@flowerforce/flowerbase 1.0.2 → 1.0.3-beta.0

package/dist/auth/controller.js

@@ -65,9 +65,9 @@ function authController(app) {
                 if (!auth_user) {
                     throw new Error(`User with ID ${req.user.sub} not found`);
                 }
-                const user = yield db
-                    .collection(userCollection)
-                    .findOne({ [constants_1.AUTH_CONFIG.user_id_field]: req.user.sub });
+                const user = userCollection && constants_1.AUTH_CONFIG.user_id_field
+                    ? (yield db.collection(userCollection).findOne({ [constants_1.AUTH_CONFIG.user_id_field]: req.user.sub }))
+                    : {};
                 res.status(201);
                 return {
                     access_token: this.createAccessToken(Object.assign(Object.assign({}, auth_user), { user_data: user }))

package/dist/auth/providers/local-userpass/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../src/auth/providers/local-userpass/controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAsBzC;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,eAAe,iBA6MjE"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../src/auth/providers/local-userpass/controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAuBzC;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,eAAe,iBAiPjE"}

package/dist/auth/providers/local-userpass/controller.js

@@ -15,6 +15,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.localUserPassController = localUserPassController;
 const mail_1 = __importDefault(require("@sendgrid/mail"));
 const constants_1 = require("../../../constants");
+const services_1 = require("../../../services");
 const state_1 = require("../../../state");
 const context_1 = require("../../../utils/context");
 const crypto_1 = require("../../../utils/crypto");
@@ -26,7 +27,8 @@ const utils_1 = require("../../utils");
  */
 function localUserPassController(app) {
     return __awaiter(this, void 0, void 0, function* () {
-        const { authCollection } = constants_1.AUTH_CONFIG;
+        const functionsList = state_1.StateManager.select('functions');
+        const { authCollection, userCollection, user_id_field, on_user_creation_function_name } = constants_1.AUTH_CONFIG;
         const db = app.mongo.client.db(constants_1.DB_NAME);
         /**
          * Endpoint for user registration.
@@ -55,7 +57,7 @@ function localUserPassController(app) {
                     email: email,
                     password: hashedPassword,
                     custom_data: {
-                    // todo li faremo arrivare
+                    // TODO da aggiungere in fase di registrazione utente, funzionalità utile che realm non permetteva
                     }
                 });
                 yield (db === null || db === void 0 ? void 0 : db.collection(authCollection).updateOne({
@@ -72,6 +74,33 @@ function localUserPassController(app) {
                         ]
                     }
                 }));
+                if (result && on_user_creation_function_name && functionsList[on_user_creation_function_name]) {
+                    const user = yield db.collection(authCollection).findOne({ _id: result === null || result === void 0 ? void 0 : result.insertedId });
+                    user === null || user === void 0 ? true : delete user.password;
+                    try {
+                        const response = yield (0, context_1.GenerateContext)({
+                            args: [{
+                                    operationType: 'CREATE',
+                                    providers: 'local-userpass',
+                                    user,
+                                    time: new Date().getTime()
+                                }],
+                            app,
+                            rules: {},
+                            user: undefined,
+                            currentFunction: functionsList[on_user_creation_function_name],
+                            functionsList,
+                            services: services_1.services
+                        });
+                        console.log("🚀 ~ response:", response);
+                    }
+                    catch (error) {
+                        console.log("🚀 ~ error:", error);
+                    }
+                }
+                else {
+                    console.error('Error function on_user_creation_function_name: ', on_user_creation_function_name);
+                }
                 res.status(201);
                 return {
                     userId: result === null || result === void 0 ? void 0 : result.insertedId
@@ -99,9 +128,13 @@ function localUserPassController(app) {
                 if (!passwordMatches) {
                     throw new Error(utils_1.AUTH_ERRORS.INVALID_CREDENTIALS);
                 }
+                const user = user_id_field && userCollection
+                    ? (yield db.collection(userCollection).findOne({ [user_id_field]: storedUser._id.toString() }))
+                    : {};
+                const userWithCustomData = Object.assign(Object.assign({}, storedUser), { user_data: user });
                 return {
-                    access_token: this.createAccessToken(storedUser),
-                    refresh_token: this.createRefreshToken(storedUser),
+                    access_token: this.createAccessToken(userWithCustomData),
+                    refresh_token: this.createRefreshToken(userWithCustomData),
                     device_id: '',
                     user_id: storedUser._id.toString()
                 };

