@hitchy/plugin-auth 0.3.5 → 0.3.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (67) hide show
  1. package/package.json +1 -1
  2. package/.gitlab-ci.yml +0 -69
  3. package/coverage/base.css +0 -224
  4. package/coverage/block-navigation.js +0 -87
  5. package/coverage/favicon.png +0 -0
  6. package/coverage/index.html +0 -236
  7. package/coverage/plugin-auth/api/controller/index.html +0 -116
  8. package/coverage/plugin-auth/api/controller/user.js.html +0 -373
  9. package/coverage/plugin-auth/api/model/authorization/index.html +0 -116
  10. package/coverage/plugin-auth/api/model/authorization/rule.js.html +0 -232
  11. package/coverage/plugin-auth/api/model/index.html +0 -146
  12. package/coverage/plugin-auth/api/model/role.js.html +0 -205
  13. package/coverage/plugin-auth/api/model/user-to-role.js.html +0 -172
  14. package/coverage/plugin-auth/api/model/user.js.html +0 -757
  15. package/coverage/plugin-auth/api/policy/authentication.js.html +0 -784
  16. package/coverage/plugin-auth/api/policy/authorization.js.html +0 -187
  17. package/coverage/plugin-auth/api/policy/index.html +0 -146
  18. package/coverage/plugin-auth/api/policy/user.js.html +0 -484
  19. package/coverage/plugin-auth/api/service/auth/index.html +0 -116
  20. package/coverage/plugin-auth/api/service/auth/manager.js.html +0 -964
  21. package/coverage/plugin-auth/api/service/authentication/index.html +0 -131
  22. package/coverage/plugin-auth/api/service/authentication/passport.js.html +0 -298
  23. package/coverage/plugin-auth/api/service/authentication/strategies.js.html +0 -934
  24. package/coverage/plugin-auth/api/service/authorization/index.html +0 -146
  25. package/coverage/plugin-auth/api/service/authorization/node.js.html +0 -949
  26. package/coverage/plugin-auth/api/service/authorization/policy-generator.js.html +0 -391
  27. package/coverage/plugin-auth/api/service/authorization/tree.js.html +0 -988
  28. package/coverage/plugin-auth/config/auth.js.html +0 -145
  29. package/coverage/plugin-auth/config/index.html +0 -116
  30. package/coverage/plugin-auth/index.html +0 -116
  31. package/coverage/plugin-auth/index.js.html +0 -388
  32. package/coverage/prettify.css +0 -1
  33. package/coverage/prettify.js +0 -2
  34. package/coverage/sort-arrow-sprite.png +0 -0
  35. package/coverage/sorter.js +0 -196
  36. package/coverage/tmp/coverage-2884-1653923449663-0.json +0 -1
  37. package/docs/.vuepress/config.js +0 -55
  38. package/docs/.vuepress/styles/palette.styl +0 -4
  39. package/docs/api/config.md +0 -180
  40. package/docs/api/controller/readme.md +0 -10
  41. package/docs/api/controller/user.md +0 -44
  42. package/docs/api/model/authorization-rule.md +0 -38
  43. package/docs/api/model/readme.md +0 -13
  44. package/docs/api/model/role.md +0 -22
  45. package/docs/api/model/user-to-role.md +0 -26
  46. package/docs/api/model/user.md +0 -50
  47. package/docs/api/policy/authentication.md +0 -44
  48. package/docs/api/policy/authorization.md +0 -27
  49. package/docs/api/policy/readme.md +0 -12
  50. package/docs/api/policy/user.md +0 -22
  51. package/docs/api/readme.md +0 -52
  52. package/docs/api/routing.md +0 -101
  53. package/docs/api/service/auth-manager.md +0 -86
  54. package/docs/api/service/authentication-passport.md +0 -21
