@mondaydotcomorg/monday-authorization 1.0.10 → 1.0.11

package/dist/lib/authorization-middleware.js

@@ -22,7 +22,7 @@ function getAuthorizationMiddleware(action, resourceGetter, contextGetter) {
             contextGetter || (contextGetter = defaultContextGetter);
             const { userId, accountId } = contextGetter(request);
             const resources = resourceGetter(request);
-            const isAuthorized = yield authorization_service_1.AuthorizationService.isAuthorized(accountId, userId, resources, action);
+            const { isAuthorized } = yield authorization_service_1.AuthorizationService.isAuthorized(accountId, userId, resources, action);
             authorization_internal_service_1.AuthorizationInternalService.markAuthorized(request);
             if (!isAuthorized) {
                 response.status(403).json({ message: 'Access denied' });

package/dist/lib/authorization-service.d.ts

@@ -1,4 +1,8 @@
 import { Action, Resource } from './types/general';
+export interface AuthorizeResponse {
+    isAuthorized: boolean;
+    unauthorizedIds?: number[];
+}
 export declare class AuthorizationService {
-    static isAuthorized(accountId: number, userId: number, resources: Resource[], action: Action): Promise<boolean>;
+    static isAuthorized(accountId: number, userId: number, resources: Resource[], action: Action): Promise<AuthorizeResponse>;
 }

package/dist/lib/authorization-service.js

@@ -56,7 +56,7 @@ class AuthorizationService {
             }, { retries: 3, callback: logOnFetchFail });
             if (!response.ok) {
                 logger.error({ status: response.status }, 'Authorization middleware: authorization request failed');
-                return false;
+                return { isAuthorized: false };
             }
             const responseBody = yield response.json();
             const unauthorizedObjects = [];
@@ -69,9 +69,10 @@ class AuthorizationService {
                 logger.info({
                     resources: JSON.stringify(unauthorizedObjects),
                 }, 'Authorization middleware: resource is unauthorized');
-                return false;
+                const unauthorizedIds = unauthorizedObjects.map(obj => obj.resource_id);
+                return { isAuthorized: false, unauthorizedIds };
             }
-            return true;
+            return { isAuthorized: true };
         });
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/monday-authorization",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "BSD-3-Clause",
@@ -31,5 +31,5 @@
   "files": [
     "dist/"
   ],
-  "gitHead": "27da993cbc76e1787a3a006ee5f78df9a1192ff9"
+  "gitHead": "5045f4bb75bdad8f142bf3d3bd65fa7a955bf39f"
 }