@nestjs-kitchen/authz 2.0.2 → 2.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/authz.provider.d.ts +1 -3
- package/dist/authz.provider.js +29 -48
- package/dist/constants.d.ts +6 -8
- package/dist/constants.js +13 -46
- package/dist/errors.d.ts +3 -5
- package/dist/errors.js +35 -60
- package/dist/index.d.ts +5 -21
- package/dist/index.js +16 -45
- package/dist/jwt/extract-jwt.d.ts +4 -7
- package/dist/jwt/extract-jwt.js +138 -158
- package/dist/jwt/index.d.ts +2 -16
- package/dist/jwt/index.js +7 -30
- package/dist/jwt/jwt-authz-als.middleware.d.ts +6 -16
- package/dist/jwt/jwt-authz-als.middleware.js +44 -81
- package/dist/jwt/jwt-authz.guard.d.ts +8 -21
- package/dist/jwt/jwt-authz.guard.js +130 -175
- package/dist/jwt/jwt-authz.interface.d.ts +16 -25
- package/dist/jwt/jwt-authz.interface.js +69 -92
- package/dist/jwt/jwt-authz.module.d.ts +19 -31
- package/dist/jwt/jwt-authz.module.js +250 -299
- package/dist/jwt/jwt-authz.service.d.ts +6 -17
- package/dist/jwt/jwt-authz.service.js +116 -162
- package/dist/jwt/jwt-authz.strategy.d.ts +5 -17
- package/dist/jwt/jwt-authz.strategy.js +132 -192
- package/dist/session/index.d.ts +1 -12
- package/dist/session/index.js +5 -27
- package/dist/session/session-authz-als.middleware.d.ts +5 -12
- package/dist/session/session-authz-als.middleware.js +98 -130
- package/dist/session/session-authz.guard.d.ts +6 -15
- package/dist/session/session-authz.guard.js +98 -135
- package/dist/session/session-authz.interface.d.ts +5 -12
- package/dist/session/session-authz.interface.js +19 -42
- package/dist/session/session-authz.module.d.ts +18 -26
- package/dist/session/session-authz.module.js +241 -290
- package/dist/session/session-authz.service.d.ts +5 -13
- package/dist/session/session-authz.service.js +69 -105
- package/dist/session/session-authz.strategy.d.ts +4 -12
- package/dist/session/session-authz.strategy.js +68 -105
- package/dist/user.decorator.d.ts +3 -6
- package/dist/user.decorator.js +26 -35
- package/dist/utils/cookie-parsers.d.ts +3 -6
- package/dist/utils/cookie-parsers.js +66 -74
- package/dist/utils/create-authz-decorator-factory.d.ts +3 -9
- package/dist/utils/create-authz-decorator-factory.js +32 -54
- package/dist/utils/create-set-cookie-fn.d.ts +3 -9
- package/dist/utils/create-set-cookie-fn.js +23 -45
- package/dist/utils/generics.d.ts +4 -6
- package/dist/utils/generics.js +37 -63
- package/dist/utils/get-allow-anonymous.d.ts +2 -9
- package/dist/utils/get-allow-anonymous.js +7 -29
- package/dist/utils/get-als-store.d.ts +2 -5
- package/dist/utils/get-als-store.js +11 -34
- package/dist/utils/get-context-authz-meta-params-list.d.ts +2 -9
- package/dist/utils/get-context-authz-meta-params-list.js +16 -35
- package/dist/utils/get-passport-property.d.ts +1 -3
- package/dist/utils/get-passport-property.js +8 -30
- package/dist/utils/index.d.ts +11 -16
- package/dist/utils/index.js +26 -40
- package/dist/utils/merge-dynamic-module-configs.d.ts +2 -5
- package/dist/utils/merge-dynamic-module-configs.js +14 -49
- package/dist/utils/msgpackrs.d.ts +2 -4
- package/dist/utils/msgpackrs.js +11 -35
- package/dist/utils/types.d.ts +23 -26
- package/dist/utils/types.js +2 -15
- package/package.json +7 -7
|
@@ -1,134 +1,102 @@
|
|
|
1
|
-
|
|
2
|
-
var
|
|
3
|
-
var
|
|
4
|
-
|
|
5
|
-
var
|
|
6
|
-
|
|
7
|
-
var __export = (target, all) => {
|
|
8
|
-
for (var name in all)
|
|
9
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
10
7
|
};
|
|
11
|
-
var
|
|
12
|
-
|
|
13
|
-
for (let key of __getOwnPropNames(from))
|
|
14
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
15
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
16
|
-
}
|
|
17
|
-
return to;
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
18
10
|
};
|
|
19
|
-
var
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
40
|
-
}
|
|
41
|
-
__name(_ts_metadata, "_ts_metadata");
|
|
42
|
-
function _ts_param(paramIndex, decorator) {
|
|
43
|
-
return function(target, key) {
|
|
44
|
-
decorator(target, key, paramIndex);
|
|
45
|
-
};
|
|
46
|
-
}
|
|
47
|
-
__name(_ts_param, "_ts_param");
|
|
48
|
-
const createSessionAuthzAlsMiddleware = /* @__PURE__ */ __name(([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]) => {
|
|
49
|
-
var _a;
|
|
50
|
-
let SessionAuthzAlsMiddleware = (_a = class {
|
|
51
|
-
constructor(als, sessionAuthzOptions) {
|
|
52
|
-
__publicField(this, "als");
|
|
53
|
-
__publicField(this, "sessionAuthzOptions");
|
|
54
|
-
this.als = als;
|
|
55
|
-
this.sessionAuthzOptions = sessionAuthzOptions;
|
|
56
|
-
}
|
|
57
|
-
use(req, res, next) {
|
|
58
|
-
const keepSessionInfo = Boolean(this.sessionAuthzOptions.keepSessionInfo);
|
|
59
|
-
if (!req.session) {
|
|
60
|
-
return next(new import_errors.AuthzError("Login sessions require session support. Did you forget to use `express-session` middleware?"));
|
|
61
|
-
}
|
|
62
|
-
const prevSession = req.session;
|
|
63
|
-
const store = {
|
|
64
|
-
user: void 0,
|
|
65
|
-
allowAnonymous: void 0,
|
|
66
|
-
guardResult: void 0,
|
|
67
|
-
authOptions: this.sessionAuthzOptions,
|
|
68
|
-
// ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L14
|
|
69
|
-
logIn: /* @__PURE__ */ __name((user) => {
|
|
70
|
-
return new Promise((resolve, reject) => {
|
|
71
|
-
req.session.regenerate(function(err) {
|
|
72
|
-
if (err) {
|
|
73
|
-
return reject(err);
|
|
74
|
-
}
|
|
75
|
-
if (keepSessionInfo) {
|
|
76
|
-
(0, import_utils.merge)(req.session, prevSession);
|
|
77
|
-
}
|
|
78
|
-
if (!req.session[import_constants.SESSION_PASSPORT_KEY]) {
|
|
79
|
-
req.session[import_constants.SESSION_PASSPORT_KEY] = {};
|
|
80
|
-
}
|
|
81
|
-
req.session[import_constants.SESSION_PASSPORT_KEY].user = user;
|
|
82
|
-
req.session.save(function(err2) {
|
|
83
|
-
if (err2) {
|
|
84
|
-
return reject(err2);
|
|
85
|
-
}
|
|
86
|
-
resolve();
|
|
87
|
-
});
|
|
88
|
-
});
|
|
89
|
-
});
|
|
90
|
-
}, "logIn"),
|
|
91
|
-
// ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L57
|
|
92
|
-
logOut: /* @__PURE__ */ __name(() => {
|
|
93
|
-
return new Promise((resolve, reject) => {
|
|
94
|
-
if (req.session[import_constants.SESSION_PASSPORT_KEY]) {
|
|
95
|
-
delete req.session[import_constants.SESSION_PASSPORT_KEY].user;
|
|
11
|
+
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
|
+
return function (target, key) { decorator(target, key, paramIndex); }
|
|
13
|
+
};
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
exports.createSessionAuthzAlsMiddleware = void 0;
|
|
16
|
+
const node_async_hooks_1 = require("node:async_hooks");
|
|
17
|
+
const common_1 = require("@nestjs/common");
|
|
18
|
+
const constants_1 = require("../constants");
|
|
19
|
+
const errors_1 = require("../errors");
|
|
20
|
+
const utils_1 = require("../utils");
|
|
21
|
+
const createSessionAuthzAlsMiddleware = ([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]) => {
|
|
22
|
+
let SessionAuthzAlsMiddleware = class SessionAuthzAlsMiddleware {
|
|
23
|
+
constructor(als, sessionAuthzOptions) {
|
|
24
|
+
this.als = als;
|
|
25
|
+
this.sessionAuthzOptions = sessionAuthzOptions;
|
|
26
|
+
}
|
|
27
|
+
use(req, res, next) {
|
|
28
|
+
const keepSessionInfo = Boolean(this.sessionAuthzOptions.keepSessionInfo);
|
|
29
|
+
if (!req.session) {
|
|
30
|
+
return next(new errors_1.AuthzError('Login sessions require session support. Did you forget to use `express-session` middleware?'));
|
|
96
31
|
}
|
|
97
|
-
req.session
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
32
|
+
const prevSession = req.session;
|
|
33
|
+
const store = {
|
|
34
|
+
user: undefined,
|
|
35
|
+
allowAnonymous: undefined,
|
|
36
|
+
guardResult: undefined,
|
|
37
|
+
authOptions: this.sessionAuthzOptions,
|
|
38
|
+
// ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L14
|
|
39
|
+
logIn: (user) => {
|
|
40
|
+
return new Promise((resolve, reject) => {
|
|
41
|
+
req.session.regenerate(function (err) {
|
|
42
|
+
if (err) {
|
|
43
|
+
return reject(err);
|
|
44
|
+
}
|
|
45
|
+
if (keepSessionInfo) {
|
|
46
|
+
(0, utils_1.merge)(req.session, prevSession);
|
|
47
|
+
}
|
|
48
|
+
// @ts-ignore
|
|
49
|
+
if (!req.session[constants_1.SESSION_PASSPORT_KEY]) {
|
|
50
|
+
// @ts-ignore
|
|
51
|
+
req.session[constants_1.SESSION_PASSPORT_KEY] = {};
|
|
52
|
+
}
|
|
53
|
+
// @ts-ignore
|
|
54
|
+
req.session[constants_1.SESSION_PASSPORT_KEY].user = user;
|
|
55
|
+
req.session.save(function (err) {
|
|
56
|
+
if (err) {
|
|
57
|
+
return reject(err);
|
|
58
|
+
}
|
|
59
|
+
resolve();
|
|
60
|
+
});
|
|
61
|
+
});
|
|
62
|
+
});
|
|
63
|
+
},
|
|
64
|
+
// ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L57
|
|
65
|
+
logOut: () => {
|
|
66
|
+
return new Promise((resolve, reject) => {
|
|
67
|
+
// @ts-ignore
|
|
68
|
+
if (req.session[constants_1.SESSION_PASSPORT_KEY]) {
|
|
69
|
+
// @ts-ignore
|
|
70
|
+
delete req.session[constants_1.SESSION_PASSPORT_KEY].user;
|
|
71
|
+
}
|
|
72
|
+
req.session.save(function (err) {
|
|
73
|
+
if (err) {
|
|
74
|
+
return reject(err);
|
|
75
|
+
}
|
|
76
|
+
req.session.regenerate(function (err) {
|
|
77
|
+
if (err) {
|
|
78
|
+
return reject(err);
|
|
79
|
+
}
|
|
80
|
+
if (keepSessionInfo) {
|
|
81
|
+
(0, utils_1.merge)(req.session, prevSession);
|
|
82
|
+
}
|
|
83
|
+
resolve();
|
|
84
|
+
});
|
|
85
|
+
});
|
|
86
|
+
});
|
|
87
|
+
},
|
|
88
|
+
setCookie: (0, utils_1.createSetCookieFn)(req, res)
|
|
89
|
+
};
|
|
90
|
+
this.als.run(store, () => {
|
|
91
|
+
next();
|
|
110
92
|
});
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
_ts_param(0, (0, import_common.Inject)(ALS_PROVIDER)),
|
|
122
|
-
_ts_param(1, (0, import_common.Inject)(SESSION_AUTHZ_OPTIONS)),
|
|
123
|
-
_ts_metadata("design:type", Function),
|
|
124
|
-
_ts_metadata("design:paramtypes", [
|
|
125
|
-
typeof import_node_async_hooks.AsyncLocalStorage === "undefined" ? Object : import_node_async_hooks.AsyncLocalStorage,
|
|
126
|
-
typeof SessionAuthzOptions === "undefined" ? Object : SessionAuthzOptions
|
|
127
|
-
])
|
|
128
|
-
], SessionAuthzAlsMiddleware);
|
|
129
|
-
return (0, import_common.mixin)(SessionAuthzAlsMiddleware);
|
|
130
|
-
}, "createSessionAuthzAlsMiddleware");
|
|
131
|
-
// Annotate the CommonJS export names for ESM import in node:
|
|
132
|
-
0 && (module.exports = {
|
|
133
|
-
createSessionAuthzAlsMiddleware
|
|
134
|
-
});
|
|
93
|
+
}
|
|
94
|
+
};
|
|
95
|
+
SessionAuthzAlsMiddleware = __decorate([
|
|
96
|
+
__param(0, (0, common_1.Inject)(ALS_PROVIDER)),
|
|
97
|
+
__param(1, (0, common_1.Inject)(SESSION_AUTHZ_OPTIONS)),
|
|
98
|
+
__metadata("design:paramtypes", [node_async_hooks_1.AsyncLocalStorage, Object])
|
|
99
|
+
], SessionAuthzAlsMiddleware);
|
|
100
|
+
return (0, common_1.mixin)(SessionAuthzAlsMiddleware);
|
|
101
|
+
};
|
|
102
|
+
exports.createSessionAuthzAlsMiddleware = createSessionAuthzAlsMiddleware;
|
|
@@ -1,18 +1,11 @@
|
|
|
1
|
-
import * as _nestjs_common from '@nestjs/common';
|
|
2
1
|
import { ExecutionContext } from '@nestjs/common';
|
|
3
2
|
import { Reflector } from '@nestjs/core';
|
|
4
|
-
import { AsyncLocalStorage } from 'async_hooks';
|
|
5
|
-
import { AuthzProviderClass } from '../authz.provider
|
|
6
|
-
import { AuthzError } from '../errors
|
|
7
|
-
import { SessionAlsType } from './session-authz-als.middleware
|
|
8
|
-
import { SessionAuthzOptions } from './session-authz.interface
|
|
9
|
-
|
|
10
|
-
import 'express';
|
|
11
|
-
import '../utils/types.js';
|
|
12
|
-
import '@nestjs/common/interfaces';
|
|
13
|
-
import 'express-session';
|
|
14
|
-
|
|
15
|
-
declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]: [string, any, any, any, any]) => _nestjs_common.Type<Omit<{
|
|
3
|
+
import type { AsyncLocalStorage } from 'async_hooks';
|
|
4
|
+
import { AuthzProviderClass } from '../authz.provider';
|
|
5
|
+
import { type AuthzError } from '../errors';
|
|
6
|
+
import type { SessionAlsType } from './session-authz-als.middleware';
|
|
7
|
+
import type { SessionAuthzOptions } from './session-authz.interface';
|
|
8
|
+
export declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]: [string, any, any, any, any]) => import("@nestjs/common").Type<Omit<{
|
|
16
9
|
readonly reflector: Reflector;
|
|
17
10
|
readonly authzProvider: AuthzProviderClass<unknown, unknown>;
|
|
18
11
|
readonly sessionAuthzOptions: SessionAuthzOptions;
|
|
@@ -39,5 +32,3 @@ declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSI
|
|
|
39
32
|
} = any>(request: TRequest): Promise<void>;
|
|
40
33
|
getRequest(context: ExecutionContext): any;
|
|
41
34
|
}, "als" | "reflector" | "authzProvider" | "sessionAuthzOptions">>;
|
|
42
|
-
|
|
43
|
-
export { createSessionAuthzGuard };
|
|
@@ -1,139 +1,102 @@
|
|
|
1
|
-
|
|
2
|
-
var
|
|
3
|
-
var
|
|
4
|
-
|
|
5
|
-
var
|
|
6
|
-
|
|
7
|
-
var __export = (target, all) => {
|
|
8
|
-
for (var name in all)
|
|
9
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
10
7
|
};
|
|
11
|
-
var
|
|
12
|
-
|
|
13
|
-
for (let key of __getOwnPropNames(from))
|
|
14
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
15
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
16
|
-
}
|
|
17
|
-
return to;
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
18
10
|
};
|
|
19
|
-
var
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
return function(target, key) {
|
|
45
|
-
decorator(target, key, paramIndex);
|
|
46
|
-
};
|
|
47
|
-
}
|
|
48
|
-
__name(_ts_param, "_ts_param");
|
|
49
|
-
const createSessionAuthzGuard = /* @__PURE__ */ __name(([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]) => {
|
|
50
|
-
var _a;
|
|
51
|
-
let SessionAuthzGuard = (_a = class extends (0, import_passport.AuthGuard)(SESSION_STRATEGY) {
|
|
52
|
-
constructor(reflector, authzProvider, sessionAuthzOptions, als) {
|
|
53
|
-
super();
|
|
54
|
-
__publicField(this, "reflector");
|
|
55
|
-
__publicField(this, "authzProvider");
|
|
56
|
-
__publicField(this, "sessionAuthzOptions");
|
|
57
|
-
__publicField(this, "als");
|
|
58
|
-
this.reflector = reflector, this.authzProvider = authzProvider, this.sessionAuthzOptions = sessionAuthzOptions, this.als = als;
|
|
59
|
-
}
|
|
60
|
-
getAuthenticateOptions() {
|
|
61
|
-
return {
|
|
62
|
-
property: this.sessionAuthzOptions.passportProperty,
|
|
63
|
-
session: false
|
|
64
|
-
};
|
|
65
|
-
}
|
|
66
|
-
/**
|
|
67
|
-
*
|
|
68
|
-
* recives err, user, info from JwtStrategy.validate
|
|
69
|
-
*
|
|
70
|
-
* will return request.user=null if allowAnonymous=true
|
|
71
|
-
*
|
|
72
|
-
* @param _err will always be null
|
|
73
|
-
* @param user if user is null, then info will be AuthError. if user is defined, then info will be undefined.
|
|
74
|
-
* @param info AuthzError or undefined
|
|
75
|
-
* @returns
|
|
76
|
-
*/
|
|
77
|
-
handleRequest(_err, user, info) {
|
|
78
|
-
const store = (0, import_utils.getAlsStore)(this.als);
|
|
79
|
-
if (info) {
|
|
80
|
-
if (store.allowAnonymous && info.name === import_errors.AuthzAnonymousError.name) {
|
|
81
|
-
return user;
|
|
11
|
+
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
|
+
return function (target, key) { decorator(target, key, paramIndex); }
|
|
13
|
+
};
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
exports.createSessionAuthzGuard = void 0;
|
|
16
|
+
const common_1 = require("@nestjs/common");
|
|
17
|
+
const core_1 = require("@nestjs/core");
|
|
18
|
+
const passport_1 = require("@nestjs/passport");
|
|
19
|
+
const authz_provider_1 = require("../authz.provider");
|
|
20
|
+
const errors_1 = require("../errors");
|
|
21
|
+
const utils_1 = require("../utils");
|
|
22
|
+
const createSessionAuthzGuard = ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]) => {
|
|
23
|
+
let SessionAuthzGuard = class SessionAuthzGuard extends (0, passport_1.AuthGuard)(SESSION_STRATEGY) {
|
|
24
|
+
constructor(reflector, authzProvider, sessionAuthzOptions, als) {
|
|
25
|
+
super();
|
|
26
|
+
this.reflector = reflector;
|
|
27
|
+
this.authzProvider = authzProvider;
|
|
28
|
+
this.sessionAuthzOptions = sessionAuthzOptions;
|
|
29
|
+
this.als = als;
|
|
30
|
+
}
|
|
31
|
+
getAuthenticateOptions() {
|
|
32
|
+
return {
|
|
33
|
+
property: this.sessionAuthzOptions.passportProperty,
|
|
34
|
+
session: false
|
|
35
|
+
};
|
|
82
36
|
}
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
const req = context.switchToHttp().getRequest();
|
|
106
|
-
store.allowAnonymous = (0, import_utils.getAllowAnonymous)(contextParamsList, {
|
|
107
|
-
defaultAllowAnonymous: this.sessionAuthzOptions.defaultAllowAnonymous
|
|
108
|
-
});
|
|
109
|
-
await super.canActivate(context);
|
|
110
|
-
const user = (0, import_utils.getPassportProperty)(req);
|
|
111
|
-
if (store.allowAnonymous && !user) {
|
|
112
|
-
return true;
|
|
113
|
-
}
|
|
114
|
-
for (const ele of contextParamsList) {
|
|
115
|
-
if (!await this.authzProvider.authorize(user, ele.metaData)) {
|
|
116
|
-
return false;
|
|
37
|
+
/**
|
|
38
|
+
*
|
|
39
|
+
* recives err, user, info from JwtStrategy.validate
|
|
40
|
+
*
|
|
41
|
+
* will return request.user=null if allowAnonymous=true
|
|
42
|
+
*
|
|
43
|
+
* @param _err will always be null
|
|
44
|
+
* @param user if user is null, then info will be AuthError. if user is defined, then info will be undefined.
