@minimaltech/node-infra 0.5.10-12 → 0.5.10-13

package/dist/components/authorize/provider.js

@@ -0,0 +1,144 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var AuthorizeProvider_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizeProvider = void 0;
+const helpers_1 = require("../../helpers");
+const utilities_1 = require("../../utilities");
+const authorization_1 = require("@loopback/authorization");
+const core_1 = require("@loopback/core");
+const intersection_1 = __importDefault(require("lodash/intersection"));
+const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
+const common_1 = require("./common");
+const services_1 = require("./services");
+let AuthorizeProvider = AuthorizeProvider_1 = class AuthorizeProvider {
+    constructor(enforcerService, alwaysAllowRoles, normalizePayloadFn) {
+        this.enforcerService = enforcerService;
+        this.alwaysAllowRoles = alwaysAllowRoles;
+        this.normalizePayloadFn = normalizePayloadFn;
+        this.logger = helpers_1.LoggerFactory.getLogger([AuthorizeProvider_1.name]);
+    }
+    value() {
+        return this.authorize.bind(this);
+    }
+    // -------------------------------------------------------------------------------------------------------------------
+    normalizeEnforcePayload(opts) {
+        const { subject, object, scope } = opts;
+        return {
+            subject: subject?.toLowerCase() || '',
+            object: scope?.toLowerCase() ??
+                (object?.toLowerCase() || '')?.replace(/controller/g, '')?.replace(/.prototype/g, ''),
+            action: common_1.EnforcerDefinitions.ACTION_EXECUTE,
+        };
+    }
+    // -------------------------------------------------------------------------------------------------------------------
+    async authorizePermission(userId, object, scopes) {
+        let isSingleAuthRs = false;
+        let isScopeAuthRs = true;
+        const enforcer = await this.enforcerService.getTypeEnforcer(userId);
+        if (!enforcer) {
+            this.logger.debug('[authorizePermission] Skip authorization for NULL enforcer!');
+            return false;
+        }
+        const subject = `${common_1.EnforcerDefinitions.PREFIX_USER}_${userId}`;
+        for (const scope of scopes ?? []) {
+            const enforcePayload = this.normalizePayloadFn?.({ subject, object, scope }) ??
+                this.normalizeEnforcePayload({ subject, object, scope });
+            isScopeAuthRs = await enforcer.enforce(enforcePayload.subject, enforcePayload.object, enforcePayload.action);
+            this.logger.debug('[authorizePermission] Payload: %j | scopeAuthRs: %s', enforcePayload, isScopeAuthRs);
+            if (!isScopeAuthRs) {
+                this.logger.debug('[authorizePermission] Permission denied | Payload: %j', enforcePayload);
+                break;
+            }
+        }
+        if (!isScopeAuthRs) {
+            return isScopeAuthRs;
+        }
+        if (object) {
+            const enforcePayload = this.normalizePayloadFn?.({ subject, object }) ??
+                this.normalizeEnforcePayload({ subject, object });
+            isSingleAuthRs = await enforcer.enforce(enforcePayload.subject, enforcePayload.object, enforcePayload.action);
+            this.logger.debug('[authorizePermission] Payload: %j | singleAuthRs: %s', enforcePayload, isSingleAuthRs);
+        }
+        return isScopeAuthRs && isSingleAuthRs;
+    }
+    // -------------------------------------------------------------------------------------------------------------------
+    async authorize(context, metadata) {
+        const t = new Date().getTime();
+        if (context?.principals.length <= 0) {
+            return authorization_1.AuthorizationDecision.DENY;
+        }
+        const { userId, roles: encodedRoles } = context.principals[0];
+        const roleIds = [];
+        const roleIdentifiers = [];
+        const roles = [];
+        for (const encodedRole of encodedRoles) {
+            if (!encodedRole || (0, isEmpty_1.default)(encodedRole)) {
+                continue;
+            }
+            const { id, identifier } = encodedRole;
+            roleIds.push((0, utilities_1.int)(id));
+            roleIdentifiers.push(identifier);
+            roles.push({ id, identifier });
+        }
+        // DENY all unknown user and unknow roles
+        if (!userId || !roles?.length) {
+            return authorization_1.AuthorizationDecision.DENY;
+        }
+        const { resource, allowedRoles = [], scopes, voters } = metadata;
+        const requestResource = resource ?? context.resource;
+        // Verify static roles
+        if ((0, intersection_1.default)(this.alwaysAllowRoles, roleIdentifiers)?.length > 0 ||
+            (0, intersection_1.default)(allowedRoles, roleIdentifiers)?.length > 0) {
+            return authorization_1.AuthorizationDecision.ALLOW;
+        }
+        if (voters && voters?.length > 0) {
+            const voterRs = await Promise.all(voters?.map(el => {
+                switch (typeof el) {
+                    case 'function': {
+                        return el?.(context, metadata);
+                    }
+                    default: {
+                        throw (0, utilities_1.getError)({
+                            message: '[authorize][voter] voter implementation must be function type!',
+                        });
+                    }
+                }
+            }));
+            const voterSet = new Set(voterRs);
+            if (voterSet.size === 1 && voterSet.has(authorization_1.AuthorizationDecision.ALLOW)) {
+                return authorization_1.AuthorizationDecision.ALLOW;
+            }
+            if (voterSet.has(authorization_1.AuthorizationDecision.DENY)) {
+                return authorization_1.AuthorizationDecision.DENY;
+            }
+        }
+        // Authorize by role and user permissions
+        const isAuthorized = await this.authorizePermission(userId, requestResource, scopes);
+        const rs = isAuthorized ? authorization_1.AuthorizationDecision.ALLOW : authorization_1.AuthorizationDecision.DENY;
+        this.logger.debug('[authorize] Authorizing... | Resource: %s | allowedRoles: %j | scopes: %j | Took: %d(ms)', requestResource, allowedRoles, scopes, new Date().getTime() - t);
+        return rs;
+    }
+};
+exports.AuthorizeProvider = AuthorizeProvider;
+exports.AuthorizeProvider = AuthorizeProvider = AuthorizeProvider_1 = __decorate([
+    __param(0, (0, core_1.inject)(common_1.AuthorizerKeys.ENFORCER)),
+    __param(1, (0, core_1.inject)(common_1.AuthorizerKeys.ALWAYS_ALLOW_ROLES)),
+    __param(2, (0, core_1.inject)(common_1.AuthorizerKeys.NORMALIZE_PAYLOAD_FN)),
+    __metadata("design:paramtypes", [services_1.EnforcerService, Array, Function])
+], AuthorizeProvider);
+//# sourceMappingURL=provider.js.map

