@mercurjs/core 2.3.6-canary.5 → 2.3.6-canary.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.medusa/server/src/api/admin/core-route-permissions.js +5 -2
- package/.medusa/server/src/api/admin/middlewares.js +3 -1
- package/.medusa/server/src/api/admin/order-groups/middlewares.js +9 -3
- package/.medusa/server/src/api/admin/users/me/route.d.ts +1 -0
- package/.medusa/server/src/api/admin/users/me/route.js +20 -2
- package/.medusa/server/src/api/admin/users/middlewares.d.ts +2 -0
- package/.medusa/server/src/api/admin/users/middlewares.js +17 -0
- package/.medusa/server/src/api/utils/permissions-middleware.d.ts +7 -0
- package/.medusa/server/src/api/utils/permissions-middleware.js +31 -1
- package/.medusa/server/src/api/vendor/sellers/middlewares.js +1 -2
- package/.medusa/server/src/api/vendor/uploads/middlewares.js +7 -3
- package/package.json +3 -3
|
@@ -42,9 +42,12 @@ exports.CORE_ROUTE_PERMISSIONS = [
|
|
|
42
42
|
{ pattern: /^\/admin\/sales-channels(\/|$)/, key: "sales_channels" },
|
|
43
43
|
{ pattern: /^\/admin\/return-reasons(\/|$)/, key: "return_reasons" },
|
|
44
44
|
{ pattern: /^\/admin\/refund-reasons(\/|$)/, key: "refund_reasons" },
|
|
45
|
+
// The shell and most forms read the store (currencies, default region and sales channel).
|
|
46
|
+
{ pattern: /^\/admin\/stores(\/[^/]+)?$/, key: "store", methods: { GET: undefined } },
|
|
45
47
|
{ pattern: /^\/admin\/stores(\/|$)/, key: "store" },
|
|
46
48
|
{ pattern: /^\/admin\/invites(\/|$)/, key: "users" },
|
|
47
|
-
|
|
49
|
+
// Reading and editing your own profile needs no users permission.
|
|
50
|
+
{ pattern: /^\/admin\/users\/me$/, key: "users", methods: { GET: undefined, POST: undefined } },
|
|
48
51
|
{ pattern: /^\/admin\/users(\/|$)/, key: "users" },
|
|
49
52
|
{ pattern: /^\/admin\/api-keys(\/|$)/, key: "api_keys" },
|
|
50
53
|
{ pattern: /^\/admin\/(translations|locales)(\/|$)/, key: "translations" },
|
|
@@ -76,4 +79,4 @@ function enforceCoreRoutePermissions(req, res, next) {
|
|
|
76
79
|
}
|
|
77
80
|
return (0, permissions_middleware_1.requirePermission)(match.key, match.right)(req, res, next);
|
|
78
81
|
}
|
|
79
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
82
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -28,6 +28,7 @@ const middlewares_19 = require("./inventory-items/middlewares");
|
|
|
28
28
|
const middlewares_20 = require("./shipping-options/middlewares");
|
|
29
29
|
const middlewares_21 = require("./shipping-profiles/middlewares");
|
|
30
30
|
const middlewares_22 = require("./reviews/middlewares");
|
|
31
|
+
const middlewares_23 = require("./users/middlewares");
|
|
31
32
|
exports.adminMiddlewares = [
|
|
32
33
|
{
|
|
33
34
|
matcher: "/admin/*",
|
|
@@ -65,5 +66,6 @@ exports.adminMiddlewares = [
|
|
|
65
66
|
...middlewares_20.adminShippingOptionsMiddlewares,
|
|
66
67
|
...middlewares_21.adminShippingProfilesMiddlewares,
|
|
67
68
|
...middlewares_22.adminReviewsMiddlewares,
|
|
69
|
+
...middlewares_23.adminUsersMiddlewares,
|
|
68
70
|
];
|
|
69
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
71
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -6,12 +6,18 @@ const framework_1 = require("@medusajs/framework");
|
|
|
6
6
|
const helpers_1 = require("./helpers");
|
|
7
7
|
const query_config_1 = require("./query-config");
|
|
8
8
|
const validators_1 = require("./validators");
|
|
9
|
+
// The admin orders list is a list of order groups, so orders:view is enough
|
|
10
|
+
// to read them.
