@geexcode/geex-extensions-authorization 0.0.1

package/README.md

@@ -0,0 +1,28 @@
+# @geexcode/geex-extensions-authorization
+
+Frontend counterpart of backend `Geex.Extensions.Authorization`.
+
+Canonical runtime entry: `geex.authorization`.
+
+Provides:
+
+- `geex.authorization` — tenant claim check, ACL load/persist/sync
+- `AuthorizeGuard` — thin route adapter delegating to `geex.authorization`
+- `LocalStorageACLService` — thin Delon ACL adapter
+- `provideGeexAuthorization()` — register module + adapters
+
+```ts
+import { provideGeexCommon, geex } from "@geexcode/geex-angular";
+import { provideGeexAuthorization, AuthorizeGuard } from "@geexcode/geex-extensions-authorization";
+
+providers: [
+  ...provideGeexCommon(),
+  ...provideGeexAuthorization(),
+]
+
+// routes (adapter)
+canActivate: [AuthorizeGuard]
+
+// business API
+await geex.authorization.canActivate(route, state);
+```

package/dist/README.md

@@ -0,0 +1,28 @@
+# @geexcode/geex-extensions-authorization
+
+Frontend counterpart of backend `Geex.Extensions.Authorization`.
+
+Canonical runtime entry: `geex.authorization`.
+
+Provides:
+
+- `geex.authorization` — tenant claim check, ACL load/persist/sync
+- `AuthorizeGuard` — thin route adapter delegating to `geex.authorization`
+- `LocalStorageACLService` — thin Delon ACL adapter
+- `provideGeexAuthorization()` — register module + adapters
+
+```ts
+import { provideGeexCommon, geex } from "@geexcode/geex-angular";
+import { provideGeexAuthorization, AuthorizeGuard } from "@geexcode/geex-extensions-authorization";
+
+providers: [
+  ...provideGeexCommon(),
+  ...provideGeexAuthorization(),
+]
+
+// routes (adapter)
+canActivate: [AuthorizeGuard]
+
+// business API
+await geex.authorization.canActivate(route, state);
+```

package/dist/fesm2022/geexcode-geex-extensions-authorization.mjs

@@ -0,0 +1,129 @@
+import { Router } from '@angular/router';
+import { OAuthService } from 'angular-oauth2-oidc';
+import { GEEX_SUPER_ADMIN_USER_ID, geex, provideGeexModuleContribution } from '@geexcode/geex-angular';
+import json5 from 'json5';
+import * as i0 from '@angular/core';
+import { Injectable, effect, InjectionToken, makeEnvironmentProviders, Injector } from '@angular/core';
+import { ACLService } from '@delon/acl';
+
+function createAuthorizationModule(injector) {
+    const oauth = () => injector.get(OAuthService);
+    const router = () => injector.get(Router);
+    const superAdminUserId = () => injector.get(GEEX_SUPER_ADMIN_USER_ID);
+    const module = {
+        canActivate: async (_route, state) => {
+            if (!oauth().hasValidAccessToken()) {
+                return router().parseUrl(`/authentication/login?redirect_uri=${encodeURIComponent(state.url)}`);
+            }
+            const claims = oauth().getIdentityClaims();
+            if (claims?.sub === superAdminUserId()) {
+                return true;
+            }
+            const multiTenant = geex["multiTenant"];
+            const currentTenantCode = multiTenant.current()?.code ?? "";
+            const tokenTenantCode = claims?.__tenant ?? "";
+            if (tokenTenantCode === currentTenantCode) {
+                return true;
+            }
+            return router().parseUrl("/exception/403");
+        },
+        checkTenant: async (pathTenant) => {
+            return geex["multiTenant"].loadTenantData(pathTenant);
+        },
+        loadAcl: () => {
+            try {
+                return json5.parse(localStorage.getItem("acl") ?? "{}");
+            }
+            catch (error) {
+                console.error("failed to load acl from localStorage.", error);
+                return { roles: [], abilities: [], full: false };
+            }
