@fdm-monster/server 2.0.10 → 2.0.11

package/dist/services/orm/refresh-token.service.js

@@ -1,101 +1,71 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "RefreshTokenService", {
-    enumerable: true,
-    get: function() {
-        return RefreshTokenService;
-    }
-});
-const _baseservice = require("./base.service");
-const _entities = require("../../entities");
-const _refreshtokendto = require("../interfaces/refresh-token.dto");
-const _runtimeexceptions = require("../../exceptions/runtime.exceptions");
-const _uuid = require("uuid");
-const _serverconstants = require("../../server.constants");
-const _typeorm = require("typeorm");
-const _authorizationconstants = require("../../constants/authorization.constants");
-class RefreshTokenService extends (0, _baseservice.BaseService)(_entities.RefreshToken, _refreshtokendto.RefreshTokenDto) {
-    settingsStore;
-    logger;
-    constructor(settingsStore, loggerFactory, typeormService){
-        super(typeormService), this.settingsStore = settingsStore;
-        this.logger = loggerFactory(RefreshTokenService.name);
-    }
-    toDto(entity) {
-        return {
-            id: entity.id,
-            userId: entity.userId,
-            expiresAt: entity.expiresAt,
-            refreshAttemptsUsed: entity.refreshAttemptsUsed
-        };
-    }
-    async getRefreshToken(refreshToken) {
-        const entity = await this.repository.findOneBy({
-            refreshToken
-        });
-        if (!entity) {
-            throw new _runtimeexceptions.AuthenticationError(`The entity ${_entities.RefreshToken.name} by provided refresh token is not found`, _authorizationconstants.AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
-        }
-        return entity;
-    }
-    async createRefreshTokenForUserId(userId) {
-        const { refreshTokenExpiry } = await this.settingsStore.getCredentialSettings();
-        const refreshToken = (0, _uuid.v4)();
-        const timespan = refreshTokenExpiry ?? _serverconstants.AppConstants.DEFAULT_REFRESH_TOKEN_EXPIRY;
-        if (!refreshTokenExpiry) {
-            this.logger.warn("Refresh token expiry not set in Settings:credentials, using default value");
-        }
-        await this.create({
-            userId,
-            expiresAt: Date.now() + timespan * 1000,
-            refreshToken,
-            refreshAttemptsUsed: 0
-        });
-        return refreshToken;
-    }
-    async updateRefreshTokenAttempts(refreshToken, refreshAttemptsUsed) {
-        await this.getRefreshToken(refreshToken);
-        await this.repository.update({
-            refreshToken
-        }, {
-            refreshAttemptsUsed
-        });
-    }
-    async purgeAllOutdatedRefreshTokens() {
-        const result = await this.repository.delete({
-            expiresAt: (0, _typeorm.LessThan)(Date.now())
-        });
-        if (result.affected) {
-            this.logger.debug(`Removed ${result.affected} outdated refresh tokens`);
-        }
-    }
-    async deleteRefreshTokenByUserId(userId) {
-        const result = await this.repository.delete({
-            userId
-        });
-        if (result.affected) {
-            this.logger.debug(`Removed ${result.affected} login refresh tokens for user`);
-        }
-    }
-    async deleteRefreshToken(refreshToken) {
-        const result = await this.repository.delete({
-            refreshToken
-        });
-        if (result.affected) {
-            this.logger.debug(`Removed ${result.affected} login refresh tokens`);
-        }
-    }
-    async purgeOutdatedRefreshTokensByUserId(userId) {
-        const result = await this.repository.delete({
-            userId,
-            expiresAt: (0, _typeorm.LessThan)(Date.now())
-        });
-        if (result.affected) {
-            this.logger.debug(`Removed ${result.affected} outdated login refresh tokens for user`);
-        }
-    }
-}
+import { AuthenticationError } from "../../exceptions/runtime.exceptions.js";
+import { BaseService } from "./base.service.js";
+import { RefreshToken } from "../../entities/refresh-token.entity.js";
