@nest-boot/permission 7.3.6 → 8.0.0-beta.1

package/dist/index.spec.js

@@ -1,47 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-describe("public API", () => {
-    it("should export permission package APIs", async () => {
-        const api = await Promise.resolve().then(() => __importStar(require(".")));
-        expect(api.Can).toBeDefined();
-        expect(api.PermissionAction).toBeDefined();
-        expect(api.PermissionAbilityBuilder).toBeDefined();
-        expect(api.PermissionGuard).toBeDefined();
-        expect(api.PermissionModule).toBeDefined();
-        expect(api.can).toBeDefined();
-        expect(api.getPermissionAbility).toBeDefined();
-    });
-});
-//# sourceMappingURL=index.spec.js.map

package/dist/index.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.spec.js","sourceRoot":"","sources":["../src/index.spec.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,wDAAa,GAAG,GAAC,CAAC;QAE9B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/permission.ability-builder.spec.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/permission.ability-builder.spec.js

@@ -1,16 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const permission_action_enum_1 = require("./enums/permission-action.enum");
-const permission_ability_builder_1 = require("./permission.ability-builder");
-class Post {
-}
-describe("PermissionAbilityBuilder", () => {
-    it("should build a CASL mongo ability", () => {
-        const builder = new permission_ability_builder_1.PermissionAbilityBuilder();
-        builder.can(permission_action_enum_1.PermissionAction.READ, Post);
-        const ability = builder.build();
-        expect(ability.can(permission_action_enum_1.PermissionAction.READ, Post)).toBe(true);
-        expect(ability.can(permission_action_enum_1.PermissionAction.DELETE, Post)).toBe(false);
-    });
-});
-//# sourceMappingURL=permission.ability-builder.spec.js.map

package/dist/permission.ability-builder.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission.ability-builder.spec.js","sourceRoot":"","sources":["../src/permission.ability-builder.spec.ts"],"names":[],"mappings":";;AAAA,2EAAkE;AAClE,6EAAwE;AAExE,MAAM,IAAI;CAAG;AAEb,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,OAAO,GAAG,IAAI,qDAAwB,EAAE,CAAC;QAE/C,OAAO,CAAC,GAAG,CAAC,yCAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yCAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yCAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/permission.guard.spec.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/permission.guard.spec.js

@@ -1,577 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const request_context_1 = require("@nest-boot/request-context");
-const common_1 = require("@nestjs/common");
-const core_1 = require("@nestjs/core");
-const testing_1 = require("@nestjs/testing");
-const permission_action_enum_1 = require("./enums/permission-action.enum");
-const permission_constants_1 = require("./permission.constants");
-const permission_guard_1 = require("./permission.guard");
-const permission_module_definition_1 = require("./permission.module-definition");
-const get_permission_ability_util_1 = require("./utils/get-permission-ability.util");
-class Subject {
-}
-class Controller {
-}
-describe("PermissionGuard", () => {
-    afterEach(() => {
-        Reflect.deleteMetadata(permission_constants_1.ROUTE_ARGS_METADATA, Controller, "handler");
-    });
-    it("allows requests without permission metadata", async () => {
-        const { guard, reflector, buildAbility } = await createGuard();
-        reflector.getAllAndOverride.mockReturnValue(undefined);
-        await expect(guard.canActivate(createContext())).resolves.toBe(true);
-        expect(buildAbility).not.toHaveBeenCalled();
-    });
-    it("throws when permission metadata exists but no ability is available", async () => {
-        const { guard, reflector, buildAbility } = await createGuard();
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.READ,
-            subject: Subject,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await expect(guard.canActivate(createContext())).rejects.toBeInstanceOf(common_1.ForbiddenException);
-            await expect(guard.canActivate(createContext())).rejects.toBeInstanceOf(common_1.ForbiddenException);
-        });
-        expect(buildAbility).toHaveBeenCalledTimes(1);
-    });
-    it("builds, caches, and checks ability against configured permission metadata", async () => {
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector, buildAbility, req, res } = await createGuard(ability);
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: Subject,
-        });
-        const context = createContext(req, res);
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await expect(guard.canActivate(context)).resolves.toBe(true);