+        },
+        persistAcl: (data) => {
+            localStorage.setItem("acl", json5.stringify(data));
+        },
+        syncAclFromAuth: async () => {
+            const authentication = geex["authentication"];
+            await authentication.init();
+            if (authentication.user() == undefined) {
+                return null;
+            }
+            return module.loadAcl();
+        },
+        init: async () => undefined,
+    };
+    return module;
+}
+
+class AuthorizeGuard {
+    async canActivate(route, state) {
+        return geex.authorization.canActivate(route, state);
+    }
+    async checkTenant(pathTenant) {
+        return geex.authorization.checkTenant(pathTenant);
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.0", ngImport: i0, type: AuthorizeGuard, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.0", ngImport: i0, type: AuthorizeGuard });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.0", ngImport: i0, type: AuthorizeGuard, decorators: [{
+            type: Injectable
+        }] });
+
+class LocalStorageACLService extends ACLService {
+    static new(injector) {
+        return new LocalStorageACLService(injector);
+    }
+    constructor(injector) {
+        super();
+        effect(async () => {
+            const data = await geex.authorization.syncAclFromAuth();
+            if (!data) {
+                return;
+            }
+            this["roles"] = data.roles ?? [];
+            this["abilities"] = data.abilities ?? [];
+            this["full"] = data.full ?? false;
+            this.change.subscribe(() => {
+                geex.authorization.persistAcl(this.data);
+            });
+            this["aclChange"].next(data);
+        });
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.0", ngImport: i0, type: LocalStorageACLService, deps: [{ token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.0", ngImport: i0, type: LocalStorageACLService });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.0", ngImport: i0, type: LocalStorageACLService, decorators: [{
+            type: Injectable
+        }], ctorParameters: () => [{ type: i0.Injector }] });
+
+const GEEX_AUTHORIZATION_OPTIONS = new InjectionToken("GEEX_AUTHORIZATION_OPTIONS");
+function provideGeexAuthorization(options = {}) {
+    return makeEnvironmentProviders([
+        { provide: GEEX_AUTHORIZATION_OPTIONS, useValue: options },
+        provideGeexModuleContribution({
+            createModules: ({ modules, injector }) => {
+                const multiTenant = modules["multiTenant"];
+                const authentication = modules["authentication"];
+                if (!multiTenant || !authentication) {
+                    throw new Error("provideGeexAuthorization() requires provideGeexMultiTenant() and provideGeexAuthentication() to be registered first");
+                }
+                return {
+                    authorization: (options.createAuthorizationModule ?? createAuthorizationModule)(injector),
+                };
+            },
+        }),
+        AuthorizeGuard,
+        {
+            provide: ACLService,
+            useFactory: (injector) => options.createAclService?.(injector) ?? LocalStorageACLService.new(injector),
+            deps: [Injector],
+        },
+    ]);
+}
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { AuthorizeGuard, GEEX_AUTHORIZATION_OPTIONS, LocalStorageACLService, createAuthorizationModule, provideGeexAuthorization };
+//# sourceMappingURL=geexcode-geex-extensions-authorization.mjs.map

