@minimaltech/node-infra 0.5.10-12 → 0.5.10-13

package/dist/components/authorize/interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../../src/components/authorize/interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,WAAW,EACX,iBAAiB,EACjB,IAAI,EACJ,OAAO,EACP,QAAQ,EACT,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAIL,oBAAoB,EAKrB,MAAM,yBAAyB,CAAC;AAqBjC,qBACa,sBAAuB,YAAW,QAAQ,CAAC,WAAW,CAAC;IAClE,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,MAAM,CAAoB;gBAIhC,OAAO,GAAE,oBAAyB;IAWpC,KAAK,IAAI,WAAW;IAId,SAAS,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CA8EhF"}

package/dist/components/authorize/interceptor.js

@@ -0,0 +1,118 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AuthorizateInterceptor_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizateInterceptor = void 0;
+const core_1 = require("@loopback/core");
+const security_1 = require("@loopback/security");
+const authorization_1 = require("@loopback/authorization");
+const helpers_1 = require("../../helpers");
+async function loadAuthorizers(ctx) {
+    const authorizerFunctions = [];
+    const bindings = ctx.findByTag(authorization_1.AuthorizationTags.AUTHORIZER);
+    const authorizers = bindings.map(b => b.key);
+    for (const keyOrFn of authorizers) {
+        if (typeof keyOrFn === 'function') {
+            authorizerFunctions.push(keyOrFn);
+            continue;
+        }
+        const fn = await ctx.get(keyOrFn);
+        authorizerFunctions.push(fn);
+    }
+    return authorizerFunctions;
+}
+let AuthorizateInterceptor = AuthorizateInterceptor_1 = class AuthorizateInterceptor {
+    constructor(options = {}) {
+        this.options = {
+            defaultDecision: authorization_1.AuthorizationDecision.DENY,
+            precedence: authorization_1.AuthorizationDecision.DENY,
+            defaultStatusCodeForDeny: 403,
+            ...options,
+        };
+        this.logger = helpers_1.LoggerFactory.getLogger([AuthorizateInterceptor_1.name]);
+    }
+    value() {
+        return this.intercept.bind(this);
+    }
+    async intercept(invocationCtx, next) {
+        let metadata = (0, authorization_1.getAuthorizationMetadata)(invocationCtx.target, invocationCtx.methodName);
+        const description = invocationCtx.description;
+        if (!metadata) {
+            this.logger.debug('[intercept] No authorization metadata is found for %s', description);
+        }
+        metadata = metadata ?? this.options.defaultMetadata;
+        if (!metadata || metadata?.skip) {
+            this.logger.debug('[intercept] Authorization is skipped for %s', description);
+            const result = await next();
+            return result;
+        }
+        this.logger.debug('[intercept] Authorization metadata for %s', description);
+        // retrieve it from authentication module
+        const user = await invocationCtx.get(security_1.SecurityBindings.USER, {
+            optional: true,
+        });
+        this.logger.debug('[intercept] Current user: %s', user);
+        const authorizationCtx = {
+            principals: user
+                ? [
+                    {
+                        ...user,
+                        name: user.name ?? user[security_1.securityId],
+                        type: 'USER',
+                    },
+                ]
+                : [],
+            roles: [],
+            scopes: [],
+            resource: invocationCtx.targetName,
+            invocationContext: invocationCtx,
+        };
+        this.logger.debug('[intercept] Security context for %s', description);
+        const authorizers = await loadAuthorizers(invocationCtx);
+        let finalDecision = this.options.defaultDecision;
+        for (const fn of authorizers) {
+            const decision = await fn(authorizationCtx, metadata);
+            this.logger.debug('[intercept] Decision: %s', decision);
+            if (decision && decision !== authorization_1.AuthorizationDecision.ABSTAIN) {
+                finalDecision = decision;
+            }
+            if (decision === authorization_1.AuthorizationDecision.DENY &&
+                this.options.precedence === authorization_1.AuthorizationDecision.DENY) {
+                this.logger.debug('[intercept] Access denied');
+                const error = new authorization_1.AuthorizationError('Access denied');
+                error.statusCode = this.options.defaultStatusCodeForDeny;
+                throw error;
+            }
+            if (decision === authorization_1.AuthorizationDecision.ALLOW &&
+                this.options.precedence === authorization_1.AuthorizationDecision.ALLOW) {
+                this.logger.debug('[intercept] Access allowed');
+                break;
+            }
+        }
+        this.logger.debug('[intercept] Final decision: %s', finalDecision);
+        if (finalDecision === authorization_1.AuthorizationDecision.DENY) {
+            const error = new authorization_1.AuthorizationError('Access denied');
+            error.statusCode = this.options.defaultStatusCodeForDeny;
+            throw error;
+        }
+        return next();
+    }
+};
+exports.AuthorizateInterceptor = AuthorizateInterceptor;
+exports.AuthorizateInterceptor = AuthorizateInterceptor = AuthorizateInterceptor_1 = __decorate([
+    (0, core_1.injectable)((0, core_1.asGlobalInterceptor)('authorization')),
+    __param(0, (0, core_1.config)({ fromBinding: authorization_1.AuthorizationBindings.COMPONENT })),
+    __metadata("design:paramtypes", [Object])
+], AuthorizateInterceptor);
+//# sourceMappingURL=interceptor.js.map

