@mondart/nestjs-common-module-iam 2.0.0 → 3.1.0

package/dist/interfaces/iam-entity-access.interface.d.ts

@@ -0,0 +1,39 @@
+import { IamUserTypeEnum } from '../enums/iam-user-type.enum';
+import { AccessValueCast, AccessValueSource, EntityAccessBranch } from '../types/iam-entity-access.type';
+import { EntityTarget } from 'typeorm';
+export interface EntityFieldMatch<T = any> {
+    field: keyof T & string;
+    valueFrom: AccessValueSource;
+    cast?: AccessValueCast;
+}
+export interface RoleEntityAccess<T = any> {
+    anyOf: EntityAccessBranch<T>[];
+}
+export interface EntityAccessByRole<T = any> {
+    agent?: {
+        bypass?: boolean;
+        anyOf?: EntityAccessBranch<T>[];
+    };
+    user?: RoleEntityAccess<T>;
+    guest?: RoleEntityAccess<T>;
+}
+export interface RequireIamEntityAccessOptions<T = any> {
+    entity: EntityTarget<T>;
+    lookup: {
+        field: keyof T & string;
+        valueFrom: AccessValueSource;
+    };
+    access?: EntityAccessByRole<T>;
+    resourceName?: string;
+}
+export interface ApplyIamEntityScopeOptions<T = any> {
+    entity?: EntityTarget<T>;
+    access?: EntityAccessByRole<T>;
+    withDeleted?: boolean;
+}
+export interface IamAccessValueContext {
+    req: any;
+    iamContext: any;
+    userType: IamUserTypeEnum;
+}
+//# sourceMappingURL=iam-entity-access.interface.d.ts.map

package/dist/interfaces/iam-entity-access.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-entity-access.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/iam-entity-access.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,GAAG;IACvC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;IACxB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,GAAG;IACvC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,GAAG;IACzC,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;KACjC,CAAC;IAEF,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAE3B,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,6BAA6B,CAAC,CAAC,GAAG,GAAG;IACpD,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAExB,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;QACxB,SAAS,EAAE,iBAAiB,CAAC;KAC9B,CAAC;IAMF,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAE/B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B,CAAC,CAAC,GAAG,GAAG;IAIjD,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAMzB,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAE/B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,GAAG,CAAC;IACT,UAAU,EAAE,GAAG,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;CAC3B"}

package/dist/interfaces/iam-entity-access.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=iam-entity-access.interface.js.map

package/dist/interfaces/iam-entity-access.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-entity-access.interface.js","sourceRoot":"","sources":["../../src/interfaces/iam-entity-access.interface.ts"],"names":[],"mappings":""}

package/dist/pipes/iam-find-one-query-scope.pipe.d.ts

@@ -0,0 +1,10 @@
+import { PipeTransform } from '@nestjs/common';
+import { IamEntityAccessService } from '../services/iam-entity-access.service';
+import { IamScopedFindOneQuery } from '../types/iam-entity-access.type';
+export declare class IamFindOneQueryScopePipe<T = any> implements PipeTransform<Record<string, any>, IamScopedFindOneQuery<T>> {
+    private readonly request;
+    private readonly iamEntityAccessService;
+    constructor(request: any, iamEntityAccessService: IamEntityAccessService);
+    transform(value: Record<string, any>): IamScopedFindOneQuery<T>;
+}
+//# sourceMappingURL=iam-find-one-query-scope.pipe.d.ts.map

package/dist/pipes/iam-find-one-query-scope.pipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-find-one-query-scope.pipe.d.ts","sourceRoot":"","sources":["../../src/pipes/iam-find-one-query-scope.pipe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,aAAa,EAAS,MAAM,gBAAgB,CAAC;AAI1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAQxE,qBACa,wBAAwB,CAAC,CAAC,GAAG,GAAG,CAAE,YAAW,aAAa,CACrE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACnB,qBAAqB,CAAC,CAAC,CAAC,CACzB;IAGG,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,sBAAsB;gBADtB,OAAO,EAAE,GAAG,EACZ,sBAAsB,EAAE,sBAAsB;IAGjE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC;CA4BhE"}

package/dist/pipes/{iam-paginate-query.pipe.js → iam-find-one-query-scope.pipe.js}