-            await expect(request_context_1.RequestContext.get(permission_constants_1.PERMISSION_ABILITY_PROMISE)).resolves.toBe(ability);
-            expect(request_context_1.RequestContext.get(permission_constants_1.PERMISSION_ABILITY)).toBe(ability);
-            expect((0, get_permission_ability_util_1.getPermissionAbility)()).toBe(ability);
-        });
-        expect(buildAbility).toHaveBeenCalledWith(context);
-        expect(canMock).toHaveBeenCalledWith(permission_action_enum_1.PermissionAction.UPDATE, Subject);
-    });
-    it("passes GraphQL execution context to buildAbility", async () => {
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector, buildAbility, req, res } = await createGuard(ability);
-        const gqlContext = { req, res };
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: Subject,
-        });
-        const context = createContext(undefined, undefined, [undefined, {}, gqlContext, {}], "graphql");
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "graphql" }), async () => {
-            await expect(guard.canActivate(context)).resolves.toBe(true);
-        });
-        expect(buildAbility).toHaveBeenCalledWith(context);
-    });
-    it("uses cached ability before building a new one", async () => {
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector, buildAbility } = await createGuard();
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: Subject,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), () => {
-            request_context_1.RequestContext.set(permission_constants_1.PERMISSION_ABILITY, ability);
-            return expect(guard.canActivate(createContext())).resolves.toBe(true);
-        });
-        expect(buildAbility).not.toHaveBeenCalled();
-        expect(canMock).toHaveBeenCalledWith(permission_action_enum_1.PermissionAction.UPDATE, Subject);
-    });
-    it("checks ability against subject resolved from self and decorated method args", async () => {
-        const subjectInstance = new Subject();
-        const input = { id: 123 };
-        const handlerThis = {
-            workspaceMemberService: {
-                findOne: jest.fn((_id) => Promise.resolve(subjectInstance)),
-            },
-        };
-        const subjectFactory = jest.fn((self, params) => self.workspaceMemberService.findOne(params.input.id));
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector, moduleRef } = await createGuard(ability, handlerThis);
-        setRouteArgsMetadata({
-            "3:0": {
-                index: 0,
-            },
-        });
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await expect(guard.canActivate(createContext({ headers: {}, body: { input } }, {}, []))).resolves.toBe(true);
-        });
-        expect(moduleRef.resolve).toHaveBeenCalledWith(Controller, expect.any(Object), { strict: false });
-        expect(subjectFactory.mock.contexts[0]).toBeUndefined();
-        expect(subjectFactory).toHaveBeenCalledWith(handlerThis, { input });
-        expect(handlerThis.workspaceMemberService.findOne).toHaveBeenCalledWith(123);
-        expect(canMock).toHaveBeenCalledWith(permission_action_enum_1.PermissionAction.UPDATE, subjectInstance);
-    });
-    it("passes GraphQL resolver arguments in decorated parameter order", async () => {
-        const input = { title: "New title" };
-        const subjectInstance = new Subject();
-        const handlerThis = {
-            postService: {
-                findOneOrFail: jest.fn((_id, _input) => subjectInstance),
-            },
-        };
-        const subjectFactory = jest.fn((self, id, params) => self.postService.findOneOrFail(id, params));
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector, req, res } = await createGuard(ability, handlerThis);
-        setRouteArgsMetadata({
-            "3:0": {
-                index: 0,
-                data: "id",
-            },
-            "3:1": {
-                index: 1,
-                data: "input",
-            },
-        });
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "graphql" }), async () => {
-            await expect(guard.canActivate(createContext(undefined, undefined, [undefined, { input, id: "post-1" }, { req, res }, {}], "graphql"))).resolves.toBe(true);
-        });
-        expect(subjectFactory).toHaveBeenCalledWith(handlerThis, "post-1", input);
-        expect(handlerThis.postService.findOneOrFail).toHaveBeenCalledWith("post-1", input);
-    });
-    it("passes every GraphQL route argument source to subject factories", async () => {
-        const root = { root: true };
-        const info = { fieldName: "post" };
-        const subjectInstance = new Subject();
-        const handlerThis = {};
-        const subjectFactory = jest.fn(() => subjectInstance);
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector, req } = await createGuard(ability, handlerThis);
-        setRouteArgsMetadata({
-            "0:0": {