package/dist/components/authorize/interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.js","sourceRoot":"","sources":["../../../src/components/authorize/interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yCAWwB;AACxB,iDAA+E;AAC/E,2DASiC;AACjC,uCAA6D;AAE7D,KAAK,UAAU,eAAe,CAAC,GAAY;IACzC,MAAM,mBAAmB,GAAiB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAa,iCAAiB,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,WAAW,GAAgD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE1F,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAGM,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAIjC,YAEE,UAAgC,EAAE;QAElC,IAAI,CAAC,OAAO,GAAG;YACb,eAAe,EAAE,qCAAqB,CAAC,IAAI;YAC3C,UAAU,EAAE,qCAAqB,CAAC,IAAI;YACtC,wBAAwB,EAAE,GAAG;YAC7B,GAAG,OAAO;SACX,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,uBAAa,CAAC,SAAS,CAAC,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,aAAgC,EAAE,IAAU;QAC1D,IAAI,QAAQ,GAAG,IAAA,wCAAwB,EAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;QAExF,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE,WAAW,CAAC,CAAC;QAC1F,CAAC;QAED,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QACpD,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,WAAW,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,WAAW,CAAC,CAAC;QAE5E,yCAAyC;QACzC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAc,2BAAgB,CAAC,IAAI,EAAE;YACvE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;QAExD,MAAM,gBAAgB,GAAyB;YAC7C,UAAU,EAAE,IAAI;gBACd,CAAC,CAAC;oBACE;wBACE,GAAG,IAAI;wBACP,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,qBAAU,CAAC;wBACnC,IAAI,EAAE,MAAM;qBACb;iBACF;gBACH,CAAC,CAAC,EAAE;YACN,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,aAAa,CAAC,UAAU;YAClC,iBAAiB,EAAE,aAAa;SACjC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QAEzD,IAAI,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QACjD,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;YAExD,IAAI,QAAQ,IAAI,QAAQ,KAAK,qCAAqB,CAAC,OAAO,EAAE,CAAC;gBAC3D,aAAa,GAAG,QAAQ,CAAC;YAC3B,CAAC;YAED,IACE,QAAQ,KAAK,qCAAqB,CAAC,IAAI;gBACvC,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,qCAAqB,CAAC,IAAI,EACtD,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,MAAM,KAAK,GAAG,IAAI,kCAAkB,CAAC,eAAe,CAAC,CAAC;gBACtD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC;gBACzD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IACE,QAAQ,KAAK,qCAAqB,CAAC,KAAK;gBACxC,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,qCAAqB,CAAC,KAAK,EACvD,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,aAAa,KAAK,qCAAqB,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,kCAAkB,CAAC,eAAe,CAAC,CAAC;YACtD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;CACF,CAAA;AAnGY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,iBAAU,EAAC,IAAA,0BAAmB,EAAC,eAAe,CAAC,CAAC;IAM5C,WAAA,IAAA,aAAM,EAAC,EAAE,WAAW,EAAE,qCAAqB,CAAC,SAAS,EAAE,CAAC,CAAA;;GALhD,sBAAsB,CAmGlC"}

package/dist/components/authorize/migrations/0000-create-view-policy.d.ts

@@ -0,0 +1,8 @@
+import { BaseApplication } from '../../../base/applications';
+export declare const createViewPolicy: (opts: {
+    datasourceKey: string;
+}) => {
+    name: string;
+    fn: (application: BaseApplication) => Promise<void>;
+};
+//# sourceMappingURL=0000-create-view-policy.d.ts.map

