@nestjs-kitchen/authz 2.0.2 → 2.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (65) hide show
  1. package/dist/authz.provider.d.ts +1 -3
  2. package/dist/authz.provider.js +29 -48
  3. package/dist/constants.d.ts +6 -8
  4. package/dist/constants.js +13 -46
  5. package/dist/errors.d.ts +3 -5
  6. package/dist/errors.js +35 -60
  7. package/dist/index.d.ts +5 -21
  8. package/dist/index.js +16 -45
  9. package/dist/jwt/extract-jwt.d.ts +4 -7
  10. package/dist/jwt/extract-jwt.js +138 -158
  11. package/dist/jwt/index.d.ts +2 -16
  12. package/dist/jwt/index.js +7 -30
  13. package/dist/jwt/jwt-authz-als.middleware.d.ts +6 -16
  14. package/dist/jwt/jwt-authz-als.middleware.js +44 -81
  15. package/dist/jwt/jwt-authz.guard.d.ts +8 -21
  16. package/dist/jwt/jwt-authz.guard.js +130 -175
  17. package/dist/jwt/jwt-authz.interface.d.ts +16 -25
  18. package/dist/jwt/jwt-authz.interface.js +69 -92
  19. package/dist/jwt/jwt-authz.module.d.ts +19 -31
  20. package/dist/jwt/jwt-authz.module.js +250 -299
  21. package/dist/jwt/jwt-authz.service.d.ts +6 -17
  22. package/dist/jwt/jwt-authz.service.js +116 -162
  23. package/dist/jwt/jwt-authz.strategy.d.ts +5 -17
  24. package/dist/jwt/jwt-authz.strategy.js +132 -192
  25. package/dist/session/index.d.ts +1 -12
  26. package/dist/session/index.js +5 -27
  27. package/dist/session/session-authz-als.middleware.d.ts +5 -12
  28. package/dist/session/session-authz-als.middleware.js +98 -130
  29. package/dist/session/session-authz.guard.d.ts +6 -15
  30. package/dist/session/session-authz.guard.js +98 -135
  31. package/dist/session/session-authz.interface.d.ts +5 -12
  32. package/dist/session/session-authz.interface.js +19 -42
  33. package/dist/session/session-authz.module.d.ts +18 -26
  34. package/dist/session/session-authz.module.js +241 -290
  35. package/dist/session/session-authz.service.d.ts +5 -13
  36. package/dist/session/session-authz.service.js +69 -105
  37. package/dist/session/session-authz.strategy.d.ts +4 -12
  38. package/dist/session/session-authz.strategy.js +68 -105
  39. package/dist/user.decorator.d.ts +3 -6
  40. package/dist/user.decorator.js +26 -35
  41. package/dist/utils/cookie-parsers.d.ts +3 -6
  42. package/dist/utils/cookie-parsers.js +66 -74
  43. package/dist/utils/create-authz-decorator-factory.d.ts +3 -9
  44. package/dist/utils/create-authz-decorator-factory.js +32 -54
  45. package/dist/utils/create-set-cookie-fn.d.ts +3 -9
  46. package/dist/utils/create-set-cookie-fn.js +23 -45
  47. package/dist/utils/generics.d.ts +4 -6
  48. package/dist/utils/generics.js +37 -63
  49. package/dist/utils/get-allow-anonymous.d.ts +2 -9
  50. package/dist/utils/get-allow-anonymous.js +7 -29
  51. package/dist/utils/get-als-store.d.ts +2 -5
  52. package/dist/utils/get-als-store.js +11 -34
  53. package/dist/utils/get-context-authz-meta-params-list.d.ts +2 -9
  54. package/dist/utils/get-context-authz-meta-params-list.js +16 -35
  55. package/dist/utils/get-passport-property.d.ts +1 -3
  56. package/dist/utils/get-passport-property.js +8 -30
  57. package/dist/utils/index.d.ts +11 -16
  58. package/dist/utils/index.js +26 -40
  59. package/dist/utils/merge-dynamic-module-configs.d.ts +2 -5
  60. package/dist/utils/merge-dynamic-module-configs.js +14 -49
  61. package/dist/utils/msgpackrs.d.ts +2 -4
  62. package/dist/utils/msgpackrs.js +11 -35
  63. package/dist/utils/types.d.ts +23 -26
  64. package/dist/utils/types.js +2 -15
  65. package/package.json +7 -7
@@ -1,134 +1,102 @@
1
- var __defProp = Object.defineProperty;
2
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
3
- var __getOwnPropNames = Object.getOwnPropertyNames;
4
- var __hasOwnProp = Object.prototype.hasOwnProperty;
5
- var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
6
- var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
7
- var __export = (target, all) => {
8
- for (var name in all)
9
- __defProp(target, name, { get: all[name], enumerable: true });
1
+ "use strict";
2
+ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
3
+ var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
4
+ if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
5
+ else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
6
+ return c > 3 && r && Object.defineProperty(target, key, r), r;
10
7
  };
11
- var __copyProps = (to, from, except, desc) => {
12
- if (from && typeof from === "object" || typeof from === "function") {
13
- for (let key of __getOwnPropNames(from))
14
- if (!__hasOwnProp.call(to, key) && key !== except)
15
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
16
- }
17
- return to;
8
+ var __metadata = (this && this.__metadata) || function (k, v) {
9
+ if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
18
10
  };
19
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
20
- var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
21
- var session_authz_als_middleware_exports = {};
22
- __export(session_authz_als_middleware_exports, {
23
- createSessionAuthzAlsMiddleware: () => createSessionAuthzAlsMiddleware
24
- });
25
- module.exports = __toCommonJS(session_authz_als_middleware_exports);
