@gennext/lb-infra 0.2.2 → 0.3.0

package/dist/components/authenticate/services/oauth2.service.js

@@ -0,0 +1,226 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var OAuth2Service_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2Service = void 0;
+const applications_1 = require("../../../base/applications");
+const common_1 = require("../../../common");
+const helpers_1 = require("../../../helpers");
+const utilities_1 = require("../../../utilities");
+const core_1 = require("@loopback/core");
+const oauth2_server_1 = require("@node-oauth/oauth2-server");
+const services_1 = require("../../../base/services");
+const common_2 = require("../common");
+const oauth2_handlers_1 = require("../oauth2-handlers");
+const repositories_1 = require("../repositories");
+let OAuth2Service = OAuth2Service_1 = class OAuth2Service extends services_1.BaseService {
+    constructor(application, handler, oauth2ClientRepository) {
+        super({ scope: OAuth2Service_1.name });
+        this.application = application;
+        this.handler = handler;
+        this.oauth2ClientRepository = oauth2ClientRepository;
+        this.aes = helpers_1.AES.withAlgorithm('aes-256-cbc');
+        this.networkRequest = new helpers_1.AxiosNetworkRequest({
+            name: 'OAuth2Request',
+            networkOptions: {},
+        });
+    }
+    // --------------------------------------------------------------------------------
+    encryptClientToken(opts) {
+        const { clientId, clientSecret } = opts;
+        const applicationSecret = helpers_1.applicationEnvironment.get(common_1.EnvironmentKeys.APP_ENV_APPLICATION_SECRET);
+        return this.aes.encrypt([clientId, clientSecret].join('_'), applicationSecret);
+    }
+    // --------------------------------------------------------------------------------
+    decryptClientToken(opts) {
+        const { token } = opts;
+        const applicationSecret = helpers_1.applicationEnvironment.get(common_1.EnvironmentKeys.APP_ENV_APPLICATION_SECRET);
+        const decrypted = this.aes.decrypt(token, applicationSecret, { doThrow: false });
+        const [clientId, clientSecret] = decrypted.split('_');
+        this.logger.debug('[decryptClientToken] Token: %s | ClientId: %s', clientId, token);
+        if (!clientId || !clientSecret) {
+            this.logger.error('[decryptClientToken] Failed to decrypt token: %s', token);
+            throw (0, utilities_1.getError)({ message: 'Failed to decryptClientToken' });
+        }
+        return { clientId, clientSecret };
+    }
+    // --------------------------------------------------------------------------------
+    getOAuth2RequestPath(opts) {
+        const { clientId, clientSecret, redirectUrl, scope } = opts;
+        this.logger.debug('[OAuth2 Scopes] Generating request path with scopes: %s', scope);
+        return new Promise((resolve, reject) => {
+            this.oauth2ClientRepository
+                .findOne({ where: { ...opts }, fields: ['id', 'endpoints'] })
+                .then(client => {
+                if (!client) {
+                    throw (0, utilities_1.getError)({
+                        message: `[getOAuth2RequestPath] Client not found!`,
+                    });
+                }
+                if (!client?.endpoints?.redirectUrls?.includes(redirectUrl)) {
+                    throw (0, utilities_1.getError)({
+                        message: `[getOAuth2RequestPath] Invalid redirectUrl!`,
+                    });
+                }
+                const basePath = helpers_1.applicationEnvironment.get(common_1.EnvironmentKeys.APP_ENV_SERVER_BASE_PATH) ?? '';
+                const applicationSecret = helpers_1.applicationEnvironment.get(common_1.EnvironmentKeys.APP_ENV_APPLICATION_SECRET);
+                if (!applicationSecret) {
+                    throw (0, utilities_1.getError)({
+                        message: `[getOAuth2RequestPath] Invalid applicationSecret!`,
+                    });
+                }
+                const urlParam = new URLSearchParams();
+                const requestToken = this.aes.encrypt([clientId, clientSecret].join('_'), applicationSecret);
+                urlParam.set('c', encodeURIComponent(requestToken));
+                if (redirectUrl) {
+                    urlParam.set('r', encodeURIComponent(redirectUrl));
+                }
+                if (scope) {
+                    urlParam.set('scope', encodeURIComponent(scope));
+                }
+                resolve({
+                    requestPath: `${basePath}/oauth2/auth?${urlParam.toString()}`,
+                });
+            })
+                .catch(reject);
+        });
+    }
+    // --------------------------------------------------------------------------------
+    generateToken(opts) {
+        const { request, response } = opts;
+        return this.handler.token(new oauth2_server_1.Request({
+            ...request,
+            headers: request.headers ?? {},
+            method: request.method ?? 'get',
+            query: request.query ?? {},
+        }), new oauth2_server_1.Response(response));
+    }
+    // --------------------------------------------------------------------------------
+    authorize(opts) {
+        const { request, response } = opts;
+        return this.handler.authorize(new oauth2_server_1.Request({
+            ...request,
+            headers: request.headers ?? {},
+            method: request.method ?? 'get',
+            query: request.query ?? {},
