@cryptexlabs/codex-nodejs-common 0.1.17 → 0.1.21

package/lib/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@cryptexlabs/codex-nodejs-common",
-    "version": "0.1.17",
+    "version": "0.1.21",
     "description": "Common code for Assistant applications",
     "main": "lib/src/index.js",
     "repository": "git@gitlab.com:cryptexlabs/public/codex-nodejs-common.git",

package/lib/src/auth/authorization-allowance.d.ts

@@ -6,5 +6,4 @@ export declare class AuthorizationAllowance {
     private readonly action;
     constructor(subject: any, object: any, objectId: any, action: any);
     isRequestAllowed(request: AuthorizationRequestInterface): boolean;
-    private _isRequestingSelf;
 }

package/lib/src/auth/authorization-allowance.js

@@ -22,8 +22,7 @@ class AuthorizationAllowance {
             this.objectId &&
             this.objectId.toString().trim() !== "") {
             if (this.objectId !== "any" &&
-                request.objectId.toString() !== this.objectId.toString() &&
-                !this._isRequestingSelf(request)) {
+                request.objectId.toString() !== this.objectId.toString()) {
                 return false;
             }
         }
@@ -37,11 +36,6 @@ class AuthorizationAllowance {
         }
         return true;
     }
-    _isRequestingSelf(request) {
-        return (request.object === "user" &&
-            request.objectId.toString() === this.subject.toString() &&
-            this.objectId === "self");
-    }
 }
 exports.AuthorizationAllowance = AuthorizationAllowance;
 //# sourceMappingURL=authorization-allowance.js.map

package/lib/src/auth/authorization-allowance.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-allowance.js","sourceRoot":"","sources":["../../../src/auth/authorization-allowance.ts"],"names":[],"mappings":";;;AAEA,MAAa,sBAAsB;IACjC,YACmB,OAAO,EACP,MAAM,EACN,QAAQ,EACR,MAAM;QAHN,YAAO,GAAP,OAAO,CAAA;QACP,WAAM,GAAN,MAAM,CAAA;QACN,aAAQ,GAAR,QAAQ,CAAA;QACR,WAAM,GAAN,MAAM,CAAA;IACtB,CAAC;IAEG,gBAAgB,CAAC,OAAsC;QAC5D,IACE,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAC5B,IAAI,CAAC,MAAM;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EACzB;YAEA,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE;gBAC3D,OAAO,KAAK,CAAC;aACd;SACF;QAGD,IACE,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;YACzC,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EACtC;YACA,IACE,IAAI,CAAC,QAAQ,KAAK,KAAK;gBACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;gBACxD,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAChC;gBACA,OAAO,KAAK,CAAC;aACd;SACF;QAED,IACE,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAC5B,IAAI,CAAC,MAAM;YACX,IAAI,CAAC,MAAM,KAAK,EAAE,EAClB;YAEA,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE;gBAC3D,OAAO,KAAK,CAAC;aACd;SACF;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB,CAAC,OAAsC;QAC9D,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,MAAM;YACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YACvD,IAAI,CAAC,QAAQ,KAAK,MAAM,CACzB,CAAC;IACJ,CAAC;CACF;AA3DD,wDA2DC"}
+{"version":3,"file":"authorization-allowance.js","sourceRoot":"","sources":["../../../src/auth/authorization-allowance.ts"],"names":[],"mappings":";;;AAEA,MAAa,sBAAsB;IACjC,YACmB,OAAO,EACP,MAAM,EACN,QAAQ,EACR,MAAM;QAHN,YAAO,GAAP,OAAO,CAAA;QACP,WAAM,GAAN,MAAM,CAAA;QACN,aAAQ,GAAR,QAAQ,CAAA;QACR,WAAM,GAAN,MAAM,CAAA;IACtB,CAAC;IAEG,gBAAgB,CAAC,OAAsC;QAC5D,IACE,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAC5B,IAAI,CAAC,MAAM;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EACzB;YAEA,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE;gBAC3D,OAAO,KAAK,CAAC;aACd;SACF;QAGD,IACE,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;YACzC,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EACtC;YACA,IACE,IAAI,CAAC,QAAQ,KAAK,KAAK;gBACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,EACxD;gBACA,OAAO,KAAK,CAAC;aACd;SACF;QAED,IACE,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAC5B,IAAI,CAAC,MAAM;YACX,IAAI,CAAC,MAAM,KAAK,EAAE,EAClB;YAEA,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE;gBAC3D,OAAO,KAAK,CAAC;aACd;SACF;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAlDD,wDAkDC"}