@@ -12,36 +12,34 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IamPaginateQueryPipe = void 0;
+exports.IamFindOneQueryScopePipe = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const nestjs_common_module_core_1 = require("@mondart/nestjs-common-module-core");
-let IamPaginateQueryPipe = class IamPaginateQueryPipe {
-    constructor(request) {
+const iam_entity_access_service_1 = require("../services/iam-entity-access.service");
+const iam_decorator_key_const_1 = require("../constants/iam-decorator-key.const");
+let IamFindOneQueryScopePipe = class IamFindOneQueryScopePipe {
+    constructor(request, iamEntityAccessService) {
         this.request = request;
+        this.iamEntityAccessService = iamEntityAccessService;
     }
-    transform(value, metadata) {
-        const iamContext = (0, nestjs_common_module_core_1.getIamContext)(this.request);
-        if (!iamContext?.isAgent && iamContext?.user) {
-            const { storeId, contactId } = iamContext.user;
-            value.filter = {
-                contactId: `$eq:${contactId}`,
-                storeId: `$eq:${storeId}`,
-            };
-        }
-        if (!iamContext?.isAgent && !iamContext?.user) {
-            value.filter = {
-                contactId: `$null`,
-            };
+    transform(value) {
+        const query = (value ?? {});
+        const scopeOptions = this.request[iam_decorator_key_const_1.IAM_REQUEST_ENTITY_SCOPE_OPTIONS_KEY];
+        if (!scopeOptions) {
+            return query;
         }
-        value.withDeleted = true;
-        return value;
+        const iamContext = (0, nestjs_common_module_core_1.getIamContext)(this.request);
+        const currentUserType = this.request[iam_decorator_key_const_1.IAM_REQUEST_USER_TYPE_KEY];
+        const scopeWhere = this.iamEntityAccessService.buildScopeWhere(scopeOptions, this.request, iamContext, currentUserType);
+        query[iam_decorator_key_const_1.IAM_QUERY_SCOPE_WHERE_KEY] = scopeWhere;
+        return query;
     }
 };
-exports.IamPaginateQueryPipe = IamPaginateQueryPipe;
-exports.IamPaginateQueryPipe = IamPaginateQueryPipe = __decorate([
-    (0, common_1.Injectable)(),
+exports.IamFindOneQueryScopePipe = IamFindOneQueryScopePipe;
+exports.IamFindOneQueryScopePipe = IamFindOneQueryScopePipe = __decorate([
+    (0, common_1.Injectable)({ scope: common_1.Scope.REQUEST }),
     __param(0, (0, common_1.Inject)(core_1.REQUEST)),
-    __metadata("design:paramtypes", [Request])
-], IamPaginateQueryPipe);
-//# sourceMappingURL=iam-paginate-query.pipe.js.map
+    __metadata("design:paramtypes", [Object, iam_entity_access_service_1.IamEntityAccessService])
+], IamFindOneQueryScopePipe);
+//# sourceMappingURL=iam-find-one-query-scope.pipe.js.map

package/dist/pipes/iam-find-one-query-scope.pipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-find-one-query-scope.pipe.js","sourceRoot":"","sources":["../../src/pipes/iam-find-one-query-scope.pipe.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA0E;AAC1E,uCAAuC;AACvC,kFAAmE;AAEnE,qFAA+E;AAG/E,kFAI8C;AAIvC,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAInC,YAEmB,OAAY,EACZ,sBAA8C;QAD9C,YAAO,GAAP,OAAO,CAAK;QACZ,2BAAsB,GAAtB,sBAAsB,CAAwB;IAC9D,CAAC;IAEJ,SAAS,CAAC,KAA0B;QAClC,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAA6B,CAAC;QAExD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,8DAAoC,CAEzD,CAAC;QAEd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAG,IAAA,yCAAa,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAClC,mDAAyB,CACP,CAAC;QAErB,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAC5D,YAAY,EACZ,IAAI,CAAC,OAAO,EACZ,UAAU,EACV,eAAe,CAChB,CAAC;QAEF,KAAK,CAAC,mDAAyB,CAAC,GAAG,UAAU,CAAC;QAE9C,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAtCY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,EAAC,EAAE,KAAK,EAAE,cAAK,CAAC,OAAO,EAAE,CAAC;IAMhC,WAAA,IAAA,eAAM,EAAC,cAAO,CAAC,CAAA;6CAEyB,kDAAsB;GAPtD,wBAAwB,CAsCpC"}

package/dist/pipes/iam-paginate-query-scope.pipe.d.ts

@@ -0,0 +1,11 @@
+import { PipeTransform } from '@nestjs/common';
+import { PaginateQuery } from 'nestjs-paginate';
+import { IamEntityAccessService } from '../services/iam-entity-access.service';
+import { IamScopedPaginateQuery } from '../types/iam-entity-access.type';
+export declare class IamPaginateQueryScopePipe<T = any> implements PipeTransform<PaginateQuery, IamScopedPaginateQuery<T>> {
+    private readonly request;
+    private readonly iamEntityAccessService;
+    constructor(request: any, iamEntityAccessService: IamEntityAccessService);
+    transform(value: PaginateQuery): IamScopedPaginateQuery<T>;
+}
+//# sourceMappingURL=iam-paginate-query-scope.pipe.d.ts.map