+        }), new oauth2_server_1.Response(response));
+    }
+    // --------------------------------------------------------------------------------
+    async doOAuth2(opts) {
+        const { context, authServiceKey, signInRequest, redirectUrl, scopes } = opts;
+        const authService = this.application.getSync(authServiceKey);
+        const signInRs = await authService.signIn(signInRequest);
+        const tokenValue = signInRs?.token?.value;
+        if (!tokenValue) {
+            throw (0, utilities_1.getError)({ message: `[auth] Failed to get token value!` });
+        }
+        this.logger.debug('[doOAuth2] SignIn successful | Scopes: %s', scopes?.join(' '));
+        const authorizationCodeRequest = new oauth2_server_1.Request(context.request);
+        authorizationCodeRequest.body = {
+            client_id: signInRequest.clientId, // eslint-disable-line @typescript-eslint/naming-convention
+            response_type: 'code', // eslint-disable-line @typescript-eslint/naming-convention
+            grant_type: 'authorization_code', // eslint-disable-line @typescript-eslint/naming-convention
+            scope: scopes && scopes.length > 0 ? scopes.join(' ') : '',
+            access_token: tokenValue, // eslint-disable-line @typescript-eslint/naming-convention
+            redirect_uri: redirectUrl, // eslint-disable-line @typescript-eslint/naming-convention
+        };
+        const authorizationCodeRs = await this.authorize({
+            request: authorizationCodeRequest,
+            response: new oauth2_server_1.Response(context.response),
+        });
+        const client = await this.oauth2ClientRepository.findOne({
+            where: { clientId: signInRequest.clientId },
+            fields: ['id', 'clientId', 'clientSecret'],
+        });
+        if (!client) {
+            throw (0, utilities_1.getError)({ message: `[auth] Invalid client to create auth request!` });
+        }
+        const oauth2TokenRequest = new oauth2_server_1.Request(context.request);
+        oauth2TokenRequest.body = {
+            client_id: client.clientId, // eslint-disable-line @typescript-eslint/naming-convention
+            client_secret: client.clientSecret, // eslint-disable-line @typescript-eslint/naming-convention
+            code: authorizationCodeRs.authorizationCode,
+            grant_type: 'authorization_code', // eslint-disable-line @typescript-eslint/naming-convention
+        };
+        if (redirectUrl) {
+            oauth2TokenRequest.body.redirect_uri = redirectUrl;
+        }
+        const oauth2TokenRs = await this.generateToken({
+            request: oauth2TokenRequest,
+            response: new oauth2_server_1.Response(context.response),
+        });
+        return {
+            redirectUrl: authorizationCodeRs.redirectUri,
+            oauth2TokenRs,
+        };
+    }
+    // --------------------------------------------------------------------------------
+    async doClientCallback(opts) {
+        const { clientToken, oauth2Token, useImplicitGrant } = opts;
+        const { accessToken, authorizationCode, accessTokenExpiresAt, client, user } = oauth2Token;
+        if (!client) {
+            this.logger.error('[doClientCallback] Invalid client | Client: %j', client);
+            return;
+        }
+        const callbackUrls = client?.callbackUrls ?? [];
+        if (!callbackUrls.length) {
+            this.logger.error('[doClientCallback] No client callbackUrls');
+            return;
+        }
+        const payload = {
+            c: clientToken,
+            authorizationCode,
+            accessTokenExpiresAt,
+            provider: client.provider,
+            user: Object.assign({}, user),
+        };
+        if (useImplicitGrant) {
+            Object.assign(payload, { accessToken });
+        }
+        const networkService = this.networkRequest.getNetworkService();
+        const tasks = callbackUrls.map(callbackUrl => {
+            return () => {
+                return new Promise((resolve, reject) => {
+                    const body = Object.assign({}, payload);
+                    networkService
+                        .send({
+                        method: 'POST',
+                        url: callbackUrl,
+                        body,
+                        headers: { ['content-type']: 'application/x-www-form-urlencoded' },
+                    })
+                        .then(rs => {
+                        this.logger.info('[doClientCallback] Successfull to callback | Url: %s', callbackUrl);
+                        resolve(rs.data);
+                    })
+                        .catch(error => {
+                        this.logger.error('[doClientCallback] Failed to callback | Url: %s | Error: %s', callbackUrl, error);
+                        reject(error);
+                    });
+                });
+            };
+        });
+        await (0, utilities_1.executePromiseWithLimit)({ tasks, limit: 5 });
+    }
+};
+exports.OAuth2Service = OAuth2Service;
+exports.OAuth2Service = OAuth2Service = OAuth2Service_1 = __decorate([
+    __param(0, (0, core_1.inject)(core_1.CoreBindings.APPLICATION_INSTANCE)),
+    __param(1, (0, core_1.inject)(common_2.AuthenticateKeys.OAUTH2_HANDLER)),
+    __param(2, (0, core_1.inject)('repositories.OAuth2ClientRepository')),
+    __metadata("design:paramtypes", [applications_1.BaseApplication,
+        oauth2_handlers_1.OAuth2Handler,
+        repositories_1.OAuth2ClientRepository])
+], OAuth2Service);
+//# sourceMappingURL=oauth2.service.js.map