package/dist/auth/utils.d.ts

@@ -105,6 +105,7 @@ export interface CustomUserDataConfig {
     database_name: string;
     collection_name: string;
     user_id_field: string;
+    on_user_creation_function_name: string;
 }
 export declare const PROVIDER_TYPE = "local-userpass";
 /**

package/dist/auth/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/auth/utils.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,YAAY;;;;;;;;;;;;;CASxB,CAAA;AAED,eAAO,MAAM,YAAY;;;;;;;;;;;;;CASxB,CAAA;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;CAUhC,CAAA;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;CAS/B,CAAA;AAED,oBAAY,cAAc;IACxB,KAAK,WAAW;IAChB,YAAY,cAAc;IAC1B,OAAO,aAAa;IACpB,OAAO,aAAa;IACpB,KAAK,gBAAgB;IACrB,aAAa,WAAW;IACxB,UAAU,sBAAsB;CACjC;AAED,oBAAY,WAAW;IACrB,mBAAmB,wBAAwB;IAC3C,aAAa,mCAAmC;IAChD,oBAAoB,sCAAsC;CAC3D;AAED,MAAM,WAAW,UAAU;IACzB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,aAAa,CAAA;CAChC;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;CAClB;AACD,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,MAAM;IACrB,WAAW,EAAE,OAAO,CAAA;IACpB,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,OAAO,CAAA;IAChC,gBAAgB,EAAE,OAAO,CAAA;IACzB,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,eAAO,MAAM,aAAa,mBAAmB,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,UAGjC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAO,oBAGrC,CAAA;AAED,eAAO,MAAM,aAAa,GACxB,qBAAqB,MAAM,EAC3B,OAAO,MAAM,EACb,SAAS,MAAM;;;;;CA4ChB,CAAA"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/auth/utils.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,YAAY;;;;;;;;;;;;;CASxB,CAAA;AAED,eAAO,MAAM,YAAY;;;;;;;;;;;;;CASxB,CAAA;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;CAUhC,CAAA;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;CAS/B,CAAA;AAED,oBAAY,cAAc;IACxB,KAAK,WAAW;IAChB,YAAY,cAAc;IAC1B,OAAO,aAAa;IACpB,OAAO,aAAa;IACpB,KAAK,gBAAgB;IACrB,aAAa,WAAW;IACxB,UAAU,sBAAsB;CACjC;AAED,oBAAY,WAAW;IACrB,mBAAmB,wBAAwB;IAC3C,aAAa,mCAAmC;IAChD,oBAAoB,sCAAsC;CAC3D;AAED,MAAM,WAAW,UAAU;IACzB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,aAAa,CAAA;CAChC;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;CAClB;AACD,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,MAAM;IACrB,WAAW,EAAE,OAAO,CAAA;IACpB,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,OAAO,CAAA;IAChC,gBAAgB,EAAE,OAAO,CAAA;IACzB,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,8BAA8B,EAAE,MAAM,CAAA;CACvC;AAED,eAAO,MAAM,aAAa,mBAAmB,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,UAGjC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAO,oBAGrC,CAAA;AAED,eAAO,MAAM,aAAa,GACxB,qBAAqB,MAAM,EAC3B,OAAO,MAAM,EACb,SAAS,MAAM;;;;;CA4ChB,CAAA"}

package/dist/constants.d.ts

@@ -16,5 +16,6 @@ export declare const AUTH_CONFIG: {
     resetPasswordCollection: string;
     resetPasswordConfig: import("./auth/utils").Config;
     user_id_field: string;
+    on_user_creation_function_name: string;
 };
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,cAAc;;;;;;;;CAQ1B,CAAA;AACD,eAAO,MAAM,WAAW,QAA8C,CAAA;AACtE,eAAO,MAAM,YAAY,QAA8B,CAAA;AACvD,eAAO,MAAM,OAAO,QAAgB,CAAA;AACpC,eAAO,MAAM,WAAW;;;;;;CAMvB,CAAA"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,cAAc;;;;;;;;CAQ1B,CAAA;AACD,eAAO,MAAM,WAAW,QAA8C,CAAA;AACtE,eAAO,MAAM,YAAY,QAA8B,CAAA;AACvD,eAAO,MAAM,OAAO,QAAgB,CAAA;AACpC,eAAO,MAAM,WAAW;;;;;;;CAOvB,CAAA"}

