@jeffusion/bungee-core 5.22.0 → 5.23.0

package/dist/plugins/key-access/ingress.js

@@ -210,8 +210,22 @@ function check(target, policy, scopes = [target.routeId]) {
     return { error: "key-access.scope_denied", status: 403 };
   return null;
 }
+function authorize(target, value) {
+  try {
+    const publication = validatePublication(value);
+    const scopes = protectedScopes(target, publication);
+    if (scopes.length === 0)
+      return null;
+    if (target.principal.domain === "anonymous")
+      return { error: "unauthorized", status: 401 };
+    return check(target, validatePolicy(publication.byKey[target.principal.keyId] ?? null), scopes);
+  } catch {
+    return { error: "key-access.policy_unavailable", status: 503 };
+  }
+}
 function createIngress() {
   return {
+    authorize,
     bodyRequirements(target, value) {
       const publication = validatePublication(value);
       if (protectedScopes(target, publication).length === 0 || target.principal.domain !== "data")
@@ -245,12 +259,12 @@ function createIngress() {
         const p = validatePublication(value);
         if (protectedScopes(target, p).length === 0)
           return { snapshot: null };
-        if (target.principal.domain === "anonymous")
-          return { denial: { error: "unauthorized", status: 401 } };
+        const denial = authorize(target, p);
+        if (denial)
+          return { denial };
         const policy = validatePolicy(p.byKey[target.principal.keyId] ?? null);
         const scopes = protectedScopes(target, p);
-        const denial = check(target, policy, scopes);
-        return denial ? { denial } : { snapshot: { routeId: target.routeId, entryRouteId: target.entryRouteId ?? null, scopes, policy } };
+        return { snapshot: { routeId: target.routeId, entryRouteId: target.entryRouteId ?? null, scopes, policy } };
       } catch {
         return { denial: { error: "key-access.policy_unavailable", status: 503 } };
       }
@@ -277,4 +291,4 @@ export {
   validatePublication
 };
 
-//# debugId=4EF3DBF8CAE9272464756E2164756E21
+//# debugId=D0FC8EE0A47A039A64756E2164756E21