@illustrisinteractive/sentinel-nest 0.0.1

package/dist/src/models/SentinelConfig.d.ts

@@ -0,0 +1,7 @@
+import { SecuredResource } from './SecuredResource';
+export interface SentinelConfig {
+    name: string;
+    sourceRoot: string;
+    sentinelConfigPath: string;
+    resources?: SecuredResource[];
+}

package/dist/src/models/SentinelConfig.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=SentinelConfig.js.map

package/dist/src/models/SentinelConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SentinelConfig.js","sourceRoot":"","sources":["../../../src/models/SentinelConfig.ts"],"names":[],"mappings":""}

package/dist/src/models/SentinelModel.d.ts

@@ -0,0 +1,35 @@
+import { PermissionKeysModel } from '../generated/prisma/models';
+export interface SentinelPermissionKey {
+    id: string;
+    resource: string;
+    action: string;
+    createdAt: string | Date;
+    updatedAt: string | Date;
+    description: string;
+}
+export interface SentinelModelRoleHasPermissions {
+    id: number;
+    role: number;
+    permission: string;
+    createdAt: string | Date;
+    updatedAt: string | Date;
+    PermissionKeys: SentinelPermissionKey;
+}
+export interface SentinelModelRole {
+    id: number;
+    name: string;
+    createdAt: string | Date;
+    updatedAt: string | Date;
+    RoleHasPermissions: SentinelModelRoleHasPermissions[];
+}
+export interface SentinelModelHasPermissions {
+    id: number;
+    role: number;
+    model: number;
+    createdAt: string | Date;
+    updatedAt: string | Date;
+    Roles: SentinelModelRole;
+}
+export interface SentinelModel {
+    permissions: PermissionKeysModel[];
+}

package/dist/src/models/SentinelModel.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=SentinelModel.js.map

package/dist/src/models/SentinelModel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SentinelModel.js","sourceRoot":"","sources":["../../../src/models/SentinelModel.ts"],"names":[],"mappings":""}

package/dist/src/models/SentinelModuleOptions.d.ts

@@ -0,0 +1,7 @@
+import { SecuredResource } from './SecuredResource';
+export interface SentinelModuleOptions {
+    resources: SecuredResource[];
+    modelTable: string;
+    modelKey: string;
+    header: string;
+}

package/dist/src/models/SentinelModuleOptions.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=SentinelModuleOptions.js.map

package/dist/src/models/SentinelModuleOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SentinelModuleOptions.js","sourceRoot":"","sources":["../../../src/models/SentinelModuleOptions.ts"],"names":[],"mappings":""}

package/dist/src/prisma.service.d.ts

@@ -0,0 +1,4 @@
+import { PrismaClient } from './generated/prisma/client';
+export declare class PrismaService extends PrismaClient {
+    constructor();
+}

package/dist/src/prisma.service.js

@@ -0,0 +1,29 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaService = void 0;
+const common_1 = require("@nestjs/common");
+const client_1 = require("./generated/prisma/client");
+const adapter_pg_1 = require("@prisma/adapter-pg");
+let PrismaService = class PrismaService extends client_1.PrismaClient {
+    constructor() {
+        const adapter = new adapter_pg_1.PrismaPg({
+            connectionString: `postgres://${process.env.SENTINEL_DB_USER}:${process.env.SENTINEL_DB_PASS}@${process.env.SENTINEL_DB_HOST}:${process.env.SENTINEL_DB_PORT}/${process.env.SENTINEL_DB_DATABASE}`,
+        });
+        super({ adapter });
+    }
+};
+exports.PrismaService = PrismaService;
+exports.PrismaService = PrismaService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], PrismaService);
+//# sourceMappingURL=prisma.service.js.map

package/dist/src/prisma.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma.service.js","sourceRoot":"","sources":["../../src/prisma.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,sDAAyD;AACzD,mDAA8C;AAGvC,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,qBAAY;IAC7C;QACE,MAAM,OAAO,GAAG,IAAI,qBAAQ,CAAC;YAC3B,gBAAgB,EAAE,cAAc,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE;SACnM,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACrB,CAAC;CACF,CAAA;AAPY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;;GACA,aAAa,CAOzB"}