-                index: 0,
-            },
-            "3:1": {
-                index: 1,
-                data: "id",
-            },
-            "1:2": {
-                index: 2,
-                data: "viewer",
-            },
-            "2:3": {
-                index: 3,
-            },
-            "99:4": {
-                index: 4,
-            },
-        });
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.READ,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "graphql" }), async () => {
-            await expect(guard.canActivate(createContext(undefined, undefined, [root, { id: "post-1" }, { req, viewer: "user-1" }, info], "graphql"))).resolves.toBe(true);
-        });
-        expect(subjectFactory).toHaveBeenCalledWith(handlerThis, root, "post-1", "user-1", info, undefined);
-        expect(canMock).toHaveBeenCalledWith(permission_action_enum_1.PermissionAction.READ, subjectInstance);
-    });
-    it("passes HTTP controller arguments in decorated parameter order", async () => {
-        const input = { title: "New title" };
-        const subjectInstance = new Subject();
-        const handlerThis = {
-            postService: {
-                findOneOrFail: jest.fn((_id, _input) => subjectInstance),
-            },
-        };
-        const subjectFactory = jest.fn((self, id, params) => self.postService.findOneOrFail(id, params));
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector } = await createGuard(ability, handlerThis);
-        setRouteArgsMetadata({
-            "5:0": {
-                index: 0,
-                data: "id",
-            },
-            "3:1": {
-                index: 1,
-                data: "input",
-            },
-        });
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await expect(guard.canActivate(createContext({
-                headers: {},
-                params: { id: "post-1" },
-                body: { input },
-            }, {}, []))).resolves.toBe(true);
-        });
-        expect(subjectFactory).toHaveBeenCalledWith(handlerThis, "post-1", input);
-        expect(handlerThis.postService.findOneOrFail).toHaveBeenCalledWith("post-1", input);
-    });
-    it("passes every HTTP route argument source to subject factories", async () => {
-        const req = {
-            body: { input: { title: "Draft" } },
-            files: ["first-file"],
-            headers: { "x-user-id": "user-1" },
-            hosts: { account: "acme" },
-            ip: "127.0.0.1",
-            params: { id: "post-1" },
-            query: { preview: "true" },
-            rawBody: Buffer.from("raw"),
-            session: { id: "session-1" },
-            upload: { filename: "avatar.png" },
-        };
-        const res = {
-            locals: {},
-        };
-        const next = jest.fn();
-        const subjectInstance = new Subject();
-        const handlerThis = {};
-        const subjectFactory = jest.fn(() => subjectInstance);
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector } = await createGuard(ability, handlerThis);
-        setRouteArgsMetadata({
-            "0:0": {
-                index: 0,
-            },
-            "1:1": {
-                index: 1,
-            },
-            "2:2": {
-                index: 2,
-            },
-            "3:3": {
-                index: 3,
-            },
-            "12:4": {
-                index: 4,
-            },
-            "5:5": {
-                index: 5,
-                data: "id",
-            },
-            "10:6": {
-                index: 6,
-                data: "account",
-            },
-            "4:7": {
-                index: 7,
-                data: "preview",
-            },
-            "6:8": {
-                index: 8,
-                data: "X-USER-ID",
-            },
-            "7:9": {
-                index: 9,
-            },
-            "8:10": {
-                index: 10,
-                data: "upload",
-            },
-            "8:11": {
-                index: 11,
-            },
-            "9:12": {
-                index: 12,
-            },
-            "11:13": {
-                index: 13,
-            },
-            "99:14": {
-                index: 14,
-            },
-        });
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.READ,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await expect(guard.canActivate(createContext(req, res, [undefined, undefined, next]))).resolves.toBe(true);
-        });
-        expect(subjectFactory).toHaveBeenCalledWith(handlerThis, req, res, next, req.body, req.rawBody, "post-1", "acme", "true", "user-1", req.session, req.upload, undefined, req.files, req.ip, undefined);
-        expect(canMock).toHaveBeenCalledWith(permission_action_enum_1.PermissionAction.READ, subjectInstance);
-    });
-    it("passes custom HTTP controller arguments to subject factories", async () => {