  55. package/docs/api/service/authentication-strategies.md +0 -22
  56. package/docs/api/service/authorization-node.md +0 -102
  57. package/docs/api/service/authorization-policy-generator.md +0 -66
  58. package/docs/api/service/authorization-tree.md +0 -123
  59. package/docs/api/service/readme.md +0 -15
  60. package/docs/guides/getting-started.md +0 -69
  61. package/docs/guides/idp-login.png +0 -0
  62. package/docs/guides/idp-saml-cert.png +0 -0
  63. package/docs/guides/openid-connect.md +0 -164
  64. package/docs/guides/readme.md +0 -12
  65. package/docs/guides/saml.md +0 -161
  66. package/docs/introduction.md +0 -78
  67. package/docs/readme.md +0 -11
package/coverage/plugin-auth/api/service/authorization/policy-generator.js.html DELETED
@@ -1,391 +0,0 @@
1
-
2
- <!doctype html>
3
- <html lang="en">
4
-
5
- <head>
6
- <title>Code coverage report for plugin-auth/api/service/authorization/policy-generator.js</title>
7
- <meta charset="utf-8" />
8
- <link rel="stylesheet" href="../../../../prettify.css" />
9
- <link rel="stylesheet" href="../../../../base.css" />
10
- <link rel="shortcut icon" type="image/x-icon" href="../../../../favicon.png" />
11
- <meta name="viewport" content="width=device-width, initial-scale=1" />
12
- <style type='text/css'>
13
- .coverage-summary .sorter {
14
- background-image: url(../../../../sort-arrow-sprite.png);
15
- }
16
- </style>
17
- </head>
18
-
19
- <body>
20
- <div class='wrapper'>
21
- <div class='pad1'>
22
- <h1><a href="../../../../index.html">All files</a> / <a href="index.html">plugin-auth/api/service/authorization</a> policy-generator.js</h1>
23
- <div class='clearfix'>
24
-
25
- <div class='fl pad1y space-right2'>
26
- <span class="strong">93.13% </span>
27
- <span class="quiet">Statements</span>
28
- <span class='fraction'>95/102</span>
29
- </div>
30
-
31
-
32
- <div class='fl pad1y space-right2'>
33
- <span class="strong">79.16% </span>
34
- <span class="quiet">Branches</span>
35
- <span class='fraction'>19/24</span>
36
- </div>
37
-
38
-
39
- <div class='fl pad1y space-right2'>
40
- <span class="strong">100% </span>
41
- <span class="quiet">Functions</span>
42
- <span class='fraction'>3/3</span>
43
- </div>
44
-
45
-
46
- <div class='fl pad1y space-right2'>
47
- <span class="strong">93.13% </span>
48
- <span class="quiet">Lines</span>
49
- <span class='fraction'>95/102</span>
50
- </div>
51
-
52
-
53
- </div>
54
- <p class="quiet">
55
- Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
56
- </p>
57
- <template id="filterTemplate">
58
- <div class="quiet">
59
- Filter:
60
- <input oninput="onInput()" type="search" id="fileSearch">
61
- </div>
62
- </template>
63
- </div>
64
- <div class='status-line high'></div>
65
- <pre><table class="coverage">
66
- <tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
67
- <a name='L2'></a><a href='#L2'>2</a>
68
- <a name='L3'></a><a href='#L3'>3</a>
69
- <a name='L4'></a><a href='#L4'>4</a>
70
- <a name='L5'></a><a href='#L5'>5</a>
71
- <a name='L6'></a><a href='#L6'>6</a>
72
- <a name='L7'></a><a href='#L7'>7</a>
73
- <a name='L8'></a><a href='#L8'>8</a>
74
- <a name='L9'></a><a href='#L9'>9</a>
75
- <a name='L10'></a><a href='#L10'>10</a>
76
- <a name='L11'></a><a href='#L11'>11</a>
77
- <a name='L12'></a><a href='#L12'>12</a>
78