package/dist/components/authenticate/services/oauth2.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.service.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/oauth2.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAsD;AACtD,qCAA2C;AAC3C,uCAA6E;AAC7E,2CAAgE;AAChE,yCAAsD;AAEtD,6DAAqE;AAErE,8CAA8C;AAC9C,sCAA0E;AAC1E,wDAAmD;AACnD,kDAAyD;AAEzD,IAAa,aAAa,qBAA1B,MAAa,aAAc,SAAQ,sBAAW;IAI5C,YAEE,WAAoC,EACK,OAA8B,EAEvE,sBAAsD;QAEtD,KAAK,CAAC,EAAE,KAAK,EAAE,eAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QAL7B,gBAAW,GAAX,WAAW,CAAiB;QACa,YAAO,GAAP,OAAO,CAAe;QAE/D,2BAAsB,GAAtB,sBAAsB,CAAwB;QARhD,QAAG,GAAG,aAAG,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAY7C,IAAI,CAAC,cAAc,GAAG,IAAI,6BAAmB,CAAC;YAC5C,IAAI,EAAE,eAAe;YACrB,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,kBAAkB,CAAC,IAAgD;QACjE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QACxC,MAAM,iBAAiB,GAAG,gCAAsB,CAAC,GAAG,CAClD,wBAAe,CAAC,0BAA0B,CAC3C,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACjF,CAAC;IAED,mFAAmF;IACnF,kBAAkB,CAAC,IAAuB;QACxC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,iBAAiB,GAAG,gCAAsB,CAAC,GAAG,CAClD,wBAAe,CAAC,0BAA0B,CAC3C,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEpF,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;IAED,mFAAmF;IACnF,oBAAoB,CAAC,IAKpB;QACC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;QAEpF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,sBAAsB;iBACxB,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;iBAC5D,IAAI,CAAC,MAAM,CAAC,EAAE;gBACb,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAA,oBAAQ,EAAC;wBACb,OAAO,EAAE,0CAA0C;qBACpD,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5D,MAAM,IAAA,oBAAQ,EAAC;wBACb,OAAO,EAAE,6CAA6C;qBACvD,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,QAAQ,GACZ,gCAAsB,CAAC,GAAG,CAAS,wBAAe,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC;gBACrF,MAAM,iBAAiB,GAAG,gCAAsB,CAAC,GAAG,CAClD,wBAAe,CAAC,0BAA0B,CAC3C,CAAC;gBAEF,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,MAAM,IAAA,oBAAQ,EAAC;wBACb,OAAO,EAAE,mDAAmD;qBAC7D,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;gBAEvC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CACnC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAClC,iBAAiB,CAClB,CAAC;gBACF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAEpD,IAAI,WAAW,EAAE,CAAC;oBAChB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnD,CAAC;gBAED,OAAO,CAAC;oBACN,WAAW,EAAE,GAAG,QAAQ,gBAAgB,QAAQ,CAAC,QAAQ,EAAE,EAAE;iBAC9D,CAAC,CAAC;YACL,CAAC,CAAC;iBACD,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,aAAa,CAAC,IAA8C;QAC1D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CACvB,IAAI,uBAAO,CAAC;YACV,GAAG,OAAO;YACV,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;SAC3B,CAAC,EACF,IAAI,wBAAQ,CAAC,QAAQ,CAAC,CACvB,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,SAAS,CAAC,IAA8C;QACtD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAC3B,IAAI,uBAAO,CAAC;YACV,GAAG,OAAO;YACV,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;SAC3B,CAAC,EACF,IAAI,wBAAQ,CAAC,QAAQ,CAAC,CACvB,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,QAAQ,CAAC,IAMd;QACC,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAE7E,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAe,cAAc,CAAC,CAAC;QAE3E,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAClF,MAAM,wBAAwB,GAAG,IAAI,uBAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,wBAAwB,CAAC,IAAI,GAAG;YAC9B,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,2DAA2D;YAC9F,aAAa,EAAE,MAAM,EAAE,2DAA2D;YAClF,UAAU,EAAE,oBAAoB,EAAE,2DAA2D;YAC7F,KAAK,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;YAC1D,YAAY,EAAE,UAAU,EAAE,2DAA2D;YACrF,YAAY,EAAE,WAAW,EAAE,2DAA2D;SACvF,CAAC;QAEF,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YAC/C,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,IAAI,wBAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,uBAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,kBAAkB,CAAC,IAAI,GAAG;YACxB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,2DAA2D;YACvF,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,2DAA2D;YAC/F,IAAI,EAAE,mBAAmB,CAAC,iBAAiB;YAC3C,UAAU,EAAE,oBAAoB,EAAE,2DAA2D;SAC9F,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YAChB,kBAAkB,CAAC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QACrD,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YAC7C,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,IAAI,wBAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;SACzC,CAAC,CAAC;QAEH,OAAO;YACL,WAAW,EAAE,mBAAmB,CAAC,WAAW;YAC5C,aAAa;SACd,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,gBAAgB,CAAC,IAItB;QACC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;QAC5D,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC;QAE3F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE,MAAM,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAkB,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG;YACd,CAAC,EAAE,WAAW;YACd,iBAAiB;YACjB,oBAAoB;YACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;SAC9B,CAAC;QACF,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAC;QAE/D,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC3C,OAAO,GAAG,EAAE;gBACV,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACrC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;oBACxC,cAAc;yBACX,IAAI,CAAC;wBACJ,MAAM,EAAE,MAAM;wBACd,GAAG,EAAE,WAAW;wBAChB,IAAI;wBACJ,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,mCAAmC,EAAE;qBACnE,CAAC;yBACD,IAAI,CAAC,EAAE,CAAC,EAAE;wBACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE,WAAW,CAAC,CAAC;wBACtF,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;oBACnB,CAAC,CAAC;yBACD,KAAK,CAAC,KAAK,CAAC,EAAE;wBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6DAA6D,EAC7D,WAAW,EACX,KAAK,CACN,CAAC;wBACF,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,IAAA,mCAAuB,EAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;CACF,CAAA;AAvQY,sCAAa;wBAAb,aAAa;IAKrB,WAAA,IAAA,aAAM,EAAC,mBAAY,CAAC,oBAAoB,CAAC,CAAA;IAEzC,WAAA,IAAA,aAAM,EAAC,yBAAgB,CAAC,cAAc,CAAC,CAAA;IACvC,WAAA,IAAA,aAAM,EAAC,qCAAqC,CAAC,CAAA;qCAFzB,8BAAe;QACsB,+BAAa;QAEvC,qCAAsB;GAT7C,aAAa,CAuQzB"}

