@jcdubs/janus 1.0.1 → 1.2.0

package/README.md

@@ -1,5 +1,6 @@
 # Janus
 
+
 [![CI](https://github.com/JCDubs/Janus/actions/workflows/main.yaml/badge.svg?branch=main)](https://github.com/JCDubs/Janus/actions/workflows/main.yaml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Node.js Version](https://img.shields.io/badge/node-%3E%3D20-brightgreen)](https://nodejs.org)
@@ -16,6 +17,8 @@ Open source serverless authentication: A Cedar-based authorization engine for de
 
 Janus is a TypeScript library that provides fine-grained, policy-based authorization for AWS Lambda functions using [Cedar](https://www.cedarpolicy.com/). It enables you to define complex authorization rules and evaluate them efficiently within your serverless applications.
 
+Janus is based on the pattern discussed in this blog post: [Serverless: Granular Authorisation with Cedar — High control, minimal cost](https://medium.com/@jcdubs/serverless-granular-authorisation-with-cedar-high-control-minimal-cost-1149640f8cd9).
+
 ### Key Features
 
 - 🔐 **Cedar Policy Engine** - Leverage Amazon's Cedar policy language for authorization
@@ -115,31 +118,112 @@ namespace OrderService {
 }
 ```
 
+### Implement the Auth Lambda
+
+The following example demonstrates a simple AWS Lambda handler that uses the middleware
+to load Cedar authorization and then performs an authorization check inside the handler.
+
+```typescript
+import middy from '@middy/core';
+import type { APIGatewayProxyEvent, APIGatewayProxyResult } from 'aws-lambda';
+import {
+  loadCedarAuthorization,
+  AuthorizationService,
+  EntityBuilder,
+  getUserName,
+} from '@jcdubs/janus';
+
+const authorizationConfig = {
+  namespace: 'OrderService::',
+  principleType: 'User',
+  resourceType: 'Order',
+  roleType: 'Role',
+};
+
+const handler = async (
+  event: APIGatewayProxyEvent,
+): Promise<APIGatewayProxyResult> => {
+  // AuthorizationService is cached by the middleware, but retrieving it here is safe
+  // and inexpensive (cached) and makes the intent explicit in the handler.
+  const authService = await AuthorizationService.getService(authorizationConfig);
+
+  const resourceId = event.pathParameters?.orderId ?? 'order-123';
+
+  const isAuthorized = authService
+    .setAction('viewOrder')
+    .setResource(resourceId)
+    .addEntity(
+      new EntityBuilder(resourceId, authorizationConfig)
+        .withStringAttr('customerId', getUserName())
+        .build(),
+    )
+    .isAuthorized();
+
+  return {
+    statusCode: isAuthorized ? 200 : 403,
+    body: JSON.stringify({ allowed: isAuthorized }),
+  };
+};
+
+export const main = middy(handler).use(loadCedarAuthorization(authorizationConfig));
+```
+
 ### 3. Use the Authorization Service
 
 ```typescript
-import { AuthorizationService } from '@jcdubs/janus';
+import { AuthorizationService, EntityBuilder } from '@jcdubs/janus';
 
-// Initialize the service (cached as a singleton)
-const authService = await AuthorizationService.getService({
+// Define the authorization configuration and initialize the service (cached as a singleton)
+const authorizationConfig = {
   namespace: 'OrderService::',
   principleType: 'User',
   resourceType: 'Order',
   roleType: 'Role'
-});
+};
+
+const authService = await AuthorizationService.getService(authorizationConfig);
+
+// Examples showing varied `EntityBuilder` usage patterns
+
+// Minimal: build an entity with only UID
+const isAuthorizedMinimal = authService
+  .setAction('viewOrder')
+  .setResource('order-123')
+  .addEntity(new EntityBuilder('order-123', authorizationConfig).build())
+  .isAuthorized();
 
-// Evaluate authorization
-const isAuthorized = authService
+// Typical: add a few simple attributes
+const isAuthorizedTypical = authService
   .setAction('viewOrder')
   .setResource('order-123')
-  .addEntity({
-    uid: { type: 'OrderService::Order', id: 'order-123' },
-    attrs: { customerId: 'user-456', status: 'PENDING' },
-    parents: []
-  })
+  .addEntity(
+    new EntityBuilder('order-123', authorizationConfig)
+      .withStringAttr('customerId', 'user-456')
+      .withStringAttr('status', 'PENDING')
+      .withNumberAttr('items', 3)
+      .build()
+  )
   .isAuthorized();
 
-console.log(isAuthorized); // true or false
+// Full: include sets, references, extension attrs, parents and tags
+const isAuthorizedFull = authService
+  .setAction('viewOrder')
+  .setResource('order-123')
+  .addEntity(
+    new EntityBuilder('order-123', authorizationConfig)
+      .withStringAttr('customerId', 'user-456')
+      .withBooleanAttr('active', true)
+      .withNumberAttr('items', 5)
+      .withSetAttr('flags', ['flagA', 'flagB'])
+      .withAttr('owner', 'u1', authorizationConfig.principleType)
+      .withExtnAttr('ip', 'ipaddr', '192.168.1.10')
+      .withParent('role-1', 'Role')
+      .withTag('label', 'lbl1', 'Label')
+      .build()
+  )
+  .isAuthorized();
+
+logger.info('Create authorisation requests', isAuthorizedMinimal, isAuthorizedTypical, isAuthorizedFull);
 ```
 
 ## API Reference
@@ -243,6 +327,56 @@ const handler = middy(async (event) => {
   }));
 ```
 
