@devstroupe/devkit-nest 1.1.3 → 1.1.5

package/dist/auth/index.d.ts

@@ -1,2 +1,4 @@
 export * from './permissions.decorator';
 export * from './permissions.guard';
+export * from './roles.decorator';
+export * from './roles.guard';

package/dist/auth/index.js

@@ -16,3 +16,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./permissions.decorator"), exports);
 __exportStar(require("./permissions.guard"), exports);
+__exportStar(require("./roles.decorator"), exports);
+__exportStar(require("./roles.guard"), exports);

package/dist/auth/roles.decorator.d.ts

@@ -0,0 +1,2 @@
+export declare const ROLES_KEY = "roles";
+export declare const Roles: (...roles: string[]) => import("@nestjs/common").CustomDecorator<string>;

package/dist/auth/roles.decorator.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Roles = exports.ROLES_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.ROLES_KEY = 'roles';
+const Roles = (...roles) => (0, common_1.SetMetadata)(exports.ROLES_KEY, roles);
+exports.Roles = Roles;

package/dist/auth/roles.guard.d.ts

@@ -0,0 +1,7 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+export declare class RolesGuard implements CanActivate {
+    private reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): boolean;
+}

package/dist/auth/roles.guard.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RolesGuard = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const roles_decorator_1 = require("./roles.decorator");
+let RolesGuard = class RolesGuard {
+    reflector;
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    canActivate(context) {
+        const requiredRoles = this.reflector.getAllAndOverride(roles_decorator_1.ROLES_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (!requiredRoles || requiredRoles.length === 0) {
+            return true;
+        }
+        const request = context.switchToHttp().getRequest();
+        const user = request.user;
+        if (!user) {
+            return false; // Bloqueia acesso caso não esteja autenticado
+        }
+        const roleName = typeof user.role === 'object' ? user.role.name : user.role;
+        if (!roleName) {
+            return false;
+        }
+        // ADMIN ou Administrador têm bypass automático
+        if (roleName === 'ADMIN' || roleName === 'Administrador') {
+            return true;
+        }
+        return requiredRoles.includes(roleName);
+    }
+};
+exports.RolesGuard = RolesGuard;
+exports.RolesGuard = RolesGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector])
+], RolesGuard);

package/dist/auth/roles.guard.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth/roles.guard.test.js

@@ -0,0 +1,112 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const assert = __importStar(require("node:assert"));
+const roles_guard_1 = require("./roles.guard");
+(0, node_test_1.describe)('RolesGuard', () => {
+    const createMockContext = (user) => {
+        return {
+            switchToHttp: () => ({
+                getRequest: () => ({ user }),
+            }),
+            getHandler: () => ({}),
+            getClass: () => ({}),
+        };
+    };
+    (0, node_test_1.test)('deve permitir acesso se não houver roles exigidas', () => {
+        const mockReflector = {
+            getAllAndOverride: () => undefined,
+        };
+        const guard = new roles_guard_1.RolesGuard(mockReflector);
+        const context = createMockContext({ role: 'USER' });
+        const result = guard.canActivate(context);
+        assert.strictEqual(result, true);
+    });
+    (0, node_test_1.test)('deve permitir acesso se o usuário for ADMIN (super admin)', () => {
+        const mockReflector = {
+            getAllAndOverride: () => ['GERENTE'],
+        };
+        const guard = new roles_guard_1.RolesGuard(mockReflector);
+        const context = createMockContext({ role: 'ADMIN' });
+        const result = guard.canActivate(context);
+        assert.strictEqual(result, true);
+    });
+    (0, node_test_1.test)('deve permitir acesso se o usuário for Administrador (super admin)', () => {
+        const mockReflector = {
+            getAllAndOverride: () => ['GERENTE'],
+        };
+        const guard = new roles_guard_1.RolesGuard(mockReflector);
+        const context = createMockContext({ role: 'Administrador' });
+        const result = guard.canActivate(context);
+        assert.strictEqual(result, true);
+    });
+    (0, node_test_1.test)('deve permitir acesso se o usuário tiver a role exigida (role string)', () => {
+        const mockReflector = {
+            getAllAndOverride: () => ['GERENTE', 'DIRETOR'],
+        };
+        const guard = new roles_guard_1.RolesGuard(mockReflector);
+        const context = createMockContext({ role: 'GERENTE' });
+        const result = guard.canActivate(context);
+        assert.strictEqual(result, true);
+    });
+    (0, node_test_1.test)('deve permitir acesso se o usuário tiver a role exigida (role object)', () => {
+        const mockReflector = {
+            getAllAndOverride: () => ['GERENTE', 'DIRETOR'],
+        };
+        const guard = new roles_guard_1.RolesGuard(mockReflector);
+        const context = createMockContext({ role: { name: 'GERENTE' } });
+        const result = guard.canActivate(context);
+        assert.strictEqual(result, true);
+    });
+    (0, node_test_1.test)('deve negar acesso se o usuário não tiver a role exigida', () => {
+        const mockReflector = {
+            getAllAndOverride: () => ['GERENTE', 'DIRETOR'],
+        };
+        const guard = new roles_guard_1.RolesGuard(mockReflector);
+        const context = createMockContext({ role: 'OPERADOR' });
+        const result = guard.canActivate(context);
+        assert.strictEqual(result, false);
+    });
+    (0, node_test_1.test)('deve negar acesso se não houver usuário autenticado na request', () => {
+        const mockReflector = {
+            getAllAndOverride: () => ['GERENTE'],
+        };
+        const guard = new roles_guard_1.RolesGuard(mockReflector);
+        const context = createMockContext(undefined);
+        const result = guard.canActivate(context);
+        assert.strictEqual(result, false);
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devstroupe/devkit-nest",
-  "version": "1.1.3",
+  "version": "1.1.5",
   "description": "DevsTroupe Development Kit — NestJS base classes: BaseRepository, BaseCrudController and query parsers",
   "license": "MIT",
   "keywords": [
@@ -32,7 +32,7 @@
     "@aws-sdk/client-s3": "^3.500.0",
     "@aws-sdk/s3-request-presigner": "^3.500.0",
     "jsonwebtoken": "^9.0.2",
-    "@devstroupe/devkit-core": "1.1.3"
+    "@devstroupe/devkit-core": "1.1.5"
   },
   "peerDependencies": {
     "@nestjs/common": "^10.0.0 || ^11.0.0",