = async (token, authConfig, authType) => {
         }
     }
     catch (err) {
+        mosaic_service_common_1.assertError(err);
         if (err instanceof jwt.TokenExpiredError) {
             code = _1.ErrorCode.AccessTokenExpired;
             message = 'Access Token is expired';
@@ -91,4 +93,22 @@ const parseJwtToken = async (token, authConfig, authType) => {
     }
 };
 exports.parseJwtToken = parseJwtToken;
+/**
+ *
+ * @param token The raw JWT which should be decoded
+ * @returns An object of type `AuthenticatedManagementSubject`
+ */
+const decodeManagementAccessToken = (token) => {
+    return jwt.decode(token);
+};
+exports.decodeManagementAccessToken = decodeManagementAccessToken;
+/**
+ *
+ * @param token The raw JWT which should be decoded
+ * @returns An object of type `AuthenticatedConsumer`
+ */
+const decodeConsumerAccessToken = (token) => {
+    return jwt.decode(token);
+};
+exports.decodeConsumerAccessToken = decodeConsumerAccessToken;
 //# sourceMappingURL=parse-jwt-token.js.map

package/dist/common/parse-jwt-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"parse-jwt-token.js","sourceRoot":"","sources":["../../src/common/parse-jwt-token.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,oCAAoC;AACpC,iCAAiC;AACjC,wBASW;AAEX,+CAAiD;AAEjD;;;;;GAKG;AACI,MAAM,aAAa,GAAG,KAAK,EAChC,KAAyB,EACzB,UAAyC,EACzC,QAAoC,EACsC,EAAE;IAC5E,IAAI,IAA2B,CAAC;IAChC,IAAI,OAA2B,CAAC;IAChC,IAAI,aAAgC,CAAC;IACrC,IAAI,OAGS,CAAC;IACd,IAAI,aAA2C,CAAC;IAEhD,IAAI;QACF,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,yIAAyI;YACzI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;gBAClC,MAAM,aAAa,GAAG,UAAoB,CAAC;gBAC3C,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,sBAAmB,EAAE,CAAC,CAAC;gBACpE,OAAO,GAAG,OAAyC,CAAC;aACrD;iBAAM;gBACL,IAAI,QAAQ,KAAK,SAAS,EAAE;oBAC1B,IAAI,GAAG,YAAS,CAAC,iBAAiB,CAAC;oBACnC,OAAO,GAAG,qDAAqD,CAAC;oBAChE,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;iBACpC;qBAAM,IAAI,QAAQ,KAAK,YAAY,EAAE;oBACpC,OAAO,GAAG,MAAM,oCAAiC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;iBACtE;qBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE;oBAClC,OAAO,GAAG,MAAM,2BAAwB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;iBAC7D;aACF;SACF;aAAM;YACL,IAAI,GAAG,YAAS,CAAC,mBAAmB,CAAC;YACrC,OAAO,GAAG,8BAA8B,CAAC;YACzC,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;SACpC;KACF;IAAC,OAAO,GAAG,EAAE;QACZ,IAAI,GAAG,YAAY,GAAG,CAAC,iBAAiB,EAAE;YACxC,IAAI,GAAG,YAAS,CAAC,kBAAkB,CAAC;YACpC,OAAO,GAAG,yBAAyB,CAAC;SACrC;aAAM,IAAI,GAAG,YAAY,IAAI,CAAC,uBAAuB,EAAE;YACtD,IAAI,GAAG,YAAS,CAAC,kBAAkB,CAAC;YACpC,OAAO,GAAG,kJACP,UAAmC,CAAC,QACvC,iBACG,UAAmC,CAAC,aACvC,+BAA+B,CAAC;SACjC;aAAM,IAAI,GAAG,YAAY,IAAI,CAAC,SAAS,EAAE;YACxC,IAAI,GAAG,YAAS,CAAC,SAAS,CAAC;YAC3B,OAAO,GAAG,2FACP,UAAmC,CAAC,QACvC,iBAAkB,UAAmC,CAAC,aAAa,IAAI,CAAC;SACzE;aAAM,IAAK,GAAyB,CAAC,IAAI,KAAK,cAAc,EAAE;YAC7D,IAAI,GAAG,YAAS,CAAC,4BAA4B,CAAC;YAC9C,OAAO;gBACL,wEAAwE,CAAC;SAC5E;aAAM;YACL,IAAI,GAAG,YAAS,CAAC,6BAA6B,CAAC;YAC/C,OAAO,GAAG,kCAAkC,CAAC;SAC9C;QACD,aAAa,GAAG,GAAY,CAAC;KAC9B;IAED,IACE,IAAI,KAAK,SAAS;QAClB,OAAO,KAAK,SAAS;QACrB,aAAa,KAAK,SAAS,EAC3B;QACA,aAAa,GAAG,IAAI,8BAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;KACpE;IAED,gDAAgD;IAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY,EAAE;QAC/D,OAAO;YACL,OAAO,EAAE,OAAyC;YAClD,aAAa;SACd,CAAC;KACH;SAAM;QACL,OAAO;YACL,OAAO,EAAE,OAAgC;YACzC,aAAa;SACd,CAAC;KACH;AACH,CAAC,CAAC;AArFW,QAAA,aAAa,iBAqFxB"}
+{"version":3,"file":"parse-jwt-token.js","sourceRoot":"","sources":["../../src/common/parse-jwt-token.ts"],"names":[],"mappings":";;;AAAA,yEAA4D;AAC5D,yBAAyB;AACzB,oCAAoC;AACpC,iCAAiC;AACjC,wBASW;AAEX,+CAAiD;AAEjD;;;;;GAKG;AACI,MAAM,aAAa,GAAG,KAAK,EAChC,KAAyB,EACzB,UAAyC,EACzC,QAAoC,EACsC,EAAE;IAC5E,IAAI,IAA2B,CAAC;IAChC,IAAI,OAA2B,CAAC;IAChC,IAAI,aAAgC,CAAC;IACrC,IAAI,OAGS,CAAC;IACd,IAAI,aAA2C,CAAC;IAEhD,IAAI;QACF,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,yIAAyI;YACzI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;gBAClC,MAAM,aAAa,GAAG,UAAoB,CAAC;gBAC3C,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,sBAAmB,EAAE,CAAC,CAAC;gBACpE,OAAO,GAAG,OAAyC,CAAC;aACrD;iBAAM;gBACL,IAAI,QAAQ,KAAK,SAAS,EAAE;oBAC1B,IAAI,GAAG,YAAS,CAAC,iBAAiB,CAAC;oBACnC,OAAO,GAAG,qDAAqD,CAAC;oBAChE,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;iBACpC;qBAAM,IAAI,QAAQ,KAAK,YAAY,EAAE;oBACpC,OAAO,GAAG,MAAM,oCAAiC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;iBACtE;qBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE;oBAClC,OAAO,GAAG,MAAM,2BAAwB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;iBAC7D;aACF;SACF;aAAM;YACL,IAAI,GAAG,YAAS,CAAC,mBAAmB,CAAC;YACrC,OAAO,GAAG,8BAA8B,CAAC;YACzC,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;SACpC;KACF;IAAC,OAAO,GAAG,EAAE;QACZ,mCAAW,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,GAAG,YAAY,GAAG,CAAC,iBAAiB,EAAE;YACxC,IAAI,GAAG,YAAS,CAAC,kBAAkB,CAAC;YACpC,OAAO,GAAG,yBAAyB,CAAC;SACrC;aAAM,IAAI,GAAG,YAAY,IAAI,CAAC,uBAAuB,EAAE;YACtD,IAAI,GAAG,YAAS,CAAC,kBAAkB,CAAC;YACpC,OAAO,GAAG,kJACP,UAAmC,CAAC,QACvC,iBACG,UAAmC,CAAC,aACvC,+BAA+B,CAAC;SACjC;aAAM,IAAI,GAAG,YAAY,IAAI,CAAC,SAAS,EAAE;YACxC,IAAI,GAAG,YAAS,CAAC,SAAS,CAAC;YAC3B,OAAO,GAAG,2FACP,UAAmC,CAAC,QACvC,iBAAkB,UAAmC,CAAC,aAAa,IAAI,CAAC;SACzE;aAAM,IAAK,GAAyB,CAAC,IAAI,KAAK,cAAc,EAAE;YAC7D,IAAI,GAAG,YAAS,CAAC,4BAA4B,CAAC;YAC9C,OAAO;gBACL,wEAAwE,CAAC;SAC5E;aAAM;YACL,IAAI,GAAG,YAAS,CAAC,6BAA6B,CAAC;YAC/C,OAAO,GAAG,kCAAkC,CAAC;SAC9C;QACD,aAAa,GAAG,GAAG,CAAC;KACrB;IAED,IACE,IAAI,KAAK,SAAS;QAClB,OAAO,KAAK,SAAS;QACrB,aAAa,KAAK,SAAS,EAC3B;QACA,aAAa,GAAG,IAAI,8BAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;KACpE;IAED,gDAAgD;IAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY,EAAE;QAC/D,OAAO;YACL,OAAO,EAAE,OAAyC;YAClD,aAAa;SACd,CAAC;KACH;SAAM;QACL,OAAO;YACL,OAAO,EAAE,OAAgC;YACzC,aAAa;SACd,CAAC;KACH;AACH,CAAC,CAAC;AAtFW,QAAA,aAAa,iBAsFxB;AAEF;;;;GAIG;AACI,MAAM,2BAA2B,GAAG,CACzC,KAAa,EACmB,EAAE;IAClC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAmC,CAAC;AAC7D,CAAC,CAAC;AAJW,QAAA,2BAA2B,+BAItC;AAEF;;;;GAIG;AACI,MAAM,yBAAyB,GAAG,CACvC,KAAa,EACU,EAAE;IACzB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAA0B,CAAC;AACpD,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC"}

