@flusys/nestjs-iam 7.1.0 → 8.0.0

package/cjs/entities/role-base.entity.js

@@ -1,80 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "RoleBase", {
-    enumerable: true,
-    get: function() {
-        return RoleBase;
-    }
-});
-const _nestjsshared = require("@flusys/nestjs-shared");
-const _typeorm = require("typeorm");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-let RoleBase = class RoleBase extends _nestjsshared.Identity {
-    constructor(...args){
-        super(...args), _define_property(this, "readOnly", void 0), _define_property(this, "name", void 0), _define_property(this, "description", void 0), _define_property(this, "isActive", void 0), _define_property(this, "serial", void 0);
-    }
-};
-_ts_decorate([
-    (0, _typeorm.Column)({
-        type: 'boolean',
-        nullable: false,
-        default: false,
-        name: 'read_only'
-    }),
-    _ts_metadata("design:type", Boolean)
-], RoleBase.prototype, "readOnly", void 0);
-_ts_decorate([
-    (0, _typeorm.Column)({
-        type: 'varchar',
-        length: 255,
-        nullable: false
-    }),
-    _ts_metadata("design:type", String)
-], RoleBase.prototype, "name", void 0);
-_ts_decorate([
-    (0, _typeorm.Column)({
-        type: 'varchar',
-        length: 500,
-        nullable: true
-    }),
-    _ts_metadata("design:type", Object)
-], RoleBase.prototype, "description", void 0);
-_ts_decorate([
-    (0, _typeorm.Column)({
-        type: 'boolean',
-        nullable: false,
-        default: true,
-        name: 'is_active'
-    }),
-    _ts_metadata("design:type", Boolean)
-], RoleBase.prototype, "isActive", void 0);
-_ts_decorate([
-    (0, _typeorm.Column)({
-        type: 'int',
-        nullable: true
-    }),
-    _ts_metadata("design:type", Object)
-], RoleBase.prototype, "serial", void 0);

package/cjs/entities/role-with-company.entity.js

@@ -1,55 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "RoleWithCompany", {
-    enumerable: true,
-    get: function() {
-        return RoleWithCompany;
-    }
-});
-const _typeorm = require("typeorm");
-const _rolebaseentity = require("./role-base.entity");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-let RoleWithCompany = class RoleWithCompany extends _rolebaseentity.RoleBase {
-    constructor(...args){
-        super(...args), _define_property(this, "companyId", void 0);
-    }
-};
-_ts_decorate([
-    (0, _typeorm.Column)({
-        type: 'uuid',
-        nullable: true,
-        name: 'company_id'
-    }),
-    _ts_metadata("design:type", Object)
-], RoleWithCompany.prototype, "companyId", void 0);
-RoleWithCompany = _ts_decorate([
-    (0, _typeorm.Entity)({
-        name: 'role'
-    }),
-    (0, _typeorm.Index)([
-        'companyId'
-    ])
-], RoleWithCompany);

package/cjs/entities/role.entity.js

@@ -1,25 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "Role", {
-    enumerable: true,
-    get: function() {
-        return Role;
-    }
-});
-const _typeorm = require("typeorm");
-const _rolebaseentity = require("./role-base.entity");
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-let Role = class Role extends _rolebaseentity.RoleBase {
-};
-Role = _ts_decorate([
-    (0, _typeorm.Entity)({
-        name: 'role'
-    })
-], Role);

package/cjs/entities/user-iam-permission.entity.js

@@ -1,43 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "UserIamPermission", {
-    enumerable: true,
-    get: function() {
-        return UserIamPermission;
-    }
-});
-const _typeorm = require("typeorm");
-const _permissionbaseentity = require("./permission-base.entity");
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-let UserIamPermission = class UserIamPermission extends _permissionbaseentity.PermissionBase {
-};
-UserIamPermission = _ts_decorate([
-    (0, _typeorm.Entity)({
-        name: 'user_iam_permission'
-    }),
-    (0, _typeorm.Index)([
-        'permissionType',
-        'sourceId',
-        'targetId'
-    ], {
-        unique: true
-    }),
-    (0, _typeorm.Index)([
-        'sourceId',
-        'sourceType'
-    ]),
-    (0, _typeorm.Index)([
-        'targetId',
-        'targetType'
-    ]),
-    (0, _typeorm.Index)([
-        'permissionType'
-    ])
-], UserIamPermission);