package/dist/pipes/iam-paginate-query-scope.pipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-paginate-query-scope.pipe.d.ts","sourceRoot":"","sources":["../../src/pipes/iam-paginate-query-scope.pipe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,aAAa,EAAS,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAQzE,qBACa,yBAAyB,CAAC,CAAC,GAAG,GAAG,CAAE,YAAW,aAAa,CACtE,aAAa,EACb,sBAAsB,CAAC,CAAC,CAAC,CAC1B;IAGG,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,sBAAsB;gBADtB,OAAO,EAAE,GAAG,EACZ,sBAAsB,EAAE,sBAAsB;IAGjE,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,sBAAsB,CAAC,CAAC,CAAC;CA+B3D"}

package/dist/pipes/iam-paginate-query-scope.pipe.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IamPaginateQueryScopePipe = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const nestjs_common_module_core_1 = require("@mondart/nestjs-common-module-core");
+const iam_entity_access_service_1 = require("../services/iam-entity-access.service");
+const iam_decorator_key_const_1 = require("../constants/iam-decorator-key.const");
+let IamPaginateQueryScopePipe = class IamPaginateQueryScopePipe {
+    constructor(request, iamEntityAccessService) {
+        this.request = request;
+        this.iamEntityAccessService = iamEntityAccessService;
+    }
+    transform(value) {
+        const query = value;
+        const scopeOptions = this.request[iam_decorator_key_const_1.IAM_REQUEST_ENTITY_SCOPE_OPTIONS_KEY];
+        if (!scopeOptions) {
+            return query;
+        }
+        const iamContext = (0, nestjs_common_module_core_1.getIamContext)(this.request);
+        const currentUserType = this.request[iam_decorator_key_const_1.IAM_REQUEST_USER_TYPE_KEY];
+        query[iam_decorator_key_const_1.IAM_QUERY_SCOPE_WHERE_KEY] =
+            this.iamEntityAccessService.buildScopeWhere(scopeOptions, this.request, iamContext, currentUserType);
+        if (typeof scopeOptions.withDeleted === 'boolean') {
+            query.withDeleted = scopeOptions.withDeleted;
+        }
+        return query;
+    }
+};
+exports.IamPaginateQueryScopePipe = IamPaginateQueryScopePipe;
+exports.IamPaginateQueryScopePipe = IamPaginateQueryScopePipe = __decorate([
+    (0, common_1.Injectable)({ scope: common_1.Scope.REQUEST }),
+    __param(0, (0, common_1.Inject)(core_1.REQUEST)),
+    __metadata("design:paramtypes", [Object, iam_entity_access_service_1.IamEntityAccessService])
+], IamPaginateQueryScopePipe);
+//# sourceMappingURL=iam-paginate-query-scope.pipe.js.map

package/dist/pipes/iam-paginate-query-scope.pipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-paginate-query-scope.pipe.js","sourceRoot":"","sources":["../../src/pipes/iam-paginate-query-scope.pipe.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA0E;AAC1E,uCAAuC;AAEvC,kFAAmE;AAEnE,qFAA+E;AAG/E,kFAI8C;AAIvC,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAIpC,YAEmB,OAAY,EACZ,sBAA8C;QAD9C,YAAO,GAAP,OAAO,CAAK;QACZ,2BAAsB,GAAtB,sBAAsB,CAAwB;IAC9D,CAAC;IAEJ,SAAS,CAAC,KAAoB;QAC5B,MAAM,KAAK,GAAG,KAAkC,CAAC;QAEjD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,8DAAoC,CAEzD,CAAC;QAEd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAG,IAAA,yCAAa,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAClC,mDAAyB,CACP,CAAC;QAErB,KAAK,CAAC,mDAAyB,CAAC;YAC9B,IAAI,CAAC,sBAAsB,CAAC,eAAe,CACzC,YAAY,EACZ,IAAI,CAAC,OAAO,EACZ,UAAU,EACV,eAAe,CAChB,CAAC;QAEJ,IAAI,OAAO,YAAY,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAClD,KAAK,CAAC,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;QAC/C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAzCY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,EAAC,EAAE,KAAK,EAAE,cAAK,CAAC,OAAO,EAAE,CAAC;IAMhC,WAAA,IAAA,eAAM,EAAC,cAAO,CAAC,CAAA;6CAEyB,kDAAsB;GAPtD,yBAAyB,CAyCrC"}