|
|
11
|
+
const canViewOrderGroups = (0, utils_1.requireAnyPermission)([
|
|
12
|
+
{ key: "orders", right: "view" },
|
|
13
|
+
{ key: "order_groups", right: "view" },
|
|
14
|
+
]);
|
|
9
15
|
exports.adminOrderGroupsMiddlewares = [
|
|
10
16
|
{
|
|
11
17
|
method: ["GET"],
|
|
12
18
|
matcher: "/admin/order-groups",
|
|
13
19
|
middlewares: [
|
|
14
|
-
|
|
20
|
+
canViewOrderGroups,
|
|
15
21
|
(0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOrderGroupsParams, query_config_1.adminOrderGroupQueryConfig.list),
|
|
16
22
|
helpers_1.applyOrderGroupSellerFilter,
|
|
17
23
|
],
|
|
@@ -20,9 +26,9 @@ exports.adminOrderGroupsMiddlewares = [
|
|
|
20
26
|
method: ["GET"],
|
|
21
27
|
matcher: "/admin/order-groups/:id",
|
|
22
28
|
middlewares: [
|
|
23
|
-
|
|
29
|
+
canViewOrderGroups,
|
|
24
30
|
(0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOrderGroupParams, query_config_1.adminOrderGroupQueryConfig.retrieve),
|
|
25
31
|
],
|
|
26
32
|
},
|
|
27
33
|
];
|
|
28
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
34
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,3 +1,4 @@
|
|
|
1
1
|
import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
|
|
2
2
|
import { HttpTypes } from "@mercurjs/types";
|
|
3
3
|
export declare const GET: (req: AuthenticatedMedusaRequest<HttpTypes.AdminUserParams>, res: MedusaResponse<HttpTypes.AdminUserWithPermissionsResponse>) => Promise<void>;
|
|
4
|
+
export declare const POST: (req: AuthenticatedMedusaRequest<HttpTypes.AdminUpdateUser>, res: MedusaResponse<HttpTypes.AdminUserResponse>) => Promise<void>;
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.GET = void 0;
|
|
3
|
+
exports.POST = exports.GET = void 0;
|
|
4
|
+
const core_flows_1 = require("@medusajs/core-flows");
|
|
4
5
|
const utils_1 = require("@medusajs/framework/utils");
|
|
5
6
|
const utils_2 = require("../../../utils");
|
|
6
7
|
const GET = async (req, res) => {
|
|
@@ -21,4 +22,21 @@ const GET = async (req, res) => {
|
|
|
21
22
|
res.status(200).json({ user: (0, utils_2.attachPermissions)(req, user, withPermissions) });
|
|
22
23
|
};
|
|
23
24
|
exports.GET = GET;
|
|
24
|
-
|
|
25
|
+
const POST = async (req, res) => {
|
|
26
|
+
const id = req.auth_context.actor_id;
|
|
27
|
+
if (!id) {
|
|
28
|
+
throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `User ID not found`);
|
|
29
|
+
}
|
|
30
|
+
await (0, core_flows_1.updateUsersWorkflow)(req.scope).run({
|
|
31
|
+
input: { updates: [{ id, ...req.validatedBody }] },
|
|
32
|
+
});
|
|
33
|
+
const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
|
|
34
|
+
const { data: [user], } = await query.graph({