+import { AppConstants } from "../../server.constants.js";
+import { AUTH_ERROR_REASON } from "../../constants/authorization.constants.js";
+import "../../entities/index.js";
+import { RefreshTokenDto } from "../interfaces/refresh-token.dto.js";
+import { LessThan } from "typeorm";
+import { v4 } from "uuid";
+//#region src/services/orm/refresh-token.service.ts
+var RefreshTokenService = class RefreshTokenService extends BaseService(RefreshToken, RefreshTokenDto) {
+	logger;
+	constructor(settingsStore, loggerFactory, typeormService) {
+		super(typeormService);
+		this.settingsStore = settingsStore;
+		this.logger = loggerFactory(RefreshTokenService.name);
+	}
+	toDto(entity) {
+		return {
+			id: entity.id,
+			userId: entity.userId,
+			expiresAt: entity.expiresAt,
+			refreshAttemptsUsed: entity.refreshAttemptsUsed
+		};
+	}
+	async getRefreshToken(refreshToken) {
+		const entity = await this.repository.findOneBy({ refreshToken });
+		if (!entity) throw new AuthenticationError(`The entity ${RefreshToken.name} by provided refresh token is not found`, AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
+		return entity;
+	}
+	async createRefreshTokenForUserId(userId) {
+		const { refreshTokenExpiry } = await this.settingsStore.getCredentialSettings();
+		const refreshToken = v4();
+		const timespan = refreshTokenExpiry ?? AppConstants.DEFAULT_REFRESH_TOKEN_EXPIRY;
+		if (!refreshTokenExpiry) this.logger.warn("Refresh token expiry not set in Settings:credentials, using default value");
+		await this.create({
+			userId,
+			expiresAt: Date.now() + timespan * 1e3,
+			refreshToken,
+			refreshAttemptsUsed: 0
+		});
+		return refreshToken;
+	}
+	async updateRefreshTokenAttempts(refreshToken, refreshAttemptsUsed) {
+		await this.getRefreshToken(refreshToken);
+		await this.repository.update({ refreshToken }, { refreshAttemptsUsed });
+	}
+	async purgeAllOutdatedRefreshTokens() {
+		const result = await this.repository.delete({ expiresAt: LessThan(Date.now()) });
+		if (result.affected) this.logger.debug(`Removed ${result.affected} outdated refresh tokens`);
+	}
+	async deleteRefreshTokenByUserId(userId) {
+		const result = await this.repository.delete({ userId });
+		if (result.affected) this.logger.debug(`Removed ${result.affected} login refresh tokens for user`);
+	}
+	async deleteRefreshToken(refreshToken) {
+		const result = await this.repository.delete({ refreshToken });
+		if (result.affected) this.logger.debug(`Removed ${result.affected} login refresh tokens`);
+	}
+	async purgeOutdatedRefreshTokensByUserId(userId) {
+		const result = await this.repository.delete({
+			userId,
+			expiresAt: LessThan(Date.now())
+		});
+		if (result.affected) this.logger.debug(`Removed ${result.affected} outdated login refresh tokens for user`);
+	}
+};
+//#endregion
+export { RefreshTokenService };
 
 //# sourceMappingURL=refresh-token.service.js.map

package/dist/services/orm/refresh-token.service.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/services/orm/refresh-token.service.ts"],"names":["RefreshTokenService","BaseService","RefreshToken","RefreshTokenDto","logger","settingsStore","loggerFactory","typeormService","name","toDto","entity","id","userId","expiresAt","refreshAttemptsUsed","getRefreshToken","refreshToken","repository","findOneBy","AuthenticationError","AUTH_ERROR_REASON","InvalidOrExpiredRefreshToken","createRefreshTokenForUserId","refreshTokenExpiry","getCredentialSettings","uuidv4","timespan","AppConstants","DEFAULT_REFRESH_TOKEN_EXPIRY","warn","create","Date","now","updateRefreshTokenAttempts","update","purgeAllOutdatedRefreshTokens","result","delete","LessThan","affected","debug","deleteRefreshTokenByUserId","deleteRefreshToken","purgeOutdatedRefreshTokensByUserId"],"mappings":";;;;+BAcaA;;;eAAAA;;;6BAde;0BACC;iCAEG;mCACI;sBAEP;iCACA;yBAIJ;wCACS;AAE3B,MAAMA,4BAA4BC,IAAAA,wBAAW,EAACC,sBAAY,EAAEC,gCAAe;;IAC/DC,OAAsB;IAEvC,YACE,AAAiBC,aAA4B,EAC7CC,aAA6B,EAC7BC,cAA8B,CAC9B;QACA,KAAK,CAACA,sBAJWF,gBAAAA;QAKjB,IAAI,CAACD,MAAM,GAAGE,cAAcN,oBAAoBQ,IAAI;IACtD;IAEAC,MAAMC,MAAoB,EAAmB;QAC3C,OAAO;YACLC,IAAID,OAAOC,EAAE;YACbC,QAAQF,OAAOE,MAAM;YACrBC,WAAWH,OAAOG,SAAS;YAG3BC,qBAAqBJ,OAAOI,mBAAmB;QACjD;IACF;IAEA,MAAMC,gBAAgBC,YAAoB,EAAyB;QACjE,MAAMN,SAAS,MAAM,IAAI,CAACO,UAAU,CAACC,SAAS,CAAC;YAAEF;QAAa;QAC9D,IAAI,CAACN,QAAQ;YACX,MAAM,IAAIS,sCAAmB,CAC3B,CAAC,WAAW,EAAEjB,sBAAY,CAACM,IAAI,CAAC,uCAAuC,CAAC,EACxEY,yCAAiB,CAACC,4BAA4B;QAElD;QAEA,OAAOX;IACT;IAEA,MAAMY,4BAA4BV,MAAc,EAAmB;QACjE,MAAM,EAAEW,kBAAkB,EAAE,GAAG,MAAM,IAAI,CAAClB,aAAa,CAACmB,qBAAqB;QAC7E,MAAMR,eAAeS,IAAAA,QAAM;QAE3B,MAAMC,WAAWH,sBAAsBI,6BAAY,CAACC,4BAA4B;QAChF,IAAI,CAACL,oBAAoB;YACvB,IAAI,CAACnB,MAAM,CAACyB,IAAI,CAAC;QACnB;QAEA,MAAM,IAAI,CAACC,MAAM,CAAC;YAChBlB;YACAC,WAAWkB,KAAKC,GAAG,KAAKN,WAAW;YACnCV;YACAF,qBAAqB;QACvB;QAEA,OAAOE;IACT;IAEA,MAAMiB,2BAA2BjB,YAAoB,EAAEF,mBAA2B,EAAiB;QACjG,MAAM,IAAI,CAACC,eAAe,CAACC;QAE3B,MAAM,IAAI,CAACC,UAAU,CAACiB,MAAM,CAAC;YAAElB;QAAa,GAAG;YAAEF;QAAoB;IACvE;IAEA,MAAMqB,gCAA+C;QACnD,MAAMC,SAAS,MAAM,IAAI,CAACnB,UAAU,CAACoB,MAAM,CAAC;YAC1CxB,WAAWyB,IAAAA,iBAAQ,EAACP,KAAKC,GAAG;QAC9B;QAEA,IAAII,OAAOG,QAAQ,EAAE;YACnB,IAAI,CAACnC,MAAM,CAACoC,KAAK,CAAC,CAAC,QAAQ,EAAEJ,OAAOG,QAAQ,CAAC,wBAAwB,CAAC;QACxE;IACF;IAEA,MAAME,2BAA2B7B,MAAc,EAAiB;QAC9D,MAAMwB,SAAS,MAAM,IAAI,CAACnB,UAAU,CAACoB,MAAM,CAAC;YAC1CzB;QACF;QAEA,IAAIwB,OAAOG,QAAQ,EAAE;YACnB,IAAI,CAACnC,MAAM,CAACoC,KAAK,CAAC,CAAC,QAAQ,EAAEJ,OAAOG,QAAQ,CAAC,8BAA8B,CAAC;QAC9E;IACF;IAEA,MAAMG,mBAAmB1B,YAAoB,EAAiB;QAC5D,MAAMoB,SAAS,MAAM,IAAI,CAACnB,UAAU,CAACoB,MAAM,CAAC;YAC1CrB;QACF;QAEA,IAAIoB,OAAOG,QAAQ,EAAE;YACnB,IAAI,CAACnC,MAAM,CAACoC,KAAK,CAAC,CAAC,QAAQ,EAAEJ,OAAOG,QAAQ,CAAC,qBAAqB,CAAC;QACrE;IACF;IAEA,MAAMI,mCAAmC/B,MAAc,EAAiB;QACtE,MAAMwB,SAAS,MAAM,IAAI,CAACnB,UAAU,CAACoB,MAAM,CAAC;YAC1CzB;YACAC,WAAWyB,IAAAA,iBAAQ,EAACP,KAAKC,GAAG;QAC9B;QAEA,IAAII,OAAOG,QAAQ,EAAE;YACnB,IAAI,CAACnC,MAAM,CAACoC,KAAK,CAAC,CAAC,QAAQ,EAAEJ,OAAOG,QAAQ,CAAC,uCAAuC,CAAC;QACvF;IACF;AACF"}
+{"version":3,"file":"refresh-token.service.js","names":["uuidv4"],"sources":["../../../src/services/orm/refresh-token.service.ts"],"sourcesContent":["import { BaseService } from \"@/services/orm/base.service\";\nimport { RefreshToken } from \"@/entities\";\nimport type { IRefreshTokenService } from \"@/services/interfaces/refresh-token.service.interface\";\nimport { RefreshTokenDto } from \"@/services/interfaces/refresh-token.dto\";\nimport { AuthenticationError } from \"@/exceptions/runtime.exceptions\";\nimport { TypeormService } from \"@/services/typeorm/typeorm.service\";\nimport { v4 as uuidv4 } from \"uuid\";\nimport { AppConstants } from \"@/server.constants\";\nimport { SettingsStore } from \"@/state/settings.store\";\nimport type { ILoggerFactory } from \"@/handlers/logger-factory\";\nimport { LoggerService } from \"@/handlers/logger\";\nimport { LessThan } from \"typeorm\";\nimport { AUTH_ERROR_REASON } from \"@/constants/authorization.constants\";\n\nexport class RefreshTokenService extends BaseService(RefreshToken, RefreshTokenDto) implements IRefreshTokenService {\n  private readonly logger: LoggerService;\n\n  constructor(\n    private readonly settingsStore: SettingsStore,\n    loggerFactory: ILoggerFactory,\n    typeormService: TypeormService,\n  ) {\n    super(typeormService);\n    this.logger = loggerFactory(RefreshTokenService.name);\n  }\n\n  toDto(entity: RefreshToken): RefreshTokenDto {\n    return {\n      id: entity.id,\n      userId: entity.userId,\n      expiresAt: entity.expiresAt,\n      // Sensitive data\n      // refreshToken: entity.refreshToken,\n      refreshAttemptsUsed: entity.refreshAttemptsUsed,\n    };\n  }\n\n  async getRefreshToken(refreshToken: string): Promise<RefreshToken> {\n    const entity = await this.repository.findOneBy({ refreshToken });\n    if (!entity) {\n      throw new AuthenticationError(\n        `The entity ${RefreshToken.name} by provided refresh token is not found`,\n        AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken,\n      );\n    }\n\n    return entity;\n  }\n\n  async createRefreshTokenForUserId(userId: number): Promise<string> {\n    const { refreshTokenExpiry } = await this.settingsStore.getCredentialSettings();\n    const refreshToken = uuidv4();\n\n    const timespan = refreshTokenExpiry ?? AppConstants.DEFAULT_REFRESH_TOKEN_EXPIRY;\n    if (!refreshTokenExpiry) {\n      this.logger.warn(\"Refresh token expiry not set in Settings:credentials, using default value\");\n    }\n\n    await this.create({\n      userId,\n      expiresAt: Date.now() + timespan * 1000,\n      refreshToken,\n      refreshAttemptsUsed: 0,\n    });\n\n    return refreshToken;\n  }\n\n  async updateRefreshTokenAttempts(refreshToken: string, refreshAttemptsUsed: number): Promise<void> {\n    await this.getRefreshToken(refreshToken);\n\n    await this.repository.update({ refreshToken }, { refreshAttemptsUsed });\n  }\n\n  async purgeAllOutdatedRefreshTokens(): Promise<void> {\n    const result = await this.repository.delete({\n      expiresAt: LessThan(Date.now()),\n    });\n\n    if (result.affected) {\n      this.logger.debug(`Removed ${result.affected} outdated refresh tokens`);\n    }\n  }\n\n  async deleteRefreshTokenByUserId(userId: number): Promise<void> {\n    const result = await this.repository.delete({\n      userId,\n    });\n\n    if (result.affected) {\n      this.logger.debug(`Removed ${result.affected} login refresh tokens for user`);\n    }\n  }\n\n  async deleteRefreshToken(refreshToken: string): Promise<void> {\n    const result = await this.repository.delete({\n      refreshToken,\n    });\n\n    if (result.affected) {\n      this.logger.debug(`Removed ${result.affected} login refresh tokens`);\n    }\n  }\n\n  async purgeOutdatedRefreshTokensByUserId(userId: number): Promise<void> {\n    const result = await this.repository.delete({\n      userId,\n      expiresAt: LessThan(Date.now()),\n    });\n\n    if (result.affected) {\n      this.logger.debug(`Removed ${result.affected} outdated login refresh tokens for user`);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAcA,IAAa,sBAAb,MAAa,4BAA4B,YAAY,cAAc,gBAAgB,CAAiC;CAClH;CAEA,YACE,eACA,eACA,gBACA;AACA,QAAM,eAAe;AAJJ,OAAA,gBAAA;AAKjB,OAAK,SAAS,cAAc,oBAAoB,KAAK;;CAGvD,MAAM,QAAuC;AAC3C,SAAO;GACL,IAAI,OAAO;GACX,QAAQ,OAAO;GACf,WAAW,OAAO;GAGlB,qBAAqB,OAAO;GAC7B;;CAGH,MAAM,gBAAgB,cAA6C;EACjE,MAAM,SAAS,MAAM,KAAK,WAAW,UAAU,EAAE,cAAc,CAAC;AAChE,MAAI,CAAC,OACH,OAAM,IAAI,oBACR,cAAc,aAAa,KAAK,0CAChC,kBAAkB,6BACnB;AAGH,SAAO;;CAGT,MAAM,4BAA4B,QAAiC;EACjE,MAAM,EAAE,uBAAuB,MAAM,KAAK,cAAc,uBAAuB;EAC/E,MAAM,eAAeA,IAAQ;EAE7B,MAAM,WAAW,sBAAsB,aAAa;AACpD,MAAI,CAAC,mBACH,MAAK,OAAO,KAAK,4EAA4E;AAG/F,QAAM,KAAK,OAAO;GAChB;GACA,WAAW,KAAK,KAAK,GAAG,WAAW;GACnC;GACA,qBAAqB;GACtB,CAAC;AAEF,SAAO;;CAGT,MAAM,2BAA2B,cAAsB,qBAA4C;AACjG,QAAM,KAAK,gBAAgB,aAAa;AAExC,QAAM,KAAK,WAAW,OAAO,EAAE,cAAc,EAAE,EAAE,qBAAqB,CAAC;;CAGzE,MAAM,gCAA+C;EACnD,MAAM,SAAS,MAAM,KAAK,WAAW,OAAO,EAC1C,WAAW,SAAS,KAAK,KAAK,CAAC,EAChC,CAAC;AAEF,MAAI,OAAO,SACT,MAAK,OAAO,MAAM,WAAW,OAAO,SAAS,0BAA0B;;CAI3E,MAAM,2BAA2B,QAA+B;EAC9D,MAAM,SAAS,MAAM,KAAK,WAAW,OAAO,EAC1C,QACD,CAAC;AAEF,MAAI,OAAO,SACT,MAAK,OAAO,MAAM,WAAW,OAAO,SAAS,gCAAgC;;CAIjF,MAAM,mBAAmB,cAAqC;EAC5D,MAAM,SAAS,MAAM,KAAK,WAAW,OAAO,EAC1C,cACD,CAAC;AAEF,MAAI,OAAO,SACT,MAAK,OAAO,MAAM,WAAW,OAAO,SAAS,uBAAuB;;CAIxE,MAAM,mCAAmC,QAA+B;EACtE,MAAM,SAAS,MAAM,KAAK,WAAW,OAAO;GAC1C;GACA,WAAW,SAAS,KAAK,KAAK,CAAC;GAChC,CAAC;AAEF,MAAI,OAAO,SACT,MAAK,OAAO,MAAM,WAAW,OAAO,SAAS,yCAAyC"}

package/dist/services/orm/role.service.js

@@ -1,118 +1,101 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "RoleService", {
-    enumerable: true,
-    get: function() {
-        return RoleService;
-    }
-});
-const _baseservice = require("./base.service");
-const _entities = require("../../entities");
-const _roledto = require("../interfaces/role.dto");
-const _lodash = require("lodash");
-const _runtimeexceptions = require("../../exceptions/runtime.exceptions");
-const _authorizationconstants = require("../../constants/authorization.constants");
-class RoleService extends (0, _baseservice.BaseService)(_entities.Role, _roledto.RoleDto) {
-    appDefaultRole;
-    appDefaultRoleNoLogin;
-    settingsStore;
-    constructor(typeormService, appDefaultRole, appDefaultRoleNoLogin, settingsStore){
-        super(typeormService), this.appDefaultRole = appDefaultRole, this.appDefaultRoleNoLogin = appDefaultRoleNoLogin, this.settingsStore = settingsStore;
