@infuro/cms-core 1.0.47 → 1.0.50

package/dist/chunk-VUQFARRT.cjs

@@ -1,182 +0,0 @@
-'use strict';
-
-var chunk77NUXO6A_cjs = require('./chunk-77NUXO6A.cjs');
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
-
-// src/auth/helpers.ts
-var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
-  "users",
-  "user_groups",
-  "permissions"
-]);
-function sessionHasEntityAccess(user, entity, action) {
-  return chunk77NUXO6A_cjs.explainSessionEntityAccess(user, entity, action).allowed;
-}
-chunkUSNT2KNT_cjs.__name(sessionHasEntityAccess, "sessionHasEntityAccess");
-function canManageRoles(user) {
-  return !!(user?.email && user.isRBACAdmin);
-}
-chunkUSNT2KNT_cjs.__name(canManageRoles, "canManageRoles");
-var OPEN_ENDPOINTS = [
-  {
-    "/api/contacts": [
-      "POST"
-    ]
-  },
-  {
-    "/api/form-submissions": [
-      "POST"
-    ]
-  },
-  {
-    "/api/blogs": [
-      "GET"
-    ]
-  }
-];
-var PERMISSION_REQUIRED_ENDPOINTS = {};
-function isOpenEndpoint(pathname) {
-  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));
-}
-chunkUSNT2KNT_cjs.__name(isOpenEndpoint, "isOpenEndpoint");
-function getRequiredPermission(pathname) {
-  return null;
-}
-chunkUSNT2KNT_cjs.__name(getRequiredPermission, "getRequiredPermission");
-function isPublicMethod(pathname, method) {
-  for (const endpoint of OPEN_ENDPOINTS) {
-    const key = Object.keys(endpoint)[0];
-    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;
-  }
-  return false;
-}
-chunkUSNT2KNT_cjs.__name(isPublicMethod, "isPublicMethod");
-function createAuthHelpers(getSession, NextResponse) {
-  return createAuthHelpersFromGetSession(getSession, NextResponse);
-}
-chunkUSNT2KNT_cjs.__name(createAuthHelpers, "createAuthHelpers");
-function createCmsAuthBundle(getSession, NextResponse) {
-  const auth = createAuthHelpers(getSession, NextResponse);
-  return {
-    requireAuth: auth.requireAuth,
-    requireAdminAccess: auth.requireAdminAccess,
-    requireEntityPermission: auth.requireEntityPermission,
-    getSessionUser: auth.getAuthenticatedUser,
-    getAuthenticatedUser: auth.getAuthenticatedUser
-  };
-}
-chunkUSNT2KNT_cjs.__name(createCmsAuthBundle, "createCmsAuthBundle");
-function createAuthHelpersFromGetSession(getSession, NextResponse) {
-  return {
-    async requireAuth(_req) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      return null;
-    },
-    async requirePermission(_req, _permission) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      return null;
-    },
-    async requireEntityPermission(_req, entity, action) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      const u = session.user;
-      const allowed = sessionHasEntityAccess(u, entity, action);
-      const { reason } = chunk77NUXO6A_cjs.explainSessionEntityAccess(u, entity, action);
-      chunk77NUXO6A_cjs.logRbac("authHelpers.requireEntityPermission", {
-        entity,
-        action,
-        allowed,
-        reason,
-        email: u.email,
-        groupName: u.groupName,
-        vendorIds: u.vendorIds,
-        isVendorPortal: u.isVendorPortal,
-        isVendorOwner: u.isVendorOwner
-      });
-      if (allowed) return null;
-      return NextResponse.json({
-        error: "Forbidden",
-        entity,
-        action,
-        reason
-      }, {
-        status: 403
-      });
-    },
-    async requireAdminAccess(_req) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      const u = session.user;
-      if (u.isRBACAdmin) return null;
-      if (chunk77NUXO6A_cjs.isVendorPortalUser(u)) return null;
-      if (u.adminAccess === true) return null;
-      if (u.adminAccess === false) {
-        chunk77NUXO6A_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
-          email: u.email,
-          groupName: u.groupName,
-          isVendorPortal: u.isVendorPortal
-        });
-        return NextResponse.json({
-          error: "Forbidden",
-          reason: "admin_access"
-        }, {
-          status: 403
-        });
-      }
-      chunk77NUXO6A_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
-        email: u.email,
-        adminAccess: u.adminAccess,
-        groupName: u.groupName,
-        isVendorPortal: u.isVendorPortal
-      });
-      return NextResponse.json({
-        error: "Forbidden",
-        reason: "admin_access"
-      }, {
-        status: 403
-      });
-    },
-    async getAuthenticatedUser() {
-      const session = await getSession();
-      return session?.user ?? null;
-    }
-  };
-}
-chunkUSNT2KNT_cjs.__name(createAuthHelpersFromGetSession, "createAuthHelpersFromGetSession");
-
-exports.OPEN_ENDPOINTS = OPEN_ENDPOINTS;
-exports.PERMISSION_REQUIRED_ENDPOINTS = PERMISSION_REQUIRED_ENDPOINTS;
-exports.RBAC_ADMIN_ONLY_ENTITIES = RBAC_ADMIN_ONLY_ENTITIES;
-exports.canManageRoles = canManageRoles;
-exports.createAuthHelpers = createAuthHelpers;
-exports.createCmsAuthBundle = createCmsAuthBundle;
-exports.getRequiredPermission = getRequiredPermission;
-exports.isOpenEndpoint = isOpenEndpoint;
-exports.isPublicMethod = isPublicMethod;
-exports.sessionHasEntityAccess = sessionHasEntityAccess;