+### Auth Lambda Construct
+
+Provides a CDK construct to bundle a Node.js Lambda with Cedar policy and schema files and the Cedar WASM runtime.
+
+- **Export:** `AuthLambda` (class)
+- **Props:** `AuthLambdaProps` — extends `NodejsFunctionProps` and adds `authorisation: { policyFilePath: string; schemaFilePath: string }`.
+
+Usage: Use `AuthLambda` in CDK stacks to ensure Cedar policies and schema are bundled with the Lambda package and the Cedar WASM runtime copied into `node_modules/@cedar-policy/cedar-wasm`. In particular, `AuthLambda` makes sure the `@cedar-policy/cedar-wasm` package, your Cedar policy file (for example `policies.cedar`) and your Cedar schema file (for example `schema.cedarschema`) are included in the Lambda deployment package so they are available at runtime.
+
+### EntityBuilder
+
+Fluent builder for creating Cedar entity JSON objects used in authorization requests.
+
+- **Export:** `EntityBuilder` (class)
+- **Constructor:** `new EntityBuilder(id: string, authorizationConfig: AuthorizationConfigType, type?: string)`
+- **Common Methods:** `withAttr(name, id, type)`, `withExtnAttr(name, fn, arg)`, `withBooleanAttr(name, value)`, `withNumberAttr(name, value)`, `withStringAttr(name, value)`, `withSetAttr(name, value)`, `withParent(id, type)`, `withTag(name, id, type)`, `build()` — returns `EntityJson`.
+
+Example usage is shown in the Quick Start section above.
+
+### File Loader
+
+Small utility to read bundled files (Cedar policy and schema) from the Lambda package.
+
+- **Export:** `loadFileAsString(fileName: string): string`
+
+Throws an `Error` if the file cannot be read. Typically used by the `AuthorizationService` to load `policies.cedar` and `schema.cedarschema`.
+
+### Types
+
+Shared TypeScript types used across the library.
+
+- `TypeAndId` — `{ type: string; id: string }`
+- `EntityUidJson` — `{ __entity: TypeAndId } | TypeAndId`
+- `CedarValueJson` — union of entity refs, extn values, primitives, arrays, objects, or null
+- `FnAndArg` — `{ fn: string; arg: CedarValueJson }`
+- `EntityJson` — `{ uid: EntityUidJson; attrs: Record<string, CedarValueJson>; parents: EntityUidJson[]; tags?: Record<string, CedarValueJson> }`
+
+### Errors
+
+The library exports a set of specific error classes used by the authorization flow.
+
+- `MissingAuthenticatedUserDetailsError`
+- `MissingAuthorizationActionError`
+- `MissingAuthorizationPolicyError`
+- `MissingAuthorizationResourceError`
+- `MissingAuthorizationSchemaError`
+- `UnauthorizedError`
+
+These are exported from the `errors` module and are thrown by the `AuthorizationService` and middleware where applicable.
+
 ## User Details
 
 The library provides utilities to extract user information from Lambda events:
@@ -267,6 +401,15 @@ The library provides specific error classes for different authorization failures
 
 ## Examples
 
+### Order Service Example
+
+The `examples/order-service` project demonstrates a complete integration of Janus in a real-world serverless service. It shows how the Janus CDK construct, middleware and SDK are used together to provide Cedar-based authorization for AWS Lambda CRUD handlers.
+
+- **Janus Integration**: The example uses the provided `Auth` Lambda construct and the `authorizationMiddleware` to bundle and load Cedar policy and schema files. The authorization checks inside the order CRUD Lambdas use the `AuthorizationService` from the Janus SDK (via the auth secondary adapter) to evaluate requests against the deployed Cedar policies and schema.
+- **Full CRUD API**: The example implements a full Create/Read/Update/Delete API for `orders` backed by the included lambda handlers.
+- **Scripts**: See the `examples/order-service/scripts` directory — it contains scripts to hydrate the database, create users and groups in the Cognito user pool, and login scripts for individual users associated with specific groups.
+- **Postman Collection**: A Postman collection (`Auth.postman_collection.json`) is included in the example. It contains requests that exercise each user and group against the Cedar policy and schema files deployed with the order CRUD Lambdas.
+
 See the [authorization-tests](./src/authorization-service/authorization-tests/) directory for comprehensive examples including:
 
 - Customer role permissions
@@ -282,6 +425,7 @@ See the [authorization-tests](./src/authorization-service/authorization-tests/)
 - [Cedar Policy Blog](https://www.cedarpolicy.com/blog)
 - [Cedar SDK](https://github.com/cedar-policy)
 - [Cedar Policy Playground](https://www.cedarpolicy.com/en/playground)
+ - [Serverless: Granular Authorisation with Cedar — High control, minimal cost (blog post)](https://medium.com/@jcdubs/serverless-granular-authorisation-with-cedar-high-control-minimal-cost-1149640f8cd9)
 
 ## Development
 

package/dist/auth-lambda/auth-lambda.d.ts

@@ -1,5 +1,5 @@
-import * as njsLambda from "aws-cdk-lib/aws-lambda-nodejs";
-import type { Construct } from "constructs";
+import * as njsLambda from 'aws-cdk-lib/aws-lambda-nodejs';
+import type { Construct } from 'constructs';
 /**
  * Configuration properties for the AuthLambda construct.
  *

package/dist/auth-lambda/auth-lambda.js

@@ -96,7 +96,7 @@ class AuthLambda extends njsLambda.NodejsFunction {
                         return [
                             `echo "Copying node_modules/@cedar-policy/cedar-wasm directory to Lambda package..."`,
                             `mkdir -p ${outputDir}/node_modules/@cedar-policy/cedar-wasm/`,
-                            `cp -r ${inputDir}/node_modules/janus/vendor/@cedar-policy/cedar-wasm ${outputDir}/node_modules/@cedar-policy/`,
+                            `cp -r ${inputDir}/node_modules/@jcdubs/janus/vendor/@cedar-policy/cedar-wasm ${outputDir}/node_modules/@cedar-policy/`,
                             `echo "node_modules/@cedar-policy/cedar-wasm directory copied successfully to ${outputDir}/node_modules/@cedar-policy"`,
                             `echo "Copying policy and schema files to Lambda package..."`,
                             `cp ${props.authorisation.policyFilePath} ${outputDir}/policies.cedar`,
@@ -107,8 +107,8 @@ class AuthLambda extends njsLambda.NodejsFunction {
                 },
                 externalModules: [
                     ...(props.bundling?.externalModules || []),
-                    "@aws-sdk*",
-                    "@cedar-policy/cedar-wasm",
+                    '@aws-sdk*',
+                    '@cedar-policy/cedar-wasm',
                 ],
             },
         });

package/dist/auth-lambda/auth-lambda.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-lambda.js","sourceRoot":"","sources":["../../src/auth-lambda/auth-lambda.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yEAA2D;AAuC3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAa,UAAW,SAAQ,SAAS,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACH,YAAY,KAAgB,EAAE,EAAU,EAAE,KAAsB;QAC/D,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE;YAChB,GAAG,KAAK;YACR,QAAQ,EAAE;gBACT,GAAG,KAAK,CAAC,QAAQ;gBACjB,YAAY,EAAE;oBACb,cAAc,CAAC,SAAiB,EAAE,UAAkB;wBACnD,OAAO,CAAC,0DAA0D,CAAC,CAAC;oBACrE,CAAC;oBACD,aAAa,CAAC,SAAiB,EAAE,UAAkB;wBAClD,OAAO,EAAE,CAAC;oBACX,CAAC;oBACD,aAAa,CAAC,QAAgB,EAAE,SAAiB;wBAChD,OAAO;4BACN,qFAAqF;4BACrF,YAAY,SAAS,yCAAyC;4BAC9D,SAAS,QAAQ,uDAAuD,SAAS,8BAA8B;4BAC/G,gFAAgF,SAAS,8BAA8B;4BACvH,6DAA6D;4BAC7D,MAAM,KAAK,CAAC,aAAa,CAAC,cAAc,IAAI,SAAS,iBAAiB;4BACtE,MAAM,KAAK,CAAC,aAAa,CAAC,cAAc,IAAI,SAAS,qBAAqB;4BAC1E,wDAAwD,SAAS,GAAG;yBACpE,CAAC;oBACH,CAAC;iBACD;gBACD,eAAe,EAAE;oBAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC;oBAC1C,WAAW;oBACX,0BAA0B;iBAC1B;aACD;SACD,CAAC,CAAC;IACJ,CAAC;CACD;AA3CD,gCA2CC"}
+{"version":3,"file":"auth-lambda.js","sourceRoot":"","sources":["../../src/auth-lambda/auth-lambda.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yEAA2D;AAuC3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAa,UAAW,SAAQ,SAAS,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACH,YAAY,KAAgB,EAAE,EAAU,EAAE,KAAsB;QAC/D,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE;YAChB,GAAG,KAAK;YACR,QAAQ,EAAE;gBACT,GAAG,KAAK,CAAC,QAAQ;gBACjB,YAAY,EAAE;oBACb,cAAc,CAAC,SAAiB,EAAE,UAAkB;wBACnD,OAAO,CAAC,0DAA0D,CAAC,CAAC;oBACrE,CAAC;oBACD,aAAa,CAAC,SAAiB,EAAE,UAAkB;wBAClD,OAAO,EAAE,CAAC;oBACX,CAAC;oBACD,aAAa,CAAC,QAAgB,EAAE,SAAiB;wBAChD,OAAO;4BACN,qFAAqF;4BACrF,YAAY,SAAS,yCAAyC;4BAC9D,SAAS,QAAQ,+DAA+D,SAAS,8BAA8B;4BACvH,gFAAgF,SAAS,8BAA8B;4BACvH,6DAA6D;4BAC7D,MAAM,KAAK,CAAC,aAAa,CAAC,cAAc,IAAI,SAAS,iBAAiB;4BACtE,MAAM,KAAK,CAAC,aAAa,CAAC,cAAc,IAAI,SAAS,qBAAqB;4BAC1E,wDAAwD,SAAS,GAAG;yBACpE,CAAC;oBACH,CAAC;iBACD;gBACD,eAAe,EAAE;oBAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC;oBAC1C,WAAW;oBACX,0BAA0B;iBAC1B;aACD;SACD,CAAC,CAAC;IACJ,CAAC;CACD;AA3CD,gCA2CC"}

package/dist/auth-lambda/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./auth-lambda";
+export * from './auth-lambda';
 //# sourceMappingURL=index.d.ts.map

package/dist/authorization-middleware/authorization-middleware.d.ts

@@ -1,6 +1,6 @@
-import type middy from "@middy/core";
-import type { APIGatewayProxyEvent, APIGatewayProxyResult } from "aws-lambda";
-import { type AuthorizationConfigType } from "../authorization-service";
+import type middy from '@middy/core';
+import type { APIGatewayProxyEvent, APIGatewayProxyResult } from 'aws-lambda';
+import { type AuthorizationConfigType } from '../authorization-service';
 /**
  * Middy middleware that loads Cedar authorization and user details for policy-based authorization.
  *

package/dist/authorization-middleware/authorization-middleware.js

@@ -4,7 +4,7 @@ exports.loadCedarAuthorization = void 0;
 const logger_1 = require("@aws-lambda-powertools/logger");
 const authorization_service_1 = require("../authorization-service");
 const user_details_1 = require("../user-details");
-const logger = new logger_1.Logger({ serviceName: "authorization-middleware" });
+const logger = new logger_1.Logger({ serviceName: 'authorization-middleware' });
 /**
  * Middy middleware that loads Cedar authorization and user details for policy-based authorization.
  *
@@ -76,16 +76,16 @@ const logger = new logger_1.Logger({ serviceName: "authorization-middleware" });
  */
 const loadCedarAuthorization = (authorizationConfig) => {
     const before = async (request) => {
-        logger.debug("Loading authorization services...", {
+        logger.debug('Loading authorization services...', {
             authorizationConfig,
         });
-        const refresh = request.event.headers?.["cedar-refresh"]
-            ? request.event.headers["cedar-refresh"] === "true"
+        const refresh = request.event.headers?.['cedar-refresh']
+            ? request.event.headers['cedar-refresh'] === 'true'
             : false;
         (0, user_details_1.setUserDetails)(request.event);
         await authorization_service_1.AuthorizationService.getService(authorizationConfig, refresh);
     };
-    logger.debug("Authorization services loaded and configured.");
+    logger.debug('Authorization services loaded and configured.');
     return {
         before,
     };

package/dist/authorization-middleware/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./authorization-middleware";
+export * from './authorization-middleware';
 //# sourceMappingURL=index.d.ts.map

package/dist/authorization-service/authorization-service.d.ts

@@ -1,5 +1,5 @@
-import * as cedar from "@cedar-policy/cedar-wasm/nodejs";
-import type { AuthorizationConfigType } from "./types";
+import type { EntityJson } from '../types';
+import type { AuthorizationConfigType } from './types';
 /**
  * Service for evaluating Cedar policy-based authorization requests.
  *
@@ -124,7 +124,7 @@ export declare class AuthorizationService {
      * });
      * ```
      */
-    addEntity(entity: cedar.EntityJson): AuthorizationService;
+    addEntity(entity: EntityJson): AuthorizationService;
     /**
      * Replaces all entities with a new array of entities for the Cedar authorization request.
      *
@@ -135,7 +135,7 @@ export declare class AuthorizationService {
      * @remarks
      * This replaces any previously added entities. Use {@link addEntity} to append individual entities.
      */
-    setEntities(entities: cedar.EntityJson[]): AuthorizationService;
+    setEntities(entities: EntityJson[]): AuthorizationService;
     /**
      * Validates that all required authorization properties are set.
      *

