@fonoster/authz 0.8.17 → 0.8.19

package/dist/index.d.ts

@@ -1,4 +1,4 @@
 export * from "./server";
 export * from "./client";
-export * from "./createCheckMethodAuthorized";
+export * from "./makeCheckMethodAuthorized";
 export * from "./types";

package/dist/index.js

@@ -34,5 +34,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
  */
 __exportStar(require("./server"), exports);
 __exportStar(require("./client"), exports);
-__exportStar(require("./createCheckMethodAuthorized"), exports);
+__exportStar(require("./makeCheckMethodAuthorized"), exports);
 __exportStar(require("./types"), exports);

package/dist/{createCheckMethodAuthorized.d.ts → makeCheckMethodAuthorized.d.ts}

@@ -6,7 +6,7 @@ import { ServerInterceptingCall } from "@grpc/grpc-js";
  * @param {string} authzServer - The public key to validate the token
  * @return {Function} - The gRPC interceptor
  */
-declare function createCheckMethodAuthorized(authzServer: string, methods: string[]): (methodDefinition: {
+declare function makeCheckMethodAuthorized(authzServer: string, methods: string[]): (methodDefinition: {
     path: string;
 }, call: ServerInterceptingCall) => ServerInterceptingCall;
-export { createCheckMethodAuthorized };
+export { makeCheckMethodAuthorized };

package/dist/{createCheckMethodAuthorized.js → makeCheckMethodAuthorized.js}

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createCheckMethodAuthorized = createCheckMethodAuthorized;
+exports.makeCheckMethodAuthorized = makeCheckMethodAuthorized;
 /*
  * Copyright (C) 2024 by Fonoster Inc (https://fonoster.com)
  * http://github.com/fonoster/fonoster
@@ -19,6 +19,7 @@ exports.createCheckMethodAuthorized = createCheckMethodAuthorized;
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+const common_1 = require("@fonoster/common");
 const logger_1 = require("@fonoster/logger");
 const grpc_js_1 = require("@grpc/grpc-js");
 const AuthzClient_1 = require("./client/AuthzClient");
@@ -31,7 +32,7 @@ const logger = (0, logger_1.getLogger)({ service: "authz", filePath: __filename
  * @param {string} authzServer - The public key to validate the token
  * @return {Function} - The gRPC interceptor
  */
-function createCheckMethodAuthorized(authzServer, methods) {
+function makeCheckMethodAuthorized(authzServer, methods) {
     logger.verbose("creating check method authorized interceptor", {
         authzServer,
         methods
@@ -54,23 +55,25 @@ function createCheckMethodAuthorized(authzServer, methods) {
         }
         logger.silly("checking if method is authorized", { method });
         const accessKeyId = (0, identity_1.getAccessKeyIdFromCall)(call);
-        authz
-            .checkMethodAuthorized({
-            accessKeyId,
-            method
-        })
-            .then(() => {
-            call.sendMessage({ authorized: true }, () => {
-                logger.verbose("method is authorized", { method, accessKeyId });
-            });
-        })
-            .catch((error) => {
-            logger.verbose("method is not authorized", { method, accessKeyId });
-            call.sendStatus({
-                code: grpc_js_1.status.PERMISSION_DENIED,
-                details: `Method ${method} is not authorized for accessKeyId ${accessKeyId}`
-            });
+        return new grpc_js_1.ServerInterceptingCall(call, {
+            start: async (next) => {
+                try {
+                    await authz.checkMethodAuthorized({
+                        accessKeyId,
+                        method
+                    });
+                    logger.verbose("method authorized by external service", { method, accessKeyId });
+                    next();
+                }
+                catch (error) {
+                    logger.verbose("method unauthorized by external service", { method, accessKeyId });
+                    (0, common_1.createInterceptingCall)({
+                        call,
+                        code: grpc_js_1.status.PERMISSION_DENIED,
+                        details: `Method '${method}' unauthorized by external service - accessKeyId ${accessKeyId}`
+                    });
+                }
+            }
         });
-        return call;
     };
 }

package/dist/server/AuthzServer.js

@@ -75,8 +75,7 @@ class AuthzServer {
             const server = new grpc.Server();
             server.addService(serviceDefinition_1.serviceDefinition, {
                 checkSessionAuthorized: async (call, callback) => {
-                    logger.verbose("checkSessionAuthorized called");
-                    logger.verbose(JSON.stringify(call.request));
+                    logger.verbose("checkSessionAuthorized called", call.request);
                     try {
                         const isAuthorized = await handler.checkSessionAuthorized(call.request);
                         if (isAuthorized) {
@@ -98,8 +97,7 @@ class AuthzServer {
                     }
                 },
                 checkMethodAuthorized: async (call, callback) => {
-                    logger.verbose("checkMethodAuthorized called");
-                    logger.verbose(JSON.stringify(call.request));
+                    logger.verbose("checkMethodAuthorized called", call.request);
                     try {
                         const isAuthorized = await handler.checkMethodAuthorized(call.request);
                         if (isAuthorized) {
@@ -121,8 +119,7 @@ class AuthzServer {
                     }
                 },
                 addBillingMeterEvent: async (call, callback) => {
-                    logger.verbose("addBillingMeterEvent called");
-                    logger.verbose(JSON.stringify(call.request));
+                    logger.verbose("addBillingMeterEvent called", call.request);
                     try {
                         const request = {
                             accessKeyId: call.request.accessKeyId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fonoster/authz",
-  "version": "0.8.17",
+  "version": "0.8.19",
   "description": "Authorization module for Fonoster",
   "author": "Pedro Sanders <psanders@fonoster.com>",
   "homepage": "https://github.com/fonoster/fonoster#readme",
@@ -26,9 +26,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@fonoster/common": "^0.8.17",
-    "@fonoster/identity": "^0.8.17",
-    "@fonoster/logger": "^0.8.17",
+    "@fonoster/common": "^0.8.18",
+    "@fonoster/identity": "^0.8.18",
+    "@fonoster/logger": "^0.8.18",
     "@grpc/grpc-js": "~1.10.6",
     "deepmerge": "^4.3.1",
     "grpc-health-check": "^2.0.2"
@@ -40,5 +40,5 @@
   "bugs": {
     "url": "https://github.com/fonoster/fonoster/issues"
   },
-  "gitHead": "eac9001f42d1d4fc953488c936cc049da39661ae"
+  "gitHead": "3e9b9905b215acd90511512bce1dd42f9897f2a6"
 }