|
|
35
|
+
entity: "user",
|
|
36
|
+
fields: req.queryConfig.fields,
|
|
37
|
+
filters: { id },
|
|
38
|
+
});
|
|
39
|
+
res.status(200).json({ user });
|
|
40
|
+
};
|
|
41
|
+
exports.POST = POST;
|
|
42
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL3VzZXJzL21lL3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUlBLHFEQUEwRDtBQUMxRCxxREFHa0M7QUFHbEMsMENBQXdFO0FBRWpFLE1BQU0sR0FBRyxHQUFHLEtBQUssRUFDdEIsR0FBMEQsRUFDMUQsR0FBK0QsRUFDL0QsRUFBRTtJQUNGLE1BQU0sRUFBRSxHQUFHLEdBQUcsQ0FBQyxZQUFZLENBQUMsUUFBUSxDQUFBO0lBRXBDLElBQUksQ0FBQyxFQUFFLEVBQUUsQ0FBQztRQUNSLE1BQU0sSUFBSSxtQkFBVyxDQUFDLG1CQUFXLENBQUMsS0FBSyxDQUFDLFNBQVMsRUFBRSxtQkFBbUIsQ0FBQyxDQUFBO0lBQ3pFLENBQUM7SUFFRCxNQUFNLEtBQUssR0FBRyxHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxpQ0FBeUIsQ0FBQyxLQUFLLENBQUMsQ0FBQTtJQUNoRSxNQUFNLGVBQWUsR0FBRyxJQUFBLDRCQUFvQixFQUFDLEdBQUcsQ0FBQyxDQUFBO0lBRWpELE1BQU0sRUFDSixJQUFJLEVBQUUsQ0FBQyxJQUFJLENBQUMsR0FDYixHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUNwQixNQUFNLEVBQUUsTUFBTTtRQUNkLE1BQU0sRUFBRSxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU07UUFDOUIsT0FBTyxFQUFFLEVBQUUsRUFBRSxFQUFFO0tBQ2hCLENBQUMsQ0FBQTtJQUVGLElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUNWLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxTQUFTLEVBQzNCLGlCQUFpQixFQUFFLGdCQUFnQixDQUNwQyxDQUFBO0lBQ0gsQ0FBQztJQUVELEdBQUcsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDLEVBQUUsSUFBSSxFQUFFLElBQUEseUJBQWlCLEVBQUMsR0FBRyxFQUFFLElBQUksRUFBRSxlQUFlLENBQUMsRUFBRSxDQUFDLENBQUE7QUFDL0UsQ0FBQyxDQUFBO0FBN0JZLFFBQUEsR0FBRyxPQTZCZjtBQUVNLE1BQU0sSUFBSSxHQUFHLEtBQUssRUFDdkIsR0FBMEQsRUFDMUQsR0FBZ0QsRUFDaEQsRUFBRTtJQUNGLE1BQU0sRUFBRSxHQUFHLEdBQUcsQ0FBQyxZQUFZLENBQUMsUUFBUSxDQUFBO0lBRXBDLElBQUksQ0FBQyxFQUFFLEVBQUUsQ0FBQztRQUNSLE1BQU0sSUFBSSxtQkFBVyxDQUFDLG1CQUFXLENBQUMsS0FBSyxDQUFDLFNBQVMsRUFBRSxtQkFBbUIsQ0FBQyxDQUFBO0lBQ3pFLENBQUM7SUFFRCxNQUFNLElBQUEsZ0NBQW1CLEVBQUMsR0FBRyxDQUFDLEtBQUssQ0FBQyxDQUFDLEdBQUcsQ0FBQztRQUN2QyxLQUFLLEVBQUUsRUFBRSxPQUFPLEVBQUUsQ0FBQyxFQUFFLEVBQUUsRUFBRSxHQUFHLEdBQUcsQ0FBQyxhQUFhLEVBQUUsQ0FBQyxFQUFFO0tBQ25ELENBQUMsQ0FBQTtJQUVGLE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGlDQUF5QixDQUFDLEtBQUssQ0FBQyxDQUFBO0lBRWhFLE1BQU0sRUFDSixJQUFJLEVBQUUsQ0FBQyxJQUFJLENBQUMsR0FDYixHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUNwQixNQUFNLEVBQUUsTUFBTTtRQUNkLE1BQU0sRUFBRSxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU07UUFDOUIsT0FBTyxFQUFFLEVBQUUsRUFBRSxFQUFFO0tBQ2hCLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQTtBQUNoQyxDQUFDLENBQUE7QUF6QlksUUFBQSxJQUFJLFFBeUJoQiJ9
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.adminUsersMiddlewares = void 0;