package/dist/components/authenticate/services/oauth2.strategy.d.ts

@@ -0,0 +1,23 @@
+import { AxiosNetworkRequest } from '../../../helpers/network';
+import { Context } from '@loopback/core';
+import { Request } from '@loopback/rest';
+export declare const defineOAuth2Strategy: (opts: {
+    name: string;
+    requiredAuthProvider?: boolean;
+    baseURL: string;
+    authPath?: string;
+}) => {
+    new (): {
+        name: string;
+        authProvider: AxiosNetworkRequest;
+        authPath: string;
+        authenticate(request: Request): Promise<any>;
+    };
+};
+export declare const registerOAuth2Strategy: (context: Context, options: {
+    strategyName: string;
+    requiredAuthProvider?: boolean;
+    authenticateUrl: string;
+    authenticatePath?: string;
+}) => void;
+//# sourceMappingURL=oauth2.strategy.d.ts.map

package/dist/components/authenticate/services/oauth2.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.strategy.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/oauth2.strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAIzC,eAAO,MAAM,oBAAoB,GAAI,MAAM;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;;;sBAIiB,mBAAmB;kBACvB,MAAM;8BAkBY,OAAO;;CAkCtC,CAAC;AAEF,eAAO,MAAM,sBAAsB,GACjC,SAAS,OAAO,EAChB,SAAS;IACP,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,SASF,CAAC"}

package/dist/components/authenticate/services/oauth2.strategy.js

@@ -0,0 +1,67 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerOAuth2Strategy = exports.defineOAuth2Strategy = void 0;
+const common_1 = require("../../../common");
+const network_1 = require("../../../helpers/network");
+const utilities_1 = require("../../../utilities");
+const authentication_1 = require("@loopback/authentication");
+const security_1 = require("@loopback/security");
+const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
+const defineOAuth2Strategy = (opts) => {
+    class Strategy {
+        constructor() {
+            this.name = opts.name;
+            const baseUrl = opts.baseURL;
+            if (!baseUrl || (0, isEmpty_1.default)(baseUrl)) {
+                throw (0, utilities_1.getError)({
+                    message: `[RemoteAuthenticationStrategy][DANGER] INVALID baseURL | Missing env: APP_ENV_REMOTE_AUTH_SERVER_URL`,
+                });
+            }
+            this.authPath = opts.authPath ?? '/auth/who-am-i';
+            this.authProvider = new network_1.AxiosNetworkRequest({
+                name: `${Strategy.name}_${opts.name}`,
+                networkOptions: { baseUrl },
+            });
+        }
+        async authenticate(request) {
+            const networkService = this.authProvider.getNetworkService();
+            if (opts.requiredAuthProvider &&
+                (!request.headers['x-auth-provider'] || request.headers['x-auth-provider'] !== this.name)) {
+                throw (0, utilities_1.getError)({
+                    statusCode: common_1.ResultCodes.RS_4.Unauthorized,
+                    message: 'Invaid authorization provider',
+                });
+            }
+            if (!request.headers['authorization']) {
+                throw (0, utilities_1.getError)({
+                    statusCode: common_1.ResultCodes.RS_4.Unauthorized,
+                    message: 'No authorization token',
+                });
+            }
+            const rs = await networkService.send({
+                url: this.authProvider.getRequestUrl({ paths: [this.authPath] }),
+                headers: { Authorization: request.headers['authorization'] },
+            });
+            if (rs?.data?.error) {
+                throw (0, utilities_1.getError)(rs.data.error);
+            }
+            return { ...rs?.data, [security_1.securityId]: rs?.data?.userId?.toString() };
+        }
+    }
+    return Strategy;
+};
+exports.defineOAuth2Strategy = defineOAuth2Strategy;
+const registerOAuth2Strategy = (context, options) => {
+    const remoteOAuth2Strategy = (0, exports.defineOAuth2Strategy)({
+        name: options.strategyName,
+        requiredAuthProvider: options.requiredAuthProvider,
+        baseURL: options.authenticateUrl,
+        authPath: options.authenticatePath ?? '/auth/who-am-i',
+    });
+    (0, authentication_1.registerAuthenticationStrategy)(context, remoteOAuth2Strategy);
+};
+exports.registerOAuth2Strategy = registerOAuth2Strategy;
+//# sourceMappingURL=oauth2.strategy.js.map

package/dist/components/authenticate/services/oauth2.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.strategy.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/oauth2.strategy.ts"],"names":[],"mappings":";;;;;;AAAA,qCAAuC;AACvC,+CAAwD;AACxD,2CAAuC;AACvC,6DAAkG;AAGlG,iDAAgD;AAChD,6DAAqC;AAE9B,MAAM,oBAAoB,GAAG,CAAC,IAKpC,EAAE,EAAE;IACH,MAAM,QAAQ;QAMZ;YALA,SAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YAMf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,OAAO,IAAI,IAAA,iBAAO,EAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAA,oBAAQ,EAAC;oBACb,OAAO,EAAE,sGAAsG;iBAChH,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,gBAAgB,CAAC;YAElD,IAAI,CAAC,YAAY,GAAG,IAAI,6BAAmB,CAAC;gBAC1C,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE;gBACrC,cAAc,EAAE,EAAE,OAAO,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,OAAgB;YACjC,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YAE7D,IACE,IAAI,CAAC,oBAAoB;gBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,EACzF,CAAC;gBACD,MAAM,IAAA,oBAAQ,EAAC;oBACb,UAAU,EAAE,oBAAW,CAAC,IAAI,CAAC,YAAY;oBACzC,OAAO,EAAE,+BAA+B;iBACzC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAA,oBAAQ,EAAC;oBACb,UAAU,EAAE,oBAAW,CAAC,IAAI,CAAC,YAAY;oBACzC,OAAO,EAAE,wBAAwB;iBAClC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC;gBACnC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;aAC7D,CAAC,CAAC;YAEH,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAA,oBAAQ,EAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YAED,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,qBAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;QACrE,CAAC;KACF;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AA9DW,QAAA,oBAAoB,wBA8D/B;AAEK,MAAM,sBAAsB,GAAG,CACpC,OAAgB,EAChB,OAKC,EACD,EAAE;IACF,MAAM,oBAAoB,GAAG,IAAA,4BAAoB,EAAC;QAChD,IAAI,EAAE,OAAO,CAAC,YAAY;QAC1B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,OAAO,EAAE,OAAO,CAAC,eAAe;QAChC,QAAQ,EAAE,OAAO,CAAC,gBAAgB,IAAI,gBAAgB;KACvD,CAAC,CAAC;IACH,IAAA,+CAA8B,EAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAChE,CAAC,CAAC;AAhBW,QAAA,sBAAsB,0BAgBjC"}

package/dist/components/authenticate/views/fragments/head.ejs

@@ -0,0 +1,26 @@
+<title>MINIMALTECH - Minimal Technology</title>
+<link rel="icon" href="https://minimaltek.com/favicon.ico">
+<style>
+  html {
+    color-scheme: dark;
+  }
+
+  body {
+    width: 95vw;
+    height: 95vh;
+    margin: 0;
+
+    display: flex;
+    flex-direction: column;
+    flex: 1;
+    justify-content: center;
+    align-items: center;
+  }
+  
+  #message {
+  }
+
+  #token {
+    font-style: italic;
+  }
+</style>

package/dist/components/authenticate/views/pages/auth.ejs

@@ -0,0 +1,65 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <%- include('../fragments/head'); %>
+  </head>
+  <body class="container">
+
+    <header>
+      <%- include('../fragments/header'); %>
+    </header>
+
+    <main>
+      <div id="container">
+        <h1>
+          <%- payload.title %>
+        </h1>
+
+        <br />
+        <span id="message">
+          <%- message %>
+        </span>
+        <br />
+        <br />
+
+        <% if (payload.c) { %>
+          <form id="authForm" method="post" action=<%- payload.action %>>
+            <p>
+            <label for="username">Username:</label>
+            <input type="text" name="username" />
+            </p>
+
+            <p>
+            <label for="password">Password:</label>
+            <input type="password" name="password" />
+            </p>
+
+            <input type="hidden" name="token" value=<%- payload.c %>>
+            <input type="hidden" name="redirectUrl" value=<%- payload.r %>>
+
+            <% if (payload.scope) { %>
+            <input type="hidden" name="scope" value="<%- payload.scope %>">
+            <% } %>
+
+            <p>
+            <input type="submit" id="submitBtn" value="Login">
+            </p>
+          </form>
+        <% } %>
+
+        <br />
+        <hr />
+
+        <p id="token">
+          Token: <%- payload.c %>
+        </p>
+
+      </div>
+    </main>
+
+    <footer>
+      <%- include('../fragments/footer'); %>
+    </footer>
+
+  </body>
+</html>

package/dist/components/authenticate/views/pages/error.ejs

@@ -0,0 +1,21 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <%- include('../fragments/head'); %>
+</head>
+<body class="container">
+
+<header>
+  <%- include('../fragments/header'); %>
+</header>
+
+<main>
+  <%- message %>
+</main>
+
+<footer>
+  <%- include('../fragments/footer'); %>
+</footer>
+
+</body>
+</html>

package/dist/components/authorize/adapters/adapter-builder.d.ts

@@ -0,0 +1,13 @@
+import { BaseDataSource } from '../../../base/datasources';
+import { FilteredAdapter } from 'casbin';
+import { TCasbinAdapter } from '../common';
+export declare class CasbinAdapterBuilder {
+    private static instance;
+    private constructor();
+    static getInstance(): CasbinAdapterBuilder;
+    build(opts: {
+        type: TCasbinAdapter;
+        dataSource: BaseDataSource;
+    }): FilteredAdapter;
+}
+//# sourceMappingURL=adapter-builder.d.ts.map

package/dist/components/authorize/adapters/adapter-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-builder.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/adapters/adapter-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,EAAsB,cAAc,EAAE,MAAM,WAAW,CAAC;AAI/D,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAuB;IAE9C,OAAO;IAEP,MAAM,CAAC,WAAW;IAQlB,KAAK,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,cAAc,CAAA;KAAE,GAAG,eAAe;CAiBnF"}