package/dist/constants.js

@@ -13,7 +13,7 @@ var __rest = (this && this.__rest) || function (s, e) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AUTH_CONFIG = exports.DB_NAME = exports.HTTPS_SCHEMA = exports.API_VERSION = exports.DEFAULT_CONFIG = void 0;
 const utils_1 = require("./auth/utils");
-const { database_name, collection_name = 'users', user_id_field = 'id' } = (0, utils_1.loadCustomUserData)();
+const { database_name, collection_name = 'users', user_id_field = 'id', on_user_creation_function_name } = (0, utils_1.loadCustomUserData)();
 const _a = (0, utils_1.loadAuthConfig)(), { auth_collection = 'auth_users' } = _a, configuration = __rest(_a, ["auth_collection"]);
 exports.DEFAULT_CONFIG = {
     PORT: Number(process.env.PORT) || 3000,
@@ -32,5 +32,6 @@ exports.AUTH_CONFIG = {
     userCollection: collection_name,
     resetPasswordCollection: 'reset-password-requests',
     resetPasswordConfig: configuration['local-userpass'].config,
-    user_id_field
+    user_id_field,
+    on_user_creation_function_name
 };

package/dist/features/endpoints/index.d.ts

@@ -6,5 +6,5 @@ import { GenerateEndpointsParams } from './interface';
  * @param functionsList -> the list of all functions
  * @param endpointsList -> the list of all endpoints
  */
-export declare const generateEndpoints: ({ app, functionsList, endpointsList }: GenerateEndpointsParams) => Promise<void>;
+export declare const generateEndpoints: ({ app, functionsList, endpointsList, rulesList }: GenerateEndpointsParams) => Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/features/endpoints/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/features/endpoints/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAGrD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAU,uCAIrC,uBAAuB,kBAYzB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/features/endpoints/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAGrD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAU,kDAKrC,uBAAuB,kBAYzB,CAAA"}

package/dist/features/endpoints/index.js

@@ -18,13 +18,13 @@ const utils_1 = require("./utils");
  * @param functionsList -> the list of all functions
  * @param endpointsList -> the list of all endpoints
  */
-const generateEndpoints = (_a) => __awaiter(void 0, [_a], void 0, function* ({ app, functionsList, endpointsList }) {
+const generateEndpoints = (_a) => __awaiter(void 0, [_a], void 0, function* ({ app, functionsList, endpointsList, rulesList }) {
     endpointsList.forEach(({ http_method, route, disabled, function_name }) => {
         const currentFunction = functionsList[function_name];
         if (disabled || !currentFunction)
             return;
-        const handler = (0, utils_1.generateHandler)({ app, currentFunction, functionsList });
-        const currentMethod = (0, utils_1.getMethodsConfig)(app, handler, `/app/:appId/endpoint/${route}`)[http_method];
+        const handler = (0, utils_1.generateHandler)({ app, rulesList, currentFunction, functionsList, http_method });
+        const currentMethod = (0, utils_1.getMethodsConfig)(app, handler, `/app/:appId/endpoint/${route.replace(/^\//, "")}`)[http_method];
         currentMethod();
     });
 });

package/dist/features/endpoints/interface.d.ts

@@ -1,14 +1,18 @@
 import { FastifyInstance } from 'fastify';
 import { Function, Functions } from '../functions/interface';
+import { Rules } from '../rules/interface';
 export type GenerateEndpointsParams = {
     app: FastifyInstance;
     functionsList: Functions;
     endpointsList: Endpoints;
+    rulesList: Rules;
 };
 export type GenerateHandlerParams = {
     app: FastifyInstance;
     currentFunction: Function;
     functionsList: Functions;
+    http_method: string;
+    rulesList: Rules;
 };
 type HTTP_METHOD<T> = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | T;
 export type Endpoint<T = 'ALL'> = {

package/dist/features/endpoints/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/features/endpoints/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAE5D,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,EAAE,eAAe,CAAA;IACpB,aAAa,EAAE,SAAS,CAAA;IACxB,aAAa,EAAE,SAAS,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,eAAe,CAAA;IACpB,eAAe,EAAE,QAAQ,CAAA;IACzB,aAAa,EAAE,SAAS,CAAA;CACzB,CAAA;AAED,KAAK,WAAW,CAAC,CAAC,IAAI,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAA;AAErE,MAAM,MAAM,QAAQ,CAAC,CAAC,GAAG,KAAK,IAAI;IAChC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,OAAO,CAAA;IACvB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AACD,MAAM,MAAM,SAAS,CAAC,CAAC,GAAG,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/features/endpoints/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,EAAE,eAAe,CAAA;IACpB,aAAa,EAAE,SAAS,CAAA;IACxB,aAAa,EAAE,SAAS,CAAA;IACxB,SAAS,EAAE,KAAK,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,eAAe,CAAA;IACpB,eAAe,EAAE,QAAQ,CAAA;IACzB,aAAa,EAAE,SAAS,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,KAAK,CAAA;CACjB,CAAA;AAED,KAAK,WAAW,CAAC,CAAC,IAAI,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAA;AAErE,MAAM,MAAM,QAAQ,CAAC,CAAC,GAAG,KAAK,IAAI;IAChC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,OAAO,CAAA;IACvB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AACD,MAAM,MAAM,SAAS,CAAC,CAAC,GAAG,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA"}

package/dist/features/endpoints/utils.d.ts

@@ -27,5 +27,5 @@ export declare const getMethodsConfig: (app: FastifyInstance, handler: ReturnTyp
  * @param currentFunction -> the name of the function that should be called for that endpoint
  * @param functionsList -> the list of all functions
  */
-export declare const generateHandler: ({ app, currentFunction, functionsList }: GenerateHandlerParams) => (req: FastifyRequest, res: FastifyReply) => Promise<{}>;
+export declare const generateHandler: ({ app, currentFunction, functionsList, rulesList }: GenerateHandlerParams) => (req: FastifyRequest, res: FastifyReply) => Promise<{}>;
 //# sourceMappingURL=utils.d.ts.map

package/dist/features/endpoints/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/features/endpoints/utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAKvE,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAE9D;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAU,gBAAuB,KAAG,OAAO,CAAC,SAAS,CAS9E,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAC3B,KAAK,eAAe,EACpB,SAAS,UAAU,CAAC,OAAO,eAAe,CAAC,EAC3C,UAAU,MAAM;;;;;;;CAQhB,CAAA;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,yCAI7B,qBAAqB,MACR,KAAK,cAAc,EAAE,KAAK,YAAY,gBAiBrD,CAAA"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/features/endpoints/utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAKvE,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAE9D;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAU,gBAAuB,KAAG,OAAO,CAAC,SAAS,CAmB9E,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAC3B,KAAK,eAAe,EACpB,SAAS,UAAU,CAAC,OAAO,eAAe,CAAC,EAC3C,UAAU,MAAM;;;;;;;CAQhB,CAAA;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,oDAK7B,qBAAqB,MACR,KAAK,cAAc,EAAE,KAAK,YAAY,gBAuBrD,CAAA"}

package/dist/features/endpoints/utils.js

@@ -33,13 +33,20 @@ const context_1 = require("../../utils/context");
  * @testable
  */
 const loadEndpoints = (...args_1) => __awaiter(void 0, [...args_1], void 0, function* (rootDir = process.cwd()) {
-    const endpointsDir = 'http_endpoints';
-    const endPointsFile = node_path_1.default.join(rootDir, endpointsDir, 'config.json');
-    const config = JSON.parse(fs_1.default.readFileSync(endPointsFile, 'utf-8'));
-    return config.map((_a) => {
-        var { http_method } = _a, endpoint = __rest(_a, ["http_method"]);
-        return (Object.assign({ http_method: http_method === '*' ? 'ALL' : http_method }, endpoint));
+    const endpoints = [];
+    const folders = ['https_endpoints', 'http_endpoints'];
+    folders.forEach((endpointsDir) => {
+        const endPointsFile = node_path_1.default.join(rootDir, endpointsDir, 'config.json');
+        if (fs_1.default.existsSync(endPointsFile)) {
+            const config = JSON.parse(fs_1.default.readFileSync(endPointsFile, 'utf-8'));
+            const configRemap = config.map((_a) => {
+                var { http_method } = _a, endpoint = __rest(_a, ["http_method"]);
+                return (Object.assign({ http_method: http_method === '*' ? 'ALL' : http_method }, endpoint));
+            });
+            endpoints.push(...configRemap);
+        }
     });
+    return endpoints;
 });
 exports.loadEndpoints = loadEndpoints;
 /**
@@ -65,19 +72,20 @@ exports.getMethodsConfig = getMethodsConfig;
  * @param currentFunction -> the name of the function that should be called for that endpoint
  * @param functionsList -> the list of all functions
  */
-const generateHandler = ({ app, currentFunction, functionsList }) => {
+const generateHandler = ({ app, currentFunction, functionsList, rulesList }) => {
     return (req, res) => __awaiter(void 0, void 0, void 0, function* () {
         try {
+            // TODO gestire tramite http_method le args da passare
             const response = yield (0, context_1.GenerateContext)({
-                args: [req],
+                args: [], // TODO passare solo body e query ???
                 app,
-                rules: {}, //TODO -> check rules
+                rules: rulesList,
                 user: req.user,
                 currentFunction,
                 functionsList,
                 services: services_1.services
             });
-            res.send(response);
+            return res.send(response);
         }
         catch (e) {
             console.log(e);