-        const workspace = { id: "workspace-1" };
-        const subjectInstance = new Subject();
-        const customFactory = jest.fn((_data, context) => context.switchToHttp().getRequest().headers["x-workspace-id"] === workspace.id
-            ? workspace
-            : null);
-        const handlerThis = {
-            workspaceService: {
-                findSubject: jest.fn((_customWorkspace, _id) => subjectInstance),
-            },
-        };
-        const subjectFactory = jest.fn((self, currentWorkspace, id) => self.workspaceService.findSubject(currentWorkspace, id));
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector } = await createGuard(ability, handlerThis);
-        setRouteArgsMetadata({
-            [`workspace${permission_constants_1.CUSTOM_ROUTE_ARGS_METADATA}:0`]: {
-                index: 0,
-                data: "workspace",
-                factory: customFactory,
-            },
-            "5:1": {
-                index: 1,
-                data: "id",
-            },
-        });
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await expect(guard.canActivate(createContext({
-                headers: { "x-workspace-id": workspace.id },
-                params: { id: "post-1" },
-            }, {}, []))).resolves.toBe(true);
-        });
-        expect(customFactory).toHaveBeenCalledWith("workspace", expect.any(Object));
-        expect(subjectFactory).toHaveBeenCalledWith(handlerThis, workspace, "post-1");
-        expect(handlerThis.workspaceService.findSubject).toHaveBeenCalledWith(workspace, "post-1");
-        expect(canMock).toHaveBeenCalledWith(permission_action_enum_1.PermissionAction.UPDATE, subjectInstance);
-    });
-    it("awaits async custom controller arguments before invoking subject factories", async () => {
-        const workspace = { id: "workspace-1" };
-        const subjectInstance = new Subject();
-        const customFactory = jest.fn(() => Promise.resolve(workspace));
-        const handlerThis = {
-            workspaceService: {
-                findSubject: jest.fn((_customWorkspace, _id) => subjectInstance),
-            },
-        };
-        const subjectFactory = jest.fn((self, currentWorkspace, id) => self.workspaceService.findSubject(currentWorkspace, id));
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector } = await createGuard(ability, handlerThis);
-        setRouteArgsMetadata({
-            [`workspace${permission_constants_1.CUSTOM_ROUTE_ARGS_METADATA}:0`]: {
-                index: 0,
-                data: "workspace",
-                factory: customFactory,
-            },
-            "5:1": {
-                index: 1,
-                data: "id",
-            },
-        });
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await expect(guard.canActivate(createContext({
-                headers: {},
-                params: { id: "post-1" },
-            }, {}, []))).resolves.toBe(true);
-        });
-        expect(subjectFactory).toHaveBeenCalledWith(handlerThis, workspace, "post-1");
-        expect(handlerThis.workspaceService.findSubject).toHaveBeenCalledWith(workspace, "post-1");
-    });
-    it("shares a pending ability build across concurrent checks", async () => {
-        const canMock = jest.fn(() => true);
-        const ability = {
-            can: canMock,
-        };
-        const { guard, reflector, buildAbility } = await createGuard();
-        let resolveAbility;
-        const abilityPromise = new Promise((resolve) => {
-            resolveAbility = resolve;
-        });
-        buildAbility.mockImplementation(() => abilityPromise);
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.UPDATE,
-            subject: Subject,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "graphql" }), async () => {
-            const first = guard.canActivate(createContext());
-            const second = guard.canActivate(createContext());
-            await Promise.resolve();
-            expect(buildAbility).toHaveBeenCalledTimes(1);
-            resolveAbility(ability);
-            await expect(Promise.all([first, second])).resolves.toEqual([
-                true,
-                true,
-            ]);
-        });
-        expect(canMock).toHaveBeenCalledTimes(2);
-    });
-    it("passes no subject factory args when route metadata is missing", async () => {
-        const subjectInstance = new Subject();
-        const handlerThis = {};
-        const subjectFactory = jest.fn(() => subjectInstance);
-        const canMock = jest.fn(() => true);
-        const { guard, reflector, moduleRef } = await createGuard({
-            can: canMock,
-        }, handlerThis);
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.READ,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "rpc" }), async () => {
