@flusys/nestjs-iam 7.1.0 → 8.0.0-beta.1

package/cjs/modules/iam.module.js

@@ -1,186 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "IAMModule", {
-    enumerable: true,
-    get: function() {
-        return IAMModule;
-    }
-});
-const _nestjsshared = require("@flusys/nestjs-shared");
-const _modules = require("@flusys/nestjs-shared/modules");
-const _common = require("@nestjs/common");
-const _iamconstants = require("../config/iam.constants");
-const _controllers = require("../controllers");
-const _permissiontypeenum = require("../enums/permission-type.enum");
-const _helpers = require("../helpers");
-const _services = require("../services");
-const _iamconfigservice = require("../services/iam-config.service");
-const _iamdatasourceservice = require("../services/iam-datasource.service");
-const _permissioncacheservice = require("../services/permission-cache.service");
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-let IAMModule = class IAMModule {
-    static getControllers(permissionMode, enableCompanyFeature) {
-        const baseControllers = [
-            _controllers.ActionController,
-            _controllers.MyPermissionController
-        ];
-        // Direct permission mode - user actions only
-        if (permissionMode === _permissiontypeenum.IAMPermissionMode.DIRECT) {
-            baseControllers.push(_controllers.UserActionPermissionController);
-        }
-        // RBAC mode - role actions and user roles only
-        if (permissionMode === _permissiontypeenum.IAMPermissionMode.RBAC) {
-            baseControllers.push(_controllers.RoleController);
-            baseControllers.push(_controllers.RolePermissionController);
-        }
-        // FULL mode - all permission controllers
-        if (permissionMode === _permissiontypeenum.IAMPermissionMode.FULL) {
-            baseControllers.push(_controllers.RoleController);
-            baseControllers.push(_controllers.UserActionPermissionController);
-            baseControllers.push(_controllers.RolePermissionController);
-        }
-        // Company action permissions - only if company feature enabled
-        if (enableCompanyFeature) {
-            baseControllers.push(_controllers.CompanyActionPermissionController);
-        }
-        return baseControllers;
-    }
-    static getServices(permissionMode) {
-        const services = [
-            _services.ActionService,
-            _services.PermissionService,
-            _permissioncacheservice.PermissionCacheService
-        ];
-        // RoleService - Only for RBAC or FULL mode
-        if (permissionMode === _permissiontypeenum.IAMPermissionMode.RBAC || permissionMode === _permissiontypeenum.IAMPermissionMode.FULL) {
-            services.push(_services.RoleService);
-        }
-        return services;
-    }
-    static getPermissionGuardConfigProvider(enableCompanyFeature) {
-        return {
-            provide: _nestjsshared.PERMISSION_GUARD_CONFIG,
-            useValue: {
-                enableCompanyFeature,
-                userPermissionKeyFormat: `${_nestjsshared.PERMISSIONS_CACHE_PREFIX}:user:{userId}`,
-                companyPermissionKeyFormat: `${_nestjsshared.PERMISSIONS_CACHE_PREFIX}:company:{companyId}:branch:{branchId}:user:{userId}`
-            }
-        };
-    }
-    static getExports(permissionMode) {
-        const baseExports = [
-            _iamconfigservice.IAMConfigService,
-            _iamdatasourceservice.IAMDataSourceService,
-            _services.ActionService,
-            _services.PermissionService,
-            _permissioncacheservice.PermissionCacheService,
-            _nestjsshared.PERMISSION_GUARD_CONFIG
-        ];
-        if (permissionMode === _permissiontypeenum.IAMPermissionMode.RBAC || permissionMode === _permissiontypeenum.IAMPermissionMode.FULL) {
-            baseExports.push(_services.RoleService);
-        }
-        return baseExports;
-    }
-    static forRoot(options = {}) {
-        const { global = false, includeController = false } = options;
-        const enableCompanyFeature = options.bootstrapAppConfig?.enableCompanyFeature ?? false;
-        const permissionMode = _helpers.PermissionModeHelper.fromString(options.bootstrapAppConfig?.permissionMode);
-        const controllers = includeController ? this.getControllers(permissionMode, enableCompanyFeature) : [];
-        const providers = [
-            {
-                provide: _iamconstants.IAM_MODULE_OPTIONS,
-                useValue: options
-            },
-            _iamconfigservice.IAMConfigService,
-            _iamdatasourceservice.IAMDataSourceService,
-            ...this.getServices(permissionMode),
-            this.getPermissionGuardConfigProvider(enableCompanyFeature),
-            (0, _modules.createModuleEventsProvider)('iam', _iamconstants.IAM_MODULE_OPTIONS)
-        ];
-        const module = {
-            module: IAMModule,
-            imports: [
-                _modules.CacheModule,
-                _modules.UtilsModule
-            ],
-            controllers,
-            providers,
-            exports: this.getExports(permissionMode)
-        };