package/dist/features/functions/utils.d.ts

@@ -15,8 +15,8 @@ export declare const executeQuery: ({ currentMethod, query, update, document, do
     findOne: () => Promise<unknown>;
     deleteOne: () => Promise<unknown>;
     insertOne: () => Promise<import("mongodb/mongodb").InsertOneResult<import("bson").Document>>;
-    updateOne: () => Promise<unknown> | import("mongodb/mongodb").FindCursor<any> | import("mongodb/mongodb").ChangeStream<import("bson").Document, import("bson").Document> | import("mongodb/mongodb").AggregationCursor<import("bson").Document>;
-    aggregate: () => import("mongodb/mongodb").AggregationCursor<import("bson").Document>;
+    updateOne: () => Promise<unknown> | import("mongodb/mongodb").FindCursor<any> | import("mongodb/mongodb").ChangeStream<import("bson").Document, import("bson").Document>;
+    aggregate: () => Promise<import("bson").Document[]>;
     insertMany: () => Promise<import("mongodb/mongodb").InsertManyResult<import("bson").Document>>;
     updateMany: () => Promise<import("mongodb/mongodb").UpdateResult<import("bson").Document>>;
 }>;

package/dist/features/functions/utils.js

@@ -67,7 +67,9 @@ const executeQuery = (_a) => __awaiter(void 0, [_a], void 0, function* ({ curren
         deleteOne: () => currentMethod(bson_1.EJSON.deserialize(query)),
         insertOne: () => currentMethod(bson_1.EJSON.deserialize(document)),
         updateOne: () => currentMethod(bson_1.EJSON.deserialize(query), bson_1.EJSON.deserialize(update)),
-        aggregate: () => currentMethod(bson_1.EJSON.deserialize(query)),
+        aggregate: () => __awaiter(void 0, void 0, void 0, function* () {
+            return (yield currentMethod(bson_1.EJSON.deserialize(query))).toArray();
+        }),
         insertMany: () => currentMethod(bson_1.EJSON.deserialize(documents)),
         updateMany: () => currentMethod(bson_1.EJSON.deserialize(query), bson_1.EJSON.deserialize(update))
     };

package/dist/features/rules/interface.d.ts

@@ -1,8 +1,11 @@
+import { Document } from 'mongodb';
 export interface Filter {
     name: string;
     query: Record<string, unknown>;
     apply_when: Record<string, unknown>;
+    projection?: Projection;
 }
+export type Projection = Record<string, 0 | 1>;
 export interface Role {
     name: string;
     apply_when: Record<string, unknown>;
@@ -19,4 +22,43 @@ export interface RulesConfig {
     roles: Role[];
 }
 export type Rules = Record<string, RulesConfig>;
+export type AggregationPipelineStage = {
+    $match: Record<string, unknown>;
+} | {
+    $project: Record<string, unknown>;
+} | {
+    $sort: Record<string, unknown>;
+} | {
+    $limit: number;
+} | {
+    $skip: number;
+} | {
+    $group: Record<string, unknown>;
+} | {
+    $lookup: LookupStage;
+} | {
+    $facet: Record<string, AggregationPipelineStage[]>;
+} | {
+    $unionWith: UnionWithStage;
+};
+export interface LookupStage {
+    from: string;
+    localField?: string;
+    foreignField?: string;
+    as: string;
+    let?: Record<string, unknown>;
+    pipeline?: AggregationPipelineStage[];
+}
+export type AggregationPipeline = Document[];
+export type UnionWithStage = string | UnionWithNestedStage;
+type UnionWithNestedStage = {
+    coll: string;
+    pipeline: AggregationPipelineStage[];
+};
+export declare enum STAGES_TO_SEARCH {
+    LOOKUP = "$lookup",
+    UNION_WITH = "$unionWith",
+    FACET = "$facet"
+}
+export {};
 //# sourceMappingURL=interface.d.ts.map

