@flusys/nestjs-iam 7.0.2 → 8.0.0-beta.1

package/fesm/services/iam-config.service.js

@@ -1,77 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { Inject, Injectable, Optional } from '@nestjs/common';
-import { IAM_MODULE_OPTIONS } from '../config/iam.constants';
-import { IAMPermissionMode } from '../enums/permission-type.enum';
-import { PermissionModeHelper } from '../helpers';
-import { IAMModuleOptions } from '../interfaces/iam-module-options.interface';
-export class IAMConfigService {
-    // Database Mode
-    getDatabaseMode() {
-        return this.options.bootstrapAppConfig?.databaseMode ?? 'single';
-    }
-    isMultiTenant() {
-        return this.getDatabaseMode() === 'multi-tenant';
-    }
-    // Feature Flags
-    isCompanyFeatureEnabled() {
-        return this.options.bootstrapAppConfig?.enableCompanyFeature ?? false;
-    }
-    // Permission Mode
-    getPermissionMode() {
-        return PermissionModeHelper.fromString(this.options.bootstrapAppConfig?.permissionMode);
-    }
-    isRbacEnabled() {
-        const mode = this.getPermissionMode();
-        return mode === IAMPermissionMode.RBAC || mode === IAMPermissionMode.FULL;
-    }
-    isDirectPermissionEnabled() {
-        const mode = this.getPermissionMode();
-        return mode === IAMPermissionMode.DIRECT || mode === IAMPermissionMode.FULL;
-    }
-    // Options
-    getOptions() {
-        return this.options;
-    }
-    constructor(injectedOptions){
-        _define_property(this, "options", void 0);
-        this.options = injectedOptions ?? {
-            global: false,
-            includeController: false
-        };
-    }
-}
-IAMConfigService = _ts_decorate([
-    Injectable(),
-    _ts_param(0, Optional()),
-    _ts_param(0, Inject(IAM_MODULE_OPTIONS)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof IAMModuleOptions === "undefined" ? Object : IAMModuleOptions
-    ])
-], IAMConfigService);

package/fesm/services/iam-config.service.spec.js

@@ -1,106 +0,0 @@
-import { IAMPermissionMode } from '../enums/permission-type.enum';
-import { IAMConfigService } from './iam-config.service';
-describe('IAMConfigService', ()=>{
-    describe('with no injected options (defaults)', ()=>{
-        let service;
-        beforeEach(()=>{
-            service = new IAMConfigService();
-        });
-        it('defaults to single database mode', ()=>{
-            expect(service.getDatabaseMode()).toBe('single');
-            expect(service.isMultiTenant()).toBe(false);
-        });
-        it('defaults company feature to disabled', ()=>{
-            expect(service.isCompanyFeatureEnabled()).toBe(false);
-        });
-        it('defaults permission mode to FULL', ()=>{
-            expect(service.getPermissionMode()).toBe(IAMPermissionMode.FULL);
-            expect(service.isRbacEnabled()).toBe(true);
-            expect(service.isDirectPermissionEnabled()).toBe(true);
-        });
-        it('returns the fallback options object from getOptions', ()=>{
-            expect(service.getOptions()).toEqual({
-                global: false,
-                includeController: false
-            });
-        });
-    });
-    describe('with injected options', ()=>{
-        function buildService(overrides) {
-            const options = {
-                global: false,
-                includeController: false,
-                bootstrapAppConfig: {
-                    databaseMode: 'single',
-                    enableCompanyFeature: false,
-                    ...overrides
-                }
-            };
-            return new IAMConfigService(options);
-        }
-        it('reports multi-tenant mode when configured', ()=>{
-            const service = buildService({
-                databaseMode: 'multi-tenant'
-            });
-            expect(service.getDatabaseMode()).toBe('multi-tenant');
-            expect(service.isMultiTenant()).toBe(true);
-        });
-        it('reports company feature enabled when configured', ()=>{
-            const service = buildService({
-                enableCompanyFeature: true
-            });
-            expect(service.isCompanyFeatureEnabled()).toBe(true);
-        });
-        describe('permission mode: RBAC', ()=>{
-            let service;
-            beforeEach(()=>{
-                service = buildService({
-                    permissionMode: 'RBAC'
-                });
-            });
-            it('enables RBAC but not direct permissions', ()=>{
-                expect(service.getPermissionMode()).toBe(IAMPermissionMode.RBAC);
-                expect(service.isRbacEnabled()).toBe(true);
-                expect(service.isDirectPermissionEnabled()).toBe(false);
-            });
-        });
-        describe('permission mode: DIRECT', ()=>{
-            let service;
-            beforeEach(()=>{
-                service = buildService({
-                    permissionMode: 'DIRECT'
-                });
-            });
-            it('enables direct permissions but not RBAC', ()=>{
-                expect(service.getPermissionMode()).toBe(IAMPermissionMode.DIRECT);
-                expect(service.isRbacEnabled()).toBe(false);
-                expect(service.isDirectPermissionEnabled()).toBe(true);
-            });
-        });
-        describe('permission mode: FULL', ()=>{
-            let service;
-            beforeEach(()=>{
-                service = buildService({
-                    permissionMode: 'FULL'
-                });
-            });
-            it('enables both RBAC and direct permissions', ()=>{
-                expect(service.getPermissionMode()).toBe(IAMPermissionMode.FULL);
-                expect(service.isRbacEnabled()).toBe(true);
-                expect(service.isDirectPermissionEnabled()).toBe(true);
-            });
-        });
-        it('returns the exact injected options object from getOptions', ()=>{
-            const options = {
-                global: true,
-                includeController: true,
-                bootstrapAppConfig: {
-                    databaseMode: 'single',
-                    enableCompanyFeature: true
-                }
-            };
-            const service = new IAMConfigService(options);
-            expect(service.getOptions()).toBe(options);
-        });
-    });
-});

