@intlayer/backend 3.0.3 → 3.2.0

package/dist/cjs/index.cjs

@@ -37,7 +37,7 @@ var import_cors = __toESM(require("cors"), 1);
 var import_dotenv = __toESM(require("dotenv"), 1);
 var import_express = __toESM(require("express"), 1);
 var import_express_intlayer = require("express-intlayer");
-var import_admin = require('./middlewares/admin.middleware.cjs');
+var import_helmet = __toESM(require("helmet"), 1);
 var import_oAuth2 = require('./middlewares/oAuth2.middleware.cjs');
 var import_request = require('./middlewares/request.middleware.cjs');
 var import_sessionAuth = require('./middlewares/sessionAuth.middleware.cjs');
@@ -46,6 +46,8 @@ var import_organization = require('./routes/organization.routes.cjs');
 var import_project = require('./routes/project.routes.cjs');
 var import_sessionAuth2 = require('./routes/sessionAuth.routes.cjs');
 var import_user = require('./routes/user.routes.cjs');
+var import_stripe = require('./routes/stripe.routes.cjs');
+var import_stripe2 = require('./webhooks/stripe.webhook.cjs');
 var import_oAuth22 = require('./controllers/oAuth2.controller.cjs');
 var import_sessionAuth3 = require('./controllers/sessionAuth.controller.cjs');
 var import_CSRF = require('./utils/CSRF.cjs');
@@ -53,21 +55,29 @@ var import_connectDB = require('./utils/mongoDB/connectDB.cjs');
 var import_logger = require('./logger/index.cjs');
 const app = (0, import_express.default)();
 app.disable("x-powered-by");
+app.use((0, import_helmet.default)());
 const env = app.get("env");
 import_logger.logger.info(`run as ${env}`);
 import_dotenv.default.config({ path: [".env", `.env.${env}`] });
+app.use((0, import_cookie_parser.default)());
+app.use((0, import_express_intlayer.intlayer)());
 const isDev = env === "development";
 (0, import_connectDB.connectDB)();
+app.post("/webhook/stripe", (0, import_express.raw)({ type: "application/json" }), import_stripe2.stripeWebhook);
 app.use((0, import_compression.default)());
 app.use(import_express.default.json({ limit: "50mb" }));
 app.use(import_express.default.urlencoded({ extended: true }));
-app.use((0, import_cookie_parser.default)());
-app.use((0, import_express_intlayer.intlayer)());
 const whitelist = [process.env.CLIENT_URL];
 const corsOptions = {
   origin: whitelist,
   credentials: true,
-  allowedHeaders: ["authorization", "Content-Type", "credentials"],
+  allowedHeaders: [
+    "authorization",
+    "Content-Type",
+    "credentials",
+    "cache-control",
+    "Access-Control-Allow-Origin"
+  ],
   exposedHeaders: [""],
   preflightContinue: false,
   methods: "GET,HEAD,PUT,PATCH,POST,DELETE"
@@ -86,6 +96,7 @@ app.get("/", (_req, res) => {
 app.use(/(.*)/, import_sessionAuth.checkUser);
 app.use(/(.*)/, import_sessionAuth.checkOrganization);
 app.use(/(.*)/, import_sessionAuth.checkProject);
+app.use(/(.*)/, import_sessionAuth.checkAdmin);
 if (isDev) {
   app.use(import_request.logAPIRequestURL);
 }
@@ -110,11 +121,11 @@ app.use(/(.*)/, (req, res, next) => {
   }
   next();
 });
-app.use(/(.*)/, import_admin.checkAdmin);
 app.use("/api/user", import_user.userRouter);
 app.use("/api/organization", import_organization.organizationRouter);
 app.use("/api/project", import_project.projectRouter);
 app.use("/api/dictionary", import_dictionary.dictionaryRouter);
+app.use("/api/stripe", import_stripe.stripeRouter);
 app.listen(process.env.PORT, () => {
   import_logger.logger.info(`Listening on port ${process.env.PORT}`);
 });