- <a name='L13'></a><a href='#L13'>13</a>
79
- <a name='L14'></a><a href='#L14'>14</a>
80
- <a name='L15'></a><a href='#L15'>15</a>
81
- <a name='L16'></a><a href='#L16'>16</a>
82
- <a name='L17'></a><a href='#L17'>17</a>
83
- <a name='L18'></a><a href='#L18'>18</a>
84
- <a name='L19'></a><a href='#L19'>19</a>
85
- <a name='L20'></a><a href='#L20'>20</a>
86
- <a name='L21'></a><a href='#L21'>21</a>
87
- <a name='L22'></a><a href='#L22'>22</a>
88
- <a name='L23'></a><a href='#L23'>23</a>
89
- <a name='L24'></a><a href='#L24'>24</a>
90
- <a name='L25'></a><a href='#L25'>25</a>
91
- <a name='L26'></a><a href='#L26'>26</a>
92
- <a name='L27'></a><a href='#L27'>27</a>
93
- <a name='L28'></a><a href='#L28'>28</a>
94
- <a name='L29'></a><a href='#L29'>29</a>
95
- <a name='L30'></a><a href='#L30'>30</a>
96
- <a name='L31'></a><a href='#L31'>31</a>
97
- <a name='L32'></a><a href='#L32'>32</a>
98
- <a name='L33'></a><a href='#L33'>33</a>
99
- <a name='L34'></a><a href='#L34'>34</a>
100
- <a name='L35'></a><a href='#L35'>35</a>
101
- <a name='L36'></a><a href='#L36'>36</a>
102
- <a name='L37'></a><a href='#L37'>37</a>
103
- <a name='L38'></a><a href='#L38'>38</a>
104
- <a name='L39'></a><a href='#L39'>39</a>
105
- <a name='L40'></a><a href='#L40'>40</a>
106
- <a name='L41'></a><a href='#L41'>41</a>
107
- <a name='L42'></a><a href='#L42'>42</a>
108
- <a name='L43'></a><a href='#L43'>43</a>
109
- <a name='L44'></a><a href='#L44'>44</a>
110
- <a name='L45'></a><a href='#L45'>45</a>
111
- <a name='L46'></a><a href='#L46'>46</a>
112
- <a name='L47'></a><a href='#L47'>47</a>
113
- <a name='L48'></a><a href='#L48'>48</a>
114
- <a name='L49'></a><a href='#L49'>49</a>
115
- <a name='L50'></a><a href='#L50'>50</a>
116
- <a name='L51'></a><a href='#L51'>51</a>
117
- <a name='L52'></a><a href='#L52'>52</a>
118
- <a name='L53'></a><a href='#L53'>53</a>
119
- <a name='L54'></a><a href='#L54'>54</a>
120
- <a name='L55'></a><a href='#L55'>55</a>
121
- <a name='L56'></a><a href='#L56'>56</a>
122
- <a name='L57'></a><a href='#L57'>57</a>
123
- <a name='L58'></a><a href='#L58'>58</a>
124
- <a name='L59'></a><a href='#L59'>59</a>
125
- <a name='L60'></a><a href='#L60'>60</a>
126
- <a name='L61'></a><a href='#L61'>61</a>
127
- <a name='L62'></a><a href='#L62'>62</a>
128
- <a name='L63'></a><a href='#L63'>63</a>
129
- <a name='L64'></a><a href='#L64'>64</a>
130
- <a name='L65'></a><a href='#L65'>65</a>
131
- <a name='L66'></a><a href='#L66'>66</a>
132
- <a name='L67'></a><a href='#L67'>67</a>
133
- <a name='L68'></a><a href='#L68'>68</a>
134
- <a name='L69'></a><a href='#L69'>69</a>
135
- <a name='L70'></a><a href='#L70'>70</a>
136
- <a name='L71'></a><a href='#L71'>71</a>
137
- <a name='L72'></a><a href='#L72'>72</a>
138
- <a name='L73'></a><a href='#L73'>73</a>
139
- <a name='L74'></a><a href='#L74'>74</a>
140
- <a name='L75'></a><a href='#L75'>75</a>
141
- <a name='L76'></a><a href='#L76'>76</a>
142
- <a name='L77'></a><a href='#L77'>77</a>
143
- <a name='L78'></a><a href='#L78'>78</a>
144
- <a name='L79'></a><a href='#L79'>79</a>
145
- <a name='L80'></a><a href='#L80'>80</a>
146
- <a name='L81'></a><a href='#L81'>81</a>
147
- <a name='L82'></a><a href='#L82'>82</a>
148
- <a name='L83'></a><a href='#L83'>83</a>
149
- <a name='L84'></a><a href='#L84'>84</a>
150
- <a name='L85'></a><a href='#L85'>85</a>
