@mondaydotcomorg/monday-authorization 1.0.53-featuregallisupportprivatekeysigning.163 → 1.0.53-featureyardenauthorization-sdk-can-action-in-scope-support.34

package/dist/lib/authorization-service.d.ts

@@ -4,6 +4,27 @@ export interface AuthorizeResponse {
     isAuthorized: boolean;
     unauthorizedIds?: number[];
 }
+export interface ScopeOptions {
+    workspaceId?: number;
+    accountProductId?: number;
+    boardId?: number;
+    pulseId?: number;
+}
+export interface Translation {
+    key: string;
+    [option: string]: string;
+}
+export interface SubjectRequestObject {
+    action: string;
+    scope: ScopeOptions;
+}
+export interface SubjectResponseObject {
+    subject: SubjectRequestObject;
+    permit: {
+        isAllowed: boolean;
+        reason: Translation;
+    };
+}
 export declare function setRequestFetchOptions(customMondayFetchOptions: MondayFetchOptions): void;
 export declare function setRedisClient(client: any, grantedFeatureRedisExpirationInSeconds?: number): void;
 export declare class AuthorizationService {
@@ -16,6 +37,8 @@ export declare class AuthorizationService {
     static isAuthorized(accountId: number, userId: number, resources: Resource[], action: Action): Promise<AuthorizeResponse>;
     static isAuthorized(accountId: number, userId: number, authorizationRequestObjects: AuthorizationObject[]): Promise<AuthorizeResponse>;
     static isUserGrantedWithFeature(accountId: number, userId: number, featureName: string): Promise<boolean>;
+    static canActionInScope(accountId: number, userId: number, action: string, scope: ScopeOptions): Promise<boolean>;
+    static canActionInScopeMultiple(accountId: number, userId: number, subjects: SubjectRequestObject[]): Promise<SubjectResponseObject[]>;
     private static fetchIsUserGrantedWithFeature;
     private static getCachedKeyName;
     private static isAuthorizedSingular;

package/dist/lib/authorization-service.js

@@ -30,6 +30,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationService = exports.setRedisClient = exports.setRequestFetchOptions = void 0;
 const perf_hooks_1 = require("perf_hooks");
+const lodash_1 = require("lodash");
 const monday_jwt_1 = require("@mondaydotcomorg/monday-jwt");
 const MondayLogger = __importStar(require("@mondaydotcomorg/monday-logger"));
 const monday_fetch_1 = require("@mondaydotcomorg/monday-fetch");
@@ -88,6 +89,37 @@ class AuthorizationService {
             return grantedFeatureValue;
         });
     }
+    static canActionInScope(accountId, userId, action, scope) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const subjects = [{ action, scope }];
+            const subjectsResponse = yield this.canActionInScopeMultiple(accountId, userId, subjects);
+            return subjectsResponse[0].permit.isAllowed;
+        });
+    }
+    ;
+    static canActionInScopeMultiple(accountId, userId, subjects) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const internalAuthToken = monday_jwt_1.signAuthorizationHeader({ appName: INTERNAL_APP_NAME, accountId, userId });
+            const subjectsPayload = subjects.map((subject) => {
+                return Object.assign(Object.assign({}, subject), { scope: lodash_1.mapKeys(subject.scope, (_, key) => lodash_1.snakeCase(key)) }); // for example: { workspaceId: 1 } => { workspace_id: 1 }
+            });
+            const response = yield monday_fetch_1.fetch(getCanActionsInScopesUrl(), {
+                method: 'POST',
+                headers: { Authorization: internalAuthToken, 'Content-Type': 'application/json' },
+                timeout: getRequestTimeout(),
+                body: JSON.stringify({
+                    user_id: userId,
+                    subjects: subjectsPayload,
+                }),
+            }, mondayFetchOptions);
+            if (!response.ok) {
+                logger.error({ status: response.status }, 'AuthorizationService: authorization request failed - canActionInScopeMultiple');
+                return subjects.map((subject) => ({ subject, permit: { isAllowed: false, reason: { key: 'internal error' } } }));
+            }
+            const responseBody = yield response.json();
+            return responseBody.result;
+        });
+    }
     static fetchIsUserGrantedWithFeature(featureName, accountId, userId) {
         return __awaiter(this, void 0, void 0, function* () {
             let authorizationObject = {
@@ -111,7 +143,7 @@ class AuthorizationService {
         return __awaiter(this, void 0, void 0, function* () {
             const internalAuthToken = monday_jwt_1.signAuthorizationHeader({ appName: INTERNAL_APP_NAME, accountId, userId });
             const startTime = perf_hooks_1.performance.now();
-            const response = yield monday_fetch_1.fetch(getUrl(), {
+            const response = yield monday_fetch_1.fetch(getAuthorizeUrl(), {
                 method: 'POST',
                 headers: { Authorization: internalAuthToken, 'Content-Type': 'application/json' },
                 timeout: getRequestTimeout(),
@@ -179,9 +211,12 @@ function logOnFetchFail(retriesLeft, error) {
         logger.info({ retriesLeft, error }, 'Authorization attempt failed due to network issues, trying again');
     }
 }
-function getUrl() {
+function getAuthorizeUrl() {
     return `${process.env.MONDAY_INTERNAL_URL}/internal_ms/authorization/authorize`;
 }
+function getCanActionsInScopesUrl() {
+    return `${process.env.MONDAY_INTERNAL_URL}/internal_ms/authorization/can_actions_in_scopes`;
+}
 function getRequestTimeout() {
     const isDevEnv = process.env.NODE_ENV === 'development';
     return isDevEnv ? 60000 : 2000;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/monday-authorization",
-  "version": "1.0.53-featuregallisupportprivatekeysigning.163+78259a8b4",
+  "version": "1.0.53-featureyardenauthorization-sdk-can-action-in-scope-support.34+3c772f361",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "BSD-3-Clause",
@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@mondaydotcomorg/monday-fetch": "^0.0.7",
-    "@mondaydotcomorg/monday-jwt": "^3.0.6-featuregallisupportprivatekeysigning.163+78259a8b4",
+    "@mondaydotcomorg/monday-jwt": "^3.0.5",
     "@mondaydotcomorg/monday-logger": "^3.0.10",
     "@types/express": "^4.17.12",
     "node-fetch": "^2.6.7",
@@ -32,5 +32,5 @@
   "files": [
     "dist/"
   ],
-  "gitHead": "78259a8b42531e299acc8dba733fd46bbf6875f9"
+  "gitHead": "3c772f361ac623b6da03988d05af464886b0ff48"
 }