package/dist/features/rules/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/features/rules/interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,IAAI,EAAE,CAAA;CACd;AAED,MAAM,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/features/rules/interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB;AACD,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;AAC9C,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,IAAI,EAAE,CAAA;CAEd;AAED,MAAM,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAE/C,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACnC;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACnC;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAA;CAAE,GACtD;IAAE,UAAU,EAAE,cAAc,CAAA;CAAE,CAAA;AAElC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACvC;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,EAAE,CAAA;AAE5C,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,oBAAoB,CAAA;AAC1D,KAAK,oBAAoB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,wBAAwB,EAAE,CAAA;CAAE,CAAA;AAElF,oBAAY,gBAAgB;IAC1B,MAAM,YAAY;IAClB,UAAU,eAAe;IACzB,KAAK,WAAW;CACjB"}

package/dist/features/rules/interface.js

@@ -1,2 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.STAGES_TO_SEARCH = void 0;
+var STAGES_TO_SEARCH;
+(function (STAGES_TO_SEARCH) {
+    STAGES_TO_SEARCH["LOOKUP"] = "$lookup";
+    STAGES_TO_SEARCH["UNION_WITH"] = "$unionWith";
+    STAGES_TO_SEARCH["FACET"] = "$facet";
+})(STAGES_TO_SEARCH || (exports.STAGES_TO_SEARCH = STAGES_TO_SEARCH = {}));

package/dist/features/rules/utils.js

@@ -29,3 +29,44 @@ const loadRules = (...args_1) => __awaiter(void 0, [...args_1], void 0, function
     return rulesByCollection;
 });
 exports.loadRules = loadRules;
+// export const getNestedPipelines = (pipeline: AggregationPipelineStage[]) => {
+//   return pipeline.reduce(
+//     (acc, stage) => {
+//       const [stageKey] = Object.keys(stage);
+//       const stageValue = stage[stageKey as keyof typeof stage];
+//       const pipeline = stageValue?.["pipeline"]
+//       if (stageKey === '$lookup') {
+//         acc.pipelines.push(stageValue);
+//         if (pipeline) {
+//           const { collections, pipelines } = getNestedPipelines(pipeline);
+//           acc.collections.push(...new Set([(stageValue as LookupStage).from, ...collections]));
+//           acc.pipelines.push(...pipelines);
+//         }
+//       }
+//       if (stageKey === '$facet') {
+//         for (const subPipeline of Object.values(stageValue)) {
+//           const { collections, pipelines } = getNestedPipelines(subPipeline as AggregationPipelineStage[]);
+//           acc.collections.push(...collections);
+//           acc.pipelines.push(...pipelines);
+//         }
+//       }
+//       if (
+//         stageKey === '$unionWith' &&
+//         typeof stageValue === 'object' &&
+//         pipeline
+//       ) {
+//         const { collections, pipelines } = getNestedPipelines(pipeline);
+//         acc.collections.push(...new Set([(stageValue as UnionWithStage).coll, ...collections]));
+//         acc.pipelines.push(...pipelines);
+//       }
+//       return acc;
+//     },
+//     {
+//       collections: [],
+//       pipelines: [],
+//     } as {
+//       collections: string[],
+//       pipelines: AggregationPipelineStage[]
+//     }
+//   );
+// }

