@mondaydotcomorg/monday-authorization 1.0.40 → 1.0.42

package/dist/lib/authorization-service.d.ts

@@ -1,10 +1,17 @@
 import { MondayFetchOptions } from '@mondaydotcomorg/monday-fetch';
-import { Action, Resource } from './types/general';
+import { Action, AuthorizationObject, Resource } from './types/general';
 export interface AuthorizeResponse {
     isAuthorized: boolean;
     unauthorizedIds?: number[];
 }
 export declare function setRequestFetchOptions(customMondayFetchOptions: MondayFetchOptions): void;
 export declare class AuthorizationService {
+    /**
+     * @deprecated use the second form with authorizationRequestObjects instead,
+     * support of this function will be dropped gradually
+     */
     static isAuthorized(accountId: number, userId: number, resources: Resource[], action: Action): Promise<AuthorizeResponse>;
+    static isAuthorized(accountId: number, userId: number, authorizationRequestObjects: AuthorizationObject[]): Promise<AuthorizeResponse>;
+    private static isAuthorizedSingular;
+    private static isAuthorizedMultiple;
 }

package/dist/lib/authorization-service.js

@@ -46,10 +46,28 @@ function setRequestFetchOptions(customMondayFetchOptions) {
 }
 exports.setRequestFetchOptions = setRequestFetchOptions;
 class AuthorizationService {
-    static isAuthorized(accountId, userId, resources, action) {
+    static isAuthorized(...args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (args.length === 3) {
+                return this.isAuthorizedMultiple(args[0], args[1], args[2]);
+            }
+            else if (args.length == 4) {
+                return this.isAuthorizedSingular(args[0], args[1], args[2], args[3]);
+            }
+            else {
+                throw new Error('isAuthorized accepts either 3 or 4 arguments');
+            }
+        });
+    }
+    static isAuthorizedSingular(accountId, userId, resources, action) {
         return __awaiter(this, void 0, void 0, function* () {
-            const internalAuthToken = monday_jwt_1.signAuthorizationHeader(INTERNAL_APP_NAME, accountId);
             const { authorizationObjects } = createAuthorizationParams(resources, action);
+            return this.isAuthorizedMultiple(accountId, userId, authorizationObjects);
+        });
+    }
+    static isAuthorizedMultiple(accountId, userId, authorizationRequestObjects) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const internalAuthToken = monday_jwt_1.signAuthorizationHeader(INTERNAL_APP_NAME, accountId);
             const startTime = perf_hooks_1.performance.now();
             const response = yield monday_fetch_1.fetch(getUrl(), {
                 method: 'POST',
@@ -57,29 +75,29 @@ class AuthorizationService {
                 timeout: getRequestTimeout(),
                 body: JSON.stringify({
                     user_id: userId,
-                    authorize_request_objects: authorizationObjects,
+                    authorize_request_objects: authorizationRequestObjects,
                 }),
             }, mondayFetchOptions);
             const endTime = perf_hooks_1.performance.now();
             const time = endTime - startTime;
             const responseStatus = response.status;
-            prometheus_service_1.sendAuthorizationChecksPerRequestMetric(responseStatus, authorizationObjects.length);
+            prometheus_service_1.sendAuthorizationChecksPerRequestMetric(responseStatus, authorizationRequestObjects.length);
             if (!response.ok) {
                 logger.error({ status: response.status }, 'AuthorizationService: authorization request failed');
                 const isAuthorized = false;
-                authorizationObjects.forEach(function (authorizationObject) {
-                    prometheus_service_1.sendAuthorizationCheckResponseTimeMetric(authorizationObject.resource_type, action, isAuthorized, responseStatus, time);
+                authorizationRequestObjects.forEach(function (authorizationObject) {
+                    prometheus_service_1.sendAuthorizationCheckResponseTimeMetric(authorizationObject.resource_type, authorizationObject.action, isAuthorized, responseStatus, time);
                 });
                 return { isAuthorized };
             }
             const responseBody = yield response.json();
             const unauthorizedObjects = [];
             responseBody.result.forEach(function (isAuthorized, index) {
-                const authorizationObject = authorizationObjects[index];
+                const authorizationObject = authorizationRequestObjects[index];
                 if (!isAuthorized) {
                     unauthorizedObjects.push(authorizationObject);
                 }
-                prometheus_service_1.sendAuthorizationCheckResponseTimeMetric(authorizationObject.resource_type, action, isAuthorized, responseStatus, time);
+                prometheus_service_1.sendAuthorizationCheckResponseTimeMetric(authorizationObject.resource_type, authorizationObject.action, isAuthorized, responseStatus, time);
             });
             if (unauthorizedObjects.length > 0) {
                 logger.info({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/monday-authorization",
-  "version": "1.0.40",
+  "version": "1.0.42",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "BSD-3-Clause",
@@ -13,7 +13,7 @@
     "@mondaydotcomorg/monday-jwt": "^2.0.4",
     "@mondaydotcomorg/monday-logger": "^3.0.6",
     "@types/express": "^4.17.12",
-    "node-fetch": "^2.6.1",
+    "node-fetch": "^2.6.7",
     "ts-node": "^10.0.0"
   },
   "devDependencies": {
@@ -30,5 +30,5 @@
   "files": [
     "dist/"
   ],
-  "gitHead": "ed5685b58b6e62466fcfa353d34398a05ce9c0ff"
+  "gitHead": "ca2ac56ab29af9fda731e72186e2f9beba2e318c"
 }