package/dist/fesm2022/geexcode-geex-extensions-authorization.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"geexcode-geex-extensions-authorization.mjs","sources":["../../src/authorization.module.ts","../../src/authorize.guard.ts","../../src/local-storage-acl.service.ts","../../src/provide-geex-authorization.ts","../../src/geexcode-geex-extensions-authorization.ts"],"sourcesContent":["import { Injector } from \"@angular/core\";\nimport { ActivatedRouteSnapshot, Router, RouterStateSnapshot, UrlTree } from \"@angular/router\";\nimport { OAuthService } from \"angular-oauth2-oidc\";\nimport { geex, GEEX_SUPER_ADMIN_USER_ID, type IdentityClaims } from \"@geexcode/geex-angular\";\nimport json5 from \"json5\";\nimport type { AuthorizationAclData, AuthorizationModule } from \"./authorization.types\";\n\ntype AuthorizationMultiTenantModule = {\n  current(): { code: string } | null;\n  loadTenantData(code: string): Promise<unknown>;\n};\n\ntype AuthorizationAuthenticationModule = {\n  init(force?: boolean): Promise<unknown>;\n  user(): unknown;\n};\n\nexport function createAuthorizationModule(injector: Injector): AuthorizationModule {\n  const oauth = () => injector.get(OAuthService);\n  const router = () => injector.get(Router);\n  const superAdminUserId = () => injector.get(GEEX_SUPER_ADMIN_USER_ID);\n\n  const module: AuthorizationModule = {\n    canActivate: async (_route: ActivatedRouteSnapshot, state: RouterStateSnapshot): Promise<boolean | UrlTree> => {\n      if (!oauth().hasValidAccessToken()) {\n        return router().parseUrl(`/authentication/login?redirect_uri=${encodeURIComponent(state.url)}`);\n      }\n\n      const claims = oauth().getIdentityClaims() as IdentityClaims | null;\n      if (claims?.sub === superAdminUserId()) {\n        return true;\n      }\n\n      const multiTenant = geex[\"multiTenant\"] as AuthorizationMultiTenantModule;\n      const currentTenantCode = multiTenant.current()?.code ?? \"\";\n      const tokenTenantCode = claims?.__tenant ?? \"\";\n\n      if (tokenTenantCode === currentTenantCode) {\n        return true;\n      }\n\n      return router().parseUrl(\"/exception/403\");\n    },\n    checkTenant: async (pathTenant: string) => {\n      return (geex[\"multiTenant\"] as AuthorizationMultiTenantModule).loadTenantData(pathTenant);\n    },\n    loadAcl: () => {\n      try {\n        return json5.parse(localStorage.getItem(\"acl\") ?? \"{}\") as AuthorizationAclData;\n      } catch (error) {\n        console.error(\"failed to load acl from localStorage.\", error);\n        return { roles: [], abilities: [], full: false };\n      }\n    },\n    persistAcl: (data: AuthorizationAclData) => {\n      localStorage.setItem(\"acl\", json5.stringify(data));\n    },\n    syncAclFromAuth: async () => {\n      const authentication = geex[\"authentication\"] as AuthorizationAuthenticationModule;\n      await authentication.init();\n      if (authentication.user() == undefined) {\n        return null;\n      }\n      return module.loadAcl();\n    },\n    init: async () => undefined,\n  };\n\n  return module;\n}\n","import { Injectable } from \"@angular/core\";\nimport { ActivatedRouteSnapshot, RouterStateSnapshot, UrlTree } from \"@angular/router\";\nimport { geex } from \"@geexcode/geex-angular\";\n\n@Injectable()\nexport class AuthorizeGuard {\n  async canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot): Promise<boolean | UrlTree> {\n    return geex.authorization.canActivate(route, state);\n  }\n\n  async checkTenant(pathTenant: string) {\n    return geex.authorization.checkTenant(pathTenant);\n  }\n}\n","import { effect, Injectable, Injector } from \"@angular/core\";\nimport { ACLService } from \"@delon/acl\";\nimport { geex } from \"@geexcode/geex-angular\";\n\n@Injectable()\nexport class LocalStorageACLService extends ACLService {\n  static new(injector: Injector) {\n    return new