package/dist/cjs/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["/* eslint-disable import/order */\n\n// Libraries\nimport compression from 'compression';\nimport cookieParser from 'cookie-parser';\nimport cors, { type CorsOptions } from 'cors';\nimport dotenv from 'dotenv';\nimport express, { type Express } from 'express';\nimport { intlayer, t } from 'express-intlayer';\n\n// Middlewares\nimport { checkAdmin } from '@middlewares/admin.middleware';\nimport {\n  attachOAuthInstance,\n  authenticateOAuth2,\n  RequestWithOAuth2Information,\n} from '@middlewares/oAuth2.middleware';\nimport { logAPIRequestURL } from '@middlewares/request.middleware';\nimport {\n  checkUser,\n  checkOrganization,\n  checkProject,\n  ResponseWithInformation,\n} from '@middlewares/sessionAuth.middleware';\n\n// Routes\nimport { dictionaryRouter } from '@routes/dictionary.routes';\nimport { organizationRouter } from '@routes/organization.routes';\nimport { projectRouter } from '@routes/project.routes';\nimport { sessionAuthRouter } from '@routes/sessionAuth.routes';\nimport { userRouter } from '@routes/user.routes';\n\n// Controllers\nimport { getOAuth2Token } from '@controllers/oAuth2.controller';\nimport {\n  getSessionInformation,\n  setCSRFToken,\n} from '@controllers/sessionAuth.controller';\n\n// Utils\nimport { doubleCsrfProtection } from '@utils/CSRF';\nimport { connectDB } from '@utils/mongoDB/connectDB';\n\n// Logger\nimport { logger } from './logger';\n\nconst app: Express = express();\n\napp.disable('x-powered-by'); // Disabled to prevent attackers from knowing that the app is running Express\n\n// Environment variables\nconst env = app.get('env');\n\nlogger.info(`run as ${env}`);\n\ndotenv.config({ path: ['.env', `.env.${env}`] });\n\nconst isDev = env === 'development';\n\nconnectDB();\n\n// Compress all HTTP responses\napp.use(compression());\n\n// Parse incoming requests with JSON payloads\napp.use(express.json({ limit: '50mb' }));\n\n// Parse incoming requests with urlencoded payloads\napp.use(express.urlencoded({ extended: true }));\n\n// Parse incoming requests with cookies\napp.use(cookieParser());\n\n// Load internationalization request handler\napp.use(intlayer());\n\n// CORS\nconst whitelist: string[] = [process.env.CLIENT_URL!];\nconst corsOptions: CorsOptions = {\n  origin: whitelist,\n  credentials: true,\n  allowedHeaders: ['authorization', 'Content-Type', 'credentials'],\n  exposedHeaders: [''],\n  preflightContinue: false,\n  methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',\n};\napp.use(cors(corsOptions));\nlogger.info('url whitelist : ', whitelist.join(', '));\n\n// Liveness check\napp.get('/', (_req, res) => {\n  res.send(\n    t({\n      en: 'Ok - locale: en',\n      fr: 'Ok - locale: fr',\n      es: 'Ok - locale: es',\n    })\n  );\n});\n\n// middleware - jwt & session auth\napp.use(/(.*)/, checkUser);\napp.use(/(.*)/, checkOrganization);\napp.use(/(.*)/, checkProject);\n\n// debug\nif (isDev) {\n  app.use(logAPIRequestURL);\n}\n\n// Sessions\napp.get('/session', getSessionInformation);\napp.use('/api/auth', sessionAuthRouter);\n\n// CSRF\napp.get('/csrf-token', setCSRFToken);\n\n// oAuth2\napp.use(/(.*)/, attachOAuthInstance);\napp.post('/oauth2/token', getOAuth2Token); // Route to get the token\napp.use(/(.*)/, (req, res, next) => {\n  // If the request is not already authenticated check the oAuth2 token\n  if (!res.locals.authType) {\n    return authenticateOAuth2(\n      req as RequestWithOAuth2Information,\n      res as ResponseWithInformation,\n      next\n    );\n  }\n  next();\n});\n\n// CSRF protection\napp.use(/(.*)/, (req, res, next) => {\n  // If the request is authenticated using the session auth check the CSRF token\n  if (res.locals.authType === 'session') {\n    return doubleCsrfProtection(req, res, next);\n  }\n  next();\n});\n\n// Admin check for project and organization\napp.use(/(.*)/, checkAdmin);\n\n// Routes\napp.use('/api/user', userRouter);\napp.use('/api/organization', organizationRouter);\napp.use('/api/project', projectRouter);\napp.use('/api/dictionary', dictionaryRouter);\n\n// Server\napp.listen(process.env.PORT, () => {\n  logger.info(`Listening on port ${process.env.PORT}`);\n});\n\n// Export tu use as serverless function\nexport default app;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAAwB;AACxB,2BAAyB;AACzB,kBAAuC;AACvC,oBAAmB;AACnB,qBAAsC;AACtC,8BAA4B;AAG5B,mBAA2B;AAC3B,oBAIO;AACP,qBAAiC;AACjC,yBAKO;AAGP,wBAAiC;AACjC,0BAAmC;AACnC,qBAA8B;AAC9B,IAAAA,sBAAkC;AAClC,kBAA2B;AAG3B,IAAAC,iBAA+B;AAC/B,IAAAD,sBAGO;AAGP,kBAAqC;AACrC,uBAA0B;AAG1B,oBAAuB;AAEvB,MAAM,UAAe,eAAAE,SAAQ;AAE7B,IAAI,QAAQ,cAAc;AAG1B,MAAM,MAAM,IAAI,IAAI,KAAK;AAEzB,qBAAO,KAAK,UAAU,GAAG,EAAE;AAE3B,cAAAC,QAAO,OAAO,EAAE,MAAM,CAAC,QAAQ,QAAQ,GAAG,EAAE,EAAE,CAAC;AAE/C,MAAM,QAAQ,QAAQ;AAAA,IAEtB,4BAAU;AAGV,IAAI,QAAI,mBAAAC,SAAY,CAAC;AAGrB,IAAI,IAAI,eAAAF,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,CAAC;AAGvC,IAAI,IAAI,eAAAA,QAAQ,WAAW,EAAE,UAAU,KAAK,CAAC,CAAC;AAG9C,IAAI,QAAI,qBAAAG,SAAa,CAAC;AAGtB,IAAI,QAAI,kCAAS,CAAC;AAGlB,MAAM,YAAsB,CAAC,QAAQ,IAAI,UAAW;AACpD,MAAM,cAA2B;AAAA,EAC/B,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,gBAAgB,CAAC,iBAAiB,gBAAgB,aAAa;AAAA,EAC/D,gBAAgB,CAAC,EAAE;AAAA,EACnB,mBAAmB;AAAA,EACnB,SAAS;AACX;AACA,IAAI,QAAI,YAAAC,SAAK,WAAW,CAAC;AACzB,qBAAO,KAAK,oBAAoB,UAAU,KAAK,IAAI,CAAC;AAGpD,IAAI,IAAI,KAAK,CAAC,MAAM,QAAQ;AAC1B,MAAI;AAAA,QACF,2BAAE;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACN,CAAC;AAAA,EACH;AACF,CAAC;AAGD,IAAI,IAAI,QAAQ,4BAAS;AACzB,IAAI,IAAI,QAAQ,oCAAiB;AACjC,IAAI,IAAI,QAAQ,+BAAY;AAG5B,IAAI,OAAO;AACT,MAAI,IAAI,+BAAgB;AAC1B;AAGA,IAAI,IAAI,YAAY,yCAAqB;AACzC,IAAI,IAAI,aAAa,qCAAiB;AAGtC,IAAI,IAAI,eAAe,gCAAY;AAGnC,IAAI,IAAI,QAAQ,iCAAmB;AACnC,IAAI,KAAK,iBAAiB,6BAAc;AACxC,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;AAElC,MAAI,CAAC,IAAI,OAAO,UAAU;AACxB,eAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,OAAK;AACP,CAAC;AAGD,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;AAElC,MAAI,IAAI,OAAO,aAAa,WAAW;AACrC,eAAO,kCAAqB,KAAK,KAAK,IAAI;AAAA,EAC5C;AACA,OAAK;AACP,CAAC;AAGD,IAAI,IAAI,QAAQ,uBAAU;AAG1B,IAAI,IAAI,aAAa,sBAAU;AAC/B,IAAI,IAAI,qBAAqB,sCAAkB;AAC/C,IAAI,IAAI,gBAAgB,4BAAa;AACrC,IAAI,IAAI,mBAAmB,kCAAgB;AAG3C,IAAI,OAAO,QAAQ,IAAI,MAAM,MAAM;AACjC,uBAAO,KAAK,qBAAqB,QAAQ,IAAI,IAAI,EAAE;AACrD,CAAC;AAGD,IAAO,cAAQ;","names":["import_sessionAuth","import_oAuth2","express","dotenv","compression","cookieParser","cors"]}
+{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["/* eslint-disable import/order */\n\n// Libraries\nimport compression from 'compression';\nimport cookieParser from 'cookie-parser';\nimport cors, { type CorsOptions } from 'cors';\nimport dotenv from 'dotenv';\nimport express, { raw, type Express } from 'express';\nimport { intlayer, t } from 'express-intlayer';\nimport helmet from 'helmet';\n\n// Middlewares\nimport {\n  attachOAuthInstance,\n  authenticateOAuth2,\n  RequestWithOAuth2Information,\n} from '@middlewares/oAuth2.middleware';\nimport { logAPIRequestURL } from '@middlewares/request.middleware';\nimport {\n  checkUser,\n  checkOrganization,\n  checkProject,\n  checkAdmin,\n  ResponseWithInformation,\n} from '@middlewares/sessionAuth.middleware';\n\n// Routes\nimport { dictionaryRouter } from '@routes/dictionary.routes';\nimport { organizationRouter } from '@routes/organization.routes';\nimport { projectRouter } from '@routes/project.routes';\nimport { sessionAuthRouter } from '@routes/sessionAuth.routes';\nimport { userRouter } from '@routes/user.routes';\nimport { stripeRouter } from '@routes/stripe.routes';\n\n// Webhooks\nimport { stripeWebhook } from '@webhooks/stripe.webhook';\n\n// Controllers\nimport { getOAuth2Token } from '@controllers/oAuth2.controller';\nimport {\n  getSessionInformation,\n  setCSRFToken,\n} from '@controllers/sessionAuth.controller';\n\n// Utils\nimport { doubleCsrfProtection } from '@utils/CSRF';\nimport { connectDB } from '@utils/mongoDB/connectDB';\n\n// Logger\nimport { logger } from './logger';\n\nconst app: Express = express();\n\napp.disable('x-powered-by'); // Disabled to prevent attackers from knowing that the app is running Express\napp.use(helmet());\n\n// Environment variables\nconst env = app.get('env');\n\nlogger.info(`run as ${env}`);\n\ndotenv.config({ path: ['.env', `.env.${env}`] });\n\n// Parse incoming requests with cookies\napp.use(cookieParser());\n\n// Load internationalization request handler\napp.use(intlayer());\n\nconst isDev = env === 'development';\n\n// Connect to MongoDB\nconnectDB();\n\n// Stripe\napp.post('/webhook/stripe', raw({ type: 'application/json' }), stripeWebhook);\n\n// Compress all HTTP responses\napp.use(compression());\n\n// Parse incoming requests with JSON payloads\napp.use(express.json({ limit: '50mb' }));\n\n// Parse incoming requests with urlencoded payloads\napp.use(express.urlencoded({ extended: true }));\n\n// CORS\nconst whitelist: string[] = [process.env.CLIENT_URL!];\nconst corsOptions: CorsOptions = {\n  origin: whitelist,\n  credentials: true,\n  allowedHeaders: [\n    'authorization',\n    'Content-Type',\n    'credentials',\n    'cache-control',\n    'Access-Control-Allow-Origin',\n  ],\n  exposedHeaders: [''],\n  preflightContinue: false,\n  methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',\n};\napp.use(cors(corsOptions));\nlogger.info('url whitelist : ', whitelist.join(', '));\n\n// Liveness check\napp.get('/', (_req, res) => {\n  res.send(\n    t({\n      en: 'Ok - locale: en',\n      fr: 'Ok - locale: fr',\n      es: 'Ok - locale: es',\n    })\n  );\n});\n\n// middleware - jwt & session auth\napp.use(/(.*)/, checkUser);\napp.use(/(.*)/, checkOrganization);\napp.use(/(.*)/, checkProject);\napp.use(/(.*)/, checkAdmin);\n\n// debug\nif (isDev) {\n  app.use(logAPIRequestURL);\n}\n\n// Sessions\napp.get('/session', getSessionInformation);\napp.use('/api/auth', sessionAuthRouter);\n\n// CSRF\napp.get('/csrf-token', setCSRFToken);\n\n// oAuth2\napp.use(/(.*)/, attachOAuthInstance);\napp.post('/oauth2/token', getOAuth2Token); // Route to get the token\napp.use(/(.*)/, (req, res, next) => {\n  // If the request is not already authenticated check the oAuth2 token\n  if (!res.locals.authType) {\n    return authenticateOAuth2(\n      req as RequestWithOAuth2Information,\n      res as ResponseWithInformation,\n      next\n    );\n  }\n  next();\n});\n\n// CSRF protection\napp.use(/(.*)/, (req, res, next) => {\n  // If the request is authenticated using the session auth check the CSRF token\n  if (res.locals.authType === 'session') {\n    return doubleCsrfProtection(req, res, next);\n  }\n  next();\n});\n\n// Routes\napp.use('/api/user', userRouter);\napp.use('/api/organization', organizationRouter);\napp.use('/api/project', projectRouter);\napp.use('/api/dictionary', dictionaryRouter);\napp.use('/api/stripe', stripeRouter);\n\n// Server\napp.listen(process.env.PORT, () => {\n  logger.info(`Listening on port ${process.env.PORT}`);\n});\n\n// Export tu use as serverless function\nexport default app;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAAwB;AACxB,2BAAyB;AACzB,kBAAuC;AACvC,oBAAmB;AACnB,qBAA2C;AAC3C,8BAA4B;AAC5B,oBAAmB;AAGnB,oBAIO;AACP,qBAAiC;AACjC,yBAMO;AAGP,wBAAiC;AACjC,0BAAmC;AACnC,qBAA8B;AAC9B,IAAAA,sBAAkC;AAClC,kBAA2B;AAC3B,oBAA6B;AAG7B,IAAAC,iBAA8B;AAG9B,IAAAC,iBAA+B;AAC/B,IAAAF,sBAGO;AAGP,kBAAqC;AACrC,uBAA0B;AAG1B,oBAAuB;AAEvB,MAAM,UAAe,eAAAG,SAAQ;AAE7B,IAAI,QAAQ,cAAc;AAC1B,IAAI,QAAI,cAAAC,SAAO,CAAC;AAGhB,MAAM,MAAM,IAAI,IAAI,KAAK;AAEzB,qBAAO,KAAK,UAAU,GAAG,EAAE;AAE3B,cAAAC,QAAO,OAAO,EAAE,MAAM,CAAC,QAAQ,QAAQ,GAAG,EAAE,EAAE,CAAC;AAG/C,IAAI,QAAI,qBAAAC,SAAa,CAAC;AAGtB,IAAI,QAAI,kCAAS,CAAC;AAElB,MAAM,QAAQ,QAAQ;AAAA,IAGtB,4BAAU;AAGV,IAAI,KAAK,uBAAmB,oBAAI,EAAE,MAAM,mBAAmB,CAAC,GAAG,4BAAa;AAG5E,IAAI,QAAI,mBAAAC,SAAY,CAAC;AAGrB,IAAI,IAAI,eAAAJ,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,CAAC;AAGvC,IAAI,IAAI,eAAAA,QAAQ,WAAW,EAAE,UAAU,KAAK,CAAC,CAAC;AAG9C,MAAM,YAAsB,CAAC,QAAQ,IAAI,UAAW;AACpD,MAAM,cAA2B;AAAA,EAC/B,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,gBAAgB;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,gBAAgB,CAAC,EAAE;AAAA,EACnB,mBAAmB;AAAA,EACnB,SAAS;AACX;AACA,IAAI,QAAI,YAAAK,SAAK,WAAW,CAAC;AACzB,qBAAO,KAAK,oBAAoB,UAAU,KAAK,IAAI,CAAC;AAGpD,IAAI,IAAI,KAAK,CAAC,MAAM,QAAQ;AAC1B,MAAI;AAAA,QACF,2BAAE;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACN,CAAC;AAAA,EACH;AACF,CAAC;AAGD,IAAI,IAAI,QAAQ,4BAAS;AACzB,IAAI,IAAI,QAAQ,oCAAiB;AACjC,IAAI,IAAI,QAAQ,+BAAY;AAC5B,IAAI,IAAI,QAAQ,6BAAU;AAG1B,IAAI,OAAO;AACT,MAAI,IAAI,+BAAgB;AAC1B;AAGA,IAAI,IAAI,YAAY,yCAAqB;AACzC,IAAI,IAAI,aAAa,qCAAiB;AAGtC,IAAI,IAAI,eAAe,gCAAY;AAGnC,IAAI,IAAI,QAAQ,iCAAmB;AACnC,IAAI,KAAK,iBAAiB,6BAAc;AACxC,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;AAElC,MAAI,CAAC,IAAI,OAAO,UAAU;AACxB,eAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,OAAK;AACP,CAAC;AAGD,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;AAElC,MAAI,IAAI,OAAO,aAAa,WAAW;AACrC,eAAO,kCAAqB,KAAK,KAAK,IAAI;AAAA,EAC5C;AACA,OAAK;AACP,CAAC;AAGD,IAAI,IAAI,aAAa,sBAAU;AAC/B,IAAI,IAAI,qBAAqB,sCAAkB;AAC/C,IAAI,IAAI,gBAAgB,4BAAa;AACrC,IAAI,IAAI,mBAAmB,kCAAgB;AAC3C,IAAI,IAAI,eAAe,0BAAY;AAGnC,IAAI,OAAO,QAAQ,IAAI,MAAM,MAAM;AACjC,uBAAO,KAAK,qBAAqB,QAAQ,IAAI,IAAI,EAAE;AACrD,CAAC;AAGD,IAAO,cAAQ;","names":["import_sessionAuth","import_stripe","import_oAuth2","express","helmet","dotenv","cookieParser","compression","cors"]}