package/lib/src/auth/http-authz.action-to-sub-objects.guard.util.d.ts

@@ -0,0 +1,11 @@
+import { ExecutionContext } from "@nestjs/common";
+export declare class HttpAuthzActionToSubObjectsGuardUtil {
+    private readonly context;
+    private readonly action;
+    private _authzGuard;
+    constructor(context: ExecutionContext, action: string);
+    isAuthorized(object: string, objectId: string, subObject: string, subObjectIds: string[], namespace?: string): boolean;
+    get params(): any;
+    get query(): any;
+    get body(): any;
+}

package/lib/src/auth/http-authz.action-to-sub-objects.guard.util.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpAuthzActionToSubObjectsGuardUtil = void 0;
+const http_authz_guard_util_1 = require("./http-authz.guard.util");
+class HttpAuthzActionToSubObjectsGuardUtil {
+    constructor(context, action) {
+        this.context = context;
+        this.action = action;
+        this._authzGuard = new http_authz_guard_util_1.HttpAuthzGuardUtil(context);
+    }
+    isAuthorized(object, objectId, subObject, subObjectIds, namespace) {
+        for (const id of subObjectIds) {
+            let requests = [];
+            if (namespace) {
+                requests = [
+                    {
+                        action: "",
+                        object: namespace,
+                        objectId: "",
+                    },
+                ];
+            }
+            requests = [
+                ...requests,
+                ...[
+                    {
+                        action: "",
+                        object,
+                        objectId,
+                    },
+                    {
+                        action: this.action,
+                        object: subObject,
+                        objectId: id,
+                    },
+                ],
+            ];
+            if (!this._authzGuard.isAuthorized(...requests)) {
+                return false;
+            }
+        }
+        return true;
+    }
+    get params() {
+        return this._authzGuard.params;
+    }
+    get query() {
+        return this._authzGuard.query;
+    }
+    get body() {
+        return this._authzGuard.body;
+    }
+}
+exports.HttpAuthzActionToSubObjectsGuardUtil = HttpAuthzActionToSubObjectsGuardUtil;
+//# sourceMappingURL=http-authz.action-to-sub-objects.guard.util.js.map

package/lib/src/auth/http-authz.action-to-sub-objects.guard.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-authz.action-to-sub-objects.guard.util.js","sourceRoot":"","sources":["../../../src/auth/http-authz.action-to-sub-objects.guard.util.ts"],"names":[],"mappings":";;;AACA,mEAA6D;AAK7D,MAAa,oCAAoC;IAG/C,YACmB,OAAyB,EACzB,MAAc;QADd,YAAO,GAAP,OAAO,CAAkB;QACzB,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,WAAW,GAAG,IAAI,0CAAkB,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IASM,YAAY,CACjB,MAAc,EACd,QAAgB,EAChB,SAAiB,EACjB,YAAsB,EACtB,SAAkB;QAElB,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE;YAC7B,IAAI,QAAQ,GAAG,EAAE,CAAC;YAElB,IAAI,SAAS,EAAE;gBACb,QAAQ,GAAG;oBACT;wBACE,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,SAAS;wBACjB,QAAQ,EAAE,EAAE;qBACb;iBACF,CAAC;aACH;YAED,QAAQ,GAAG;gBACT,GAAG,QAAQ;gBACX,GAAG;oBACD;wBACE,MAAM,EAAE,EAAE;wBACV,MAAM;wBACN,QAAQ;qBACT;oBACD;wBACE,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,MAAM,EAAE,SAAS;wBACjB,QAAQ,EAAE,EAAE;qBACb;iBACF;aACF,CAAC;YAEF,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC,EAAE;gBAC/C,OAAO,KAAK,CAAC;aACd;SACF;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;IACjC,CAAC;IAED,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;IAChC,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;CACF;AAvED,oFAuEC"}

