@contember/engine-tenant-api 1.3.0-alpha.8 → 1.3.0-beta.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/src/TenantContainer.d.ts +17 -3
- package/dist/src/TenantContainer.d.ts.map +1 -1
- package/dist/src/TenantContainer.js +7 -0
- package/dist/src/TenantContainer.js.map +1 -1
- package/dist/src/bridges/system/IdentityFetcher.d.ts +1 -1
- package/dist/src/bridges/system/IdentityFetcher.d.ts.map +1 -1
- package/dist/src/migrations/2023-01-20-135500-person-email-normalize.d.ts +3 -0
- package/dist/src/migrations/2023-01-20-135500-person-email-normalize.d.ts.map +1 -0
- package/dist/src/migrations/2023-01-20-135500-person-email-normalize.js +28 -0
- package/dist/src/migrations/2023-01-20-135500-person-email-normalize.js.map +1 -0
- package/dist/src/migrations/2023-06-03-104000-person-disabled.d.ts +3 -0
- package/dist/src/migrations/2023-06-03-104000-person-disabled.d.ts.map +1 -0
- package/dist/src/migrations/2023-06-03-104000-person-disabled.js +11 -0
- package/dist/src/migrations/2023-06-03-104000-person-disabled.js.map +1 -0
- package/dist/src/migrations/runner.d.ts.map +1 -1
- package/dist/src/migrations/runner.js +4 -0
- package/dist/src/migrations/runner.js.map +1 -1
- package/dist/src/migrations/snapshot.d.ts.map +1 -1
- package/dist/src/migrations/snapshot.js +1 -0
- package/dist/src/migrations/snapshot.js.map +1 -1
- package/dist/src/model/authorization/AclSchemaAccessNodeFactory.d.ts.map +1 -1
- package/dist/src/model/authorization/AclSchemaAccessNodeFactory.js +14 -9
- package/dist/src/model/authorization/AclSchemaAccessNodeFactory.js.map +1 -1
- package/dist/src/model/authorization/MembershipMatcher.d.ts +1 -1
- package/dist/src/model/authorization/MembershipMatcher.d.ts.map +1 -1
- package/dist/src/model/authorization/PermissionActions.d.ts +21 -0
- package/dist/src/model/authorization/PermissionActions.d.ts.map +1 -1
- package/dist/src/model/authorization/PermissionActions.js +4 -2
- package/dist/src/model/authorization/PermissionActions.js.map +1 -1
- package/dist/src/model/authorization/PermissionContext.d.ts +1 -1
- package/dist/src/model/authorization/PermissionContext.d.ts.map +1 -1
- package/dist/src/model/authorization/PermissionsFactory.d.ts.map +1 -1
- package/dist/src/model/authorization/PermissionsFactory.js +6 -3
- package/dist/src/model/authorization/PermissionsFactory.js.map +1 -1
- package/dist/src/model/authorization/Roles.js +1 -1
- package/dist/src/model/authorization/Roles.js.map +1 -1
- package/dist/src/model/commands/apiKey/CreateApiKeyCommand.d.ts +1 -1
- package/dist/src/model/commands/apiKey/CreateApiKeyCommand.d.ts.map +1 -1
- package/dist/src/model/commands/identity/PatchIdentityGlobalRoles.d.ts +9 -0
- package/dist/src/model/commands/identity/PatchIdentityGlobalRoles.d.ts.map +1 -0
- package/dist/src/model/commands/identity/PatchIdentityGlobalRoles.js +29 -0
- package/dist/src/model/commands/identity/PatchIdentityGlobalRoles.js.map +1 -0
- package/dist/src/model/commands/identity/index.d.ts +1 -0
- package/dist/src/model/commands/identity/index.d.ts.map +1 -1
- package/dist/src/model/commands/identity/index.js +1 -0
- package/dist/src/model/commands/identity/index.js.map +1 -1
- package/dist/src/model/commands/idp/UpdateIdpCommand.d.ts +1 -1
- package/dist/src/model/commands/idp/UpdateIdpCommand.d.ts.map +1 -1
- package/dist/src/model/commands/membership/AddProjectMemberCommand.d.ts +2 -6
- package/dist/src/model/commands/membership/AddProjectMemberCommand.d.ts.map +1 -1
- package/dist/src/model/commands/membership/AddProjectMemberCommand.js +5 -11
- package/dist/src/model/commands/membership/AddProjectMemberCommand.js.map +1 -1
- package/dist/src/model/commands/membership/RemoveProjectMemberCommand.d.ts +1 -1
- package/dist/src/model/commands/membership/RemoveProjectMemberCommand.d.ts.map +1 -1
- package/dist/src/model/commands/membership/RemoveProjectMemberCommand.js +1 -2
- package/dist/src/model/commands/membership/RemoveProjectMemberCommand.js.map +1 -1
- package/dist/src/model/commands/membership/UpdateProjectMemberCommand.d.ts +1 -1
- package/dist/src/model/commands/membership/UpdateProjectMemberCommand.d.ts.map +1 -1
- package/dist/src/model/commands/membership/UpdateProjectMemberCommand.js +2 -3
- package/dist/src/model/commands/membership/UpdateProjectMemberCommand.js.map +1 -1
- package/dist/src/model/commands/membership/types.d.ts +3 -3
- package/dist/src/model/commands/membership/types.d.ts.map +1 -1
- package/dist/src/model/commands/passwordReset/ResetPasswordCommand.d.ts +2 -6
- package/dist/src/model/commands/passwordReset/ResetPasswordCommand.d.ts.map +1 -1
- package/dist/src/model/commands/passwordReset/ResetPasswordCommand.js +5 -11
- package/dist/src/model/commands/passwordReset/ResetPasswordCommand.js.map +1 -1
- package/dist/src/model/commands/person/CreatePersonCommand.d.ts.map +1 -1
- package/dist/src/model/commands/person/CreatePersonCommand.js +10 -5
- package/dist/src/model/commands/person/CreatePersonCommand.js.map +1 -1
- package/dist/src/model/commands/person/DisablePersonCommand.d.ts +7 -0
- package/dist/src/model/commands/person/DisablePersonCommand.d.ts.map +1 -0
- package/dist/src/model/commands/person/DisablePersonCommand.js +22 -0
- package/dist/src/model/commands/person/DisablePersonCommand.js.map +1 -0
- package/dist/src/model/dtos/Password.d.ts +1 -1
- package/dist/src/model/dtos/Password.d.ts.map +1 -1
- package/dist/src/model/mailing/type.js +1 -1
- package/dist/src/model/mailing/type.js.map +1 -1
- package/dist/src/model/queries/apiKey/ApiKeyQuery.d.ts +23 -0
- package/dist/src/model/queries/apiKey/ApiKeyQuery.d.ts.map +1 -0
- package/dist/src/model/queries/apiKey/ApiKeyQuery.js +45 -0
- package/dist/src/model/queries/apiKey/ApiKeyQuery.js.map +1 -0
- package/dist/src/model/queries/apiKey/index.d.ts +1 -1
- package/dist/src/model/queries/apiKey/index.d.ts.map +1 -1
- package/dist/src/model/queries/apiKey/index.js +1 -1
- package/dist/src/model/queries/apiKey/index.js.map +1 -1
- package/dist/src/model/queries/idp/types.d.ts +4 -4
- package/dist/src/model/queries/idp/types.d.ts.map +1 -1
- package/dist/src/model/queries/membership/ProjectMembersQuery.d.ts +1 -1
- package/dist/src/model/queries/membership/ProjectMembersQuery.d.ts.map +1 -1
- package/dist/src/model/queries/membership/ProjectMembersQuery.js +3 -4
- package/dist/src/model/queries/membership/ProjectMembersQuery.js.map +1 -1
- package/dist/src/model/queries/person/PersonQuery.d.ts +4 -3
- package/dist/src/model/queries/person/PersonQuery.d.ts.map +1 -1
- package/dist/src/model/queries/person/PersonQuery.js +22 -0
- package/dist/src/model/queries/person/PersonQuery.js.map +1 -1
- package/dist/src/model/queries/person/PersonQueryBuilderFactory.d.ts.map +1 -1
- package/dist/src/model/queries/person/PersonQueryBuilderFactory.js +1 -0
- package/dist/src/model/queries/person/PersonQueryBuilderFactory.js.map +1 -1
- package/dist/src/model/queries/person/types.d.ts +4 -3
- package/dist/src/model/queries/person/types.d.ts.map +1 -1
- package/dist/src/model/queries/project/ProjectSecretsQuery.d.ts +1 -1
- package/dist/src/model/queries/project/ProjectSecretsQuery.d.ts.map +1 -1
- package/dist/src/model/service/IDPSignInManager.d.ts.map +1 -1
- package/dist/src/model/service/IDPSignInManager.js +8 -6
- package/dist/src/model/service/IDPSignInManager.js.map +1 -1
- package/dist/src/model/service/InviteManager.d.ts +1 -1
- package/dist/src/model/service/InviteManager.d.ts.map +1 -1
- package/dist/src/model/service/InviteManager.js +2 -3
- package/dist/src/model/service/InviteManager.js.map +1 -1
- package/dist/src/model/service/OtpAuthenticator.d.ts +1 -1
- package/dist/src/model/service/OtpAuthenticator.d.ts.map +1 -1
- package/dist/src/model/service/PasswordChangeManager.js +4 -5
- package/dist/src/model/service/PasswordChangeManager.js.map +1 -1
- package/dist/src/model/service/PasswordResetManager.d.ts +2 -4
- package/dist/src/model/service/PasswordResetManager.d.ts.map +1 -1
- package/dist/src/model/service/PasswordResetManager.js +2 -6
- package/dist/src/model/service/PasswordResetManager.js.map +1 -1
- package/dist/src/model/service/PersonAccessManager.d.ts +14 -0
- package/dist/src/model/service/PersonAccessManager.d.ts.map +1 -0
- package/dist/src/model/service/PersonAccessManager.js +42 -0
- package/dist/src/model/service/PersonAccessManager.js.map +1 -0
- package/dist/src/model/service/PersonManager.d.ts +7 -0
- package/dist/src/model/service/PersonManager.d.ts.map +1 -0
- package/dist/src/model/service/PersonManager.js +11 -0
- package/dist/src/model/service/PersonManager.js.map +1 -0
- package/dist/src/model/service/ProjectManager.d.ts +1 -1
- package/dist/src/model/service/ProjectManager.d.ts.map +1 -1
- package/dist/src/model/service/ProjectManager.js +2 -3
- package/dist/src/model/service/ProjectManager.js.map +1 -1
- package/dist/src/model/service/ProjectMemberManager.d.ts +2 -2
- package/dist/src/model/service/ProjectMemberManager.d.ts.map +1 -1
- package/dist/src/model/service/ProjectMemberManager.js +3 -16
- package/dist/src/model/service/ProjectMemberManager.js.map +1 -1
- package/dist/src/model/service/RolesManager.d.ts +11 -0
- package/dist/src/model/service/RolesManager.d.ts.map +1 -0
- package/dist/src/model/service/RolesManager.js +35 -0
- package/dist/src/model/service/RolesManager.js.map +1 -0
- package/dist/src/model/service/SignInManager.d.ts +2 -2
- package/dist/src/model/service/SignInManager.d.ts.map +1 -1
- package/dist/src/model/service/SignInManager.js +13 -8
- package/dist/src/model/service/SignInManager.js.map +1 -1
- package/dist/src/model/service/SignUpManager.d.ts +2 -2
- package/dist/src/model/service/SignUpManager.d.ts.map +1 -1
- package/dist/src/model/service/SignUpManager.js +2 -3
- package/dist/src/model/service/SignUpManager.js.map +1 -1
- package/dist/src/model/service/apiKey/ApiKeyManager.d.ts +3 -1
- package/dist/src/model/service/apiKey/ApiKeyManager.d.ts.map +1 -1
- package/dist/src/model/service/apiKey/ApiKeyManager.js +4 -1
- package/dist/src/model/service/apiKey/ApiKeyManager.js.map +1 -1
- package/dist/src/model/service/apiKey/ApiKeyService.d.ts +1 -1
- package/dist/src/model/service/apiKey/ApiKeyService.d.ts.map +1 -1
- package/dist/src/model/service/idp/IDPManager.d.ts +4 -4
- package/dist/src/model/service/idp/IDPManager.d.ts.map +1 -1
- package/dist/src/model/service/idp/IDPManager.js +7 -8
- package/dist/src/model/service/idp/IDPManager.js.map +1 -1