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AActB,cAAc,SAAS,CAAA;AAEvB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,EAC/B,SAAS,EACT,IAAI,EACJ,SAAqC,EACrC,IAA0B,EAC1B,UAAuC,EACxC,EAAE,gBAAgB,iBAqDlB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AActB,cAAc,SAAS,CAAA;AAEvB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,EAC/B,SAAS,EACT,IAAI,EACJ,SAAqC,EACrC,IAA0B,EAC1B,UAAuC,EACxC,EAAE,gBAAgB,iBAwElB"}

package/dist/index.js

@@ -10,9 +10,31 @@ var __createBinding = (this && this.__createBinding) || (Object.create ? (functi
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
 }));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
 var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -77,6 +99,22 @@ function initialize(_a) {
             services: services_1.services
         };
         Object.entries(stateConfig).forEach(([key, value]) => state_1.StateManager.setData(key, value));
+        yield fastify.register(Promise.resolve().then(() => __importStar(require('@fastify/swagger'))));
+        yield fastify.register(Promise.resolve().then(() => __importStar(require('@fastify/swagger-ui'))), {
+            routePrefix: '/documentation',
+            uiConfig: {
+                docExpansion: 'full',
+                deepLinking: false
+            },
+            uiHooks: {
+                onRequest: function (request, reply, next) { next(); },
+                preHandler: function (request, reply, next) { next(); }
+            },
+            staticCSP: true,
+            transformStaticCSP: (header) => header,
+            transformSpecification: (swaggerObject) => { return swaggerObject; },
+            transformSpecificationClone: true
+        });
         yield (0, registerPlugins_1.registerPlugins)({
             register: fastify.register,
             mongodbUrl,
@@ -88,7 +126,7 @@ function initialize(_a) {
         console.log('APP Routes registration COMPLETED');
         yield (0, functions_1.registerFunctions)({ app: fastify, functionsList, rulesList });
         console.log('Functions registration COMPLETED');
-        yield (0, endpoints_1.generateEndpoints)({ app: fastify, functionsList, endpointsList });
+        yield (0, endpoints_1.generateEndpoints)({ app: fastify, functionsList, endpointsList, rulesList });
         console.log('HTTP Endpoints registration COMPLETED');
         fastify.ready(() => {
             console.log("FASTIFY IS READY");

package/dist/services/mongodb-atlas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/mongodb-atlas/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwB,oBAAoB,EAAE,MAAM,SAAS,CAAA;AA4kBpE,QAAA,MAAM,YAAY,EAAE,oBAclB,CAAA;AAEF,eAAe,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/mongodb-atlas/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAyC,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAioBrF,QAAA,MAAM,YAAY,EAAE,oBAgBlB,CAAA;AAEF,eAAe,YAAY,CAAA"}