-        return global ? {
-            ...module,
-            global: true
-        } : module;
-    }
-    static forRootAsync(asyncOptions) {
-        const { global = false, includeController = false, imports: externalImports = [] } = asyncOptions;
-        const enableCompanyFeature = asyncOptions.bootstrapAppConfig?.enableCompanyFeature ?? false;
-        const permissionMode = _helpers.PermissionModeHelper.fromString(asyncOptions.bootstrapAppConfig?.permissionMode);
-        const controllers = includeController ? this.getControllers(permissionMode, enableCompanyFeature) : [];
-        const providers = [
-            ...this.createAsyncProviders(asyncOptions),
-            _iamconfigservice.IAMConfigService,
-            _iamdatasourceservice.IAMDataSourceService,
-            ...this.getServices(permissionMode),
-            this.getPermissionGuardConfigProvider(enableCompanyFeature),
-            (0, _modules.createModuleEventsProvider)('iam', _iamconstants.IAM_MODULE_OPTIONS)
-        ];
-        const module = {
-            module: IAMModule,
-            imports: [
-                ...externalImports,
-                _modules.CacheModule,
-                _modules.UtilsModule
-            ],
-            controllers,
-            providers,
-            exports: this.getExports(permissionMode)
-        };
-        return global ? {
-            ...module,
-            global: true
-        } : module;
-    }
-    static createAsyncProviders(options) {
-        if (options.useExisting || options.useFactory) {
-            return [
-                this.createAsyncOptionsProvider(options)
-            ];
-        }
-        const useClass = options.useClass;
-        return [
-            this.createAsyncOptionsProvider(options),
-            {
-                provide: useClass,
-                useClass
-            }
-        ];
-    }
-    static createAsyncOptionsProvider(options) {
-        if (options.useFactory) {
-            return {
-                provide: _iamconstants.IAM_MODULE_OPTIONS,
-                useFactory: options.useFactory,
-                inject: options.inject || []
-            };
-        }
-        const inject = [
-            options.useClass || options.useExisting
-        ];
-        return {
-            provide: _iamconstants.IAM_MODULE_OPTIONS,
-            useFactory: async (optionsFactory)=>optionsFactory.createIAMOptions(),
-            inject
-        };
-    }
-};
-IAMModule = _ts_decorate([
-    (0, _common.Module)({})
-], IAMModule);

package/cjs/modules/iam.module.spec.js

@@ -1,282 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _nestjsshared = require("@flusys/nestjs-shared");
-const _iammodule = require("./iam.module");
-const _iamconstants = require("../config/iam.constants");
-const _controllers = require("../controllers");
-const _services = require("../services");
-const _iamconfigservice = require("../services/iam-config.service");
-const _iamdatasourceservice = require("../services/iam-datasource.service");
-const _permissioncacheservice = require("../services/permission-cache.service");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function providerTokens(providers) {
-    return providers.map((p)=>typeof p === 'function' ? p : p.provide);
-}
-describe('IAMModule', ()=>{
-    describe('forRoot - controller/service registration matrix', ()=>{
-        it('should register no controllers by default (includeController defaults to false)', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot();
-            expect(dynamicModule.controllers).toEqual([]);
-        });
-        it('DIRECT mode: registers only UserActionPermissionController beyond the base set', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot({
-                includeController: true,
-                bootstrapAppConfig: {
-                    permissionMode: 'DIRECT'
-                }
-            });
-            expect(dynamicModule.controllers).toEqual([
-                _controllers.ActionController,
-                _controllers.MyPermissionController,
-                _controllers.UserActionPermissionController
-            ]);
-            expect(providerTokens(dynamicModule.providers)).not.toContain(_services.RoleService);
-        });
-        it('RBAC mode: registers RoleController + RolePermissionController but not UserActionPermissionController', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot({
-                includeController: true,
-                bootstrapAppConfig: {
-                    permissionMode: 'RBAC'
-                }
-            });
-            expect(dynamicModule.controllers).toEqual([
-                _controllers.ActionController,
-                _controllers.MyPermissionController,
-                _controllers.RoleController,
-                _controllers.RolePermissionController
-            ]);
-            expect(providerTokens(dynamicModule.providers)).toContain(_services.RoleService);
-        });
-        it('FULL mode: registers every permission controller', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot({
-                includeController: true,
