@ddd-ts-kit/auth 0.0.0-stage → 0.1.0

package/dist/use-cases/authorization-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-middleware.js","sourceRoot":"","sources":["../../src/use-cases/authorization-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAsD,MAAM,oBAAoB,CAAC;AAGhH,OAAO,EAAE,IAAI,EAAiB,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAWhF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAuC;IAC7E,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE9C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACvC,MAAM,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAOD,KAAK,UAAU,aAAa,CAC1B,EAAE,UAAU,EAAE,UAAU,EAAkC,EAC1D,WAA6B,EAC7B,EAAE,OAAO,EAAE,IAAI,EAAW;IAE1B,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAa,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEtG,MAAM,UAAU,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAE9D,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,SAAS,CAAC,WAA6B,EAAE,OAAgB,EAAE,IAAiB;IACnF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAE/C,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/use-cases/public-use-case.d.ts

@@ -0,0 +1,5 @@
+import type { Message, MessageType } from '@ddd-ts-kit/kernel';
+import type { PublicUseCase } from './use-case-declaration.js';
+/** Declares that anybody may send the command or query, the anonymous caller included. */
+export declare function publicUseCase(type: MessageType<Message>): PublicUseCase;
+//# sourceMappingURL=public-use-case.d.ts.map

package/dist/use-cases/public-use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-use-case.d.ts","sourceRoot":"","sources":["../../src/use-cases/public-use-case.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,aAAa,CAEvE"}

package/dist/use-cases/public-use-case.js

@@ -0,0 +1,5 @@
+/** Declares that anybody may send the command or query, the anonymous caller included. */
+export function publicUseCase(type) {
+    return { access: 'public', type };
+}
+//# sourceMappingURL=public-use-case.js.map

package/dist/use-cases/public-use-case.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-use-case.js","sourceRoot":"","sources":["../../src/use-cases/public-use-case.ts"],"names":[],"mappings":"AAGA,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC"}

package/dist/use-cases/requires.d.ts

@@ -0,0 +1,17 @@
+import type { Actored, Message, MessageType } from '@ddd-ts-kit/kernel';
+import type { AuthorizationContext } from '../authorization/authorization-context.js';
+import type { ResourceRef } from '../authorization/resource-ref.js';
+import type { Permission } from '../permissions/permission.js';
+import type { ProtectedUseCase } from './use-case-declaration.js';
+export interface RequirementOptions<M> {
+    /** The element the message is about, when the right depends on it. */
+    readonly resource?: (message: M) => ResourceRef;
+    /** Facts of the message the authorizer may need, such as the tenant it targets. */
+    readonly context?: (message: M) => AuthorizationContext;
+}
+/**
+ * Declares, next to the use case and without touching its handler, the permission a command
+ * or query requires. The message must carry its actor, which the compiler checks.
+ */
+export declare function requires<M extends Message & Actored>(type: MessageType<M>, permission: Permission, options?: RequirementOptions<M>): ProtectedUseCase;
+//# sourceMappingURL=requires.d.ts.map

package/dist/use-cases/requires.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requires.d.ts","sourceRoot":"","sources":["../../src/use-cases/requires.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,WAAW,CAAC;IAChD,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,oBAAoB,CAAC;CACzD;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,SAAS,OAAO,GAAG,OAAO,EAClD,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EACpB,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE,kBAAkB,CAAC,CAAC,CAAM,GAClC,gBAAgB,CAQlB"}

package/dist/use-cases/requires.js

@@ -0,0 +1,14 @@
+/**
+ * Declares, next to the use case and without touching its handler, the permission a command
+ * or query requires. The message must carry its actor, which the compiler checks.
+ */
+export function requires(type, permission, options = {}) {
+    return {
+        access: 'protected',
+        type,
+        permission,
+        resourceOf: (message) => (message instanceof type ? options.resource?.(message) : undefined),
+        contextOf: (message) => (message instanceof type ? options.context?.(message) : undefined),
+    };
+}
+//# sourceMappingURL=requires.js.map

package/dist/use-cases/requires.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requires.js","sourceRoot":"","sources":["../../src/use-cases/requires.ts"],"names":[],"mappings":"AAaA;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAoB,EACpB,UAAsB,EACtB,OAAO,GAA0B,EAAE;IAEnC,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,IAAI;QACJ,UAAU;QACV,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5F,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;KAC3F,CAAC;AACJ,CAAC"}

package/dist/use-cases/use-case-declaration.d.ts

@@ -0,0 +1,17 @@
+import type { Message, MessageType } from '@ddd-ts-kit/kernel';
+import type { AuthorizationContext } from '../authorization/authorization-context.js';
+import type { ResourceRef } from '../authorization/resource-ref.js';
+import type { Permission } from '../permissions/permission.js';
+export interface PublicUseCase {
+    readonly access: 'public';
+    readonly type: MessageType<Message>;
+}
+export interface ProtectedUseCase {
+    readonly access: 'protected';
+    readonly type: MessageType<Message>;
+    readonly permission: Permission;
+    resourceOf(message: Message): ResourceRef | undefined;
+    contextOf(message: Message): AuthorizationContext | undefined;
+}
+export type UseCaseDeclaration = PublicUseCase | ProtectedUseCase;
+//# sourceMappingURL=use-case-declaration.d.ts.map

package/dist/use-cases/use-case-declaration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-case-declaration.d.ts","sourceRoot":"","sources":["../../src/use-cases/use-case-declaration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;IACtD,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CAAC;CAC/D;AAED,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,gBAAgB,CAAC"}

package/dist/use-cases/use-case-declaration.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=use-case-declaration.js.map

package/dist/use-cases/use-case-declaration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-case-declaration.js","sourceRoot":"","sources":["../../src/use-cases/use-case-declaration.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,69 @@
 {
   "name": "@ddd-ts-kit/auth",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Authentication and authorization behind ports: actors, permissions declared per use case, role, attribute and relationship (Zanzibar-style) based authorizers, deny by default.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/gbourgeat/ddd-ts-kit.git",
+    "directory": "packages/auth"
+  },
+  "homepage": "https://github.com/gbourgeat/ddd-ts-kit/tree/main/packages/auth#readme",
+  "bugs": "https://github.com/gbourgeat/ddd-ts-kit/issues",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./jwt": {
+      "types": "./dist/jwt.d.ts",
+      "default": "./dist/jwt.js"
+    },
+    "./rebac": {
+      "types": "./dist/rebac.d.ts",
+      "default": "./dist/rebac.js"
+    },
+    "./testing": {
+      "types": "./dist/testing.d.ts",
+      "default": "./dist/testing.js"
+    },
+    "./di": {
+      "types": "./dist/di.d.ts",
+      "default": "./dist/di.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@ddd-ts-kit/kernel": "0.1.0"
+  },
+  "peerDependencies": {
+    "@ddd-ts-kit/di": "0.1.0",
+    "@ddd-ts-kit/testing": "0.1.0",
+    "jose": "^6.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@ddd-ts-kit/di": {
+      "optional": true
+    },
+    "@ddd-ts-kit/testing": {
+      "optional": true
+    },
+    "jose": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@ddd-ts-kit/di": "0.1.0",
+    "@ddd-ts-kit/http": "0.1.0",
+    "@ddd-ts-kit/testing": "0.1.0",
+    "jose": "^6.0.0"
+  }
+}