package/dist/services/mongodb-atlas/index.js

@@ -16,6 +16,7 @@ const isEqual_1 = __importDefault(require("lodash/isEqual"));
 const mongodb_1 = require("mongodb");
 const machines_1 = require("../../utils/roles/machines");
 const utils_1 = require("../../utils/roles/machines/utils");
+const model_1 = require("./model");
 const utils_2 = require("./utils");
 //TODO aggiungere no-sql inject security
 const getOperators = (collection, { rules = {}, collName, user, run_as_system }) => ({
@@ -36,6 +37,7 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
      */
     findOne: (query) => __awaiter(void 0, void 0, void 0, function* () {
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.READ);
             const { filters, roles } = rules[collName] || {};
             // Apply access control filters to the query
             const formattedQuery = (0, utils_2.getFormattedQuery)(filters, query, user);
@@ -74,6 +76,7 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
      */
     deleteOne: (...args_1) => __awaiter(void 0, [...args_1], void 0, function* (query = {}) {
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.DELETE);
             const { filters, roles } = rules[collName] || {};
             // Apply access control filters
             const formattedQuery = (0, utils_2.getFormattedQuery)(filters, query, user);
@@ -118,6 +121,7 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
     insertOne: (data, options) => __awaiter(void 0, void 0, void 0, function* () {
         const { roles } = rules[collName] || {};
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.CREATE);
             const winningRole = (0, utils_1.getWinningRole)(data, user, roles);
             const { status, document } = winningRole
                 ? yield (0, machines_1.checkValidation)(winningRole, {
@@ -158,6 +162,7 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
      */
     updateOne: (query, data, options) => __awaiter(void 0, void 0, void 0, function* () {
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.UPDATE);
             const { filters, roles } = rules[collName] || {};
             // Apply access control filters
             const formattedQuery = (0, utils_2.getFormattedQuery)(filters, query, user);
@@ -223,9 +228,11 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
      */
     find: (query) => {
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.READ);
             const { filters, roles } = rules[collName] || {};
             // Pre-query filtering based on access control rules
             const formattedQuery = (0, utils_2.getFormattedQuery)(filters, query, user);
+            // aggiunto filter per evitare questo errore: $and argument's entries must be objects
             const originalCursor = collection.find({ $and: formattedQuery });
             // Clone the cursor to override `toArray` with post-query validation
             const client = originalCursor['client'];
@@ -277,6 +284,7 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
      */
     watch: (pipeline = [], options) => {
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.READ);
             const { filters, roles } = rules[collName] || {};
             // Apply access filters to initial change stream pipeline
             const formattedQuery = (0, utils_2.getFormattedQuery)(filters, {}, user);
@@ -332,7 +340,37 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
         return collection.watch(pipeline, options);
     },
     //TODO -> add filter & rules in aggregate
-    aggregate: (pipeline, options) => collection.aggregate(pipeline, options),
+    aggregate: (...args_1) => __awaiter(void 0, [...args_1], void 0, function* (pipeline = [], options) {
+        if (run_as_system) {
+            return collection.aggregate(pipeline, options);
+        }
+        (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.READ);
+        const { filters = [], roles = [] } = rules[collection.collectionName] || {};
+        const formattedQuery = (0, utils_2.getFormattedQuery)(filters, {}, user);
+        const projection = (0, utils_2.getFormattedProjection)(filters);
+        const guardedPipeline = [
+            ...(formattedQuery.length ? [{ $match: { $and: formattedQuery } }] : []),
+            ...(projection ? [{ $project: projection }] : []),
+            ...(0, utils_2.applyAccessControlToPipeline)(pipeline, rules, user)
+        ];
+        // const pipelineCollections = getCollectionsFromPipeline(pipeline)
+        // console.log(pipelineCollections)
+        // pipelineCollections.every((collection) => checkDenyOperation(rules, collection, CRUD_OPERATIONS.READ))
+        const originalCursor = collection.aggregate(guardedPipeline, options);
+        const newCursor = Object.create(originalCursor);
+        newCursor.toArray = () => __awaiter(void 0, void 0, void 0, function* () {
+            const results = yield originalCursor.toArray();
+            const filtered = yield Promise.all(results.map((doc) => __awaiter(void 0, void 0, void 0, function* () {
+                const role = (0, utils_1.getWinningRole)(doc, user, roles);
+                const { status, document } = role
+                    ? yield (0, machines_1.checkValidation)(role, { type: 'read', roles, cursor: doc, expansions: {} }, user)
+                    : { status: !(roles === null || roles === void 0 ? void 0 : roles.length), document: doc };
+                return status ? document : undefined;
+            })));
+            return filtered.filter(Boolean);
+        });
+        return newCursor;
+    }),
     /**
      * Inserts multiple documents into a MongoDB collection with optional role-based access control and validation.
      *
@@ -352,6 +390,7 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
      */
     insertMany: (documents, options) => __awaiter(void 0, void 0, void 0, function* () {
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.CREATE);
             const { roles } = rules[collName] || {};
             // Validate each document against user's roles
             const filteredItems = yield Promise.all(documents.map((currentDoc) => __awaiter(void 0, void 0, void 0, function* () {
@@ -377,6 +416,7 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
     }),
     updateMany: (query, data, options) => __awaiter(void 0, void 0, void 0, function* () {
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.UPDATE);
             const { filters, roles } = rules[collName] || {};
             // Apply access control filters
             const formattedQuery = (0, utils_2.getFormattedQuery)(filters, query, user);
@@ -437,6 +477,7 @@ const getOperators = (collection, { rules = {}, collName, user, run_as_system })
      */
     deleteMany: (...args_1) => __awaiter(void 0, [...args_1], void 0, function* (query = {}) {
         if (!run_as_system) {
+            (0, utils_2.checkDenyOperation)(rules, collection.collectionName, model_1.CRUD_OPERATIONS.DELETE);
             const { filters, roles } = rules[collName] || {};
             // Apply access control filters
             const formattedQuery = (0, utils_2.getFormattedQuery)(filters, query, user);
@@ -480,7 +521,9 @@ const MongodbAtlas = (app, { rules, user, run_as_system } = {}) => ({
                 const collection = app.mongo.client
                     .db(dbName)
                     .collection(collName);
-                return getOperators(collection, { rules, collName, user, run_as_system });
+                return getOperators(collection, {
+                    rules, collName, user, run_as_system
+                });
             }
         };
     }