package/lib/src/auth/http-authz.attach-objects.guard.util.d.ts

@@ -0,0 +1,10 @@
+import { ExecutionContext } from "@nestjs/common";
+export declare class HttpAuthzAttachObjectsGuardUtil {
+    private readonly context;
+    private _util;
+    constructor(context: ExecutionContext);
+    isAuthorized(object: string, objectId: string, attachObject: string, attachObjectIds: string[], namespace?: string): boolean;
+    get params(): any;
+    get query(): any;
+    get body(): any;
+}

package/lib/src/auth/http-authz.attach-objects.guard.util.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpAuthzAttachObjectsGuardUtil = void 0;
+const http_authz_action_to_sub_objects_guard_util_1 = require("./http-authz.action-to-sub-objects.guard.util");
+class HttpAuthzAttachObjectsGuardUtil {
+    constructor(context) {
+        this.context = context;
+        this._util = new http_authz_action_to_sub_objects_guard_util_1.HttpAuthzActionToSubObjectsGuardUtil(context, "create");
+    }
+    isAuthorized(object, objectId, attachObject, attachObjectIds, namespace) {
+        return this._util.isAuthorized(object, objectId, attachObject, attachObjectIds, namespace);
+    }
+    get params() {
+        return this._util.params;
+    }
+    get query() {
+        return this._util.query;
+    }
+    get body() {
+        return this._util.body;
+    }
+}
+exports.HttpAuthzAttachObjectsGuardUtil = HttpAuthzAttachObjectsGuardUtil;
+//# sourceMappingURL=http-authz.attach-objects.guard.util.js.map

package/lib/src/auth/http-authz.attach-objects.guard.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-authz.attach-objects.guard.util.js","sourceRoot":"","sources":["../../../src/auth/http-authz.attach-objects.guard.util.ts"],"names":[],"mappings":";;;AACA,+GAAqG;AAKrG,MAAa,+BAA+B;IAG1C,YAA6B,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QACpD,IAAI,CAAC,KAAK,GAAG,IAAI,kFAAoC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;IASM,YAAY,CACjB,MAAc,EACd,QAAgB,EAChB,YAAoB,EACpB,eAAyB,EACzB,SAAkB;QAElB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAC5B,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,SAAS,CACV,CAAC;IACJ,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAzCD,0EAyCC"}

package/lib/src/auth/http-authz.detach-objects.guard.util.d.ts

@@ -0,0 +1,10 @@
+import { ExecutionContext } from "@nestjs/common";
+export declare class HttpAuthzDetachObjectsGuardUtil {
+    private readonly context;
+    private _util;
+    constructor(context: ExecutionContext);
+    isAuthorized(object: string, objectId: string, detachObject: string, detachObjectIds: string[], namespace?: string): boolean;
+    get params(): any;
+    get query(): any;
+    get body(): any;
+}