package/dist/graphql/enforce-strict-permissions.plugin.d.ts

@@ -1,8 +1,8 @@
 import { Plugin } from 'graphile-build';
 /**
- * This will omit any endpoints currently not having any permission mappings for it.
+ * This will omit any operations currently not having any permission mappings for it.
  *
- * @param graphileBuildOptions should be of type `Partial<Options> & { permissionMappings: IOperationsToPermissionMappings, logger: (log: string | LogMessage, type: LogType) => void }`
+ * @param graphileBuildOptions should be of type `Partial<Options> & { permissionDefinition: PermissionDefinition, logger: (log: string | LogMessage, type: LogType) => void }`
  */
 export declare const EnforceStrictPermissionsPlugin: Plugin;
 //# sourceMappingURL=enforce-strict-permissions.plugin.d.ts.map

package/dist/graphql/enforce-strict-permissions.plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enforce-strict-permissions.plugin.d.ts","sourceRoot":"","sources":["../../src/graphql/enforce-strict-permissions.plugin.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAQxC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAqF5C,CAAC"}
+{"version":3,"file":"enforce-strict-permissions.plugin.d.ts","sourceRoot":"","sources":["../../src/graphql/enforce-strict-permissions.plugin.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAQxC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,MA0F5C,CAAC"}

package/dist/graphql/enforce-strict-permissions.plugin.js

@@ -5,20 +5,23 @@ const mosaic_id_utils_1 = require("@axinom/mosaic-id-utils");
 const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
 const object_helpers_1 = require("../common/object.helpers");
 /**
- * This will omit any endpoints currently not having any permission mappings for it.
+ * This will omit any operations currently not having any permission mappings for it.
  *
- * @param graphileBuildOptions should be of type `Partial<Options> & { permissionMappings: IOperationsToPermissionMappings, logger: (log: string | LogMessage, type: LogType) => void }`
+ * @param graphileBuildOptions should be of type `Partial<Options> & { permissionDefinition: PermissionDefinition, logger: (log: string | LogMessage, type: LogType) => void }`
  */
-const EnforceStrictPermissionsPlugin = (builder, { permissionMappings = {
-    ANONYMOUS: [],
-    IGNORE: [],
-    ADDITIONAL: [],
+const EnforceStrictPermissionsPlugin = (builder, { permissionDefinition = {
+    gqlOptions: {
+        anonymousGqlOperations: [],
+        ignoredGqlOperations: [],
+        additionalGqlOperations: [],
+    },
+    permissions: [],
 }, 
 // eslint-disable-next-line no-console
-logger = new mosaic_service_common_1.Logger(), }) => {
-    const mappedOperations = mosaic_id_utils_1.getMappedOperations(permissionMappings).concat('query');
-    const additionalOperations = mosaic_id_utils_1.getAdditionalOperations(permissionMappings);
-    const ignoredOperations = mosaic_id_utils_1.getIgnoredOperations(permissionMappings);
+logger = new mosaic_service_common_1.Logger({ context: exports.EnforceStrictPermissionsPlugin.name }), }) => {
+    const mappedOperations = mosaic_id_utils_1.getMappedOperations(permissionDefinition).concat('query');
+    const additionalOperations = mosaic_id_utils_1.getAdditionalOperations(permissionDefinition) || new Array();
+    const ignoredOperations = mosaic_id_utils_1.getIgnoredOperations(permissionDefinition) || new Array();
     let potentialSurplusOperations;
     /* Whenever an additional field is added to the schema this hook is being called.
        In this context, condition in lines 51-57 ensures that whenever this hook is being called,

