@nest-boot/row-level-security 7.4.7 → 8.0.0-beta.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/decorators/policy.decorator.d.ts +4 -14
- package/dist/decorators/policy.decorator.js +25 -41
- package/dist/decorators/policy.decorator.js.map +1 -1
- package/dist/enums/policy-command.enum.d.ts +0 -6
- package/dist/enums/policy-command.enum.js +2 -11
- package/dist/enums/policy-command.enum.js.map +1 -1
- package/dist/enums/policy-mode.enum.d.ts +0 -3
- package/dist/enums/policy-mode.enum.js +2 -8
- package/dist/enums/policy-mode.enum.js.map +1 -1
- package/dist/enums/row-level-security-role.enum.d.ts +0 -3
- package/dist/enums/row-level-security-role.enum.js +2 -8
- package/dist/enums/row-level-security-role.enum.js.map +1 -1
- package/dist/index.d.ts +11 -11
- package/dist/index.js +11 -27
- package/dist/index.js.map +1 -1
- package/dist/interfaces/index.d.ts +4 -4
- package/dist/interfaces/index.js +3 -19
- package/dist/interfaces/index.js.map +1 -1
- package/dist/interfaces/policy-metadata.interface.d.ts +2 -30
- package/dist/interfaces/policy-metadata.interface.js +1 -2
- package/dist/interfaces/policy-options.interface.d.ts +2 -11
- package/dist/interfaces/policy-options.interface.js +1 -2
- package/dist/interfaces/policy-sql-options.interface.d.ts +2 -11
- package/dist/interfaces/policy-sql-options.interface.js +1 -2
- package/dist/interfaces/row-level-security-migration-generator.interface.d.ts +2 -6
- package/dist/interfaces/row-level-security-migration-generator.interface.js +1 -2
- package/dist/row-level-security-driver.d.ts +5 -7
- package/dist/row-level-security-driver.js +12 -24
- package/dist/row-level-security-driver.js.map +1 -1
- package/dist/row-level-security-migration-generator.d.ts +1 -3
- package/dist/row-level-security-migration-generator.js +44 -45
- package/dist/row-level-security-migration-generator.js.map +1 -1
- package/dist/row-level-security-migration.d.ts +1 -4
- package/dist/row-level-security-migration.js +9 -16
- package/dist/row-level-security-migration.js.map +1 -1
- package/dist/row-level-security-migrator.d.ts +5 -7
- package/dist/row-level-security-migrator.js +11 -19
- package/dist/row-level-security-migrator.js.map +1 -1
- package/dist/row-level-security.d.ts +1 -14
- package/dist/row-level-security.js +19 -36
- package/dist/row-level-security.js.map +1 -1
- package/dist/utils/assert-identifier.d.ts +0 -1
- package/dist/utils/assert-identifier.js +1 -5
- package/dist/utils/assert-identifier.js.map +1 -1
- package/dist/utils/assert-snake-case.d.ts +0 -1
- package/dist/utils/assert-snake-case.js +1 -5
- package/dist/utils/assert-snake-case.js.map +1 -1
- package/dist/utils/create-policy-bootstrap-sql-statements.d.ts +0 -1
- package/dist/utils/create-policy-bootstrap-sql-statements.js +1 -5
- package/dist/utils/create-policy-bootstrap-sql-statements.js.map +1 -1
- package/dist/utils/create-policy-down-sql.d.ts +1 -2
- package/dist/utils/create-policy-down-sql.js +6 -10
- package/dist/utils/create-policy-down-sql.js.map +1 -1
- package/dist/utils/create-policy-privilege-down-sql-statements.d.ts +1 -7
- package/dist/utils/create-policy-privilege-down-sql-statements.js +20 -29
- package/dist/utils/create-policy-privilege-down-sql-statements.js.map +1 -1
- package/dist/utils/create-policy-role-sql-statements.d.ts +0 -3
- package/dist/utils/create-policy-role-sql-statements.js +8 -17
- package/dist/utils/create-policy-role-sql-statements.js.map +1 -1
- package/dist/utils/create-policy-up-sql-statements.d.ts +1 -2
- package/dist/utils/create-policy-up-sql-statements.js +27 -31
- package/dist/utils/create-policy-up-sql-statements.js.map +1 -1
- package/dist/utils/create-row-level-security-transaction-setup.d.ts +0 -9
- package/dist/utils/create-row-level-security-transaction-setup.js +16 -20
- package/dist/utils/create-row-level-security-transaction-setup.js.map +1 -1
- package/dist/utils/escape-sql-literal.d.ts +0 -1
- package/dist/utils/escape-sql-literal.js +1 -5
- package/dist/utils/escape-sql-literal.js.map +1 -1
- package/dist/utils/index.d.ts +12 -12
- package/dist/utils/index.js +11 -27
- package/dist/utils/index.js.map +1 -1
- package/dist/utils/is-postgres-keyword-requiring-quote.js +1 -6
- package/dist/utils/is-postgres-keyword-requiring-quote.js.map +1 -1