package/lib/src/auth/http-authz.detach-objects.guard.util.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpAuthzDetachObjectsGuardUtil = void 0;
+const http_authz_action_to_sub_objects_guard_util_1 = require("./http-authz.action-to-sub-objects.guard.util");
+class HttpAuthzDetachObjectsGuardUtil {
+    constructor(context) {
+        this.context = context;
+        this._util = new http_authz_action_to_sub_objects_guard_util_1.HttpAuthzActionToSubObjectsGuardUtil(context, "delete");
+    }
+    isAuthorized(object, objectId, detachObject, detachObjectIds, namespace) {
+        return this._util.isAuthorized(object, objectId, detachObject, detachObjectIds, namespace);
+    }
+    get params() {
+        return this._util.params;
+    }
+    get query() {
+        return this._util.query;
+    }
+    get body() {
+        return this._util.body;
+    }
+}
+exports.HttpAuthzDetachObjectsGuardUtil = HttpAuthzDetachObjectsGuardUtil;
+//# sourceMappingURL=http-authz.detach-objects.guard.util.js.map

package/lib/src/auth/http-authz.detach-objects.guard.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-authz.detach-objects.guard.util.js","sourceRoot":"","sources":["../../../src/auth/http-authz.detach-objects.guard.util.ts"],"names":[],"mappings":";;;AACA,+GAAqG;AAKrG,MAAa,+BAA+B;IAG1C,YAA6B,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QACpD,IAAI,CAAC,KAAK,GAAG,IAAI,kFAAoC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;IASM,YAAY,CACjB,MAAc,EACd,QAAgB,EAChB,YAAoB,EACpB,eAAyB,EACzB,SAAkB;QAElB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAC5B,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,SAAS,CACV,CAAC;IACJ,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAzCD,0EAyCC"}

package/lib/src/auth/{http-authz-guard.util.d.ts → http-authz.guard.util.d.ts}

@@ -5,6 +5,7 @@ export declare class HttpAuthzGuardUtil {
     private _token;
     readonly params: any;
     readonly query: any;
+    readonly body: any;
     constructor(context: ExecutionContext);
     isAuthorized(...authzRequests: AuthorizationRequestInterface[]): boolean;
     private _doesScopeAuthorizeRequest;

package/lib/src/auth/{http-authz-guard.util.js → http-authz.guard.util.js}

@@ -24,6 +24,7 @@ class HttpAuthzGuardUtil {
         this._token = decodedToken;
         this.params = request.params;
         this.query = request.query;
+        this.body = request.body;
     }
     isAuthorized(...authzRequests) {
         const scopes = this._token.scopes;
@@ -54,4 +55,4 @@ class HttpAuthzGuardUtil {
     }
 }
 exports.HttpAuthzGuardUtil = HttpAuthzGuardUtil;
-//# sourceMappingURL=http-authz-guard.util.js.map
+//# sourceMappingURL=http-authz.guard.util.js.map

package/lib/src/auth/http-authz.guard.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-authz.guard.util.js","sourceRoot":"","sources":["../../../src/auth/http-authz.guard.util.ts"],"names":[],"mappings":";;;AAAA,2CAA6E;AAC7E,oCAAoC;AAEpC,uEAAmE;AAEnE,MAAa,kBAAkB;IAM7B,YAA6B,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAC1D,IAAI,CAAC,mBAAmB,EAAE;YACxB,MAAM,IAAI,sBAAa,CAAC,cAAc,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;SAClE;QACD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE;YACjC,MAAM,IAAI,sBAAa,CAAC,cAAc,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;SAClE;QAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAmB,CAAC;QAC/D,IAAI,CAAC,YAAY,EAAE;YACjB,MAAM,IAAI,sBAAa,CAAC,cAAc,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;SAClE;QAED,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEM,YAAY,CAAC,GAAG,aAA8C;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAElC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;YAC1B,IAAI,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE;gBACzD,OAAO,IAAI,CAAC;aACb;SACF;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,0BAA0B,CAChC,KAAa,EACb,aAA8C;QAE9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,MAAM,uBAAuB,GAAG,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;YACxC,uBAAuB,CAAC,IAAI,CAC1B,IAAI,gDAAsB,CACxB,IAAI,CAAC,MAAM,CAAC,GAAG,EACf,KAAK,CAAC,CAAC,CAAC,EACR,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EACZ,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CACb,CACF,CAAC;SACH;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE;gBAC/B,OAAO,KAAK,CAAC;aACd;YACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE;gBACxC,OAAO,KAAK,CAAC;aACd;SACF;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAxED,gDAwEC"}