151
- <a name='L86'></a><a href='#L86'>86</a>
152
- <a name='L87'></a><a href='#L87'>87</a>
153
- <a name='L88'></a><a href='#L88'>88</a>
154
- <a name='L89'></a><a href='#L89'>89</a>
155
- <a name='L90'></a><a href='#L90'>90</a>
156
- <a name='L91'></a><a href='#L91'>91</a>
157
- <a name='L92'></a><a href='#L92'>92</a>
158
- <a name='L93'></a><a href='#L93'>93</a>
159
- <a name='L94'></a><a href='#L94'>94</a>
160
- <a name='L95'></a><a href='#L95'>95</a>
161
- <a name='L96'></a><a href='#L96'>96</a>
162
- <a name='L97'></a><a href='#L97'>97</a>
163
- <a name='L98'></a><a href='#L98'>98</a>
164
- <a name='L99'></a><a href='#L99'>99</a>
165
- <a name='L100'></a><a href='#L100'>100</a>
166
- <a name='L101'></a><a href='#L101'>101</a>
167
- <a name='L102'></a><a href='#L102'>102</a>
168
- <a name='L103'></a><a href='#L103'>103</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">1x</span>
169
- <span class="cline-any cline-yes">1x</span>
170
- <span class="cline-any cline-yes">1x</span>
171
- <span class="cline-any cline-yes">19x</span>
172
- <span class="cline-any cline-yes">19x</span>
173
- <span class="cline-any cline-yes">19x</span>
174
- <span class="cline-any cline-yes">19x</span>
175
- <span class="cline-any cline-yes">19x</span>
176
- <span class="cline-any cline-yes">19x</span>
177
- <span class="cline-any cline-yes">19x</span>
178
- <span class="cline-any cline-yes">19x</span>
179
- <span class="cline-any cline-yes">19x</span>
180
- <span class="cline-any cline-yes">19x</span>
181
- <span class="cline-any cline-yes">19x</span>
182
- <span class="cline-any cline-yes">19x</span>
183
- <span class="cline-any cline-yes">19x</span>
184
- <span class="cline-any cline-yes">19x</span>
185
- <span class="cline-any cline-yes">1x</span>
186
- <span class="cline-any cline-no">&nbsp;</span>
187
- <span class="cline-any cline-no">&nbsp;</span>
188
- <span class="cline-any cline-yes">1x</span>
189
- <span class="cline-any cline-yes">1x</span>
190
- <span class="cline-any cline-yes">1x</span>
191
- <span class="cline-any cline-yes">1x</span>
192
- <span class="cline-any cline-no">&nbsp;</span>
193
- <span class="cline-any cline-no">&nbsp;</span>
194
- <span class="cline-any cline-no">&nbsp;</span>
195
- <span class="cline-any cline-yes">1x</span>
196
- <span class="cline-any cline-yes">1x</span>
197
- <span class="cline-any cline-yes">1x</span>
198
- <span class="cline-any cline-yes">1x</span>
199
- <span class="cline-any cline-yes">1x</span>
200
- <span class="cline-any cline-yes">8x</span>
201
- <span class="cline-any cline-yes">3x</span>
202
- <span class="cline-any cline-yes">3x</span>
203
- <span class="cline-any cline-yes">3x</span>
204
- <span class="cline-any cline-yes">3x</span>
205
- <span class="cline-any cline-yes">3x</span>
206
- <span class="cline-any cline-yes">3x</span>
207
- <span class="cline-any cline-yes">3x</span>
208
- <span class="cline-any cline-yes">3x</span>
209
- <span class="cline-any cline-yes">2x</span>
210
- <span class="cline-any cline-yes">2x</span>
211
- <span class="cline-any cline-yes">2x</span>
212
- <span class="cline-any cline-yes">3x</span>
213
- <span class="cline-any cline-yes">1x</span>
214
- <span class="cline-any cline-yes">6x</span>
215
- <span class="cline-any cline-yes">6x</span>
216
- <span class="cline-any cline-yes">6x</span>
217
- <span class="cline-any cline-yes">6x</span>
218
- <span class="cline-any cline-yes">6x</span>
219
- <span class="cline-any cline-yes">6x</span>
220
- <span class="cline-any cline-yes">1x</span>
221
- <span class="cline-any cline-yes">1x</span>
222
- <span class="cline-any cline-yes">19x</span>
223
- <span class="cline-any cline-yes">19x</span>
224
- <span class="cline-any cline-yes">19x</span>
225
- <span class="cline-any cline-yes">19x</span>
226
- <span class="cline-any cline-yes">19x</span>
227
- <span class="cline-any cline-yes">19x</span>
228
- <span class="cline-any cline-yes">19x</span>
229
- <span class="cline-any cline-yes">19x</span>
230
- <span class="cline-any cline-yes">19x</span>
231
- <span class="cline-any cline-yes">19x</span>
232
- <span class="cline-any cline-yes">19x</span>
233
- <span class="cline-any cline-yes">2x</span>
234
- <span class="cline-any cline-no">&nbsp;</span>
235
- <span class="cline-any cline-no">&nbsp;</span>
236
- <span class="cline-any cline-yes">2x</span>
237
- <span class="cline-any cline-yes">2x</span>
238
- <span class="cline-any cline-yes">2x</span>
239
- <span class="cline-any cline-yes">2x</span>
240
- <span class="cline-any cline-yes">16x</span>
241
- <span class="cline-any cline-yes">6x</span>
242
- <span class="cline-any cline-yes">6x</span>
243
- <span class="cline-any cline-yes">6x</span>
244
- <span class="cline-any cline-yes">2x</span>
245
- <span class="cline-any cline-yes">2x</span>
246
- <span class="cline-any cline-yes">2x</span>
247
- <span class="cline-any cline-yes">4x</span>
248
- <span class="cline-any cline-yes">4x</span>
249
- <span class="cline-any cline-yes">4x</span>
250
- <span class="cline-any cline-yes">4x</span>
251
- <span class="cline-any cline-yes">4x</span>
252
- <span class="cline-any cline-yes">4x</span>
253
- <span class="cline-any cline-yes">2x</span>
254
- <span class="cline-any cline-yes">2x</span>
255
- <span class="cline-any cline-yes">2x</span>
256
- <span class="cline-any cline-yes">4x</span>
257
- <span class="cline-any cline-yes">2x</span>
258
- <span class="cline-any cline-yes">12x</span>
259
- <span class="cline-any cline-yes">12x</span>
260
- <span class="cline-any cline-yes">12x</span>
261
- <span class="cline-any cline-yes">12x</span>
262
- <span class="cline-any cline-yes">12x</span>
263
- <span class="cline-any cline-yes">12x</span>
264
- <span class="cline-any cline-yes">2x</span>
265
- <span class="cline-any cline-yes">2x</span>
266
- <span class="cline-any cline-yes">19x</span>
267
- <span class="cline-any cline-yes">19x</span>
268
- <span class="cline-any cline-yes">19x</span>
269
- <span class="cline-any cline-yes">1x</span>
270
- <span class="cline-any cline-neutral">&nbsp;</span></td><td class="text"><pre class="prettyprint lang-js">"use strict";
271
- &nbsp;
272
- module.exports = function() {
273
- /**
274
- * Implements factory functions for policy handlers checking a requesting
275
- * user's authorization.
276
- */
277
- class AuthorizationPolicyGenerator {
278
- /**
279
- * Generates policy handler testing a request's user for having any of
280
- * the listed roles and instantly rejecting requests of users who don't.
281
- * Request is also rejected of request's user is unknown.