package/dist/src/sentinel.guard.d.ts

@@ -0,0 +1,9 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { SentinelService } from './sentinel.service';
+import { Reflector } from '@nestjs/core';
+export declare class SentinelGuard implements CanActivate {
+    private readonly sentinelService;
+    private reflector;
+    constructor(sentinelService: SentinelService, reflector: Reflector);
+    canActivate(context: ExecutionContext): boolean;
+}

package/dist/src/sentinel.guard.js

@@ -0,0 +1,73 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SentinelGuard = void 0;
+const common_1 = require("@nestjs/common");
+const sentinel_service_1 = require("./sentinel.service");
+const core_1 = require("@nestjs/core");
+const main_1 = require("./main");
+let SentinelGuard = class SentinelGuard {
+    sentinelService;
+    reflector;
+    constructor(sentinelService, reflector) {
+        this.sentinelService = sentinelService;
+        this.reflector = reflector;
+    }
+    canActivate(context) {
+        const requiredActions = this.reflector.getAllAndOverride(main_1.Can, [context.getHandler(), context.getClass()]);
+        if (requiredActions.length == 0)
+            return true;
+        let sentinelAuth = '';
+        if (context.getType() == 'rpc') {
+            const rpcContext = context.switchToRpc().getContext();
+            sentinelAuth = rpcContext.get(this.sentinelService.options.header || 'x-sentinel-key')[0];
+        }
+        else if (context.getType() == 'http') {
+            const httpContext = context.switchToHttp().getRequest();
+            const header = httpContext.headers[this.sentinelService.options.header || 'x-sentinel-key'];
+            if (header && typeof header == 'string') {
+                sentinelAuth = header;
+            }
+        }
+        else
+            return false;
+        if (!sentinelAuth)
+            return false;
+        try {
+            const payload = this.sentinelService.verify(sentinelAuth);
+            if (!payload)
+                return false;
+            const abilities = this.sentinelService.parseModelAbilities(payload);
+            for (const action of requiredActions) {
+                if (!action.source) {
+                    return false;
+                }
+                if (abilities.can(Object.keys(action)[0], action.source))
+                    return true;
+            }
+            return false;
+        }
+        catch {
+            return false;
+        }
+    }
+};
+exports.SentinelGuard = SentinelGuard;
+exports.SentinelGuard = SentinelGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(core_1.Reflector)),
+    __metadata("design:paramtypes", [sentinel_service_1.SentinelService,
+        core_1.Reflector])
+], SentinelGuard);
+//# sourceMappingURL=sentinel.guard.js.map

package/dist/src/sentinel.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.guard.js","sourceRoot":"","sources":["../../src/sentinel.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAKwB;AACxB,yDAAqD;AAIrD,uCAAyC;AACzC,iCAAoD;AAG7C,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEL;IACU;IAF7B,YACmB,eAAgC,EACtB,SAAoB;QAD9B,oBAAe,GAAf,eAAe,CAAiB;QACtB,cAAS,GAAT,SAAS,CAAW;IAC9C,CAAC;IACJ,WAAW,CAAC,OAAyB;QACnC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAEtD,UAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEnD,IAAI,eAAe,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAa,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,CAAC;YAChE,YAAY,GAAG,UAAU,CAAC,GAAG,CAC3B,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,IAAI,gBAAgB,CACxD,CAAC,CAAC,CAAW,CAAC;QACjB,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,CAAC;YACvC,MAAM,WAAW,GAAY,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;YACjE,MAAM,MAAM,GACV,WAAW,CAAC,OAAO,CACjB,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,IAAI,gBAAgB,CACxD,CAAC;YACJ,IAAI,MAAM,IAAI,OAAO,MAAM,IAAI,QAAQ,EAAE,CAAC;gBACxC,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;;YAAM,OAAO,KAAK,CAAC;QAEpB,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,OAAO,GAAkB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACpE,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;gBACrC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;oBAAE,OAAO,IAAI,CAAC;YACxE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAA;AAhDY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,eAAM,EAAC,gBAAS,CAAC,CAAA;qCADgB,kCAAe;QACX,gBAAS;GAHtC,aAAa,CAgDzB"}

package/dist/src/sentinel.module-definition.d.ts

@@ -0,0 +1,2 @@
+import { SentinelModuleOptions } from './models/SentinelModuleOptions';
+export declare const ConfigurableModuleClass: import("@nestjs/common").ConfigurableModuleCls<SentinelModuleOptions, "register", "create", {}>, MODULE_OPTIONS_TOKEN: string | symbol;

