@mondaydotcomorg/monday-authorization 1.1.9-featurebelkaauthz-sdk-update.2213 → 1.1.9-featurebelkaauthz-sdk-update.2215

package/dist/lib/authorization-attributes-service.js

@@ -25,13 +25,10 @@ class AuthorizationAttributesService {
     static upsertResourceAttributes(accountId, userId, resourceAttributeAssignments) {
         return __awaiter(this, void 0, void 0, function* () {
             const internalAuthToken = authorization_internal_service_1.AuthorizationInternalService.generateInternalAuthToken(accountId, userId);
+            const attributionHeaders = (0, authorization_service_1.getAttributionsFromApi)();
             const response = yield (0, monday_fetch_1.fetch)(this.getResourceAttributesUrl(accountId), {
                 method: 'POST',
-                headers: {
-                    Authorization: internalAuthToken,
-                    'Content-Type': 'application/json',
-                    'X-INTERNAL-CONTROLLER-CALLER-APP-NAME': (0, authorization_service_1.getCurrentAppName)(),
-                },
+                headers: Object.assign({ Authorization: internalAuthToken, 'Content-Type': 'application/json', 'X-INTERNAL-CONTROLLER-CALLER-APP-NAME': (0, authorization_service_1.getCurrentAppName)() }, attributionHeaders),
                 timeout: authorization_internal_service_1.AuthorizationInternalService.getRequestTimeout(),
                 body: JSON.stringify({ resourceAttributeAssignments }),
             }, authorization_internal_service_1.AuthorizationInternalService.getRequestFetchOptions());
@@ -52,13 +49,10 @@ class AuthorizationAttributesService {
         return __awaiter(this, void 0, void 0, function* () {
             const internalAuthToken = authorization_internal_service_1.AuthorizationInternalService.generateInternalAuthToken(accountId, userId);
             const url = `${this.getResourceAttributesUrl(accountId)}/${resource.type}/${resource.id}`;
+            const attributionHeaders = (0, authorization_service_1.getAttributionsFromApi)();
             const response = yield (0, monday_fetch_1.fetch)(url, {
                 method: 'DELETE',
-                headers: {
-                    Authorization: internalAuthToken,
-                    'Content-Type': 'application/json',
-                    'X-INTERNAL-CONTROLLER-CALLER-APP-NAME': (0, authorization_service_1.getCurrentAppName)(),
-                },
+                headers: Object.assign({ Authorization: internalAuthToken, 'Content-Type': 'application/json', 'X-INTERNAL-CONTROLLER-CALLER-APP-NAME': (0, authorization_service_1.getCurrentAppName)() }, attributionHeaders),
                 timeout: authorization_internal_service_1.AuthorizationInternalService.getRequestTimeout(),
                 body: JSON.stringify({ keys: attributeKeys }),
             }, authorization_internal_service_1.AuthorizationInternalService.getRequestFetchOptions());

package/dist/lib/authorization-service.d.ts

@@ -28,3 +28,5 @@ export declare class AuthorizationService {
     private static isAuthorizedMultiple;
 }
 export declare function getCurrentAppName(): string;
+export declare function getAttributions(): any;
+export declare function getAttributionsFromApi(): {};

