@ecom-micro/common 2.0.9 → 2.0.12

package/build/errors/notAuthorized.js

@@ -21,12 +21,12 @@ var NotAuthorizedError = /** @class */ (function (_super) {
     __extends(NotAuthorizedError, _super);
     function NotAuthorizedError() {
         var _this = _super.call(this, 'Not authorized') || this;
-        _this.statusCode = 401;
+        _this.statusCode = 403;
         Object.setPrototypeOf(_this, NotAuthorizedError.prototype);
         return _this;
     }
     NotAuthorizedError.prototype.serializeErrors = function () {
-        return [{ message: 'Not authorized' }];
+        return [{ message: 'Oops! You are not authorized to access this route' }];
     };
     return NotAuthorizedError;
 }(baseError_1.BaseError));

package/build/index.d.ts

@@ -5,6 +5,7 @@ export * from './errors/notFoundError';
 export * from './errors/requestValidationError';
 export * from './middleware/errorHandler';
 export * from './middleware/protect';
+export * from './middleware/restrictTo';
 export * from './middleware/requestValidation';
 export * from './events/baseListener';
 export * from './events/basePublisher';

package/build/index.js

@@ -21,6 +21,7 @@ __exportStar(require("./errors/notFoundError"), exports);
 __exportStar(require("./errors/requestValidationError"), exports);
 __exportStar(require("./middleware/errorHandler"), exports);
 __exportStar(require("./middleware/protect"), exports);
+__exportStar(require("./middleware/restrictTo"), exports);
 __exportStar(require("./middleware/requestValidation"), exports);
 __exportStar(require("./events/baseListener"), exports);
 __exportStar(require("./events/basePublisher"), exports);

package/build/middleware/protect.d.ts

@@ -2,6 +2,7 @@ import { NextFunction, Request, Response } from 'express';
 type UserPayload = {
     id: string;
     email: string;
+    role?: string;
 };
 declare global {
     namespace Express {

package/build/middleware/restrictTo.d.ts

@@ -0,0 +1,2 @@
+import { NextFunction, Request, Response } from 'express';
+export declare const restrictTo: (...roles: any) => (req: Request, res: Response, next: NextFunction) => void;

package/build/middleware/restrictTo.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.restrictTo = void 0;
+var notAuthorized_1 = require("../errors/notAuthorized");
+var restrictTo = function () {
+    var roles = [];
+    for (var _i = 0; _i < arguments.length; _i++) {
+        roles[_i] = arguments[_i];
+    }
+    return function (req, res, next) {
+        if (!roles.includes(req.user.role)) {
+            return next(new notAuthorized_1.NotAuthorizedError());
+        }
+        next();
+    };
+};
+exports.restrictTo = restrictTo;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ecom-micro/common",
-  "version": "2.0.9",
+  "version": "2.0.12",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",