@fonoster/common 0.8.64 → 0.9.3

package/dist/identity/createAuthInterceptor.js

@@ -65,11 +65,11 @@ function createAuthInterceptor(identityPublicKey, publicPath) {
         logger.verbose("checking access for accessKeyId", {
             accessKeyId,
             path,
-            hasAccess: (0, hasAccess_1.hasAccess)(decodedToken.access, path),
+            hasAccess: (0, hasAccess_1.hasAccess)(decodedToken, path),
             pathIsWorkspacePath: roles_1.workspaceAccess.includes(path),
             tokenHasAccessKeyId: (0, tokenHasAccessKeyId_1.tokenHasAccessKeyId)(token, accessKeyId)
         });
-        if (!(0, hasAccess_1.hasAccess)(decodedToken.access, path) ||
+        if (!(0, hasAccess_1.hasAccess)(decodedToken, path) ||
             (roles_1.workspaceAccess.includes(path) &&
                 !(0, tokenHasAccessKeyId_1.tokenHasAccessKeyId)(token, accessKeyId))) {
             return (0, errors_1.permissionDeniedError)(call);

package/dist/identity/hasAccess.d.ts

@@ -1,3 +1,6 @@
 import { Access } from "./types";
-declare function hasAccess(access: Access[], method: string): boolean;
+declare function hasAccess(decodedToken: {
+    access: Access[];
+    accessKeyId: string;
+}, method: string): boolean;
 export { hasAccess };

package/dist/identity/hasAccess.js

@@ -3,7 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.hasAccess = hasAccess;
 const roles_1 = require("./roles");
 // This function only checks if the role has access to the grpc method
-function hasAccess(access, method) {
-    const roleList = access.map((a) => a.role);
+function hasAccess(decodedToken, method) {
+    const { access, accessKeyId } = decodedToken;
+    const roleList = accessKeyId.startsWith("US") // US is for user; user tokens only have USER role
+        ? [roles_1.USER_ROLE]
+        : access.map((a) => a.role);
     return roleList.some((r) => roles_1.roles.find((role) => role.name === r && role.access.includes(method)));
 }

package/dist/identity/roles.d.ts

@@ -1,5 +1,6 @@
 import { Role } from "./types";
 declare const VOICE_SERVICE_ROLE = "VOICE_SERVICE";
+declare const USER_ROLE = "USER";
 declare const workspaceAccess: string[];
 declare const roles: Role[];
-export { VOICE_SERVICE_ROLE, roles, workspaceAccess };
+export { USER_ROLE, VOICE_SERVICE_ROLE, roles, workspaceAccess };

package/dist/identity/roles.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.workspaceAccess = exports.roles = exports.VOICE_SERVICE_ROLE = void 0;
+exports.workspaceAccess = exports.roles = exports.VOICE_SERVICE_ROLE = exports.USER_ROLE = void 0;
 /* eslint-disable sonarjs/no-duplicate-string */
 /*
  * Copyright (C) 2025 by Fonoster Inc (https://fonoster.com)
@@ -23,6 +23,10 @@ exports.workspaceAccess = exports.roles = exports.VOICE_SERVICE_ROLE = void 0;
 const types_1 = require("@fonoster/types");
 const VOICE_SERVICE_ROLE = "VOICE_SERVICE";
 exports.VOICE_SERVICE_ROLE = VOICE_SERVICE_ROLE;
+// The WorkspaceRoleEnum.USER is the same as the USER_ROLE constant
+// We will split this two roles in the future
+const USER_ROLE = "USER";
+exports.USER_ROLE = USER_ROLE;
 const workspaceAccess = [
     "/fonoster.applications.v1beta2.Applications/CreateApplication",
     "/fonoster.applications.v1beta2.Applications/UpdateApplication",
@@ -101,7 +105,7 @@ const roles = [
         access: [...fullIdentityAccess, ...workspaceAccess]
     },
     {
-        name: types_1.WorkspaceRoleEnum.USER,
+        name: USER_ROLE,
         description: "Access to User and Workspace endpoints",
         access: [
             "/fonoster.identity.v1beta2.Identity/GetUser",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fonoster/common",
-  "version": "0.8.64",
+  "version": "0.9.3",
   "description": "Common library for Fonoster projects",
   "author": "Pedro Sanders <psanders@fonoster.com>",
   "homepage": "https://github.com/fonoster/fonoster#readme",
@@ -18,7 +18,7 @@
     "clean": "rimraf ./dist node_modules tsconfig.tsbuildinfo"
   },
   "dependencies": {
-    "@fonoster/logger": "^0.8.59",
+    "@fonoster/logger": "^0.9.0",
     "@grpc/grpc-js": "~1.10.6",
     "@grpc/proto-loader": "^0.7.12",
     "@influxdata/influxdb-client": "^1.35.0",
@@ -48,5 +48,5 @@
   "devDependencies": {
     "@types/nodemailer": "^6.4.14"
   },
-  "gitHead": "5f7a501c597926252e5fca8aa12818e2db70de16"
+  "gitHead": "b80bab4b14b87036525de21c90494a1b5c6fa02d"
 }