@meridianjs/auth 1.4.0 → 1.6.0

package/dist/index.d.mts

@@ -114,8 +114,8 @@ declare function authenticateJWT(req: any, res: Response, next: NextFunction): v
 declare function requireRoles(...roles: string[]): (req: any, res: Response, next: NextFunction) => void;
 /**
  * Permission guard — allows the request if `req.user.roles` includes "super-admin"
- * (full bypass) or if `req.user.permissions` contains at least one of the listed
- * permissions.
+ * or "admin" (full bypass), or if `req.user.permissions` contains at least one of
+ * the listed permissions.
  *
  * Must be used after `authenticateJWT` so that `req.user` is populated.
  *

package/dist/index.d.ts

@@ -114,8 +114,8 @@ declare function authenticateJWT(req: any, res: Response, next: NextFunction): v
 declare function requireRoles(...roles: string[]): (req: any, res: Response, next: NextFunction) => void;
 /**
  * Permission guard — allows the request if `req.user.roles` includes "super-admin"
- * (full bypass) or if `req.user.permissions` contains at least one of the listed
- * permissions.
+ * or "admin" (full bypass), or if `req.user.permissions` contains at least one of
+ * the listed permissions.
  *
  * Must be used after `authenticateJWT` so that `req.user` is populated.
  *

package/dist/index.js

@@ -381,7 +381,7 @@ function requireRoles(...roles) {
 function requirePermission(...permissions) {
   return (req, res, next) => {
     const userRoles = req.user?.roles ?? [];
-    if (userRoles.includes("super-admin")) return next();
+    if (userRoles.includes("super-admin") || userRoles.includes("admin")) return next();
     const userPermissions = req.user?.permissions ?? [];
     if (permissions.some((p) => userPermissions.includes(p))) return next();
     res.status(403).json({ error: { message: "Forbidden \u2014 insufficient permissions" } });

package/dist/index.mjs

@@ -341,7 +341,7 @@ function requireRoles(...roles) {
 function requirePermission(...permissions) {
   return (req, res, next) => {
     const userRoles = req.user?.roles ?? [];
-    if (userRoles.includes("super-admin")) return next();
+    if (userRoles.includes("super-admin") || userRoles.includes("admin")) return next();
     const userPermissions = req.user?.permissions ?? [];
     if (permissions.some((p) => userPermissions.includes(p))) return next();
     res.status(403).json({ error: { message: "Forbidden \u2014 insufficient permissions" } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meridianjs/auth",
-  "version": "1.4.0",
+  "version": "1.6.0",
   "description": "Meridian auth module — JWT authentication and middleware",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -26,8 +26,8 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@meridianjs/types": "^1.4.0",
-    "@meridianjs/framework-utils": "^1.4.0",
+    "@meridianjs/types": "^1.6.0",
+    "@meridianjs/framework-utils": "^1.6.0",
     "jsonwebtoken": "^9.0.2",
     "bcrypt": "^5.1.1"
   },