package/dist/graphql/enforce-strict-permissions.plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"enforce-strict-permissions.plugin.js","sourceRoot":"","sources":["../../src/graphql/enforce-strict-permissions.plugin.ts"],"names":[],"mappings":";;;AAAA,6DAKiC;AACjC,yEAAuD;AAEvD,6DAA4D;AAO5D;;;;GAIG;AACI,MAAM,8BAA8B,GAAW,CACpD,OAAO,EACP,EACE,kBAAkB,GAAG;IACnB,SAAS,EAAE,EAAE;IACb,MAAM,EAAE,EAAE;IACV,UAAU,EAAE,EAAE;CACf;AACD,sCAAsC;AACtC,MAAM,GAAG,IAAI,8BAAM,EAAE,GACP,EAChB,EAAE;IACF,MAAM,gBAAgB,GAAG,qCAAmB,CAAC,kBAAkB,CAAC,CAAC,MAAM,CACrE,OAAO,CACR,CAAC;IACF,MAAM,oBAAoB,GAAG,yCAAuB,CAAC,kBAAkB,CAAC,CAAC;IACzE,MAAM,iBAAiB,GAAG,sCAAoB,CAAC,kBAAkB,CAAC,CAAC;IACnE,IAAI,0BAAoC,CAAC;IACzC;;;;;;MAME;IACF,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QAC/D,IACE,IAAI,CAAC,IAAI,KAAK,OAAO;YACrB,IAAI,CAAC,IAAI,KAAK,UAAU;YACxB,IAAI,CAAC,IAAI,KAAK,cAAc,EAC5B;YACA,OAAO,MAAM,CAAC;SACf;QAED,IAAI,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAExC,iDAAiD;QACjD,aAAa,GAAG,aAAa,CAAC,MAAM,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CACtD,CAAC;QAEF,kGAAkG;QAClG,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAE3D,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAC5C,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CACrD,CAAC;QAEF,IAAI,iBAAiB,CAAC,MAAM,EAAE;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,sBAAsB,IAAI,CAAC,IAAI,gBAAgB,iBAAiB,CAAC,MAAM,EAAE;gBAClF,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE;aAC3C,CAAC,CAAC;SACJ;QAED,8GAA8G;QAC9G,IAAI,0BAA0B,KAAK,SAAS,EAAE;YAC5C,uBAAuB;YACvB,0BAA0B,GAAG,gBAAgB,CAAC,MAAM,CAClD,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAClD,CAAC;SACH;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE;YACnC,2BAA2B;YAC3B,0BAA0B,GAAG,0BAA0B,CAAC,MAAM,CAC5D,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAClD,CAAC;SACH;aAAM;YACL,8BAA8B;YAC9B,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,MAAM,CACzD,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAClD,CAAC;YAEF,IAAI,iBAAiB,CAAC,MAAM,EAAE;gBAC5B,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,kDAAkD,iBAAiB,CAAC,MAAM,EAAE;oBACrF,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE;iBAC3C,CAAC,CAAC;aACJ;SACF;QAED,OAAO,iCAAgB,CAAC,MAAM,EAAE;YAC9B,GAAG,iBAAiB;YACpB,GAAG,iBAAiB;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AArFW,QAAA,8BAA8B,kCAqFzC"}
+{"version":3,"file":"enforce-strict-permissions.plugin.js","sourceRoot":"","sources":["../../src/graphql/enforce-strict-permissions.plugin.ts"],"names":[],"mappings":";;;AAAA,6DAKiC;AACjC,yEAAuD;AAEvD,6DAA4D;AAO5D;;;;GAIG;AACI,MAAM,8BAA8B,GAAW,CACpD,OAAO,EACP,EACE,oBAAoB,GAAG;IACrB,UAAU,EAAE;QACV,sBAAsB,EAAE,EAAE;QAC1B,oBAAoB,EAAE,EAAE;QACxB,uBAAuB,EAAE,EAAE;KAC5B;IACD,WAAW,EAAE,EAAE;CAChB;AACD,sCAAsC;AACtC,MAAM,GAAG,IAAI,8BAAM,CAAC,EAAE,OAAO,EAAE,sCAA8B,CAAC,IAAI,EAAE,CAAC,GACvD,EAChB,EAAE;IACF,MAAM,gBAAgB,GACpB,qCAAmB,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5D,MAAM,oBAAoB,GACxB,yCAAuB,CAAC,oBAAoB,CAAC,IAAI,IAAI,KAAK,EAAU,CAAC;IACvE,MAAM,iBAAiB,GACrB,sCAAoB,CAAC,oBAAoB,CAAC,IAAI,IAAI,KAAK,EAAU,CAAC;IACpE,IAAI,0BAAoC,CAAC;IACzC;;;;;;MAME;IACF,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QAC/D,IACE,IAAI,CAAC,IAAI,KAAK,OAAO;YACrB,IAAI,CAAC,IAAI,KAAK,UAAU;YACxB,IAAI,CAAC,IAAI,KAAK,cAAc,EAC5B;YACA,OAAO,MAAM,CAAC;SACf;QAED,IAAI,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAExC,iDAAiD;QACjD,aAAa,GAAG,aAAa,CAAC,MAAM,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CACtD,CAAC;QAEF,kGAAkG;QAClG,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAE3D,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAC5C,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CACrD,CAAC;QAEF,IAAI,iBAAiB,CAAC,MAAM,EAAE;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,sBAAsB,IAAI,CAAC,IAAI,gBAAgB,iBAAiB,CAAC,MAAM,EAAE;gBAClF,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE;aAC3C,CAAC,CAAC;SACJ;QAED,8GAA8G;QAC9G,IAAI,0BAA0B,KAAK,SAAS,EAAE;YAC5C,uBAAuB;YACvB,0BAA0B,GAAG,gBAAgB,CAAC,MAAM,CAClD,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAClD,CAAC;SACH;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE;YACnC,2BAA2B;YAC3B,0BAA0B,GAAG,0BAA0B,CAAC,MAAM,CAC5D,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAClD,CAAC;SACH;aAAM;YACL,8BAA8B;YAC9B,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,MAAM,CACzD,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAClD,CAAC;YAEF,IAAI,iBAAiB,CAAC,MAAM,EAAE;gBAC5B,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,kDAAkD,iBAAiB,CAAC,MAAM,EAAE;oBACrF,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE;iBAC3C,CAAC,CAAC;aACJ;SACF;QAED,OAAO,iCAAgB,CAAC,MAAM,EAAE;YAC9B,GAAG,iBAAiB;YACpB,GAAG,iBAAiB;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AA1FW,QAAA,8BAA8B,kCA0FzC"}