- package/dist/utils/normalize-postgres-type-alias.util.js +1 -4
- package/dist/utils/normalize-postgres-type-alias.util.js.map +1 -1
- package/dist/utils/quote-identifier.d.ts +0 -1
- package/dist/utils/quote-identifier.js +3 -7
- package/dist/utils/quote-identifier.js.map +1 -1
- package/dist/utils/quote-qualified-identifier.d.ts +0 -1
- package/dist/utils/quote-qualified-identifier.js +3 -7
- package/dist/utils/quote-qualified-identifier.js.map +1 -1
- package/dist/utils/row-level-security-context-builder.d.ts +1 -5
- package/dist/utils/row-level-security-context-builder.js +9 -19
- package/dist/utils/row-level-security-context-builder.js.map +1 -1
- package/dist/utils/row-level-security-context-builder.types.d.ts +0 -5
- package/dist/utils/row-level-security-context-builder.types.js +1 -2
- package/package.json +44 -32
- package/dist/decorators/policy.decorator.spec.d.ts +0 -1
- package/dist/decorators/policy.decorator.spec.js +0 -550
- package/dist/decorators/policy.decorator.spec.js.map +0 -1
- package/dist/index.spec.d.ts +0 -1
- package/dist/index.spec.js +0 -64
- package/dist/index.spec.js.map +0 -1
- package/dist/row-level-security-driver.spec.d.ts +0 -1
- package/dist/row-level-security-driver.spec.js +0 -267
- package/dist/row-level-security-driver.spec.js.map +0 -1
- package/dist/row-level-security-migration-generator.spec.d.ts +0 -1
- package/dist/row-level-security-migration-generator.spec.js +0 -1135
- package/dist/row-level-security-migration-generator.spec.js.map +0 -1
- package/dist/row-level-security-migration.spec.d.ts +0 -1
- package/dist/row-level-security-migration.spec.js +0 -32
- package/dist/row-level-security-migration.spec.js.map +0 -1
- package/dist/row-level-security.spec.d.ts +0 -1
- package/dist/row-level-security.spec.js +0 -52
- package/dist/row-level-security.spec.js.map +0 -1
- package/dist/tsconfig.build.tsbuildinfo +0 -1
- package/dist/utils/normalize-postgres-type-alias.spec.d.ts +0 -1
- package/dist/utils/normalize-postgres-type-alias.spec.js +0 -28
- package/dist/utils/normalize-postgres-type-alias.spec.js.map +0 -1
- package/dist/utils/policy-migration-sql.spec.d.ts +0 -1
- package/dist/utils/policy-migration-sql.spec.js +0 -273
- package/dist/utils/policy-migration-sql.spec.js.map +0 -1
- package/dist/utils/row-level-security-context-builder.spec.d.ts +0 -1
- package/dist/utils/row-level-security-context-builder.spec.js +0 -40
- package/dist/utils/row-level-security-context-builder.spec.js.map +0 -1
|
@@ -1,26 +1,22 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
const row_level_security_context_builder_1 = require("./row-level-security-context-builder");
|
|
9
|
-
/** Creates transaction-local SQL for the current row level security context. */
|
|
10
|
-
function createRowLevelSecurityTransactionSetup() {
|
|
11
|
-
if (!request_context_1.RequestContext.isActive()) {
|
|
1
|
+
import { RequestContext } from "@nest-boot/request-context";
|
|
2
|
+
import { RowLevelSecurityRole } from "../enums/row-level-security-role.enum.js";
|
|
3
|
+
import { RowLevelSecurity, RowLevelSecurityMode, } from "../row-level-security.js";
|
|
4
|
+
import { assertSnakeCase } from "./assert-snake-case.js";
|
|
5
|
+
import { RowLevelSecurityContextBuilder } from "./row-level-security-context-builder.js";
|
|
6
|
+
export function createRowLevelSecurityTransactionSetup() {
|
|
7
|
+
if (!RequestContext.isActive()) {
|
|
12
8
|
return;
|
|
13
9
|
}
|
|
14
|
-
const builder = new
|
|
15
|
-
const mode =
|
|
16
|
-
const contextEntries =
|
|
17
|
-
const role =
|
|
18
|
-
if (mode ===
|
|
10
|
+
const builder = new RowLevelSecurityContextBuilder();
|
|
11
|
+
const mode = RowLevelSecurity.getMode();
|
|
12
|
+
const contextEntries = RowLevelSecurity.entries();
|
|
13
|
+
const role = RowLevelSecurity.getRole();
|
|
14
|
+
if (mode === RowLevelSecurityMode.DISABLED) {
|
|
19
15
|
return {
|
|
20
16
|
action: "clear",
|
|
21
17
|
};
|
|
22
18
|
}
|
|
23
|
-
if (mode ===
|
|
19
|
+
if (mode === RowLevelSecurityMode.AUTO &&
|
|
24
20
|
!role &&
|
|
25
21
|
contextEntries.length === 0) {
|
|
26
22
|
return {
|
|
@@ -28,10 +24,10 @@ function createRowLevelSecurityTransactionSetup() {
|
|
|
28
24
|
};
|
|
29
25
|
}
|
|
30
26
|
appendContext(builder, contextEntries);
|
|
31
|
-
const databaseRole = role ??