package/dist/chunk-ZF2RQWXB.js

@@ -1,171 +0,0 @@
-import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-JIWUVQ6B.js';
-import { __name } from './chunk-SHUYVCID.js';
-
-// src/auth/helpers.ts
-var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
-  "users",
-  "user_groups",
-  "permissions"
-]);
-function sessionHasEntityAccess(user, entity, action) {
-  return explainSessionEntityAccess(user, entity, action).allowed;
-}
-__name(sessionHasEntityAccess, "sessionHasEntityAccess");
-function canManageRoles(user) {
-  return !!(user?.email && user.isRBACAdmin);
-}
-__name(canManageRoles, "canManageRoles");
-var OPEN_ENDPOINTS = [
-  {
-    "/api/contacts": [
-      "POST"
-    ]
-  },
-  {
-    "/api/form-submissions": [
-      "POST"
-    ]
-  },
-  {
-    "/api/blogs": [
-      "GET"
-    ]
-  }
-];
-var PERMISSION_REQUIRED_ENDPOINTS = {};
-function isOpenEndpoint(pathname) {
-  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));
-}
-__name(isOpenEndpoint, "isOpenEndpoint");
-function getRequiredPermission(pathname) {
-  return null;
-}
-__name(getRequiredPermission, "getRequiredPermission");
-function isPublicMethod(pathname, method) {
-  for (const endpoint of OPEN_ENDPOINTS) {
-    const key = Object.keys(endpoint)[0];
-    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;
-  }
-  return false;
-}
-__name(isPublicMethod, "isPublicMethod");
-function createAuthHelpers(getSession, NextResponse) {
-  return createAuthHelpersFromGetSession(getSession, NextResponse);
-}
-__name(createAuthHelpers, "createAuthHelpers");
-function createCmsAuthBundle(getSession, NextResponse) {
-  const auth = createAuthHelpers(getSession, NextResponse);
-  return {
-    requireAuth: auth.requireAuth,
-    requireAdminAccess: auth.requireAdminAccess,
-    requireEntityPermission: auth.requireEntityPermission,
-    getSessionUser: auth.getAuthenticatedUser,
-    getAuthenticatedUser: auth.getAuthenticatedUser
-  };
-}
-__name(createCmsAuthBundle, "createCmsAuthBundle");
-function createAuthHelpersFromGetSession(getSession, NextResponse) {
-  return {
-    async requireAuth(_req) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      return null;
-    },
-    async requirePermission(_req, _permission) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      return null;
-    },
-    async requireEntityPermission(_req, entity, action) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      const u = session.user;
-      const allowed = sessionHasEntityAccess(u, entity, action);
-      const { reason } = explainSessionEntityAccess(u, entity, action);
-      logRbac("authHelpers.requireEntityPermission", {
-        entity,
-        action,
-        allowed,
-        reason,
-        email: u.email,
-        groupName: u.groupName,
-        vendorIds: u.vendorIds,
-        isVendorPortal: u.isVendorPortal,
-        isVendorOwner: u.isVendorOwner
-      });
-      if (allowed) return null;
-      return NextResponse.json({
-        error: "Forbidden",
-        entity,
-        action,
-        reason
-      }, {
-        status: 403
-      });
-    },
-    async requireAdminAccess(_req) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      const u = session.user;
-      if (u.isRBACAdmin) return null;
-      if (isVendorPortalUser(u)) return null;
-      if (u.adminAccess === true) return null;
-      if (u.adminAccess === false) {
-        logRbac("requireAdminAccess denied (adminAccess:false)", {
-          email: u.email,
-          groupName: u.groupName,
-          isVendorPortal: u.isVendorPortal
-        });
-        return NextResponse.json({
-          error: "Forbidden",
-          reason: "admin_access"
-        }, {
-          status: 403
-        });
-      }
-      logRbac("requireAdminAccess denied (no matching rule)", {
-        email: u.email,
-        adminAccess: u.adminAccess,
-        groupName: u.groupName,
-        isVendorPortal: u.isVendorPortal
-      });
-      return NextResponse.json({
-        error: "Forbidden",
-        reason: "admin_access"
-      }, {
-        status: 403
-      });
-    },
-    async getAuthenticatedUser() {
-      const session = await getSession();
-      return session?.user ?? null;
-    }
-  };
-}
-__name(createAuthHelpersFromGetSession, "createAuthHelpersFromGetSession");
-
-export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess };