@dax-crafta/auth 1.2.7 → 1.2.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dax-crafta/auth",
-  "version": "1.2.7",
+  "version": "1.2.9",
   "description": "Authentication plugin for crafta framework",
   "main": "src/index.js",
   "private": false,

package/src/models/role.js

@@ -0,0 +1,33 @@
+const mongoose = require('mongoose');
+
+const roleSchema = new mongoose.Schema({
+  name: {
+    type: String,
+    required: true,
+    unique: true
+  },
+  permissions: [{
+    resource: String,
+    actions: [{
+      type: String,
+      enum: ['create', 'read', 'update', 'delete', 'manage']
+    }]
+  }],
+  description: String,
+  isSystem: {
+    type: Boolean,
+    default: false
+  },
+  createdAt: {
+    type: Date,
+    default: Date.now
+  },
+  updatedAt: Date
+});
+
+roleSchema.pre('save', function(next) {
+  this.updatedAt = new Date();
+  next();
+});
+
+module.exports = mongoose.model('Role', roleSchema);

package/src/services/role.service.js

@@ -0,0 +1,48 @@
+const Role = require('../models/role');
+
+class RoleService {
+  async createRole(roleData) {
+    const role = new Role(roleData);
+    await role.save();
+    return role;
+  }
+
+  async getRoleByName(name) {
+    return Role.findOne({ name });
+  }
+
+  async updateRole(name, updates) {
+    return Role.findOneAndUpdate(
+      { name },
+      updates,
+      { new: true, runValidators: true }
+    );
+  }
+
+  async deleteRole(name) {
+    const role = await Role.findOne({ name });
+    if (role.isSystem) {
+      throw new Error('Cannot delete system role');
+    }
+    await role.remove();
+  }
+
+  async assignPermissions(roleName, permissions) {
+    const role = await Role.findOne({ name: roleName });
+    role.permissions = permissions;
+    await role.save();
+    return role;
+  }
+
+  async checkPermission(role, resource, action) {
+    const roleDoc = await Role.findOne({ name: role });
+    if (!roleDoc) return false;
+
+    return roleDoc.permissions.some(p => 
+      p.resource === resource && 
+      (p.actions.includes(action) || p.actions.includes('manage'))
+    );
+  }
+}
+
+module.exports = RoleService;