package/dist/authorization-service/authorization-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-service.d.ts","sourceRoot":"","sources":["../../src/authorization-service/authorization-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,iCAAiC,CAAC;AAWzD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAMvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,qBAAa,oBAAoB;IAChC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAuB;IAC7C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA0B;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,OAAO,CAAmD;IAClE,OAAO,CAAC,QAAQ,CAAiC;IAEjD;;;;;;;;;;;OAWG;IACH,OAAO;IAUP;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB;IAK/C;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAKnD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,oBAAoB;IAQzD;;;;;;;;;OASG;IACH,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,oBAAoB;IAK/D;;;;;;;;OAQG;IACH,OAAO,CAAC,+BAA+B;IAsBvC;;;;;;;;;OASG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,KAAK;IA0Cb;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,YAAY,IAAI,OAAO;IAgBvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;WACU,UAAU,CACtB,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,UAAQ,GACb,OAAO,CAAC,oBAAoB,CAAC;CAkChC"}
+{"version":3,"file":"authorization-service.d.ts","sourceRoot":"","sources":["../../src/authorization-service/authorization-service.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAG3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAMvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,qBAAa,oBAAoB;IAChC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAuB;IAC7C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA0B;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,OAAO,CAAmD;IAClE,OAAO,CAAC,QAAQ,CAA2B;IAE3C;;;;;;;;;;;OAWG;IACH,OAAO;IAUP;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB;IAK/C;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAKnD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,oBAAoB;IAQnD;;;;;;;;;OASG;IACH,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,oBAAoB;IAKzD;;;;;;;;OAQG;IACH,OAAO,CAAC,+BAA+B;IAsBvC;;;;;;;;;OASG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,KAAK;IA0Cb;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,YAAY,IAAI,OAAO;IAgBvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;WACU,UAAU,CACtB,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,UAAQ,GACb,OAAO,CAAC,oBAAoB,CAAC;CAkChC"}

package/dist/authorization-service/authorization-service.js

@@ -40,9 +40,9 @@ const errors_1 = require("../errors");
 const file_loader_1 = require("../file-loader/file-loader");
 const user_details_1 = require("../user-details");
 const policy_parser_1 = require("./policy-parser");
-const logger = new logger_1.Logger({ serviceName: "authorization-service" });
-const POLICY_FILE_NAME = "policies.cedar";
-const SCHEMA_FILE_NAME = "schema.cedarschema";
+const logger = new logger_1.Logger({ serviceName: 'authorization-service' });
+const POLICY_FILE_NAME = 'policies.cedar';
+const SCHEMA_FILE_NAME = 'schema.cedarschema';
 /**
  * Service for evaluating Cedar policy-based authorization requests.
  *
@@ -202,17 +202,17 @@ class AuthorizationService {
     validateAuthorizationProperties() {
         // Validate that a username and roles is available.
         if (!(0, user_details_1.getUserName)() || !(0, user_details_1.getRoles)()) {
-            logger.error("Authenticated user username or roles has not been provided");
+            logger.error('Authenticated user username or roles has not been provided');
             throw new errors_1.MissingAuthenticatedUserDetailsError();
         }
         // Validate the cedar scope
         if (!this.action) {
-            logger.error("Cedar authorization action has not been provided");
+            logger.error('Cedar authorization action has not been provided');
             throw new errors_1.MissingAuthorizationActionError();
         }
         // Validate the cedar scope
         if (!this.resource) {
-            logger.error("Cedar authorization resource has not been provided");
+            logger.error('Cedar authorization resource has not been provided');
             throw new errors_1.MissingAuthorizationResourceError();
         }
     }
@@ -249,7 +249,7 @@ class AuthorizationService {
     constructUserEntity() {
         const userName = (0, user_details_1.getUserName)();
         if (!userName) {
-            logger.error("Authenticated user username has not been provided");
+            logger.error('Authenticated user username has not been provided');
             throw new errors_1.MissingAuthenticatedUserDetailsError();
         }
         return {
@@ -303,15 +303,15 @@ class AuthorizationService {
         const roles = this.constructRoleEntities();
         const userName = (0, user_details_1.getUserName)();
         if (!userName) {
-            logger.error("Authenticated user username has not been provided");
+            logger.error('Authenticated user username has not been provided');
             throw new errors_1.MissingAuthenticatedUserDetailsError();
         }
         if (!this.action) {
-            logger.error("Cedar authorization action has not been provided");
+            logger.error('Cedar authorization action has not been provided');
             throw new errors_1.MissingAuthorizationActionError();
         }
         if (!this.resource) {
-            logger.error("Cedar authorization resource has not been provided");
+            logger.error('Cedar authorization resource has not been provided');
             throw new errors_1.MissingAuthorizationResourceError();
         }
         return {
@@ -365,18 +365,18 @@ class AuthorizationService {
      * ```
      */
     isAuthorized() {
-        logger.debug("Authorizing request...");
+        logger.debug('Authorizing request...');
         const builtAuthRequest = this.build();
-        logger.debug("Built Authorization request", { builtAuthRequest });
+        logger.debug('Built Authorization request', { builtAuthRequest });
         const authResult = cedar.isAuthorized(builtAuthRequest);
-        logger.debug("Auth Result", { authResult });
-        if (authResult.type === "failure") {
-            logger.debug("A problem occurred while authorizing the request", {
+        logger.debug('Auth Result', { authResult });
+        if (authResult.type === 'failure') {
+            logger.debug('A problem occurred while authorizing the request', {
                 authResult,
             });
-            throw Error(authResult.errors.map((error) => error.message).join("\n"));
+            throw Error(authResult.errors.map((error) => error.message).join('\n'));
         }
-        return authResult.response.decision === "allow";
+        return authResult.response.decision === 'allow';
     }
     /**
      * Retrieves the singleton AuthorizationService instance, initializing it if needed.
@@ -419,7 +419,7 @@ class AuthorizationService {
      */
     static async getService(authorizationConfig, refresh = false) {
         if (!refresh && AuthorizationService.service) {
-            logger.debug("Returning cached Authorization service");
+            logger.debug('Returning cached Authorization service');
             return AuthorizationService.service;
         }
         let policy;
@@ -438,7 +438,7 @@ class AuthorizationService {
             logger.error(err.message, { error: err });
             throw new errors_1.MissingAuthorizationSchemaError();
         }
-        logger.debug("Policy and Schema loaded", {
+        logger.debug('Policy and Schema loaded', {
             policy,
             schema,
         });