package/dist/graphql/guard.plugin.d.ts

@@ -4,8 +4,8 @@
  * should be carried out as well.
  * Error is thrown if request is not authorized. Applies to root and sub queries.
  *
- * @param additionalGraphQLContextFromRequest should be of type `Record<string, any> & { subject: AuthenticatedManagementSubject, authErrorInfo: AxGuardErrorInfo }`
- * @param graphileBuildOptions should be of type `Partial<Options> & { permissionMappings: IOperationsToPermissionMappings, serviceId: string, ensureOnlyAuthentication: boolean }`
+ * @param additionalGraphQLContextFromRequest should be of type `Record<string, any> & { subject: AuthenticatedSubject, authErrorInfo: AxGuardErrorInfo }`
+ * @param graphileBuildOptions should be of type `Partial<Options> & { permissionDefinition: PermissionDefinition, serviceId: string, ensureOnlyAuthentication: boolean }`
  */
 export declare const AxGuardPlugin: import("graphile-build").Plugin;
 //# sourceMappingURL=guard.plugin.d.ts.map

package/dist/graphql/guard.plugin.js

@@ -10,10 +10,10 @@ const guard_utils_1 = require("../common/guard-utils");
  * should be carried out as well.
  * Error is thrown if request is not authorized. Applies to root and sub queries.
  *
- * @param additionalGraphQLContextFromRequest should be of type `Record<string, any> & { subject: AuthenticatedManagementSubject, authErrorInfo: AxGuardErrorInfo }`
- * @param graphileBuildOptions should be of type `Partial<Options> & { permissionMappings: IOperationsToPermissionMappings, serviceId: string, ensureOnlyAuthentication: boolean }`
+ * @param additionalGraphQLContextFromRequest should be of type `Record<string, any> & { subject: AuthenticatedSubject, authErrorInfo: AxGuardErrorInfo }`
+ * @param graphileBuildOptions should be of type `Partial<Options> & { permissionDefinition: PermissionDefinition, serviceId: string, ensureOnlyAuthentication: boolean }`
  */
-exports.AxGuardPlugin = graphile_utils_1.makeWrapResolversPlugin(({ scope }, build, config, { ensureOnlyAuthentication, serviceId, permissionMappings }) => {
+exports.AxGuardPlugin = graphile_utils_1.makeWrapResolversPlugin(({ scope }, build, config, { ensureOnlyAuthentication, serviceId, permissionDefinition }) => {
     const operationCanBeProtected = scope.fieldName !== 'query' &&
         (scope.isRootQuery ||
             scope.isRootMutation ||
@@ -26,7 +26,7 @@ exports.AxGuardPlugin = graphile_utils_1.makeWrapResolversPlugin(({ scope }, bui
             authorizationOptions: {
                 operation: scope.fieldName,
                 serviceId,
-                permissionMappings,
+                permissionDefinition,
             },
         };
     }