package/dist/components/authorize/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/components/authorize/provider.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,uCAA6D;AAC7D,2CAA4C;AAC5C,2DAKiC;AACjC,yCAAkD;AAClD,uEAA+C;AAC/C,6DAAqC;AACrC,qCAA+D;AAC/D,yCAA6C;AAE7C,IAAa,iBAAiB,yBAA9B,MAAa,iBAAiB;IAG5B,YAC2C,eAAgC,EAEjE,gBAA0B,EAE1B,kBAIP;QARwC,oBAAe,GAAf,eAAe,CAAiB;QAEjE,qBAAgB,GAAhB,gBAAgB,CAAU;QAE1B,uBAAkB,GAAlB,kBAAkB,CAIzB;QAED,IAAI,CAAC,MAAM,GAAG,uBAAa,CAAC,SAAS,CAAC,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,sHAAsH;IACtH,uBAAuB,CAAC,IAAyD;QAC/E,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE;YACrC,MAAM,EACJ,KAAK,EAAE,WAAW,EAAE;gBACpB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;YACvF,MAAM,EAAE,4BAAmB,CAAC,cAAc;SAC3C,CAAC;IACJ,CAAC;IAED,sHAAsH;IACtH,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,MAAc,EAAE,MAAiB;QACzE,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,aAAa,GAAG,IAAI,CAAC;QAEzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,4BAAmB,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YACjC,MAAM,cAAc,GAClB,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;gBACrD,IAAI,CAAC,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,aAAa,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,cAAc,CAAC,OAAO,EACtB,cAAc,CAAC,MAAM,EACrB,cAAc,CAAC,MAAM,CACtB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,qDAAqD,EACrD,cAAc,EACd,aAAa,CACd,CAAC;YAEF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE,cAAc,CAAC,CAAC;gBAC3F,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,cAAc,GAClB,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC9C,IAAI,CAAC,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,cAAc,GAAG,MAAM,QAAQ,CAAC,OAAO,CACrC,cAAc,CAAC,OAAO,EACtB,cAAc,CAAC,MAAM,EACrB,cAAc,CAAC,MAAM,CACtB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,sDAAsD,EACtD,cAAc,EACd,cAAc,CACf,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,IAAI,cAAc,CAAC;IACzC,CAAC;IAED,sHAAsH;IACtH,KAAK,CAAC,SAAS,CACb,OAA6B,EAC7B,QAA+B;QAE/B,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,OAAO,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACpC,OAAO,qCAAqB,CAAC,IAAI,CAAC;QACpC,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,MAAM,KAAK,GAAyC,EAAE,CAAC;QAEvD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,IAAI,IAAA,iBAAO,EAAC,WAAW,CAAC,EAAE,CAAC;gBACzC,SAAS;YACX,CAAC;YAED,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC;YAEvC,OAAO,CAAC,IAAI,CAAC,IAAA,eAAG,EAAC,EAAE,CAAC,CAAC,CAAC;YACtB,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC9B,OAAO,qCAAqB,CAAC,IAAI,CAAC;QACpC,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QACjE,MAAM,eAAe,GAAG,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QAErD,sBAAsB;QACtB,IACE,IAAA,sBAAY,EAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,CAAC;YAChE,IAAA,sBAAY,EAAC,YAAY,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,CAAC,EACvD,CAAC;YACD,OAAO,qCAAqB,CAAC,KAAK,CAAC;QACrC,CAAC;QAED,IAAI,MAAM,IAAI,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE;gBACf,QAAQ,OAAO,EAAE,EAAE,CAAC;oBAClB,KAAK,UAAU,CAAC,CAAC,CAAC;wBAChB,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACjC,CAAC;oBACD,OAAO,CAAC,CAAC,CAAC;wBACR,MAAM,IAAA,oBAAQ,EAAC;4BACb,OAAO,EAAE,gEAAgE;yBAC1E,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAElC,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,qCAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrE,OAAO,qCAAqB,CAAC,KAAK,CAAC;YACrC,CAAC;YAED,IAAI,QAAQ,CAAC,GAAG,CAAC,qCAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,OAAO,qCAAqB,CAAC,IAAI,CAAC;YACpC,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QACrF,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,qCAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,qCAAqB,CAAC,IAAI,CAAC;QAEnF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0FAA0F,EAC1F,eAAe,EACf,YAAY,EACZ,MAAM,EACN,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CACzB,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAA;AA1KY,8CAAiB;4BAAjB,iBAAiB;IAIzB,WAAA,IAAA,aAAM,EAAC,uBAAc,CAAC,QAAQ,CAAC,CAAA;IAC/B,WAAA,IAAA,aAAM,EAAC,uBAAc,CAAC,kBAAkB,CAAC,CAAA;IAEzC,WAAA,IAAA,aAAM,EAAC,uBAAc,CAAC,oBAAoB,CAAC,CAAA;qCAHc,0BAAe;GAJhE,iBAAiB,CA0K7B"}