-    }
-    _roles = [];
-    get roles() {
-        return this._roles;
-    }
-    async getAppDefaultRole() {
-        if (await this.settingsStore.getLoginRequired()) {
-            return this.appDefaultRole;
-        }
-        return this.appDefaultRoleNoLogin;
-    }
-    async getAppDefaultRoleNames() {
-        if (!this._roles?.length) {
-            await this.syncRoles();
-        }
-        return [
-            await this.getAppDefaultRole()
-        ];
-    }
-    toDto(role) {
-        return {
-            id: role.id,
-            name: role.name
-        };
-    }
-    getRolesPermissions(roleNames) {
-        let permissions = [];
-        if (!roleNames?.length) return [];
-        for (const roleName of roleNames){
-            const rolePermissions = this.getRolePermissions(roleName);
-            permissions = (0, _lodash.union)(permissions, rolePermissions);
-        }
-        return permissions;
-    }
-    authorizeRoles(requiredRoles, assignedRoles, subset) {
-        if (!requiredRoles?.length) return true;
-        let isAuthorized = !subset;
-        for (const requiredRole of requiredRoles){
-            const result = this.authorizeRole(requiredRole, assignedRoles);
-            isAuthorized = subset ? isAuthorized || result : isAuthorized && result;
-        }
-        return isAuthorized;
-    }
-    authorizeRole(requiredRole, assignedRoles) {
-        return assignedRoles.includes(requiredRole);
-    }
-    getManyRoles(roleIds) {
-        return roleIds.map((roleId)=>this.getRole(roleId));
-    }
-    getRole(roleId) {
-        const role = this._roles.find((r)=>r.id === roleId);
-        if (!role) throw new _runtimeexceptions.NotFoundException(`Role by provided id was not found`);
-        return role;
-    }
-    getRoleByName(roleName) {
-        const role = this._roles.find((r)=>r.name === roleName);
-        if (!role) throw new _runtimeexceptions.NotFoundException(`Role by provided name was not found`);
-        return role;
-    }
-    getRolePermissions(roleName) {
-        if (!roleName) {
-            return [];
-        }
-        return _authorizationconstants.ROLE_PERMS[roleName] ?? [];
-    }
-    roleIdsToRoleNames(roleIds) {
-        return roleIds.map((roleId)=>{
-            const role = this._roles.find((r)=>r.id === roleId);
-            return role?.name;
-        }).filter((name)=>name !== undefined);
-    }
-    async getSynchronizedRoleByName(roleName) {
-        if (!this._roles?.length) {
-            await this.syncRoles();
-        }
-        return this.getRoleByName(roleName);
-    }
-    async syncRoles() {
-        this._roles = [];
-        for (const roleName of Object.values(_authorizationconstants.ROLES)){
-            const storedRole = await this.repository.findOneBy({
-                name: roleName
-            });
-            if (storedRole) {
-                this._roles.push(storedRole);
-            } else {
-                const newRole = await this.create({
-                    name: roleName
-                });
-                this._roles.push(newRole);
-            }
-        }
-    }
-}
+import { NotFoundException } from "../../exceptions/runtime.exceptions.js";
+import { BaseService } from "./base.service.js";
+import { Role } from "../../entities/role.entity.js";
+import { ROLES, ROLE_PERMS } from "../../constants/authorization.constants.js";
+import "../../entities/index.js";
+import { RoleDto } from "../interfaces/role.dto.js";
+//#region src/services/orm/role.service.ts
+var RoleService = class extends BaseService(Role, RoleDto) {
+	constructor(typeormService, appDefaultRole, appDefaultRoleNoLogin, settingsStore) {
+		super(typeormService);
+		this.appDefaultRole = appDefaultRole;
+		this.appDefaultRoleNoLogin = appDefaultRoleNoLogin;
+		this.settingsStore = settingsStore;
+	}
+	_roles = [];
+	get roles() {
+		return this._roles;
+	}
+	async getAppDefaultRole() {
+		if (await this.settingsStore.getLoginRequired()) return this.appDefaultRole;
+		return this.appDefaultRoleNoLogin;
+	}
+	async getAppDefaultRoleNames() {
+		if (!this._roles?.length) await this.syncRoles();
+		return [await this.getAppDefaultRole()];
+	}
+	toDto(role) {
+		return {
+			id: role.id,
+			name: role.name
+		};
+	}
+	getRolesPermissions(roleNames) {
+		let permissions = [];
+		if (!roleNames?.length) return [];
+		for (const roleName of roleNames) {
+			const rolePermissions = this.getRolePermissions(roleName);
+			permissions = [...new Set([...permissions, ...rolePermissions])];
+		}
+		return permissions;
+	}
+	/**
+	* Checks if any of the required roles are in the assigned roles
+	* @param requiredRoles list of role names that would grant access
+	* @param assignedRoles user's assigned role names
+	* @param subset if true, any match grants access (OR); if false, all must match (AND)
+	*/
+	authorizeRoles(requiredRoles, assignedRoles, subset) {
+		if (!requiredRoles?.length) return true;
+		let isAuthorized = !subset;
+		for (const requiredRole of requiredRoles) {
+			const result = this.authorizeRole(requiredRole, assignedRoles);
+			isAuthorized = subset ? isAuthorized || result : isAuthorized && result;
+		}
+		return isAuthorized;
+	}
+	authorizeRole(requiredRole, assignedRoles) {
+		return assignedRoles.includes(requiredRole);
+	}
+	getManyRoles(roleIds) {
+		return roleIds.map((roleId) => this.getRole(roleId));
+	}
+	getRole(roleId) {
+		const role = this._roles.find((r) => r.id === roleId);
+		if (!role) throw new NotFoundException(`Role by provided id was not found`);
+		return role;
+	}
+	getRoleByName(roleName) {
+		const role = this._roles.find((r) => r.name === roleName);
+		if (!role) throw new NotFoundException(`Role by provided name was not found`);
+		return role;
+	}
+	getRolePermissions(roleName) {
+		if (!roleName) return [];
+		return ROLE_PERMS[roleName] ?? [];
+	}
+	roleIdsToRoleNames(roleIds) {
+		return roleIds.map((roleId) => {
+			return this._roles.find((r) => r.id === roleId)?.name;
+		}).filter((name) => name !== void 0);
+	}
+	async getSynchronizedRoleByName(roleName) {
+		if (!this._roles?.length) await this.syncRoles();
+		return this.getRoleByName(roleName);
+	}
+	async syncRoles() {
+		this._roles = [];
+		for (const roleName of Object.values(ROLES)) {
+			const storedRole = await this.repository.findOneBy({ name: roleName });
+			if (storedRole) this._roles.push(storedRole);
+			else {
+				const newRole = await this.create({ name: roleName });
+				this._roles.push(newRole);
+			}
+		}
+	}
+};
+//#endregion
+export { RoleService };
 
 //# sourceMappingURL=role.service.js.map

package/dist/services/orm/role.service.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/services/orm/role.service.ts"],"names":["RoleService","BaseService","Role","RoleDto","typeormService","appDefaultRole","appDefaultRoleNoLogin","settingsStore","_roles","roles","getAppDefaultRole","getLoginRequired","getAppDefaultRoleNames","length","syncRoles","toDto","role","id","name","getRolesPermissions","roleNames","permissions","roleName","rolePermissions","getRolePermissions","union","authorizeRoles","requiredRoles","assignedRoles","subset","isAuthorized","requiredRole","result","authorizeRole","includes","getManyRoles","roleIds","map","roleId","getRole","find","r","NotFoundException","getRoleByName","ROLE_PERMS","roleIdsToRoleNames","filter","undefined","getSynchronizedRoleByName","Object","values","ROLES","storedRole","repository","findOneBy","push","newRole","create"],"mappings":";;;;+BAUaA;;;eAAAA;;;6BAVe;0BAEP;yBAGG;wBACF;mCACY;wCAC0B;AAErD,MAAMA,oBAAoBC,IAAAA,wBAAW,EAACC,cAAI,EAAEC,gBAAO;;;;IACxD,YACEC,cAA8B,EAC9B,AAAiBC,cAAwB,EACzC,AAAiBC,qBAA+B,EAChD,AAAiBC,aAA4B,CAC7C;QACA,KAAK,CAACH,sBAJWC,iBAAAA,qBACAC,wBAAAA,4BACAC,gBAAAA;IAGnB;IAEQC,SAAiB,EAAE,CAAC;IAE5B,IAAIC,QAAQ;QACV,OAAO,IAAI,CAACD,MAAM;IACpB;IAEA,MAAME,oBAAuC;QAC3C,IAAI,MAAM,IAAI,CAACH,aAAa,CAACI,gBAAgB,IAAI;YAC/C,OAAO,IAAI,CAACN,cAAc;QAC5B;QACA,OAAO,IAAI,CAACC,qBAAqB;IACnC;IAEA,MAAMM,yBAA8C;QAClD,IAAI,CAAC,IAAI,CAACJ,MAAM,EAAEK,QAAQ;YACxB,MAAM,IAAI,CAACC,SAAS;QACtB;QAEA,OAAO;YAAC,MAAM,IAAI,CAACJ,iBAAiB;SAAG;IACzC;IAEAK,MAAMC,IAAU,EAAW;QACzB,OAAO;YACLC,IAAID,KAAKC,EAAE;YACXC,MAAMF,KAAKE,IAAI;QACjB;IACF;IAEAC,oBAAoBC,SAAqB,EAAoB;QAC3D,IAAIC,cAAgC,EAAE;QACtC,IAAI,CAACD,WAAWP,QAAQ,OAAO,EAAE;QAEjC,KAAK,MAAMS,YAAYF,UAAW;YAChC,MAAMG,kBAAkB,IAAI,CAACC,kBAAkB,CAACF;YAChDD,cAAcI,IAAAA,aAAK,EAACJ,aAAaE;QACnC;QAEA,OAAOF;IACT;IAQAK,eAAeC,aAAyB,EAAEC,aAAyB,EAAEC,MAAe,EAAW;QAC7F,IAAI,CAACF,eAAed,QAAQ,OAAO;QAEnC,IAAIiB,eAAe,CAACD;QACpB,KAAK,MAAME,gBAAgBJ,cAAe;YACxC,MAAMK,SAAS,IAAI,CAACC,aAAa,CAACF,cAAcH;YAChDE,eAAeD,SAASC,gBAAgBE,SAASF,gBAAgBE;QACnE;QAEA,OAAOF;IACT;IAEAG,cAAcF,YAAsB,EAAEH,aAAyB,EAAW;QACxE,OAAOA,cAAcM,QAAQ,CAACH;IAChC;IAEAI,aAAaC,OAAiB,EAAU;QACtC,OAAOA,QAAQC,GAAG,CAAC,CAACC,SAAW,IAAI,CAACC,OAAO,CAACD;IAC9C;IAEAC,QAAQD,MAAc,EAAQ;QAC5B,MAAMtB,OAAO,IAAI,CAACR,MAAM,CAACgC,IAAI,CAAC,CAACC,IAAMA,EAAExB,EAAE,KAAKqB;QAC9C,IAAI,CAACtB,MAAM,MAAM,IAAI0B,oCAAiB,CAAC,CAAC,iCAAiC,CAAC;QAE1E,OAAO1B;IACT;IAEA2B,cAAcrB,QAAkB,EAAQ;QACtC,MAAMN,OAAO,IAAI,CAACR,MAAM,CAACgC,IAAI,CAAC,CAACC,IAAMA,EAAEvB,IAAI,KAAKI;QAChD,IAAI,CAACN,MAAM,MAAM,IAAI0B,oCAAiB,CAAC,CAAC,mCAAmC,CAAC;QAE5E,OAAO1B;IACT;IAEAQ,mBAAmBF,QAAkB,EAAoB;QACvD,IAAI,CAACA,UAAU;YACb,OAAO,EAAE;QACX;QACA,OAAOsB,kCAAU,CAACtB,SAAS,IAAI,EAAE;IACnC;IAEAuB,mBAAmBT,OAAiB,EAAc;QAChD,OAAOA,QACJC,GAAG,CAAC,CAACC;YACJ,MAAMtB,OAAO,IAAI,CAACR,MAAM,CAACgC,IAAI,CAAC,CAACC,IAAMA,EAAExB,EAAE,KAAKqB;YAC9C,OAAOtB,MAAME;QACf,GACC4B,MAAM,CAAC,CAAC5B,OAA2BA,SAAS6B;IACjD;IAEA,MAAMC,0BAA0B1B,QAAkB,EAAiB;QACjE,IAAI,CAAC,IAAI,CAACd,MAAM,EAAEK,QAAQ;YACxB,MAAM,IAAI,CAACC,SAAS;QACtB;QAEA,OAAO,IAAI,CAAC6B,aAAa,CAACrB;IAC5B;IAEA,MAAMR,YAA2B;QAC/B,IAAI,CAACN,MAAM,GAAG,EAAE;QAChB,KAAK,MAAMc,YAAY2B,OAAOC,MAAM,CAACC,6BAAK,EAAG;YAC3C,MAAMC,aAAa,MAAM,IAAI,CAACC,UAAU,CAACC,SAAS,CAAC;gBAAEpC,MAAMI;YAAS;YACpE,IAAI8B,YAAY;gBACd,IAAI,CAAC5C,MAAM,CAAC+C,IAAI,CAACH;YACnB,OAAO;gBACL,MAAMI,UAAU,MAAM,IAAI,CAACC,MAAM,CAAC;oBAChCvC,MAAMI;gBACR;gBACA,IAAI,CAACd,MAAM,CAAC+C,IAAI,CAACC;YACnB;QACF;IACF;AACF"}
+{"version":3,"file":"role.service.js","names":[],"sources":["../../../src/services/orm/role.service.ts"],"sourcesContent":["import { BaseService } from \"@/services/orm/base.service\";\nimport type { IRoleService } from \"@/services/interfaces/role-service.interface\";\nimport { Role } from \"@/entities\";\nimport { SettingsStore } from \"@/state/settings.store\";\nimport { TypeormService } from \"@/services/typeorm/typeorm.service\";\nimport { RoleDto } from \"@/services/interfaces/role.dto\";\nimport { NotFoundException } from \"@/exceptions/runtime.exceptions\";\nimport { ROLE_PERMS, ROLES, type PermissionName, type RoleName } from \"@/constants/authorization.constants\";\n\nexport class RoleService extends BaseService(Role, RoleDto) implements IRoleService {\n  constructor(\n    typeormService: TypeormService,\n    private readonly appDefaultRole: RoleName,\n    private readonly appDefaultRoleNoLogin: RoleName,\n    private readonly settingsStore: SettingsStore,\n  ) {\n    super(typeormService);\n  }\n\n  private _roles: Role[] = [];\n\n  get roles() {\n    return this._roles;\n  }\n\n  async getAppDefaultRole(): Promise<RoleName> {\n    if (await this.settingsStore.getLoginRequired()) {\n      return this.appDefaultRole;\n    }\n    return this.appDefaultRoleNoLogin;\n  }\n\n  async getAppDefaultRoleNames(): Promise<RoleName[]> {\n    if (!this._roles?.length) {\n      await this.syncRoles();\n    }\n\n    return [await this.getAppDefaultRole()];\n  }\n\n  toDto(role: Role): RoleDto {\n    return {\n      id: role.id,\n      name: role.name as RoleName,\n    };\n  }\n\n  getRolesPermissions(roleNames: RoleName[]): PermissionName[] {\n    let permissions: PermissionName[] = [];\n    if (!roleNames?.length) return [];\n\n    for (const roleName of roleNames) {\n      const rolePermissions = this.getRolePermissions(roleName);\n      permissions = [...new Set([...permissions, ...rolePermissions])];\n    }\n\n    return permissions;\n  }\n\n  /**\n   * Checks if any of the required roles are in the assigned roles\n   * @param requiredRoles list of role names that would grant access\n   * @param assignedRoles user's assigned role names\n   * @param subset if true, any match grants access (OR); if false, all must match (AND)\n   */\n  authorizeRoles(requiredRoles: RoleName[], assignedRoles: RoleName[], subset: boolean): boolean {\n    if (!requiredRoles?.length) return true;\n\n    let isAuthorized = !subset; // Start with false for OR, true for AND\n    for (const requiredRole of requiredRoles) {\n      const result = this.authorizeRole(requiredRole, assignedRoles);\n      isAuthorized = subset ? isAuthorized || result : isAuthorized && result;\n    }\n\n    return isAuthorized;\n  }\n\n  authorizeRole(requiredRole: RoleName, assignedRoles: RoleName[]): boolean {\n    return assignedRoles.includes(requiredRole);\n  }\n\n  getManyRoles(roleIds: number[]): Role[] {\n    return roleIds.map((roleId) => this.getRole(roleId));\n  }\n\n  getRole(roleId: number): Role {\n    const role = this._roles.find((r) => r.id === roleId);\n    if (!role) throw new NotFoundException(`Role by provided id was not found`);\n\n    return role;\n  }\n\n  getRoleByName(roleName: RoleName): Role {\n    const role = this._roles.find((r) => r.name === roleName);\n    if (!role) throw new NotFoundException(`Role by provided name was not found`);\n\n    return role;\n  }\n\n  getRolePermissions(roleName: RoleName): PermissionName[] {\n    if (!roleName) {\n      return [];\n    }\n    return ROLE_PERMS[roleName] ?? [];\n  }\n\n  roleIdsToRoleNames(roleIds: number[]): RoleName[] {\n    return roleIds\n      .map((roleId) => {\n        const role = this._roles.find((r) => r.id === roleId);\n        return role?.name as RoleName | undefined;\n      })\n      .filter((name): name is RoleName => name !== undefined);\n  }\n\n  async getSynchronizedRoleByName(roleName: RoleName): Promise<Role> {\n    if (!this._roles?.length) {\n      await this.syncRoles();\n    }\n\n    return this.getRoleByName(roleName);\n  }\n\n  async syncRoles(): Promise<void> {\n    this._roles = [];\n    for (const roleName of Object.values(ROLES)) {\n      const storedRole = await this.repository.findOneBy({ name: roleName });\n      if (storedRole) {\n        this._roles.push(storedRole);\n      } else {\n        const newRole = await this.create({\n          name: roleName,\n        });\n        this._roles.push(newRole);\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;AASA,IAAa,cAAb,cAAiC,YAAY,MAAM,QAAQ,CAAyB;CAClF,YACE,gBACA,gBACA,uBACA,eACA;AACA,QAAM,eAAe;AAJJ,OAAA,iBAAA;AACA,OAAA,wBAAA;AACA,OAAA,gBAAA;;CAKnB,SAAyB,EAAE;CAE3B,IAAI,QAAQ;AACV,SAAO,KAAK;;CAGd,MAAM,oBAAuC;AAC3C,MAAI,MAAM,KAAK,cAAc,kBAAkB,CAC7C,QAAO,KAAK;AAEd,SAAO,KAAK;;CAGd,MAAM,yBAA8C;AAClD,MAAI,CAAC,KAAK,QAAQ,OAChB,OAAM,KAAK,WAAW;AAGxB,SAAO,CAAC,MAAM,KAAK,mBAAmB,CAAC;;CAGzC,MAAM,MAAqB;AACzB,SAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACZ;;CAGH,oBAAoB,WAAyC;EAC3D,IAAI,cAAgC,EAAE;AACtC,MAAI,CAAC,WAAW,OAAQ,QAAO,EAAE;AAEjC,OAAK,MAAM,YAAY,WAAW;GAChC,MAAM,kBAAkB,KAAK,mBAAmB,SAAS;AACzD,iBAAc,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,aAAa,GAAG,gBAAgB,CAAC,CAAC;;AAGlE,SAAO;;;;;;;;CAST,eAAe,eAA2B,eAA2B,QAA0B;AAC7F,MAAI,CAAC,eAAe,OAAQ,QAAO;EAEnC,IAAI,eAAe,CAAC;AACpB,OAAK,MAAM,gBAAgB,eAAe;GACxC,MAAM,SAAS,KAAK,cAAc,cAAc,cAAc;AAC9D,kBAAe,SAAS,gBAAgB,SAAS,gBAAgB;;AAGnE,SAAO;;CAGT,cAAc,cAAwB,eAAoC;AACxE,SAAO,cAAc,SAAS,aAAa;;CAG7C,aAAa,SAA2B;AACtC,SAAO,QAAQ,KAAK,WAAW,KAAK,QAAQ,OAAO,CAAC;;CAGtD,QAAQ,QAAsB;EAC5B,MAAM,OAAO,KAAK,OAAO,MAAM,MAAM,EAAE,OAAO,OAAO;AACrD,MAAI,CAAC,KAAM,OAAM,IAAI,kBAAkB,oCAAoC;AAE3E,SAAO;;CAGT,cAAc,UAA0B;EACtC,MAAM,OAAO,KAAK,OAAO,MAAM,MAAM,EAAE,SAAS,SAAS;AACzD,MAAI,CAAC,KAAM,OAAM,IAAI,kBAAkB,sCAAsC;AAE7E,SAAO;;CAGT,mBAAmB,UAAsC;AACvD,MAAI,CAAC,SACH,QAAO,EAAE;AAEX,SAAO,WAAW,aAAa,EAAE;;CAGnC,mBAAmB,SAA+B;AAChD,SAAO,QACJ,KAAK,WAAW;AAEf,UADa,KAAK,OAAO,MAAM,MAAM,EAAE,OAAO,OACnC,EAAE;IACb,CACD,QAAQ,SAA2B,SAAS,KAAA,EAAU;;CAG3D,MAAM,0BAA0B,UAAmC;AACjE,MAAI,CAAC,KAAK,QAAQ,OAChB,OAAM,KAAK,WAAW;AAGxB,SAAO,KAAK,cAAc,SAAS;;CAGrC,MAAM,YAA2B;AAC/B,OAAK,SAAS,EAAE;AAChB,OAAK,MAAM,YAAY,OAAO,OAAO,MAAM,EAAE;GAC3C,MAAM,aAAa,MAAM,KAAK,WAAW,UAAU,EAAE,MAAM,UAAU,CAAC;AACtE,OAAI,WACF,MAAK,OAAO,KAAK,WAAW;QACvB;IACL,MAAM,UAAU,MAAM,KAAK,OAAO,EAChC,MAAM,UACP,CAAC;AACF,SAAK,OAAO,KAAK,QAAQ"}