-                bootstrapAppConfig: {
-                    permissionMode: 'FULL'
-                }
-            });
-            expect(dynamicModule.controllers).toEqual([
-                _controllers.ActionController,
-                _controllers.MyPermissionController,
-                _controllers.RoleController,
-                _controllers.UserActionPermissionController,
-                _controllers.RolePermissionController
-            ]);
-        });
-        it('defaults to FULL mode when permissionMode is omitted', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot({
-                includeController: true
-            });
-            expect(dynamicModule.controllers).toEqual(expect.arrayContaining([
-                _controllers.RoleController,
-                _controllers.UserActionPermissionController,
-                _controllers.RolePermissionController
-            ]));
-        });
-        it('defaults to FULL mode when permissionMode is an unrecognized string', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot({
-                includeController: true,
-                bootstrapAppConfig: {
-                    permissionMode: 'BOGUS'
-                }
-            });
-            expect(dynamicModule.controllers).toEqual(expect.arrayContaining([
-                _controllers.RoleController,
-                _controllers.UserActionPermissionController,
-                _controllers.RolePermissionController
-            ]));
-        });
-        it('adds CompanyActionPermissionController only when enableCompanyFeature is true', ()=>{
-            const withCompany = _iammodule.IAMModule.forRoot({
-                includeController: true,
-                bootstrapAppConfig: {
-                    enableCompanyFeature: true
-                }
-            });
-            const withoutCompany = _iammodule.IAMModule.forRoot({
-                includeController: true,
-                bootstrapAppConfig: {
-                    enableCompanyFeature: false
-                }
-            });
-            expect(withCompany.controllers).toContain(_controllers.CompanyActionPermissionController);
-            expect(withoutCompany.controllers).not.toContain(_controllers.CompanyActionPermissionController);
-        });
-        it('excludes RoleService for DIRECT mode but includes it for RBAC/FULL', ()=>{
-            const direct = _iammodule.IAMModule.forRoot({
-                bootstrapAppConfig: {
-                    permissionMode: 'DIRECT'
-                }
-            });
-            const rbac = _iammodule.IAMModule.forRoot({
-                bootstrapAppConfig: {
-                    permissionMode: 'RBAC'
-                }
-            });
-            const full = _iammodule.IAMModule.forRoot({
-                bootstrapAppConfig: {
-                    permissionMode: 'FULL'
-                }
-            });
-            expect(providerTokens(direct.providers)).not.toContain(_services.RoleService);
-            expect(providerTokens(rbac.providers)).toContain(_services.RoleService);
-            expect(providerTokens(full.providers)).toContain(_services.RoleService);
-            expect(providerTokens(direct.exports)).not.toContain(_services.RoleService);
-            expect(providerTokens(rbac.exports)).toContain(_services.RoleService);
-        });
-        it('always registers the base providers/exports (ActionService, PermissionService, PermissionCacheService)', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot();
-            expect(providerTokens(dynamicModule.providers)).toEqual(expect.arrayContaining([
-                _iamconfigservice.IAMConfigService,
-                _iamdatasourceservice.IAMDataSourceService,
-                _services.ActionService,
-                _services.PermissionService,
-                _permissioncacheservice.PermissionCacheService
-            ]));
-            expect(dynamicModule.exports).toEqual(expect.arrayContaining([
-                _iamconfigservice.IAMConfigService,
-                _iamdatasourceservice.IAMDataSourceService,
-                _services.ActionService,
-                _services.PermissionService,
-                _permissioncacheservice.PermissionCacheService,
-                _nestjsshared.PERMISSION_GUARD_CONFIG
-            ]));
-        });
-    });
-    describe('forRoot - options/global handling', ()=>{
-        it('should not set `global` on the returned module when global is false/omitted', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot();
-            expect(dynamicModule.global).toBeUndefined();
-        });
-        it('should set global: true when requested', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot({
-                global: true
-            });
-            expect(dynamicModule.global).toBe(true);
-        });
-        it('should register IAM_MODULE_OPTIONS with the given options', ()=>{
-            const options = {
-                includeController: true
-            };
-            const dynamicModule = _iammodule.IAMModule.forRoot(options);
-            const provider = dynamicModule.providers.find((p)=>p.provide === _iamconstants.IAM_MODULE_OPTIONS);