package/lib/src/auth/http-authz.list-sub-objects.guard.util.d.ts

@@ -0,0 +1,10 @@
+import { ExecutionContext } from "@nestjs/common";
+export declare class HttpAuthzListSubObjectsGuardUtil {
+    private readonly context;
+    private _util;
+    constructor(context: ExecutionContext);
+    isAuthorized(object: string, objectId: string, subObject: string, namespace?: string): boolean;
+    get params(): any;
+    get query(): any;
+    get body(): any;
+}

package/lib/src/auth/http-authz.list-sub-objects.guard.util.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpAuthzListSubObjectsGuardUtil = void 0;
+const http_authz_guard_util_1 = require("./http-authz.guard.util");
+class HttpAuthzListSubObjectsGuardUtil {
+    constructor(context) {
+        this.context = context;
+        this._util = new http_authz_guard_util_1.HttpAuthzGuardUtil(context);
+    }
+    isAuthorized(object, objectId, subObject, namespace) {
+        let requests = [];
+        if (namespace) {
+            requests = [
+                {
+                    action: "",
+                    object: namespace,
+                    objectId: "",
+                },
+            ];
+        }
+        requests = [
+            ...requests,
+            {
+                action: "",
+                object,
+                objectId,
+            },
+            {
+                action: "list",
+                object: subObject,
+                objectId: "",
+            },
+        ];
+        return this._util.isAuthorized(...requests);
+    }
+    get params() {
+        return this._util.params;
+    }
+    get query() {
+        return this._util.query;
+    }
+    get body() {
+        return this._util.body;
+    }
+}
+exports.HttpAuthzListSubObjectsGuardUtil = HttpAuthzListSubObjectsGuardUtil;
+//# sourceMappingURL=http-authz.list-sub-objects.guard.util.js.map

package/lib/src/auth/http-authz.list-sub-objects.guard.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-authz.list-sub-objects.guard.util.js","sourceRoot":"","sources":["../../../src/auth/http-authz.list-sub-objects.guard.util.ts"],"names":[],"mappings":";;;AAEA,mEAA6D;AAK7D,MAAa,gCAAgC;IAG3C,YAA6B,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QACpD,IAAI,CAAC,KAAK,GAAG,IAAI,0CAAkB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAQM,YAAY,CACjB,MAAc,EACd,QAAgB,EAChB,SAAiB,EACjB,SAAkB;QAElB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAElB,IAAI,SAAS,EAAE;YACb,QAAQ,GAAG;gBACT;oBACE,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,EAAE;iBACb;aACF,CAAC;SACH;QAED,QAAQ,GAAG;YACT,GAAG,QAAQ;YACX;gBACE,MAAM,EAAE,EAAE;gBACV,MAAM;gBACN,QAAQ;aACT;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,EAAE;aACb;SACF,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AA3DD,4EA2DC"}

package/lib/src/auth/index.d.ts

@@ -1,4 +1,8 @@
 export * from "./authenticator.interface";
 export * from "./topic-authorizor.interface";
 export * from "./fake-authenticator";
-export * from "./http-authz-guard.util";
+export * from "./http-authz.guard.util";
+export * from "./http-authz.attach-objects.guard.util";
+export * from "./http-authz.detach-objects.guard.util";
+export * from "./http-authz.action-to-sub-objects.guard.util";
+export * from "./http-authz.list-sub-objects.guard.util";