package/dist/components/authorize/repositories/authorize.repository.d.ts

@@ -0,0 +1,34 @@
+import { BaseDataSource } from '../../../base/datasources';
+import { TBaseTzEntity } from '../../../base/models';
+import { TzCrudRepository, ViewRepository } from '../../../base/repositories';
+import { EntityClassType, IdType } from '../../../common';
+import { Getter } from '@loopback/core';
+import { HasManyThroughRepositoryFactory } from '@loopback/repository';
+import { Permission, PermissionMapping, Role, UserRole, ViewAuthorizePolicy } from '../models';
+export declare abstract class AbstractAuthorizeRepository<T extends TBaseTzEntity> extends TzCrudRepository<T> {
+    constructor(entityClass: EntityClassType<T>, dataSource: BaseDataSource);
+    abstract bindingRelations(): void;
+}
+export declare class RoleRepository extends AbstractAuthorizeRepository<Role> {
+    protected permissionRepositoryGetter: Getter<PermissionRepository>;
+    protected permissionMappingRepositoryGetter: Getter<PermissionMappingRepository>;
+    readonly permissions: HasManyThroughRepositoryFactory<Permission, IdType, PermissionMapping, IdType>;
+    constructor(dataSource: BaseDataSource, permissionRepositoryGetter: Getter<PermissionRepository>, permissionMappingRepositoryGetter: Getter<PermissionMappingRepository>);
+    bindingRelations(): void;
+}
+export declare class PermissionRepository extends AbstractAuthorizeRepository<Permission> {
+    constructor(dataSource: BaseDataSource);
+    bindingRelations(): void;
+}
+export declare class PermissionMappingRepository extends AbstractAuthorizeRepository<PermissionMapping> {
+    constructor(dataSource: BaseDataSource);
+    bindingRelations(): void;
+}
+export declare class UserRoleRepository extends AbstractAuthorizeRepository<UserRole> {
+    constructor(dataSource: BaseDataSource);
+    bindingRelations(): void;
+}
+export declare class ViewAuthorizePolicyRepository extends ViewRepository<ViewAuthorizePolicy> {
+    constructor(dataSource: BaseDataSource);
+}
+//# sourceMappingURL=authorize.repository.d.ts.map