|
|
32
|
-
|
|
27
|
+
const databaseRole = role ?? RowLevelSecurityRole.ANONYMOUS;
|
|
28
|
+
assertSnakeCase(databaseRole, "Row level security database role");
|
|
33
29
|
const contextSql = builder.entries().length > 0 ? builder.toSQL() : "";
|
|
34
|
-
const sql = [
|
|
30
|
+
const sql = [`SET LOCAL ROLE ${databaseRole};`, contextSql]
|
|
35
31
|
.filter(Boolean)
|
|
36
32
|
.join("\n");
|
|
37
33
|
const signature = JSON.stringify({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create-row-level-security-transaction-setup.js","sourceRoot":"","sources":["../../src/utils/create-row-level-security-transaction-setup.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"create-row-level-security-transaction-setup.js","sourceRoot":"","sources":["../../src/utils/create-row-level-security-transaction-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AA2BzF,MAAM,UAAU,sCAAsC;IAGpD,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,8BAA8B,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC;IAExC,IAAI,IAAI,KAAK,oBAAoB,CAAC,QAAQ,EAAE,CAAC;QAC3C,OAAO;YACL,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;IAED,IACE,IAAI,KAAK,oBAAoB,CAAC,IAAI;QAClC,CAAC,IAAI;QACL,cAAc,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,IAAI,oBAAoB,CAAC,SAAS,CAAC;IAC5D,eAAe,CAAC,YAAY,EAAE,kCAAkC,CAAC,CAAC;IAElE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,GAAG,GAAG,CAAW,kBAAkB,YAAY,GAAG,EAAE,UAAU,CAAC;SAClE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;QAC1B,IAAI,EAAE,YAAY;KACnB,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;QAClD,SAAS;QACT,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAuC,EACvC,OAEa;IAEb,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}
|
|
@@ -1,8 +1,4 @@
|
|
|
1
|
-
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.escapeSqlLiteral = escapeSqlLiteral;
|
|
4
|
-
/** Escapes a string for use inside a single-quoted SQL literal. */
|
|
5
|
-
function escapeSqlLiteral(value) {
|
|
1
|
+
export function escapeSqlLiteral(value) {
|
|
6
2
|
return value.replace(/'/g, "''");
|
|
7
3
|
}
|
|
8
4
|
//# sourceMappingURL=escape-sql-literal.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"escape-sql-literal.js","sourceRoot":"","sources":["../../src/utils/escape-sql-literal.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"escape-sql-literal.js","sourceRoot":"","sources":["../../src/utils/escape-sql-literal.ts"],"names":[],"mappings":"AACA,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC"}
|
package/dist/utils/index.d.ts
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
|
-
export * from "./assert-identifier";
|
|
2
|
-
export * from "./assert-snake-case";
|
|
3
|
-
export * from "./create-policy-bootstrap-sql-statements";
|
|
4
|
-
export * from "./create-policy-down-sql";
|
|
5
|
-
export * from "./create-policy-privilege-down-sql-statements";
|
|
6
|
-
export * from "./create-policy-role-sql-statements";
|
|
7
|
-
export * from "./create-policy-up-sql-statements";
|
|
8
|
-
export * from "./escape-sql-literal";
|
|
9
|
-
export * from "./quote-identifier";
|
|
10
|
-
export * from "./quote-qualified-identifier";
|
|
11
|
-