- package/dist/src/model/service/idp/providers/AppleProvider.d.ts +1 -1
- package/dist/src/model/service/idp/providers/AppleProvider.d.ts.map +1 -1
- package/dist/src/model/service/idp/providers/FacebookProvider.d.ts +1 -1
- package/dist/src/model/service/idp/providers/FacebookProvider.d.ts.map +1 -1
- package/dist/src/model/service/idp/providers/OIDCTypes.d.ts +3 -3
- package/dist/src/model/service/idp/providers/OIDCTypes.d.ts.map +1 -1
- package/dist/src/model/service/index.d.ts +2 -0
- package/dist/src/model/service/index.d.ts.map +1 -1
- package/dist/src/model/service/index.js +2 -0
- package/dist/src/model/service/index.js.map +1 -1
- package/dist/src/model/type/Variables.d.ts +1 -1
- package/dist/src/model/type/Variables.d.ts.map +1 -1
- package/dist/src/model/utils/Response.d.ts +2 -2
- package/dist/src/model/utils/Response.d.ts.map +1 -1
- package/dist/src/model/utils/email.d.ts +2 -0
- package/dist/src/model/utils/email.d.ts.map +1 -0
- package/dist/src/model/utils/email.js +8 -0
- package/dist/src/model/utils/email.js.map +1 -0
- package/dist/src/model/utils/tokenUtils.d.ts +1 -1
- package/dist/src/model/utils/tokenUtils.d.ts.map +1 -1
- package/dist/src/model/utils/typeUtils.d.ts +1 -1
- package/dist/src/model/utils/typeUtils.d.ts.map +1 -1
- package/dist/src/resolvers/ResolverFactory.d.ts +4 -1
- package/dist/src/resolvers/ResolverFactory.d.ts.map +1 -1
- package/dist/src/resolvers/ResolverFactory.js +3 -0
- package/dist/src/resolvers/ResolverFactory.js.map +1 -1
- package/dist/src/resolvers/errorUtils.d.ts +3 -3
- package/dist/src/resolvers/errorUtils.d.ts.map +1 -1
- package/dist/src/resolvers/errorUtils.js.map +1 -1
- package/dist/src/resolvers/membershipUtils.d.ts +4 -9
- package/dist/src/resolvers/membershipUtils.d.ts.map +1 -1
- package/dist/src/resolvers/membershipUtils.js +10 -18
- package/dist/src/resolvers/membershipUtils.js.map +1 -1
- package/dist/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js +1 -2
- package/dist/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js +1 -2
- package/dist/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/identity/GlobalRolesMutationResolver.d.ts +11 -0
- package/dist/src/resolvers/mutation/identity/GlobalRolesMutationResolver.d.ts.map +1 -0
- package/dist/src/resolvers/mutation/identity/GlobalRolesMutationResolver.js +44 -0
- package/dist/src/resolvers/mutation/identity/GlobalRolesMutationResolver.js.map +1 -0
- package/dist/src/resolvers/mutation/identity/index.d.ts +2 -0
- package/dist/src/resolvers/mutation/identity/index.d.ts.map +1 -0
- package/dist/src/resolvers/mutation/identity/index.js +18 -0
- package/dist/src/resolvers/mutation/identity/index.js.map +1 -0
- package/dist/src/resolvers/mutation/index.d.ts +1 -0
- package/dist/src/resolvers/mutation/index.d.ts.map +1 -1
- package/dist/src/resolvers/mutation/index.js +1 -0
- package/dist/src/resolvers/mutation/index.js.map +1 -1
- package/dist/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.js +6 -7
- package/dist/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/person/ChangePasswordMutationResolver.js +2 -3
- package/dist/src/resolvers/mutation/person/ChangePasswordMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/person/DisablePersonMutationResolver.d.ts +11 -0
- package/dist/src/resolvers/mutation/person/DisablePersonMutationResolver.d.ts.map +1 -0
- package/dist/src/resolvers/mutation/person/DisablePersonMutationResolver.js +36 -0
- package/dist/src/resolvers/mutation/person/DisablePersonMutationResolver.js.map +1 -0
- package/dist/src/resolvers/mutation/person/InviteMutationResolver.d.ts.map +1 -1
- package/dist/src/resolvers/mutation/person/InviteMutationResolver.js +3 -4
- package/dist/src/resolvers/mutation/person/InviteMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/person/OtpMutationResolver.d.ts.map +1 -1
- package/dist/src/resolvers/mutation/person/OtpMutationResolver.js +3 -4
- package/dist/src/resolvers/mutation/person/OtpMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/person/ResetPasswordMutationResolver.d.ts.map +1 -1
- package/dist/src/resolvers/mutation/person/ResetPasswordMutationResolver.js +2 -10
- package/dist/src/resolvers/mutation/person/ResetPasswordMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/person/SignInMutationResolver.d.ts.map +1 -1
- package/dist/src/resolvers/mutation/person/SignInMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/person/SignOutMutationResolver.d.ts.map +1 -1
- package/dist/src/resolvers/mutation/person/SignOutMutationResolver.js +5 -2
- package/dist/src/resolvers/mutation/person/SignOutMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/project/CreateProjectMutationResolver.d.ts.map +1 -1
- package/dist/src/resolvers/mutation/project/CreateProjectMutationResolver.js +1 -2
- package/dist/src/resolvers/mutation/project/CreateProjectMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/project/SetProjectSecretMutationResolver.js +1 -2
- package/dist/src/resolvers/mutation/project/SetProjectSecretMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/project/UpdateProjectMutationResolver.d.ts.map +1 -1
- package/dist/src/resolvers/mutation/project/UpdateProjectMutationResolver.js +1 -2
- package/dist/src/resolvers/mutation/project/UpdateProjectMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js +1 -2
- package/dist/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js +1 -2
- package/dist/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js.map +1 -1
- package/dist/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js +1 -2
- package/dist/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js.map +1 -1
- package/dist/src/resolvers/types/ProjectTypeResolver.d.ts.map +1 -1
- package/dist/src/resolvers/types/ProjectTypeResolver.js +5 -6
- package/dist/src/resolvers/types/ProjectTypeResolver.js.map +1 -1
- package/dist/src/schema/index.d.ts +431 -397
- package/dist/src/schema/index.d.ts.map +1 -1
- package/dist/src/schema/index.js +0 -188
- package/dist/src/schema/index.js.map +1 -1
- package/dist/src/schema/tenant.graphql.d.ts.map +1 -1
- package/dist/src/schema/tenant.graphql.js +97 -21
- package/dist/src/schema/tenant.graphql.js.map +1 -1
- package/dist/src/tsconfig.tsbuildinfo +1 -1
- package/dist/src/utils/Mailer.d.ts +1 -1
- package/dist/src/utils/Mailer.d.ts.map +1 -1
- package/dist/src/utils/array.d.ts +1 -1
- package/dist/src/utils/array.d.ts.map +1 -1
- package/dist/src/utils/batchQuery.d.ts +2 -2
- package/dist/src/utils/batchQuery.d.ts.map +1 -1
- package/dist/tests/cases/integration/db/updateRoles.test.d.ts +2 -0
- package/dist/tests/cases/integration/db/updateRoles.test.d.ts.map +1 -0
- package/dist/tests/cases/integration/db/updateRoles.test.js +67 -0
- package/dist/tests/cases/integration/db/updateRoles.test.js.map +1 -0
- package/dist/tests/cases/integration/mocked/confirmOtpMutation.test.js +1 -2
- package/dist/tests/cases/integration/mocked/confirmOtpMutation.test.js.map +1 -1
- package/dist/tests/cases/integration/mocked/gql/signUp.d.ts.map +1 -1
- package/dist/tests/cases/integration/mocked/gql/signUp.js +4 -0
- package/dist/tests/cases/integration/mocked/gql/signUp.js.map +1 -1
- package/dist/tests/cases/integration/mocked/gql/types.d.ts +1 -1
- package/dist/tests/cases/integration/mocked/gql/types.d.ts.map +1 -1
- package/dist/tests/cases/integration/mocked/signInMutation.test.js +36 -4
- package/dist/tests/cases/integration/mocked/signInMutation.test.js.map +1 -1
- package/dist/tests/cases/integration/mocked/signOutMutation.test.js +53 -0
- package/dist/tests/cases/integration/mocked/signOutMutation.test.js.map +1 -1
- package/dist/tests/cases/integration/mocked/signUpMutation.test.js +9 -0
- package/dist/tests/cases/integration/mocked/signUpMutation.test.js.map +1 -1
- package/dist/tests/cases/integration/mocked/sql/getApiKeySql.d.ts +11 -0
- package/dist/tests/cases/integration/mocked/sql/getApiKeySql.d.ts.map +1 -0
- package/dist/tests/cases/integration/mocked/sql/getApiKeySql.js +31 -0
- package/dist/tests/cases/integration/mocked/sql/getApiKeySql.js.map +1 -0
- package/dist/tests/cases/integration/mocked/sql/getPersonByEmailSql.d.ts.map +1 -1
- package/dist/tests/cases/integration/mocked/sql/getPersonByEmailSql.js +2 -1
- package/dist/tests/cases/integration/mocked/sql/getPersonByEmailSql.js.map +1 -1
- package/dist/tests/cases/integration/mocked/sql/getPersonByIdSql.js +1 -1
- package/dist/tests/cases/integration/mocked/sql/getPersonByIdentity.js +1 -1
- package/dist/tests/cases/integration/mocked/sql/getPersonByIdpSql.d.ts.map +1 -1
- package/dist/tests/cases/integration/mocked/sql/getPersonByIdpSql.js +2 -1
- package/dist/tests/cases/integration/mocked/sql/getPersonByIdpSql.js.map +1 -1
- package/dist/tests/cases/unit/authorization/membershipAwareAccessNode.test.js +27 -0
- package/dist/tests/cases/unit/authorization/membershipAwareAccessNode.test.js.map +1 -1
- package/dist/tests/src/mailer.d.ts +2 -2
- package/dist/tests/src/mailer.d.ts.map +1 -1
- package/dist/tests/tsconfig.tsbuildinfo +1 -1
- package/graphql-tenant.codegen.yml +2 -1
- package/package.json +14 -14
- package/src/TenantContainer.ts +19 -2
- package/src/migrations/2023-01-20-135500-person-email-normalize.ts +28 -0
- package/src/migrations/2023-06-03-104000-person-disabled.ts +10 -0
- package/src/migrations/runner.ts +4 -0
- package/src/migrations/snapshot.ts +1 -0
- package/src/model/authorization/AclSchemaAccessNodeFactory.ts +16 -6
- package/src/model/authorization/PermissionActions.ts +5 -0
- package/src/model/authorization/PermissionsFactory.ts +11 -3
- package/src/model/commands/identity/PatchIdentityGlobalRoles.ts +28 -0
- package/src/model/commands/identity/index.ts +1 -0
- package/src/model/commands/membership/AddProjectMemberCommand.ts +9 -10
- package/src/model/commands/membership/RemoveProjectMemberCommand.ts +1 -1
- package/src/model/commands/membership/UpdateProjectMemberCommand.ts +2 -2
- package/src/model/commands/passwordReset/ResetPasswordCommand.ts +9 -16
- package/src/model/commands/person/CreatePersonCommand.ts +9 -4
- package/src/model/commands/person/DisablePersonCommand.ts +18 -0
- package/src/model/queries/apiKey/ApiKeyQuery.ts +64 -0
- package/src/model/queries/apiKey/index.ts +1 -1
- package/src/model/queries/idp/types.ts +2 -2
- package/src/model/queries/membership/ProjectMembersQuery.ts +3 -3
- package/src/model/queries/person/PersonQuery.ts +30 -3
- package/src/model/queries/person/PersonQueryBuilderFactory.ts +1 -0