package/dist/components/authorize/repositories/authorize.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.repository.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/repositories/authorize.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAU,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,+BAA+B,EAAc,MAAM,sBAAsB,CAAC;AAEnF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAO/F,8BAAsB,2BAA2B,CAC/C,CAAC,SAAS,aAAa,CACvB,SAAQ,gBAAgB,CAAC,CAAC,CAAC;gBACf,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc;IAWvE,QAAQ,CAAC,gBAAgB,IAAI,IAAI;CAClC;AAGD,qBAAa,cAAe,SAAQ,2BAA2B,CAAC,IAAI,CAAC;IAWjE,SAAS,CAAC,0BAA0B,EAAE,MAAM,CAAC,oBAAoB,CAAC;IAElE,SAAS,CAAC,iCAAiC,EAAE,MAAM,CAAC,2BAA2B,CAAC;IAZlF,SAAgB,WAAW,EAAE,+BAA+B,CAC1D,UAAU,EACV,MAAM,EACN,iBAAiB,EACjB,MAAM,CACP,CAAC;gBAGuC,UAAU,EAAE,cAAc,EAEvD,0BAA0B,EAAE,MAAM,CAAC,oBAAoB,CAAC,EAExD,iCAAiC,EAAE,MAAM,CAAC,2BAA2B,CAAC;IAYlF,gBAAgB,IAAI,IAAI;CACzB;AAGD,qBAAa,oBAAqB,SAAQ,2BAA2B,CAAC,UAAU,CAAC;gBAC5B,UAAU,EAAE,cAAc;IAI7E,gBAAgB,IAAI,IAAI;CACzB;AAGD,qBAAa,2BAA4B,SAAQ,2BAA2B,CAAC,iBAAiB,CAAC;gBAC1C,UAAU,EAAE,cAAc;IAI7E,gBAAgB,IAAI,IAAI;CACzB;AAGD,qBAAa,kBAAmB,SAAQ,2BAA2B,CAAC,QAAQ,CAAC;gBACxB,UAAU,EAAE,cAAc;IAI7E,gBAAgB,IAAI,IAAI;CACzB;AAGD,qBAAa,6BAA8B,SAAQ,cAAc,CAAC,mBAAmB,CAAC;gBACjC,UAAU,EAAE,cAAc;CAG9E"}

package/dist/components/authorize/repositories/authorize.repository.js

@@ -0,0 +1,105 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViewAuthorizePolicyRepository = exports.UserRoleRepository = exports.PermissionMappingRepository = exports.PermissionRepository = exports.RoleRepository = exports.AbstractAuthorizeRepository = void 0;
+const datasources_1 = require("../../../base/datasources");
+const repositories_1 = require("../../../base/repositories");
+const utilities_1 = require("../../../utilities");
+const core_1 = require("@loopback/core");
+const repository_1 = require("@loopback/repository");
+const models_1 = require("../models");
+const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
+const DS_AUTHORIZE = process.env.APP_ENV_APPLICATION_DS_AUTHORIZE;
+// ----------------------------------------------------------------------------
+class AbstractAuthorizeRepository extends repositories_1.TzCrudRepository {
+    constructor(entityClass, dataSource) {
+        if (!DS_AUTHORIZE || (0, isEmpty_1.default)(DS_AUTHORIZE)) {
+            throw (0, utilities_1.getError)({
+                message: `[AUTHORIZE][DANGER] INVALID DATABASE CONFIGURE | Missing env: DS_AUTHORIZE`,
+            });
+        }
+        super(entityClass, dataSource);
+        this.bindingRelations();
+    }
+}
+exports.AbstractAuthorizeRepository = AbstractAuthorizeRepository;
+// ----------------------------------------------------------------------------
+let RoleRepository = class RoleRepository extends AbstractAuthorizeRepository {
+    constructor(dataSource, permissionRepositoryGetter, permissionMappingRepositoryGetter) {
+        super(models_1.Role, dataSource);
+        this.permissionRepositoryGetter = permissionRepositoryGetter;
+        this.permissionMappingRepositoryGetter = permissionMappingRepositoryGetter;
+        this.permissions = this.createHasManyThroughRepositoryFactoryFor('permissions', permissionRepositoryGetter, permissionMappingRepositoryGetter);
+        this.registerInclusionResolver('permissions', this.permissions.inclusionResolver);
+    }
+    bindingRelations() { }
+};
+exports.RoleRepository = RoleRepository;
+exports.RoleRepository = RoleRepository = __decorate([
+    __param(0, (0, core_1.inject)(`datasources.${DS_AUTHORIZE}`)),
+    __param(1, repository_1.repository.getter('PermissionRepository')),
+    __param(2, repository_1.repository.getter('PermissionMappingRepository')),
+    __metadata("design:paramtypes", [datasources_1.BaseDataSource, Function, Function])
+], RoleRepository);
+// ----------------------------------------------------------------------------
+let PermissionRepository = class PermissionRepository extends AbstractAuthorizeRepository {
+    constructor(dataSource) {
+        super(models_1.Permission, dataSource);
+    }
+    bindingRelations() { }
+};
+exports.PermissionRepository = PermissionRepository;
+exports.PermissionRepository = PermissionRepository = __decorate([
+    __param(0, (0, core_1.inject)(`datasources.${DS_AUTHORIZE}`)),
+    __metadata("design:paramtypes", [datasources_1.BaseDataSource])
+], PermissionRepository);
+// ----------------------------------------------------------------------------
+let PermissionMappingRepository = class PermissionMappingRepository extends AbstractAuthorizeRepository {
+    constructor(dataSource) {
+        super(models_1.PermissionMapping, dataSource);
+    }
+    bindingRelations() { }
+};
+exports.PermissionMappingRepository = PermissionMappingRepository;
+exports.PermissionMappingRepository = PermissionMappingRepository = __decorate([
+    __param(0, (0, core_1.inject)(`datasources.${DS_AUTHORIZE}`)),
+    __metadata("design:paramtypes", [datasources_1.BaseDataSource])
+], PermissionMappingRepository);
+// ----------------------------------------------------------------------------
+let UserRoleRepository = class UserRoleRepository extends AbstractAuthorizeRepository {
+    constructor(dataSource) {
+        super(models_1.UserRole, dataSource);
+    }
+    bindingRelations() { }
+};
+exports.UserRoleRepository = UserRoleRepository;
+exports.UserRoleRepository = UserRoleRepository = __decorate([
+    __param(0, (0, core_1.inject)(`datasources.${DS_AUTHORIZE}`)),
+    __metadata("design:paramtypes", [datasources_1.BaseDataSource])
+], UserRoleRepository);
+// ----------------------------------------------------------------------------
+let ViewAuthorizePolicyRepository = class ViewAuthorizePolicyRepository extends repositories_1.ViewRepository {
+    constructor(dataSource) {
+        super(models_1.ViewAuthorizePolicy, dataSource);
+    }
+};
+exports.ViewAuthorizePolicyRepository = ViewAuthorizePolicyRepository;
+exports.ViewAuthorizePolicyRepository = ViewAuthorizePolicyRepository = __decorate([
+    __param(0, (0, core_1.inject)(`datasources.${DS_AUTHORIZE}`)),
+    __metadata("design:paramtypes", [datasources_1.BaseDataSource])
+], ViewAuthorizePolicyRepository);
+//# sourceMappingURL=authorize.repository.js.map