export * from "./row-level-security-context-builder";
|
|
12
|
-
export type * from "./row-level-security-context-builder.types";
|
|
1
|
+
export * from "./assert-identifier.js";
|
|
2
|
+
export * from "./assert-snake-case.js";
|
|
3
|
+
export * from "./create-policy-bootstrap-sql-statements.js";
|
|
4
|
+
export * from "./create-policy-down-sql.js";
|
|
5
|
+
export * from "./create-policy-privilege-down-sql-statements.js";
|
|
6
|
+
export * from "./create-policy-role-sql-statements.js";
|
|
7
|
+
export * from "./create-policy-up-sql-statements.js";
|
|
8
|
+
export * from "./escape-sql-literal.js";
|
|
9
|
+
export * from "./quote-identifier.js";
|
|
10
|
+
export * from "./quote-qualified-identifier.js";
|
|
11
|
+
export * from "./row-level-security-context-builder.js";
|
|
12
|
+
export type * from "./row-level-security-context-builder.types.js";
|
package/dist/utils/index.js
CHANGED
|
@@ -1,28 +1,12 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
}));
|
|
13
|
-
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
-
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
-
};
|
|
16
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
-
__exportStar(require("./assert-identifier"), exports);
|
|
18
|
-
__exportStar(require("./assert-snake-case"), exports);
|
|
19
|
-
__exportStar(require("./create-policy-bootstrap-sql-statements"), exports);
|
|
20
|
-
__exportStar(require("./create-policy-down-sql"), exports);
|
|
21
|
-
__exportStar(require("./create-policy-privilege-down-sql-statements"), exports);
|
|
22
|
-
__exportStar(require("./create-policy-role-sql-statements"), exports);
|
|
23
|
-
__exportStar(require("./create-policy-up-sql-statements"), exports);
|
|
24
|
-
__exportStar(require("./escape-sql-literal"), exports);
|
|
25
|
-
__exportStar(require("./quote-identifier"), exports);
|
|
26
|
-
__exportStar(require("./quote-qualified-identifier"), exports);
|
|
27
|
-
__exportStar(require("./row-level-security-context-builder"), exports);
|
|
1
|
+
export * from "./assert-identifier.js";
|
|
2
|
+
export * from "./assert-snake-case.js";
|
|
3
|
+
export * from "./create-policy-bootstrap-sql-statements.js";
|
|
4
|
+
export * from "./create-policy-down-sql.js";
|
|
5
|
+
export * from "./create-policy-privilege-down-sql-statements.js";
|
|
6
|
+
export * from "./create-policy-role-sql-statements.js";
|
|
7
|
+
export * from "./create-policy-up-sql-statements.js";
|
|
8
|
+
export * from "./escape-sql-literal.js";
|
|
9
|
+
export * from "./quote-identifier.js";
|
|
10
|
+
export * from "./quote-qualified-identifier.js";
|
|
11
|
+
export * from "./row-level-security-context-builder.js";
|
|
28
12
|
//# sourceMappingURL=index.js.map
|
package/dist/utils/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kDAAkD,CAAC;AACjE,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yCAAyC,CAAC"}
|
|
@@ -1,8 +1,3 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.isPostgresKeywordRequiringQuote = isPostgresKeywordRequiringQuote;
|
|
4
|
-
// PostgreSQL keywords where quote_ident(keyword) emits a quoted identifier.
|
|
5
|
-
// Sourced from pg_get_keywords() entries with catcode <> 'U'.