- package/src/model/queries/person/types.ts +3 -2
- package/src/model/service/IDPSignInManager.ts +11 -6
- package/src/model/service/InviteManager.ts +2 -2
- package/src/model/service/PasswordChangeManager.ts +4 -4
- package/src/model/service/PasswordResetManager.ts +3 -5
- package/src/model/service/PersonAccessManager.ts +56 -0
- package/src/model/service/PersonManager.ts +14 -0
- package/src/model/service/ProjectManager.ts +3 -3
- package/src/model/service/ProjectMemberManager.ts +3 -15
- package/src/model/service/RolesManager.ts +40 -0
- package/src/model/service/SignInManager.ts +25 -7
- package/src/model/service/SignUpManager.ts +2 -2
- package/src/model/service/apiKey/ApiKeyManager.ts +8 -1
- package/src/model/service/idp/IDPManager.ts +8 -8
- package/src/model/service/index.ts +2 -0
- package/src/model/utils/Response.ts +1 -1
- package/src/model/utils/email.ts +5 -0
- package/src/resolvers/ResolverFactory.ts +10 -1
- package/src/resolvers/errorUtils.ts +1 -1
- package/src/resolvers/membershipUtils.ts +21 -21
- package/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.ts +2 -2
- package/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.ts +1 -1
- package/src/resolvers/mutation/identity/GlobalRolesMutationResolver.ts +69 -0
- package/src/resolvers/mutation/identity/index.ts +1 -0
- package/src/resolvers/mutation/index.ts +1 -0
- package/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.ts +6 -6
- package/src/resolvers/mutation/person/ChangePasswordMutationResolver.ts +2 -2
- package/src/resolvers/mutation/person/DisablePersonMutationResolver.ts +48 -0
- package/src/resolvers/mutation/person/InviteMutationResolver.ts +5 -12
- package/src/resolvers/mutation/person/OtpMutationResolver.ts +4 -6
- package/src/resolvers/mutation/person/ResetPasswordMutationResolver.ts +2 -10
- package/src/resolvers/mutation/person/SignInMutationResolver.ts +1 -0
- package/src/resolvers/mutation/person/SignOutMutationResolver.ts +13 -3
- package/src/resolvers/mutation/project/CreateProjectMutationResolver.ts +2 -7
- package/src/resolvers/mutation/project/SetProjectSecretMutationResolver.ts +1 -1
- package/src/resolvers/mutation/project/UpdateProjectMutationResolver.ts +2 -7
- package/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts +2 -2
- package/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts +1 -1
- package/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts +2 -2
- package/src/resolvers/types/ProjectTypeResolver.ts +2 -2
- package/src/schema/index.ts +321 -159
- package/src/schema/tenant.graphql.ts +97 -21
- package/tests/cases/integration/db/updateRoles.test.ts +74 -0
- package/tests/cases/integration/mocked/confirmOtpMutation.test.ts +1 -1
- package/tests/cases/integration/mocked/gql/signUp.ts +4 -0
- package/tests/cases/integration/mocked/signInMutation.test.ts +37 -3
- package/tests/cases/integration/mocked/signOutMutation.test.ts +58 -0
- package/tests/cases/integration/mocked/signUpMutation.test.ts +9 -0
- package/tests/cases/integration/mocked/sql/getApiKeySql.ts +33 -0
- package/tests/cases/integration/mocked/sql/getPersonByEmailSql.ts +2 -1
- package/tests/cases/integration/mocked/sql/getPersonByIdSql.ts +1 -1
- package/tests/cases/integration/mocked/sql/getPersonByIdentity.ts +1 -1
- package/tests/cases/integration/mocked/sql/getPersonByIdpSql.ts +2 -1
- package/tests/cases/unit/authorization/membershipAwareAccessNode.test.ts +36 -0
- package/dist/src/model/queries/apiKey/ApiKeyByTokenQuery.d.ts +0 -22
- package/dist/src/model/queries/apiKey/ApiKeyByTokenQuery.d.ts.map +0 -1
- package/dist/src/model/queries/apiKey/ApiKeyByTokenQuery.js +0 -33
- package/dist/src/model/queries/apiKey/ApiKeyByTokenQuery.js.map +0 -1
- package/src/model/queries/apiKey/ApiKeyByTokenQuery.ts +0 -49
|
@@ -1,8 +1,10 @@
|
|
|
1
|
+
/// <reference types="node" />
|
|
2
|
+
/// <reference types="node" />
|
|
1
3
|
import { AccessEvaluator, Authorizator } from '@contember/authorization';
|
|
2
4
|
import { Connection, DatabaseConfig } from '@contember/database';
|
|
3
5
|
import { Builder } from '@contember/dic';
|
|
4
|
-
import { ApiKeyManager, ApiKeyService, DatabaseContext, Identity, IdentityFactory, IDPHandlerRegistry, IDPSignInManager, InviteManager, MailTemplateManager, MembershipValidator, OtpAuthenticator, OtpManager, PasswordChangeManager, PasswordResetManager, PermissionContextFactory, ProjectInitializer, ProjectManager, ProjectMemberManager, ProjectSchemaResolver, ProjectScopeFactory, Providers, SecretsManager, SignInManager, SignUpManager, UserMailer } from './model';
|
|
5
|
-
import { AddIDPMutationResolver, AddProjectMemberMutationResolver, ChangePasswordMutationResolver, CreateApiKeyMutationResolver, CreateProjectMutationResolver, DisableApiKeyMutationResolver, DisableIDPMutationResolver, EnableIDPMutationResolver, IdentityTypeResolver, IDPMutationResolver, InviteMutationResolver, MailTemplateMutationResolver, MeQueryResolver, OtpMutationResolver, ProjectMembersQueryResolver, ProjectQueryResolver, ProjectTypeResolver, RemoveProjectMemberMutationResolver, ResetPasswordMutationResolver, SetProjectSecretMutationResolver, SignInMutationResolver, SignOutMutationResolver, SignUpMutationResolver, TenantResolverContextFactory, UpdateProjectMemberMutationResolver, UpdateProjectMutationResolver } from './resolvers';
|
|
6
|
+
import { ApiKeyManager, ApiKeyService, DatabaseContext, Identity, IdentityFactory, IDPHandlerRegistry, IDPSignInManager, InviteManager, MailTemplateManager, MembershipValidator, OtpAuthenticator, OtpManager, PasswordChangeManager, PasswordResetManager, PermissionContextFactory, ProjectInitializer, ProjectManager, ProjectMemberManager, ProjectSchemaResolver, ProjectScopeFactory, Providers, RolesManager, SecretsManager, SignInManager, SignUpManager, UserMailer, PersonAccessManager } from './model';
|
|
7
|
+
import { AddIDPMutationResolver, AddProjectMemberMutationResolver, ChangePasswordMutationResolver, CreateApiKeyMutationResolver, CreateProjectMutationResolver, DisableApiKeyMutationResolver, DisableIDPMutationResolver, EnableIDPMutationResolver, IdentityGlobalRolesMutationResolver, IdentityTypeResolver, IDPMutationResolver, InviteMutationResolver, MailTemplateMutationResolver, MeQueryResolver, OtpMutationResolver, ProjectMembersQueryResolver, ProjectQueryResolver, ProjectTypeResolver, RemoveProjectMemberMutationResolver, ResetPasswordMutationResolver, SetProjectSecretMutationResolver, SignInMutationResolver, SignOutMutationResolver, SignUpMutationResolver, TenantResolverContextFactory, UpdateProjectMemberMutationResolver, UpdateProjectMutationResolver } from './resolvers';
|
|
6
8
|
import * as Schema from './schema';
|
|
7
9
|
import { MailerOptions, TemplateRenderer } from './utils';
|
|
8
10
|
import { IdentityFetcher } from './bridges/system/IdentityFetcher';
|
|
@@ -11,6 +13,8 @@ import { IDPManager } from './model/service/idp/IDPManager';
|
|
|
11
13
|
import { IDPQueryResolver } from './resolvers/query/IDPQueryResolver';
|
|
12
14
|
import { UpdateIDPMutationResolver } from './resolvers/mutation/idp/UpdateIDPMutationResolver';
|
|
13
15
|
import { TenantCredentials, TenantMigrationsRunner } from './migrations';
|
|
16
|
+
import { DisablePersonMutationResolver } from './resolvers/mutation/person/DisablePersonMutationResolver';
|
|
17
|
+
import { PersonManager } from './model/service/PersonManager';
|
|
14
18
|
export interface TenantContainer {
|
|
15
19
|
projectMemberManager: ProjectMemberManager;
|
|
16
20
|
apiKeyManager: ApiKeyManager;
|
|
@@ -86,6 +90,10 @@ export declare class TenantContainerFactory {
|
|
|
86
90
|
secretManager: SecretsManager;
|
|
87
91
|
} & {
|
|
88
92
|
projectManager: ProjectManager;
|
|
93
|
+
} & {
|
|
94
|
+
personAccessManager: PersonAccessManager;
|
|
95
|
+
} & {
|
|
96
|
+
personManager: PersonManager;
|
|
89
97
|
} & {
|
|
90
98
|
passwordResetManager: PasswordResetManager;
|
|
91
99
|
} & {
|
|
@@ -106,6 +114,8 @@ export declare class TenantContainerFactory {
|
|
|
106
114
|
otpManager: OtpManager;
|
|
107
115
|
} & {
|
|
108
116
|
mailTemplateManager: MailTemplateManager;
|
|
117
|
+
} & {
|
|
118
|
+
rolesManager: RolesManager;
|
|
109
119
|
} & {
|
|
110
120
|
identityTypeResolver: IdentityTypeResolver;
|
|
111
121
|
} & {
|
|
@@ -158,14 +168,18 @@ export declare class TenantContainerFactory {
|
|
|
158
168
|
enableIdpMutationResolver: EnableIDPMutationResolver;
|
|
159
169
|
} & {
|
|
160
170
|
createProjectMutationResolver: CreateProjectMutationResolver;
|
|
171
|
+
} & {
|
|
172
|
+
disablePersonMutationResolver: DisablePersonMutationResolver;
|
|
161
173
|
} & {
|
|
162
174
|
updateProjectMutationResolver: UpdateProjectMutationResolver;
|
|
163
175
|
} & {
|
|
164
176
|
setProjectSecretMutationResolver: SetProjectSecretMutationResolver;
|
|
177
|
+
} & {
|
|
178
|
+
identityGlobalRolesMutationResolver: IdentityGlobalRolesMutationResolver;
|
|
165
179
|
} & {
|
|
166
180
|
resolverContextFactory: TenantResolverContextFactory;
|
|
167
181
|
} & {
|
|
168
|
-
resolvers: Schema.Resolvers
|
|
182
|
+
resolvers: Schema.Resolvers & {
|
|
169
183
|
Mutation: Required<Schema.MutationResolvers<any, {}> | undefined>;
|
|
170
184
|
} & {
|
|
171
185
|
Query: Required<Schema.QueryResolvers<any, {}> | undefined>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"TenantContainer.d.ts","sourceRoot":"","sources":["../../src/TenantContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAEN,aAAa,EACb,aAAa,
|
|
1
|
+
