@duvdu-v1/duvdu 1.0.28 → 1.0.29

package/build/middlewares/allowedTo.middleware.d.ts

@@ -0,0 +1,28 @@
+/// <reference types="qs" />
+/// <reference types="mongoose/types/aggregate" />
+/// <reference types="mongoose/types/callback" />
+/// <reference types="mongoose/types/collection" />
+/// <reference types="mongoose/types/connection" />
+/// <reference types="mongoose/types/cursor" />
+/// <reference types="mongoose/types/document" />
+/// <reference types="mongoose/types/error" />
+/// <reference types="mongoose/types/expressions" />
+/// <reference types="mongoose/types/helpers" />
+/// <reference types="mongoose/types/middlewares" />
+/// <reference types="mongoose/types/indexes" />
+/// <reference types="mongoose/types/models" />
+/// <reference types="mongoose/types/mongooseoptions" />
+/// <reference types="mongoose/types/pipelinestage" />
+/// <reference types="mongoose/types/populate" />
+/// <reference types="mongoose/types/query" />
+/// <reference types="mongoose/types/schemaoptions" />
+/// <reference types="mongoose/types/schematypes" />
+/// <reference types="mongoose/types/session" />
+/// <reference types="mongoose/types/types" />
+/// <reference types="mongoose/types/utility" />
+/// <reference types="mongoose/types/validation" />
+/// <reference types="mongoose/types/virtuals" />
+/// <reference types="mongoose/types/inferschematype" />
+import { RequestHandler } from 'express';
+import { Model } from 'mongoose';
+export declare const allowedTo: (planModel: Model<any>, roleMode: Model<any>, permission: string) => RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;

package/build/middlewares/allowedTo.middleware.js

@@ -0,0 +1,26 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.allowedTo = void 0;
+const unauthorized_error_1 = require("../errors/unauthorized-error");
+const allowedTo = (planModel, roleMode, permission) => ((req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a;
+    const plan = yield planModel.findOne((_a = req.loggedUser) === null || _a === void 0 ? void 0 : _a.planId);
+    if (!plan)
+        return next(new unauthorized_error_1.UnauthorizedError('user dont have plain'));
+    const role = yield roleMode.findOne(plan.role);
+    if (!role)
+        return next(new unauthorized_error_1.UnauthorizedError('user dont have this role'));
+    if (!role.features.includes(permission))
+        return next(new unauthorized_error_1.UnauthorizedError('user not allowed access this route'));
+    return next();
+}));
+exports.allowedTo = allowedTo;

package/build/middlewares/auth.middleware.js

@@ -35,7 +35,7 @@ const auth = (modelName) => ((req, res, next) => __awaiter(void 0, void 0, void
     }
     try {
         const payload = jsonwebtoken_1.default.verify(req.session.jwt, process.env.JWT_KEY);
-        req.loggedUser = { id: payload.id };
+        req.loggedUser = { id: payload.id, planId: payload.planId };
         return next();
     }
     catch (error) {

package/build/types/JwtPayload.d.ts

@@ -1,3 +1,4 @@
 export interface IjwtPayload {
     id: string;
+    planId: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@duvdu-v1/duvdu",
-  "version": "1.0.28",
+  "version": "1.0.29",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "files": [