LocalStorageACLService(injector);\n  }\n\n  constructor(injector: Injector) {\n    super();\n    effect(async () => {\n      const data = await geex.authorization.syncAclFromAuth();\n      if (!data) {\n        return;\n      }\n      this[\"roles\"] = data.roles ?? [];\n      this[\"abilities\"] = data.abilities ?? [];\n      this[\"full\"] = data.full ?? false;\n      this.change.subscribe(() => {\n        geex.authorization.persistAcl(this.data as typeof data);\n      });\n      this[\"aclChange\"].next(data);\n    });\n  }\n}\n","import { EnvironmentProviders, InjectionToken, Injector, makeEnvironmentProviders } from \"@angular/core\";\nimport { ACLService } from \"@delon/acl\";\nimport { provideGeexModuleContribution } from \"@geexcode/geex-angular\";\nimport { AuthorizeGuard } from \"./authorize.guard\";\nimport { createAuthorizationModule } from \"./authorization.module\";\nimport type { AuthorizationModule } from \"./authorization.types\";\nimport { LocalStorageACLService } from \"./local-storage-acl.service\";\n\nexport interface GeexAuthorizationOptions {\n  readonly createAuthorizationModule?: (injector: Injector) => AuthorizationModule;\n  readonly createAclService?: (injector: Injector) => ACLService;\n}\n\nexport const GEEX_AUTHORIZATION_OPTIONS = new InjectionToken<Readonly<GeexAuthorizationOptions>>(\n  \"GEEX_AUTHORIZATION_OPTIONS\",\n);\n\nexport function provideGeexAuthorization(\n  options: Readonly<GeexAuthorizationOptions> = {},\n): EnvironmentProviders {\n  return makeEnvironmentProviders([\n    { provide: GEEX_AUTHORIZATION_OPTIONS, useValue: options },\n    provideGeexModuleContribution({\n      createModules: ({ modules, injector }) => {\n        const multiTenant = modules[\"multiTenant\"];\n        const authentication = modules[\"authentication\"];\n        if (!multiTenant || !authentication) {\n          throw new Error(\n            \"provideGeexAuthorization() requires provideGeexMultiTenant() and provideGeexAuthentication() to be registered first\",\n          );\n        }\n        return {\n          authorization: (options.createAuthorizationModule ?? createAuthorizationModule)(injector),\n        };\n      },\n    }),\n    AuthorizeGuard,\n    {\n      provide: ACLService,\n      useFactory: (injector: Injector) =>\n        options.createAclService?.(injector) ?? LocalStorageACLService.new(injector),\n      deps: [Injector],\n    },\n  ]);\n}\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;;;AAiBM,SAAU,yBAAyB,CAAC,QAAkB,EAAA;IAC1D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC;AAErE,IAAA,MAAM,MAAM,GAAwB;AAClC,QAAA,WAAW,EAAE,OAAO,MAA8B,EAAE,KAA0B,KAAgC;AAC5G,YAAA,IAAI,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,EAAE;AAClC,gBAAA,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAA,mCAAA,EAAsC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA,CAAE,CAAC;YACjG;AAEA,YAAA,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,iBAAiB,EAA2B;AACnE,YAAA,IAAI,MAAM,EAAE,GAAG,KAAK,gBAAgB,EAAE,EAAE;AACtC,gBAAA,OAAO,IAAI;YACb;AAEA,YAAA,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAmC;YACzE,MAAM,iBAAiB,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE;AAC3D,YAAA,MAAM,eAAe,GAAG,MAAM,EAAE,QAAQ,IAAI,EAAE;AAE9C,YAAA,IAAI,eAAe,KAAK,iBAAiB,EAAE;AACzC,gBAAA,OAAO,IAAI;YACb;AAEA,YAAA,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC5C,CAAC;AACD,QAAA,WAAW,EAAE,OAAO,UAAkB,KAAI;YACxC,OAAQ,IAAI,CAAC,aAAa,CAAoC,CAAC,cAAc,CAAC,UAAU,CAAC;QAC3F,CAAC;QACD,OAAO,EAAE,MAAK;AACZ,YAAA,IAAI;AACF,gBAAA,OAAO,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAyB;YACjF;YAAE,OAAO,KAAK,EAAE;AACd,gBAAA,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC;AAC7D,gBAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