package/dist/components/authorize/repositories/authorize.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.repository.js","sourceRoot":"","sources":["../../../../src/components/authorize/repositories/authorize.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,oDAAoD;AAEpD,sDAAuE;AAEvE,2CAAuC;AACvC,yCAAgD;AAChD,qDAAmF;AAEnF,sCAA+F;AAE/F,6DAAqC;AAErC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;AAElE,+EAA+E;AAC/E,MAAsB,2BAEpB,SAAQ,+BAAmB;IAC3B,YAAY,WAA+B,EAAE,UAA0B;QACrE,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAA,oBAAQ,EAAC;gBACb,OAAO,EAAE,4EAA4E;aACtF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC/B,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;CAGF;AAfD,kEAeC;AAED,+EAA+E;AAC/E,IAAa,cAAc,GAA3B,MAAa,cAAe,SAAQ,2BAAiC;IAQnE,YACyC,UAA0B,EAEvD,0BAAwD,EAExD,iCAAsE;QAEhF,KAAK,CAAC,aAAI,EAAE,UAAU,CAAC,CAAC;QAJd,+BAA0B,GAA1B,0BAA0B,CAA8B;QAExD,sCAAiC,GAAjC,iCAAiC,CAAqC;QAIhF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,wCAAwC,CAC9D,aAAa,EACb,0BAA0B,EAC1B,iCAAiC,CAClC,CAAC;QACF,IAAI,CAAC,yBAAyB,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACpF,CAAC;IAED,gBAAgB,KAAU,CAAC;CAC5B,CAAA;AA1BY,wCAAc;yBAAd,cAAc;IAStB,WAAA,IAAA,aAAM,EAAC,eAAe,YAAY,EAAE,CAAC,CAAA;IACrC,WAAA,uBAAU,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;IAEzC,WAAA,uBAAU,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAA;qCAHE,4BAAc;GATxD,cAAc,CA0B1B;AAED,+EAA+E;AAC/E,IAAa,oBAAoB,GAAjC,MAAa,oBAAqB,SAAQ,2BAAuC;IAC/E,YAAmD,UAA0B;QAC3E,KAAK,CAAC,mBAAU,EAAE,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,gBAAgB,KAAU,CAAC;CAC5B,CAAA;AANY,oDAAoB;+BAApB,oBAAoB;IAClB,WAAA,IAAA,aAAM,EAAC,eAAe,YAAY,EAAE,CAAC,CAAA;qCAAa,4BAAc;GADlE,oBAAoB,CAMhC;AAED,+EAA+E;AAC/E,IAAa,2BAA2B,GAAxC,MAAa,2BAA4B,SAAQ,2BAA8C;IAC7F,YAAmD,UAA0B;QAC3E,KAAK,CAAC,0BAAiB,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,gBAAgB,KAAU,CAAC;CAC5B,CAAA;AANY,kEAA2B;sCAA3B,2BAA2B;IACzB,WAAA,IAAA,aAAM,EAAC,eAAe,YAAY,EAAE,CAAC,CAAA;qCAAa,4BAAc;GADlE,2BAA2B,CAMvC;AAED,+EAA+E;AAC/E,IAAa,kBAAkB,GAA/B,MAAa,kBAAmB,SAAQ,2BAAqC;IAC3E,YAAmD,UAA0B;QAC3E,KAAK,CAAC,iBAAQ,EAAE,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,gBAAgB,KAAU,CAAC;CAC5B,CAAA;AANY,gDAAkB;6BAAlB,kBAAkB;IAChB,WAAA,IAAA,aAAM,EAAC,eAAe,YAAY,EAAE,CAAC,CAAA;qCAAa,4BAAc;GADlE,kBAAkB,CAM9B;AAED,+EAA+E;AAC/E,IAAa,6BAA6B,GAA1C,MAAa,6BAA8B,SAAQ,6BAAmC;IACpF,YAAmD,UAA0B;QAC3E,KAAK,CAAC,4BAAmB,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AAJY,sEAA6B;wCAA7B,6BAA6B;IAC3B,WAAA,IAAA,aAAM,EAAC,eAAe,YAAY,EAAE,CAAC,CAAA;qCAAa,4BAAc;GADlE,6BAA6B,CAIzC"}