package/dist/services/iam-entity-access.service.d.ts

@@ -0,0 +1,22 @@
+import { DataSource, FindOptionsWhere } from 'typeorm';
+import { IamUserTypeEnum } from '../enums/iam-user-type.enum';
+import { ApplyIamEntityScopeOptions, RequireIamEntityAccessOptions } from '../interfaces/iam-entity-access.interface';
+export declare class IamEntityAccessService {
+    private readonly dataSource;
+    constructor(dataSource: DataSource);
+    resolveUserType(iamContext: any, allowedUserTypes: IamUserTypeEnum[]): IamUserTypeEnum;
+    hasEntityAccess<T>(options: RequireIamEntityAccessOptions<T>, req: any, iamContext: any, userType: IamUserTypeEnum): Promise<boolean>;
+    buildScopeWhere<T>(options: ApplyIamEntityScopeOptions<T>, req: any, iamContext?: any, userType?: IamUserTypeEnum): FindOptionsWhere<T> | FindOptionsWhere<T>[] | undefined;
+    private buildScopedWhere;
+    private buildWhereFromBranches;
+    private buildAllMatchWhere;
+    private buildNullFieldsWhere;
+    private buildBaseWhere;
+    private normalizeWhereResult;
+    private getValueFromSource;
+    private getValueByPath;
+    private castValue;
+    private normalizeEntityId;
+    private hasValue;
+}
+//# sourceMappingURL=iam-entity-access.service.d.ts.map

package/dist/services/iam-entity-access.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-entity-access.service.d.ts","sourceRoot":"","sources":["../../src/services/iam-entity-access.service.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAU,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACL,0BAA0B,EAE1B,6BAA6B,EAC9B,MAAM,2CAA2C,CAAC;AAOnD,qBACa,sBAAsB;IAG/B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAGzC,eAAe,CACb,UAAU,EAAE,GAAG,EACf,gBAAgB,EAAE,eAAe,EAAE,GAClC,eAAe;IA0BZ,eAAe,CAAC,CAAC,EACrB,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAC,EACzC,GAAG,EAAE,GAAG,EACR,UAAU,EAAE,GAAG,EACf,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,OAAO,CAAC;IAoDnB,eAAe,CAAC,CAAC,EACf,OAAO,EAAE,0BAA0B,CAAC,CAAC,CAAC,EACtC,GAAG,EAAE,GAAG,EACR,UAAU,GAAE,GAAwB,EACpC,QAAQ,CAAC,EAAE,eAAe,GACzB,gBAAgB,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS;IAQ1D,OAAO,CAAC,gBAAgB;IAmExB,OAAO,CAAC,sBAAsB;IAyC9B,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,SAAS;IAiCjB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,QAAQ;CAGjB"}