package/cjs/enums/action-type.enum.js

@@ -1,22 +0,0 @@
-/**
- * ActionType Enum - Categorizes actions by their usage context
- *
- * - BACKEND: Actions for API endpoint permissions (cached for PermissionGuard)
- * - FRONTEND: Actions for frontend features (returned in my-permissions API)
- * - BOTH: Actions used for both backend and frontend (cached + returned)
- */ "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "ActionType", {
-    enumerable: true,
-    get: function() {
-        return ActionType;
-    }
-});
-var ActionType = /*#__PURE__*/ function(ActionType) {
-    ActionType["BACKEND"] = "backend";
-    ActionType["FRONTEND"] = "frontend";
-    ActionType["BOTH"] = "both";
-    return ActionType;
-}({});

package/cjs/enums/iam-entity-type.enum.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "IamEntityType", {
-    enumerable: true,
-    get: function() {
-        return IamEntityType;
-    }
-});
-var IamEntityType = /*#__PURE__*/ function(IamEntityType) {
-    IamEntityType["USER"] = "user";
-    IamEntityType["ROLE"] = "role";
-    IamEntityType["ACTION"] = "action";
-    IamEntityType["COMPANY"] = "company";
-    return IamEntityType;
-}({});

package/cjs/enums/iam-permission-type.enum.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "IamPermissionType", {
-    enumerable: true,
-    get: function() {
-        return IamPermissionType;
-    }
-});
-var IamPermissionType = /*#__PURE__*/ function(IamPermissionType) {
-    IamPermissionType["USER_ROLE"] = "user_role";
-    IamPermissionType["ROLE_ACTION"] = "role_action";
-    IamPermissionType["USER_ACTION"] = "user_action";
-    IamPermissionType["COMPANY_ACTION"] = "company_action";
-    return IamPermissionType;
-}({});

package/cjs/enums/index.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./action-type.enum"), exports);
-_export_star(require("./iam-entity-type.enum"), exports);
-_export_star(require("./iam-permission-type.enum"), exports);
-_export_star(require("./permission-type.enum"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}

package/cjs/enums/permission-type.enum.js

@@ -1,16 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "IAMPermissionMode", {
-    enumerable: true,
-    get: function() {
-        return IAMPermissionMode;
-    }
-});
-var IAMPermissionMode = /*#__PURE__*/ function(IAMPermissionMode) {
-    IAMPermissionMode[IAMPermissionMode["RBAC"] = 1] = "RBAC";
-    IAMPermissionMode[IAMPermissionMode["DIRECT"] = 2] = "DIRECT";
-    IAMPermissionMode[IAMPermissionMode["FULL"] = 3] = "FULL";
-    return IAMPermissionMode;
-}({});

package/cjs/helpers/company-access.helper.js

@@ -1,23 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "validateCompanyAccess", {
-    enumerable: true,
-    get: function() {
-        return validateCompanyAccess;
-    }
-});
-const _common = require("@nestjs/common");
-const _constants = require("@flusys/nestjs-shared/constants");
-function validateCompanyAccess(config, companyId, user, errorMessage = 'You do not have access to this company', messageKey = _constants.AUTH_MESSAGES.COMPANY_NO_ACCESS) {
-    if (!config.isCompanyFeatureEnabled() || !companyId) {
-        return;
-    }
-    if (user.companyId !== companyId) {
-        throw new _common.ForbiddenException({
-            message: errorMessage,
-            messageKey
-        });
-    }
-}