package/fesm/services/iam-datasource.service.js

@@ -1,78 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { MultiTenantDataSourceService } from '@flusys/nestjs-shared/modules';
-import { Inject, Injectable, Optional, Scope } from '@nestjs/common';
-import { REQUEST } from '@nestjs/core';
-import { Request } from 'express';
-import { PermissionModeHelper } from '../helpers';
-import { IAMConfigService } from './iam-config.service';
-export class IAMDataSourceService extends MultiTenantDataSourceService {
-    static buildParentOptions(options) {
-        return {
-            bootstrapAppConfig: options.bootstrapAppConfig,
-            defaultDatabaseConfig: options.config?.defaultDatabaseConfig,
-            tenantDefaultDatabaseConfig: options.config?.tenantDefaultDatabaseConfig,
-            tenants: options.config?.tenants
-        };
-    }
-    getEnableCompanyFeatureForTenant(tenant) {
-        return tenant?.enableCompanyFeature ?? this.configService.isCompanyFeatureEnabled();
-    }
-    async getIAMEntities() {
-        const { getIAMEntitiesByConfig } = await import('../entities');
-        const enableCompanyFeature = this.getEnableCompanyFeatureForTenant(this.getCurrentTenant() ?? undefined);
-        const permissionMode = PermissionModeHelper.toString(this.configService.getPermissionMode());
-        return getIAMEntitiesByConfig(enableCompanyFeature, permissionMode);
-    }
-    async createDataSourceFromConfig(config) {
-        const entities = await this.getIAMEntities();
-        return await super.createDataSourceFromConfig(config, entities);
-    }
-    constructor(configService, request){
-        super(IAMDataSourceService.buildParentOptions(configService.getOptions()), request), _define_property(this, "configService", void 0), this.configService = configService;
-    }
-}
-_define_property(IAMDataSourceService, "tenantConnections", new Map());
-_define_property(IAMDataSourceService, "singleDataSource", null);
-_define_property(IAMDataSourceService, "tenantsRegistry", new Map());
-_define_property(IAMDataSourceService, "initialized", false);
-_define_property(IAMDataSourceService, "connectionLocks", new Map());
-_define_property(IAMDataSourceService, "singleConnectionLock", null);
-IAMDataSourceService = _ts_decorate([
-    Injectable({
-        scope: Scope.REQUEST
-    }),
-    _ts_param(0, Inject(IAMConfigService)),
-    _ts_param(1, Optional()),
-    _ts_param(1, Inject(REQUEST)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof IAMConfigService === "undefined" ? Object : IAMConfigService,
-        typeof Request === "undefined" ? Object : Request
-    ])
-], IAMDataSourceService);