{"version":3,"file":"TenantContainer.d.ts","sourceRoot":"","sources":["../../src/TenantContainer.ts"],"names":[],"mappings":";;AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAEN,aAAa,EACb,aAAa,EAEb,eAAe,EAGf,QAAQ,EACR,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EAEnB,gBAAgB,EAChB,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EAExB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,cAAc,EACd,aAAa,EACb,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,MAAM,SAAS,CAAA;AAChB,OAAO,EACN,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC9B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,yBAAyB,EACzB,mCAAmC,EACnC,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACnB,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,mCAAmC,EACnC,6BAA6B,EAE7B,gCAAgC,EAChC,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,EAC5B,mCAAmC,EACnC,6BAA6B,EAC7B,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAClC,OAAO,EAAgB,aAAa,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAA;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAA;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAA;AAC9F,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAA;AACzG,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAE7D,MAAM,WAAW,eAAe;IAC/B,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,aAAa,EAAE,aAAa,CAAA;IAC5B,aAAa,EAAE,aAAa,CAAA;IAC5B,cAAc,EAAE,cAAc,CAAA;IAC9B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAA;IAC3B,sBAAsB,EAAE,4BAA4B,CAAA;IACpD,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;IACpC,eAAe,EAAE,eAAe,CAAA;IAChC,eAAe,EAAE,eAAe,CAAA;IAChC,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,UAAU,EAAE,UAAU,CAAC,cAAc,CAAA;CACrC;AAED,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,UAAU,CAAC,cAAc,CAAA;IACrC,aAAa,EAAE,cAAc,CAAA;IAC7B,WAAW,EAAE,aAAa,CAAA;IAC1B,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC,CAAA;CACvD;AAED,qBAAa,sBAAsB;IAEjC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAGnE,MAAM,CAAC,IAAI,EAAE,mBAAmB,GAAG,eAAe;IAkBlD,aAAa,CAAC,IAAI,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6IvC"}
|
|
@@ -12,6 +12,8 @@ const IDPManager_1 = require("./model/service/idp/IDPManager");
|
|
|
12
12
|
const IDPQueryResolver_1 = require("./resolvers/query/IDPQueryResolver");
|
|
13
13
|
const UpdateIDPMutationResolver_1 = require("./resolvers/mutation/idp/UpdateIDPMutationResolver");
|
|
14
14
|
const migrations_1 = require("./migrations");
|
|
15
|
+
const DisablePersonMutationResolver_1 = require("./resolvers/mutation/person/DisablePersonMutationResolver");
|
|
16
|
+
const PersonManager_1 = require("./model/service/PersonManager");
|
|
15
17
|
class TenantContainerFactory {
|
|
16
18
|
constructor(providers) {
|
|
17
19
|
this.providers = providers;
|
|
@@ -40,6 +42,8 @@ class TenantContainerFactory {
|
|
|
40
42
|
.addService('permissionContextFactory', ({ authorizator, identityFactory, projectScopeFactory, projectSchemaResolver }) => new model_1.PermissionContextFactory(authorizator, identityFactory, projectScopeFactory, projectSchemaResolver))
|
|
41
43
|
.addService('secretManager', ({ providers }) => new model_1.SecretsManager(providers))
|
|
42
44
|
.addService('projectManager', ({ secretManager, apiKeyService }) => new model_1.ProjectManager(secretManager, args.projectInitializer, apiKeyService))
|
|
45
|
+
.addService('personAccessManager', ({ apiKeyManager }) => new model_1.PersonAccessManager(apiKeyManager))
|
|
46
|
+
.addService('personManager', () => new PersonManager_1.PersonManager())
|
|
43
47
|
.addService('passwordResetManager', ({ userMailer, projectManager }) => new model_1.PasswordResetManager(userMailer, projectManager))
|
|
44
48
|
.addService('idpRegistry', () => {
|
|
45
49
|
const idpRegistry = new model_1.IDPHandlerRegistry();
|
|
@@ -56,6 +60,7 @@ class TenantContainerFactory {
|
|
|
56
60
|
.addService('inviteManager', ({ providers, userMailer }) => new model_1.InviteManager(providers, userMailer))
|
|
57
61
|
.addService('otpManager', ({ otpAuthenticator }) => new model_1.OtpManager(otpAuthenticator))
|
|
58
62
|
.addService('mailTemplateManager', () => new model_1.MailTemplateManager())
|
|
63
|
+
.addService('rolesManager', () => new model_1.RolesManager())
|
|
59
64
|
.addService('identityTypeResolver', ({ projectMemberManager, projectManager, permissionContextFactory }) => new resolvers_1.IdentityTypeResolver(projectMemberManager, projectManager, permissionContextFactory))
|
|
60
65
|
.addService('projectTypeResolver', ({ projectMemberManager, projectSchemaResolver }) => new resolvers_1.ProjectTypeResolver(projectMemberManager, projectSchemaResolver))
|
|
61
66
|
.addService('signInResponseFactory', ({ permissionContextFactory, identityTypeResolver }) => new SignInResponseFactory_1.SignInResponseFactory(permissionContextFactory, identityTypeResolver))
|
|
@@ -82,8 +87,10 @@ class TenantContainerFactory {
|
|
|
82
87
|
.addService('disableIdpMutationResolver', ({ idpManager }) => new resolvers_1.DisableIDPMutationResolver(idpManager))
|
|
83
88
|
.addService('enableIdpMutationResolver', ({ idpManager }) => new resolvers_1.EnableIDPMutationResolver(idpManager))
|
|
84
89
|
.addService('createProjectMutationResolver', ({ projectManager }) => new resolvers_1.CreateProjectMutationResolver(projectManager))
|
|
90
|
+
.addService('disablePersonMutationResolver', ({ personAccessManager, personManager }) => new DisablePersonMutationResolver_1.DisablePersonMutationResolver(personAccessManager, personManager))
|
|
85
91
|
.addService('updateProjectMutationResolver', ({ projectManager }) => new resolvers_1.UpdateProjectMutationResolver(projectManager))
|
|
86
92
|
.addService('setProjectSecretMutationResolver', ({ projectManager, secretManager }) => new resolvers_1.SetProjectSecretMutationResolver(projectManager, secretManager))
|
|
93
|
+
.addService('identityGlobalRolesMutationResolver', ({ rolesManager }) => new resolvers_1.IdentityGlobalRolesMutationResolver(rolesManager))
|
|
87
94
|
.addService('resolverContextFactory', ({ permissionContextFactory }) => new resolvers_1.TenantResolverContextFactory(permissionContextFactory))
|
|
88
95
|
.addService('resolvers', container => new resolvers_1.ResolverFactory(container).create())
|
|
89
96
|
.addService('connection', () => args.connection)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"TenantContainer.js","sourceRoot":"","sources":["../../src/TenantContainer.ts"],"names":[],"mappings":";;;AAAA,4DAAwE;AAExE,wCAAwC;AACxC,
|
|
1
|
+
{"version":3,"file":"TenantContainer.js","sourceRoot":"","sources":["../../src/TenantContainer.ts"],"names":[],"mappings":";;;AAAA,4DAAwE;AAExE,wCAAwC;AACxC,mCAkCgB;AAChB,2CA6BoB;AAEpB,mCAAuE;AACvE,sEAAkE;AAClE,6FAAyF;AACzF,+DAA2D;AAC3D,yEAAqE;AACrE,kGAA8F;AAC9F,6CAAwE;AACxE,6GAAyG;AACzG,iEAA6D;AA0B7D,MAAa,sBAAsB;IAClC,YACkB,SAAiD;QAAjD,cAAS,GAAT,SAAS,CAAwC;IAChE,CAAC;IAEJ,MAAM,CAAC,IAAyB;QAC/B,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;aAC7B,KAAK,EAAE;aACP,IAAI,CACJ,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,CACZ,CAAA;IACH,CAAC;IAED,aAAa,CAAC,IAAyB;QACtC,OAAO,IAAI,aAAO,CAAC,EAAE,CAAC;aACpB,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,CAC7B,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;aACjD,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,CAC1B,IAAA,oBAAY,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;aAC/B,UAAU,CAAC,uBAAuB,EAAE,GAAG,EAAE,CACzC,IAAI,CAAC,qBAAqB,CAAC;aAC3B,UAAU,CAAC,kBAAkB,EAAE,GAAG,EAAE,CACpC,IAAI,wBAAgB,EAAE,CAAC;aACvB,UAAU,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,CACrC,IAAI,+BAAe,CAAC,mBAAmB,CAAC,IAAI,0BAAkB,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;aAC3E,UAAU,CAAC,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CACnD,IAAI,4BAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;aAC1C,UAAU,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAC1D,IAAI,kBAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;aACzC,UAAU,CAAC,eAAe,EAAE,GAAG,EAAE,CACjC,IAAI,qBAAa,EAAE,CAAC;aACpB,UAAU,CAAC,eAAe,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAClD,IAAI,qBAAa,CAAC,aAAa,CAAC,CAAC;aACjC,UAAU,CAAC,eAAe,EAAE,GAAG,EAAE,CACjC,IAAI,qBAAa,EAAE,CAAC;aACpB,UAAU,CAAC,uBAAuB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CACtD,IAAI,6BAAqB,CAAC,SAAS,CAAC,CAAC;aACrC,UAAU,CAAC,sBAAsB,EAAE,GAAG,EAAE,CACxC,IAAI,4BAAoB,EAAE,CAAC;aAC3B,UAAU,CAAC,iBAAiB,EAAE,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAC3D,IAAI,uBAAe,CAAC,oBAAoB,CAAC,CAAC;aAC1C,UAAU,CAAC,qBAAqB,EAAE,GAAG,EAAE,CACvC,IAAI,2BAAmB,CAAC,IAAI,kCAA0B,EAAE,CAAC,CAAC;aAC1D,UAAU,CAAC,0BAA0B,EAAE,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,EAAE,EAAE,CACzH,IAAI,gCAAwB,CAAC,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;aACxG,UAAU,CAAC,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAC9C,IAAI,sBAAc,CAAC,SAAS,CAAC,CAAC;aAC9B,UAAU,CAAC,gBAAgB,EAAE,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,EAAE,CAClE,IAAI,sBAAc,CAAC,aAAa,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;aAC1E,UAAU,CAAC,qBAAqB,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CACxD,IAAI,2BAAmB,CAAC,aAAa,CAAC,CAAC;aACvC,UAAU,CAAC,eAAe,EAAE,GAAG,EAAE,CACjC,IAAI,6BAAa,EAAE,CAAC;aACpB,UAAU,CAAC,sBAAsB,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,EAAE,CACtE,IAAI,4BAAoB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;aACrD,UAAU,CAAC,aAAa,EAAE,GAAG,EAAE;YAC/B,MAAM,WAAW,GAAG,IAAI,0BAAkB,EAAE,CAAA;YAC5C,WAAW,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,oBAAY,EAAE,CAAC,CAAA;YACvD,WAAW,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,wBAAgB,EAAE,CAAC,CAAA;YAC/D,WAAW,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,qBAAa,EAAE,CAAC,CAAA;YACzD,OAAO,WAAW,CAAA;QACnB,CAAC,CAAC;aACD,UAAU,CAAC,kBAAkB,EAAE,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,EAAE,CAClE,IAAI,wBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;aACjD,UAAU,CAAC,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAC7C,IAAI,uBAAU,CAAC,WAAW,CAAC,CAAC;aAC5B,UAAU,CAAC,kBAAkB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CACjD,IAAI,wBAAgB,CAAC,SAAS,CAAC,CAAC;aAChC,UAAU,CAAC,eAAe,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAC/E,IAAI,qBAAa,CAAC,aAAa,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;aAC9D,UAAU,CAAC,qBAAqB,EAAE,CAAC,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAChE,IAAI,2BAAmB,CAAC,qBAAqB,CAAC,CAAC;aAC/C,UAAU,CAAC,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,CAC1D,IAAI,qBAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;aACzC,UAAU,CAAC,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAClD,IAAI,kBAAU,CAAC,gBAAgB,CAAC,CAAC;aACjC,UAAU,CAAC,qBAAqB,EAAE,GAAG,EAAE,CACvC,IAAI,2BAAmB,EAAE,CAAC;aAC1B,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,CAChC,IAAI,oBAAY,EAAE,CAAC;aAEnB,UAAU,CAAC,sBAAsB,EAAE,CAAC,EAAE,oBAAoB,EAAE,cAAc,EAAE,wBAAwB,EAAE,EAAE,EAAE,CAC1G,IAAI,gCAAoB,CAAC,oBAAoB,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;aACzF,UAAU,CAAC,qBAAqB,EAAE,CAAC,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,EAAE,EAAE,CACtF,IAAI,+BAAmB,CAAC,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;aACrE,UAAU,CAAC,uBAAuB,EAAE,CAAC,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAC3F,IAAI,6CAAqB,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,CAAC;aAC1E,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE,CACnC,IAAI,2BAAe,EAAE,CAAC;aACtB,UAAU,CAAC,kBAAkB,EAAE,GAAG,EAAE,CACpC,IAAI,mCAAgB,EAAE,CAAC;aACvB,UAAU,CAAC,sBAAsB,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAC1D,IAAI,gCAAoB,CAAC,cAAc,CAAC,CAAC;aACzC,UAAU,CAAC,6BAA6B,EAAE,CAAC,EAAE,cAAc,EAAE,oBAAoB,EAAE,EAAE,EAAE,CACvF,IAAI,uCAA2B,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;aACtE,UAAU,CAAC,wBAAwB,EAAE,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,EAAE,CAC1E,IAAI,kCAAsB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;aACzD,UAAU,CAAC,wBAAwB,EAAE,CAAC,EAAE,aAAa,EAAE,qBAAqB,EAAG,EAAE,EAAE,CACnF,IAAI,kCAAsB,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;aACjE,UAAU,CAAC,yBAAyB,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAC5D,IAAI,mCAAuB,CAAC,aAAa,CAAC,CAAC;aAC3C,UAAU,CAAC,gCAAgC,EAAE,CAAC,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAC3E,IAAI,0CAA8B,CAAC,qBAAqB,CAAC,CAAC;aAC1D,UAAU,CAAC,+BAA+B,EAAE,CAAC,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,EAAE,EAAE,CACnG,IAAI,yCAA6B,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;aAClF,UAAU,CAAC,wBAAwB,EAAE,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAChG,IAAI,kCAAsB,CAAC,aAAa,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;aAC/E,UAAU,CAAC,kCAAkC,EAAE,CAAC,EAAE,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE,EAAE,CACjH,IAAI,4CAAgC,CAAC,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;aAChG,UAAU,CAAC,qCAAqC,EAAE,CAAC,EAAE,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE,EAAE,CACpH,IAAI,+CAAmC,CAAC,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;aACnG,UAAU,CAAC,qCAAqC,EAAE,CAAC,EAAE,oBAAoB,EAAE,cAAc,EAAE,EAAE,EAAE,CAC/F,IAAI,+CAAmC,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;aAC9E,UAAU,CAAC,8BAA8B,EAAE,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE,EAAE,CACtG,IAAI,wCAA4B,CAAC,aAAa,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;aACrF,UAAU,CAAC,+BAA+B,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAClE,IAAI,yCAA6B,CAAC,aAAa,CAAC,CAAC;aACjD,UAAU,CAAC,qBAAqB,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CACrD,IAAI,+BAAmB,CAAC,UAAU,CAAC,CAAC;aACpC,UAAU,CAAC,8BAA8B,EAAE,CAAC,EAAE,cAAc,EAAE,mBAAmB,EAAE,EAAE,EAAE,CACvF,IAAI,wCAA4B,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;aACtE,UAAU,CAAC,qBAAqB,EAAE,CAAC,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAClF,IAAI,+BAAmB,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;aACjE,UAAU,CAAC,6BAA6B,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAC7D,IAAI,kCAAsB,CAAC,UAAU,CAAC,CAAC;aACvC,UAAU,CAAC,2BAA2B,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAC3D,IAAI,qDAAyB,CAAC,UAAU,CAAC,CAAC;aAC1C,UAAU,CAAC,4BAA4B,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAC5D,IAAI,sCAA0B,CAAC,UAAU,CAAC,CAAC;aAC3C,UAAU,CAAC,2BAA2B,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAC3D,IAAI,qCAAyB,CAAC,UAAU,CAAC,CAAC;aAC1C,UAAU,CAAC,+BAA+B,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CACnE,IAAI,yCAA6B,CAAC,cAAc,CAAC,CAAC;aAClD,UAAU,CAAC,+BAA+B,EAAE,CAAC,EAAE,mBAAmB,EAAE,aAAa,EAAE,EAAE,EAAE,CACvF,IAAI,6DAA6B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;aACtE,UAAU,CAAC,+BAA+B,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CACnE,IAAI,yCAA6B,CAAC,cAAc,CAAC,CAAC;aAClD,UAAU,CAAC,kCAAkC,EAAE,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,EAAE,CACrF,IAAI,4CAAgC,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;aACpE,UAAU,CAAC,qCAAqC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CACvE,IAAI,+CAAmC,CAAC,YAAY,CAAC,CAAC;aACtD,UAAU,CAAC,wBAAwB,EAAE,CAAC,EAAE,wBAAwB,EAAE,EAAE,EAAE,CACtE,IAAI,wCAA4B,CAAC,wBAAwB,CAAC,CAAC;aAC3D,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CACpC,IAAI,2BAAe,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;aACxC,UAAU,CAAC,YAAY,EAAE,GAAG,EAAE,CAC9B,IAAI,CAAC,UAAU,CAAC;aAChB,UAAU,CAAC,iBAAiB,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,CAC5D,IAAI,8BAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;aAC3D,UAAU,CAAC,iBAAiB,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CACtD,IAAI,iCAAe,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;aAC5C,UAAU,CAAC,kBAAkB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CACjD,IAAI,mCAAsB,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAA;IAC/F,CAAC;CACD;AApKD,wDAoKC"}
|
|
@@ -4,7 +4,7 @@ export declare class IdentityFetcher {
|
|
|
4
4
|
constructor(client: Client);
|
|
5
5
|
fetchIdentities(ids: string[]): Promise<Identity[]>;
|
|
6
6
|
}
|
|
7
|
-
export
|
|
7
|
+
export type Identity = PersonIdentity | ApiKeyIdentity;
|
|
8
8
|
export declare class PersonIdentity {
|
|
9
9
|
readonly identityId: string;
|
|
10
10
|
readonly person: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"IdentityFetcher.d.ts","sourceRoot":"","sources":["../../../../src/bridges/system/IdentityFetcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,qBAAa,eAAe;IAE1B,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAIV,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;CAkBhE;AAED,
|
|
1
|
+
{"version":3,"file":"IdentityFetcher.d.ts","sourceRoot":"","sources":["../../../../src/bridges/system/IdentityFetcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,qBAAa,eAAe;IAE1B,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAIV,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;CAkBhE;AAED,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,cAAc,CAAA;AAEtD,qBAAa,cAAc;aAIT,UAAU,EAAE,MAAM;aAClB,MAAM,EAAE;QACvB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;KACZ;IAPF,SAAgB,IAAI,WAAoB;gBAGvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE;QACvB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;KACZ;CAEF;AAED,qBAAa,cAAc;aAGE,UAAU,EAAE,MAAM;aAAkB,WAAW,EAAE,MAAM;IAFnF,SAAgB,IAAI,WAAoB;gBAEZ,UAAU,EAAE,MAAM,EAAkB,WAAW,EAAE,MAAM;CACnF"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"2023-01-20-135500-person-email-normalize.d.ts","sourceRoot":"","sources":["../../../src/migrations/2023-01-20-135500-person-email-normalize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAwBjE,yBAA+B,OAAO,EAAE,gBAAgB,iBAEvD"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const sql = `
|
|
4
|
+
WITH
|
|
5
|
+
normalized AS (
|
|
6
|
+
SELECT id, email, REGEXP_REPLACE(LOWER(email), '\\s', '', 'g') AS normalized
|
|
7
|
+
FROM person
|
|
8
|
+
),
|
|
9
|
+
not_exist AS (
|
|
10
|
+
SELECT *
|
|
11
|
+
FROM normalized
|
|
12
|
+
WHERE NOT EXISTS(SELECT FROM person WHERE person.email = normalized.normalized)
|
|
13
|
+
),
|
|
14
|
+
uniq AS (
|
|
15
|
+
SELECT DISTINCT ON (normalized) *
|
|
16
|
+
FROM not_exist
|
|
17
|
+
ORDER BY normalized
|
|
18
|
+
)
|
|
19
|
+
UPDATE person
|
|
20
|
+
SET email = uniq.normalized
|
|
21
|
+
FROM uniq
|
|
22
|
+
WHERE person.id = uniq.id;
|
|
23
|
+
`;
|
|
24
|
+
async function default_1(builder) {
|
|
25
|
+
builder.sql(sql);
|
|
26
|
+
}
|
|
27
|
+
exports.default = default_1;
|
|
28
|
+
//# sourceMappingURL=2023-01-20-135500-person-email-normalize.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"2023-01-20-135500-person-email-normalize.js","sourceRoot":"","sources":["../../../src/migrations/2023-01-20-135500-person-email-normalize.ts"],"names":[],"mappings":";;AAEA,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;;;;;;CAoBX,CAAA;AAEc,KAAK,oBAAW,OAAyB;IACvD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACjB,CAAC;AAFD,4BAEC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"2023-06-03-104000-person-disabled.d.ts","sourceRoot":"","sources":["../../../src/migrations/2023-06-03-104000-person-disabled.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAOjE,yBAA+B,OAAO,EAAE,gBAAgB,iBAEvD"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const sql = `
|
|
4
|
+
ALTER TABLE person
|
|
5
|
+
ADD disabled_at TIMESTAMP WITH TIME ZONE;
|
|
6
|
+
`;
|
|
7
|
+
async function default_1(builder) {
|
|
8
|
+
builder.sql(sql);
|
|
9
|
+
}
|
|
10
|
+
exports.default = default_1;
|
|
11
|
+
//# sourceMappingURL=2023-06-03-104000-person-disabled.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"2023-06-03-104000-person-disabled.js","sourceRoot":"","sources":["../../../src/migrations/2023-06-03-104000-person-disabled.ts"],"names":[],"mappings":";;AAEA,MAAM,GAAG,GAAG;;;CAGX,CAAA;AAEc,KAAK,oBAAW,OAAyB;IACvD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACjB,CAAC;AAFD,4BAEC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/migrations/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyC,cAAc,EAAgB,MAAM,qBAAqB,CAAA;
|
|
1
|
+
{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/migrations/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyC,cAAc,EAAgB,MAAM,qBAAqB,CAAA;AAsCzG,OAAO,EAAoB,SAAS,EAAE,MAAM,UAAU,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C,MAAM,WAAW,iBAAiB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AAuCD,qBAAa,sBAAsB;IAEjC,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAHT,EAAE,EAAE,cAAc,EAClB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,iBAAiB,EACpC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAIlD,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAqB7D"}
|
|
@@ -38,6 +38,8 @@ const _2022_07_07_135000_person_email_opt_uniq_1 = __importDefault(require("./20
|
|
|
38
38
|
const _2022_07_07_141000_person_display_name_1 = __importDefault(require("./2022-07-07-141000-person-display-name"));
|
|
39
39
|
const _2022_07_14_145000_person_login_options_1 = __importDefault(require("./2022-07-14-145000-person-login-options"));
|
|
40
40
|
const _2022_11_08_project_update_notification_1 = __importDefault(require("./2022-11-08-project-update-notification"));
|
|
41
|
+
const _2023_01_20_135500_person_email_normalize_1 = __importDefault(require("./2023-01-20-135500-person-email-normalize"));
|
|
42
|
+
const _2023_06_03_104000_person_disabled_1 = __importDefault(require("./2023-06-03-104000-person-disabled"));
|
|
41
43
|
const snapshot_1 = __importDefault(require("./snapshot"));
|
|
42
44
|
const model_1 = require("../model");
|
|
43
45
|
const migrations = {
|
|
@@ -73,6 +75,8 @@ const migrations = {
|
|
|
73
75
|
'2022-07-07-141000-person-display-name': _2022_07_07_141000_person_display_name_1.default,
|
|
74
76
|
'2022-07-14-145000-person-login-options': _2022_07_14_145000_person_login_options_1.default,
|
|
75
77
|
'2022-11-08-project-update-notification': _2022_11_08_project_update_notification_1.default,
|
|
78
|
+
'2023-01-20-135500-person-email-normalize': _2023_01_20_135500_person_email_normalize_1.default,
|
|
79
|
+
'2023-06-03-104000-person-disabled': _2023_06_03_104000_person_disabled_1.default,
|
|
76
80
|
};
|
|
77
81
|
class TenantMigrationsRunner {
|
|
78
82
|