package/dist/graphql/guard.plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.plugin.js","sourceRoot":"","sources":["../../src/graphql/guard.plugin.ts"],"names":[],"mappings":";;;AAAA,mDAAyD;AACzD,sCAMmB;AACnB,uDAAyE;AAEzE;;;;;;;;GAQG;AACU,QAAA,aAAa,GAAG,wCAAuB,CAClD,CACE,EAAE,KAAK,EAAE,EACT,KAAK,EACL,MAAM,EACN,EAAE,wBAAwB,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAC3D,EAAE;IACF,MAAM,uBAAuB,GAC3B,KAAK,CAAC,SAAS,KAAK,OAAO;QAC3B,CAAC,KAAK,CAAC,WAAW;YAChB,KAAK,CAAC,cAAc;YACpB,KAAK,CAAC,wBAAwB;YAC9B,KAAK,CAAC,yBAAyB;YAC/B,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAE9B,IAAI,uBAAuB,EAAE;QAC3B,OAAO;YACL,wBAAwB,EAAE,wBAAwB,aAAxB,wBAAwB,cAAxB,wBAAwB,GAAI,KAAK;YAC3D,oBAAoB,EAAE;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS;gBACT,kBAAkB;aACnB;SACF,CAAC;KACH;IAED,OAAO,IAAI,CAAC;AACd,CAAC,EACD,CAAC,OAAuB,EAAE,EAAE,CAC1B,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE;IACrD,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,OAEF,CAAC,CAAC,mEAAmE;IACtG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE;QACrC,kHAAkH;QAClH,IACE,8BAAgB,CACd,OAAyC,EACzC,OAAO,CAAC,oBAAoB,EAC5B,aAAa,CACd,EACD;YACA,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;SACrD;aAAM;YACL,MAAM,IAAI,qBAAY,CAAC;gBACrB,OAAO,EAAE,gDAAgD;gBACzD,IAAI,EAAE,kBAAS,CAAC,iBAAiB;gBACjC,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG;oBAClB,SAAS,EAAE,OAAO,CAAC,oBAAoB,CAAC,SAAS;iBAClD;aACF,CAAC,CAAC;SACJ;KACF;SAAM;QACL;;;;;WAKG;QACH,IAAI,aAAa,KAAK,SAAS,EAAE;YAC/B,MAAM,IAAI,qBAAY,CAAC,aAAa,CAAC,CAAC;SACvC;aAAM;YACL,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;SACrD;KACF;AACH,CAAC,CACJ,CAAC"}
+{"version":3,"file":"guard.plugin.js","sourceRoot":"","sources":["../../src/graphql/guard.plugin.ts"],"names":[],"mappings":";;;AAAA,mDAAyD;AACzD,sCAMmB;AACnB,uDAAyE;AAEzE;;;;;;;;GAQG;AACU,QAAA,aAAa,GAAG,wCAAuB,CAClD,CACE,EAAE,KAAK,EAAE,EACT,KAAK,EACL,MAAM,EACN,EAAE,wBAAwB,EAAE,SAAS,EAAE,oBAAoB,EAAE,EAC7D,EAAE;IACF,MAAM,uBAAuB,GAC3B,KAAK,CAAC,SAAS,KAAK,OAAO;QAC3B,CAAC,KAAK,CAAC,WAAW;YAChB,KAAK,CAAC,cAAc;YACpB,KAAK,CAAC,wBAAwB;YAC9B,KAAK,CAAC,yBAAyB;YAC/B,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAE9B,IAAI,uBAAuB,EAAE;QAC3B,OAAO;YACL,wBAAwB,EAAE,wBAAwB,aAAxB,wBAAwB,cAAxB,wBAAwB,GAAI,KAAK;YAC3D,oBAAoB,EAAE;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS;gBACT,oBAAoB;aACrB;SACF,CAAC;KACH;IAED,OAAO,IAAI,CAAC;AACd,CAAC,EACD,CAAC,OAAuB,EAAE,EAAE,CAC1B,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE;IACrD,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,OAEF,CAAC,CAAC,mEAAmE;IACtG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE;QACrC,kHAAkH;QAClH,IACE,8BAAgB,CACd,OAAyC,EACzC,OAAO,CAAC,oBAAoB,EAC5B,aAAa,CACd,EACD;YACA,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;SACrD;aAAM;YACL,MAAM,IAAI,qBAAY,CAAC;gBACrB,OAAO,EAAE,gDAAgD;gBACzD,IAAI,EAAE,kBAAS,CAAC,iBAAiB;gBACjC,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG;oBAClB,SAAS,EAAE,OAAO,CAAC,oBAAoB,CAAC,SAAS;iBAClD;aACF,CAAC,CAAC;SACJ;KACF;SAAM;QACL;;;;;WAKG;QACH,IAAI,aAAa,KAAK,SAAS,EAAE;YAC/B,MAAM,IAAI,qBAAY,CAAC,aAAa,CAAC,CAAC;SACvC;aAAM;YACL,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;SACrD;KACF;AACH,CAAC,CACJ,CAAC"}

package/dist/graphql/subscription-authorization-hook-factory.d.ts

@@ -1,7 +1,7 @@
 import { Request, Response } from 'express';
 import { PostGraphileOptions, PostGraphilePlugin } from 'postgraphile';
 /**
- * This is a hook plugin generator function that will use the IOperationsToPermissionMappings object in PostGraphileOptions
+ * This is a hook plugin generator function that will use the PermissionDefinition object in PostGraphileOptions
  * to authorize the Subscription operation done over a web socket.
  * It checks if the authenticated user which initiates the subscription has required permissions.
  * The actual plugin is built using this function when the build() function is called in PostgraphileOptionsBuilder.

package/dist/graphql/subscription-authorization-hook-factory.js

@@ -6,7 +6,7 @@ const graphql_ws_1 = require("graphql-ws");
 const common_1 = require("../common");
 const guard_utils_1 = require("../common/guard-utils");
 /**
- * This is a hook plugin generator function that will use the IOperationsToPermissionMappings object in PostGraphileOptions
+ * This is a hook plugin generator function that will use the PermissionDefinition object in PostGraphileOptions
  * to authorize the Subscription operation done over a web socket.
  * It checks if the authenticated user which initiates the subscription has required permissions.
  * The actual plugin is built using this function when the build() function is called in PostgraphileOptionsBuilder.
@@ -27,11 +27,11 @@ const subscriptionAuthorizationHookFactory = (buildOptions) => {
             if (buildOptions !== undefined &&
                 buildOptions.graphileBuildOptions !== undefined &&
                 subscription !== undefined) {
-                // Get permissionMappings from graphileBuildOptions
-                const permissionMappings = buildOptions === null || buildOptions === void 0 ? void 0 : buildOptions.graphileBuildOptions.permissionMappings;
+                // Get permissionDefinition from graphileBuildOptions
+                const permissionDefinition = buildOptions === null || buildOptions === void 0 ? void 0 : buildOptions.graphileBuildOptions.permissionDefinition;
                 const options = {
                     operation: subscription.name.value,
-                    permissionMappings: permissionMappings,
+                    permissionDefinition,
                     serviceId: params.context.config.serviceId,
                 };
                 const error = undefined;
@@ -67,11 +67,11 @@ const subscriptionAuthorizationHookFactory = (buildOptions) => {
             if (buildOptions !== undefined &&
                 buildOptions.graphileBuildOptions !== undefined &&
                 subscription !== undefined) {
-                // Get permissionMappings from graphileBuildOptions
-                const permissionMappings = buildOptions === null || buildOptions === void 0 ? void 0 : buildOptions.graphileBuildOptions.permissionMappings;
+                // Get permissionDefinition from graphileBuildOptions
+                const permissionDefinition = buildOptions === null || buildOptions === void 0 ? void 0 : buildOptions.graphileBuildOptions.permissionDefinition;
                 const options = {
                     operation: subscription.name.value,
-                    permissionMappings: permissionMappings,
+                    permissionDefinition,
                     serviceId: args.contextValue.config.serviceId,
                 };
                 const error = undefined;

