@kravc/dos 1.11.11 → 1.11.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kravc/dos",
-  "version": "1.11.11",
+  "version": "1.11.12",
   "description": "Convention-based, easy-to-use library for building API-driven serverless services.",
   "keywords": [
     "Service",

package/src/index.d.ts

@@ -166,13 +166,14 @@ export declare class JwtAuthorization {
     cookieName?: string;
     normalizePayload?: Function;
     tokenVerificationMethod?: Function;
-    accessVerificationMethod?: Function;
+    accessVerificationMethod?: (context: Context, payload: Record<string, unknown>) => [boolean, string?];
   }): Record<string, any>
 };
 
 export declare class SystemAuthorization {
   static createRequirement(options?: {
     name?: string;
+    accessVerificationMethod?: (context: Context) => [boolean, string?];
   }): Record<string, any>
 };
 

package/src/security/SystemAuthorization.js

@@ -3,10 +3,24 @@
 const { get } = require('lodash')
 const AccessDeniedError = require('../errors/AccessDeniedError')
 
+const SYSTEM_NAME = 'System'
+
+const verifySystemAccess = (context) => {
+  const { headers } = context
+  const isExternalRequest = Object.keys(headers).length > 0
+
+  if (!isExternalRequest) {
+    return [ true ]
+  }
+
+  return [ false ]
+}
+
 class SystemAuthorization {
   static createRequirement(options = {}) {
     const name = get(options, 'name', 'authorization')
-    const requirementName = 'System'
+
+    const requirementName = SYSTEM_NAME
 
     return {
       [requirementName]: {
@@ -20,7 +34,8 @@ class SystemAuthorization {
           type: 'apiKey',
           name
         },
-        klass: this
+        klass: this,
+        ...options
       }
     }
   }
@@ -35,12 +50,17 @@ class SystemAuthorization {
     }
   }
 
+  constructor({
+    accessVerificationMethod = verifySystemAccess,
+  }) {
+    this._verifyAccess = accessVerificationMethod
+  }
+
   async verify(context) {
-    const { headers } = context
-    const isExternalRequest = Object.keys(headers).length > 0
+    const [ isAccessOk, accessErrorMessage ] = await this._verifyAccess(context)
 
-    if (isExternalRequest) {
-      const error = new AccessDeniedError()
+    if (!isAccessOk) {
+      const error = new AccessDeniedError(accessErrorMessage)
       return { isAuthorized: false, error }
     }