package/dist/components/authorize/repositories/index.d.ts

@@ -0,0 +1,2 @@
+export * from './authorize.repository';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/authorize/repositories/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/repositories/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC"}

package/dist/components/authorize/repositories/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authorize.repository"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/authorize/repositories/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/authorize/repositories/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC"}

package/dist/components/authorize/services/enforcer.service.d.ts

@@ -0,0 +1,14 @@
+import { BaseDataSource } from '../../../base/datasources';
+import { IdType } from '../../../common';
+import { Enforcer } from 'casbin';
+import { IAuthorizeConfigureOptions } from '../common';
+export declare class EnforcerService {
+    protected options: IAuthorizeConfigureOptions;
+    protected dataSource: BaseDataSource;
+    private logger;
+    private enforcer;
+    constructor(options: IAuthorizeConfigureOptions, dataSource: BaseDataSource);
+    getEnforcer(): Promise<Enforcer>;
+    getTypeEnforcer(id: IdType): Promise<Enforcer>;
+}
+//# sourceMappingURL=enforcer.service.d.ts.map

package/dist/components/authorize/services/enforcer.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcer.service.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/services/enforcer.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAKlC,OAAO,EAAE,QAAQ,EAAkC,MAAM,QAAQ,CAAC;AAKlE,OAAO,EAGL,0BAA0B,EAE3B,MAAM,WAAW,CAAC;AAEnB,qBACa,eAAe;IAOxB,SAAS,CAAC,OAAO,EAAE,0BAA0B;IAE7C,SAAS,CAAC,UAAU,EAAE,cAAc;IARtC,OAAO,CAAC,MAAM,CAAoB;IAElC,OAAO,CAAC,QAAQ,CAAW;gBAIf,OAAO,EAAE,0BAA0B,EAEnC,UAAU,EAAE,cAAc;IAMtC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC;IA8C1B,eAAe,CAAC,EAAE,EAAE,MAAM;CAcjC"}

