@flusys/nestjs-iam 7.0.2 → 8.0.0-beta.1

package/fesm/enums/index.js

@@ -1,4 +1,97 @@
-export * from './action-type.enum';
-export * from './iam-entity-type.enum';
-export * from './iam-permission-type.enum';
-export * from './permission-type.enum';
+export const __rspack_esm_id = 743;
+export const __rspack_esm_ids = [743];
+export const __webpack_modules__ = {
+560(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/**
+ * ActionType Enum - Categorizes actions by their usage context
+ *
+ * - BACKEND: Actions for API endpoint permissions (cached for PermissionGuard)
+ * - FRONTEND: Actions for frontend features (returned in my-permissions API)
+ * - BOTH: Actions used for both backend and frontend (cached + returned)
+ */ var ActionType = /*#__PURE__*/ function(ActionType) {
+    ActionType["BACKEND"] = "backend";
+    ActionType["FRONTEND"] = "frontend";
+    ActionType["BOTH"] = "both";
+    return ActionType;
+}({});
+
+__webpack_require__.d(__webpack_exports__, {
+  X: () => (ActionType)
+});
+
+
+},
+85(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+var IamEntityType = /*#__PURE__*/ function(IamEntityType) {
+    IamEntityType["USER"] = "user";
+    IamEntityType["ROLE"] = "role";
+    IamEntityType["ACTION"] = "action";
+    IamEntityType["COMPANY"] = "company";
+    return IamEntityType;
+}({});
+
+__webpack_require__.d(__webpack_exports__, {
+  n: () => (IamEntityType)
+});
+
+
+},
+517(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+var IamPermissionType = /*#__PURE__*/ function(IamPermissionType) {
+    IamPermissionType["USER_ROLE"] = "user_role";
+    IamPermissionType["ROLE_ACTION"] = "role_action";
+    IamPermissionType["USER_ACTION"] = "user_action";
+    IamPermissionType["COMPANY_ACTION"] = "company_action";
+    return IamPermissionType;
+}({});
+
+__webpack_require__.d(__webpack_exports__, {
+  V: () => (IamPermissionType)
+});
+
+
+},
+518(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _action_type_enum_js__rspack_import_0 = __webpack_require__(560);
+/* import */ var _iam_entity_type_enum_js__rspack_import_1 = __webpack_require__(85);
+/* import */ var _iam_permission_type_enum_js__rspack_import_2 = __webpack_require__(517);
+/* import */ var _permission_type_enum_js__rspack_import_3 = __webpack_require__(841);
+
+
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  Vw: () => (/* reexport safe */ _iam_permission_type_enum_js__rspack_import_2.V),
+  X2: () => (/* reexport safe */ _action_type_enum_js__rspack_import_0.X),
+  nh: () => (/* reexport safe */ _iam_entity_type_enum_js__rspack_import_1.n),
+  w6: () => (/* reexport safe */ _permission_type_enum_js__rspack_import_3.w)
+});
+
+
+},
+841(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+var IAMPermissionMode = /*#__PURE__*/ function(IAMPermissionMode) {
+    IAMPermissionMode[IAMPermissionMode["RBAC"] = 1] = "RBAC";
+    IAMPermissionMode[IAMPermissionMode["DIRECT"] = 2] = "DIRECT";
+    IAMPermissionMode[IAMPermissionMode["FULL"] = 3] = "FULL";
+    return IAMPermissionMode;
+}({});
+
+__webpack_require__.d(__webpack_exports__, {
+  w: () => (IAMPermissionMode)
+});
+
+
+},
+
+};
+import { __webpack_require__ } from '../runtime.js';
+var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
+import * as __rspack_chunk_1 from './index.js';
+__webpack_require__.C(__rspack_chunk_1);
+var __webpack_exports__ = __webpack_exec__(518);var __webpack_exports__ActionType = __webpack_exports__.X2;
+var __webpack_exports__IAMPermissionMode = __webpack_exports__.w6;
+var __webpack_exports__IamEntityType = __webpack_exports__.nh;
+var __webpack_exports__IamPermissionType = __webpack_exports__.Vw;
+export { __webpack_exports__ActionType as ActionType, __webpack_exports__IAMPermissionMode as IAMPermissionMode, __webpack_exports__IamEntityType as IamEntityType, __webpack_exports__IamPermissionType as IamPermissionType };