package/dist/src/sentinel.module-definition.js

@@ -0,0 +1,7 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MODULE_OPTIONS_TOKEN = exports.ConfigurableModuleClass = void 0;
+const common_1 = require("@nestjs/common");
+_a = new common_1.ConfigurableModuleBuilder().build(), exports.ConfigurableModuleClass = _a.ConfigurableModuleClass, exports.MODULE_OPTIONS_TOKEN = _a.MODULE_OPTIONS_TOKEN;
+//# sourceMappingURL=sentinel.module-definition.js.map

package/dist/src/sentinel.module-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.module-definition.js","sourceRoot":"","sources":["../../src/sentinel.module-definition.ts"],"names":[],"mappings":";;;;AAAA,2CAA2D;AAG9C,KACX,IAAI,kCAAyB,EAAyB,CAAC,KAAK,EAAE,EADjD,+BAAuB,+BAAE,4BAAoB,2BACK"}

package/dist/src/sentinel.module.d.ts

@@ -0,0 +1,3 @@
+import { ConfigurableModuleClass } from './sentinel.module-definition';
+export declare class SentinelModule extends ConfigurableModuleClass {
+}

package/dist/src/sentinel.module.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SentinelModule = void 0;
+const common_1 = require("@nestjs/common");
+const sentinel_service_1 = require("./sentinel.service");
+const config_1 = require("@nestjs/config");
+const prisma_service_1 = require("./prisma.service");
+const sentinel_module_definition_1 = require("./sentinel.module-definition");
+const jwt_1 = require("@nestjs/jwt");
+const sentinel_guard_1 = require("./sentinel.guard");
+let SentinelModule = class SentinelModule extends sentinel_module_definition_1.ConfigurableModuleClass {
+};
+exports.SentinelModule = SentinelModule;
+exports.SentinelModule = SentinelModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            config_1.ConfigModule.forRoot({ isGlobal: true }),
+            jwt_1.JwtModule.registerAsync({
+                imports: [config_1.ConfigModule],
+                inject: [config_1.ConfigService],
+                useFactory: (configService) => ({
+                    secret: configService.getOrThrow('SENTINEL_KEY'),
+                    signOptions: {
+                        expiresIn: '30m',
+                    },
+                }),
+            }),
+        ],
+        controllers: [],
+        providers: [prisma_service_1.PrismaService, sentinel_service_1.SentinelService, sentinel_guard_1.SentinelGuard],
+        exports: [prisma_service_1.PrismaService, sentinel_service_1.SentinelService, sentinel_guard_1.SentinelGuard],
+    })
+], SentinelModule);
+//# sourceMappingURL=sentinel.module.js.map

package/dist/src/sentinel.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.module.js","sourceRoot":"","sources":["../../src/sentinel.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,yDAAqD;AACrD,2CAA6D;AAC7D,qDAAiD;AACjD,6EAAuE;AACvE,qCAAwC;AACxC,qDAAiD;AAoB1C,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,oDAAuB;CAAG,CAAA;AAAjD,wCAAc;yBAAd,cAAc;IAlB1B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,qBAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACxC,eAAS,CAAC,aAAa,CAAC;gBACtB,OAAO,EAAE,CAAC,qBAAY,CAAC;gBACvB,MAAM,EAAE,CAAC,sBAAa,CAAC;gBACvB,UAAU,EAAE,CAAC,aAA4B,EAAE,EAAE,CAAC,CAAC;oBAC7C,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC;oBAChD,WAAW,EAAE;wBACX,SAAS,EAAE,KAAK;qBACjB;iBACF,CAAC;aACH,CAAC;SACH;QACD,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,CAAC,8BAAa,EAAE,kCAAe,EAAE,8BAAa,CAAC;QAC1D,OAAO,EAAE,CAAC,8BAAa,EAAE,kCAAe,EAAE,8BAAa,CAAC;KACzD,CAAC;GACW,cAAc,CAAmC"}