package/dist/services/iam-entity-access.service.js

@@ -0,0 +1,250 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IamEntityAccessService = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_common_module_core_1 = require("@mondart/nestjs-common-module-core");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const iam_user_type_enum_1 = require("../enums/iam-user-type.enum");
+let IamEntityAccessService = class IamEntityAccessService {
+    constructor(dataSource) {
+        this.dataSource = dataSource;
+    }
+    resolveUserType(iamContext, allowedUserTypes) {
+        if (this.hasValue(iamContext?.agentId) || iamContext?.isAgent) {
+            return iam_user_type_enum_1.IamUserTypeEnum.AGENT;
+        }
+        if (this.hasValue(iamContext?.userId) || iamContext?.user) {
+            return iam_user_type_enum_1.IamUserTypeEnum.USER;
+        }
+        if (this.hasValue(iamContext?.guestId) ||
+            this.hasValue(iamContext?.guest?.id)) {
+            return iam_user_type_enum_1.IamUserTypeEnum.GUEST;
+        }
+        if (allowedUserTypes.includes(iam_user_type_enum_1.IamUserTypeEnum.GUEST)) {
+            return iam_user_type_enum_1.IamUserTypeEnum.GUEST;
+        }
+        throw new common_1.UnauthorizedException();
+    }
+    async hasEntityAccess(options, req, iamContext, userType) {
+        const rawEntityId = this.getValueFromSource(options.lookup.valueFrom, {
+            req,
+            iamContext,
+            userType,
+        });
+        const entityId = this.normalizeEntityId(rawEntityId);
+        if (!this.hasValue(entityId)) {
+            throw new common_1.BadRequestException('Missing entity identifier');
+        }
+        const repo = this.dataSource.getRepository(options.entity);
+        const baseWhere = {
+            [options.lookup.field]: entityId,
+        };
+        const exists = await repo.exists({
+            where: baseWhere,
+        });
+        if (!exists) {
+            throw new common_1.NotFoundException(nestjs_common_module_core_1.MessageFormatter.replace(nestjs_common_module_core_1.SharedMessages.RESOURCE_NOT_FOUND, options.resourceName ?? 'Resource'));
+        }
+        const scopedWhere = this.buildScopedWhere(options, req, iamContext, userType, {
+            lookupField: options.lookup.field,
+            entityId,
+        });
+        if (scopedWhere === undefined) {
+            return true;
+        }
+        return repo.exists({
+            where: scopedWhere,
+        });
+    }
+    buildScopeWhere(options, req, iamContext = (0, nestjs_common_module_core_1.getIamContext)(req), userType) {
+        const resolvedUserType = userType ??
+            this.resolveUserType(iamContext, Object.values(iam_user_type_enum_1.IamUserTypeEnum));
+        return this.buildScopedWhere(options, req, iamContext, resolvedUserType);
+    }
+    buildScopedWhere(options, req, iamContext, userType, lookup) {
+        if (userType === iam_user_type_enum_1.IamUserTypeEnum.AGENT) {
+            const agentAccess = options.access?.agent;
+            if (!agentAccess || agentAccess.bypass !== false) {
+                return undefined;
+            }
+            const where = this.buildWhereFromBranches({
+                branches: agentAccess.anyOf ?? [],
+                req,
+                iamContext,
+                userType,
+                lookup,
+            });
+            if (!where.length) {
+                throw new common_1.ForbiddenException();
+            }
+            return this.normalizeWhereResult(where);
+        }
+        if (userType === iam_user_type_enum_1.IamUserTypeEnum.USER) {
+            const where = this.buildWhereFromBranches({
+                branches: options.access?.user?.anyOf ?? [],
+                req,
+                iamContext,
+                userType,
+                lookup,
+            });
+            if (!where.length) {
+                throw new common_1.ForbiddenException();
+            }
+            return this.normalizeWhereResult(where);
+        }
+        if (userType === iam_user_type_enum_1.IamUserTypeEnum.GUEST) {
+            const where = this.buildWhereFromBranches({
+                branches: options.access?.guest?.anyOf ?? [],
+                req,
+                iamContext,
+                userType,
+                lookup,
+            });
+            if (!where.length) {
+                throw new common_1.ForbiddenException();
+            }
+            return this.normalizeWhereResult(where);
+        }
+        throw new common_1.ForbiddenException();
+    }
+    buildWhereFromBranches(params) {
+        const { branches, req, iamContext, userType, lookup } = params;
+        return branches.reduce((items, branch) => {
+            if ('nullFields' in branch) {
+                items.push(this.buildNullFieldsWhere(branch.nullFields, lookup));
+                return items;
+            }
+            if ('all' in branch) {
+                const where = this.buildAllMatchWhere({
+                    matches: branch.all,
+                    req,
+                    iamContext,
+                    userType,
+                    lookup,
+                });
+                if (where) {
+                    items.push(where);
+                }
+                return items;
+            }
+            return items;
+        }, []);
+    }
+    buildAllMatchWhere(params) {
+        const { matches, req, iamContext, userType, lookup } = params;
+        if (!matches.length) {
+            return null;
+        }
+        const where = this.buildBaseWhere(lookup);
+        for (const match of matches) {
+            const rawValue = this.getValueFromSource(match.valueFrom, {
+                req,
+                iamContext,
+                userType,
+            });
+            const value = this.castValue(rawValue, match.cast);
+            if (!this.hasValue(value)) {
+                return null;
+            }
+            where[match.field] = value;
+        }
+        return where;
+    }
+    buildNullFieldsWhere(fields, lookup) {
+        return fields.reduce((where, field) => {
+            where[field] = (0, typeorm_2.IsNull)();
+            return where;
+        }, this.buildBaseWhere(lookup));
+    }
+    buildBaseWhere(lookup) {
+        if (!lookup) {
+            return {};
+        }
+        return {
+            [lookup.lookupField]: lookup.entityId,
+        };
+    }
+    normalizeWhereResult(where) {
+        if (where.length === 1) {
+            return where[0];
+        }
+        return where;
+    }
+    getValueFromSource(source, context) {
+        if (typeof source === 'function') {
+            return source(context);
+        }
+        if (source.startsWith('iam.')) {
+            return this.getValueByPath(context.iamContext, source.slice(4));
+        }
+        if (source.startsWith('req.')) {
+            return this.getValueByPath(context.req, source.slice(4));
+        }
+        return undefined;
+    }
+    getValueByPath(source, path) {
+        return path.split('.').reduce((current, key) => {
+            return current?.[key];
+        }, source);
+    }
+    castValue(value, cast) {
+        if (!this.hasValue(value)) {
+            return value;
+        }
+        if (cast === 'string') {
+            return String(value);
+        }
+        if (cast === 'number') {
+            const numberValue = Number(value);
+            return Number.isNaN(numberValue) ? undefined : numberValue;
+        }
+        if (cast === 'boolean') {
+            if (value === true || value === false) {
+                return value;
+            }
+            if (value === 'true') {
+                return true;
+            }
+            if (value === 'false') {
+                return false;
+            }
+            return Boolean(value);
+        }
+        return value;
+    }
+    normalizeEntityId(value) {
+        if (!this.hasValue(value)) {
+            return null;
+        }
+        if (typeof value === 'string' || typeof value === 'number') {
+            return value;
+        }
+        if (typeof value === 'bigint') {
+            return value.toString();
+        }
+        return null;
+    }
+    hasValue(value) {
+        return value !== null && value !== undefined && value !== '';
+    }
+};
+exports.IamEntityAccessService = IamEntityAccessService;
+exports.IamEntityAccessService = IamEntityAccessService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_1.InjectDataSource)()),
+    __metadata("design:paramtypes", [typeorm_2.DataSource])
+], IamEntityAccessService);
+//# sourceMappingURL=iam-entity-access.service.js.map

