@flusys/nestjs-iam 7.1.0 → 8.0.0

package/cjs/services/iam-config.service.js

@@ -1,87 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "IAMConfigService", {
-    enumerable: true,
-    get: function() {
-        return IAMConfigService;
-    }
-});
-const _common = require("@nestjs/common");
-const _iamconstants = require("../config/iam.constants");
-const _permissiontypeenum = require("../enums/permission-type.enum");
-const _helpers = require("../helpers");
-const _iammoduleoptionsinterface = require("../interfaces/iam-module-options.interface");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-let IAMConfigService = class IAMConfigService {
-    // Database Mode
-    getDatabaseMode() {
-        return this.options.bootstrapAppConfig?.databaseMode ?? 'single';
-    }
-    isMultiTenant() {
-        return this.getDatabaseMode() === 'multi-tenant';
-    }
-    // Feature Flags
-    isCompanyFeatureEnabled() {
-        return this.options.bootstrapAppConfig?.enableCompanyFeature ?? false;
-    }
-    // Permission Mode
-    getPermissionMode() {
-        return _helpers.PermissionModeHelper.fromString(this.options.bootstrapAppConfig?.permissionMode);
-    }
-    isRbacEnabled() {
-        const mode = this.getPermissionMode();
-        return mode === _permissiontypeenum.IAMPermissionMode.RBAC || mode === _permissiontypeenum.IAMPermissionMode.FULL;
-    }
-    isDirectPermissionEnabled() {
-        const mode = this.getPermissionMode();
-        return mode === _permissiontypeenum.IAMPermissionMode.DIRECT || mode === _permissiontypeenum.IAMPermissionMode.FULL;
-    }
-    // Options
-    getOptions() {
-        return this.options;
-    }
-    constructor(injectedOptions){
-        _define_property(this, "options", void 0);
-        this.options = injectedOptions ?? {
-            global: false,
-            includeController: false
-        };
-    }
-};
-IAMConfigService = _ts_decorate([
-    (0, _common.Injectable)(),
-    _ts_param(0, (0, _common.Optional)()),
-    _ts_param(0, (0, _common.Inject)(_iamconstants.IAM_MODULE_OPTIONS)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _iammoduleoptionsinterface.IAMModuleOptions === "undefined" ? Object : _iammoduleoptionsinterface.IAMModuleOptions
-    ])
-], IAMConfigService);

package/cjs/services/iam-config.service.spec.js

@@ -1,110 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _permissiontypeenum = require("../enums/permission-type.enum");
-const _iamconfigservice = require("./iam-config.service");
-describe('IAMConfigService', ()=>{
-    describe('with no injected options (defaults)', ()=>{
-        let service;
-        beforeEach(()=>{
-            service = new _iamconfigservice.IAMConfigService();
-        });
-        it('defaults to single database mode', ()=>{
-            expect(service.getDatabaseMode()).toBe('single');
-            expect(service.isMultiTenant()).toBe(false);
-        });
-        it('defaults company feature to disabled', ()=>{
-            expect(service.isCompanyFeatureEnabled()).toBe(false);
-        });
-        it('defaults permission mode to FULL', ()=>{
-            expect(service.getPermissionMode()).toBe(_permissiontypeenum.IAMPermissionMode.FULL);
-            expect(service.isRbacEnabled()).toBe(true);
-            expect(service.isDirectPermissionEnabled()).toBe(true);
-        });
-        it('returns the fallback options object from getOptions', ()=>{
-            expect(service.getOptions()).toEqual({
-                global: false,
-                includeController: false
-            });
-        });
-    });
-    describe('with injected options', ()=>{
-        function buildService(overrides) {
-            const options = {
-                global: false,
-                includeController: false,
-                bootstrapAppConfig: {
-                    databaseMode: 'single',
-                    enableCompanyFeature: false,
-                    ...overrides
-                }
-            };
-            return new _iamconfigservice.IAMConfigService(options);
-        }
-        it('reports multi-tenant mode when configured', ()=>{
-            const service = buildService({
-                databaseMode: 'multi-tenant'
-            });
-            expect(service.getDatabaseMode()).toBe('multi-tenant');
-            expect(service.isMultiTenant()).toBe(true);
-        });
-        it('reports company feature enabled when configured', ()=>{
-            const service = buildService({
-                enableCompanyFeature: true
-            });
-            expect(service.isCompanyFeatureEnabled()).toBe(true);
-        });
-        describe('permission mode: RBAC', ()=>{
-            let service;
-            beforeEach(()=>{
-                service = buildService({
-                    permissionMode: 'RBAC'
-                });
-            });
-            it('enables RBAC but not direct permissions', ()=>{
-                expect(service.getPermissionMode()).toBe(_permissiontypeenum.IAMPermissionMode.RBAC);
-                expect(service.isRbacEnabled()).toBe(true);
-                expect(service.isDirectPermissionEnabled()).toBe(false);
-            });
-        });
-        describe('permission mode: DIRECT', ()=>{
-            let service;
-            beforeEach(()=>{
-                service = buildService({
-                    permissionMode: 'DIRECT'
-                });
-            });
-            it('enables direct permissions but not RBAC', ()=>{
-                expect(service.getPermissionMode()).toBe(_permissiontypeenum.IAMPermissionMode.DIRECT);
-                expect(service.isRbacEnabled()).toBe(false);
-                expect(service.isDirectPermissionEnabled()).toBe(true);
-            });
-        });
-        describe('permission mode: FULL', ()=>{
-            let service;
-            beforeEach(()=>{
-                service = buildService({
-                    permissionMode: 'FULL'
-                });
-            });
-            it('enables both RBAC and direct permissions', ()=>{
-                expect(service.getPermissionMode()).toBe(_permissiontypeenum.IAMPermissionMode.FULL);
-                expect(service.isRbacEnabled()).toBe(true);
-                expect(service.isDirectPermissionEnabled()).toBe(true);
-            });
-        });
-        it('returns the exact injected options object from getOptions', ()=>{
-            const options = {
-                global: true,
-                includeController: true,
-                bootstrapAppConfig: {
-                    databaseMode: 'single',
-                    enableCompanyFeature: true
-                }
-            };
-            const service = new _iamconfigservice.IAMConfigService(options);
-            expect(service.getOptions()).toBe(options);
-        });
-    });
-});

package/cjs/services/iam-datasource.service.js

@@ -1,129 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "IAMDataSourceService", {
-    enumerable: true,
-    get: function() {
-        return IAMDataSourceService;
-    }
-});
-const _modules = require("@flusys/nestjs-shared/modules");
-const _common = require("@nestjs/common");
-const _core = require("@nestjs/core");
-const _express = require("express");
-const _helpers = require("../helpers");
-const _iamconfigservice = require("./iam-config.service");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _getRequireWildcardCache(nodeInterop) {
-    if (typeof WeakMap !== "function") return null;
-    var cacheBabelInterop = new WeakMap();
-    var cacheNodeInterop = new WeakMap();
-    return (_getRequireWildcardCache = function(nodeInterop) {
-        return nodeInterop ? cacheNodeInterop : cacheBabelInterop;
-    })(nodeInterop);
-}
-function _interop_require_wildcard(obj, nodeInterop) {
-    if (!nodeInterop && obj && obj.__esModule) {
-        return obj;
-    }
-    if (obj === null || typeof obj !== "object" && typeof obj !== "function") {
-        return {
-            default: obj
-        };
-    }
-    var cache = _getRequireWildcardCache(nodeInterop);
-    if (cache && cache.has(obj)) {
-        return cache.get(obj);
-    }
-    var newObj = {
-        __proto__: null
-    };
-    var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor;
-    for(var key in obj){
-        if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) {
-            var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null;
-            if (desc && (desc.get || desc.set)) {
-                Object.defineProperty(newObj, key, desc);
-            } else {
-                newObj[key] = obj[key];
-            }
-        }
-    }
-    newObj.default = obj;
-    if (cache) {
-        cache.set(obj, newObj);
-    }
-    return newObj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-let IAMDataSourceService = class IAMDataSourceService extends _modules.MultiTenantDataSourceService {
-    static buildParentOptions(options) {
-        return {
-            bootstrapAppConfig: options.bootstrapAppConfig,
-            defaultDatabaseConfig: options.config?.defaultDatabaseConfig,
-            tenantDefaultDatabaseConfig: options.config?.tenantDefaultDatabaseConfig,
-            tenants: options.config?.tenants
-        };
-    }
-    getEnableCompanyFeatureForTenant(tenant) {
-        return tenant?.enableCompanyFeature ?? this.configService.isCompanyFeatureEnabled();
-    }
-    async getIAMEntities() {
-        const { getIAMEntitiesByConfig } = await Promise.resolve().then(()=>/*#__PURE__*/ _interop_require_wildcard(require("../entities")));
-        const enableCompanyFeature = this.getEnableCompanyFeatureForTenant(this.getCurrentTenant() ?? undefined);
-        const permissionMode = _helpers.PermissionModeHelper.toString(this.configService.getPermissionMode());
-        return getIAMEntitiesByConfig(enableCompanyFeature, permissionMode);
-    }
-    async createDataSourceFromConfig(config) {
-        const entities = await this.getIAMEntities();
-        return await super.createDataSourceFromConfig(config, entities);
-    }
-    constructor(configService, request){
-        super(IAMDataSourceService.buildParentOptions(configService.getOptions()), request), _define_property(this, "configService", void 0), this.configService = configService;
-    }
-};
-_define_property(IAMDataSourceService, "tenantConnections", new Map());
-_define_property(IAMDataSourceService, "singleDataSource", null);
-_define_property(IAMDataSourceService, "tenantsRegistry", new Map());
-_define_property(IAMDataSourceService, "initialized", false);
-_define_property(IAMDataSourceService, "connectionLocks", new Map());
-_define_property(IAMDataSourceService, "singleConnectionLock", null);
-IAMDataSourceService = _ts_decorate([
-    (0, _common.Injectable)({
-        scope: _common.Scope.REQUEST
-    }),
-    _ts_param(0, (0, _common.Inject)(_iamconfigservice.IAMConfigService)),
-    _ts_param(1, (0, _common.Optional)()),
-    _ts_param(1, (0, _common.Inject)(_core.REQUEST)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _iamconfigservice.IAMConfigService === "undefined" ? Object : _iamconfigservice.IAMConfigService,
-        typeof _express.Request === "undefined" ? Object : _express.Request
-    ])
-], IAMDataSourceService);