package/dist/components/authorize/services/enforcer.service.js

@@ -0,0 +1,89 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var EnforcerService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnforcerService = void 0;
+const datasources_1 = require("../../../base/datasources");
+const helpers_1 = require("../../../helpers");
+const utilities_1 = require("../../../utilities");
+const core_1 = require("@loopback/core");
+const casbin_1 = require("casbin");
+const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const adapters_1 = require("../adapters");
+const common_1 = require("../common");
+let EnforcerService = EnforcerService_1 = class EnforcerService {
+    constructor(options, dataSource) {
+        this.options = options;
+        this.dataSource = dataSource;
+        this.logger = helpers_1.LoggerFactory.getLogger([EnforcerService_1.name]);
+        this.logger.info('[getEnforcer] Initialize enforcer with options: %j', this.options);
+    }
+    getEnforcer() {
+        if (this.enforcer) {
+            return Promise.resolve(this.enforcer);
+        }
+        this.logger.debug('[getEnforcer] Enforcer Options: %j', this.options);
+        const { confPath, adapterType = common_1.CasbinAdapterTypes.POSTGRES, adapter, useCache } = this.options;
+        if (!confPath || (0, isEmpty_1.default)(confPath)) {
+            this.logger.error('[getEnforcer] Invalid configure path | confPath: %s', confPath);
+            throw (0, utilities_1.getError)({
+                statusCode: 500,
+                message: `[getEnforcer] Invalid enforcer configuration path | confPath: ${confPath}`,
+            });
+        }
+        if (!node_fs_1.default.existsSync(confPath)) {
+            this.logger.error('[getEnforcer] Please check again configure path | confPath: %s', confPath);
+            throw (0, utilities_1.getError)({
+                statusCode: 500,
+                message: `[getEnforcer] Enforcer configuration path is not existed | confPath: ${confPath}`,
+            });
+        }
+        this.logger.info('[getEnforcer] Creating new Enforcer with configure path: %s | dataSource: %s', confPath, this.dataSource.name);
+        const casbinAdapter = adapter ??
+            adapters_1.CasbinAdapterBuilder.getInstance().build({
+                type: adapterType,
+                dataSource: this.dataSource,
+            });
+        if (useCache) {
+            return (0, casbin_1.newCachedEnforcer)(confPath, casbinAdapter);
+        }
+        this.logger.debug('[getEnforcer] Created new enforcer | Configure path: %s', confPath);
+        return (0, casbin_1.newEnforcer)(confPath, casbinAdapter);
+    }
+    // -----------------------------------------------------------------------------------------
+    async getTypeEnforcer(id) {
+        const enforcer = await this.getEnforcer();
+        if (!enforcer) {
+            return null;
+        }
+        const filterValue = {
+            principalType: 'User',
+            principalValue: id,
+        };
+        await enforcer.loadFilteredPolicy(filterValue);
+        return enforcer;
+    }
+};
+exports.EnforcerService = EnforcerService;
+exports.EnforcerService = EnforcerService = EnforcerService_1 = __decorate([
+    (0, core_1.injectable)({ scope: core_1.BindingScope.SINGLETON }),
+    __param(0, (0, core_1.inject)(common_1.AuthorizerKeys.CONFIGURE_OPTIONS)),
+    __param(1, (0, core_1.inject)(common_1.AuthorizerKeys.AUTHORIZE_DATASOURCE)),
+    __metadata("design:paramtypes", [Object, datasources_1.BaseDataSource])
+], EnforcerService);
+//# sourceMappingURL=enforcer.service.js.map

package/dist/components/authorize/services/enforcer.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcer.service.js","sourceRoot":"","sources":["../../../../src/components/authorize/services/enforcer.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,oDAAoD;AAEpD,uCAA6D;AAC7D,2CAAuC;AACvC,yCAAkE;AAElE,mCAAkE;AAClE,6DAAqC;AACrC,sDAAyB;AAEzB,0CAAmD;AACnD,sCAKmB;AAGZ,IAAM,eAAe,uBAArB,MAAM,eAAe;IAK1B,YAEY,OAAmC,EAEnC,UAA0B;QAF1B,YAAO,GAAP,OAAO,CAA4B;QAEnC,eAAU,GAAV,UAAU,CAAgB;QAEpC,IAAI,CAAC,MAAM,GAAG,uBAAa,CAAC,SAAS,CAAC,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACvF,CAAC;IAED,WAAW;QACT,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,2BAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEhG,IAAI,CAAC,QAAQ,IAAI,IAAA,iBAAO,EAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE,QAAQ,CAAC,CAAC;YACnF,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,iEAAiE,QAAQ,EAAE;aACrF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,EAAE,QAAQ,CAAC,CAAC;YAC9F,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,wEAAwE,QAAQ,EAAE;aAC5F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8EAA8E,EAC9E,QAAQ,EACR,IAAI,CAAC,UAAU,CAAC,IAAI,CACrB,CAAC;QAEF,MAAM,aAAa,GACjB,OAAO;YACP,+BAAoB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC;gBACvC,IAAI,EAAE,WAAW;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;QAEL,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAA,0BAAiB,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE,QAAQ,CAAC,CAAC;QACvF,OAAO,IAAA,oBAAW,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,eAAe,CAAC,EAAU;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAyB;YACxC,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,EAAE;SACnB,CAAC;QAEF,MAAM,QAAQ,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAA;AA3EY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,iBAAU,EAAC,EAAE,KAAK,EAAE,mBAAY,CAAC,SAAS,EAAE,CAAC;IAOzC,WAAA,IAAA,aAAM,EAAC,uBAAc,CAAC,iBAAiB,CAAC,CAAA;IAExC,WAAA,IAAA,aAAM,EAAC,uBAAc,CAAC,oBAAoB,CAAC,CAAA;6CACtB,4BAAc;GAT3B,eAAe,CA2E3B"}