|
|
45
|
+
* @param info AuthzError or undefined
|
|
46
|
+
* @returns
|
|
47
|
+
*/
|
|
48
|
+
handleRequest(_err, user, info) {
|
|
49
|
+
const store = (0, utils_1.getAlsStore)(this.als);
|
|
50
|
+
if (info) {
|
|
51
|
+
if (store.allowAnonymous && info.name === errors_1.AuthzAnonymousError.name) {
|
|
52
|
+
// user is null.
|
|
53
|
+
return user;
|
|
54
|
+
}
|
|
55
|
+
store.guardResult = false;
|
|
56
|
+
throw info;
|
|
57
|
+
}
|
|
58
|
+
return user;
|
|
117
59
|
}
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
60
|
+
async canActivate(context) {
|
|
61
|
+
const store = (0, utils_1.getAlsStore)(this.als);
|
|
62
|
+
if ((0, utils_1.isNotFalsy)(store.guardResult)) {
|
|
63
|
+
return store.guardResult;
|
|
64
|
+
}
|
|
65
|
+
const paramsList = (0, utils_1.normalizedArray)(this.reflector.getAll(SESSION_META_KEY, [context.getClass(), context.getHandler()]));
|
|
66
|
+
// bypass if last meta is public
|
|
67
|
+
if (paramsList.length && Boolean(paramsList[paramsList.length - 1].options?.public)) {
|
|
68
|
+
store.guardResult = true;
|
|
69
|
+
return true;
|
|
70
|
+
}
|
|
71
|
+
const contextParamsList = (0, utils_1.getContextAuthzMetaParamsList)(paramsList, {
|
|
72
|
+
defaultOverride: this.sessionAuthzOptions.defaultOverride,
|
|
73
|
+
skipFalsyMetadata: this.sessionAuthzOptions.skipFalsyMetadata
|
|
74
|
+
});
|
|
75
|
+
const req = context.switchToHttp().getRequest();
|
|
76
|
+
store.allowAnonymous = (0, utils_1.getAllowAnonymous)(contextParamsList, {
|
|
77
|
+
defaultAllowAnonymous: this.sessionAuthzOptions.defaultAllowAnonymous
|
|
78
|
+
});
|
|
79
|
+
await super.canActivate(context);
|
|
80
|
+
// will be null if allowAnonymous=true.
|
|
81
|
+
const user = (0, utils_1.getPassportProperty)(req);
|
|
82
|
+
if (store.allowAnonymous && !user) {
|
|
83
|
+
return true;
|
|
84
|
+
}
|
|
85
|
+
for (const ele of contextParamsList) {
|
|
86
|
+
if (!(await this.authzProvider.authorize(user, ele.metaData))) {
|
|
87
|
+
return false;
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
return true;
|
|
91
|
+
}
|
|
92
|
+
};
|
|
93
|
+
SessionAuthzGuard = __decorate([
|
|
94
|
+
__param(1, (0, common_1.Inject)(AUTHZ_PROVIDER)),
|
|
95
|
+
__param(2, (0, common_1.Inject)(SESSION_AUTHZ_OPTIONS)),
|
|
96
|
+
__param(3, (0, common_1.Inject)(ALS_PROVIDER)),
|
|
97
|
+
__metadata("design:paramtypes", [core_1.Reflector,
|
|
98
|
+
authz_provider_1.AuthzProviderClass, Object, Function])
|
|
99
|
+
], SessionAuthzGuard);
|
|
100
|
+
return (0, common_1.mixin)(SessionAuthzGuard);
|
|
101
|
+
};
|
|
102
|
+
exports.createSessionAuthzGuard = createSessionAuthzGuard;
|
|
@@ -1,12 +1,7 @@
|
|
|
1
1
|
import session from 'express-session';
|
|
2
|
-
import { AuthzModuleBaseOptions } from '../utils
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
import 'express';
|
|
6
|
-
import '../authz.provider.js';
|
|
7
|
-
|
|
8
|
-
type SessionOptions = Parameters<typeof session>[0];
|
|
9
|
-
type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
|
|
2
|
+
import type { AuthzModuleBaseOptions } from '../utils';
|
|
3
|
+
export type SessionOptions = Parameters<typeof session>[0];
|
|
4
|
+
export type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
|
|
10
5
|
/**
|
|
11
6
|
* Session options.