package/cjs/helpers/company-access.helper.spec.js

@@ -1,68 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _common = require("@nestjs/common");
-const _constants = require("@flusys/nestjs-shared/constants");
-const _loggedusermock = require("@test-utils/mocks/logged-user.mock");
-const _companyaccesshelper = require("./company-access.helper");
-describe('validateCompanyAccess', ()=>{
-    function buildConfig(isCompanyFeatureEnabled) {
-        return {
-            isCompanyFeatureEnabled: jest.fn().mockReturnValue(isCompanyFeatureEnabled)
-        };
-    }
-    it('does not throw when company feature is disabled', ()=>{
-        const config = buildConfig(false);
-        const user = (0, _loggedusermock.buildMockUser)({
-            companyId: 'company-uuid-1'
-        });
-        expect(()=>(0, _companyaccesshelper.validateCompanyAccess)(config, 'company-uuid-2', user)).not.toThrow();
-    });
-    it('does not throw when companyId is undefined', ()=>{
-        const config = buildConfig(true);
-        const user = (0, _loggedusermock.buildMockUser)({
-            companyId: 'company-uuid-1'
-        });
-        expect(()=>(0, _companyaccesshelper.validateCompanyAccess)(config, undefined, user)).not.toThrow();
-    });
-    it('does not throw when the companyId matches the user company', ()=>{
-        const config = buildConfig(true);
-        const user = (0, _loggedusermock.buildMockUser)({
-            companyId: 'company-uuid-1'
-        });
-        expect(()=>(0, _companyaccesshelper.validateCompanyAccess)(config, 'company-uuid-1', user)).not.toThrow();
-    });
-    it('throws ForbiddenException with default message/key when the company does not match', ()=>{
-        const config = buildConfig(true);
-        const user = (0, _loggedusermock.buildMockUser)({
-            companyId: 'company-uuid-1'
-        });
-        try {
-            (0, _companyaccesshelper.validateCompanyAccess)(config, 'company-uuid-2', user);
-            fail('expected validateCompanyAccess to throw');
-        } catch (error) {
-            expect(error).toBeInstanceOf(_common.ForbiddenException);
-            expect(error.getResponse()).toEqual(expect.objectContaining({
-                message: 'You do not have access to this company',
-                messageKey: _constants.AUTH_MESSAGES.COMPANY_NO_ACCESS
-            }));
-        }
-    });
-    it('throws with a custom message and messageKey when provided', ()=>{
-        const config = buildConfig(true);
-        const user = (0, _loggedusermock.buildMockUser)({
-            companyId: 'company-uuid-1'
-        });
-        try {
-            (0, _companyaccesshelper.validateCompanyAccess)(config, 'company-uuid-2', user, 'Custom message', 'custom.message.key');
-            fail('expected validateCompanyAccess to throw');
-        } catch (error) {
-            expect(error).toBeInstanceOf(_common.ForbiddenException);
-            expect(error.getResponse()).toEqual(expect.objectContaining({
-                message: 'Custom message',
-                messageKey: 'custom.message.key'
-            }));
-        }
-    });
-});

package/cjs/helpers/index.js

@@ -1,19 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./company-access.helper"), exports);
-_export_star(require("./permission-mode.helper"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}

package/cjs/helpers/permission-mode.helper.js

@@ -1,49 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "PermissionModeHelper", {
-    enumerable: true,
-    get: function() {
-        return PermissionModeHelper;
-    }
-});
-const _permissiontypeenum = require("../enums/permission-type.enum");
-let PermissionModeHelper = class PermissionModeHelper {
-    /**
-   * Convert permission mode string to enum value
-   *
-   * @param modeStr - Permission mode string ('FULL', 'RBAC', 'DIRECT')
-   * @returns IAMPermissionMode enum value
-   * @default IAMPermissionMode.FULL if invalid/missing
-   *
-   * @example
-   * ```typescript
-   * const mode = PermissionModeHelper.fromString('RBAC');
-   * // Returns: IAMPermissionMode.RBAC
-   *
-   * const mode = PermissionModeHelper.fromString(undefined);
-   * // Returns: IAMPermissionMode.FULL (default)
-   * ```
-   */ static fromString(modeStr) {
-        if (!modeStr) {
-            return _permissiontypeenum.IAMPermissionMode.FULL;
-        }
-        const mode = _permissiontypeenum.IAMPermissionMode[modeStr];
-        return mode ?? _permissiontypeenum.IAMPermissionMode.FULL;
-    }
-    /**
-   * Convert enum value to string (for serialization/logging)
-   *
-   * @param mode - IAMPermissionMode enum value
-   * @returns String representation
-   *
-   * @example
-   * ```typescript
-   * const str = PermissionModeHelper.toString(IAMPermissionMode.RBAC);
-   * // Returns: 'RBAC'
-   * ```
-   */ static toString(mode) {
-        return _permissiontypeenum.IAMPermissionMode[mode];
-    }
-};