282
- *
283
- * @param {string|string[]} roles lists roles to accept
284
- * @returns {Hitchy.Core.RequestPolicyHandler} policy handler rejecting requests of users who doesn't have any of the listed roles
285
- */
286
- static hasRole( roles ) {
287
- if ( !roles ) <span class="branch-0 cbranch-no" title="branch not covered" >{</span>
288
- <span class="cstat-no" title="statement not covered" > throw new Error( "missing roles to test" );</span>
289
- <span class="cstat-no" title="statement not covered" > }</span>
290
- &nbsp;
291
- const accepted = {};
292
- &nbsp;
293
- if ( Array.isArray( roles ) ) <span class="branch-0 cbranch-no" title="branch not covered" >{</span>
294
- <span class="cstat-no" title="statement not covered" > for ( const role of roles ) {</span>
295
- <span class="cstat-no" title="statement not covered" > accepted[role] = true;</span>
296
- <span class="cstat-no" title="statement not covered" > }</span>
297
- } else {
298
- accepted[String( roles )] = true;
299
- }
300
- &nbsp;
301
- return ( req, res, next ) =&gt; {
302
- if ( req.user &amp;&amp; Array.isArray( req.user.roles ) ) {
303
- const { adminRole } = req.hitchy.runtime.services.AuthManager;
304
- const userRoles = req.user.roles;
305
- const numUserRoles = userRoles.length;
306
- &nbsp;
307
- for ( let i = 0; i &lt; numUserRoles; i++ ) {
308
- const role = userRoles[i].name;
309
- &nbsp;
310
- if ( role === adminRole || accepted[role] ) {
311
- next();
312
- return;
313
- }
314
- }
315
- }
316
- &nbsp;
317
- res
318
- .status( 403 )
319
- .json( {
320
- error: "access forbidden",
321
- } );
322
- };
323
- }
324
- &nbsp;
325
- /**
326
- * Generates policy handler testing a request's user for being
327
- * authorized to access any of the listed resources and instantly
328
- * rejecting requests of users who don't. Request is also rejected of
329
- * request's user is unknown.
330
- *
331
- * @param {string|string[]} resource name(s) of resource(s)
332
- * @returns {Hitchy.Core.RequestPolicyHandler} policy handler rejecting requests of users who mustn't access any of the named resources
333
- */
334
- static mayAccess( resource ) {
335
- if ( !resource ) <span class="branch-0 cbranch-no" title="branch not covered" >{</span>
336
- <span class="cstat-no" title="statement not covered" > throw new Error( "missing resources to test" );</span>
337
- <span class="cstat-no" title="statement not covered" > }</span>
338
- &nbsp;
339
- const resources = Array.isArray( resource ) <span class="branch-0 cbranch-no" title="branch not covered" >? resource </span>: [resource];
340
- &nbsp;
341
- return function( req, res, next ) {
342
- if ( req.user ) {
343
- const roleNames = Array.isArray( req.user.roles ) ? req.user.roles.map( role =&gt; role.name ) <span class="branch-0 cbranch-no" title="branch not covered" >: [];</span>
344
- &nbsp;
345
- if ( roleNames.indexOf( this.services.AuthManager.adminRole ) &gt; -1 ) {
346
- next();
347
- return;
348
- }
349
- &nbsp;
350
- const { current } = this.services.AuthorizationTree;
351
- const numResources = resources.length;
352
- &nbsp;
353
- for ( let i = 0; i &lt; numResources; i++ ) {
354
- if ( current.isAuthorized( resources[i], req.user, roleNames ) ) {
355
- next();
356
- return;
357
- }
358
- }
359
- }
360
- &nbsp;
361
- res
362
- .status( 403 )
363
- .json( {
364
- error: "access forbidden",
365
- } );
366
- };
367
- }
368
- }
369
- &nbsp;
370
- return AuthorizationPolicyGenerator;
371
- };
372
- &nbsp;</pre></td></tr></table></pre>
373
-
374
- <div class='push'></div><!-- for sticky footer -->
375
- </div><!-- /wrapper -->
376
- <div class='footer quiet pad2 space-top1 center small'>
377
- Code coverage generated by
378
- <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
379
- at Mon May 30 2022 17:10:50 GMT+0200 (Mitteleuropäische Sommerzeit)
380
- </div>
381
- <script src="../../../../prettify.js"></script>
382
- <script>
383
- window.onload = function () {
384
- prettyPrint();
385
- };
386
- </script>
387
- <script src="../../../../sorter.js"></script>
388
- <script src="../../../../block-navigation.js"></script>
389
- </body>
390
- </html>
391
-