package/dist/components/authorize/adapters/adapter-builder.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CasbinAdapterBuilder = void 0;
+const utilities_1 = require("../../../utilities");
+const common_1 = require("../common");
+const casbin_postgres_adapter_helper_1 = require("./casbin-postgres-adapter.helper");
+const casbin_redis_adapter_helper_1 = require("./casbin-redis-adapter.helper");
+class CasbinAdapterBuilder {
+    constructor() { }
+    static getInstance() {
+        if (!this.instance) {
+            this.instance = new CasbinAdapterBuilder();
+        }
+        return this.instance;
+    }
+    build(opts) {
+        const { type, dataSource } = opts;
+        switch (type) {
+            case common_1.CasbinAdapterTypes.POSTGRES: {
+                return new casbin_postgres_adapter_helper_1.CasbinPostgresAdapter(dataSource);
+            }
+            case common_1.CasbinAdapterTypes.REDIS: {
+                return new casbin_redis_adapter_helper_1.CasbinRedisAdapter(dataSource);
+            }
+            default: {
+                throw (0, utilities_1.getError)({
+                    message: `[CasbinAdapterBuilder][build] Invalid type to build casbin adapter | type: ${type}`,
+                });
+            }
+        }
+    }
+}
+exports.CasbinAdapterBuilder = CasbinAdapterBuilder;
+//# sourceMappingURL=adapter-builder.js.map

package/dist/components/authorize/adapters/adapter-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-builder.js","sourceRoot":"","sources":["../../../../src/components/authorize/adapters/adapter-builder.ts"],"names":[],"mappings":";;;AACA,2CAAuC;AAEvC,sCAA+D;AAC/D,qFAAyE;AACzE,+EAAmE;AAEnE,MAAa,oBAAoB;IAG/B,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAA0D;QAC9D,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAElC,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,2BAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACjC,OAAO,IAAI,sDAAqB,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC;YACD,KAAK,2BAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9B,OAAO,IAAI,gDAAkB,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,oBAAQ,EAAC;oBACb,OAAO,EAAE,8EAA8E,IAAI,EAAE;iBAC9F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA9BD,oDA8BC"}

package/dist/components/authorize/adapters/base.adapter.d.ts

@@ -0,0 +1,19 @@
+import { BaseDataSource } from '../../../base/datasources';
+import { ApplicationLogger } from '../../../helpers';
+import { FilteredAdapter, Model } from 'casbin';
+export declare abstract class AbstractCasbinAdapter implements FilteredAdapter {
+    protected logger: ApplicationLogger;
+    protected datasource: BaseDataSource;
+    constructor(opts: {
+        scope: string;
+        datasource: BaseDataSource;
+    });
+    abstract loadFilteredPolicy(model: Model, filter: any): Promise<void>;
+    isFiltered(): boolean;
+    loadPolicy(_: Model): Promise<void>;
+    savePolicy(model: Model): Promise<boolean>;
+    addPolicy(sec: string, ptype: string, rule: string[]): Promise<void>;
+    removePolicy(sec: string, ptype: string, rule: string[]): Promise<void>;
+    removeFilteredPolicy(sec: string, ptype: string, fieldIndex: number, ...fieldValues: string[]): Promise<void>;
+}
+//# sourceMappingURL=base.adapter.d.ts.map

package/dist/components/authorize/adapters/base.adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.adapter.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/adapters/base.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAiB,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAIhD,8BAAsB,qBAAsB,YAAW,eAAe;IACpE,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACpC,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC;gBAEzB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,cAAc,CAAA;KAAE;IAO/D,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAGrE,UAAU,IAAI,OAAO;IAKrB,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ1C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAUpE,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvE,oBAAoB,CAClB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,GAAG,WAAW,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC,IAAI,CAAC;CAuBjB"}

