@mondaydotcomorg/monday-authorization 1.0.9 → 1.0.11

package/dist/lib/authorization-middleware.js

@@ -22,7 +22,7 @@ function getAuthorizationMiddleware(action, resourceGetter, contextGetter) {
             contextGetter || (contextGetter = defaultContextGetter);
             const { userId, accountId } = contextGetter(request);
             const resources = resourceGetter(request);
-            const isAuthorized = yield authorization_service_1.AuthorizationService.isAuthorized(accountId, userId, resources, action);
+            const { isAuthorized } = yield authorization_service_1.AuthorizationService.isAuthorized(accountId, userId, resources, action);
             authorization_internal_service_1.AuthorizationInternalService.markAuthorized(request);
             if (!isAuthorized) {
                 response.status(403).json({ message: 'Access denied' });

package/dist/lib/authorization-service.d.ts

@@ -1,4 +1,8 @@
 import { Action, Resource } from './types/general';
+export interface AuthorizeResponse {
+    isAuthorized: boolean;
+    unauthorizedIds?: number[];
+}
 export declare class AuthorizationService {
-    static isAuthorized(accountId: number, userId: number, resources: Resource[], action: Action): Promise<boolean>;
+    static isAuthorized(accountId: number, userId: number, resources: Resource[], action: Action): Promise<AuthorizeResponse>;
 }

package/dist/lib/authorization-service.js

@@ -34,7 +34,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationService = void 0;
 const monday_jwt_1 = require("@mondaydotcomorg/monday-jwt");
 const MondayLogger = __importStar(require("@mondaydotcomorg/monday-logger"));
-const node_fetch_1 = __importDefault(require("node-fetch"));
+const monday_fetch_1 = __importDefault(require("@mondaydotcomorg/monday-fetch"));
 const INTERNAL_APP_NAME = 'internal_ms';
 const URL = `${process.env.MONDAY_INTERNAL_URL}/internal_ms/authorization/authorize`;
 const IS_DEV_ENV = process.env.NODE_ENV === 'development';
@@ -45,7 +45,7 @@ class AuthorizationService {
         return __awaiter(this, void 0, void 0, function* () {
             const internalAuthToken = monday_jwt_1.signAuthorizationHeader(INTERNAL_APP_NAME, accountId);
             const params = createAuthorizationParams(resources, action);
-            const response = yield node_fetch_1.default(URL, {
+            const response = yield monday_fetch_1.default(URL, {
                 method: 'POST',
                 headers: { Authorization: internalAuthToken, 'Content-Type': 'application/json' },
                 timeout: REQUEST_TIMEOUT,
@@ -53,10 +53,10 @@ class AuthorizationService {
                     user_id: userId,
                     authorize_request_objects: params.authorizationObjects,
                 }),
-            });
+            }, { retries: 3, callback: logOnFetchFail });
             if (!response.ok) {
                 logger.error({ status: response.status }, 'Authorization middleware: authorization request failed');
-                return false;
+                return { isAuthorized: false };
             }
             const responseBody = yield response.json();
             const unauthorizedObjects = [];
@@ -69,9 +69,10 @@ class AuthorizationService {
                 logger.info({
                     resources: JSON.stringify(unauthorizedObjects),
                 }, 'Authorization middleware: resource is unauthorized');
-                return false;
+                const unauthorizedIds = unauthorizedObjects.map(obj => obj.resource_id);
+                return { isAuthorized: false, unauthorizedIds };
             }
-            return true;
+            return { isAuthorized: true };
         });
     }
 }
@@ -92,3 +93,6 @@ function createAuthorizationParams(resources, action) {
     };
     return params;
 }
+function logOnFetchFail(retries, error, response) {
+    logger.error({ attempt: retries, error }, 'Authorization attempt failed due to network issues');
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/monday-authorization",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "BSD-3-Clause",
@@ -10,6 +10,7 @@
   },
   "dependencies": {
     "@mondaydotcomorg/monday-authentication": "^5.0.4",
+    "@mondaydotcomorg/monday-fetch": "^0.0.2",
     "@mondaydotcomorg/monday-jwt": "^2.0.4",
     "@mondaydotcomorg/monday-logger": "^2.1.2",
     "@types/express": "^4.17.12",
@@ -30,5 +31,5 @@
   "files": [
     "dist/"
   ],
-  "gitHead": "a25845d84a2c3ce7f892469c2b5621e17a13513f"
+  "gitHead": "5045f4bb75bdad8f142bf3d3bd65fa7a955bf39f"
 }