|
|
4
|
+
const framework_1 = require("@medusajs/framework");
|
|
5
|
+
const query_config_1 = require("@medusajs/medusa/api/admin/users/query-config");
|
|
6
|
+
const validators_1 = require("@medusajs/medusa/api/admin/users/validators");
|
|
7
|
+
exports.adminUsersMiddlewares = [
|
|
8
|
+
{
|
|
9
|
+
method: ["POST"],
|
|
10
|
+
matcher: "/admin/users/me",
|
|
11
|
+
middlewares: [
|
|
12
|
+
(0, framework_1.validateAndTransformBody)(validators_1.AdminUpdateUser),
|
|
13
|
+
(0, framework_1.validateAndTransformQuery)(validators_1.AdminGetUserParams, query_config_1.retrieveTransformQueryConfig),
|
|
14
|
+
],
|
|
15
|
+
},
|
|
16
|
+
];
|
|
17
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -14,6 +14,13 @@ export declare const REQUIRED_PERMISSION: unique symbol;
|
|
|
14
14
|
export declare function requirePermission(key: string, right: PermissionRight): ((req: AuthenticatedMedusaRequest, res: MedusaResponse, next: MedusaNextFunction) => void) & {
|
|
15
15
|
[REQUIRED_PERMISSION]: PermissionRequirement;
|
|
16
16
|
};
|
|
17
|
+
/**
|
|
18
|
+
* Passes when the actor holds any one of the requirements. For routes shared
|
|
19
|
+
* by several domains, e.g. uploads used by both products and the store profile.
|
|
20
|
+
*/
|
|
21
|
+
export declare function requireAnyPermission(requirements: PermissionRequirement[]): ((req: AuthenticatedMedusaRequest, res: MedusaResponse, next: MedusaNextFunction) => void) & {
|
|
22
|
+
[REQUIRED_PERMISSION]: PermissionRequirement;
|
|
23
|
+
};
|
|
17
24
|
export declare const PERMISSIONS_FIELD = "permissions";
|
|
18
25
|
/**
|
|
19
26
|
* `permissions` is a virtual field: pull it out of the query config before it
|
|
@@ -4,6 +4,7 @@ exports.PERMISSIONS_FIELD = exports.REQUIRED_PERMISSION = void 0;
|
|
|
4
4
|
exports.isPermissionsModuleEnabled = isPermissionsModuleEnabled;
|
|
5
5
|
exports.resolvePermissionsMiddleware = resolvePermissionsMiddleware;
|
|
6
6
|
exports.requirePermission = requirePermission;
|
|
7
|
+
exports.requireAnyPermission = requireAnyPermission;
|
|
7
8
|
exports.takePermissionsField = takePermissionsField;
|
|
8
9
|
exports.attachPermissions = attachPermissions;
|
|
9
10
|
const utils_1 = require("@medusajs/framework/utils");
|
|
@@ -81,6 +82,35 @@ function requirePermission(key, right) {
|
|
|
81
82
|
[exports.REQUIRED_PERMISSION]: { key, right },
|
|
82
83
|
});
|
|
83
84
|
}
|
|
85
|
+
/**
|
|
86
|
+
* Passes when the actor holds any one of the requirements. For routes shared
|
|
87
|
+
* by several domains, e.g. uploads used by both products and the store profile.