package/dist/components/authorize/adapters/base.adapter.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AbstractCasbinAdapter = void 0;
+const helpers_1 = require("../../../helpers");
+const common_1 = require("../common");
+// -----------------------------------------------------------------------------------------
+class AbstractCasbinAdapter {
+    constructor(opts) {
+        const { scope, datasource } = opts;
+        this.logger = helpers_1.LoggerFactory.getLogger([scope]);
+        this.datasource = datasource;
+    }
+    // -----------------------------------------------------------------------------------------
+    isFiltered() {
+        return true;
+    }
+    // -----------------------------------------------------------------------------------------
+    loadPolicy(_) {
+        return Promise.resolve();
+    }
+    // -----------------------------------------------------------------------------------------
+    savePolicy(model) {
+        this.logger.info('[savePolicy] Ignore save policy method with options: ', {
+            model,
+        });
+        return Promise.resolve(true);
+    }
+    // -----------------------------------------------------------------------------------------
+    addPolicy(sec, ptype, rule) {
+        this.logger.info('[addPolicy] Ignore add policy method with options: ', {
+            sec,
+            ptype,
+            rule,
+        });
+        return Promise.resolve();
+    }
+    // -----------------------------------------------------------------------------------------
+    removePolicy(sec, ptype, rule) {
+        this.logger.info('[removePolicy] Ignore remove policy method with options: ', {
+            sec,
+            ptype,
+            rule,
+        });
+        return Promise.resolve();
+    }
+    // -----------------------------------------------------------------------------------------
+    removeFilteredPolicy(sec, ptype, fieldIndex, ...fieldValues) {
+        switch (ptype) {
+            case common_1.EnforcerDefinitions.PREFIX_USER: {
+                // Remove user policy
+                break;
+            }
+            case common_1.EnforcerDefinitions.PREFIX_ROLE: {
+                // Remove role policy
+                break;
+            }
+            default: {
+                break;
+            }
+        }
+        this.logger.info('[removeFilteredPolicy] Ignore remove filtered policy method with options: ', {
+            sec,
+            ptype,
+            fieldIndex,
+            fieldValues,
+        });
+        return Promise.resolve();
+    }
+}
+exports.AbstractCasbinAdapter = AbstractCasbinAdapter;
+//# sourceMappingURL=base.adapter.js.map

package/dist/components/authorize/adapters/base.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.adapter.js","sourceRoot":"","sources":["../../../../src/components/authorize/adapters/base.adapter.ts"],"names":[],"mappings":";;;AACA,uCAA6D;AAE7D,sCAAgD;AAEhD,4FAA4F;AAC5F,MAAsB,qBAAqB;IAIzC,YAAY,IAAmD;QAC7D,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAEnC,IAAI,CAAC,MAAM,GAAG,uBAAa,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAID,4FAA4F;IAC5F,UAAU;QACR,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4FAA4F;IAC5F,UAAU,CAAC,CAAQ;QACjB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,4FAA4F;IAC5F,UAAU,CAAC,KAAY;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;YACxE,KAAK;SACN,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,4FAA4F;IAC5F,SAAS,CAAC,GAAW,EAAE,KAAa,EAAE,IAAc;QAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;YACtE,GAAG;YACH,KAAK;YACL,IAAI;SACL,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,4FAA4F;IAC5F,YAAY,CAAC,GAAW,EAAE,KAAa,EAAE,IAAc;QACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE;YAC5E,GAAG;YACH,KAAK;YACL,IAAI;SACL,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,4FAA4F;IAC5F,oBAAoB,CAClB,GAAW,EACX,KAAa,EACb,UAAkB,EAClB,GAAG,WAAqB;QAExB,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,4BAAmB,CAAC,WAAW,CAAC,CAAC,CAAC;gBACrC,qBAAqB;gBACrB,MAAM;YACR,CAAC;YACD,KAAK,4BAAmB,CAAC,WAAW,CAAC,CAAC,CAAC;gBACrC,qBAAqB;gBACrB,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4EAA4E,EAAE;YAC7F,GAAG;YACH,KAAK;YACL,UAAU;YACV,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAhFD,sDAgFC"}

package/dist/components/authorize/adapters/casbin-postgres-adapter.helper.d.ts

@@ -0,0 +1,13 @@
+import { BaseDataSource } from '../../../base/datasources';
+import { Model } from 'casbin';
+import { IEnforcerFilterValue } from '../common';
+import { AbstractCasbinAdapter } from './base.adapter';
+export declare class CasbinPostgresAdapter extends AbstractCasbinAdapter {
+    constructor(datasource: BaseDataSource);
+    generateGroupLine(rule: {
+        userId: number;
+        roleId: number;
+    }): string;
+    loadFilteredPolicy(model: Model, filter: IEnforcerFilterValue): Promise<void>;
+}
+//# sourceMappingURL=casbin-postgres-adapter.helper.d.ts.map

package/dist/components/authorize/adapters/casbin-postgres-adapter.helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"casbin-postgres-adapter.helper.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/adapters/casbin-postgres-adapter.helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAU,KAAK,EAAE,MAAM,QAAQ,CAAC;AAKvC,OAAO,EAAuB,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,qBAAa,qBAAsB,SAAQ,qBAAqB;gBAClD,UAAU,EAAE,cAAc;IAKtC,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAWpD,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB;CAwDpE"}