|
|
6
1
|
const postgresKeywordsRequiringQuote = new Set([
|
|
7
2
|
"all",
|
|
8
3
|
"analyse",
|
|
@@ -169,7 +164,7 @@ const postgresKeywordsRequiringQuote = new Set([
|
|
|
169
164
|
"xmlserialize",
|
|
170
165
|
"xmltable",
|
|
171
166
|
]);
|
|
172
|
-
function isPostgresKeywordRequiringQuote(identifier) {
|
|
167
|
+
export function isPostgresKeywordRequiringQuote(identifier) {
|
|
173
168
|
return postgresKeywordsRequiringQuote.has(identifier.toLowerCase());
|
|
174
169
|
}
|
|
175
170
|
//# sourceMappingURL=is-postgres-keyword-requiring-quote.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"is-postgres-keyword-requiring-quote.js","sourceRoot":"","sources":["../../src/utils/is-postgres-keyword-requiring-quote.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"is-postgres-keyword-requiring-quote.js","sourceRoot":"","sources":["../../src/utils/is-postgres-keyword-requiring-quote.ts"],"names":[],"mappings":"AAEA,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IAC7C,KAAK;IACL,SAAS;IACT,SAAS;IACT,KAAK;IACL,KAAK;IACL,OAAO;IACP,IAAI;IACJ,KAAK;IACL,YAAY;IACZ,eAAe;IACf,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,SAAS;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,WAAW;IACX,OAAO;IACP,UAAU;IACV,SAAS;IACT,WAAW;IACX,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,mBAAmB;IACnB,cAAc;IACd,KAAK;IACL,SAAS;IACT,SAAS;IACT,YAAY;IACZ,MAAM;IACN,UAAU;IACV,IAAI;IACJ,MAAM;IACN,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,KAAK;IACL,SAAS;IACT,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,IAAI;IACJ,WAAW;IACX,OAAO;IACP,OAAO;IACP,KAAK;IACL,SAAS;IACT,WAAW;IACX,UAAU;IACV,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,MAAM;IACN,YAAY;IACZ,eAAe;IACf,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,WAAW;IACX,gBAAgB;IAChB,cAAc;IACd,UAAU;IACV,SAAS;IACT,OAAO;IACP,MAAM;IACN,WAAW;IACX,KAAK;IACL,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,OAAO;IACP,KAAK;IACL,OAAO;IACP,UAAU;IACV,SAAS;IACT,SAAS;IACT,UAAU;IACV,WAAW;IACX,SAAS;IACT,MAAM;IACN,YAAY;IACZ,WAAW;IACX,OAAO;IACP,KAAK;IACL,QAAQ;IACR,cAAc;IACd,OAAO;IACP,SAAS;IACT,UAAU;IACV,MAAM;IACN,WAAW;IACX,WAAW;IACX,aAAa;IACb,OAAO;IACP,aAAa;IACb,MAAM;IACN,MAAM;IACN,WAAW;IACX,IAAI;IACJ,UAAU;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,eAAe;IACf,WAAW;IACX,YAAY;IACZ,WAAW;IACX,WAAW;IACX,eAAe;IACf,UAAU;IACV,OAAO;IACP,SAAS;IACT,cAAc;IACd,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,UAAU,+BAA+B,CAAC,UAAkB;IAChE,OAAO,8BAA8B,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC"}
|
|
@@ -1,7 +1,4 @@
|
|
|
1
|
-
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.normalizePostgresTypeAlias = normalizePostgresTypeAlias;
|
|
4
|
-
function normalizePostgresTypeAlias(postgresType) {
|
|
1
|
+
export function normalizePostgresTypeAlias(postgresType) {
|
|
5
2
|
const normalized = postgresType.trim().toLowerCase().replace(/\s+/g, " ");
|
|
6
3
|
const baseType = normalized.replace(/\s*\([^)]*\)\s*$/, "");
|
|
7
4
|
switch (baseType) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"normalize-postgres-type-alias.util.js","sourceRoot":"","sources":["../../src/utils/normalize-postgres-type-alias.util.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"normalize-postgres-type-alias.util.js","sourceRoot":"","sources":["../../src/utils/normalize-postgres-type-alias.util.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,0BAA0B,CAAC,YAAoB;IAC7D,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAE5D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ,CAAC;QACd,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC;QAC5B,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,SAAS,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,UAAU,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,qBAAqB,CAAC;QAC/B,KAAK,aAAa;YAChB,OAAO,0BAA0B,CAAC;QACpC,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC;QACvB,KAAK,SAAS;YACZ,OAAO,mBAAmB,CAAC;QAC7B;YACE,OAAO,YAAY,CAAC;IACxB,CAAC;AACH,CAAC"}
|
|
@@ -1,10 +1,6 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
const assert_identifier_1 = require("./assert-identifier");
|
|
5
|
-
/** Quotes a validated PostgreSQL identifier. */
|
|
6
|
-
function quoteIdentifier(identifier) {
|
|
7
|
-
(0, assert_identifier_1.assertIdentifier)(identifier);
|
|
1
|
+
import { assertIdentifier } from "./assert-identifier.js";
|
|
2
|
+
export function quoteIdentifier(identifier) {
|
|
3
|
+
assertIdentifier(identifier);
|
|
8
4
|
return `"${identifier}"`;
|
|
9
5
|
}
|
|
10
6
|
//# sourceMappingURL=quote-identifier.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"quote-identifier.js","sourceRoot":"","sources":["../../src/utils/quote-identifier.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"quote-identifier.js","sourceRoot":"","sources":["../../src/utils/quote-identifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAE7B,OAAO,IAAI,UAAU,GAAG,CAAC;AAC3B,CAAC"}
|
|
@@ -1,9 +1,5 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
const quote_identifier_1 = require("./quote-identifier");
|
|
5
|
-
/** Quotes a schema-qualified PostgreSQL table identifier. */
|
|
6
|
-
function quoteQualifiedIdentifier(schemaName, tableName) {
|
|
7
|
-
return `${(0, quote_identifier_1.quoteIdentifier)(schemaName)}.${(0, quote_identifier_1.quoteIdentifier)(tableName)}`;
|
|
1
|
+
import { quoteIdentifier } from "./quote-identifier.js";
|
|
2
|
+
export function quoteQualifiedIdentifier(schemaName, tableName) {
|
|
3
|
+
return `${quoteIdentifier(schemaName)}.${quoteIdentifier(tableName)}`;
|
|
8
4
|
}
|
|
9
5
|
//# sourceMappingURL=quote-qualified-identifier.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"quote-qualified-identifier.js","sourceRoot":"","sources":["../../src/utils/quote-qualified-identifier.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"quote-qualified-identifier.js","sourceRoot":"","sources":["../../src/utils/quote-qualified-identifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,UAAU,wBAAwB,CACtC,UAAkB,EAClB,SAAiB;IAEjB,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;AACxE,CAAC"}
|
|
@@ -1,12 +1,8 @@
|
|
|
1
|
-
import { RowLevelSecurityContextValue, SnakeCase } from "./row-level-security-context-builder.types";
|
|
2
|
-
/** Builds SQL that writes RLS context values into PostgreSQL transaction settings. */
|
|
1
|
+
import { RowLevelSecurityContextValue, SnakeCase } from "./row-level-security-context-builder.types.js";
|
|
3
2
|
export declare class RowLevelSecurityContextBuilder {
|
|
4
3
|
private readonly ctx;
|
|
5
4
|
private readonly namespace;
|
|
6
|
-
/** Adds a context key and value, ignoring nullish values. */
|
|
7
5
|
set<S extends string>(key: SnakeCase<S>, value: RowLevelSecurityContextValue): this;
|
|
8
|
-
/** Returns the context entries that will be emitted to SQL. */
|
|
9
6
|
entries(): [string, string][];
|
|
10
|
-
/** Renders a `SELECT set_config(...)` statement for the collected entries. */
|
|
11
7
|
toSQL(): string;
|
|
12
8
|
}
|
|
@@ -1,40 +1,30 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
/** Builds SQL that writes RLS context values into PostgreSQL transaction settings. */
|
|
7
|
-
class RowLevelSecurityContextBuilder {
|
|
8
|
-
constructor() {
|
|
9
|
-
this.ctx = new Map();
|
|
10
|
-
this.namespace = "app";
|
|
11
|
-
}
|
|
12
|
-
/** Adds a context key and value, ignoring nullish values. */
|
|
1
|
+
import { assertSnakeCase } from "./assert-snake-case.js";
|
|
2
|
+
import { escapeSqlLiteral } from "./escape-sql-literal.js";
|
|
3
|
+
export class RowLevelSecurityContextBuilder {
|
|
4
|
+
ctx = new Map();
|
|
5
|
+
namespace = "app";
|
|
13
6
|
set(key, value) {
|
|
14
|
-
|
|
7
|
+
assertSnakeCase(key, "Row level security context key");
|
|
15
8
|
if (value === null || value === undefined) {
|
|
16
9
|
return this;
|
|
17
10
|
}
|
|
18
11
|
this.ctx.set(key, String(value));
|
|
19
12
|
return this;
|
|
20
13
|
}
|
|
21
|
-
/** Returns the context entries that will be emitted to SQL. */
|
|
22
14
|
entries() {
|
|
23
15
|
return Array.from(this.ctx.entries());
|
|
24
16
|
}
|
|
25
|
-
/** Renders a `SELECT set_config(...)` statement for the collected entries. */
|
|
26
17
|
toSQL() {
|
|
27
18
|
const statements = this.entries()
|
|
28
19
|
.map(([key, value]) => {
|
|
29
|
-
const escapedValue =
|
|
30
|
-
return
|
|
20
|
+
const escapedValue = escapeSqlLiteral(value);
|
|
21
|
+
return `set_config('${this.namespace}.${key}', '${escapedValue}', true)`;
|
|
31
22
|
})
|
|
32
23
|
.join(",");
|
|
33
24
|
if (!statements) {
|
|
34
25
|
return "SELECT 1;";
|
|
35
26
|
}
|
|
36
|
-
return
|
|
27
|
+
return `SELECT ${statements};`;
|
|
37
28
|
}
|
|
38
29
|
}
|
|
39
|
-
exports.RowLevelSecurityContextBuilder = RowLevelSecurityContextBuilder;
|
|
40
30
|
//# sourceMappingURL=row-level-security-context-builder.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"row-level-security-context-builder.js","sourceRoot":"","sources":["../../src/utils/row-level-security-context-builder.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"row-level-security-context-builder.js","sourceRoot":"","sources":["../../src/utils/row-level-security-context-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAO3D,MAAM,OAAO,8BAA8B;IACxB,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChC,SAAS,GAAG,KAAK,CAAC;IAGnC,GAAG,CACD,GAAiB,EACjB,KAAmC;QAEnC,eAAe,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,OAAO;QACL,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAGD,KAAK;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE;aAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACpB,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAiB,eAAe,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO,YAAY,UAAU,CAAC;QACrF,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,CAAC;QAEb,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAiB,UAAU,UAAU,GAAG,CAAC;IAC3C,CAAC;CACF"}
|
|
@@ -1,10 +1,5 @@
|
|
|
1
|
-
/** Lowercase letters allowed in snake_case context keys. */
|
|
2
1
|
export type LowercaseLetter = "a" | "b" | "c" | "d" | "e" | "f" | "g" | "h" | "i" | "j" | "k" | "l" | "m" | "n" | "o" | "p" | "q" | "r" | "s" | "t" | "u" | "v" | "w" | "x" | "y" | "z";
|
|
3
|
-
/** Characters allowed in snake_case context keys. */
|
|
4
2
|
export type ValidChar = LowercaseLetter | "_";
|
|
5
|
-
/** Compile-time predicate that checks whether a string contains only valid characters. */
|
|
6
3
|
export type IsValidSnakeCase<S extends string> = S extends `${infer First}${infer Rest}` ? First extends ValidChar ? IsValidSnakeCase<Rest> : false : true;
|
|
7
|
-
/** Compile-time snake_case constraint used by RLS context helpers. */
|
|
8
4
|
export type SnakeCase<S extends string> = S extends "" ? never : S extends `_${string}` | `${string}_` ? never : S extends `${string}__${string}` ? never : IsValidSnakeCase<S> extends true ? S : never;
|
|
9
|
-
/** Values that can be stored in RLS context and converted to PostgreSQL settings. */
|
|
10
5
|
export type RowLevelSecurityContextValue = string | number | boolean | null | undefined;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@nest-boot/row-level-security",
|
|
3
|
-
"version": "
|
|
3
|
+
"version": "8.0.0-beta.1",
|
|
4
4
|
"repository": {