package/dist/graphql/subscription-authorization-hook-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"subscription-authorization-hook-factory.js","sourceRoot":"","sources":["../../src/graphql/subscription-authorization-hook-factory.ts"],"names":[],"mappings":";;;AAQA,6CAA8B;AAC9B,2CAAkE;AAQlE,sCAMmB;AACnB,uDAG+B;AAE/B;;;;;;;;GAQG;AACI,MAAM,oCAAoC,GAAG,CAClD,YAAgE,EAC5C,EAAE;IACtB,OAAO;QACL,qEAAqE;QACrE,6BAA6B,EAAE,CAAC,MAAuB,EAAE,EAAE;;YACzD,qCAAqC;YACrC,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,qBAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9C,MAAM,oBAAoB,GACxB,QAAQ,CAAC,WAAwC,CAAC;YAEpD,MAAM,YAAY,GAAG,eAAe,CAClC,oBAAoB,EACpB,MAAM,CAAC,aAAa,CACrB,CAAC;YAEF,IACE,YAAY,KAAK,SAAS;gBAC1B,YAAY,CAAC,oBAAoB,KAAK,SAAS;gBAC/C,YAAY,KAAK,SAAS,EAC1B;gBACA,mDAAmD;gBACnD,MAAM,kBAAkB,GAAG,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,oBAAoB,CAC1D,kBAAqD,CAAC;gBAEzD,MAAM,OAAO,GAA4B;oBACvC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK;oBAClC,kBAAkB,EAAE,kBAAkB;oBACtC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS;iBAC3C,CAAC;gBACF,MAAM,KAAK,GAAiC,SAAS,CAAC;gBAEtD,0CAA0C;gBAC1C,IACE,8BAAgB,CACd,MAAM,CAAC,OAAO,CAAC,OAAyC,EACxD,OAAO,EACP,KAAK,CACN,EACD;oBACA,OAAO,MAAM,CAAC;iBACf;qBAAM;oBACL,MAAM,IAAI,qBAAY,CAAC;wBACrB,OAAO,EAAE,+CAA+C;wBACxD,IAAI,EAAE,kBAAS,CAAC,iBAAiB;wBACjC,OAAO,EAAE;4BACP,IAAI,EAAE,MAAA,MAAM,CAAC,OAAO,CAAC,OAAO,0CAAE,GAAG;4BACjC,SAAS,EAAE,OAAO,CAAC,SAAS;yBAC7B;qBACF,CAAC,CAAC;iBACJ;aACF;YACD,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,6BAA6B,EAAE,CAC7B,IAEC,EACD,MAIC,EACD,EAAE;;YACF,iEAAiE;YACjE,IACG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAA0C;iBAC7D,WAAW,CAAC,aAAa,KAAK,SAAS,EAC1C;gBACA,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAC/B,sBAAS,CAAC,SAAS,EACnB,kBAAS,CAAC,kBAAkB,CAC7B,CAAC;gBACF,OAAO,IAAI,CAAC;aACb;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ;iBAClC,WAAwC,CAAC;YAE5C,MAAM,YAAY,GAAG,eAAe,CAClC,eAAe,EACf,MAAA,IAAI,CAAC,aAAa,mCAAI,SAAS,CAChC,CAAC;YACF,IACE,YAAY,KAAK,SAAS;gBAC1B,YAAY,CAAC,oBAAoB,KAAK,SAAS;gBAC/C,YAAY,KAAK,SAAS,EAC1B;gBACA,mDAAmD;gBACnD,MAAM,kBAAkB,GAAG,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,oBAAoB,CAC1D,kBAAqD,CAAC;gBAEzD,MAAM,OAAO,GAA4B;oBACvC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK;oBAClC,kBAAkB,EAAE,kBAAkB;oBACtC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS;iBAC9C,CAAC;gBACF,MAAM,KAAK,GAAiC,SAAS,CAAC;gBAEtD,0CAA0C;gBAC1C,IACE,8BAAgB,CACd,IAAI,CAAC,YAAY,CAAC,OAAyC,EAC3D,OAAO,EACP,KAAK,CACN,EACD;oBACA,OAAO,IAAI,CAAC;iBACb;qBAAM;oBACL;;;uBAGG;oBACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAC/B,sBAAS,CAAC,SAAS,EACnB,kBAAS,CAAC,iBAAiB,CAC5B,CAAC;oBACF,OAAO,IAAI,CAAC;iBACb;aACF;YACD;;;;eAIG;YACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAC/B,sBAAS,CAAC,UAAU,EACpB,iFAAiF,CAClF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAzIW,QAAA,oCAAoC,wCAyI/C;AAEF;;GAEG;AACH,MAAM,eAAe,GAAG,CACtB,oBAA+C,EAC/C,aAAiC,EACV,EAAE;IACzB,uEAAuE;IACvE,6CAA6C;IAC7C,iFAAiF;IACjF,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,MAAM,CACxD,CAAC,MAAM,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,KAAK,MAAK,aAAa,CAAA,EAAA,CACjD,CAAC,CAAC,CAAC,CAAC;IAEL,IAAI,sBAAsB,KAAK,SAAS,EAAE;QACxC,iDAAiD;QACjD,yEAAyE;QACzE,mGAAmG;QACnG,MAAM,YAAY,GAChB,sBAAsB,CAAC,YAAY,CAAC,UACrC,CAAC,CAAC,CAAC,CAAC;QACL,OAAO,YAAY,CAAC;KACrB;AACH,CAAC,CAAC"}
+{"version":3,"file":"subscription-authorization-hook-factory.js","sourceRoot":"","sources":["../../src/graphql/subscription-authorization-hook-factory.ts"],"names":[],"mappings":";;;AAQA,6CAA8B;AAC9B,2CAAkE;AAQlE,sCAMmB;AACnB,uDAG+B;AAE/B;;;;;;;;GAQG;AACI,MAAM,oCAAoC,GAAG,CAClD,YAAgE,EAC5C,EAAE;IACtB,OAAO;QACL,qEAAqE;QACrE,6BAA6B,EAAE,CAAC,MAAuB,EAAE,EAAE;;YACzD,qCAAqC;YACrC,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,qBAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9C,MAAM,oBAAoB,GACxB,QAAQ,CAAC,WAAwC,CAAC;YAEpD,MAAM,YAAY,GAAG,eAAe,CAClC,oBAAoB,EACpB,MAAM,CAAC,aAAa,CACrB,CAAC;YAEF,IACE,YAAY,KAAK,SAAS;gBAC1B,YAAY,CAAC,oBAAoB,KAAK,SAAS;gBAC/C,YAAY,KAAK,SAAS,EAC1B;gBACA,qDAAqD;gBACrD,MAAM,oBAAoB,GAAG,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,oBAAoB,CAC5D,oBAA4C,CAAC;gBAEhD,MAAM,OAAO,GAA4B;oBACvC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK;oBAClC,oBAAoB;oBACpB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS;iBAC3C,CAAC;gBACF,MAAM,KAAK,GAAiC,SAAS,CAAC;gBAEtD,0CAA0C;gBAC1C,IACE,8BAAgB,CACd,MAAM,CAAC,OAAO,CAAC,OAAyC,EACxD,OAAO,EACP,KAAK,CACN,EACD;oBACA,OAAO,MAAM,CAAC;iBACf;qBAAM;oBACL,MAAM,IAAI,qBAAY,CAAC;wBACrB,OAAO,EAAE,+CAA+C;wBACxD,IAAI,EAAE,kBAAS,CAAC,iBAAiB;wBACjC,OAAO,EAAE;4BACP,IAAI,EAAE,MAAA,MAAM,CAAC,OAAO,CAAC,OAAO,0CAAE,GAAG;4BACjC,SAAS,EAAE,OAAO,CAAC,SAAS;yBAC7B;qBACF,CAAC,CAAC;iBACJ;aACF;YACD,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,6BAA6B,EAAE,CAC7B,IAEC,EACD,MAIC,EACD,EAAE;;YACF,iEAAiE;YACjE,IACG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAA0C;iBAC7D,WAAW,CAAC,aAAa,KAAK,SAAS,EAC1C;gBACA,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAC/B,sBAAS,CAAC,SAAS,EACnB,kBAAS,CAAC,kBAAkB,CAC7B,CAAC;gBACF,OAAO,IAAI,CAAC;aACb;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ;iBAClC,WAAwC,CAAC;YAE5C,MAAM,YAAY,GAAG,eAAe,CAClC,eAAe,EACf,MAAA,IAAI,CAAC,aAAa,mCAAI,SAAS,CAChC,CAAC;YACF,IACE,YAAY,KAAK,SAAS;gBAC1B,YAAY,CAAC,oBAAoB,KAAK,SAAS;gBAC/C,YAAY,KAAK,SAAS,EAC1B;gBACA,qDAAqD;gBACrD,MAAM,oBAAoB,GAAG,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,oBAAoB,CAC5D,oBAA4C,CAAC;gBAEhD,MAAM,OAAO,GAA4B;oBACvC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK;oBAClC,oBAAoB;oBACpB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS;iBAC9C,CAAC;gBACF,MAAM,KAAK,GAAiC,SAAS,CAAC;gBAEtD,0CAA0C;gBAC1C,IACE,8BAAgB,CACd,IAAI,CAAC,YAAY,CAAC,OAAyC,EAC3D,OAAO,EACP,KAAK,CACN,EACD;oBACA,OAAO,IAAI,CAAC;iBACb;qBAAM;oBACL;;;uBAGG;oBACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAC/B,sBAAS,CAAC,SAAS,EACnB,kBAAS,CAAC,iBAAiB,CAC5B,CAAC;oBACF,OAAO,IAAI,CAAC;iBACb;aACF;YACD;;;;eAIG;YACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAC/B,sBAAS,CAAC,UAAU,EACpB,iFAAiF,CAClF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAzIW,QAAA,oCAAoC,wCAyI/C;AAEF;;GAEG;AACH,MAAM,eAAe,GAAG,CACtB,oBAA+C,EAC/C,aAAiC,EACV,EAAE;IACzB,uEAAuE;IACvE,6CAA6C;IAC7C,iFAAiF;IACjF,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,MAAM,CACxD,CAAC,MAAM,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,KAAK,MAAK,aAAa,CAAA,EAAA,CACjD,CAAC,CAAC,CAAC,CAAC;IAEL,IAAI,sBAAsB,KAAK,SAAS,EAAE;QACxC,iDAAiD;QACjD,yEAAyE;QACzE,mGAAmG;QACnG,MAAM,YAAY,GAChB,sBAAsB,CAAC,YAAY,CAAC,UACrC,CAAC,CAAC,CAAC,CAAC;QACL,OAAO,YAAY,CAAC;KACrB;AACH,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { getPermissionsForOperation, IOperationsToPermissionMappings, } from '@axinom/mosaic-id-utils';
+export { getPermissionsForOperation, PermissionDefinition, } from '@axinom/mosaic-id-utils';
 export * from './common';
 export * from './graphql';
 export * from './graphql/enforce-strict-permissions.plugin';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,6CAA6C,CAAC;AAC5D,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,6CAA6C,CAAC;AAC5D,cAAc,eAAe,CAAC"}

package/dist/message-bus/message-handler-authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-handler-authentication.d.ts","sourceRoot":"","sources":["../../src/message-bus/message-handler-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,oBAAoB,EAErB,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,yCAA0C,SAAQ,WAAW;IAC5E,OAAO,EAAE,8BAA8B,CAAC;CACzC;AAED,MAAM,WAAW,gCAAiC,SAAQ,WAAW;IACnE,OAAO,EAAE,qBAAqB,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,YACjC,WAAW,KACnB,8BASF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,mCACvB,MAAM,GAAG,oBAAoB,mEAkC1C,CAAC"}
+{"version":3,"file":"message-handler-authentication.d.ts","sourceRoot":"","sources":["../../src/message-bus/message-handler-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,oBAAoB,EAErB,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,yCAA0C,SAAQ,WAAW;IAC5E,OAAO,EAAE,8BAA8B,CAAC;CACzC;AAED,MAAM,WAAW,gCAAiC,SAAQ,WAAW;IACnE,OAAO,EAAE,qBAAqB,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,YACjC,WAAW,KACnB,8BASF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,mCACvB,MAAM,GAAG,oBAAoB,mEAmC1C,CAAC"}

package/dist/message-bus/message-handler-authentication.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authenticationMiddleware = exports.getMessageInfoManagementSubject = void 0;
+const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
 const common_1 = require("../common");
 /**
  * Get the ManagementSubject that was extracted through the authenticationMiddleware. Throws an error if subject property is not present or empty.
@@ -36,6 +37,7 @@ const authenticationMiddleware = (authParams, enforceAuthentication = true) => {
                     subject;
             }
             catch (e) {
+                mosaic_service_common_1.assertError(e);
                 error = e;
             }
         }

package/dist/message-bus/message-handler-authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-handler-authentication.js","sourceRoot":"","sources":["../../src/message-bus/message-handler-authentication.ts"],"names":[],"mappings":";;;AAMA,sCAKmB;AAUnB;;;;GAIG;AACI,MAAM,+BAA+B,GAAG,CAC7C,OAAoB,EACY,EAAE;IAClC,MAAM,oBAAoB,GACxB,OAAoD,CAAC;IACvD,IAAI,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,OAAO,EAAE;QACjC,OAAO,oBAAoB,CAAC,OAAO,CAAC;KACrC;IACD,MAAM,IAAI,KAAK,CACb,2IAA2I,CAC5I,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,+BAA+B,mCAW1C;AAEF;;;;;;GAMG;AACI,MAAM,wBAAwB,GAAG,CACtC,UAAyC,EACzC,qBAAqB,GAAG,IAAI,EACG,EAAE;IACjC,OAAO,KAAK,EACV,OAAkC,EAClC,OAA8B,EAC9B,SAAoB,EACpB,IAAoC,EACrB,EAAE;QACjB,IAAI,KAAK,GAAsB,SAAS,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,KAAK,GAAG,IAAI,KAAK,CACf,4EAA4E,CAC7E,CAAC;SACH;aAAM;YACL,IAAI;gBACF,MAAM,OAAO,GAAG,MAAM,0CAAiC,CACrD,KAAK,EACL,UAAU,CACX,CAAC;gBACD,OAAqD,CAAC,OAAO;oBAC5D,OAAO,CAAC;aACX;YAAC,OAAO,CAAC,EAAE;gBACV,KAAK,GAAG,CAAC,CAAC;aACX;SACF;QAED,IAAI,qBAAqB,IAAI,KAAK,KAAK,SAAS,EAAE;YAChD,MAAM,KAAK,CAAC;SACb;QAED,MAAM,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC,CAAC;AAnCW,QAAA,wBAAwB,4BAmCnC"}
+{"version":3,"file":"message-handler-authentication.js","sourceRoot":"","sources":["../../src/message-bus/message-handler-authentication.ts"],"names":[],"mappings":";;;AAKA,yEAA4D;AAE5D,sCAKmB;AAUnB;;;;GAIG;AACI,MAAM,+BAA+B,GAAG,CAC7C,OAAoB,EACY,EAAE;IAClC,MAAM,oBAAoB,GACxB,OAAoD,CAAC;IACvD,IAAI,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,OAAO,EAAE;QACjC,OAAO,oBAAoB,CAAC,OAAO,CAAC;KACrC;IACD,MAAM,IAAI,KAAK,CACb,2IAA2I,CAC5I,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,+BAA+B,mCAW1C;AAEF;;;;;;GAMG;AACI,MAAM,wBAAwB,GAAG,CACtC,UAAyC,EACzC,qBAAqB,GAAG,IAAI,EACG,EAAE;IACjC,OAAO,KAAK,EACV,OAAkC,EAClC,OAA8B,EAC9B,SAAoB,EACpB,IAAoC,EACrB,EAAE;QACjB,IAAI,KAAK,GAAsB,SAAS,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,KAAK,GAAG,IAAI,KAAK,CACf,4EAA4E,CAC7E,CAAC;SACH;aAAM;YACL,IAAI;gBACF,MAAM,OAAO,GAAG,MAAM,0CAAiC,CACrD,KAAK,EACL,UAAU,CACX,CAAC;gBACD,OAAqD,CAAC,OAAO;oBAC5D,OAAO,CAAC;aACX;YAAC,OAAO,CAAC,EAAE;gBACV,mCAAW,CAAC,CAAC,CAAC,CAAC;gBACf,KAAK,GAAG,CAAC,CAAC;aACX;SACF;QAED,IAAI,qBAAqB,IAAI,KAAK,KAAK,SAAS,EAAE;YAChD,MAAM,KAAK,CAAC;SACb;QAED,MAAM,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC,CAAC;AApCW,QAAA,wBAAwB,4BAoCnC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axinom/mosaic-id-guard",
-  "version": "0.9.2-rc.3",
+  "version": "0.10.0",
   "description": "Authentication and authorization helpers for Axinom Mosaic services",
   "author": "Axinom",
   "license": "PROPRIETARY",
@@ -26,10 +26,10 @@
     "test:ci": "jest --reporters=default --reporters=jest-junit --coverage --coverageReporters=cobertura --coverageReporters=html"
   },
   "dependencies": {
-    "@axinom/mosaic-id-link-be": "^0.3.13-rc.3",
-    "@axinom/mosaic-id-utils": "^0.3.2-rc.3",
-    "@axinom/mosaic-message-bus": "^0.4.2-rc.3",
-    "@axinom/mosaic-service-common": "^0.10.0-rc.3",
+    "@axinom/mosaic-id-link-be": "^0.4.0",
+    "@axinom/mosaic-id-utils": "^0.4.0",
+    "@axinom/mosaic-message-bus": "^0.4.2",
+    "@axinom/mosaic-service-common": "^0.10.0",
     "amqplib": "^0.6.0",
     "express": "^4.17.1",
     "express-bearer-token": "^2.4.0",
@@ -58,5 +58,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "30a5cceacde15746fcf22502f57c22c2f13643ea"
+  "gitHead": "de356e3d88414dc569d1291d00c21069c5e3556a"
 }