package/dist/services/iam-entity-access.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-entity-access.service.js","sourceRoot":"","sources":["../../src/services/iam-entity-access.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AACxB,kFAI4C;AAC5C,6CAAmD;AACnD,qCAA+D;AAC/D,oEAA8D;AAavD,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IACjC,YAEmB,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAEJ,eAAe,CACb,UAAe,EACf,gBAAmC;QAEnC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,UAAU,EAAE,OAAO,EAAE,CAAC;YAC9D,OAAO,oCAAe,CAAC,KAAK,CAAC;QAC/B,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,OAAO,oCAAe,CAAC,IAAI,CAAC;QAC9B,CAAC;QAED,IACE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,EACpC,CAAC;YACD,OAAO,oCAAe,CAAC,KAAK,CAAC;QAC/B,CAAC;QAKD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,oCAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,oCAAe,CAAC,KAAK,CAAC;QAC/B,CAAC;QAED,MAAM,IAAI,8BAAqB,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,OAAyC,EACzC,GAAQ,EACR,UAAe,EACf,QAAyB;QAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;YACpE,GAAG;YACH,UAAU;YACV,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAErD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE3D,MAAM,SAAS,GAAG;YAChB,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ;SACR,CAAC;QAE3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC/B,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CACzB,4CAAgB,CAAC,OAAO,CACtB,0CAAc,CAAC,kBAAkB,EACjC,OAAO,CAAC,YAAY,IAAI,UAAU,CACnC,CACF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CACvC,OAAO,EACP,GAAG,EACH,UAAU,EACV,QAAQ,EACR;YACE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;YACjC,QAAQ;SACT,CACF,CAAC;QAEF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CACb,OAAsC,EACtC,GAAQ,EACR,aAAkB,IAAA,yCAAa,EAAC,GAAG,CAAC,EACpC,QAA0B;QAE1B,MAAM,gBAAgB,GACpB,QAAQ;YACR,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,oCAAe,CAAC,CAAC,CAAC;QAEnE,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;IAEO,gBAAgB,CACtB,OAAyE,EACzE,GAAQ,EACR,UAAe,EACf,QAAyB,EACzB,MAGC;QAED,IAAI,QAAQ,KAAK,oCAAe,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;YAE1C,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACjD,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAI;gBAC3C,QAAQ,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBACjC,GAAG;gBACH,UAAU;gBACV,QAAQ;gBACR,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAI,2BAAkB,EAAE,CAAC;YACjC,CAAC;YAED,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,QAAQ,KAAK,oCAAe,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAI;gBAC3C,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;gBAC3C,GAAG;gBACH,UAAU;gBACV,QAAQ;gBACR,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAI,2BAAkB,EAAE,CAAC;YACjC,CAAC;YAED,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,QAAQ,KAAK,oCAAe,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAI;gBAC3C,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;gBAC5C,GAAG;gBACH,UAAU;gBACV,QAAQ;gBACR,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAI,2BAAkB,EAAE,CAAC;YACjC,CAAC;YAED,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,2BAAkB,EAAE,CAAC;IACjC,CAAC;IAEO,sBAAsB,CAAI,MASjC;QACC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAE/D,OAAO,QAAQ,CAAC,MAAM,CAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC9D,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,oBAAoB,CAAI,MAAM,CAAC,UAAsB,EAAE,MAAM,CAAC,CACpE,CAAC;gBAEF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAI;oBACvC,OAAO,EAAE,MAAM,CAAC,GAAG;oBACnB,GAAG;oBACH,UAAU;oBACV,QAAQ;oBACR,MAAM;iBACP,CAAC,CAAC;gBAEH,IAAI,KAAK,EAAE,CAAC;oBACV,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC;gBAED,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,CAAC;IAEO,kBAAkB,CAAI,MAS7B;QACC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAE9D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAI,MAAM,CAAC,CAAC;QAE7C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE;gBACxD,GAAG;gBACH,UAAU;gBACV,QAAQ;aACT,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEnD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAY,CAAC;QACpC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB,CAC1B,MAAgB,EAChB,MAGC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACpC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAA,gBAAM,GAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,cAAc,CAAI,MAAM,CAAC,CAAC,CAAC;IACrC,CAAC;IAEO,cAAc,CAAI,MAGzB;QACC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAyB,CAAC;QACnC,CAAC;QAED,OAAO;YACL,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,QAAQ;SACf,CAAC;IAC3B,CAAC;IAEO,oBAAoB,CAC1B,KAA4B;QAE5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,kBAAkB,CACxB,MAAyB,EACzB,OAIC;QAED,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,cAAc,CAAC,MAAW,EAAE,IAAY;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;YAC7C,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IAEO,SAAS,CAAC,KAAc,EAAE,IAAsB;QACtD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,iBAAiB,CAAC,KAAc;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,QAAQ,CAAC,KAAc;QAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC;IAC/D,CAAC;CACF,CAAA;AA/WY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,0BAAgB,GAAE,CAAA;qCACU,oBAAU;GAH9B,sBAAsB,CA+WlC"}