package/cjs/services/iam-datasource.service.spec.js

@@ -1,110 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _modules = require("@flusys/nestjs-shared/modules");
-const _actionentity = require("../entities/action.entity");
-const _useriampermissionentity = require("../entities/user-iam-permission.entity");
-const _permissionwithcompanyentity = require("../entities/permission-with-company.entity");
-const _roleentity = require("../entities/role.entity");
-const _rolewithcompanyentity = require("../entities/role-with-company.entity");
-const _iamdatasourceservice = require("./iam-datasource.service");
-describe('IAMDataSourceService', ()=>{
-    let mockConfigService;
-    beforeEach(()=>{
-        mockConfigService = {
-            isCompanyFeatureEnabled: jest.fn().mockReturnValue(false),
-            getPermissionMode: jest.fn(),
-            getOptions: jest.fn().mockReturnValue({
-                global: false,
-                includeController: false
-            })
-        };
-    });
-    function buildService(request) {
-        return new _iamdatasourceservice.IAMDataSourceService(mockConfigService, request);
-    }
-    describe('getEnableCompanyFeatureForTenant', ()=>{
-        it('uses the tenant override when defined (true)', ()=>{
-            const service = buildService();
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            expect(service.getEnableCompanyFeatureForTenant({
-                enableCompanyFeature: true
-            })).toBe(true);
-        });
-        it('uses the tenant override when defined (false)', ()=>{
-            const service = buildService();
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            expect(service.getEnableCompanyFeatureForTenant({
-                enableCompanyFeature: false
-            })).toBe(false);
-        });
-        it('falls back to the config service when the tenant has no override', ()=>{
-            const service = buildService();
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            expect(service.getEnableCompanyFeatureForTenant({})).toBe(true);
-        });
-        it('falls back to the config service when no tenant is provided', ()=>{
-            const service = buildService();
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            expect(service.getEnableCompanyFeatureForTenant(undefined)).toBe(true);
-        });
-    });
-    describe('getIAMEntities', ()=>{
-        it('returns Action + non-company permission + role entities for RBAC mode', async ()=>{
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            mockConfigService.getPermissionMode.mockReturnValue(1); // RBAC
-            const service = buildService();
-            const entities = await service.getIAMEntities();
-            expect(entities).toContain(_actionentity.Action);
-            expect(entities).toContain(_useriampermissionentity.UserIamPermission);
-            expect(entities).toContain(_roleentity.Role);
-            expect(entities).not.toContain(_permissionwithcompanyentity.UserIamPermissionWithCompany);
-            expect(entities).not.toContain(_rolewithcompanyentity.RoleWithCompany);
-        });
-        it('returns company-scoped entities when company feature is enabled', async ()=>{
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            mockConfigService.getPermissionMode.mockReturnValue(3); // FULL
-            const service = buildService();
-            const entities = await service.getIAMEntities();
-            expect(entities).toContain(_actionentity.Action);
-            expect(entities).toContain(_permissionwithcompanyentity.UserIamPermissionWithCompany);
-            expect(entities).toContain(_rolewithcompanyentity.RoleWithCompany);
-            expect(entities).not.toContain(_useriampermissionentity.UserIamPermission);
-            expect(entities).not.toContain(_roleentity.Role);
-        });
-        it('excludes role entities entirely in DIRECT mode', async ()=>{
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            mockConfigService.getPermissionMode.mockReturnValue(2); // DIRECT
-            const service = buildService();
-            const entities = await service.getIAMEntities();
-            expect(entities).toEqual([
-                _actionentity.Action,
-                _useriampermissionentity.UserIamPermission
-            ]);
-        });
-    });
-    describe('createDataSourceFromConfig', ()=>{
-        it('resolves IAM entities and delegates to the parent with them', async ()=>{
-            mockConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            mockConfigService.getPermissionMode.mockReturnValue(1); // RBAC
-            const service = buildService();
-            const fakeDataSource = {
-                isInitialized: true
-            };
-            const parentSpy = jest.spyOn(_modules.MultiTenantDataSourceService.prototype, 'createDataSourceFromConfig').mockResolvedValue(fakeDataSource);
-            const config = {
-                type: 'mysql',
-                host: 'localhost'
-            };
-            const result = await service.createDataSourceFromConfig(config);
-            expect(result).toBe(fakeDataSource);
-            expect(parentSpy).toHaveBeenCalledWith(config, [
-                _actionentity.Action,
-                _useriampermissionentity.UserIamPermission,
-                _roleentity.Role
-            ]);
-            parentSpy.mockRestore();
-        });
-    });
-});

package/cjs/services/index.js

@@ -1,23 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./action.service"), exports);
-_export_star(require("./iam-config.service"), exports);
-_export_star(require("./iam-datasource.service"), exports);
-_export_star(require("./permission-cache.service"), exports);
-_export_star(require("./permission.service"), exports);
-_export_star(require("./role.service"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}