constructor(db, schema, tenantCredentials, providers) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/migrations/runner.ts"],"names":[],"mappings":";;;;;;AAAA,kDAAyG;AAEzG,wEAAkH;AAClH,uFAA0D;AAC1D,+GAAiF;AACjF,yGAA0E;AAC1E,iGAAoE;AACpE,uGAAyE;AACzE,mHAAqF;AACrF,qHAAqF;AACrF,qHAAsF;AACtF,mGAAsE;AACtE,6GAA8E;AAC9E,yFAA4D;AAC5D,iGAAmE;AACnE,yGAA0E;AAC1E,mHAAqF;AACrF,mGAAqE;AACrE,2GAA6E;AAC7E,yHAA0F;AAC1F,iHAAmF;AACnF,iGAAoE;AACpE,2GAA6E;AAC7E,6GAA+E;AAC/E,qHAAsF;AACtF,uHAAwF;AACxF,mIAAmG;AACnG,2HAA4F;AAC5F,qGAAuE;AACvE,+GAA+E;AAC/E,mGAAqE;AACrE,yHAAyF;AACzF,qHAAsF;AACtF,uHAAwF;AACxF,uHAAyF;AACzF,0DAAiC;AACjC,oCAAsD;AAWtD,MAAM,UAAU,GAAG;IAClB,wBAAwB,EAAE,iCAAmB;IAC7C,oCAAoC,EAAE,6CAA8B;IACpE,iCAAiC,EAAE,0CAA0B;IAC7D,6BAA6B,EAAE,sCAAwB;IACvD,gCAAgC,EAAE,yCAA0B;IAC5D,sCAAsC,EAAE,+CAAgC;IACxE,uCAAuC,EAAE,gDAA+B;IACxE,uCAAuC,EAAE,gDAAgC;IACzE,8BAA8B,EAAE,uCAAyB;IACzD,mCAAmC,EAAE,4CAA4B;IACjE,yBAAyB,EAAE,kCAAoB;IAC/C,6BAA6B,EAAE,sCAAuB;IACtD,iCAAiC,EAAE,0CAA0B;IAC7D,sCAAsC,EAAE,+CAAgC;IACxE,8BAA8B,EAAE,uCAAwB;IACxD,kCAAkC,EAAE,2CAA4B;IAChE,yCAAyC,EAAE,kDAAkC;IAC7E,qCAAqC,EAAE,8CAA+B;IACtE,6BAA6B,EAAE,sCAAwB;IACvD,kCAAkC,EAAE,2CAA4B;IAChE,mCAAmC,EAAE,4CAA6B;IAClE,uCAAuC,EAAE,gDAAgC;IACzE,wCAAwC,EAAE,iDAAiC;IAC3E,8CAA8C,EAAE,uDAAsC;IACtF,0CAA0C,EAAE,mDAAmC;IAC/E,+BAA+B,EAAE,wCAAyB;IAC1D,oCAAoC,EAAE,6CAA4B;IAClE,8BAA8B,EAAE,uCAAwB;IACxD,yCAAyC,EAAE,kDAAiC;IAC5E,uCAAuC,EAAE,gDAAgC;IACzE,wCAAwC,EAAE,iDAAiC;IAC3E,wCAAwC,EAAE,iDAAkC;
|
|
1
|
+
{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/migrations/runner.ts"],"names":[],"mappings":";;;;;;AAAA,kDAAyG;AAEzG,wEAAkH;AAClH,uFAA0D;AAC1D,+GAAiF;AACjF,yGAA0E;AAC1E,iGAAoE;AACpE,uGAAyE;AACzE,mHAAqF;AACrF,qHAAqF;AACrF,qHAAsF;AACtF,mGAAsE;AACtE,6GAA8E;AAC9E,yFAA4D;AAC5D,iGAAmE;AACnE,yGAA0E;AAC1E,mHAAqF;AACrF,mGAAqE;AACrE,2GAA6E;AAC7E,yHAA0F;AAC1F,iHAAmF;AACnF,iGAAoE;AACpE,2GAA6E;AAC7E,6GAA+E;AAC/E,qHAAsF;AACtF,uHAAwF;AACxF,mIAAmG;AACnG,2HAA4F;AAC5F,qGAAuE;AACvE,+GAA+E;AAC/E,mGAAqE;AACrE,yHAAyF;AACzF,qHAAsF;AACtF,uHAAwF;AACxF,uHAAyF;AACzF,2HAA4F;AAC5F,6GAA+E;AAC/E,0DAAiC;AACjC,oCAAsD;AAWtD,MAAM,UAAU,GAAG;IAClB,wBAAwB,EAAE,iCAAmB;IAC7C,oCAAoC,EAAE,6CAA8B;IACpE,iCAAiC,EAAE,0CAA0B;IAC7D,6BAA6B,EAAE,sCAAwB;IACvD,gCAAgC,EAAE,yCAA0B;IAC5D,sCAAsC,EAAE,+CAAgC;IACxE,uCAAuC,EAAE,gDAA+B;IACxE,uCAAuC,EAAE,gDAAgC;IACzE,8BAA8B,EAAE,uCAAyB;IACzD,mCAAmC,EAAE,4CAA4B;IACjE,yBAAyB,EAAE,kCAAoB;IAC/C,6BAA6B,EAAE,sCAAuB;IACtD,iCAAiC,EAAE,0CAA0B;IAC7D,sCAAsC,EAAE,+CAAgC;IACxE,8BAA8B,EAAE,uCAAwB;IACxD,kCAAkC,EAAE,2CAA4B;IAChE,yCAAyC,EAAE,kDAAkC;IAC7E,qCAAqC,EAAE,8CAA+B;IACtE,6BAA6B,EAAE,sCAAwB;IACvD,kCAAkC,EAAE,2CAA4B;IAChE,mCAAmC,EAAE,4CAA6B;IAClE,uCAAuC,EAAE,gDAAgC;IACzE,wCAAwC,EAAE,iDAAiC;IAC3E,8CAA8C,EAAE,uDAAsC;IACtF,0CAA0C,EAAE,mDAAmC;IAC/E,+BAA+B,EAAE,wCAAyB;IAC1D,oCAAoC,EAAE,6CAA4B;IAClE,8BAA8B,EAAE,uCAAwB;IACxD,yCAAyC,EAAE,kDAAiC;IAC5E,uCAAuC,EAAE,gDAAgC;IACzE,wCAAwC,EAAE,iDAAiC;IAC3E,wCAAwC,EAAE,iDAAkC;IAC5E,0CAA0C,EAAE,mDAAmC;IAC/E,mCAAmC,EAAE,4CAA6B;CAClE,CAAA;AAED,MAAa,sBAAsB;IAClC,YACkB,EAAkB,EAClB,MAAc,EACd,iBAAoC,EACpC,SAA6C;QAH7C,OAAE,GAAF,EAAE,CAAgB;QAClB,WAAM,GAAN,MAAM,CAAQ;QACd,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,cAAS,GAAT,SAAS,CAAoC;IAE/D,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,MAAc;QAC9B,MAAM,IAAA,oCAAyB,EAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QAC/H,MAAM,UAAU,GAAG,qBAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,EAAC,UAAU,EAAC,EAAE;YACxD,MAAM,kBAAkB,GAAG,IAAI,+CAAyB,CAAC,kBAAQ,EAAE,UAAU,CAAC,CAAA;YAE9E,MAAM,WAAW,GAAG,IAAI,sCAAkB,CAAsB,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;YAC5G,OAAO,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBACjE,cAAc,EAAE,KAAK,IAAI,EAAE;;oBAAC,OAAA,CAAC;wBAC5B,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,wBAAgB,EAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;wBACnH,aAAa,EAAE,MAAA,IAAI,CAAC,iBAAiB,CAAC,aAAa,mCAC/C,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,wBAAgB,EAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACvG,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS;wBAC3C,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;qBACxI,CAAC,CAAA;iBAAA;gBACF,SAAS,EAAE,IAAI,CAAC,SAAS;aACzB,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QACF,MAAM,UAAU,CAAC,GAAG,EAAE,CAAA;QACtB,OAAO,MAAM,CAAA;IACd,CAAC;CACD;AA9BD,wDA8BC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../../src/migrations/snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAG7C,yBAA+B,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,
|
|
1
|
+
{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../../src/migrations/snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAG7C,yBAA+B,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,iBAsMlF"}
|
|
@@ -73,6 +73,7 @@ CREATE TABLE "person" (
|
|
|
73
73
|
"otp_activated_at" timestamp with time zone,
|
|
74
74
|
"name" "text",
|
|
75
75
|
"idp_only" boolean DEFAULT false NOT NULL,
|
|
76
|
+
"disabled_at" timestamp with time zone,
|
|
76
77
|
CONSTRAINT "idp_only_no_email" CHECK ((("idp_only" = false) OR (("idp_only" = true) AND ("email" IS NULL))))
|
|
77
78
|
);
|
|
78
79
|
CREATE TABLE "person_identity_provider" (
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/migrations/snapshot.ts"],"names":[],"mappings":";;AAEA,2DAAuD;AAExC,KAAK,oBAAW,OAAyB,EAAE,IAAyB;IAClF,OAAO,CAAC,GAAG,CAAC
|
|
1
|
+
{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/migrations/snapshot.ts"],"names":[],"mappings":";;AAEA,2DAAuD;AAExC,KAAK,oBAAW,OAAyB,EAAE,IAAyB;IAClF,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkMZ,CAAC,CAAA;IAED,MAAM,IAAA,qCAAiB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAA;AACvC,CAAC;AAtMD,4BAsMC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"AclSchemaAccessNodeFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/AclSchemaAccessNodeFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAErD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAIvC,qBAAa,0BAA0B;IACtC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,GAAG,CAAC,UAAU,EAAE,GAAG,UAAU;
|
|
1
|
+
{"version":3,"file":"AclSchemaAccessNodeFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/AclSchemaAccessNodeFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAErD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAIvC,qBAAa,0BAA0B;IACtC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,GAAG,CAAC,UAAU,EAAE,GAAG,UAAU;CAmC9E"}
|
|
@@ -6,25 +6,30 @@ const MembershipMatcher_1 = require("./MembershipMatcher");
|
|
|
6
6
|
const DirectPermissionsAccessNode_1 = require("./DirectPermissionsAccessNode");
|
|
7
7
|
class AclSchemaAccessNodeFactory {
|
|
8
8
|
create(schema, memberships) {
|
|
9
|
-
const
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
return
|
|
9
|
+
const createVerifier = (getRule) => {
|
|
10
|
+
const membershipMatcher = new MembershipMatcher_1.MembershipMatcher(memberships.map(it => {
|
|
11
|
+
var _a, _b;
|
|
12
|
+
return ({
|
|
13
|
+
...it,
|
|
14
|
+
matchRule: getRule((_b = (_a = schema.roles[it.role]) === null || _a === void 0 ? void 0 : _a.tenant) !== null && _b !== void 0 ? _b : {}),
|
|
15
|
+
});
|
|
16
|
+
}));
|
|
17
|
+
return ({ memberships }) => {
|
|
18
|
+
return memberships.every(it => membershipMatcher.matches(it));
|
|
19
|
+
};
|
|
18
20
|
};
|
|
19
21
|
const membershipRoles = memberships.map(it => schema.roles[it.role]).filter(it => !!it);
|
|
20
22
|
const node = new DirectPermissionsAccessNode_1.DirectPermissionsAccessNode();
|
|
21
23
|
if (membershipRoles.some(it => { var _a; return (_a = it.tenant) === null || _a === void 0 ? void 0 : _a.invite; })) {
|
|
24
|
+
const verifier = createVerifier(it => { var _a; return it.invite && it.invite !== true ? it.invite : (_a = it.manage) !== null && _a !== void 0 ? _a : {}; });
|
|
22
25
|
node.allow(PermissionActions_1.PermissionActions.PERSON_INVITE([]), verifier);
|
|
23
26
|
}
|
|
24
27
|
if (membershipRoles.some(it => { var _a; return (_a = it.tenant) === null || _a === void 0 ? void 0 : _a.unmanagedInvite; })) {
|
|
28
|
+
const verifier = createVerifier(it => { var _a; return it.unmanagedInvite && it.unmanagedInvite !== true ? it.unmanagedInvite : (_a = it.manage) !== null && _a !== void 0 ? _a : {}; });
|
|
25
29
|
node.allow(PermissionActions_1.PermissionActions.PERSON_INVITE_UNMANAGED([]), verifier);
|
|
26
30
|
}
|
|
27
31
|
if (membershipRoles.some(it => { var _a; return (_a = it.tenant) === null || _a === void 0 ? void 0 : _a.manage; })) {
|
|
32
|
+
const verifier = createVerifier(it => { var _a; return (_a = it.manage) !== null && _a !== void 0 ? _a : {}; });
|
|
28
33
|
node.allow(PermissionActions_1.PermissionActions.PROJECT_ADD_MEMBER([]), verifier);
|
|
29
34
|
node.allow(PermissionActions_1.PermissionActions.PROJECT_VIEW_MEMBER([]), verifier);
|
|
30
35
|
node.allow(PermissionActions_1.PermissionActions.PROJECT_UPDATE_MEMBER([]), verifier);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"AclSchemaAccessNodeFactory.js","sourceRoot":"","sources":["../../../../src/model/authorization/AclSchemaAccessNodeFactory.ts"],"names":[],"mappings":";;;AACA,2DAAuD;AAEvD,2DAAuD;AACvD,+EAA2E;AAE3E,MAAa,0BAA0B;IACtC,MAAM,CAAC,MAAkB,EAAE,WAAsC;
|
|
1
|
+
{"version":3,"file":"AclSchemaAccessNodeFactory.js","sourceRoot":"","sources":["../../../../src/model/authorization/AclSchemaAccessNodeFactory.ts"],"names":[],"mappings":";;;AACA,2DAAuD;AAEvD,2DAAuD;AACvD,+EAA2E;AAE3E,MAAa,0BAA0B;IACtC,MAAM,CAAC,MAAkB,EAAE,WAAsC;QAEhE,MAAM,cAAc,GAAG,CAAC,OAAwE,EAAE,EAAE;YACnG,MAAM,iBAAiB,GAAG,IAAI,qCAAiB,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;;gBAAC,OAAA,CAAC;oBACtE,GAAG,EAAE;oBACL,SAAS,EAAE,OAAO,CAAC,MAAA,MAAA,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,0CAAE,MAAM,mCAAI,EAAE,CAAC;iBACvD,CAAC,CAAA;aAAA,CAAC,CAAC,CAAA;YAEJ,OAAO,CAAC,EAAE,WAAW,EAA8C,EAAE,EAAE;gBACtE,OAAO,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9D,CAAC,CAAA;QACF,CAAC,CAAA;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACvF,MAAM,IAAI,GAAG,IAAI,yDAA2B,EAAE,CAAA;QAE9C,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,WAAC,OAAA,MAAA,EAAE,CAAC,MAAM,0CAAE,MAAM,CAAA,EAAA,CAAC,EAAE;YAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,EAAE,WAAC,OAAA,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAA,EAAE,CAAC,MAAM,mCAAI,EAAE,CAAA,EAAA,CAAC,CAAA;YACpG,IAAI,CAAC,KAAK,CAAC,qCAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;SACzD;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,WAAC,OAAA,MAAA,EAAE,CAAC,MAAM,0CAAE,eAAe,CAAA,EAAA,CAAC,EAAE;YAC3D,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,EAAE,WAAC,OAAA,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,MAAA,EAAE,CAAC,MAAM,mCAAI,EAAE,CAAA,EAAA,CAAC,CAAA;YAC/H,IAAI,CAAC,KAAK,CAAC,qCAAiB,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;SACnE;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,WAAC,OAAA,MAAA,EAAE,CAAC,MAAM,0CAAE,MAAM,CAAA,EAAA,CAAC,EAAE;YAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,EAAE,WAAC,OAAA,MAAA,EAAE,CAAC,MAAM,mCAAI,EAAE,CAAA,EAAA,CAAC,CAAA;YACtD,IAAI,CAAC,KAAK,CAAC,qCAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;YAC9D,IAAI,CAAC,KAAK,CAAC,qCAAiB,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;YAC/D,IAAI,CAAC,KAAK,CAAC,qCAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;YACjE,IAAI,CAAC,KAAK,CAAC,qCAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;SACjE;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;CACD;AApCD,gEAoCC"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { Acl } from '@contember/schema';