package/cjs/helpers/permission-mode.helper.spec.js

@@ -1,54 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _permissiontypeenum = require("../enums/permission-type.enum");
-const _permissionmodehelper = require("./permission-mode.helper");
-describe('PermissionModeHelper', ()=>{
-    describe('fromString', ()=>{
-        it('converts "RBAC" to IAMPermissionMode.RBAC', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.fromString('RBAC')).toBe(_permissiontypeenum.IAMPermissionMode.RBAC);
-        });
-        it('converts "DIRECT" to IAMPermissionMode.DIRECT', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.fromString('DIRECT')).toBe(_permissiontypeenum.IAMPermissionMode.DIRECT);
-        });
-        it('converts "FULL" to IAMPermissionMode.FULL', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.fromString('FULL')).toBe(_permissiontypeenum.IAMPermissionMode.FULL);
-        });
-        it('defaults to FULL when the string is undefined', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.fromString(undefined)).toBe(_permissiontypeenum.IAMPermissionMode.FULL);
-        });
-        it('defaults to FULL when the string is empty', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.fromString('')).toBe(_permissiontypeenum.IAMPermissionMode.FULL);
-        });
-        it('defaults to FULL when the string is not a known mode', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.fromString('INVALID_MODE')).toBe(_permissiontypeenum.IAMPermissionMode.FULL);
-        });
-        it('is case-sensitive and falls back to FULL for lowercase input', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.fromString('rbac')).toBe(_permissiontypeenum.IAMPermissionMode.FULL);
-        });
-    });
-    describe('toString', ()=>{
-        it('converts IAMPermissionMode.RBAC to "RBAC"', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.toString(_permissiontypeenum.IAMPermissionMode.RBAC)).toBe('RBAC');
-        });
-        it('converts IAMPermissionMode.DIRECT to "DIRECT"', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.toString(_permissiontypeenum.IAMPermissionMode.DIRECT)).toBe('DIRECT');
-        });
-        it('converts IAMPermissionMode.FULL to "FULL"', ()=>{
-            expect(_permissionmodehelper.PermissionModeHelper.toString(_permissiontypeenum.IAMPermissionMode.FULL)).toBe('FULL');
-        });
-    });
-    describe('round trip', ()=>{
-        it('fromString(toString(mode)) returns the original mode for every enum value', ()=>{
-            const modes = [
-                _permissiontypeenum.IAMPermissionMode.RBAC,
-                _permissiontypeenum.IAMPermissionMode.DIRECT,
-                _permissiontypeenum.IAMPermissionMode.FULL
-            ];
-            for (const mode of modes){
-                expect(_permissionmodehelper.PermissionModeHelper.fromString(_permissionmodehelper.PermissionModeHelper.toString(mode))).toBe(mode);
-            }
-        });
-    });
-});

package/cjs/index.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./config"), exports);
-_export_star(require("./controllers"), exports);
-_export_star(require("./docs"), exports);
-_export_star(require("./dtos"), exports);
-_export_star(require("./entities"), exports);
-_export_star(require("./enums"), exports);
-_export_star(require("./helpers"), exports);
-_export_star(require("./interfaces"), exports);
-_export_star(require("./modules"), exports);
-_export_star(require("./services"), exports);
-_export_star(require("./types"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}

package/cjs/interfaces/action.interface.js

@@ -1,4 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/cjs/interfaces/iam-module-options.interface.js

@@ -1,4 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/cjs/interfaces/index.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./action.interface"), exports);
-_export_star(require("./role.interface"), exports);
-_export_star(require("./iam-module-options.interface"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}

package/cjs/interfaces/role.interface.js

@@ -1,7 +0,0 @@
-/**
- * Role Interface
- * Represents a role entity in responses
- */ "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});