package/dist/src/sentinel.service.d.ts

@@ -0,0 +1,39 @@
+import { NotFoundException, OnModuleInit } from '@nestjs/common';
+import { Prisma } from './generated/prisma/client';
+import { PrismaService } from './prisma.service';
+import type { SentinelModuleOptions } from './models/SentinelModuleOptions';
+import { SecuredResource } from './main';
+import { PermissionKeysModel } from './generated/prisma/models';
+import { MongoAbility } from '@casl/ability';
+import { ConfigService } from '@nestjs/config';
+import { JwtService } from '@nestjs/jwt';
+import { SentinelModel } from './models/SentinelModel';
+export declare class SentinelService implements OnModuleInit {
+    private _options;
+    private prisma;
+    private jwt;
+    private config;
+    resources: SecuredResource[];
+    options: SentinelModuleOptions;
+    constructor(_options: SentinelModuleOptions, prisma: PrismaService, jwt: JwtService, config: ConfigService);
+    verify(token: string): SentinelModel;
+    packModel(model: PermissionKeysModel[]): string;
+    parseModelAbilities(model: SentinelModel): MongoAbility;
+    buildModelAbilities(modelId: number): Promise<MongoAbility<import("@casl/ability").AbilityTuple, import("@casl/ability").MongoQuery> | NotFoundException>;
+    onModuleInit(): Promise<void>;
+    getRole(role: Prisma.RolesWhereUniqueInput): Promise<{
+        name: string | null;
+        id: number;
+        createdAt: Date;
+        updatedAt: Date;
+    } | null>;
+    getModelRoles(modelId: number): Promise<PermissionKeysModel[]>;
+    getPermission(id: 'fds' | 'fdsk'): Promise<{
+        id: string;
+        resource: string | null;
+        action: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+        description: string | null;
+    } | null>;
+}

package/dist/src/sentinel.service.js

@@ -0,0 +1,146 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SentinelService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("./prisma.service");
+const sentinel_module_definition_1 = require("./sentinel.module-definition");
+const ability_1 = require("@casl/ability");
+const config_1 = require("@nestjs/config");
+const jwt_1 = require("@nestjs/jwt");
+let SentinelService = class SentinelService {
+    _options;
+    prisma;
+    jwt;
+    config;
+    resources;
+    options;
+    constructor(_options, prisma, jwt, config) {
+        this._options = _options;
+        this.prisma = prisma;
+        this.jwt = jwt;
+        this.config = config;
+        this.options = this._options;
+        this.resources = this.options.resources;
+    }
+    verify(token) {
+        return this.jwt.verify(token);
+    }
+    packModel(model) {
+        return this.jwt.sign({
+            permissions: model,
+        });
+    }
+    parseModelAbilities(model) {
+        const { can, cannot, build } = new ability_1.AbilityBuilder(ability_1.createMongoAbility);
+        for (const resource of this.resources) {
+            for (const action of Object.keys(resource.actions)) {
+                if (model.permissions.find((permissions) => permissions.action == resource.actions[action])) {
+                    can(action, resource.name);
+                }
+                else
+                    cannot(action, resource.name);
+            }
+        }
+        return build({
+            detectSubjectType: (item) => item.constructor,
+        });
+    }
+    async buildModelAbilities(modelId) {
+        const rawModel = await this.getModelRoles(modelId);
+        if (!rawModel)
+            return new common_1.NotFoundException('The provided model ID did not return any Role assigned to it.');
+        const model = {
+            roles: [],
+            permissions: [],
+        };
+        const { can, cannot, build } = new ability_1.AbilityBuilder(ability_1.createMongoAbility);
+        for (const resource of this.resources) {
+            for (const action of Object.keys(resource.actions)) {
+                if (model.permissions.find((permissions) => permissions.action == resource.actions[action])) {
+                    can(action, resource.name);
+                }
+                else
+                    cannot(action, resource.name);
+            }
+        }
+        return build({
+            detectSubjectType: (item) => item.constructor,
+        });
+    }
+    async onModuleInit() {
+        const key = this.config.get('SENTINEL_KEY');
+        if (!key) {
+            throw new Error('SENTINEL_KEY was not found during Sentinel runtime. Have you ran `npx sentinel init`?');
+        }
+        for (const resource of this.options.resources) {
+            const matchingActions = await this.prisma.permissionKeys.findMany({
+                where: {
+                    resource: resource.name,
+                },
+            });
+            Object.keys(resource.actions).forEach((_key) => {
+                if (!matchingActions.find((mAction) => mAction.action == _key)) {
+                    common_1.Logger.warn(`Action "${_key}" in Secured Resource "${resource.name}" does not exist in the database. If these Actions are new, have you persisted them with "npx sentinel commit"?`);
+                }
+            });
+        }
+    }
+    async getRole(role) {
+        return this.prisma.roles.findUnique({
+            where: role,
+        });
+    }
+    async getModelRoles(modelId) {
+        try {
+            const result = await this.prisma.modelHasRoles.findMany({
+                where: {
+                    model: modelId,
+                },
+                include: {
+                    Roles: {
+                        include: {
+                            RoleHasPermissions: {
+                                include: {
+                                    PermissionKeys: true,
+                                },
+                            },
+                        },
+                    },
+                },
+            });
+            const flatResult = result.flatMap((rhp) => rhp.Roles.RoleHasPermissions.map((rhp) => rhp.PermissionKeys));
+            return flatResult;
+        }
+        catch (error) {
+            throw new Error(error);
+        }
+    }
+    async getPermission(id) {
+        return await this.prisma.permissionKeys.findFirst({
+            where: {
+                id,
+            },
+        });
+    }
+};
+exports.SentinelService = SentinelService;
+exports.SentinelService = SentinelService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(sentinel_module_definition_1.MODULE_OPTIONS_TOKEN)),
+    __metadata("design:paramtypes", [Object, prisma_service_1.PrismaService,
+        jwt_1.JwtService,
+        config_1.ConfigService])
+], SentinelService);
+//# sourceMappingURL=sentinel.service.js.map