package/dist/components/authorize/services/generator.service.d.ts

@@ -0,0 +1,76 @@
+import { IController } from '../../../common';
+import { Constructor, MetadataMap } from '@loopback/core';
+import { IPermissionDecorator } from '../decorators';
+import { Permission } from '../models';
+import { PermissionRepository } from '../repositories';
+export interface IPermission {
+    code: string;
+    subject: string;
+    action: string;
+    scope: string;
+    name: string;
+    parentId: number;
+    pType: string;
+    details?: IPermissionDecorator;
+}
+export declare class GeneratePermissionService {
+    getMethodsClass(controllerPrototype: object): string[];
+    getAllMethodsClass(controllerPrototype: object): string[];
+    generateParentPermissions(opts: {
+        controller: Constructor<IController>;
+        permissionRepository: PermissionRepository;
+    }): Promise<void>;
+    generatePermissions(opts: {
+        methods: string[];
+        permissionSubject: string;
+        parentId: number;
+        allPermissionDecoratorData: MetadataMap<IPermissionDecorator>;
+    }): IPermission[];
+    generatePermissionBaseInherit(opts: {
+        methodsParentsClass: string[];
+        methodsChildClass: string[];
+        parentPermission: Permission;
+        allPermissionDecoratorData: MetadataMap<IPermissionDecorator>;
+    }): IPermission[];
+    generatePermissionRecords(opts: {
+        controller: Constructor<IController>;
+        parentPermission: Permission;
+        permissionRepository: PermissionRepository;
+        allPermissionDecoratorData: MetadataMap<IPermissionDecorator>;
+    }): IPermission[];
+    updatePermissionByChangeMethodName(permissionSubject: string, allPermissionDecoratorData: MetadataMap<IPermissionDecorator>, permissionRepository: PermissionRepository): Promise<void>;
+    startMigration(opts: {
+        permissionRepository: PermissionRepository;
+        controllers: Array<Constructor<IController>>;
+    }): Promise<void>;
+    /**
+     * Obtain all permission codes for a controller
+     *
+     * @returns {string[]} List of permission codes
+     */
+    getPermissionCodes(opts: {
+        controllers: Array<Constructor<IController>>;
+    }): string[];
+    /**
+     * Write all permission codes for a list of controllers to a file
+     *
+     * @param outputPath - Path to write
+     *
+     * @example
+     * const generatePermissionService = new GeneratePermissionService();
+     *
+     * generatePermissionService.getPermissionCodesAndWriteToFile({
+     *    controllers: [XboxController, PSController, NintendoController],
+     *    outputPath: './src/migrations/',
+     *    fileName: 'permissionCodes',
+     *    fileType: 'ts',
+     * });
+     */
+    getPermissionCodesAndWriteToFile(opts: {
+        controllers: Array<Constructor<IController>>;
+        outputPath?: string;
+        fileName?: string;
+        fileType?: 'ts' | 'txt';
+    }): void;
+}
+//# sourceMappingURL=generator.service.d.ts.map

package/dist/components/authorize/services/generator.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.service.d.ts","sourceRoot":"","sources":["../../../../src/components/authorize/services/generator.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAK1D,OAAO,EAAoB,oBAAoB,EAAyB,MAAM,eAAe,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAGvD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED,qBAAa,yBAAyB;IACpC,eAAe,CAAC,mBAAmB,EAAE,MAAM,GACe,MAAM,EAAE;IAGlE,kBAAkB,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,EAAE;IAYnD,yBAAyB,CAAC,IAAI,EAAE;QACpC,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;QACrC,oBAAoB,EAAE,oBAAoB,CAAC;KAC5C;IAmBD,mBAAmB,CAAC,IAAI,EAAE;QACxB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,0BAA0B,EAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;KAC/D,GAgBO,WAAW,EAAE;IAGrB,6BAA6B,CAAC,IAAI,EAAE;QAClC,mBAAmB,EAAE,MAAM,EAAE,CAAC;QAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5B,gBAAgB,EAAE,UAAU,CAAC;QAC7B,0BAA0B,EAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;KAC/D;IA0BD,yBAAyB,CAAC,IAAI,EAAE;QAC9B,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;QACrC,gBAAgB,EAAE,UAAU,CAAC;QAC7B,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,0BAA0B,EAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;KAC/D;IAqBK,kCAAkC,CACtC,iBAAiB,EAAE,MAAM,EACzB,0BAA0B,EAAE,WAAW,CAAC,oBAAoB,CAAC,EAC7D,oBAAoB,EAAE,oBAAoB;IAgCtC,cAAc,CAAC,IAAI,EAAE;QACzB,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;KAC9C;IA+CD;;;;OAIG;IACH,kBAAkB,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAA;KAAE,GAAG,MAAM,EAAE;IAsBpF;;;;;;;;;;;;;;OAcG;IACH,gCAAgC,CAAC,IAAI,EAAE;QACrC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;KACzB;CAoCF"}