package/dist/cjs/middlewares/oAuth2.middleware.cjs

@@ -61,6 +61,16 @@ const authenticateOAuth2 = async (req, res, next) => {
       oauthResponse,
       import_oAuth2.authenticateOptions
     );
+    const {
+      organization: organizationRights,
+      project: projectRights,
+      dictionary: dictionaryRights
+    } = oAuthToken.rights;
+    res.locals.organizationRights = organizationRights;
+    res.locals.isOrganizationAdmin = organizationRights?.admin ?? false;
+    res.locals.projectRights = projectRights;
+    res.locals.isProjectAdmin = projectRights?.admin ?? false;
+    res.locals.dictionaryRights = dictionaryRights;
     const user = await import_user.UserModel.findById(oAuthToken.user._id);
     if (user) {
       res.locals.user = user;

package/dist/cjs/middlewares/oAuth2.middleware.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/middlewares/oAuth2.middleware.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { logger } from '@logger';\nimport { OrganizationModel } from '@models/organization.model';\nimport { ProjectModel } from '@models/project.model';\nimport { UserModel } from '@models/user.model';\nimport { getAuthModel, authenticateOptions } from '@utils/oAuth2';\nimport { NextFunction, Request, Response } from 'express';\nimport OAuth2Server, {\n  Request as OAuthRequest,\n  Response as OAuthResponse,\n} from 'oauth2-server';\nimport { ResponseWithInformation } from './sessionAuth.middleware';\n\n// Configuration of the OAuth server\nconst oauth = new OAuth2Server({\n  model: getAuthModel(),\n  accessTokenLifetime: 60 * 60, // 1 hour\n  allowBearerTokensInQueryString: true,\n});\n\nexport type RequestWithOAuth2Information<\n  P = any,\n  ResBody = any,\n  ReqBody = any,\n  ReqQuery = qs.ParsedQs,\n> = Request<P, ResBody, ReqBody, ReqQuery> & {\n  oauth: OAuth2Server;\n};\n\nexport const attachOAuthInstance = async (\n  req: Request,\n  _res: Response,\n  next: NextFunction\n) => {\n  // Attach the instance OAuth to the requests\n  (req as RequestWithOAuth2Information).oauth = oauth;\n\n  next();\n};\n\n// Middleware to authenticate requests\nexport const authenticateOAuth2 = async (\n  req: RequestWithOAuth2Information,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  try {\n    const hasToken = !!req.headers.authorization;\n\n    if (!hasToken) {\n      // If the request does not have a token, skip the oAuth2 authentication\n      // Necessary because the oAuth2 library will throw an error if the token is not present\n      return next();\n    }\n\n    // Authenticate the request using OAuth2\n    const oauthRequest = new OAuthRequest(req);\n\n    const oauthResponse = new OAuthResponse(res);\n\n    const oAuthToken = await req.oauth.authenticate(\n      oauthRequest,\n      oauthResponse,\n      authenticateOptions\n    );\n\n    const user = await UserModel.findById(oAuthToken.user._id);\n\n    if (user) {\n      res.locals.user = user;\n      res.locals.authType = 'oauth2';\n    }\n\n    const organization = await OrganizationModel.findById(\n      oAuthToken.organization._id\n    );\n\n    if (organization) {\n      res.locals.organization = organization;\n    }\n\n    const project = await ProjectModel.findById(oAuthToken.project._id);\n\n    if (project) {\n      res.locals.project = project;\n    }\n  } catch (err) {\n    logger.info(err);\n  }\n  next();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAuB;AACvB,0BAAkC;AAClC,qBAA6B;AAC7B,kBAA0B;AAC1B,oBAAkD;AAElD,2BAGO;AAIP,MAAM,QAAQ,IAAI,qBAAAA,QAAa;AAAA,EAC7B,WAAO,4BAAa;AAAA,EACpB,qBAAqB,KAAK;AAAA;AAAA,EAC1B,gCAAgC;AAClC,CAAC;AAWM,MAAM,sBAAsB,OACjC,KACA,MACA,SACG;AAEH,EAAC,IAAqC,QAAQ;AAE9C,OAAK;AACP;AAGO,MAAM,qBAAqB,OAChC,KACA,KACA,SACkB;AAClB,MAAI;AACF,UAAM,WAAW,CAAC,CAAC,IAAI,QAAQ;AAE/B,QAAI,CAAC,UAAU;AAGb,aAAO,KAAK;AAAA,IACd;AAGA,UAAM,eAAe,IAAI,qBAAAC,QAAa,GAAG;AAEzC,UAAM,gBAAgB,IAAI,qBAAAC,SAAc,GAAG;AAE3C,UAAM,aAAa,MAAM,IAAI,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,sBAAU,SAAS,WAAW,KAAK,GAAG;AAEzD,QAAI,MAAM;AACR,UAAI,OAAO,OAAO;AAClB,UAAI,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,eAAe,MAAM,sCAAkB;AAAA,MAC3C,WAAW,aAAa;AAAA,IAC1B;AAEA,QAAI,cAAc;AAChB,UAAI,OAAO,eAAe;AAAA,IAC5B;AAEA,UAAM,UAAU,MAAM,4BAAa,SAAS,WAAW,QAAQ,GAAG;AAElE,QAAI,SAAS;AACX,UAAI,OAAO,UAAU;AAAA,IACvB;AAAA,EACF,SAAS,KAAK;AACZ,yBAAO,KAAK,GAAG;AAAA,EACjB;AACA,OAAK;AACP;","names":["OAuth2Server","OAuthRequest","OAuthResponse"]}
+{"version":3,"sources":["../../../src/middlewares/oAuth2.middleware.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport { logger } from '@logger';\nimport { OrganizationModel } from '@models/organization.model';\nimport { ProjectModel } from '@models/project.model';\nimport { UserModel } from '@models/user.model';\nimport { getAuthModel, authenticateOptions } from '@utils/oAuth2';\nimport { NextFunction, Request, Response } from 'express';\nimport OAuth2Server, {\n  Request as OAuthRequest,\n  Response as OAuthResponse,\n} from 'oauth2-server';\nimport { ResponseWithInformation } from './sessionAuth.middleware';\n\n// Configuration of the OAuth server\nconst oauth = new OAuth2Server({\n  model: getAuthModel(),\n  accessTokenLifetime: 60 * 60, // 1 hour\n  allowBearerTokensInQueryString: true,\n});\n\nexport type RequestWithOAuth2Information<\n  P = any,\n  ResBody = any,\n  ReqBody = any,\n  ReqQuery = qs.ParsedQs,\n> = Request<P, ResBody, ReqBody, ReqQuery> & {\n  oauth: OAuth2Server;\n};\n\nexport const attachOAuthInstance = async (\n  req: Request,\n  _res: Response,\n  next: NextFunction\n) => {\n  // Attach the instance OAuth to the requests\n  (req as RequestWithOAuth2Information).oauth = oauth;\n\n  next();\n};\n\n// Middleware to authenticate requests\nexport const authenticateOAuth2 = async (\n  req: RequestWithOAuth2Information,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  try {\n    const hasToken = !!req.headers.authorization;\n\n    if (!hasToken) {\n      // If the request does not have a token, skip the oAuth2 authentication\n      // Necessary because the oAuth2 library will throw an error if the token is not present\n      return next();\n    }\n\n    // Authenticate the request using OAuth2\n    const oauthRequest = new OAuthRequest(req);\n\n    const oauthResponse = new OAuthResponse(res);\n\n    const oAuthToken = await req.oauth.authenticate(\n      oauthRequest,\n      oauthResponse,\n      authenticateOptions\n    );\n\n    const {\n      organization: organizationRights,\n      project: projectRights,\n      dictionary: dictionaryRights,\n    } = oAuthToken.rights;\n\n    res.locals.organizationRights = organizationRights;\n    res.locals.isOrganizationAdmin = organizationRights?.admin ?? false;\n    res.locals.projectRights = projectRights;\n    res.locals.isProjectAdmin = projectRights?.admin ?? false;\n    res.locals.dictionaryRights = dictionaryRights;\n\n    const user = await UserModel.findById(oAuthToken.user._id);\n\n    if (user) {\n      res.locals.user = user;\n      res.locals.authType = 'oauth2';\n    }\n\n    const organization = await OrganizationModel.findById(\n      oAuthToken.organization._id\n    );\n\n    if (organization) {\n      res.locals.organization = organization;\n    }\n    const project = await ProjectModel.findById(oAuthToken.project._id);\n\n    if (project) {\n      res.locals.project = project;\n    }\n  } catch (err) {\n    logger.info(err);\n  }\n  next();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAuB;AACvB,0BAAkC;AAClC,qBAA6B;AAC7B,kBAA0B;AAC1B,oBAAkD;AAElD,2BAGO;AAIP,MAAM,QAAQ,IAAI,qBAAAA,QAAa;AAAA,EAC7B,WAAO,4BAAa;AAAA,EACpB,qBAAqB,KAAK;AAAA;AAAA,EAC1B,gCAAgC;AAClC,CAAC;AAWM,MAAM,sBAAsB,OACjC,KACA,MACA,SACG;AAEH,EAAC,IAAqC,QAAQ;AAE9C,OAAK;AACP;AAGO,MAAM,qBAAqB,OAChC,KACA,KACA,SACkB;AAClB,MAAI;AACF,UAAM,WAAW,CAAC,CAAC,IAAI,QAAQ;AAE/B,QAAI,CAAC,UAAU;AAGb,aAAO,KAAK;AAAA,IACd;AAGA,UAAM,eAAe,IAAI,qBAAAC,QAAa,GAAG;AAEzC,UAAM,gBAAgB,IAAI,qBAAAC,SAAc,GAAG;AAE3C,UAAM,aAAa,MAAM,IAAI,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM;AAAA,MACJ,cAAc;AAAA,MACd,SAAS;AAAA,MACT,YAAY;AAAA,IACd,IAAI,WAAW;AAEf,QAAI,OAAO,qBAAqB;AAChC,QAAI,OAAO,sBAAsB,oBAAoB,SAAS;AAC9D,QAAI,OAAO,gBAAgB;AAC3B,QAAI,OAAO,iBAAiB,eAAe,SAAS;AACpD,QAAI,OAAO,mBAAmB;AAE9B,UAAM,OAAO,MAAM,sBAAU,SAAS,WAAW,KAAK,GAAG;AAEzD,QAAI,MAAM;AACR,UAAI,OAAO,OAAO;AAClB,UAAI,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,eAAe,MAAM,sCAAkB;AAAA,MAC3C,WAAW,aAAa;AAAA,IAC1B;AAEA,QAAI,cAAc;AAChB,UAAI,OAAO,eAAe;AAAA,IAC5B;AACA,UAAM,UAAU,MAAM,4BAAa,SAAS,WAAW,QAAQ,GAAG;AAElE,QAAI,SAAS;AACX,UAAI,OAAO,UAAU;AAAA,IACvB;AAAA,EACF,SAAS,KAAK;AACZ,yBAAO,KAAK,GAAG;AAAA,EACjB;AACA,OAAK;AACP;","names":["OAuth2Server","OAuthRequest","OAuthResponse"]}