package/dist/src/sentinel.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.service.js","sourceRoot":"","sources":["../../src/sentinel.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AAExB,qDAAiD;AACjD,6EAAoE;AAIpE,2CAMuB;AACvB,2CAA+C;AAC/C,qCAAyC;AAIlC,IAAM,eAAe,GAArB,MAAM,eAAe;IAIc;IAC9B;IACA;IACA;IANV,SAAS,CAAoB;IAC7B,OAAO,CAAwB;IAC/B,YACwC,QAA+B,EAC7D,MAAqB,EACrB,GAAe,EACf,MAAqB;QAHS,aAAQ,GAAR,QAAQ,CAAuB;QAC7D,WAAM,GAAN,MAAM,CAAe;QACrB,QAAG,GAAH,GAAG,CAAY;QACf,WAAM,GAAN,MAAM,CAAe;QAE7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,SAAS,CAAC,KAA4B;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACnB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,KAAoB;QACtC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,wBAAc,CAAC,4BAAkB,CAAC,CAAC;QAEtE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IACE,KAAK,CAAC,WAAW,CAAC,IAAI,CACpB,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAChE,EACD,CAAC;oBACD,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;;oBAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAID,OAAO,KAAK,CAAC;YACX,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAE1B,IAAI,CAAC,WAA2C;SACnD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ;YACX,OAAO,IAAI,0BAAiB,CAC1B,+DAA+D,CAChE,CAAC;QAEJ,MAAM,KAAK,GAGP;YACF,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;SAChB,CAAC;QASF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,wBAAc,CAAC,4BAAkB,CAAC,CAAC;QAEtE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IACE,KAAK,CAAC,WAAW,CAAC,IAAI,CACpB,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAChE,EACD,CAAC;oBACD,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;;oBAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAID,OAAO,KAAK,CAAC;YACX,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAE1B,IAAI,CAAC,WAA2C;SACnD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY;QAEhB,MAAM,GAAG,GAAuB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;QAGD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAChE,KAAK,EAAE;oBACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;iBACxB;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC7C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;oBAC/D,eAAM,CAAC,IAAI,CACT,WAAW,IAAI,0BAA0B,QAAQ,CAAC,IAAI,iHAAiH,CACxK,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAkC;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;YAClC,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACtD,KAAK,EAAE;oBACL,KAAK,EAAE,OAAO;iBACf;gBACD,OAAO,EAAE;oBACP,KAAK,EAAE;wBACL,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,OAAO,EAAE;oCACP,cAAc,EAAE,IAAI;iCACrB;6BACF;yBACF;qBACF;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,UAAU,GAA0B,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/D,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAC9D,CAAC;YAEF,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAkB;QACpC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC;YAChD,KAAK,EAAE;gBACL,EAAE;aACH;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAlKY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,iDAAoB,CAAC,CAAA;6CACb,8BAAa;QAChB,gBAAU;QACP,sBAAa;GAPpB,eAAe,CAkK3B"}