package/dist/components/authorize/migrations/0000-create-view-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"0000-create-view-policy.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/migrations/0000-create-view-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AA+CtD,eAAO,MAAM,gBAAgB,GAAI,MAAM;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE;;sBAEtC,eAAe;CAuBvC,CAAC"}

package/dist/components/authorize/migrations/0000-create-view-policy.js

@@ -0,0 +1,74 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createViewPolicy = void 0;
+const helpers_1 = require("../../../helpers");
+const utilities_1 = require("../../../utilities");
+const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
+const common_1 = require("../common");
+const sqls = [
+    // UUID
+    `CREATE EXTENSION IF NOT EXISTS "uuid-ossp"`,
+    // View policies
+    'DROP VIEW IF EXISTS "ViewAuthorizePolicy";',
+    `CREATE OR REPLACE VIEW "ViewAuthorizePolicy"
+  AS (
+  SELECT
+      uuid_generate_v4() as id,
+      (t.subject_type || '_' || t.subject_id) as subject,
+      t.subject_type,
+      t.subject_id,
+      json_agg(t.policy)::JSONB as policies
+  FROM (
+      SELECT
+          pm.id as id,
+          (CASE
+              WHEN pm.user_id IS NOT NULL THEN '${common_1.EnforcerDefinitions.PREFIX_USER}'
+              WHEN pm.role_id IS NOT NULL THEN '${common_1.EnforcerDefinitions.PREFIX_ROLE}'
+              ELSE NULL
+          END) AS subject_type,
+          (CASE
+              WHEN pm.user_id IS NOT NULL THEN pm.user_id
+              WHEN pm.role_id IS NOT NULL THEN pm.role_id
+              ELSE NULL
+          END) AS subject_id,
+          p.id AS permision_id,
+          p.code AS permision_code,
+          (CASE
+              WHEN pm.user_id IS NOT NULL THEN
+                  'p,${common_1.EnforcerDefinitions.PREFIX_USER}_' || pm.user_id || ',' || LOWER(p.code) || ',${common_1.EnforcerDefinitions.ACTION_EXECUTE},' || effect
+              WHEN pm.role_id IS NOT NULL THEN
+                  'p,${common_1.EnforcerDefinitions.PREFIX_ROLE}_' || pm.role_id || ',' || LOWER(p.code) || ',${common_1.EnforcerDefinitions.ACTION_EXECUTE},' || effect
+              ELSE NULL
+          END) AS policy
+      FROM "PermissionMapping" AS pm INNER JOIN "Permission" AS p ON pm.permission_id = p.id
+  ) AS t GROUP BY t.subject_type, t.subject_id, subject);`,
+];
+const createViewPolicy = (opts) => ({
+    name: __filename.slice(__dirname.length + 1),
+    fn: async (application) => {
+        if (!opts.datasourceKey || (0, isEmpty_1.default)(opts.datasourceKey)) {
+            throw (0, utilities_1.getError)({
+                statusCode: 500,
+                message: '[createViewPolicy] Invalid datasourceKey to execute migration!',
+            });
+        }
+        const { datasourceKey } = opts;
+        const datasource = application.getSync(datasourceKey);
+        if (!datasource) {
+            throw (0, utilities_1.getError)({
+                statusCode: 500,
+                message: `[createViewPolicy] Cannot find datasource with key ${datasourceKey} to execute migration!`,
+            });
+        }
+        for (const sql of sqls) {
+            helpers_1.applicationLogger.info('[creatViewPolicy] START | Execute SQL: %s', sql);
+            await datasource.execute(sql);
+            helpers_1.applicationLogger.info('[createViewPolicy] DONE | Execute SQL: %s', sql);
+        }
+    },
+});
+exports.createViewPolicy = createViewPolicy;
+//# sourceMappingURL=0000-create-view-policy.js.map