package/dist/authorization-service/authorization-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-service.js","sourceRoot":"","sources":["../../src/authorization-service/authorization-service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0DAAuD;AACvD,uEAAyD;AACzD,sCAMmB;AACnB,4DAA8D;AAC9D,kDAAwD;AACxD,mDAAqD;AAGrD,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC,CAAC;AACpE,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAC1C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAa,oBAAoB;IAUhC;;;;;;;;;;;OAWG;IACH,YACC,MAAc,EACd,MAAc,EACd,mBAA4C;QAE5C,IAAI,CAAC,MAAM,GAAG,IAAA,kCAAkB,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,MAAc;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,QAAgB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,SAAS,CAAC,MAAwB;QACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;OASG;IACH,WAAW,CAAC,QAA4B;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;OAQG;IACK,+BAA+B;QACtC,mDAAmD;QACnD,IAAI,CAAC,IAAA,0BAAW,GAAE,IAAI,CAAC,IAAA,uBAAQ,GAAE,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CACX,4DAA4D,CAC5D,CAAC;YACF,MAAM,IAAI,6CAAoC,EAAE,CAAC;QAClD,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACjE,MAAM,IAAI,wCAA+B,EAAE,CAAC;QAC7C,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACnE,MAAM,IAAI,0CAAiC,EAAE,CAAC;QAC/C,CAAC;IACF,CAAC;IAED;;;;;;;;;OASG;IACK,YAAY;QACnB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;QACpB,CAAC;IACF,CAAC;IAED;;;;;;;;;;OAUG;IACK,mBAAmB;QAC1B,MAAM,QAAQ,GAAG,IAAA,0BAAW,GAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClE,MAAM,IAAI,6CAAoC,EAAE,CAAC;QAClD,CAAC;QACD,OAAO;YACN,GAAG,EAAE;gBACJ,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE;gBACtF,EAAE,EAAE,QAAQ;aACZ;YACD,KAAK,EAAE,EAAE;YACT,OAAO,EACN,IAAA,uBAAQ,GAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE;gBACjF,EAAE,EAAE,IAAI;aACR,CAAC,CAAC,IAAI,EAAE;SACV,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,qBAAqB;QAC5B,OAAO,CACN,IAAA,uBAAQ,GAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,GAAG,EAAE;gBACJ,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE;gBACjF,EAAE,EAAE,IAAI;aACR;YACD,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,EAAE;SACX,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK;QACZ,IAAI,CAAC,+BAA+B,EAAE,CAAC;QAEvC,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE3C,MAAM,QAAQ,GAAG,IAAA,0BAAW,GAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClE,MAAM,IAAI,6CAAoC,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACjE,MAAM,IAAI,wCAA+B,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACnE,MAAM,IAAI,0CAAiC,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO;YACN,SAAS,EAAE;gBACV,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE;gBACtF,EAAE,EAAE,QAAQ;aACZ;YACD,MAAM,EAAE;gBACP,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,QAAQ;gBACnD,EAAE,EAAE,IAAI,CAAC,MAAM;aACf;YACD,QAAQ,EAAE;gBACT,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE;gBACrF,EAAE,EAAE,IAAI,CAAC,QAAQ;aACjB;YACD,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;YAC3B,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;YAC3B,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE;gBACT,cAAc,EAAE,IAAI,CAAC,MAAM;aAC3B;YACD,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC;SACpD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,YAAY;QACX,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5C,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBAChE,UAAU;aACV,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,KAAM,OAA0B,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CACtB,mBAA4C,EAC5C,OAAO,GAAG,KAAK;QAEf,IAAI,CAAC,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACvD,OAAO,oBAAoB,CAAC,OAAO,CAAC;QACrC,CAAC;QAED,IAAI,MAA0B,CAAC;QAC/B,IAAI,MAA0B,CAAC;QAE/B,IAAI,CAAC;YACJ,MAAM,GAAG,IAAA,8BAAgB,EAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrD,MAAM,IAAI,wCAA+B,EAAE,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,GAAG,IAAA,8BAAgB,EAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrD,MAAM,IAAI,wCAA+B,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACxC,MAAM;YACN,MAAM;SACN,CAAC,CAAC;QACH,oBAAoB,CAAC,OAAO,GAAG,IAAI,oBAAoB,CACtD,MAAM,EACN,MAAM,EACN,mBAAmB,CACnB,CAAC;QACF,OAAO,oBAAoB,CAAC,OAAO,CAAC;IACrC,CAAC;CACD;AA1YD,oDA0YC"}
