@kravc/dos 1.12.4 → 1.12.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kravc/dos",
-  "version": "1.12.4",
+  "version": "1.12.6",
   "description": "Convention-based, easy-to-use library for building API-driven serverless services.",
   "keywords": [
     "Service",

package/src/index.d.ts

@@ -169,6 +169,8 @@ export declare class JwtAuthorization {
     name?: string;
     algorithm?: string;
     cookieName?: string;
+    description?: string;
+    requirementName?: string;
     normalizePayload?: Function;
     tokenVerificationMethod?: Function;
     accessVerificationMethod?: (context: Context, payload: Record<string, unknown>) => [boolean, string?];
@@ -178,6 +180,8 @@ export declare class JwtAuthorization {
 export declare class SystemAuthorization {
   static createRequirement(options?: {
     name?: string;
+    description?: string;
+    requirementName?: string;
     accessVerificationMethod?: (context: Context) => [boolean, string?];
   }): Record<string, any>
 }

package/src/security/JwtAuthorization.js

@@ -17,15 +17,16 @@ class JwtAuthorization {
 
     const name       = get(options, 'name', 'authorization')
     const cookieName = get(options, 'cookieName', name)
-
-    const requirementName = capitalize(name)
+    const description = get(options, 'description')
+    const requirementName = get(options, 'requirementName', capitalize(name))
 
     return {
       [requirementName]: {
         definition: {
           in:   'header',
           type: 'apiKey',
-          name
+          name,
+          description,
         },
         klass: this,
         name,

package/src/security/SystemAuthorization.js

@@ -4,6 +4,11 @@ const { get } = require('lodash')
 const AccessDeniedError = require('../errors/AccessDeniedError')
 
 const SYSTEM_NAME = 'System'
+const DESCRIPTION = 'This security definition and a header for system' +
+  ' operations should be ignored. The verification method of system' +
+  ' operations relies on a gateway that adds headers for all' +
+  ' external requests. Request without headers considered to be' +
+  ' internal.'
 
 const verifySystemAccess = (context) => {
   const { headers } = context
@@ -20,19 +25,16 @@ class SystemAuthorization {
   static createRequirement(options = {}) {
     const name = get(options, 'name', 'authorization')
 
-    const requirementName = SYSTEM_NAME
+    const description = get(options, 'description', DESCRIPTION)
+    const requirementName = get(options, 'requirementName', SYSTEM_NAME)
 
     return {
       [requirementName]: {
         definition: {
-          description: 'This security definition and a header for system' +
-            ' operations should be ignored. The verification method of system' +
-            ' operations relies on a gateway that adds headers for all' +
-            ' external requests. Request without headers considered to be' +
-            ' internal.',
           in:   'header',
           type: 'apiKey',
-          name
+          name,
+          description,
         },
         klass: this,
         ...options