package/dist/cjs/middlewares/sessionAuth.middleware.cjs

@@ -28,7 +28,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var sessionAuth_middleware_exports = {};
 __export(sessionAuth_middleware_exports, {
-  AuthInformationType: () => AuthInformationType,
+  checkAdmin: () => checkAdmin,
   checkOrganization: () => checkOrganization,
   checkProject: () => checkProject,
   checkUser: () => checkUser
@@ -40,20 +40,13 @@ var import_sessionAuth = require('./../services/sessionAuth.service.cjs');
 var import_user = require('./../services/user.service.cjs');
 var import_cookies = require('./../utils/cookies.cjs');
 var import_jsonwebtoken = __toESM(require("jsonwebtoken"), 1);
-var AuthInformationType = /* @__PURE__ */ ((AuthInformationType2) => {
-  AuthInformationType2[AuthInformationType2["IsNull"] = 0] = "IsNull";
-  AuthInformationType2[AuthInformationType2["IsDefined"] = 1] = "IsDefined";
-  return AuthInformationType2;
-})(AuthInformationType || {});
 const checkUser = async (req, res, next) => {
   const { [import_cookies.Cookies.JWT_AUTH]: sessionToken } = req.cookies;
   res.locals.user = null;
   res.locals.authType = null;
   try {
     if (sessionToken) {
-      const user = await (0, import_user.getUserBySession)(
-        sessionToken
-      );
+      const user = await (0, import_user.getUserBySession)(sessionToken);
       if (user) {
         res.locals.user = user.toObject();
         res.locals.authType = "session";
@@ -120,9 +113,56 @@ const checkProject = async (req, res, next) => {
   }
   return next();
 };
+const checkAdmin = async (_req, res, next) => {
+  const { organization, project, user, authType } = res.locals;
+  if (authType !== "session") {
+    return next();
+  }
+  res.locals.organizationRights = {
+    read: true,
+    write: false,
+    admin: false
+  };
+  res.locals.projectRights = {
+    read: true,
+    write: false,
+    admin: false
+  };
+  res.locals.projectRights = {
+    read: true,
+    write: false,
+    admin: false
+  };
+  if (user) {
+    if (organization) {
+      const isOrganizationAdmin = organization.adminsIds.map((id) => String(id)).includes(String(user._id)) ?? false;
+      res.locals.isOrganizationAdmin = isOrganizationAdmin;
+      res.locals.organizationRights = {
+        read: true,
+        write: isOrganizationAdmin,
+        admin: isOrganizationAdmin
+      };
+    }
+    if (project) {
+      const isProjectAdmin = project.adminsIds.map((id) => String(id)).includes(String(user._id)) ?? false;
+      res.locals.isProjectAdmin = isProjectAdmin;
+      res.locals.projectRights = {
+        read: true,
+        write: isProjectAdmin,
+        admin: isProjectAdmin
+      };
+      res.locals.dictionaryRights = {
+        read: true,
+        write: true,
+        admin: true
+      };
+    }
+  }
+  return next();
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  AuthInformationType,
+  checkAdmin,
   checkOrganization,
   checkProject,
   checkUser

package/dist/cjs/middlewares/sessionAuth.middleware.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/middlewares/sessionAuth.middleware.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\n\nimport { OrganizationModel } from '@models/organization.model';\nimport { ProjectModel } from '@models/project.model';\nimport {\n  clearOrganizationAuth,\n  clearProjectAuth,\n} from '@services/sessionAuth.service';\nimport { getUserBySession as getUserBySessionService } from '@services/user.service';\nimport { Cookies } from '@utils/cookies';\nimport type { Request, Response, NextFunction } from 'express';\nimport jwt from 'jsonwebtoken';\nimport type {\n  Organization,\n  OrganizationDocument,\n} from '@/types/organization.types';\nimport type { Project, ProjectDocument } from '@/types/project.types';\nimport type { User, UserDocument } from '@/types/user.types';\n\nexport enum AuthInformationType {\n  IsNull,\n  IsDefined,\n}\n\nexport type ResponseWithInformation<ResBody = any> = Response<\n  ResBody,\n  {\n    user: User | null;\n    organization: Organization | null;\n    isOrganizationAdmin: boolean | null;\n    project: Project | null;\n    isProjectAdmin: boolean | null;\n    authType: 'session' | 'oauth2' | null;\n  }\n>;\n\nexport const checkUser = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const { [Cookies.JWT_AUTH]: sessionToken } = req.cookies;\n\n  res.locals.user = null;\n  res.locals.authType = null;\n\n  try {\n    if (sessionToken) {\n      const user: UserDocument | null = (await getUserBySessionService(\n        sessionToken\n      )) as UserDocument | null;\n\n      if (user) {\n        res.locals.user = user.toObject();\n        res.locals.authType = 'session';\n      }\n    }\n  } catch (error) {\n    console.error('Error fetching session:', error);\n  }\n\n  return next();\n};\n\nexport const checkOrganization = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const jwtTokenOrganization = req.cookies[Cookies.JWT_ORGANIZATION];\n\n  res.locals.organization = null;\n\n  try {\n    if (!jwtTokenOrganization || jwtTokenOrganization === 'undefined') {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    const organizationData = jwt.verify(\n      jwtTokenOrganization,\n      process.env.JWT_TOKEN_SECRET!\n    ) as Organization;\n\n    if (!organizationData) {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    const organization: OrganizationDocument | null =\n      await OrganizationModel.findById(organizationData._id);\n\n    if (!organization) {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    res.locals.organization = organization.toObject();\n  } catch (error) {\n    console.error('Error fetching organization:', error);\n  }\n\n  return next();\n};\n\nexport const checkProject = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const jwtTokenProject = req.cookies[Cookies.JWT_PROJECT];\n  res.locals.project = null;\n\n  try {\n    if (!jwtTokenProject || jwtTokenProject === 'undefined') {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    const decodedTokenProject = jwt.verify(\n      jwtTokenProject,\n      process.env.JWT_TOKEN_SECRET!\n    ) as Project;\n\n    if (!decodedTokenProject) {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    const project: ProjectDocument | null = await ProjectModel.findById(\n      decodedTokenProject._id\n    );\n\n    if (\n      !project ||\n      !res.locals.organization ||\n      String(project.organizationId) !== String(res.locals.organization._id)\n    ) {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    res.locals.project = project.toObject();\n  } catch (error) {\n    console.error('Error fetching project:', error);\n  }\n\n  return next();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,0BAAkC;AAClC,qBAA6B;AAC7B,yBAGO;AACP,kBAA4D;AAC5D,qBAAwB;AAExB,0BAAgB;AAQT,IAAK,sBAAL,kBAAKA,yBAAL;AACL,EAAAA,0CAAA;AACA,EAAAA,0CAAA;AAFU,SAAAA;AAAA,GAAA;AAiBL,MAAM,YAAY,OACvB,KACA,KACA,SACkB;AAClB,QAAM,EAAE,CAAC,uBAAQ,QAAQ,GAAG,aAAa,IAAI,IAAI;AAEjD,MAAI,OAAO,OAAO;AAClB,MAAI,OAAO,WAAW;AAEtB,MAAI;AACF,QAAI,cAAc;AAChB,YAAM,OAA6B,UAAM,YAAAC;AAAA,QACvC;AAAA,MACF;AAEA,UAAI,MAAM;AACR,YAAI,OAAO,OAAO,KAAK,SAAS;AAChC,YAAI,OAAO,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAAA,EAChD;AAEA,SAAO,KAAK;AACd;AAEO,MAAM,oBAAoB,OAC/B,KACA,KACA,SACkB;AAClB,QAAM,uBAAuB,IAAI,QAAQ,uBAAQ,gBAAgB;AAEjE,MAAI,OAAO,eAAe;AAE1B,MAAI;AACF,QAAI,CAAC,wBAAwB,yBAAyB,aAAa;AACjE,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,mBAAmB,oBAAAC,QAAI;AAAA,MAC3B;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,CAAC,kBAAkB;AACrB,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,eACJ,MAAM,sCAAkB,SAAS,iBAAiB,GAAG;AAEvD,QAAI,CAAC,cAAc;AACjB,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,OAAO,eAAe,aAAa,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,gCAAgC,KAAK;AAAA,EACrD;AAEA,SAAO,KAAK;AACd;AAEO,MAAM,eAAe,OAC1B,KACA,KACA,SACkB;AAClB,QAAM,kBAAkB,IAAI,QAAQ,uBAAQ,WAAW;AACvD,MAAI,OAAO,UAAU;AAErB,MAAI;AACF,QAAI,CAAC,mBAAmB,oBAAoB,aAAa;AACvD,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,sBAAsB,oBAAAA,QAAI;AAAA,MAC9B;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,CAAC,qBAAqB;AACxB,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,UAAkC,MAAM,4BAAa;AAAA,MACzD,oBAAoB;AAAA,IACtB;AAEA,QACE,CAAC,WACD,CAAC,IAAI,OAAO,gBACZ,OAAO,QAAQ,cAAc,MAAM,OAAO,IAAI,OAAO,aAAa,GAAG,GACrE;AACA,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,OAAO,UAAU,QAAQ,SAAS;AAAA,EACxC,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAAA,EAChD;AAEA,SAAO,KAAK;AACd;","names":["AuthInformationType","getUserBySessionService","jwt"]}
+{"version":3,"sources":["../../../src/middlewares/sessionAuth.middleware.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\n\nimport { OrganizationModel } from '@models/organization.model';\nimport { ProjectModel } from '@models/project.model';\nimport {\n  clearOrganizationAuth,\n  clearProjectAuth,\n} from '@services/sessionAuth.service';\nimport { getUserBySession as getUserBySessionService } from '@services/user.service';\nimport { Cookies } from '@utils/cookies';\nimport type { Request, Response, NextFunction } from 'express';\nimport jwt from 'jsonwebtoken';\nimport type {\n  Organization,\n  OrganizationDocument,\n} from '@/types/organization.types';\nimport type { Project, ProjectDocument, Rights } from '@/types/project.types';\nimport type { User } from '@/types/user.types';\n\nexport type ResponseWithInformation<ResBody = any> = Response<\n  ResBody,\n  {\n    user: User | null;\n    // Auth Context\n    organization: Organization | null;\n    project: Project | null;\n    authType: 'session' | 'oauth2' | null;\n    // Auth Rights - oAuth2 Auth\n    organizationRights: Rights | null;\n    projectRights: Rights | null;\n    dictionaryRights: Rights | null;\n    // Auth Rights - Session Auth\n    isOrganizationAdmin: boolean | null;\n    isProjectAdmin: boolean | null;\n  }\n>;\n\nexport const checkUser = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const { [Cookies.JWT_AUTH]: sessionToken } = req.cookies;\n\n  res.locals.user = null;\n  res.locals.authType = null;\n\n  try {\n    if (sessionToken) {\n      const user = await getUserBySessionService(sessionToken);\n\n      if (user) {\n        res.locals.user = user.toObject();\n        res.locals.authType = 'session';\n      }\n    }\n  } catch (error) {\n    console.error('Error fetching session:', error);\n  }\n\n  return next();\n};\n\nexport const checkOrganization = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const jwtTokenOrganization = req.cookies[Cookies.JWT_ORGANIZATION];\n\n  res.locals.organization = null;\n\n  try {\n    if (!jwtTokenOrganization || jwtTokenOrganization === 'undefined') {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    const organizationData = jwt.verify(\n      jwtTokenOrganization,\n      process.env.JWT_TOKEN_SECRET!\n    ) as Organization;\n\n    if (!organizationData) {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    const organization: OrganizationDocument | null =\n      await OrganizationModel.findById(organizationData._id);\n\n    if (!organization) {\n      clearOrganizationAuth(res);\n      return next();\n    }\n\n    res.locals.organization = organization.toObject();\n  } catch (error) {\n    console.error('Error fetching organization:', error);\n  }\n\n  return next();\n};\n\nexport const checkProject = async (\n  req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const jwtTokenProject = req.cookies[Cookies.JWT_PROJECT];\n  res.locals.project = null;\n\n  try {\n    if (!jwtTokenProject || jwtTokenProject === 'undefined') {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    const decodedTokenProject = jwt.verify(\n      jwtTokenProject,\n      process.env.JWT_TOKEN_SECRET!\n    ) as Project;\n\n    if (!decodedTokenProject) {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    const project: ProjectDocument | null = await ProjectModel.findById(\n      decodedTokenProject._id\n    );\n\n    if (\n      !project ||\n      !res.locals.organization ||\n      String(project.organizationId) !== String(res.locals.organization._id)\n    ) {\n      clearProjectAuth(res);\n      return next();\n    }\n\n    res.locals.project = project.toObject();\n  } catch (error) {\n    console.error('Error fetching project:', error);\n  }\n\n  return next();\n};\n\n/**\n * Middleware to check if the user is an admin of the organization or project\n * Sets the following properties in res.locals:\n * - isOrganizationAdmin: boolean\n * - isProjectAdmin: boolean\n */\nexport const checkAdmin = async (\n  _req: Request,\n  res: ResponseWithInformation,\n  next: NextFunction\n): Promise<void> => {\n  const { organization, project, user, authType } = res.locals;\n\n  if (authType !== 'session') {\n    return next();\n  }\n\n  res.locals.organizationRights = {\n    read: true,\n    write: false,\n    admin: false,\n  };\n  res.locals.projectRights = {\n    read: true,\n    write: false,\n    admin: false,\n  };\n  res.locals.projectRights = {\n    read: true,\n    write: false,\n    admin: false,\n  };\n\n  if (user) {\n    if (organization) {\n      const isOrganizationAdmin: boolean =\n        organization.adminsIds\n          .map((id) => String(id))\n          .includes(String(user._id)) ?? false;\n\n      res.locals.isOrganizationAdmin = isOrganizationAdmin;\n\n      res.locals.organizationRights = {\n        read: true,\n        write: isOrganizationAdmin,\n        admin: isOrganizationAdmin,\n      };\n    }\n\n    if (project) {\n      const isProjectAdmin: boolean =\n        project.adminsIds.map((id) => String(id)).includes(String(user._id)) ??\n        false;\n\n      res.locals.isProjectAdmin = isProjectAdmin;\n\n      res.locals.projectRights = {\n        read: true,\n        write: isProjectAdmin,\n        admin: isProjectAdmin,\n      };\n\n      res.locals.dictionaryRights = {\n        read: true,\n        write: true,\n        admin: true,\n      };\n    }\n  }\n\n  return next();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,0BAAkC;AAClC,qBAA6B;AAC7B,yBAGO;AACP,kBAA4D;AAC5D,qBAAwB;AAExB,0BAAgB;AA0BT,MAAM,YAAY,OACvB,KACA,KACA,SACkB;AAClB,QAAM,EAAE,CAAC,uBAAQ,QAAQ,GAAG,aAAa,IAAI,IAAI;AAEjD,MAAI,OAAO,OAAO;AAClB,MAAI,OAAO,WAAW;AAEtB,MAAI;AACF,QAAI,cAAc;AAChB,YAAM,OAAO,UAAM,YAAAA,kBAAwB,YAAY;AAEvD,UAAI,MAAM;AACR,YAAI,OAAO,OAAO,KAAK,SAAS;AAChC,YAAI,OAAO,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAAA,EAChD;AAEA,SAAO,KAAK;AACd;AAEO,MAAM,oBAAoB,OAC/B,KACA,KACA,SACkB;AAClB,QAAM,uBAAuB,IAAI,QAAQ,uBAAQ,gBAAgB;AAEjE,MAAI,OAAO,eAAe;AAE1B,MAAI;AACF,QAAI,CAAC,wBAAwB,yBAAyB,aAAa;AACjE,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,mBAAmB,oBAAAC,QAAI;AAAA,MAC3B;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,CAAC,kBAAkB;AACrB,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,eACJ,MAAM,sCAAkB,SAAS,iBAAiB,GAAG;AAEvD,QAAI,CAAC,cAAc;AACjB,oDAAsB,GAAG;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,OAAO,eAAe,aAAa,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,gCAAgC,KAAK;AAAA,EACrD;AAEA,SAAO,KAAK;AACd;AAEO,MAAM,eAAe,OAC1B,KACA,KACA,SACkB;AAClB,QAAM,kBAAkB,IAAI,QAAQ,uBAAQ,WAAW;AACvD,MAAI,OAAO,UAAU;AAErB,MAAI;AACF,QAAI,CAAC,mBAAmB,oBAAoB,aAAa;AACvD,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,sBAAsB,oBAAAA,QAAI;AAAA,MAC9B;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAEA,QAAI,CAAC,qBAAqB;AACxB,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,UAAkC,MAAM,4BAAa;AAAA,MACzD,oBAAoB;AAAA,IACtB;AAEA,QACE,CAAC,WACD,CAAC,IAAI,OAAO,gBACZ,OAAO,QAAQ,cAAc,MAAM,OAAO,IAAI,OAAO,aAAa,GAAG,GACrE;AACA,+CAAiB,GAAG;AACpB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,OAAO,UAAU,QAAQ,SAAS;AAAA,EACxC,SAAS,OAAO;AACd,YAAQ,MAAM,2BAA2B,KAAK;AAAA,EAChD;AAEA,SAAO,KAAK;AACd;AAQO,MAAM,aAAa,OACxB,MACA,KACA,SACkB;AAClB,QAAM,EAAE,cAAc,SAAS,MAAM,SAAS,IAAI,IAAI;AAEtD,MAAI,aAAa,WAAW;AAC1B,WAAO,KAAK;AAAA,EACd;AAEA,MAAI,OAAO,qBAAqB;AAAA,IAC9B,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AACA,MAAI,OAAO,gBAAgB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AACA,MAAI,OAAO,gBAAgB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AAEA,MAAI,MAAM;AACR,QAAI,cAAc;AAChB,YAAM,sBACJ,aAAa,UACV,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,EACtB,SAAS,OAAO,KAAK,GAAG,CAAC,KAAK;AAEnC,UAAI,OAAO,sBAAsB;AAEjC,UAAI,OAAO,qBAAqB;AAAA,QAC9B,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,SAAS;AACX,YAAM,iBACJ,QAAQ,UAAU,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,EAAE,SAAS,OAAO,KAAK,GAAG,CAAC,KACnE;AAEF,UAAI,OAAO,iBAAiB;AAE5B,UAAI,OAAO,gBAAgB;AAAA,QACzB,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAEA,UAAI,OAAO,mBAAmB;AAAA,QAC5B,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO,KAAK;AACd;","names":["getUserBySessionService","jwt"]}