package/dist/types/iam-entity-access.type.d.ts

@@ -0,0 +1,19 @@
+import { EntityFieldMatch, IamAccessValueContext } from '../interfaces/iam-entity-access.interface';
+import { FindOptionsWhere } from 'typeorm';
+import { PaginateQuery } from 'nestjs-paginate';
+import { IAM_QUERY_SCOPE_WHERE_KEY } from '../constants/iam-decorator-key.const';
+export type AccessValueCast = 'string' | 'number' | 'boolean';
+export type AccessValueSource = `iam.${string}` | `req.${string}` | ((ctx: IamAccessValueContext) => unknown);
+export type EntityAccessBranch<T = any> = {
+    all: EntityFieldMatch<T>[];
+} | {
+    nullFields: (keyof T & string)[];
+};
+export type IamScopedWhere<T = any> = FindOptionsWhere<T> | FindOptionsWhere<T>[] | undefined;
+export type IamScopedPaginateQuery<T = any> = PaginateQuery & {
+    [IAM_QUERY_SCOPE_WHERE_KEY]?: IamScopedWhere<T>;
+};
+export type IamScopedFindOneQuery<T = any> = Record<string, any> & {
+    [IAM_QUERY_SCOPE_WHERE_KEY]?: IamScopedWhere<T>;
+};
+//# sourceMappingURL=iam-entity-access.type.d.ts.map

package/dist/types/iam-entity-access.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-entity-access.type.d.ts","sourceRoot":"","sources":["../../src/types/iam-entity-access.type.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAEjF,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GACzB,OAAO,MAAM,EAAE,GACf,OAAO,MAAM,EAAE,GACf,CAAC,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC,CAAC;AAE9C,MAAM,MAAM,kBAAkB,CAAC,CAAC,GAAG,GAAG,IAClC;IACE,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;CAC5B,GACD;IACE,UAAU,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;CAClC,CAAC;AAEN,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,GAAG,IAC9B,gBAAgB,CAAC,CAAC,CAAC,GACnB,gBAAgB,CAAC,CAAC,CAAC,EAAE,GACrB,SAAS,CAAC;AAEd,MAAM,MAAM,sBAAsB,CAAC,CAAC,GAAG,GAAG,IAAI,aAAa,GAAG;IAC5D,CAAC,yBAAyB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG;IACjE,CAAC,yBAAyB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;CACjD,CAAC"}

package/dist/types/iam-entity-access.type.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const iam_decorator_key_const_1 = require("../constants/iam-decorator-key.const");
+//# sourceMappingURL=iam-entity-access.type.js.map

package/dist/types/iam-entity-access.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-entity-access.type.js","sourceRoot":"","sources":["../../src/types/iam-entity-access.type.ts"],"names":[],"mappings":";;AAMA,kFAAiF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondart/nestjs-common-module-iam",
-  "version": "2.0.0",
+  "version": "3.1.0",
   "description": "Reusable IAM (Identity and Access Management) utilities for NestJS.",
   "author": {
     "name": "Mondart"
@@ -14,7 +14,11 @@
     "README.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json"
+    "build": "tsc -p tsconfig.json",
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "test:cov": "jest --coverage",
+    "test:debug": "node --inspect-brk -r ts-node/register ./node_modules/.bin/jest --runInBand"
   },
   "dependencies": {
     "@mondart/nestjs-common-module-core": "^3.1.0"
@@ -33,5 +37,14 @@
   },
   "publishConfig": {
     "access": "public"
+  },
+  "devDependencies": {
+    "@nestjs/testing": "^11.1.27",
+    "@types/jest": "^30.0.0",
+    "@types/supertest": "^7.2.0",
+    "jest": "^30.4.2",
+    "supertest": "^7.2.2",
+    "ts-jest": "^29.4.11",
+    "ts-node": "^10.9.2"
   }
-}
+}

package/dist/decorators/get-owner-id.decorator.d.ts

@@ -1,2 +0,0 @@
-export declare const GetOwnerIdDecorator: (...dataOrPipes: unknown[]) => ParameterDecorator;
-//# sourceMappingURL=get-owner-id.decorator.d.ts.map