|
|
88
|
+
*/
|
|
89
|
+
function requireAnyPermission(requirements) {
|
|
90
|
+
const middleware = (req, res, next) => {
|
|
91
|
+
req.required_permissions ??= [];
|
|
92
|
+
req.required_permissions.push(...requirements);
|
|
93
|
+
if (!req.permissions_enforced) {
|
|
94
|
+
return next();
|
|
95
|
+
}
|
|
96
|
+
if (requirements.some(({ key, right }) => (0, permissions_1.satisfiesRight)(req.permissions?.[key], right))) {
|
|
97
|
+
return next();
|
|
98
|
+
}
|
|
99
|
+
const [{ key, right }] = requirements;
|
|
100
|
+
res.status(403).json({
|
|
101
|
+
type: "not_allowed",
|
|
102
|
+
code: types_1.MISSING_PERMISSION_CODE,
|
|
103
|
+
message: `Missing required permission: ${requirements
|
|
104
|
+
.map((requirement) => `${requirement.key}:${requirement.right}`)
|
|
105
|
+
.join(" or ")}`,
|
|
106
|
+
permission: key,
|
|
107
|
+
right,
|
|
108
|
+
});
|
|
109
|
+
};
|
|
110
|
+
return Object.assign(middleware, {
|
|
111
|
+
[exports.REQUIRED_PERMISSION]: requirements[0],
|
|
112
|
+
});
|
|
113
|
+
}
|
|
84
114
|
exports.PERMISSIONS_FIELD = "permissions";
|
|
85
115
|
/**
|
|
86
116
|
* `permissions` is a virtual field: pull it out of the query config before it
|
|
@@ -100,4 +130,4 @@ function attachPermissions(req, entity, requested) {
|
|
|
100
130
|
}
|
|
101
131
|
return { ...entity, permissions: req.permissions };
|
|
102
132
|
}
|
|
103
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
133
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -157,7 +157,6 @@ exports.vendorSellersMiddlewares = [
|
|
|
157
157
|
method: ["GET"],
|
|
158
158
|
matcher: "/vendor/sellers/:id/members",
|
|
159
159
|
middlewares: [
|
|
160
|
-
(0, utils_1.requirePermission)("store", "view"),
|
|
161
160
|
(0, utils_1.requirePermission)("members", "view"),
|
|
162
161
|
ensure_seller_scope_middleware_1.ensureSellerIdParamMiddleware,
|
|
163
162
|
(0, framework_1.validateAndTransformQuery)(validators_1.VendorGetSellersParams, QueryConfig.listVendorMembersQueryConfig),
|
|
@@ -192,4 +191,4 @@ exports.vendorSellersMiddlewares = [
|
|
|
192
191
|
],
|
|
193
192
|
},
|
|
194
193
|
];
|
|
195
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
194
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -12,9 +12,13 @@ exports.vendorUploadsMiddlewares = [
|
|
|
12
12
|
method: ["POST"],
|
|
13
13
|
matcher: "/vendor/uploads",
|
|
14
14
|
middlewares: [
|
|
15
|
-
|
|
16
|
-
|
|
15
|
+
// Product media and the store logo/banner both upload through here.
|
|
16
|
+
(0, utils_1.requireAnyPermission)([
|
|
17
|
+
{ key: "products", right: "edit" },
|
|
18
|
+
{ key: "store", right: "edit" },
|
|
19
|
+
]),
|
|
20
|
+
upload.array("files"),
|
|
17
21
|
],
|
|
18
22
|
},
|
|
19
23
|
];
|
|
20
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
24
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@mercurjs/core",
|
|
3
|
-
"version": "2.3.6-canary.
|
|
3
|
+
"version": "2.3.6-canary.7",
|
|
4
4
|
"repository": {
|
|
5
5
|
"type": "git",
|
|
6
6
|
"url": "https://github.com/mercurjs/mercur",
|
|
@@ -61,7 +61,7 @@
|
|
|
61
61
|
"@medusajs/medusa": "2.21.0",
|
|
62
62
|
"@medusajs/test-utils": "2.21.0",
|
|
63
63
|
"@medusajs/ui": "4.2.3",
|
|
64
|
-
"@mercurjs/types": "2.3.6-canary.
|
|
64
|
+
"@mercurjs/types": "2.3.6-canary.7",
|
|
65
65
|
"@swc/core": "^1.7.28",
|
|
66
66
|
"@types/cors": "^2.8.17",
|
|
67
67
|
"@types/express": "^4.17.21",
|
|
@@ -81,7 +81,7 @@
|
|
|
81
81
|
"multer": "^2.0.2",
|
|
82
82
|
"http-proxy-middleware": "^3.0.3",
|
|
83
83
|
"jsonwebtoken": "^9.0.3",
|
|
84
|
-
"@mercurjs/cli": "2.3.6-canary.
|
|
84
|
+
"@mercurjs/cli": "2.3.6-canary.7"
|
|
85
85
|
},
|
|
86
86
|
"peerDependencies": {
|
|
87
87
|
"@medusajs/admin-sdk": ">=2.21.0",
|