@car-parts/common 1.0.1 → 1.0.2

package/build/errors/forbidden-error.d.ts

@@ -0,0 +1,8 @@
+import { CustomError } from './custom-error';
+export declare class ForbiddenError extends CustomError {
+    statusCode: number;
+    constructor(message?: string);
+    serializeErrors(): {
+        message: string;
+    }[];
+}

package/build/errors/forbidden-error.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ForbiddenError = void 0;
+const custom_error_1 = require("./custom-error");
+class ForbiddenError extends custom_error_1.CustomError {
+    constructor(message = 'You do not have permission to perform this action') {
+        super(message);
+        this.statusCode = 403;
+        Object.setPrototypeOf(this, ForbiddenError.prototype);
+    }
+    serializeErrors() {
+        return [
+            {
+                message: this.message,
+            },
+        ];
+    }
+}
+exports.ForbiddenError = ForbiddenError;

package/build/errors/not-authorized-error.js

@@ -4,7 +4,7 @@ exports.NotAuthorizedError = void 0;
 const custom_error_1 = require("./custom-error");
 class NotAuthorizedError extends custom_error_1.CustomError {
     constructor() {
-        super('Not authorized');
+        super('You are not logged in');
         this.statusCode = 401;
         // Only because we are extending a built-in class
         Object.setPrototypeOf(this, NotAuthorizedError.prototype);

package/build/index.d.ts

@@ -4,7 +4,9 @@ export * from './errors/database-connection-error';
 export * from './errors/not-authorized-error';
 export * from './errors/not-found-error';
 export * from './errors/request-validation-error';
+export * from './errors/forbidden-error';
 export * from './middlewares/current-user';
 export * from './middlewares/error-handler';
 export * from './middlewares/require-auth';
 export * from './middlewares/validate-request';
+export * from './middlewares/restrinct-to';

package/build/index.js

@@ -20,7 +20,9 @@ __exportStar(require("./errors/database-connection-error"), exports);
 __exportStar(require("./errors/not-authorized-error"), exports);
 __exportStar(require("./errors/not-found-error"), exports);
 __exportStar(require("./errors/request-validation-error"), exports);
+__exportStar(require("./errors/forbidden-error"), exports);
 __exportStar(require("./middlewares/current-user"), exports);
 __exportStar(require("./middlewares/error-handler"), exports);
 __exportStar(require("./middlewares/require-auth"), exports);
 __exportStar(require("./middlewares/validate-request"), exports);
+__exportStar(require("./middlewares/restrinct-to"), exports);

package/build/middlewares/current-user.d.ts

@@ -2,6 +2,7 @@ import { Request, Response, NextFunction } from 'express';
 interface UserPayload {
     id: string;
     email: string;
+    role: string;
 }
 declare global {
     namespace Express {

package/build/middlewares/restrinct-to.d.ts

@@ -0,0 +1 @@
+export {};

package/build/middlewares/restrinct-to.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const forbidden_error_1 = require("../errors/forbidden-error");
+const restrictTo = (...roles) => (req, res, next) => {
+    // roles is an array ['admin']
+    if (!roles.includes(req.currentUser.role)) {
+        throw new forbidden_error_1.ForbiddenError(); // forbidden
+    }
+    next();
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@car-parts/common",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "files": [
@@ -16,6 +16,7 @@
   "license": "ISC",
   "description": "",
   "devDependencies": {
+    "@types/node": "^24.10.1",
     "del-cli": "^6.0.0",
     "typescript": "^5.8.3"
   },