package/dist/decorators/get-owner-id.decorator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-owner-id.decorator.d.ts","sourceRoot":"","sources":["../../src/decorators/get-owner-id.decorator.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,mBAAmB,mDAU/B,CAAC"}

package/dist/decorators/get-owner-id.decorator.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GetOwnerIdDecorator = void 0;
-const common_1 = require("@nestjs/common");
-const nestjs_common_module_core_1 = require("@mondart/nestjs-common-module-core");
-exports.GetOwnerIdDecorator = (0, common_1.createParamDecorator)((data, ctx) => {
-    const request = ctx.switchToHttp().getRequest();
-    if (!request.isOwnerRoute)
-        return null;
-    const iamContext = (0, nestjs_common_module_core_1.getIamContext)(request);
-    return iamContext?.user?.contactId;
-});
-//# sourceMappingURL=get-owner-id.decorator.js.map

package/dist/decorators/get-owner-id.decorator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-owner-id.decorator.js","sourceRoot":"","sources":["../../src/decorators/get-owner-id.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAAwE;AACxE,kFAAmE;AAEtD,QAAA,mBAAmB,GAAG,IAAA,6BAAoB,EACrD,CAAC,IAAa,EAAE,GAAqB,EAAE,EAAE;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAEhD,IAAI,CAAC,OAAO,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,UAAU,GAAG,IAAA,yCAAa,EAAC,OAAO,CAAC,CAAC;IAE1C,OAAO,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC;AACrC,CAAC,CACF,CAAC"}

package/dist/decorators/iam-public.decorator.d.ts

@@ -1,2 +0,0 @@
-export declare const IamPublicRouteDecorator: () => import("@nestjs/common").CustomDecorator<string>;
-//# sourceMappingURL=iam-public.decorator.d.ts.map

package/dist/decorators/iam-public.decorator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"iam-public.decorator.d.ts","sourceRoot":"","sources":["../../src/decorators/iam-public.decorator.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,uBAAuB,wDACC,CAAC"}

package/dist/decorators/iam-public.decorator.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IamPublicRouteDecorator = void 0;
-const iam_decorator_key_const_1 = require("../constants/iam-decorator-key.const");
-const common_1 = require("@nestjs/common");
-const IamPublicRouteDecorator = () => (0, common_1.SetMetadata)(iam_decorator_key_const_1.IAM_PUBLIC_ROUTE, true);
-exports.IamPublicRouteDecorator = IamPublicRouteDecorator;
-//# sourceMappingURL=iam-public.decorator.js.map

package/dist/decorators/iam-public.decorator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"iam-public.decorator.js","sourceRoot":"","sources":["../../src/decorators/iam-public.decorator.ts"],"names":[],"mappings":";;;AAAA,kFAAwE;AACxE,2CAA6C;AAEtC,MAAM,uBAAuB,GAAG,GAAG,EAAE,CAC1C,IAAA,oBAAW,EAAC,0CAAgB,EAAE,IAAI,CAAC,CAAC;AADzB,QAAA,uBAAuB,2BACE"}

package/dist/decorators/owns-entity.decorator.d.ts

@@ -1,14 +0,0 @@
-import { BaseModelEntity } from '@mondart/nestjs-common-module-core';
-export declare const OWNS_ENTITY_KEY = "owns_entity";
-export type OwnerConditions<T extends BaseModelEntity = BaseModelEntity> = {
-    ownerPropertyKey: keyof T;
-    ownerEntityId: (req: any) => string | number;
-};
-export interface OwnsEntityOptions<T extends BaseModelEntity = BaseModelEntity> {
-    entity: new (...args: any[]) => T;
-    entityPropertyKey: keyof T;
-    requestEntityId: (req: any) => string | number;
-    ownerConditions: OwnerConditions<T> | OwnerConditions<T>[];
-}
-export declare const OwnsEntity: <T extends BaseModelEntity = BaseModelEntity>(option: OwnsEntityOptions<T>) => import("@nestjs/common").CustomDecorator<string>;
-//# sourceMappingURL=owns-entity.decorator.d.ts.map

package/dist/decorators/owns-entity.decorator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"owns-entity.decorator.d.ts","sourceRoot":"","sources":["../../src/decorators/owns-entity.decorator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAErE,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAE7C,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI;IACzE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC1B,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,CAAC;CAC9C,CAAC;AAEF,MAAM,WAAW,iBAAiB,CAChC,CAAC,SAAS,eAAe,GAAG,eAAe;IAE3C,MAAM,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC3B,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,CAAC;IAC/C,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;CAC5D;AAED,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,eAAe,GAAG,eAAe,EACpE,QAAQ,iBAAiB,CAAC,CAAC,CAAC,qDACW,CAAC"}