package/dist/cjs/routes/dictionary.routes.cjs

@@ -23,10 +23,9 @@ __export(dictionary_routes_exports, {
 });
 module.exports = __toCommonJS(dictionary_routes_exports);
 var import_dictionary = require('./../controllers/dictionary.controller.cjs');
-var import_accessControl = require('./../utils/accessControl.cjs');
 var import_express = require("express");
 const dictionaryRouter = (0, import_express.Router)();
-const baseURL = `${process.env.CLIENT_URL}/api/dictionary`;
+const baseURL = `${process.env.BACKEND_URL}/api/dictionary`;
 const dictionaryRoutes = {
   getDictionaries: {
     urlModel: "/",
@@ -66,86 +65,27 @@ const dictionaryRoutes = {
 };
 dictionaryRouter.get(
   dictionaryRoutes.getDictionaries.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(
-    [
-      import_accessControl.AccessRule.authenticated,
-      import_accessControl.AccessRule.hasOrganization,
-      import_accessControl.AccessRule.hasProject
-    ],
-    import_accessControl.AccessRule.admin
-  ),
   import_dictionary.getDictionaries
 );
 dictionaryRouter.get(
   dictionaryRoutes.getDictionariesKeys.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(
-    [
-      import_accessControl.AccessRule.authenticated,
-      import_accessControl.AccessRule.hasOrganization,
-      import_accessControl.AccessRule.hasProject
-    ],
-    import_accessControl.AccessRule.admin
-  ),
   import_dictionary.getDictionariesKeys
 );
 dictionaryRouter.get(
   dictionaryRoutes.getDictionary.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(
-    [
-      import_accessControl.AccessRule.authenticated,
-      import_accessControl.AccessRule.hasOrganization,
-      import_accessControl.AccessRule.hasProject
-    ],
-    import_accessControl.AccessRule.admin
-  ),
   import_dictionary.getDictionaryByKey
 );
-dictionaryRouter.post(
-  dictionaryRoutes.addDictionary.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(
-    [
-      import_accessControl.AccessRule.authenticated,
-      import_accessControl.AccessRule.hasOrganization,
-      import_accessControl.AccessRule.hasProject
-    ],
-    import_accessControl.AccessRule.admin
-  ),
-  import_dictionary.addDictionary
-);
+dictionaryRouter.post(dictionaryRoutes.addDictionary.urlModel, import_dictionary.addDictionary);
 dictionaryRouter.patch(
   dictionaryRoutes.pushDictionaries.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(
-    [
-      import_accessControl.AccessRule.authenticated,
-      import_accessControl.AccessRule.hasOrganization,
-      import_accessControl.AccessRule.hasProject
-    ],
-    import_accessControl.AccessRule.admin
-  ),
   import_dictionary.pushDictionaries
 );
 dictionaryRouter.put(
   dictionaryRoutes.updateDictionary.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(
-    [
-      import_accessControl.AccessRule.authenticated,
-      import_accessControl.AccessRule.hasOrganization,
-      import_accessControl.AccessRule.hasProject
-    ],
-    import_accessControl.AccessRule.admin
-  ),
   import_dictionary.updateDictionary
 );
 dictionaryRouter.delete(
   dictionaryRoutes.deleteDictionary.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(
-    [
-      import_accessControl.AccessRule.authenticated,
-      import_accessControl.AccessRule.hasOrganization,
-      import_accessControl.AccessRule.hasProject
-    ],
-    import_accessControl.AccessRule.admin
-  ),
   import_dictionary.deleteDictionary
 );
 // Annotate the CommonJS export names for ESM import in node:

package/dist/cjs/routes/dictionary.routes.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/routes/dictionary.routes.ts"],"sourcesContent":["import {\n  pushDictionaries,\n  addDictionary,\n  deleteDictionary,\n  getDictionaries,\n  updateDictionary,\n  getDictionaryByKey,\n  getDictionariesKeys,\n} from '@controllers/dictionary.controller';\nimport { accessControlMiddleWare, AccessRule } from '@utils/accessControl';\nimport { Router } from 'express';\nimport { Routes } from '@/types/Routes';\n\nexport const dictionaryRouter: Router = Router();\n\nconst baseURL = `${process.env.CLIENT_URL}/api/dictionary`;\n\nexport const dictionaryRoutes = {\n  getDictionaries: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'GET',\n  },\n  getDictionariesKeys: {\n    urlModel: '/keys',\n    url: `${baseURL}/keys`,\n    method: 'GET',\n  },\n  getDictionary: {\n    urlModel: '/:dictionaryKey',\n    url: ({ dictionaryKey }: { dictionaryKey: string }) =>\n      `${baseURL}/${dictionaryKey}`,\n    method: 'GET',\n  },\n  addDictionary: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'POST',\n  },\n  pushDictionaries: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'PATCH',\n  },\n  updateDictionary: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'PUT',\n  },\n  deleteDictionary: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'DELETE',\n  },\n} satisfies Routes;\n\ndictionaryRouter.get(\n  dictionaryRoutes.getDictionaries.urlModel,\n  accessControlMiddleWare(\n    [\n      AccessRule.authenticated,\n      AccessRule.hasOrganization,\n      AccessRule.hasProject,\n    ],\n    AccessRule.admin\n  ),\n  getDictionaries\n);\n\ndictionaryRouter.get(\n  dictionaryRoutes.getDictionariesKeys.urlModel,\n  accessControlMiddleWare(\n    [\n      AccessRule.authenticated,\n      AccessRule.hasOrganization,\n      AccessRule.hasProject,\n    ],\n    AccessRule.admin\n  ),\n  getDictionariesKeys\n);\n\ndictionaryRouter.get(\n  dictionaryRoutes.getDictionary.urlModel,\n  accessControlMiddleWare(\n    [\n      AccessRule.authenticated,\n      AccessRule.hasOrganization,\n      AccessRule.hasProject,\n    ],\n    AccessRule.admin\n  ),\n  getDictionaryByKey\n);\n\ndictionaryRouter.post(\n  dictionaryRoutes.addDictionary.urlModel,\n  accessControlMiddleWare(\n    [\n      AccessRule.authenticated,\n      AccessRule.hasOrganization,\n      AccessRule.hasProject,\n    ],\n    AccessRule.admin\n  ),\n  addDictionary\n);\ndictionaryRouter.patch(\n  dictionaryRoutes.pushDictionaries.urlModel,\n  accessControlMiddleWare(\n    [\n      AccessRule.authenticated,\n      AccessRule.hasOrganization,\n      AccessRule.hasProject,\n    ],\n    AccessRule.admin\n  ),\n  pushDictionaries\n);\ndictionaryRouter.put(\n  dictionaryRoutes.updateDictionary.urlModel,\n  accessControlMiddleWare(\n    [\n      AccessRule.authenticated,\n      AccessRule.hasOrganization,\n      AccessRule.hasProject,\n    ],\n    AccessRule.admin\n  ),\n  updateDictionary\n);\ndictionaryRouter.delete(\n  dictionaryRoutes.deleteDictionary.urlModel,\n  accessControlMiddleWare(\n    [\n      AccessRule.authenticated,\n      AccessRule.hasOrganization,\n      AccessRule.hasProject,\n    ],\n    AccessRule.admin\n  ),\n  deleteDictionary\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAQO;AACP,2BAAoD;AACpD,qBAAuB;AAGhB,MAAM,uBAA2B,uBAAO;AAE/C,MAAM,UAAU,GAAG,QAAQ,IAAI,UAAU;AAElC,MAAM,mBAAmB;AAAA,EAC9B,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,qBAAqB;AAAA,IACnB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK,CAAC,EAAE,cAAc,MACpB,GAAG,OAAO,IAAI,aAAa;AAAA,IAC7B,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AACF;AAEA,iBAAiB;AAAA,EACf,iBAAiB,gBAAgB;AAAA,MACjC;AAAA,IACE;AAAA,MACE,gCAAW;AAAA,MACX,gCAAW;AAAA,MACX,gCAAW;AAAA,IACb;AAAA,IACA,gCAAW;AAAA,EACb;AAAA,EACA;AACF;AAEA,iBAAiB;AAAA,EACf,iBAAiB,oBAAoB;AAAA,MACrC;AAAA,IACE;AAAA,MACE,gCAAW;AAAA,MACX,gCAAW;AAAA,MACX,gCAAW;AAAA,IACb;AAAA,IACA,gCAAW;AAAA,EACb;AAAA,EACA;AACF;AAEA,iBAAiB;AAAA,EACf,iBAAiB,cAAc;AAAA,MAC/B;AAAA,IACE;AAAA,MACE,gCAAW;AAAA,MACX,gCAAW;AAAA,MACX,gCAAW;AAAA,IACb;AAAA,IACA,gCAAW;AAAA,EACb;AAAA,EACA;AACF;AAEA,iBAAiB;AAAA,EACf,iBAAiB,cAAc;AAAA,MAC/B;AAAA,IACE;AAAA,MACE,gCAAW;AAAA,MACX,gCAAW;AAAA,MACX,gCAAW;AAAA,IACb;AAAA,IACA,gCAAW;AAAA,EACb;AAAA,EACA;AACF;AACA,iBAAiB;AAAA,EACf,iBAAiB,iBAAiB;AAAA,MAClC;AAAA,IACE;AAAA,MACE,gCAAW;AAAA,MACX,gCAAW;AAAA,MACX,gCAAW;AAAA,IACb;AAAA,IACA,gCAAW;AAAA,EACb;AAAA,EACA;AACF;AACA,iBAAiB;AAAA,EACf,iBAAiB,iBAAiB;AAAA,MAClC;AAAA,IACE;AAAA,MACE,gCAAW;AAAA,MACX,gCAAW;AAAA,MACX,gCAAW;AAAA,IACb;AAAA,IACA,gCAAW;AAAA,EACb;AAAA,EACA;AACF;AACA,iBAAiB;AAAA,EACf,iBAAiB,iBAAiB;AAAA,MAClC;AAAA,IACE;AAAA,MACE,gCAAW;AAAA,MACX,gCAAW;AAAA,MACX,gCAAW;AAAA,IACb;AAAA,IACA,gCAAW;AAAA,EACb;AAAA,EACA;AACF;","names":[]}
+{"version":3,"sources":["../../../src/routes/dictionary.routes.ts"],"sourcesContent":["import {\n  pushDictionaries,\n  addDictionary,\n  deleteDictionary,\n  getDictionaries,\n  updateDictionary,\n  getDictionaryByKey,\n  getDictionariesKeys,\n} from '@controllers/dictionary.controller';\nimport { Router } from 'express';\nimport { Routes } from '@/types/Routes';\n\nexport const dictionaryRouter: Router = Router();\n\nconst baseURL = `${process.env.BACKEND_URL}/api/dictionary`;\n\nexport const dictionaryRoutes = {\n  getDictionaries: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'GET',\n  },\n  getDictionariesKeys: {\n    urlModel: '/keys',\n    url: `${baseURL}/keys`,\n    method: 'GET',\n  },\n  getDictionary: {\n    urlModel: '/:dictionaryKey',\n    url: ({ dictionaryKey }: { dictionaryKey: string }) =>\n      `${baseURL}/${dictionaryKey}`,\n    method: 'GET',\n  },\n  addDictionary: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'POST',\n  },\n  pushDictionaries: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'PATCH',\n  },\n  updateDictionary: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'PUT',\n  },\n  deleteDictionary: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'DELETE',\n  },\n} satisfies Routes;\n\ndictionaryRouter.get(\n  dictionaryRoutes.getDictionaries.urlModel,\n  getDictionaries\n);\n\ndictionaryRouter.get(\n  dictionaryRoutes.getDictionariesKeys.urlModel,\n  getDictionariesKeys\n);\n\ndictionaryRouter.get(\n  dictionaryRoutes.getDictionary.urlModel,\n  getDictionaryByKey\n);\n\ndictionaryRouter.post(dictionaryRoutes.addDictionary.urlModel, addDictionary);\ndictionaryRouter.patch(\n  dictionaryRoutes.pushDictionaries.urlModel,\n  pushDictionaries\n);\ndictionaryRouter.put(\n  dictionaryRoutes.updateDictionary.urlModel,\n  updateDictionary\n);\ndictionaryRouter.delete(\n  dictionaryRoutes.deleteDictionary.urlModel,\n  deleteDictionary\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAQO;AACP,qBAAuB;AAGhB,MAAM,uBAA2B,uBAAO;AAE/C,MAAM,UAAU,GAAG,QAAQ,IAAI,WAAW;AAEnC,MAAM,mBAAmB;AAAA,EAC9B,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,qBAAqB;AAAA,IACnB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK,CAAC,EAAE,cAAc,MACpB,GAAG,OAAO,IAAI,aAAa;AAAA,IAC7B,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AACF;AAEA,iBAAiB;AAAA,EACf,iBAAiB,gBAAgB;AAAA,EACjC;AACF;AAEA,iBAAiB;AAAA,EACf,iBAAiB,oBAAoB;AAAA,EACrC;AACF;AAEA,iBAAiB;AAAA,EACf,iBAAiB,cAAc;AAAA,EAC/B;AACF;AAEA,iBAAiB,KAAK,iBAAiB,cAAc,UAAU,+BAAa;AAC5E,iBAAiB;AAAA,EACf,iBAAiB,iBAAiB;AAAA,EAClC;AACF;AACA,iBAAiB;AAAA,EACf,iBAAiB,iBAAiB;AAAA,EAClC;AACF;AACA,iBAAiB;AAAA,EACf,iBAAiB,iBAAiB;AAAA,EAClC;AACF;","names":[]}

package/dist/cjs/routes/organization.routes.cjs

@@ -23,10 +23,9 @@ __export(organization_routes_exports, {
 });
 module.exports = __toCommonJS(organization_routes_exports);
 var import_organization = require('./../controllers/organization.controller.cjs');
-var import_accessControl = require('./../utils/accessControl.cjs');
 var import_express = require("express");
 const organizationRouter = (0, import_express.Router)();
-const baseURL = `${process.env.CLIENT_URL}/api/organization`;
+const baseURL = `${process.env.BACKEND_URL}/api/organization`;
 const organizationRoutes = {
   getOrganizations: {
     urlModel: "/",
@@ -71,57 +70,34 @@ const organizationRoutes = {
 };
 organizationRouter.get(
   organizationRoutes.getOrganizations.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(import_accessControl.AccessRule.authenticated),
   import_organization.getOrganizations
 );
 organizationRouter.post(
   organizationRoutes.addOrganization.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)(import_accessControl.AccessRule.authenticated),
   import_organization.addOrganization
 );
 organizationRouter.put(
   organizationRoutes.updateOrganization.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization
-  ]),
   import_organization.updateOrganization
 );
 organizationRouter.put(
   organizationRoutes.updateOrganizationMembers.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization
-  ]),
   import_organization.updateOrganizationMembers
 );
 organizationRouter.post(
   organizationRoutes.addOrganizationMember.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization
-  ]),
   import_organization.addOrganizationMember
 );
 organizationRouter.delete(
   organizationRoutes.deleteOrganization.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization
-  ]),
   import_organization.deleteOrganization
 );
 organizationRouter.put(
   organizationRoutes.selectOrganization.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([import_accessControl.AccessRule.authenticated]),
   import_organization.selectOrganization
 );
 organizationRouter.post(
   organizationRoutes.unselectOrganization.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization
-  ]),
   import_organization.unselectOrganization
 );
 // Annotate the CommonJS export names for ESM import in node:

package/dist/cjs/routes/organization.routes.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/routes/organization.routes.ts"],"sourcesContent":["import {\n  addOrganization,\n  deleteOrganization,\n  selectOrganization,\n  getOrganizations,\n  updateOrganization,\n  updateOrganizationMembers,\n  unselectOrganization,\n  addOrganizationMember,\n} from '@controllers/organization.controller';\nimport { accessControlMiddleWare, AccessRule } from '@utils/accessControl';\nimport { Router } from 'express';\nimport { Routes } from '@/types/Routes';\n\nexport const organizationRouter: Router = Router();\n\nconst baseURL = `${process.env.CLIENT_URL}/api/organization`;\n\nexport const organizationRoutes = {\n  getOrganizations: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'GET',\n  },\n  addOrganization: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'POST',\n  },\n  updateOrganization: {\n    urlModel: '/',\n    url: baseURL,\n\n    method: 'PUT',\n  },\n  updateOrganizationMembers: {\n    urlModel: '/members',\n    url: `${baseURL}/members`,\n    method: 'PUT',\n  },\n  addOrganizationMember: {\n    urlModel: '/member',\n    url: `${baseURL}/member`,\n    method: 'POST',\n  },\n  deleteOrganization: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'DELETE',\n  },\n  selectOrganization: {\n    urlModel: '/:organizationId',\n    url: ({ organizationId }: { organizationId: string }) =>\n      `${baseURL}/${organizationId}`,\n    method: 'PUT',\n  },\n  unselectOrganization: {\n    urlModel: '/logout',\n    url: `${baseURL}/logout`,\n    method: 'POST',\n  },\n} satisfies Routes;\n\norganizationRouter.get(\n  organizationRoutes.getOrganizations.urlModel,\n  accessControlMiddleWare(AccessRule.authenticated),\n  getOrganizations\n);\n\norganizationRouter.post(\n  organizationRoutes.addOrganization.urlModel,\n  accessControlMiddleWare(AccessRule.authenticated),\n  addOrganization\n);\norganizationRouter.put(\n  organizationRoutes.updateOrganization.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n  ]),\n  updateOrganization\n);\norganizationRouter.put(\n  organizationRoutes.updateOrganizationMembers.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n  ]),\n  updateOrganizationMembers\n);\norganizationRouter.post(\n  organizationRoutes.addOrganizationMember.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n  ]),\n  addOrganizationMember\n);\norganizationRouter.delete(\n  organizationRoutes.deleteOrganization.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n  ]),\n  deleteOrganization\n);\norganizationRouter.put(\n  organizationRoutes.selectOrganization.urlModel,\n  accessControlMiddleWare([AccessRule.authenticated]),\n  selectOrganization\n);\n\norganizationRouter.post(\n  organizationRoutes.unselectOrganization.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n  ]),\n  unselectOrganization\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BASO;AACP,2BAAoD;AACpD,qBAAuB;AAGhB,MAAM,yBAA6B,uBAAO;AAEjD,MAAM,UAAU,GAAG,QAAQ,IAAI,UAAU;AAElC,MAAM,qBAAqB;AAAA,EAChC,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,oBAAoB;AAAA,IAClB,UAAU;AAAA,IACV,KAAK;AAAA,IAEL,QAAQ;AAAA,EACV;AAAA,EACA,2BAA2B;AAAA,IACzB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,uBAAuB;AAAA,IACrB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,oBAAoB;AAAA,IAClB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,oBAAoB;AAAA,IAClB,UAAU;AAAA,IACV,KAAK,CAAC,EAAE,eAAe,MACrB,GAAG,OAAO,IAAI,cAAc;AAAA,IAC9B,QAAQ;AAAA,EACV;AAAA,EACA,sBAAsB;AAAA,IACpB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AACF;AAEA,mBAAmB;AAAA,EACjB,mBAAmB,iBAAiB;AAAA,MACpC,8CAAwB,gCAAW,aAAa;AAAA,EAChD;AACF;AAEA,mBAAmB;AAAA,EACjB,mBAAmB,gBAAgB;AAAA,MACnC,8CAAwB,gCAAW,aAAa;AAAA,EAChD;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,mBAAmB;AAAA,MACtC,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,0BAA0B;AAAA,MAC7C,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,sBAAsB;AAAA,MACzC,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,mBAAmB;AAAA,MACtC,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,mBAAmB;AAAA,MACtC,8CAAwB,CAAC,gCAAW,aAAa,CAAC;AAAA,EAClD;AACF;AAEA,mBAAmB;AAAA,EACjB,mBAAmB,qBAAqB;AAAA,MACxC,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;","names":[]}
+{"version":3,"sources":["../../../src/routes/organization.routes.ts"],"sourcesContent":["import {\n  addOrganization,\n  deleteOrganization,\n  selectOrganization,\n  getOrganizations,\n  updateOrganization,\n  updateOrganizationMembers,\n  unselectOrganization,\n  addOrganizationMember,\n} from '@controllers/organization.controller';\nimport { Router } from 'express';\nimport { Routes } from '@/types/Routes';\n\nexport const organizationRouter: Router = Router();\n\nconst baseURL = `${process.env.BACKEND_URL}/api/organization`;\n\nexport const organizationRoutes = {\n  getOrganizations: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'GET',\n  },\n  addOrganization: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'POST',\n  },\n  updateOrganization: {\n    urlModel: '/',\n    url: baseURL,\n\n    method: 'PUT',\n  },\n  updateOrganizationMembers: {\n    urlModel: '/members',\n    url: `${baseURL}/members`,\n    method: 'PUT',\n  },\n  addOrganizationMember: {\n    urlModel: '/member',\n    url: `${baseURL}/member`,\n    method: 'POST',\n  },\n  deleteOrganization: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'DELETE',\n  },\n  selectOrganization: {\n    urlModel: '/:organizationId',\n    url: ({ organizationId }: { organizationId: string }) =>\n      `${baseURL}/${organizationId}`,\n    method: 'PUT',\n  },\n  unselectOrganization: {\n    urlModel: '/logout',\n    url: `${baseURL}/logout`,\n    method: 'POST',\n  },\n} satisfies Routes;\n\norganizationRouter.get(\n  organizationRoutes.getOrganizations.urlModel,\n  getOrganizations\n);\n\norganizationRouter.post(\n  organizationRoutes.addOrganization.urlModel,\n  addOrganization\n);\norganizationRouter.put(\n  organizationRoutes.updateOrganization.urlModel,\n  updateOrganization\n);\norganizationRouter.put(\n  organizationRoutes.updateOrganizationMembers.urlModel,\n  updateOrganizationMembers\n);\norganizationRouter.post(\n  organizationRoutes.addOrganizationMember.urlModel,\n  addOrganizationMember\n);\norganizationRouter.delete(\n  organizationRoutes.deleteOrganization.urlModel,\n  deleteOrganization\n);\norganizationRouter.put(\n  organizationRoutes.selectOrganization.urlModel,\n  selectOrganization\n);\n\norganizationRouter.post(\n  organizationRoutes.unselectOrganization.urlModel,\n  unselectOrganization\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BASO;AACP,qBAAuB;AAGhB,MAAM,yBAA6B,uBAAO;AAEjD,MAAM,UAAU,GAAG,QAAQ,IAAI,WAAW;AAEnC,MAAM,qBAAqB;AAAA,EAChC,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,oBAAoB;AAAA,IAClB,UAAU;AAAA,IACV,KAAK;AAAA,IAEL,QAAQ;AAAA,EACV;AAAA,EACA,2BAA2B;AAAA,IACzB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,uBAAuB;AAAA,IACrB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,oBAAoB;AAAA,IAClB,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,oBAAoB;AAAA,IAClB,UAAU;AAAA,IACV,KAAK,CAAC,EAAE,eAAe,MACrB,GAAG,OAAO,IAAI,cAAc;AAAA,IAC9B,QAAQ;AAAA,EACV;AAAA,EACA,sBAAsB;AAAA,IACpB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AACF;AAEA,mBAAmB;AAAA,EACjB,mBAAmB,iBAAiB;AAAA,EACpC;AACF;AAEA,mBAAmB;AAAA,EACjB,mBAAmB,gBAAgB;AAAA,EACnC;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,mBAAmB;AAAA,EACtC;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,0BAA0B;AAAA,EAC7C;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,sBAAsB;AAAA,EACzC;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,mBAAmB;AAAA,EACtC;AACF;AACA,mBAAmB;AAAA,EACjB,mBAAmB,mBAAmB;AAAA,EACtC;AACF;AAEA,mBAAmB;AAAA,EACjB,mBAAmB,qBAAqB;AAAA,EACxC;AACF;","names":[]}

package/dist/cjs/routes/project.routes.cjs

@@ -24,10 +24,9 @@ __export(project_routes_exports, {
 module.exports = __toCommonJS(project_routes_exports);
 var import_project = require('./../controllers/project.controller.cjs');
 var import_projectAccessKey = require('./../controllers/projectAccessKey.controller.cjs');
-var import_accessControl = require('./../utils/accessControl.cjs');
 var import_express = require("express");
 const projectRouter = (0, import_express.Router)();
-const baseURL = `${process.env.CLIENT_URL}/api/project`;
+const baseURL = `${process.env.BACKEND_URL}/api/project`;
 const projectRoutes = {
   getProjects: {
     urlModel: "/",
@@ -80,93 +79,19 @@ const projectRoutes = {
     method: "DELETE"
   }
 };
-projectRouter.get(
-  projectRoutes.getProjects.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization
-  ]),
-  import_project.getProjects
-);
-projectRouter.post(
-  projectRoutes.addProject.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization
-  ]),
-  import_project.addProject
-);
-projectRouter.put(
-  projectRoutes.updateProject.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization,
-    import_accessControl.AccessRule.hasProject
-  ]),
-  import_project.updateProject
-);
+projectRouter.get(projectRoutes.getProjects.urlModel, import_project.getProjects);
+projectRouter.post(projectRoutes.addProject.urlModel, import_project.addProject);
+projectRouter.put(projectRoutes.updateProject.urlModel, import_project.updateProject);
 projectRouter.put(
   projectRoutes.updateProjectMembers.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization,
-    import_accessControl.AccessRule.hasProject
-  ]),
   import_project.updateProjectMembers
 );
-projectRouter.delete(
-  projectRoutes.deleteProject.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization,
-    import_accessControl.AccessRule.hasProject
-  ]),
-  import_project.deleteProject
-);
-projectRouter.post(
-  projectRoutes.addNewAccessKey.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization,
-    import_accessControl.AccessRule.hasProject
-  ]),
-  import_projectAccessKey.addNewAccessKey
-);
-projectRouter.patch(
-  projectRoutes.refreshAccessKey.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization,
-    import_accessControl.AccessRule.hasProject
-  ]),
-  import_projectAccessKey.refreshAccessKey
-);
-projectRouter.delete(
-  projectRoutes.deleteAccessKey.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization,
-    import_accessControl.AccessRule.hasProject
-  ]),
-  import_projectAccessKey.deleteAccessKey
-);
-projectRouter.post(
-  projectRoutes.unselectProject.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization,
-    import_accessControl.AccessRule.hasProject
-  ]),
-  import_project.unselectProject
-);
-projectRouter.put(
-  projectRoutes.selectProject.urlModel,
-  (0, import_accessControl.accessControlMiddleWare)([
-    import_accessControl.AccessRule.authenticated,
-    import_accessControl.AccessRule.hasOrganization
-  ]),
-  import_project.selectProject
-);
+projectRouter.delete(projectRoutes.deleteProject.urlModel, import_project.deleteProject);
+projectRouter.post(projectRoutes.addNewAccessKey.urlModel, import_projectAccessKey.addNewAccessKey);
+projectRouter.patch(projectRoutes.refreshAccessKey.urlModel, import_projectAccessKey.refreshAccessKey);
+projectRouter.delete(projectRoutes.deleteAccessKey.urlModel, import_projectAccessKey.deleteAccessKey);
+projectRouter.post(projectRoutes.unselectProject.urlModel, import_project.unselectProject);
+projectRouter.put(projectRoutes.selectProject.urlModel, import_project.selectProject);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   projectRouter,