|
|
5
5
|
"type": "git",
|
|
6
6
|
"url": "https://github.com/nest-boot/nest-boot.git",
|
|
@@ -14,8 +14,8 @@
|
|
|
14
14
|
},
|
|
15
15
|
"homepage": "",
|
|
16
16
|
"license": "MIT",
|
|
17
|
-
"main": "dist/index.js",
|
|
18
|
-
"types": "dist/index.d.ts",
|
|
17
|
+
"main": "./dist/index.js",
|
|
18
|
+
"types": "./dist/index.d.ts",
|
|
19
19
|
"directories": {
|
|
20
20
|
"lib": "dist"
|
|
21
21
|
},
|
|
@@ -23,34 +23,37 @@
|
|
|
23
23
|
"dist"
|
|
24
24
|
],
|
|
25
25
|
"peerDependencies": {
|
|
26
|
-
"@mikro-orm/migrations": "^
|
|
27
|
-
"@mikro-orm/postgresql": "^
|
|
28
|
-
"@
|
|
29
|
-
"reflect-metadata": "^0.2.2"
|
|
26
|
+
"@mikro-orm/migrations": "^7.0.0",
|
|
27
|
+
"@mikro-orm/postgresql": "^7.0.0",
|
|
28
|
+
"@mikro-orm/sql": "^7.0.0",
|
|
29
|
+
"reflect-metadata": "^0.2.2",
|
|
30
|
+
"@nest-boot/request-context": "^8.0.0-beta.1"
|
|
30
31
|
},
|
|
31
32
|
"devDependencies": {
|
|
32
|
-
"@mikro-orm/core": "
|
|
33
|
-
"@mikro-orm/
|
|
34
|
-
"@mikro-orm/
|
|
35
|
-
"@mikro-orm/
|
|
36
|
-
"@mikro-orm/
|
|
37
|
-
"@
|
|
38
|
-
"@
|
|
39
|
-
"@nestjs/
|
|
40
|
-
"@
|
|
41
|
-
"@
|
|
33
|
+
"@mikro-orm/core": "7.1.14",
|
|
34
|
+
"@mikro-orm/decorators": "7.1.14",
|
|
35
|
+
"@mikro-orm/migrations": "7.1.14",
|
|
36
|
+
"@mikro-orm/nestjs": "^7.0.2",
|
|
37
|
+
"@mikro-orm/postgresql": "7.1.14",
|
|
38
|
+
"@mikro-orm/reflection": "7.1.14",
|
|
39
|
+
"@mikro-orm/sql": "7.1.14",
|
|
40
|
+
"@nestjs/common": "^12.0.1",
|
|
41
|
+
"@nestjs/core": "^12.0.1",
|
|
42
|
+
"@nestjs/testing": "^12.0.1",
|
|
43
|
+
"@types/node": "^26.0.0",
|
|
44
|
+
"@vitest/coverage-v8": "^4.1.11",
|
|
42
45
|
"dotenv": "^17.2.3",
|
|
43
46
|
"eslint": "^9.39.3",
|
|
44
|
-
"jest": "^29.7.0",
|
|
45
47
|
"reflect-metadata": "^0.2.2",
|
|
46
48
|
"rxjs": "^7.8.2",
|
|
47
|
-
"
|
|
48
|
-
"
|
|
49
|
-
"
|
|
50
|
-
"@nest-boot/eslint-
|
|
51
|
-
"@nest-boot/
|
|
52
|
-
"@nest-boot/
|
|
53
|
-
"@nest-boot/request-context": "^
|
|
49
|
+
"typescript": "^6.0.3",
|
|
50
|
+
"vite-tsconfig-paths": "^5.1.4",
|
|
51
|
+
"vitest": "^4.1.11",
|
|
52
|
+
"@nest-boot/eslint-config": "^8.0.0-beta.1",
|
|
53
|
+
"@nest-boot/eslint-plugin": "^8.0.0-beta.1",
|
|
54
|
+
"@nest-boot/mikro-orm": "^8.0.0-beta.1",
|
|
55
|
+
"@nest-boot/request-context": "^8.0.0-beta.1",
|
|
56
|
+
"@nest-boot/tsconfig": "^8.0.0-beta.1"
|
|
54
57
|
},
|
|
55
58
|
"publishConfig": {
|
|
56
59
|
"access": "public"
|
|
@@ -61,21 +64,30 @@
|
|
|
61
64
|
"eslint --fix"
|
|
62
65
|
]
|
|
63
66
|
},
|
|
64
|
-
"volta": {
|
|
65
|
-
"extends": "../../package.json"
|
|
66
|
-
},
|
|
67
67
|
"dependencies": {
|
|
68
68
|
"pgsql-ast-parser": "^12.0.2"
|
|
69
69
|
},
|
|
70
|
+
"type": "module",
|
|
71
|
+
"engines": {
|
|
72
|
+
"node": ">=26.0.0"
|
|
73
|
+
},
|
|
74
|
+
"exports": {
|
|
75
|
+
".": {
|
|
76
|
+
"types": "./dist/index.d.ts",
|
|
77
|
+
"import": "./dist/index.js"
|
|
78
|
+
},
|
|
79
|
+
"./package.json": "./package.json"
|
|
80
|
+
},
|
|
70
81
|
"scripts": {
|
|
71
82
|
"build": "tsc -p tsconfig.build.json",
|
|
72
83
|
"clean": "rm -rf .nx && rm -rf node_modules && rm -rf dist",
|
|
73
84
|
"dev": "tsc -w -p tsconfig.build.json",
|
|
74
85
|
"lint": "eslint \"{src,test}/**/*.ts\"",
|
|
75
86
|
"lint:fix": "eslint \"{src,test}/**/*.ts\" --fix",
|
|
76
|
-
"test": "
|
|
77
|
-
"test:cov": "
|
|
78
|
-
"test:watch": "
|
|
79
|
-
"test:debug": "
|
|
87
|
+
"test": "vitest run",
|
|
88
|
+
"test:cov": "vitest run --coverage",
|
|
89
|
+
"test:watch": "vitest",
|
|
90
|
+
"test:debug": "vitest --inspect-brk --no-file-parallelism",
|
|
91
|
+
"test:e2e": "vitest run --config ./vitest.config.e2e.ts"
|
|
80
92
|
}
|
|
81
93
|
}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export {};
|