package/dist/components/authorize/migrations/0000-create-view-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0000-create-view-policy.js","sourceRoot":"","sources":["../../../../src/components/authorize/migrations/0000-create-view-policy.ts"],"names":[],"mappings":";;;;;;AAEA,uCAA8C;AAC9C,2CAAuC;AACvC,6DAAqC;AACrC,sCAAgD;AAEhD,MAAM,IAAI,GAAG;IACX,OAAO;IACP,4CAA4C;IAE5C,gBAAgB;IAChB,4CAA4C;IAC5C;;;;;;;;;;;;kDAYgD,4BAAmB,CAAC,WAAW;kDAC/B,4BAAmB,CAAC,WAAW;;;;;;;;;;;;uBAY1D,4BAAmB,CAAC,WAAW,iDAAiD,4BAAmB,CAAC,cAAc;;uBAElH,4BAAmB,CAAC,WAAW,iDAAiD,4BAAmB,CAAC,cAAc;;;;0DAI/E;CACzD,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAAC,IAA+B,EAAE,EAAE,CAAC,CAAC;IACpE,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5C,EAAE,EAAE,KAAK,EAAE,WAA4B,EAAE,EAAE;QACzC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAA,iBAAO,EAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACvD,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,gEAAgE;aAC1E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAiB,aAAa,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,sDAAsD,aAAa,wBAAwB;aACrG,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,2BAAiB,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;YACzE,MAAM,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,2BAAiB,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAzBU,QAAA,gBAAgB,oBAyB1B"}

package/dist/components/authorize/migrations/index.d.ts

@@ -0,0 +1,2 @@
+export * from './0000-create-view-policy';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/authorize/migrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/migrations/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/components/authorize/migrations/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./0000-create-view-policy"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/authorize/migrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/authorize/migrations/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C"}

package/dist/components/authorize/models/defs.d.ts

@@ -0,0 +1,174 @@
+import { AnyObject } from '../../../common';
+export declare const defineUser: () => {
+    new (data?: Partial<{
+        realm?: string;
+        status: string;
+        userType?: string;
+        activatedAt?: Date;
+        lastLoginAt?: Date;
+        parentId: number;
+        createdAt: Date;
+        modifiedAt: Date;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        id: number;
+    }>): {
+        realm?: string;
+        status: string;
+        userType?: string;
+        activatedAt?: Date;
+        lastLoginAt?: Date;
+        parentId: number;
+        createdAt: Date;
+        modifiedAt: Date;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        id: number;
+    };
+    getIdProperties(): string[];
+    getIdOf(entityOrData: import("@loopback/repository").AnyObject): any;
+    buildWhereForId(id: any): any;
+    get modelName(): string;
+    definition: import("@loopback/repository").ModelDefinition;
+};
+export declare const defineRole: () => {
+    new (data?: Partial<{
+        identifier: string;
+        name: string;
+        description?: string;
+        priority: number;
+        status: string;
+        createdAt: Date;
+        modifiedAt: Date;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        id: number;
+    }>): {
+        identifier: string;
+        name: string;
+        description?: string;
+        priority: number;
+        status: string;
+        createdAt: Date;
+        modifiedAt: Date;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        id: number;
+    };
+    getIdProperties(): string[];
+    getIdOf(entityOrData: import("@loopback/repository").AnyObject): any;
+    buildWhereForId(id: any): any;
+    get modelName(): string;
+    definition: import("@loopback/repository").ModelDefinition;
+};
+export declare const definePermission: <T extends AnyObject = AnyObject>() => {
+    new (data?: Partial<{
+        code: string;
+        name: string;
+        subject: string;
+        pType: string;
+        action: string;
+        scope?: string;
+        parentId: number;
+        details: T;
+        createdAt: Date;
+        modifiedAt: Date;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        id: number;
+    }>): {
+        code: string;
+        name: string;
+        subject: string;
+        pType: string;
+        action: string;
+        scope?: string;
+        parentId: number;
+        details: T;
+        createdAt: Date;
+        modifiedAt: Date;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        id: number;
+    };
+    getIdProperties(): string[];
+    getIdOf(entityOrData: import("@loopback/repository").AnyObject): any;
+    buildWhereForId(id: any): any;
+    get modelName(): string;
+    definition: import("@loopback/repository").ModelDefinition;
+};
+export declare const definePermissionMapping: () => {
+    new (data?: Partial<{
+        userId?: number;
+        roleId: number;
+        permissionId: number;
+        effect: string;
+        createdAt: Date;
+        modifiedAt: Date;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        id: number;
+    }>): {
+        userId?: number;
+        roleId: number;
+        permissionId: number;
+        effect: string;
+        createdAt: Date;
+        modifiedAt: Date;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        id: number;
+    };
+    getIdProperties(): string[];
+    getIdOf(entityOrData: import("@loopback/repository").AnyObject): any;
+    buildWhereForId(id: any): any;
+    get modelName(): string;
+    definition: import("@loopback/repository").ModelDefinition;
+};
+export declare const defineUserRole: () => {
+    new (data?: Partial<{
+        userId: number;
+        principalType?: string;
+        principalId?: import("../../../common").IdType;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        createdAt: Date;
+        modifiedAt: Date;
+        id: number;
+    }>): {
+        userId: number;
+        principalType?: string;
+        principalId?: import("../../../common").IdType;
+        getId: () => any;
+        getIdObject: () => Object;
+        toJSON: () => Object;
+        toObject: (options?: import("@loopback/repository").Options) => Object;
+        createdAt: Date;
+        modifiedAt: Date;
+        id: number;
+    };
+    getIdProperties(): string[];
+    getIdOf(entityOrData: import("@loopback/repository").AnyObject): any;
+    buildWhereForId(id: any): any;
+    get modelName(): string;
+    definition: import("@loopback/repository").ModelDefinition;
+};
+//# sourceMappingURL=defs.d.ts.map