package/fesm/services/iam-datasource.service.spec.js

@@ -1,106 +0,0 @@
-import { MultiTenantDataSourceService } from '@flusys/nestjs-shared/modules';
-import { Action } from '../entities/action.entity';
-import { UserIamPermission } from '../entities/user-iam-permission.entity';
-import { UserIamPermissionWithCompany } from '../entities/permission-with-company.entity';
-import { Role } from '../entities/role.entity';
-import { RoleWithCompany } from '../entities/role-with-company.entity';
-import { IAMDataSourceService } from './iam-datasource.service';
-describe('IAMDataSourceService', ()=>{
-    let mockConfigService;
-    beforeEach(()=>{
-        mockConfigService = {
-            isCompanyFeatureEnabled: jest.fn().mockReturnValue(false),
-            getPermissionMode: jest.fn(),
-            getOptions: jest.fn().mockReturnValue({
-                global: false,
-                includeController: false
-            })
-        };
-    });
-    function buildService(request) {
-        return new IAMDataSourceService(mockConfigService, request);
-    }
-    describe('getEnableCompanyFeatureForTenant', ()=>{
-        it('uses the tenant override when defined (true)', ()=>{
-            const service = buildService();
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            expect(service.getEnableCompanyFeatureForTenant({
-                enableCompanyFeature: true
-            })).toBe(true);
-        });
-        it('uses the tenant override when defined (false)', ()=>{
-            const service = buildService();
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            expect(service.getEnableCompanyFeatureForTenant({
-                enableCompanyFeature: false
-            })).toBe(false);
-        });
-        it('falls back to the config service when the tenant has no override', ()=>{
-            const service = buildService();
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            expect(service.getEnableCompanyFeatureForTenant({})).toBe(true);
-        });
-        it('falls back to the config service when no tenant is provided', ()=>{
-            const service = buildService();
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            expect(service.getEnableCompanyFeatureForTenant(undefined)).toBe(true);
-        });
-    });
-    describe('getIAMEntities', ()=>{
-        it('returns Action + non-company permission + role entities for RBAC mode', async ()=>{
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            mockConfigService.getPermissionMode.mockReturnValue(1); // RBAC
-            const service = buildService();
-            const entities = await service.getIAMEntities();
-            expect(entities).toContain(Action);
-            expect(entities).toContain(UserIamPermission);
-            expect(entities).toContain(Role);
-            expect(entities).not.toContain(UserIamPermissionWithCompany);
-            expect(entities).not.toContain(RoleWithCompany);
-        });
-        it('returns company-scoped entities when company feature is enabled', async ()=>{
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            mockConfigService.getPermissionMode.mockReturnValue(3); // FULL
-            const service = buildService();
-            const entities = await service.getIAMEntities();
-            expect(entities).toContain(Action);
-            expect(entities).toContain(UserIamPermissionWithCompany);
-            expect(entities).toContain(RoleWithCompany);
-            expect(entities).not.toContain(UserIamPermission);
-            expect(entities).not.toContain(Role);
-        });
-        it('excludes role entities entirely in DIRECT mode', async ()=>{
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            mockConfigService.getPermissionMode.mockReturnValue(2); // DIRECT
-            const service = buildService();
-            const entities = await service.getIAMEntities();
-            expect(entities).toEqual([
-                Action,
-                UserIamPermission
-            ]);
-        });
-    });
-    describe('createDataSourceFromConfig', ()=>{
-        it('resolves IAM entities and delegates to the parent with them', async ()=>{
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            mockConfigService.getPermissionMode.mockReturnValue(1); // RBAC
-            const service = buildService();
-            const fakeDataSource = {
-                isInitialized: true
-            };
-            const parentSpy = jest.spyOn(MultiTenantDataSourceService.prototype, 'createDataSourceFromConfig').mockResolvedValue(fakeDataSource);
-            const config = {
-                type: 'mysql',
-                host: 'localhost'
-            };
-            const result = await service.createDataSourceFromConfig(config);
-            expect(result).toBe(fakeDataSource);
-            expect(parentSpy).toHaveBeenCalledWith(config, [
-                Action,
-                UserIamPermission,
-                Role
-            ]);
-            parentSpy.mockRestore();
-        });
-    });
-});