package/dist/cjs/routes/project.routes.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/routes/project.routes.ts"],"sourcesContent":["import {\n  addProject,\n  deleteProject,\n  getProjects,\n  updateProject,\n  selectProject,\n  unselectProject,\n  updateProjectMembers,\n} from '@controllers/project.controller';\nimport {\n  addNewAccessKey,\n  deleteAccessKey,\n  refreshAccessKey,\n} from '@controllers/projectAccessKey.controller';\nimport { accessControlMiddleWare, AccessRule } from '@utils/accessControl';\nimport { Router } from 'express';\nimport { Routes } from '@/types/Routes';\n\nexport const projectRouter: Router = Router();\n\nconst baseURL = `${process.env.CLIENT_URL}/api/project`;\n\nexport const projectRoutes = {\n  getProjects: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'GET',\n  },\n  addProject: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'POST',\n  },\n  updateProject: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'PUT',\n  },\n  updateProjectMembers: {\n    urlModel: '/members',\n    url: `${process.env.CLIENT_URL}/api/members`,\n    method: 'PUT',\n  },\n  deleteProject: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'DELETE',\n  },\n  selectProject: {\n    urlModel: '/:projectId',\n    url: ({ projectId }: { projectId: string }) => `${baseURL}/${projectId}`,\n    method: 'PUT',\n  },\n  unselectProject: {\n    urlModel: '/logout',\n    url: `${baseURL}/logout`,\n    method: 'POST',\n  },\n  addNewAccessKey: {\n    urlModel: '/access_key',\n    url: `${baseURL}/access_key`,\n    method: 'POST',\n  },\n  refreshAccessKey: {\n    urlModel: '/access_key',\n    url: `${baseURL}/access_key`,\n    method: 'PATCH',\n  },\n  deleteAccessKey: {\n    urlModel: '/access_key',\n    url: `${baseURL}/access_key`,\n    method: 'DELETE',\n  },\n} satisfies Routes;\n\nprojectRouter.get(\n  projectRoutes.getProjects.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n  ]),\n  getProjects\n);\n\nprojectRouter.post(\n  projectRoutes.addProject.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n  ]),\n  addProject\n);\nprojectRouter.put(\n  projectRoutes.updateProject.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n    AccessRule.hasProject,\n  ]),\n  updateProject\n);\nprojectRouter.put(\n  projectRoutes.updateProjectMembers.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n    AccessRule.hasProject,\n  ]),\n  updateProjectMembers\n);\nprojectRouter.delete(\n  projectRoutes.deleteProject.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n    AccessRule.hasProject,\n  ]),\n  deleteProject\n);\n\nprojectRouter.post(\n  projectRoutes.addNewAccessKey.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n    AccessRule.hasProject,\n  ]),\n  addNewAccessKey\n);\n\nprojectRouter.patch(\n  projectRoutes.refreshAccessKey.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n    AccessRule.hasProject,\n  ]),\n  refreshAccessKey\n);\n\nprojectRouter.delete(\n  projectRoutes.deleteAccessKey.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n    AccessRule.hasProject,\n  ]),\n  deleteAccessKey\n);\n\nprojectRouter.post(\n  projectRoutes.unselectProject.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n    AccessRule.hasProject,\n  ]),\n  unselectProject\n);\n\nprojectRouter.put(\n  projectRoutes.selectProject.urlModel,\n  accessControlMiddleWare([\n    AccessRule.authenticated,\n    AccessRule.hasOrganization,\n  ]),\n  selectProject\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAQO;AACP,8BAIO;AACP,2BAAoD;AACpD,qBAAuB;AAGhB,MAAM,oBAAwB,uBAAO;AAE5C,MAAM,UAAU,GAAG,QAAQ,IAAI,UAAU;AAElC,MAAM,gBAAgB;AAAA,EAC3B,aAAa;AAAA,IACX,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,YAAY;AAAA,IACV,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,sBAAsB;AAAA,IACpB,UAAU;AAAA,IACV,KAAK,GAAG,QAAQ,IAAI,UAAU;AAAA,IAC9B,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK,CAAC,EAAE,UAAU,MAA6B,GAAG,OAAO,IAAI,SAAS;AAAA,IACtE,QAAQ;AAAA,EACV;AAAA,EACA,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AACF;AAEA,cAAc;AAAA,EACZ,cAAc,YAAY;AAAA,MAC1B,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AAEA,cAAc;AAAA,EACZ,cAAc,WAAW;AAAA,MACzB,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AACA,cAAc;AAAA,EACZ,cAAc,cAAc;AAAA,MAC5B,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AACA,cAAc;AAAA,EACZ,cAAc,qBAAqB;AAAA,MACnC,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AACA,cAAc;AAAA,EACZ,cAAc,cAAc;AAAA,MAC5B,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AAEA,cAAc;AAAA,EACZ,cAAc,gBAAgB;AAAA,MAC9B,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AAEA,cAAc;AAAA,EACZ,cAAc,iBAAiB;AAAA,MAC/B,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AAEA,cAAc;AAAA,EACZ,cAAc,gBAAgB;AAAA,MAC9B,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AAEA,cAAc;AAAA,EACZ,cAAc,gBAAgB;AAAA,MAC9B,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;AAEA,cAAc;AAAA,EACZ,cAAc,cAAc;AAAA,MAC5B,8CAAwB;AAAA,IACtB,gCAAW;AAAA,IACX,gCAAW;AAAA,EACb,CAAC;AAAA,EACD;AACF;","names":[]}
+{"version":3,"sources":["../../../src/routes/project.routes.ts"],"sourcesContent":["import {\n  addProject,\n  deleteProject,\n  getProjects,\n  updateProject,\n  selectProject,\n  unselectProject,\n  updateProjectMembers,\n} from '@controllers/project.controller';\nimport {\n  addNewAccessKey,\n  deleteAccessKey,\n  refreshAccessKey,\n} from '@controllers/projectAccessKey.controller';\nimport { Router } from 'express';\nimport { Routes } from '@/types/Routes';\n\nexport const projectRouter: Router = Router();\n\nconst baseURL = `${process.env.BACKEND_URL}/api/project`;\n\nexport const projectRoutes = {\n  getProjects: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'GET',\n  },\n  addProject: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'POST',\n  },\n  updateProject: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'PUT',\n  },\n  updateProjectMembers: {\n    urlModel: '/members',\n    url: `${process.env.CLIENT_URL}/api/members`,\n    method: 'PUT',\n  },\n  deleteProject: {\n    urlModel: '/',\n    url: baseURL,\n    method: 'DELETE',\n  },\n  selectProject: {\n    urlModel: '/:projectId',\n    url: ({ projectId }: { projectId: string }) => `${baseURL}/${projectId}`,\n    method: 'PUT',\n  },\n  unselectProject: {\n    urlModel: '/logout',\n    url: `${baseURL}/logout`,\n    method: 'POST',\n  },\n  addNewAccessKey: {\n    urlModel: '/access_key',\n    url: `${baseURL}/access_key`,\n    method: 'POST',\n  },\n  refreshAccessKey: {\n    urlModel: '/access_key',\n    url: `${baseURL}/access_key`,\n    method: 'PATCH',\n  },\n  deleteAccessKey: {\n    urlModel: '/access_key',\n    url: `${baseURL}/access_key`,\n    method: 'DELETE',\n  },\n} satisfies Routes;\n\nprojectRouter.get(projectRoutes.getProjects.urlModel, getProjects);\n\nprojectRouter.post(projectRoutes.addProject.urlModel, addProject);\nprojectRouter.put(projectRoutes.updateProject.urlModel, updateProject);\nprojectRouter.put(\n  projectRoutes.updateProjectMembers.urlModel,\n  updateProjectMembers\n);\nprojectRouter.delete(projectRoutes.deleteProject.urlModel, deleteProject);\n\nprojectRouter.post(projectRoutes.addNewAccessKey.urlModel, addNewAccessKey);\n\nprojectRouter.patch(projectRoutes.refreshAccessKey.urlModel, refreshAccessKey);\n\nprojectRouter.delete(projectRoutes.deleteAccessKey.urlModel, deleteAccessKey);\n\nprojectRouter.post(projectRoutes.unselectProject.urlModel, unselectProject);\n\nprojectRouter.put(projectRoutes.selectProject.urlModel, selectProject);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAQO;AACP,8BAIO;AACP,qBAAuB;AAGhB,MAAM,oBAAwB,uBAAO;AAE5C,MAAM,UAAU,GAAG,QAAQ,IAAI,WAAW;AAEnC,MAAM,gBAAgB;AAAA,EAC3B,aAAa;AAAA,IACX,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,YAAY;AAAA,IACV,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,sBAAsB;AAAA,IACpB,UAAU;AAAA,IACV,KAAK,GAAG,QAAQ,IAAI,UAAU;AAAA,IAC9B,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,EACV;AAAA,EACA,eAAe;AAAA,IACb,UAAU;AAAA,IACV,KAAK,CAAC,EAAE,UAAU,MAA6B,GAAG,OAAO,IAAI,SAAS;AAAA,IACtE,QAAQ;AAAA,EACV;AAAA,EACA,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,kBAAkB;AAAA,IAChB,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AAAA,EACA,iBAAiB;AAAA,IACf,UAAU;AAAA,IACV,KAAK,GAAG,OAAO;AAAA,IACf,QAAQ;AAAA,EACV;AACF;AAEA,cAAc,IAAI,cAAc,YAAY,UAAU,0BAAW;AAEjE,cAAc,KAAK,cAAc,WAAW,UAAU,yBAAU;AAChE,cAAc,IAAI,cAAc,cAAc,UAAU,4BAAa;AACrE,cAAc;AAAA,EACZ,cAAc,qBAAqB;AAAA,EACnC;AACF;AACA,cAAc,OAAO,cAAc,cAAc,UAAU,4BAAa;AAExE,cAAc,KAAK,cAAc,gBAAgB,UAAU,uCAAe;AAE1E,cAAc,MAAM,cAAc,iBAAiB,UAAU,wCAAgB;AAE7E,cAAc,OAAO,cAAc,gBAAgB,UAAU,uCAAe;AAE5E,cAAc,KAAK,cAAc,gBAAgB,UAAU,8BAAe;AAE1E,cAAc,IAAI,cAAc,cAAc,UAAU,4BAAa;","names":[]}