package/dist/lib/authorization-service.js

@@ -9,10 +9,11 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getCurrentAppName = exports.AuthorizationService = exports.setRedisClient = exports.setRequestFetchOptions = void 0;
+exports.getAttributionsFromApi = exports.getAttributions = exports.getCurrentAppName = exports.AuthorizationService = exports.setRedisClient = exports.setRequestFetchOptions = void 0;
 const lodash_1 = require("lodash");
 const perf_hooks_1 = require("perf_hooks");
 const monday_fetch_1 = require("@mondaydotcomorg/monday-fetch");
+const trident_backend_api_1 = require("@mondaydotcomorg/trident-backend-api");
 const prometheus_service_1 = require("./prometheus-service");
 const authorization_internal_service_1 = require("./authorization-internal-service");
 const GRANTED_FEATURE_CACHE_EXPIRATION_SECONDS = 5 * 60;
@@ -91,13 +92,10 @@ class AuthorizationService {
             const scopedActionsPayload = scopedActions.map(scopedAction => {
                 return Object.assign(Object.assign({}, scopedAction), { scope: (0, lodash_1.mapKeys)(scopedAction.scope, (_, key) => (0, lodash_1.snakeCase)(key)) }); // for example: { workspaceId: 1 } => { workspace_id: 1 }
             });
+            const attributionHeaders = getAttributionsFromApi();
             const response = yield (0, monday_fetch_1.fetch)(getCanActionsInScopesUrl(), {
                 method: 'POST',
-                headers: {
-                    Authorization: internalAuthToken,
-                    'Content-Type': 'application/json',
-                    'X-INTERNAL-CONTROLLER-CALLER-APP-NAME': getCurrentAppName(),
-                },
+                headers: Object.assign({ Authorization: internalAuthToken, 'Content-Type': 'application/json', 'X-INTERNAL-CONTROLLER-CALLER-APP-NAME': getCurrentAppName() }, attributionHeaders),
                 timeout: authorization_internal_service_1.AuthorizationInternalService.getRequestTimeout(),
                 body: JSON.stringify({
                     user_id: userId,
@@ -126,13 +124,10 @@ class AuthorizationService {
         return __awaiter(this, void 0, void 0, function* () {
             const internalAuthToken = authorization_internal_service_1.AuthorizationInternalService.generateInternalAuthToken(accountId, userId);
             const startTime = perf_hooks_1.performance.now();
+            const attributionHeaders = getAttributionsFromApi();
             const response = yield (0, monday_fetch_1.fetch)(getAuthorizeUrl(), {
                 method: 'POST',
-                headers: {
-                    Authorization: internalAuthToken,
-                    'Content-Type': 'application/json',
-                    'X-INTERNAL-CONTROLLER-CALLER-APP-NAME': getCurrentAppName(),
-                },
+                headers: Object.assign({ Authorization: internalAuthToken, 'Content-Type': 'application/json', 'X-INTERNAL-CONTROLLER-CALLER-APP-NAME': getCurrentAppName() }, attributionHeaders),
                 timeout: authorization_internal_service_1.AuthorizationInternalService.getRequestTimeout(),
                 body: JSON.stringify({
                     user_id: userId,
@@ -199,6 +194,25 @@ function getCurrentAppName() {
     }
 }
 exports.getCurrentAppName = getCurrentAppName;
+function getAttributions() {
+    var _a;
+    let attributions = (_a = getVariable('runtime_attributions/valid_attributes', { silent: true })) === null || _a === void 0 ? void 0 : _a.attributions;
+    return attributions;
+}
+exports.getAttributions = getAttributions;
+function getAttributionsFromApi() {
+    const tridentContext = trident_backend_api_1.Api.getPart('context');
+    // @ts-expect-error not an error
+    const { runtimeAttributions } = tridentContext;
+    const attributionsHeaders = Object.fromEntries(runtimeAttributions === null || runtimeAttributions === void 0 ? void 0 : runtimeAttributions.buildOutgoingHeaders('HTTP_INTERNAL'));
+    const attributionHeadersInternal = {};
+    Object.keys(attributionsHeaders).forEach(function (key) {
+        attributionHeadersInternal[`${key}_belka_internal`] = attributionsHeaders[key];
+    });
+    // let attributions = getVariable('runtime_attributions/valid_attributes', { silent: true });
+    return attributionHeadersInternal;
+}
+exports.getAttributionsFromApi = getAttributionsFromApi;
 function getVariable(key, options = { silent: false }) {
     const result = tryJsonParse(getEnvVariable(key));
     if (result === undefined && !options.silent) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/monday-authorization",
-  "version": "1.1.9-featurebelkaauthz-sdk-update.2213+3b128b4b9",
+  "version": "1.1.9-featurebelkaauthz-sdk-update.2215+1bfb8b39a",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "BSD-3-Clause",
@@ -12,6 +12,7 @@
     "@mondaydotcomorg/monday-fetch": "^0.0.7",
     "@mondaydotcomorg/monday-jwt": "^3.0.10",
     "@mondaydotcomorg/monday-logger": "^3.0.10",
+    "@mondaydotcomorg/trident-backend-api": "^0.21.0",
     "node-fetch": "^2.6.7",
     "on-headers": "^1.0.2",
     "ts-node": "^10.0.0"
@@ -32,5 +33,5 @@
   "files": [
     "dist/"
   ],
-  "gitHead": "3b128b4b94aa90f11b7bc5f2bd6301fd81de8141"
+  "gitHead": "1bfb8b39a050015f349ffafcd707b9aeb44dad91"
 }