-            await expect(guard.canActivate(createContext(undefined, undefined, [], "rpc"))).resolves.toBe(true);
-        });
-        expect(moduleRef.resolve).toHaveBeenCalledWith(Controller, undefined, {
-            strict: false,
-        });
-        expect(subjectFactory).toHaveBeenCalledWith(handlerThis);
-    });
-    it("falls back to prototype lookup and null when handler names are unavailable", async () => {
-        const subjectInstance = new Subject();
-        const handlerThis = {};
-        const subjectFactory = jest.fn(() => subjectInstance);
-        const canMock = jest.fn(() => true);
-        const { guard, reflector } = await createGuard({
-            can: canMock,
-        }, handlerThis);
-        const matchedHandler = createUnnamedHandler();
-        const unmatchedHandler = createUnnamedHandler();
-        Object.defineProperty(Controller.prototype, "matched", {
-            configurable: true,
-            value: matchedHandler,
-        });
-        Reflect.defineMetadata(permission_constants_1.ROUTE_ARGS_METADATA, {
-            "3:0": {
-                index: 0,
-                data: 1,
-            },
-        }, Controller, "matched");
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.READ,
-            subject: subjectFactory,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            const matchedContext = createContext({
-                body: { input: true },
-                headers: {},
-            }, {});
-            matchedContext.getHandler = jest.fn(() => matchedHandler);
-            await expect(guard.canActivate(matchedContext)).resolves.toBe(true);
-            const unmatchedContext = createContext({
-                body: "not-an-object",
-                headers: {},
-            }, {});
-            unmatchedContext.getHandler = jest.fn(() => unmatchedHandler);
-            await expect(guard.canActivate(unmatchedContext)).resolves.toBe(true);
-        });
-        expect(subjectFactory).toHaveBeenNthCalledWith(1, handlerThis, {
-            input: true,
-        });
-        expect(subjectFactory).toHaveBeenNthCalledWith(2, handlerThis);
-        Reflect.deleteMetadata(permission_constants_1.ROUTE_ARGS_METADATA, Controller, "matched");
-        delete Controller.prototype.matched;
-    });
-    it("returns false when ability denies the permission", async () => {
-        const canMock = jest.fn(() => false);
-        const { guard, reflector } = await createGuard({
-            can: canMock,
-        });
-        reflector.getAllAndOverride.mockReturnValue({
-            action: permission_action_enum_1.PermissionAction.DELETE,
-            subject: Subject,
-        });
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await expect(guard.canActivate(createContext())).resolves.toBe(false);
-        });
-    });
-});
-async function createGuard(ability = null, handlerThis = {}) {
-    const reflector = {
-        getAllAndOverride: jest.fn(),
-    };
-    const buildAbility = jest.fn((_ctx) => ability);
-    const moduleRefMock = {
-        resolve: jest.fn(() => Promise.resolve(handlerThis)),
-    };
-    const req = {
-        headers: {},
-    };
-    const res = {};
-    const testingModule = await testing_1.Test.createTestingModule({
-        providers: [
-            permission_guard_1.PermissionGuard,
-            {
-                provide: core_1.Reflector,
-                useValue: reflector,
-            },
-            {
-                provide: permission_module_definition_1.MODULE_OPTIONS_TOKEN,
-                useValue: {
-                    buildAbility,
-                },
-            },
-            {
-                provide: core_1.ModuleRef,
-                useValue: moduleRefMock,
-            },
-        ],
-    }).compile();
-    return {
-        guard: testingModule.get(permission_guard_1.PermissionGuard),
-        reflector,
-        buildAbility,
-        moduleRef: moduleRefMock,
-        req,
-        res,
-    };
-}
-function createContext(req, res, args = [], type = "http") {
-    const resolvedReq = arguments.length >= 1 ? req : { headers: {} };
-    const resolvedRes = arguments.length >= 2 ? res : {};
-    return {
-        getType: jest.fn(() => type),
-        switchToHttp: () => ({
-            getRequest: () => resolvedReq,
-            getResponse: () => resolvedRes,
-            getNext: () => args[2],
-        }),
-        getArgs: jest.fn(() => args),
-        getHandler: jest.fn(() => function handler() {
-            return undefined;
-        }),
-        getClass: jest.fn(() => Controller),
-    };
-}
-function setRouteArgsMetadata(metadata) {
-    Reflect.defineMetadata(permission_constants_1.ROUTE_ARGS_METADATA, metadata, Controller, "handler");
-}
-function createUnnamedHandler() {
-    return function () {
-        return undefined;
-    };
-}
-//# sourceMappingURL=permission.guard.spec.js.map