package/dist/components/authorize/models/defs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defs.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/models/defs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAyC,MAAM,UAAU,CAAC;AAK5E,eAAO,MAAM,UAAU;gBAqDA,OAAO;gBAhDlB,MAAM;gBAUN,MAAM;mBAUH,MAAM;sBASH,IAAI;sBASJ,IAAI;kBAQR,MAAM;;;;;;;;MAEgB;gBAhDxB,MAAM;gBAUN,MAAM;mBAUH,MAAM;sBASH,IAAI;sBASJ,IAAI;kBAQR,MAAM;;;;;;;;;;;;;;CAQnB,CAAC;AAGF,eAAO,MAAM,UAAU;gBA8BA,OAAO;oBAxBd,MAAM;cAMZ,MAAM;sBAKE,MAAM;kBAKV,MAAM;gBAMR,MAAM;;;;;;;;MAEkB;oBAxBpB,MAAM;cAMZ,MAAM;sBAKE,MAAM;kBAKV,MAAM;gBAMR,MAAM;;;;;;;;;;;;;;CAQjB,CAAC;AAGF,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS,SAAS,GAAG,SAAS;gBAgDzC,OAAO;cA3CpB,MAAM;cAKN,MAAM;iBAKH,MAAM;eAMR,MAAM;gBAKL,MAAM;gBAKN,MAAM;kBAMJ,MAAM;iBASP,CAAC;;;;;;;;MAE4B;cA3ChC,MAAM;cAKN,MAAM;iBAKH,MAAM;eAMR,MAAM;gBAKL,MAAM;gBAKN,MAAM;kBAMJ,MAAM;iBASP,CAAC;;;;;;;;;;;;;;CAQb,CAAC;AAGF,eAAO,MAAM,uBAAuB;gBAuBb,OAAO;iBAjBjB,MAAM;gBAMP,MAAM;sBAMA,MAAM;gBAGZ,MAAM;;;;;;;;MAE+B;iBAjBpC,MAAM;gBAMP,MAAM;sBAMA,MAAM;gBAGZ,MAAM;;;;;;;;;;;;;;CAOjB,CAAC;AAGF,eAAO,MAAM,cAAc;gBAQJ,OAAO;gBAFlB,MAAM;;;;;;;;;;MAEsB;gBAF5B,MAAM;;;;;;;;;;;;;;;;CAOjB,CAAC"}

