@go-mailer/jarvis 10.2.3 → 10.3.0

package/lib/middlewares/auth.js

@@ -11,6 +11,7 @@ const Env = require('../env')
 const Errors = require('./errors')
 const { ProcessLogger } = require('./logger')
 const { checkAuthority, verifyAPIKey } = require('../clients/iam')
+const { localCache } = require('../redis/cache')
 const authLogger = new ProcessLogger('Authenticator')
 
 // helpers
@@ -115,7 +116,15 @@ const authorizeUser = ({ action, resource }) => {
       const { is_admin, is_service_request, tenant_id, user_id } = request
       if (is_admin || is_service_request) return next()
 
-      await checkAuthority({ action, resource, tenant_id, user_id })
+      const key = `${resource}:${action}:${tenant_id}:${user_id}`
+      const has_authority = localCache.get_item(key)
+      if (has_authority == null) {
+        const is_permitted = await checkAuthority({ action, resource, tenant_id, user_id })
+        localCache.add_item(key,  is_permitted, 15 * 60)
+      } else if (has_authority === false){
+        throw new Error('Unauthorized')
+      }
+
       next()
     } catch (e) {
       authLogger.error(e, 'authorizeUser')

package/lib/redis/cache.js

@@ -0,0 +1,31 @@
+class LocalCache {
+  constructor () {
+    this.cache = new Map()
+  }
+
+  add_item (key='', value, duration) {
+    if (!key || !value) return
+    this.cache.set(key, value)
+    this.expire_item(key, duration)
+  }
+
+  expire_item(key, duration = 5)  {
+    setTimeout(() => {
+      this.cache.delete(key)
+    }, duration * 1000)
+  }
+
+  get_item (key) {
+    if (!key || !this.cache.has(key)) return null
+    return this.cache.get(key)
+  }
+
+  remove_item(key) {
+    if (!key || !this.cache.has(key)) return
+    this.cache.delete(key)
+  }
+}
+
+module.exports = {
+    localCache: new LocalCache()
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-mailer/jarvis",
-  "version": "10.2.3",
+  "version": "10.3.0",
   "main": "index.js",
   "repository": "git@github.com:go-mailer-ltd/jarvis-node.git",
   "author": "Nathan Oguntuberu <nateoguns.work@gmail.com>",