package/lib/src/auth/index.js

@@ -13,5 +13,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./authenticator.interface"), exports);
 __exportStar(require("./topic-authorizor.interface"), exports);
 __exportStar(require("./fake-authenticator"), exports);
-__exportStar(require("./http-authz-guard.util"), exports);
+__exportStar(require("./http-authz.guard.util"), exports);
+__exportStar(require("./http-authz.attach-objects.guard.util"), exports);
+__exportStar(require("./http-authz.detach-objects.guard.util"), exports);
+__exportStar(require("./http-authz.action-to-sub-objects.guard.util"), exports);
+__exportStar(require("./http-authz.list-sub-objects.guard.util"), exports);
 //# sourceMappingURL=index.js.map

package/lib/src/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4DAA0C;AAC1C,+DAA6C;AAC7C,uDAAqC;AACrC,0DAAwC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4DAA0C;AAC1C,+DAA6C;AAC7C,uDAAqC;AACrC,0DAAwC;AACxC,yEAAuD;AACvD,yEAAuD;AACvD,gFAA8D;AAC9D,2EAAyD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cryptexlabs/codex-nodejs-common",
-  "version": "0.1.17",
+  "version": "0.1.21",
   "description": "Common code for Assistant applications",
   "main": "lib/src/index.js",
   "repository": "git@gitlab.com:cryptexlabs/public/codex-nodejs-common.git",

package/src/auth/authorization-allowance.ts

@@ -30,8 +30,7 @@ export class AuthorizationAllowance {
     ) {
       if (
         this.objectId !== "any" &&
-        request.objectId.toString() !== this.objectId.toString() &&
-        !this._isRequestingSelf(request)
+        request.objectId.toString() !== this.objectId.toString()
       ) {
         return false;
       }
@@ -51,12 +50,4 @@ export class AuthorizationAllowance {
 
     return true;
   }
-
-  private _isRequestingSelf(request: AuthorizationRequestInterface) {
-    return (
-      request.object === "user" &&
-      request.objectId.toString() === this.subject.toString() &&
-      this.objectId === "self"
-    );
-  }
 }

package/src/auth/http-authz.action-to-sub-objects.guard.util.ts

@@ -0,0 +1,78 @@
+import { ExecutionContext } from "@nestjs/common";
+import { HttpAuthzGuardUtil } from "./http-authz.guard.util";
+
+/**
+ * Authorizes attachments of objects to another object by object id
+ */
+export class HttpAuthzActionToSubObjectsGuardUtil {
+  private _authzGuard: HttpAuthzGuardUtil;
+
+  constructor(
+    private readonly context: ExecutionContext,
+    private readonly action: string
+  ) {
+    this._authzGuard = new HttpAuthzGuardUtil(context);
+  }
+
+  /**
+   * @param {string} object The object name of object A
+   * @param {string} objectId The object ID of object A
+   * @param {string} subObject The object name of objects B
+   * @param {string[]} subObjectIds The object IDs of Objects B to attach to object A
+   * @param {string?} namespace (Optional) The namespace of objects A and B
+   */
+  public isAuthorized(
+    object: string,
+    objectId: string,
+    subObject: string,
+    subObjectIds: string[],
+    namespace?: string
+  ) {
+    for (const id of subObjectIds) {
+      let requests = [];
+
+      if (namespace) {
+        requests = [
+          {
+            action: "",
+            object: namespace,
+            objectId: "",
+          },
+        ];
+      }
+
+      requests = [
+        ...requests,
+        ...[
+          {
+            action: "",
+            object,
+            objectId,
+          },
+          {
+            action: this.action,
+            object: subObject,
+            objectId: id,
+          },
+        ],
+      ];
+
+      if (!this._authzGuard.isAuthorized(...requests)) {
+        return false;
+      }
+    }
+    return true;
+  }
+
+  public get params() {
+    return this._authzGuard.params;
+  }
+
+  public get query() {
+    return this._authzGuard.query;
+  }
+
+  public get body() {
+    return this._authzGuard.body;
+  }
+}