package/fesm/helpers/index.js

@@ -1,2 +1,125 @@
-export * from './company-access.helper';
-export * from './permission-mode.helper';
+import { AUTH_MESSAGES } from "@flusys/nestjs-shared/constants";
+import * as __rspack_external__nestjs_common_a04939da from "@nestjs/common";
+export const __rspack_esm_id = 468;
+export const __rspack_esm_ids = [468];
+export const __webpack_modules__ = {
+841(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+var IAMPermissionMode = /*#__PURE__*/ function(IAMPermissionMode) {
+    IAMPermissionMode[IAMPermissionMode["RBAC"] = 1] = "RBAC";
+    IAMPermissionMode[IAMPermissionMode["DIRECT"] = 2] = "DIRECT";
+    IAMPermissionMode[IAMPermissionMode["FULL"] = 3] = "FULL";
+    return IAMPermissionMode;
+}({});
+
+__webpack_require__.d(__webpack_exports__, {
+  w: () => (IAMPermissionMode)
+});
+
+
+},
+674(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  T: () => (/* reexport */ PermissionModeHelper),
+  u: () => (/* reexport */ validateCompanyAccess)
+});
+
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(157);
+;// CONCATENATED MODULE: external "@flusys/nestjs-shared/constants"
+
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/helpers/company-access.helper.ts
+
+
+/**
+ * Validates that user has access to the specified company.
+ * Used for user-action and role-permission operations when company feature is enabled.
+ *
+ * @throws ForbiddenException if user doesn't have access to the company
+ */ function validateCompanyAccess(config, companyId, user, errorMessage = 'You do not have access to this company', messageKey = AUTH_MESSAGES.COMPANY_NO_ACCESS) {
+    if (!config.isCompanyFeatureEnabled() || !companyId) {
+        return;
+    }
+    if (user.companyId !== companyId) {
+        throw new common_.ForbiddenException({
+            message: errorMessage,
+            messageKey
+        });
+    }
+}
+
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/enums/permission-type.enum.ts
+var permission_type_enum = __webpack_require__(841);
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/helpers/permission-mode.helper.ts
+
+/**
+ * Helper for converting permission mode strings to enum values
+ *
+ * **Purpose:** Centralize the conversion logic from IBootstrapAppConfig.permissionMode
+ * (string) to IAMPermissionMode enum to prevent duplication and sync issues.
+ *
+ * **Used by:**
+ * - iam.module.ts (forRoot, forRootAsync)
+ * - iam-config.service.ts (getPermissionMode)
+ * - main.ts (Swagger setup)
+ */ class PermissionModeHelper {
+    /**
+   * Convert permission mode string to enum value
+   *
+   * @param modeStr - Permission mode string ('FULL', 'RBAC', 'DIRECT')
+   * @returns IAMPermissionMode enum value
+   * @default IAMPermissionMode.FULL if invalid/missing
+   *
+   * @example
+   * ```typescript
+   * const mode = PermissionModeHelper.fromString('RBAC');
+   * // Returns: IAMPermissionMode.RBAC
+   *
+   * const mode = PermissionModeHelper.fromString(undefined);
+   * // Returns: IAMPermissionMode.FULL (default)
+   * ```
+   */ static fromString(modeStr) {
+        if (!modeStr) {
+            return permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL;
+        }
+        const mode = permission_type_enum/* .IAMPermissionMode */.w[modeStr];
+        return mode ?? permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL;
+    }
+    /**
+   * Convert enum value to string (for serialization/logging)
+   *
+   * @param mode - IAMPermissionMode enum value
+   * @returns String representation
+   *
+   * @example
+   * ```typescript
+   * const str = PermissionModeHelper.toString(IAMPermissionMode.RBAC);
+   * // Returns: 'RBAC'
+   * ```
+   */ static toString(mode) {
+        return permission_type_enum/* .IAMPermissionMode */.w[mode];
+    }
+}
+
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/helpers/index.ts
+
+
+
+
+},
+157(module) {
+
+module.exports = __rspack_external__nestjs_common_a04939da;
+
+
+},
+
+};
+import { __webpack_require__ } from '../runtime.js';
+var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
+import * as __rspack_chunk_1 from './index.js';
+__webpack_require__.C(__rspack_chunk_1);
+var __webpack_exports__ = __webpack_exec__(674);var __webpack_exports__PermissionModeHelper = __webpack_exports__.T;
+var __webpack_exports__validateCompanyAccess = __webpack_exports__.u;
+export { __webpack_exports__PermissionModeHelper as PermissionModeHelper, __webpack_exports__validateCompanyAccess as validateCompanyAccess };