-            expect(provider.useValue).toBe(options);
-        });
-        it('should build a company-aware PERMISSION_GUARD_CONFIG provider', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRoot({
-                bootstrapAppConfig: {
-                    enableCompanyFeature: true
-                }
-            });
-            const provider = dynamicModule.providers.find((p)=>p.provide === _nestjsshared.PERMISSION_GUARD_CONFIG);
-            expect(provider.useValue.enableCompanyFeature).toBe(true);
-            expect(provider.useValue.userPermissionKeyFormat).toContain('{userId}');
-            expect(provider.useValue.companyPermissionKeyFormat).toContain('{companyId}');
-        });
-    });
-    describe('forRootAsync', ()=>{
-        it('mirrors the controller/service registration matrix of forRoot', ()=>{
-            const dynamicModule = _iammodule.IAMModule.forRootAsync({
-                includeController: true,
-                bootstrapAppConfig: {
-                    permissionMode: 'DIRECT'
-                }
-            });
-            expect(dynamicModule.controllers).toEqual([
-                _controllers.ActionController,
-                _controllers.MyPermissionController,
-                _controllers.UserActionPermissionController
-            ]);
-        });
-        it('should forward external imports alongside CacheModule/UtilsModule', ()=>{
-            let FakeImportedModule = class FakeImportedModule {
-            };
-            const dynamicModule = _iammodule.IAMModule.forRootAsync({
-                imports: [
-                    FakeImportedModule
-                ]
-            });
-            expect(dynamicModule.imports).toEqual(expect.arrayContaining([
-                FakeImportedModule
-            ]));
-        });
-        it('useFactory: registers a single options provider using the given inject tokens', async ()=>{
-            const useFactory = jest.fn().mockResolvedValue({
-                foo: 'bar'
-            });
-            const dynamicModule = _iammodule.IAMModule.forRootAsync({
-                useFactory,
-                inject: [
-                    'SOME_TOKEN'
-                ]
-            });
-            const optionsProviders = dynamicModule.providers.filter((p)=>p.provide === _iamconstants.IAM_MODULE_OPTIONS);
-            expect(optionsProviders).toHaveLength(1);
-            const provider = optionsProviders[0];
-            expect(provider.useFactory).toBe(useFactory);
-            expect(provider.inject).toEqual([
-                'SOME_TOKEN'
-            ]);
-        });
-        it('useClass: registers both the class provider and an options provider that calls createIAMOptions()', async ()=>{
-            let MyOptionsFactory = class MyOptionsFactory {
-                constructor(){
-                    _define_property(this, "createIAMOptions", jest.fn().mockResolvedValue({
-                        foo: 'from-class'
-                    }));
-                }
-            };
-            const dynamicModule = _iammodule.IAMModule.forRootAsync({
-                useClass: MyOptionsFactory
-            });
-            const classProvider = dynamicModule.providers.find((p)=>p.provide === MyOptionsFactory);
-            expect(classProvider.useClass).toBe(MyOptionsFactory);
-            const optionsProvider = dynamicModule.providers.find((p)=>p.provide === _iamconstants.IAM_MODULE_OPTIONS);
-            expect(optionsProvider.inject).toEqual([
-                MyOptionsFactory
-            ]);
-            const instance = new MyOptionsFactory();
-            const resolved = await optionsProvider.useFactory(instance);
-            expect(instance.createIAMOptions).toHaveBeenCalled();
-            expect(resolved).toEqual({
-                foo: 'from-class'
-            });
-        });
-        it('useExisting: registers a single options provider injecting the existing factory', async ()=>{
-            let MyOptionsFactory = class MyOptionsFactory {
-                constructor(){
-                    _define_property(this, "createIAMOptions", jest.fn().mockResolvedValue({
-                        foo: 'from-existing'
-                    }));
-                }
-            };
-            const dynamicModule = _iammodule.IAMModule.forRootAsync({
-                useExisting: MyOptionsFactory
-            });
-            const optionsProviders = dynamicModule.providers.filter((p)=>p.provide === _iamconstants.IAM_MODULE_OPTIONS);
-            expect(optionsProviders).toHaveLength(1);
-            const provider = optionsProviders[0];
-            expect(provider.inject).toEqual([
-                MyOptionsFactory
-            ]);
-            const instance = new MyOptionsFactory();
-            const resolved = await provider.useFactory(instance);
-            expect(resolved).toEqual({
-                foo: 'from-existing'
-            });
-        });
-    });
-});

package/cjs/modules/index.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./iam.module"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}