package/dist/components/authorize/models/defs.js

@@ -0,0 +1,243 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defineUserRole = exports.definePermissionMapping = exports.definePermission = exports.defineRole = exports.defineUser = void 0;
+const models_1 = require("../../../base/models");
+const common_1 = require("../../../common");
+const mixins_1 = require("../../../mixins");
+const repository_1 = require("@loopback/repository");
+// -----------------------------------------------------------------------
+const defineUser = () => {
+    class User extends models_1.BaseNumberTzEntity {
+        constructor(data) {
+            super(data);
+        }
+    }
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+        }),
+        __metadata("design:type", String)
+    ], User.prototype, "realm", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+            default: common_1.UserStatuses.UNKNOWN,
+            postgresql: {
+                columnName: 'status',
+                dataType: 'text',
+            },
+        }),
+        __metadata("design:type", String)
+    ], User.prototype, "status", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+            default: common_1.UserTypes.SYSTEM,
+            postgresql: {
+                columnName: 'user_type',
+                dataType: 'text',
+            },
+        }),
+        __metadata("design:type", String)
+    ], User.prototype, "userType", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'date',
+            postgresql: {
+                columnName: 'activated_at',
+                dataType: 'TIMESTAMPTZ',
+            },
+        }),
+        __metadata("design:type", Date)
+    ], User.prototype, "activatedAt", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'date',
+            postgresql: {
+                columnName: 'last_login_at',
+                dataType: 'TIMESTAMPTZ',
+            },
+        }),
+        __metadata("design:type", Date)
+    ], User.prototype, "lastLoginAt", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'number',
+            postgresql: {
+                columnName: 'parent_id',
+            },
+        }),
+        __metadata("design:type", Number)
+    ], User.prototype, "parentId", void 0);
+    return User;
+};
+exports.defineUser = defineUser;
+// -----------------------------------------------------------------------
+const defineRole = () => {
+    class Role extends models_1.BaseNumberTzEntity {
+        constructor(data) {
+            super(data);
+        }
+    }
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+            require: true,
+        }),
+        __metadata("design:type", String)
+    ], Role.prototype, "identifier", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+            require: true,
+        }),
+        __metadata("design:type", String)
+    ], Role.prototype, "name", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+        }),
+        __metadata("design:type", String)
+    ], Role.prototype, "description", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'number',
+        }),
+        __metadata("design:type", Number)
+    ], Role.prototype, "priority", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+            default: common_1.RoleStatuses.ACTIVATED,
+        }),
+        __metadata("design:type", String)
+    ], Role.prototype, "status", void 0);
+    return Role;
+};
+exports.defineRole = defineRole;
+// -----------------------------------------------------------------------
+const definePermission = () => {
+    class Permission extends models_1.BaseNumberTzEntity {
+        constructor(data) {
+            super(data);
+        }
+    }
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+        }),
+        __metadata("design:type", String)
+    ], Permission.prototype, "code", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+        }),
+        __metadata("design:type", String)
+    ], Permission.prototype, "name", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+        }),
+        __metadata("design:type", String)
+    ], Permission.prototype, "subject", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+            postgresql: { columnName: 'p_type' },
+        }),
+        __metadata("design:type", String)
+    ], Permission.prototype, "pType", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+        }),
+        __metadata("design:type", String)
+    ], Permission.prototype, "action", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'string',
+        }),
+        __metadata("design:type", String)
+    ], Permission.prototype, "scope", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'number',
+            postgresql: { columnName: 'parent_id' },
+        }),
+        __metadata("design:type", Number)
+    ], Permission.prototype, "parentId", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'object',
+            postgresql: {
+                columnName: 'details',
+                dataType: 'jsonb',
+            },
+        }),
+        __metadata("design:type", Object)
+    ], Permission.prototype, "details", void 0);
+    return Permission;
+};
+exports.definePermission = definePermission;
+// -----------------------------------------------------------------------
+const definePermissionMapping = () => {
+    class PermissionMapping extends models_1.BaseNumberTzEntity {
+        constructor(data) {
+            super(data);
+        }
+    }
+    __decorate([
+        (0, repository_1.property)({
+            type: 'number',
+            postgresql: { columnName: 'user_id' },
+        }),
+        __metadata("design:type", Number)
+    ], PermissionMapping.prototype, "userId", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'number',
+            postgresql: { columnName: 'role_id' },
+        }),
+        __metadata("design:type", Number)
+    ], PermissionMapping.prototype, "roleId", void 0);
+    __decorate([
+        (0, repository_1.property)({
+            type: 'number',
+            postgresql: { columnName: 'permission_id' },
+        }),
+        __metadata("design:type", Number)
+    ], PermissionMapping.prototype, "permissionId", void 0);
+    __decorate([
+        (0, repository_1.property)({ type: 'string' }),
+        __metadata("design:type", String)
+    ], PermissionMapping.prototype, "effect", void 0);
+    return PermissionMapping;
+};
+exports.definePermissionMapping = definePermissionMapping;
+// -----------------------------------------------------------------------
+const defineUserRole = () => {
+    class UserRole extends (0, mixins_1.PrincipalMixin)(models_1.BaseNumberTzEntity, 'Role', 'number') {
+        constructor(data) {
+            super(data);
+        }
+    }
+    __decorate([
+        (0, repository_1.property)({
+            type: 'number',
+            postgresql: { columnName: 'user_id' },
+        }),
+        __metadata("design:type", Number)
+    ], UserRole.prototype, "userId", void 0);
+    return UserRole;
+};
+exports.defineUserRole = defineUserRole;
+//# sourceMappingURL=defs.js.map