+{"version":3,"file":"authorization-service.js","sourceRoot":"","sources":["../../src/authorization-service/authorization-service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0DAAuD;AACvD,uEAAyD;AACzD,sCAMmB;AACnB,4DAA8D;AAE9D,kDAAwD;AACxD,mDAAqD;AAGrD,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC,CAAC;AACpE,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAC1C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAa,oBAAoB;IAUhC;;;;;;;;;;;OAWG;IACH,YACC,MAAc,EACd,MAAc,EACd,mBAA4C;QAE5C,IAAI,CAAC,MAAM,GAAG,IAAA,kCAAkB,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,MAAc;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,QAAgB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,SAAS,CAAC,MAAkB;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;OASG;IACH,WAAW,CAAC,QAAsB;QACjC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;OAQG;IACK,+BAA+B;QACtC,mDAAmD;QACnD,IAAI,CAAC,IAAA,0BAAW,GAAE,IAAI,CAAC,IAAA,uBAAQ,GAAE,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CACX,4DAA4D,CAC5D,CAAC;YACF,MAAM,IAAI,6CAAoC,EAAE,CAAC;QAClD,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACjE,MAAM,IAAI,wCAA+B,EAAE,CAAC;QAC7C,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACnE,MAAM,IAAI,0CAAiC,EAAE,CAAC;QAC/C,CAAC;IACF,CAAC;IAED;;;;;;;;;OASG;IACK,YAAY;QACnB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;QACpB,CAAC;IACF,CAAC;IAED;;;;;;;;;;OAUG;IACK,mBAAmB;QAC1B,MAAM,QAAQ,GAAG,IAAA,0BAAW,GAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClE,MAAM,IAAI,6CAAoC,EAAE,CAAC;QAClD,CAAC;QACD,OAAO;YACN,GAAG,EAAE;gBACJ,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE;gBACtF,EAAE,EAAE,QAAQ;aACZ;YACD,KAAK,EAAE,EAAE;YACT,OAAO,EACN,IAAA,uBAAQ,GAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE;gBACjF,EAAE,EAAE,IAAI;aACR,CAAC,CAAC,IAAI,EAAE;SACV,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,qBAAqB;QAC5B,OAAO,CACN,IAAA,uBAAQ,GAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,GAAG,EAAE;gBACJ,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE;gBACjF,EAAE,EAAE,IAAI;aACR;YACD,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,EAAE;SACX,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK;QACZ,IAAI,CAAC,+BAA+B,EAAE,CAAC;QAEvC,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAE3C,MAAM,QAAQ,GAAG,IAAA,0BAAW,GAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClE,MAAM,IAAI,6CAAoC,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACjE,MAAM,IAAI,wCAA+B,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACnE,MAAM,IAAI,0CAAiC,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO;YACN,SAAS,EAAE;gBACV,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE;gBACtF,EAAE,EAAE,QAAQ;aACZ;YACD,MAAM,EAAE;gBACP,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,QAAQ;gBACnD,EAAE,EAAE,IAAI,CAAC,MAAM;aACf;YACD,QAAQ,EAAE;gBACT,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE;gBACrF,EAAE,EAAE,IAAI,CAAC,QAAQ;aACjB;YACD,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;YAC3B,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;YAC3B,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE;gBACT,cAAc,EAAE,IAAI,CAAC,MAAM;aAC3B;YACD,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC;SACpD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,YAAY;QACX,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5C,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBAChE,UAAU;aACV,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,KAAM,OAA0B,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CACtB,mBAA4C,EAC5C,OAAO,GAAG,KAAK;QAEf,IAAI,CAAC,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACvD,OAAO,oBAAoB,CAAC,OAAO,CAAC;QACrC,CAAC;QAED,IAAI,MAA0B,CAAC;QAC/B,IAAI,MAA0B,CAAC;QAE/B,IAAI,CAAC;YACJ,MAAM,GAAG,IAAA,8BAAgB,EAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrD,MAAM,IAAI,wCAA+B,EAAE,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,GAAG,IAAA,8BAAgB,EAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrD,MAAM,IAAI,wCAA+B,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACxC,MAAM;YACN,MAAM;SACN,CAAC,CAAC;QACH,oBAAoB,CAAC,OAAO,GAAG,IAAI,oBAAoB,CACtD,MAAM,EACN,MAAM,EACN,mBAAmB,CACnB,CAAC;QACF,OAAO,oBAAoB,CAAC,OAAO,CAAC;IACrC,CAAC;CACD;AA1YD,oDA0YC"}