YAClD;QACF,CAAC;AACD,QAAA,UAAU,EAAE,CAAC,IAA0B,KAAI;AACzC,YAAA,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,eAAe,EAAE,YAAW;AAC1B,YAAA,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAsC;AAClF,YAAA,MAAM,cAAc,CAAC,IAAI,EAAE;AAC3B,YAAA,IAAI,cAAc,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE;AACtC,gBAAA,OAAO,IAAI;YACb;AACA,YAAA,OAAO,MAAM,CAAC,OAAO,EAAE;QACzB,CAAC;AACD,QAAA,IAAI,EAAE,YAAY,SAAS;KAC5B;AAED,IAAA,OAAO,MAAM;AACf;;MChEa,cAAc,CAAA;AACzB,IAAA,MAAM,WAAW,CAAC,KAA6B,EAAE,KAA0B,EAAA;QACzE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC;IACrD;IAEA,MAAM,WAAW,CAAC,UAAkB,EAAA;QAClC,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,UAAU,CAAC;IACnD;uGAPW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;2GAAd,cAAc,EAAA,CAAA;;2FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B;;;ACCK,MAAO,sBAAuB,SAAQ,UAAU,CAAA;IACpD,OAAO,GAAG,CAAC,QAAkB,EAAA;AAC3B,QAAA,OAAO,IAAI,sBAAsB,CAAC,QAAQ,CAAC;IAC7C;AAEA,IAAA,WAAA,CAAY,QAAkB,EAAA;AAC5B,QAAA,KAAK,EAAE;QACP,MAAM,CAAC,YAAW;YAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE;YACvD,IAAI,CAAC,IAAI,EAAE;gBACT;YACF;YACA,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE;YAChC,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK;AACjC,YAAA,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAK;gBACzB,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAmB,CAAC;AACzD,YAAA,CAAC,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC9B,QAAA,CAAC,CAAC;IACJ;uGApBW,sBAAsB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,QAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;2GAAtB,sBAAsB,EAAA,CAAA;;2FAAtB,sBAAsB,EAAA,UAAA,EAAA,CAAA;kBADlC;;;MCSY,0BAA0B,GAAG,IAAI,cAAc,CAC1D,4BAA4B;AAGxB,SAAU,wBAAwB,CACtC,OAAA,GAA8C,EAAE,EAAA;AAEhD,IAAA,OAAO,wBAAwB,CAAC;AAC9B,QAAA,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,OAAO,EAAE;AAC1D,QAAA,6BAA6B,CAAC;YAC5B,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAI;AACvC,gBAAA,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;AAC1C,gBAAA,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;AAChD,gBAAA,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE;AACnC,oBAAA,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH;gBACH;gBACA,OAAO;oBACL,aAAa,EAAE,CAAC,OAAO,CAAC,yBAAyB,IAAI,yBAAyB,EAAE,QAAQ,CAAC;iBAC1F;YACH,CAAC;SACF,CAAC;QACF,cAAc;AACd,QAAA;AACE,YAAA,OAAO,EAAE,UAAU;AACnB,YAAA,UAAU,EAAE,CAAC,QAAkB,KAC7B,OAAO,CAAC,gBAAgB,GAAG,QAAQ,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9E,IAAI,EAAE,CAAC,QAAQ,CAAC;AACjB,SAAA;AACF,KAAA,CAAC;AACJ;;AC5CA;;AAEG;;;;"}

package/dist/index.d.ts

@@ -0,0 +1,51 @@
+import { ActivatedRouteSnapshot, RouterStateSnapshot, UrlTree } from '@angular/router';
+import { GeexModule } from '@geexcode/geex-angular';
+import * as i0 from '@angular/core';
+import { Injector, InjectionToken, EnvironmentProviders } from '@angular/core';
+import { ACLService } from '@delon/acl';
+
+interface AuthorizationAclData {
+    roles: string[];
+    abilities: Array<string | number>;
+    full: boolean;
+}
+interface AuthorizationModule extends GeexModule<{
+    canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot): Promise<boolean | UrlTree>;
+    checkTenant(pathTenant: string): Promise<unknown>;
+    syncAclFromAuth(): Promise<AuthorizationAclData | null>;
+    loadAcl(): AuthorizationAclData;
+    persistAcl(data: AuthorizationAclData): void;
+}> {
+}
+declare module "@geexcode/geex-angular" {
+    interface GeexModuleMap {
+        authorization: AuthorizationModule;
+    }
+}
+
+declare function createAuthorizationModule(injector: Injector): AuthorizationModule;
+
+declare class AuthorizeGuard {
+    canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot): Promise<boolean | UrlTree>;
+    checkTenant(pathTenant: string): Promise<unknown>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<AuthorizeGuard, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<AuthorizeGuard>;
+}
+
+declare class LocalStorageACLService extends ACLService {
+    static new(injector: Injector): LocalStorageACLService;
+    constructor(injector: Injector);
+    static ɵfac: i0.ɵɵFactoryDeclaration<LocalStorageACLService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<LocalStorageACLService>;
+}
+
+interface GeexAuthorizationOptions {
+    readonly createAuthorizationModule?: (injector: Injector) => AuthorizationModule;
+    readonly createAclService?: (injector: Injector) => ACLService;
+}
+declare const GEEX_AUTHORIZATION_OPTIONS: InjectionToken<Readonly<GeexAuthorizationOptions>>;
+declare function provideGeexAuthorization(options?: Readonly<GeexAuthorizationOptions>): EnvironmentProviders;
+
+export { AuthorizeGuard, GEEX_AUTHORIZATION_OPTIONS, LocalStorageACLService, createAuthorizationModule, provideGeexAuthorization };
+export type { AuthorizationAclData, AuthorizationModule, GeexAuthorizationOptions };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sources":["../src/authorization.types.ts","../src/authorization.module.ts","../src/authorize.guard.ts","../src/local-storage-acl.service.ts","../src/provide-geex-authorization.ts"],"mappings":";;;;;;AAGA,8BAAiB;;AAEf,eAAW,KAAK;;AAEjB;AAED,UAAM,mBAAW,SAAoB,UAAQ;AAC3C,uBAAmB,sBAAsB,SAAS,mBAAmB,GAAG,OAAO,WAAW,OAAO;qCAChE,OAAO;AACxC,uBAAmB,OAAO,CAAC,oBAAoB;eACpC,oBAAoB;AAC/B,qBAAiB,oBAAoB;;AAClC;AAEL;AACE;uBACiB,mBAAmB;AACnC;AACF;;ACJD,iBAAA,oCAA0C,QAAU,GAAA;;ACbpD,cAAA,cACa;AACL,uBAAmB,sBAAsB,SAAS,mBAAmB,GAAG,OAAO,WAAW,OAAO;qCAInE,OAAA;yCALzB,cAAc;6CAAd,cAAc;AAQ1B;;ACTD,cAAA,sBACa,mBAA+B;AAC1C,yBAAqB,QAAQ,GAAA,sBAAA;AAIjB,0BAAU,QAAQ;yCALnB,sBAAsB;6CAAtB,sBAAsB;AAqBlC;;AClBD,kCAAiB;oDACiC,QAAQ,KAAK,mBAAmB;2CACzC,QAAQ,KAAK,UAAU;AAC/D;AAED,cAAA,0BAAa,EAAA,cAA0B,CAAA,QAAA,CAAA,wBAAA;AAIvC,iBAAA,wBAAgB,WACd,QAAS,CAAA,wBAAS,IAAA,oBACjB;;;;","names":[]}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@geexcode/geex-extensions-authorization",
+  "version": "0.0.1",
+  "description": "Authorization extension for Geex Angular apps (AuthorizeGuard, ACL bridge). Aligns with Geex.Extensions.Authorization.",
+  "sideEffects": false,
+  "peerDependencies": {
+    "@angular/core": "^20.0.0",
+    "@angular/router": "^20.0.0",
+    "@delon/acl": "^20.0.0",
+    "@geexcode/geex-angular": ">=0.0.41",
+    "angular-oauth2-oidc": ">=15.0.0 <21.0.0",
+    "json5": "^2.2.3"
+  },
+  "dependencies": {
+    "tslib": "^2.6.3"
+  },
+  "files": [
+    "dist"
+  ],
+  "module": "dist/fesm2022/geexcode-geex-extensions-authorization.mjs",
+  "typings": "dist/index.d.ts",
+  "exports": {
+    "./package.json": {
+      "default": "./package.json"
+    },
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/fesm2022/geexcode-geex-extensions-authorization.mjs",
+      "default": "./dist/fesm2022/geexcode-geex-extensions-authorization.mjs"
+    }
+  },
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "ng-packagr -p ng-package.json -c tsconfig.lib.json",
+    "test": "node --test src/provide-geex-authorization.node-test.mjs",
+    "prepublishOnly": "npm run build",
+    "publish:public": "npm publish ./dist --access public"
+  },
+  "devDependencies": {
+    "@angular/compiler": "^20.0.0",
+    "@angular/compiler-cli": "^20.0.0",
+    "@angular/core": "^20.0.0",
+    "@angular/router": "^20.0.0",
+    "@delon/acl": "^20.0.1",
+    "@geexcode/geex-angular": "workspace:*",
+    "angular-oauth2-oidc": "^20.0.2",
+    "json5": "^2.2.3",
+    "ng-packagr": "^20.0.0",
+    "rimraf": "^5.0.5",
+    "typescript": "~5.8.3"
+  }
+}