|
|
12
7
|
*
|
|
@@ -21,7 +16,7 @@ type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
|
|
|
21
16
|
keepSessionInfo?: boolean;
|
|
22
17
|
};
|
|
23
18
|
};
|
|
24
|
-
declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAuthzModuleOptions>) => {
|
|
19
|
+
export declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAuthzModuleOptions>) => {
|
|
25
20
|
defaultOverride: boolean;
|
|
26
21
|
passportProperty: string;
|
|
27
22
|
skipFalsyMetadata: boolean;
|
|
@@ -29,6 +24,4 @@ declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAut
|
|
|
29
24
|
keepSessionInfo: boolean | undefined;
|
|
30
25
|
session: SessionOptions;
|
|
31
26
|
};
|
|
32
|
-
type SessionAuthzOptions = ReturnType<typeof normalizedSessionAuthzModuleOptions>;
|
|
33
|
-
|
|
34
|
-
export { type SessionAuthzModuleOptions, type SessionAuthzOptions, type SessionOptions, normalizedSessionAuthzModuleOptions };
|
|
27
|
+
export type SessionAuthzOptions = ReturnType<typeof normalizedSessionAuthzModuleOptions>;
|
|
@@ -1,43 +1,20 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.normalizedSessionAuthzModuleOptions = void 0;
|
|
4
|
+
const constants_1 = require("../constants");
|
|
5
|
+
const normalizedSessionAuthzModuleOptions = (options = {}) => {
|
|
6
|
+
const { keepSessionInfo, ...sessionOpts } = options.session ?? {};
|
|
7
|
+
return {
|
|
8
|
+
defaultOverride: options.defaultOverride || false,
|
|
9
|
+
passportProperty: options.passportProperty || constants_1.DEFAULT_PASSPORT_PROPERTY_VALUE,
|
|
10
|
+
skipFalsyMetadata: options.skipFalsyMetadata || false,
|
|
11
|
+
defaultAllowAnonymous: options.defaultAllowAnonymous || false,
|
|
12
|
+
keepSessionInfo,
|
|
13
|
+
session: {
|
|
14
|
+
resave: false,
|
|
15
|
+
saveUninitialized: false,
|
|
16
|
+
...sessionOpts
|
|
17
|
+
}
|
|
18
|
+
};
|
|
9
19
|
};
|
|
10
|
-
|
|
11
|
-
if (from && typeof from === "object" || typeof from === "function") {
|
|
12
|
-
for (let key of __getOwnPropNames(from))
|
|
13
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
14
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
15
|
-
}
|
|
16
|
-
return to;
|
|
17
|
-
};
|
|
18
|
-
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
19
|
-
var session_authz_interface_exports = {};
|
|
20
|
-
__export(session_authz_interface_exports, {
|
|
21
|
-
normalizedSessionAuthzModuleOptions: () => normalizedSessionAuthzModuleOptions
|
|
22
|
-
});
|
|
23
|
-
module.exports = __toCommonJS(session_authz_interface_exports);
|
|
24
|
-
var import_constants = require("../constants");
|
|
25
|
-
const normalizedSessionAuthzModuleOptions = /* @__PURE__ */ __name((options = {}) => {
|
|
26
|
-
const { keepSessionInfo, ...sessionOpts } = options.session ?? {};
|
|
27
|
-
return {
|
|
28
|
-
defaultOverride: options.defaultOverride || false,
|
|
29
|
-
passportProperty: options.passportProperty || import_constants.DEFAULT_PASSPORT_PROPERTY_VALUE,
|
|
30
|
-
skipFalsyMetadata: options.skipFalsyMetadata || false,
|
|
31
|
-
defaultAllowAnonymous: options.defaultAllowAnonymous || false,
|
|
32
|
-
keepSessionInfo,
|
|
33
|
-
session: {
|
|
34
|
-
resave: false,
|
|
35
|
-
saveUninitialized: false,
|
|
36
|
-
...sessionOpts
|
|
37
|
-
}
|
|
38
|
-
};
|
|
39
|
-
}, "normalizedSessionAuthzModuleOptions");
|
|
40
|
-
// Annotate the CommonJS export names for ESM import in node:
|
|
41
|
-
0 && (module.exports = {
|
|
42
|
-
normalizedSessionAuthzModuleOptions
|
|
43
|
-
});
|
|
20
|
+
exports.normalizedSessionAuthzModuleOptions = normalizedSessionAuthzModuleOptions;
|