package/dist/authorization-service/authorization-tests/config.d.ts

@@ -1,3 +1,3 @@
-import type { AuthorizationConfigType } from "../types";
+import type { AuthorizationConfigType } from '../types';
 export declare const authorizationConfig: AuthorizationConfigType;
 //# sourceMappingURL=config.d.ts.map

package/dist/authorization-service/authorization-tests/config.js

@@ -2,9 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authorizationConfig = void 0;
 exports.authorizationConfig = {
-    namespace: "OrderService::",
-    principleType: "User",
-    resourceType: "Order",
-    roleType: "Role",
+    namespace: 'OrderService::',
+    principleType: 'User',
+    resourceType: 'Order',
+    roleType: 'Role',
 };
 //# sourceMappingURL=config.js.map

package/dist/authorization-service/authorization-tests/create-order-entity.d.ts

@@ -1,4 +1,4 @@
-import type { OrderEntityProps } from "./types";
+import type { OrderEntityProps } from './types';
 export declare const createOrderEntity: (orderEntityProps: OrderEntityProps) => {
     uid: {
         type: string;

package/dist/authorization-service/authorization-tests/get-policy.js

@@ -37,11 +37,11 @@ exports.getSchema = exports.getPolicy = void 0;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const getPolicy = () => {
-    return fs.readFileSync(path.resolve(__dirname, "./cedar/policies.cedar"), "utf-8");
+    return fs.readFileSync(path.resolve(__dirname, './cedar/policies.cedar'), 'utf-8');
 };
 exports.getPolicy = getPolicy;
 const getSchema = () => {
-    return fs.readFileSync(path.resolve(__dirname, "./cedar/schema.cedarschema"), "utf-8");
+    return fs.readFileSync(path.resolve(__dirname, './cedar/schema.cedarschema'), 'utf-8');
 };
 exports.getSchema = getSchema;
 //# sourceMappingURL=get-policy.js.map

package/dist/authorization-service/index.d.ts

@@ -1,3 +1,3 @@
-export * from "./authorization-service";
-export * from "./types";
+export * from './authorization-service';
+export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/authorization-service/policy-parser.d.ts

@@ -1,4 +1,4 @@
-import type { Policy, PolicyId } from "@cedar-policy/cedar-wasm";
+import type { Policy, PolicyId } from '@cedar-policy/cedar-wasm';
 /**
  * Parses a Cedar policy file and splits it into individual policy objects.
  *

package/dist/authorization-service/policy-parser.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.splitCedarPolicies = splitCedarPolicies;
 const logger_1 = require("@aws-lambda-powertools/logger");
-const logger = new logger_1.Logger({ serviceName: "policy-parser" });
+const logger = new logger_1.Logger({ serviceName: 'policy-parser' });
 /**
  * Parses a Cedar policy file and splits it into individual policy objects.
  *
@@ -59,18 +59,18 @@ const logger = new logger_1.Logger({ serviceName: "policy-parser" });
  */
 function splitCedarPolicies(policyFile) {
     const results = [];
-    let buf = "";
+    let buf = '';
     let inString = false; // inside "..."
     let inLineComment = false; // inside // ...
     let inBlockComment = false; // inside /* ... */
-    let prev = "";
+    let prev = '';
     for (let i = 0; i < policyFile.length; i++) {
         const ch = policyFile[i];
-        const next = i + 1 < policyFile.length ? policyFile[i + 1] : "";
+        const next = i + 1 < policyFile.length ? policyFile[i + 1] : '';
         // End line comment
         if (inLineComment) {
             buf += ch;
-            if (ch === "\n")
+            if (ch === '\n')
                 inLineComment = false;
             prev = ch;
             continue;
@@ -78,32 +78,32 @@ function splitCedarPolicies(policyFile) {
         // End block comment
         if (inBlockComment) {
             buf += ch;
-            if (prev === "*" && ch === "/")
+            if (prev === '*' && ch === '/')
                 inBlockComment = false;
             prev = ch;
             continue;
         }
         // Start line comment (only when not in string)
-        if (!inString && ch === "/" && next === "/") {
+        if (!inString && ch === '/' && next === '/') {
             inLineComment = true;
             buf += ch; // add '/'
             // next char will be processed in next loop iteration, so add it now and skip
             buf += next; // add second '/'
             i++;
-            prev = "/";
+            prev = '/';
             continue;
         }
         // Start block comment (only when not in string)
-        if (!inString && ch === "/" && next === "*") {
+        if (!inString && ch === '/' && next === '*') {
             inBlockComment = true;
             buf += ch; // add '/'
             buf += next; // add '*'
             i++;
-            prev = "*";
+            prev = '*';
             continue;
         }
         // Toggle string state on unescaped double quote
-        if (ch === `"` && prev !== "\\") {
+        if (ch === `"` && prev !== '\\') {
             inString = !inString;
             buf += ch;
             prev = ch;
@@ -112,11 +112,11 @@ function splitCedarPolicies(policyFile) {
         // Normal char
         buf += ch;
         // Policy terminator: semicolon outside string/comments
-        if (!inString && ch === ";") {
+        if (!inString && ch === ';') {
             const policy = buf.trim();
             if (policy.length > 0)
                 results.push(policy);
-            buf = "";
+            buf = '';
         }
         prev = ch;
     }
@@ -124,7 +124,7 @@ function splitCedarPolicies(policyFile) {
     const tail = buf.trim();
     if (tail.length > 0) {
         throw new Error("Trailing content after last policy terminator ';'. " +
-            "The policy file may be missing a semicolon at the end.");
+            'The policy file may be missing a semicolon at the end.');
     }
     const finalResults = {};
     const filteredResults = results.filter((p) => p.length > 0);