|
|
2
|
-
export
|
|
2
|
+
export type MembershipWithSubMembershipMatchRules = Acl.Membership & {
|
|
3
3
|
matchRule: Acl.MembershipMatchRule;
|
|
4
4
|
};
|
|
5
5
|
export declare class MembershipMatcher {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"MembershipMatcher.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/MembershipMatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,
|
|
1
|
+
{"version":3,"file":"MembershipMatcher.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/MembershipMatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,MAAM,MAAM,qCAAqC,GAC9C,GAAG,CAAC,UAAU,GACd;IACD,SAAS,EAAE,GAAG,CAAC,mBAAmB,CAAA;CAClC,CAAA;AAEF,qBAAa,iBAAiB;IACjB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,SAAS,qCAAqC,EAAE;IAG1F,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO;CA8B5C"}
|
|
@@ -14,6 +14,27 @@ declare namespace PermissionActions {
|
|
|
14
14
|
privilege: string;
|
|
15
15
|
meta?: undefined;
|
|
16
16
|
};
|
|
17
|
+
const IDENTITY_ADD_GLOBAL_ROLES: (roles?: readonly string[]) => {
|
|
18
|
+
resource: string;
|
|
19
|
+
privilege: string;
|
|
20
|
+
meta: {
|
|
21
|
+
roles: readonly string[] | undefined;
|
|
22
|
+
};
|
|
23
|
+
};
|
|
24
|
+
const IDENTITY_REMOVE_GLOBAL_ROLES: (roles?: readonly string[]) => {
|
|
25
|
+
resource: string;
|
|
26
|
+
privilege: string;
|
|
27
|
+
meta: {
|
|
28
|
+
roles: readonly string[] | undefined;
|
|
29
|
+
};
|
|
30
|
+
};
|
|
31
|
+
const PERSON_DISABLE: (roles?: readonly string[]) => {
|
|
32
|
+
resource: string;
|
|
33
|
+
privilege: string;
|
|
34
|
+
meta: {
|
|
35
|
+
roles: readonly string[] | undefined;
|
|
36
|
+
};
|
|
37
|
+
};
|
|
17
38
|
const PERSON_SIGN_IN: {
|
|
18
39
|
resource: string;
|
|
19
40
|
privilege: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"PermissionActions.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionActions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,kBAAU,iBAAiB,CAAC;IAC3B,KAAY,SAAS;QACpB,MAAM,WAAW;QACjB,MAAM,WAAW;QACjB,QAAQ,aAAa;QACrB,OAAO,YAAY;QACnB,MAAM,WAAW;QACjB,YAAY,iBAAiB;QAC7B,GAAG,QAAQ;KACX;IAEM,MAAM,yBAAyB;;;;KAAmE,CAAA;
|
|
1
|
+
{"version":3,"file":"PermissionActions.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionActions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,kBAAU,iBAAiB,CAAC;IAC3B,KAAY,SAAS;QACpB,MAAM,WAAW;QACjB,MAAM,WAAW;QACjB,QAAQ,aAAa;QACrB,OAAO,YAAY;QACnB,MAAM,WAAW;QACjB,YAAY,iBAAiB;QAC7B,GAAG,QAAQ;KACX;IAEM,MAAM,yBAAyB;;;;KAAmE,CAAA;IAClG,MAAM,yBAAyB,WAAY,SAAS,MAAM,EAAE;;;;;;KAA+E,CAAA;IAC3I,MAAM,4BAA4B,WAAY,SAAS,MAAM,EAAE;;;;;;KAAkF,CAAA;IAEjJ,MAAM,cAAc,WAAY,SAAS,MAAM,EAAE;;;;;;KAAsE,CAAA;IAEvH,MAAM,cAAc;;;;KAAwD,CAAA;IAC5E,MAAM,cAAc,WAAY,SAAS,MAAM,EAAE;;;;;;KAAqE,CAAA;IACtH,MAAM,eAAe;;;;KAAyD,CAAA;IAC9E,MAAM,gBAAgB;;;;KAA0D,CAAA;IAChF,MAAM,sBAAsB;;;;KAAgE,CAAA;IAC5F,MAAM,yBAAyB;;;;KAAkE,CAAA;IACjG,MAAM,qBAAqB;;;;KAA+D,CAAA;IAC1F,MAAM,qBAAqB;;;;KAA8D,CAAA;IACzF,MAAM,kBAAkB;;;;KAA2D,CAAA;IACnF,MAAM,yBAAyB,WAAY,SAAS,MAAM,EAAE;;;;;;KAAiF,CAAA;IAE7I,MAAM,aAAa,gBAAiB,SAAS,IAAI,UAAU,EAAE;;;;;;KAA2E,CAAA;IACxI,MAAM,uBAAuB,gBAAiB,SAAS,IAAI,UAAU,EAAE;;;;;;KAAqF,CAAA;IAE5J,MAAM,YAAY;;;;KAAuD,CAAA;IACzE,MAAM,kBAAkB;;;;KAA4D,CAAA;IACpF,MAAM,cAAc;;;;KAAyD,CAAA;IAE7E,MAAM,cAAc;;;;KAAyD,CAAA;IAE7E,MAAM,mBAAmB,gBAAiB,SAAS,IAAI,UAAU,EAAE;;;;;;KAAiF,CAAA;IACpJ,MAAM,kBAAkB,gBAAiB,SAAS,IAAI,UAAU,EAAE;;;;;;KAA+E,CAAA;IACjJ,MAAM,qBAAqB,gBAAiB,SAAS,IAAI,UAAU,EAAE;;;;;;KAAkF,CAAA;IACvJ,MAAM,qBAAqB,gBAAiB,SAAS,IAAI,UAAU,EAAE;;;;;;KAAkF,CAAA;IAGvJ,MAAM,cAAc;;;;KAAwD,CAAA;IAC5E,MAAM,qBAAqB,WAAY,SAAS,MAAM,EAAE;;;;;;KAA2E,CAAA;IACnI,MAAM,eAAe;;;;KAAyD,CAAA;IAE9E,MAAM,iBAAiB;;;;KAA2D,CAAA;IAClF,MAAM,oBAAoB;;;;KAA8D,CAAA;IAExF,MAAM,OAAO;;;;KAAkD,CAAA;IAC/D,MAAM,UAAU;;;;KAAqD,CAAA;IACrE,MAAM,WAAW;;;;KAAsD,CAAA;IACvE,MAAM,UAAU;;;;KAAqD,CAAA;CAC5E;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAA"}
|
|
@@ -15,6 +15,9 @@ var PermissionActions;
|
|
|
15
15
|
Resources["idp"] = "idp";
|
|
16
16
|
})(Resources = PermissionActions.Resources || (PermissionActions.Resources = {}));
|
|
17
17
|
PermissionActions.IDENTITY_VIEW_PERMISSIONS = authorization_1.Authorizator.createAction(Resources.identity, 'viewPermissions');
|
|
18
|
+
PermissionActions.IDENTITY_ADD_GLOBAL_ROLES = (roles) => authorization_1.Authorizator.createAction(Resources.identity, 'addGlobalRoles', { roles });
|
|
19
|
+
PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES = (roles) => authorization_1.Authorizator.createAction(Resources.identity, 'removeGlobalRoles', { roles });
|
|
20
|
+
PermissionActions.PERSON_DISABLE = (roles) => authorization_1.Authorizator.createAction(Resources.person, 'disable', { roles });
|
|
18
21
|
PermissionActions.PERSON_SIGN_IN = authorization_1.Authorizator.createAction(Resources.person, 'signIn');
|
|
19
22
|
PermissionActions.PERSON_SIGN_UP = (roles) => authorization_1.Authorizator.createAction(Resources.person, 'signUp', { roles });
|
|
20
23
|
PermissionActions.PERSON_SIGN_OUT = authorization_1.Authorizator.createAction(Resources.person, 'signOut');
|
|
@@ -44,6 +47,5 @@ var PermissionActions;
|
|
|
44
47
|
PermissionActions.IDP_UPDATE = authorization_1.Authorizator.createAction(Resources.idp, 'update');
|
|
45
48
|
PermissionActions.IDP_DISABLE = authorization_1.Authorizator.createAction(Resources.idp, 'disable');
|
|
46
49
|
PermissionActions.IDP_ENABLE = authorization_1.Authorizator.createAction(Resources.idp, 'enable');
|
|
47
|
-
})(PermissionActions || (PermissionActions = {}));
|
|
48
|
-
exports.PermissionActions = PermissionActions;
|
|
50
|
+
})(PermissionActions || (exports.PermissionActions = PermissionActions = {}));
|
|
49
51
|
//# sourceMappingURL=PermissionActions.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"PermissionActions.js","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionActions.ts"],"names":[],"mappings":";;;AAAA,4DAAuD;AAGvD,IAAU,iBAAiB,
|
|
1
|
+
{"version":3,"file":"PermissionActions.js","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionActions.ts"],"names":[],"mappings":";;;AAAA,4DAAuD;AAGvD,IAAU,iBAAiB,CAsD1B;AAtDD,WAAU,iBAAiB;IAC1B,IAAY,SAQX;IARD,WAAY,SAAS;QACpB,8BAAiB,CAAA;QACjB,8BAAiB,CAAA;QACjB,kCAAqB,CAAA;QACrB,gCAAmB,CAAA;QACnB,8BAAiB,CAAA;QACjB,0CAA6B,CAAA;QAC7B,wBAAW,CAAA;IACZ,CAAC,EARW,SAAS,GAAT,2BAAS,KAAT,2BAAS,QAQpB;IAEY,2CAAyB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAA;IAC5F,2CAAyB,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrI,8CAA4B,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAE3I,gCAAc,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAEjH,gCAAc,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACtE,gCAAc,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAChH,iCAAe,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACxE,kCAAgB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAC1E,wCAAsB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACtF,2CAAyB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAC3F,uCAAqB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACpF,uCAAqB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACnF,oCAAkB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAC7E,2CAAyB,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAEvI,+BAAa,GAAG,CAAC,WAAsC,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAClI,yCAAuB,GAAG,CAAC,WAAsC,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAEtJ,8BAAY,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACnE,oCAAkB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAC9E,gCAAc,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAEvE,gCAAc,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAEvE,qCAAmB,GAAG,CAAC,WAAsC,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAC9I,oCAAkB,GAAG,CAAC,WAAsC,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3I,uCAAqB,GAAG,CAAC,WAAsC,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IACjJ,uCAAqB,GAAG,CAAC,WAAsC,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAGjJ,gCAAc,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACtE,uCAAqB,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7H,iCAAe,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAExE,mCAAiB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IAC5E,sCAAoB,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IAElF,yBAAO,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACzD,4BAAU,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC/D,6BAAW,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACjE,4BAAU,GAAG,4BAAY,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC7E,CAAC,EAtDS,iBAAiB,iCAAjB,iBAAiB,QAsD1B"}
|
|
@@ -2,7 +2,7 @@ import { AuthorizationScope, Authorizator } from '@contember/authorization';
|
|
|
2
2
|
import { ProjectScopeFactory } from './ProjectScopeFactory';
|
|
3
3
|
import { Project, ProjectSchemaResolver } from '../type';
|
|
4
4
|
import { Identity } from './Identity';
|
|
5
|
-
export
|
|
5
|
+
export type AccessVerifier = (action: Authorizator.Action) => Promise<boolean>;
|
|
6
6
|
export declare class PermissionContext {
|
|
7
7
|
readonly identity: Identity;
|
|
8
8
|
readonly authorizator: Authorizator<Identity>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"PermissionContext.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,kBAAkB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,
|
|
1
|
+
