@lenne.tech/nest-server 11.16.1 → 11.17.0

package/dist/core/modules/permissions/interfaces/permissions.interface.d.ts

@@ -0,0 +1,93 @@
+export interface IPermissions {
+    enabled?: boolean;
+    path?: string;
+    role?: false | string;
+}
+export interface EffectiveEndpoint {
+    effectiveRoles: string[];
+    method: string;
+    name: string;
+    source: string;
+}
+export interface EffectiveMatrixEntry {
+    endpoints: EffectiveEndpoint[];
+    role: string;
+}
+export interface EndpointPermissions {
+    className: string;
+    classRoles: string[];
+    filePath: string;
+    methods: MethodPermission[];
+}
+export interface FieldPermission {
+    description?: string;
+    inherited?: boolean;
+    name: string;
+    roles: string;
+}
+export interface FilePermissions {
+    className: string;
+    classRestriction: string[];
+    extendsClass?: string;
+    fields: FieldPermission[];
+    filePath: string;
+    securityCheck?: SecurityCheckInfo;
+}
+export interface MethodPermission {
+    httpMethod: string;
+    name: string;
+    roles: string[];
+    route?: string;
+}
+export interface ModulePermissions {
+    controllers: EndpointPermissions[];
+    inputs: FilePermissions[];
+    models: FilePermissions[];
+    name: string;
+    outputs: FilePermissions[];
+    resolvers: EndpointPermissions[];
+}
+export interface PermissionsReport {
+    generated: string;
+    modules: ModulePermissions[];
+    objects: FilePermissions[];
+    roleEnums: RoleEnumInfo[];
+    stats: ReportStats;
+    warnings: SecurityWarning[];
+}
+export interface ReportStats {
+    endpointCoverage: number;
+    securityCoverage: number;
+    totalEndpoints: number;
+    totalModels: number;
+    totalModules: number;
+    totalSubObjects: number;
+    totalWarnings: number;
+    warningsByType: WarningsByType;
+}
+export interface RoleEnumInfo {
+    file: string;
+    name: string;
+    values: {
+        key: string;
+        value: string;
+    }[];
+}
+export interface SecurityCheckInfo {
+    fieldsStripped: string[];
+    returnsUndefined: boolean;
+    summary: string;
+}
+export interface SecurityWarning {
+    details: string;
+    file: string;
+    module: string;
+    type: string;
+}
+export interface WarningsByType {
+    NO_RESTRICTION: number;
+    NO_ROLES: number;
+    NO_SECURITY_CHECK: number;
+    UNRESTRICTED_FIELD: number;
+    UNRESTRICTED_METHOD: number;
+}

package/dist/core/modules/permissions/interfaces/permissions.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=permissions.interface.js.map

package/dist/core/modules/permissions/interfaces/permissions.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.interface.js","sourceRoot":"","sources":["../../../../../src/core/modules/permissions/interfaces/permissions.interface.ts"],"names":[],"mappings":""}

package/dist/core/modules/permissions/permissions-scanner.d.ts

@@ -0,0 +1,25 @@
+import { Project } from 'ts-morph';
+import type { EffectiveMatrixEntry, EndpointPermissions, FieldPermission, FilePermissions, ModulePermissions, PermissionsReport, ReportStats, RoleEnumInfo, SecurityCheckInfo, SecurityWarning } from './interfaces/permissions.interface';
+export declare function calculateStats(modules: ModulePermissions[], objects: FilePermissions[], warnings: SecurityWarning[]): ReportStats;
+export declare function buildEffectiveMatrix(mod: ModulePermissions): EffectiveMatrixEntry[];
+export declare function collectRoleEnums(project: Project, projectPath: string): RoleEnumInfo[];
+export declare function detectSecurityGaps(modules: ModulePermissions[], objects: FilePermissions[]): SecurityWarning[];
+export declare function discoverModules(modulesDir: string): string[];
+export declare function findProjectRoot(startPath?: string): string | null;
+export declare function scanPermissions(projectPath: string, logger?: {
+    log?: (msg: string) => void;
+    warn?: (msg: string) => void;
+}): PermissionsReport;
+export declare function scanModule(project: Project, modulesDir: string, moduleName: string, projectPath: string): ModulePermissions;
+export declare function scanObjects(project: Project, objectsDir: string, projectPath: string): FilePermissions[];
+export declare function extractDecoratorRoles(decoratorArgs: string[]): string[];
+export declare function extractSecurityCheckInfo(classDecl: any): SecurityCheckInfo | undefined;
+export declare function formatRole(role: string): string;
+export declare function formatRolesDisplay(roles: string[]): string;
+export declare function generateMarkdownReport(report: PermissionsReport, projectPath?: string): string;
+export declare function parseEndpointPermissions(sourceFile: any, filePath: string): EndpointPermissions | undefined;
+export declare function parseFieldPermission(prop: any): FieldPermission;
+export declare function parseFilePermissions(sourceFile: any, filePath: string, isModel: boolean): FilePermissions | undefined;
+export declare function parseRestrictedDecorator(node: any): string[];
+export declare function parseRolesDecorator(node: any): string[];
+export declare function resolveInheritedFields(project: Project, classDecl: any): FieldPermission[];