{"version":3,"file":"PermissionContext.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,kBAAkB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAI9E,qBAAa,iBAAiB;aAIZ,QAAQ,EAAE,QAAQ;aAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;IANhC,OAAO,CAAC,aAAa,CAAmD;gBAGvD,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,EACnC,mBAAmB,EAAE,mBAAmB,EACxC,cAAc,EAAE,qBAAqB;IAG1C,SAAS,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,EACnD,KAAK,EACL,MAAM,GACN,EAAE;QACF,KAAK,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;KACjC,GAAG,OAAO,CAAC,OAAO,CAAC;IAIb,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,cAAc;IAInE,aAAa,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,EACvD,KAAK,EACL,MAAM,EACN,OAAO,GACP,EAAE;QACF,KAAK,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjC,OAAO,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMJ,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;CAS7G"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"PermissionsFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionsFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAgBtD,cAAM,kBAAkB;IAChB,MAAM,IAAI,WAAW;
|
|
1
|
+
{"version":3,"file":"PermissionsFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionsFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAgBtD,cAAM,kBAAkB;IAChB,MAAM,IAAI,WAAW;CA+C5B;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAA"}
|
|
@@ -5,7 +5,7 @@ const authorization_1 = require("@contember/authorization");
|
|
|
5
5
|
const PermissionActions_1 = require("./PermissionActions");
|
|
6
6
|
const Roles_1 = require("./Roles");
|
|
7
7
|
const allowedRoles = new Set([Roles_1.TenantRole.LOGIN, Roles_1.TenantRole.PROJECT_ADMIN]);
|
|
8
|
-
const
|
|
8
|
+
const projectAdminAllowedInputRoles = ({ roles }) => {
|
|
9
9
|
return roles === undefined || roles.every(it => allowedRoles.has(it));
|
|
10
10
|
};
|
|
11
11
|
const forbiddenRoles = new Set([Roles_1.TenantRole.SUPER_ADMIN, Roles_1.TenantRole.PROJECT_CREATOR]);
|
|
@@ -27,9 +27,12 @@ class PermissionsFactory {
|
|
|
27
27
|
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.PROJECT_VIEW);
|
|
28
28
|
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.API_KEY_CREATE);
|
|
29
29
|
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.API_KEY_DISABLE);
|
|
30
|
-
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.API_KEY_CREATE_GLOBAL(),
|
|
31
|
-
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.PERSON_SIGN_UP(),
|
|
30
|
+
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.API_KEY_CREATE_GLOBAL(), projectAdminAllowedInputRoles);
|
|
31
|
+
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.PERSON_SIGN_UP(), projectAdminAllowedInputRoles);
|
|
32
|
+
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(), projectAdminAllowedInputRoles);
|
|
33
|
+
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(), projectAdminAllowedInputRoles);
|
|
32
34
|
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.PERSON_CREATE_SESSION_KEY(), projectAdminUseRolesVerifier);
|
|
35
|
+
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.PERSON_DISABLE(), projectAdminUseRolesVerifier);
|
|
33
36
|
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.PROJECT_VIEW_MEMBER([]));
|
|
34
37
|
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.PROJECT_ADD_MEMBER([]));
|
|
35
38
|
permissions.allow(Roles_1.TenantRole.PROJECT_ADMIN, PermissionActions_1.PermissionActions.PROJECT_UPDATE_MEMBER([]));
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"PermissionsFactory.js","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionsFactory.ts"],"names":[],"mappings":";;;AAAA,4DAAsD;AACtD,2DAAuD;AACvD,mCAAoC;AAEpC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,CAAC,kBAAU,CAAC,KAAK,EAAE,kBAAU,CAAC,aAAa,CAAC,CAAC,CAAA;AAElF,MAAM
|
|
1
|
+
{"version":3,"file":"PermissionsFactory.js","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionsFactory.ts"],"names":[],"mappings":";;;AAAA,4DAAsD;AACtD,2DAAuD;AACvD,mCAAoC;AAEpC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,CAAC,kBAAU,CAAC,KAAK,EAAE,kBAAU,CAAC,aAAa,CAAC,CAAC,CAAA;AAElF,MAAM,6BAA6B,GAAG,CAAC,EAAE,KAAK,EAA+B,EAAE,EAAE;IAChF,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AACtE,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,CAAC,kBAAU,CAAC,WAAW,EAAE,kBAAU,CAAC,eAAe,CAAC,CAAC,CAAA;AAE5F,MAAM,4BAA4B,GAAG,CAAC,EAAE,KAAK,EAAiC,EAAE,EAAE;IACjF,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AACzE,CAAC,CAAA;AAED,MAAM,kBAAkB;IAChB,MAAM;QACZ,MAAM,WAAW,GAAG,IAAI,2BAAW,EAAE,CAAA;QAErC,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,2BAAW,CAAC,GAAG,EAAE,SAAS,EAAE,2BAAW,CAAC,GAAG,EAAE,CAAC,CAAA;QAEpG,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,KAAK,EAAE,qCAAiB,CAAC,cAAc,CAAC,CAAA;QACrE,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,KAAK,EAAE,qCAAiB,CAAC,qBAAqB,CAAC,CAAA;QAC5E,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,KAAK,EAAE,qCAAiB,CAAC,qBAAqB,CAAC,CAAA;QAC5E,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,KAAK,EAAE,qCAAiB,CAAC,kBAAkB,CAAC,CAAA;QAEzE,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,MAAM,EAAE,qCAAiB,CAAC,yBAAyB,CAAC,CAAA;QACjF,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,MAAM,EAAE,qCAAiB,CAAC,eAAe,CAAC,CAAA;QACvE,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,MAAM,EAAE,qCAAiB,CAAC,gBAAgB,CAAC,CAAA;QAExE,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,cAAc,EAAE,qCAAiB,CAAC,YAAY,CAAC,CAAA;QAE5E,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,YAAY,CAAC,CAAA;QAC3E,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,cAAc,CAAC,CAAA;QAC7E,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,eAAe,CAAC,CAAA;QAC9E,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,qBAAqB,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAErH,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,cAAc,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAC9G,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,yBAAyB,EAAE,EAAE,6BAA6B,CAAC,CAAA;QACzH,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,4BAA4B,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAC5H,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,yBAAyB,EAAE,EAAE,4BAA4B,CAAC,CAAA;QACxH,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,cAAc,EAAE,EAAE,4BAA4B,CAAC,CAAA;QAE7G,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAA;QACtF,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAA;QACrF,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAA;QACxF,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAA;QAExF,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAA;QAChF,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAA;QAE1F,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,iBAAiB,CAAC,CAAA;QAChF,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,oBAAoB,CAAC,CAAA;QAEnF,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,OAAO,CAAC,CAAA;QACtE,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,UAAU,CAAC,CAAA;QACzE,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,WAAW,CAAC,CAAA;QAC1E,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,aAAa,EAAE,qCAAiB,CAAC,UAAU,CAAC,CAAA;QAEzE,WAAW,CAAC,KAAK,CAAC,kBAAU,CAAC,eAAe,EAAE,qCAAiB,CAAC,cAAc,CAAC,CAAA;QAE/E,OAAO,WAAW,CAAA;IACnB,CAAC;CACD;AAEQ,gDAAkB"}
|
|
@@ -10,5 +10,5 @@ var TenantRole;
|
|
|
10
10
|
TenantRole["PROJECT_CREATOR"] = "project_creator";
|
|
11
11
|
TenantRole["PROJECT_MEMBER"] = "project_member";
|
|
12
12
|
TenantRole["PROJECT_ADMIN"] = "project_admin";
|
|
13
|
-
})(TenantRole
|
|
13
|
+
})(TenantRole || (exports.TenantRole = TenantRole = {}));
|
|
14
14
|
//# sourceMappingURL=Roles.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Roles.js","sourceRoot":"","sources":["../../../../src/model/authorization/Roles.ts"],"names":[],"mappings":";;;AAAA,IAAY,UAQX;AARD,WAAY,UAAU;IACrB,6BAAe,CAAA;IACf,2BAAa,CAAA;IACb,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;IAC3B,iDAAmC,CAAA;IACnC,+CAAiC,CAAA;IACjC,6CAA+B,CAAA;AAChC,CAAC,EARW,UAAU,
|
|
1
|
+
{"version":3,"file":"Roles.js","sourceRoot":"","sources":["../../../../src/model/authorization/Roles.ts"],"names":[],"mappings":";;;AAAA,IAAY,UAQX;AARD,WAAY,UAAU;IACrB,6BAAe,CAAA;IACf,2BAAa,CAAA;IACb,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;IAC3B,iDAAmC,CAAA;IACnC,+CAAiC,CAAA;IACjC,6CAA+B,CAAA;AAChC,CAAC,EARW,UAAU,0BAAV,UAAU,QAQrB"}
|
|
@@ -13,7 +13,7 @@ interface CreatePermanentApiKeyArgs {
|
|
|
13
13
|
tokenHash?: TokenHash;
|
|
14
14
|
expiration?: undefined;
|
|
15
15
|
}
|
|
16
|
-
export
|
|
16
|
+
export type CreateApiKeyArgs = CreateSessionApiKeyArgs | CreatePermanentApiKeyArgs;
|
|
17
17
|
export declare class CreateApiKeyCommand implements Command<CreateApiKeyCommandResult> {
|
|
18
18
|
private args;
|
|
19
19
|
constructor(args: CreateApiKeyArgs);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"CreateApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/CreateApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAGnC,OAAO,EAAmC,SAAS,EAAE,MAAM,aAAa,CAAA;AAExE,UAAU,uBAAuB;IAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,yBAAyB;IAClC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,UAAU,CAAC,EAAE,SAAS,CAAA;CACtB;AAED,
|
|
1
|
+
{"version":3,"file":"CreateApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/CreateApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAGnC,OAAO,EAAmC,SAAS,EAAE,MAAM,aAAa,CAAA;AAExE,UAAU,uBAAuB;IAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,yBAAyB;IAClC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,UAAU,CAAC,EAAE,SAAS,CAAA;CACtB;AAED,MAAM,MAAM,gBAAgB,GACzB,uBAAuB,GACvB,yBAAyB,CAAA;AAE5B,qBAAa,mBAAoB,YAAW,OAAO,CAAC,yBAAyB,CAAC;IACjE,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,gBAAgB;IAEpC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAyBlF;AAED,qBAAa,yBAAyB;aACT,EAAE,EAAE,MAAM;aAAkB,KAAK,CAAC;gBAAlC,EAAE,EAAE,MAAM,EAAkB,KAAK,CAAC,oBAAQ;CAEtE"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import { Command } from '../Command';
|
|
2
|
+
export declare class PatchIdentityGlobalRoles implements Command<boolean> {
|
|
3
|
+
private readonly id;
|
|
4
|
+
private readonly add;
|
|
5
|
+
private readonly remove;
|
|
6
|
+
constructor(id: string, add: readonly string[], remove: readonly string[]);
|
|
7
|
+
execute({ db, providers }: Command.Args): Promise<boolean>;
|
|
8
|
+
}
|
|
9
|
+
//# sourceMappingURL=PatchIdentityGlobalRoles.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"PatchIdentityGlobalRoles.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/identity/PatchIdentityGlobalRoles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,wBAAyB,YAAW,OAAO,CAAC,OAAO,CAAC;IAE/D,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,MAAM,EAAE,SAAS,MAAM,EAAE;IAI9B,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAgBvE"}
|