26
- var import_node_async_hooks = require("node:async_hooks");
27
- var import_common = require("@nestjs/common");
28
- var import_constants = require("../constants");
29
- var import_errors = require("../errors");
30
- var import_utils = require("../utils");
31
- function _ts_decorate(decorators, target, key, desc) {
32
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
33
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
34
- else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
35
- return c > 3 && r && Object.defineProperty(target, key, r), r;
36
- }
37
- __name(_ts_decorate, "_ts_decorate");
38
- function _ts_metadata(k, v) {
39
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
40
- }
41
- __name(_ts_metadata, "_ts_metadata");
42
- function _ts_param(paramIndex, decorator) {
43
- return function(target, key) {
44
- decorator(target, key, paramIndex);
45
- };
46
- }
47
- __name(_ts_param, "_ts_param");
48
- const createSessionAuthzAlsMiddleware = /* @__PURE__ */ __name(([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]) => {
49
- var _a;
50
- let SessionAuthzAlsMiddleware = (_a = class {
51
- constructor(als, sessionAuthzOptions) {
52
- __publicField(this, "als");
53
- __publicField(this, "sessionAuthzOptions");
54
- this.als = als;
55
- this.sessionAuthzOptions = sessionAuthzOptions;
56
- }
57
- use(req, res, next) {
58
- const keepSessionInfo = Boolean(this.sessionAuthzOptions.keepSessionInfo);
59
- if (!req.session) {
60
- return next(new import_errors.AuthzError("Login sessions require session support. Did you forget to use `express-session` middleware?"));
61
- }
62
- const prevSession = req.session;
63
- const store = {
64
- user: void 0,
65
- allowAnonymous: void 0,
66
- guardResult: void 0,
67
- authOptions: this.sessionAuthzOptions,
68
- // ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L14
69
- logIn: /* @__PURE__ */ __name((user) => {
70
- return new Promise((resolve, reject) => {
71
- req.session.regenerate(function(err) {
72
- if (err) {
73
- return reject(err);
74
- }
75
- if (keepSessionInfo) {
76
- (0, import_utils.merge)(req.session, prevSession);
77
- }
78
- if (!req.session[import_constants.SESSION_PASSPORT_KEY]) {
79
- req.session[import_constants.SESSION_PASSPORT_KEY] = {};
80
- }
81
- req.session[import_constants.SESSION_PASSPORT_KEY].user = user;
82
- req.session.save(function(err2) {
83
- if (err2) {
84
- return reject(err2);
85
- }
86
- resolve();
87
- });
88
- });
89
- });
90
- }, "logIn"),
91
- // ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L57
92
- logOut: /* @__PURE__ */ __name(() => {
93
- return new Promise((resolve, reject) => {
94
- if (req.session[import_constants.SESSION_PASSPORT_KEY]) {
95
- delete req.session[import_constants.SESSION_PASSPORT_KEY].user;
11
+ var __param = (this && this.__param) || function (paramIndex, decorator) {
12
+ return function (target, key) { decorator(target, key, paramIndex); }
13
+ };
14
+ Object.defineProperty(exports, "__esModule", { value: true });
15
+ exports.createSessionAuthzAlsMiddleware = void 0;
16
+ const node_async_hooks_1 = require("node:async_hooks");
17
+ const common_1 = require("@nestjs/common");
18
+ const constants_1 = require("../constants");
19
+ const errors_1 = require("../errors");
20
+ const utils_1 = require("../utils");
21
+ const createSessionAuthzAlsMiddleware = ([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]) => {
22
+ let SessionAuthzAlsMiddleware = class SessionAuthzAlsMiddleware {
23
+ constructor(als, sessionAuthzOptions) {
24
+ this.als = als;
25
+ this.sessionAuthzOptions = sessionAuthzOptions;
26
+ }
27
+ use(req, res, next) {
28
+ const keepSessionInfo = Boolean(this.sessionAuthzOptions.keepSessionInfo);
29
+ if (!req.session) {
30
+ return next(new errors_1.AuthzError('Login sessions require session support. Did you forget to use `express-session` middleware?'));
96
31
  }
97
- req.session.save(function(err) {
98
- if (err) {
99
- return reject(err);
100
- }
101
- req.session.regenerate(function(err2) {
102
- if (err2) {
103
- return reject(err2);
104
- }
105
- if (keepSessionInfo) {
106
- (0, import_utils.merge)(req.session, prevSession);
107
- }
108
- resolve();
109
- });
32
+ const prevSession = req.session;
33
+ const store = {
34
+ user: undefined,
35
+ allowAnonymous: undefined,
36
+ guardResult: undefined,
37
+ authOptions: this.sessionAuthzOptions,
38
+ // ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L14
39
+ logIn: (user) => {
40
+ return new Promise((resolve, reject) => {
41
+ req.session.regenerate(function (err) {
42
+ if (err) {
43
+ return reject(err);
44
+ }
45
+ if (keepSessionInfo) {
46
+ (0, utils_1.merge)(req.session, prevSession);
47
+ }
48
+ // @ts-ignore
49
+ if (!req.session[constants_1.SESSION_PASSPORT_KEY]) {
50
+ // @ts-ignore
51
+ req.session[constants_1.SESSION_PASSPORT_KEY] = {};
52
+ }
53
+ // @ts-ignore
54
+ req.session[constants_1.SESSION_PASSPORT_KEY].user = user;
55
+ req.session.save(function (err) {
56
+ if (err) {
57
+ return reject(err);
58
+ }
59
+ resolve();
60
+ });
61
+ });
62
+ });
63
+ },
64
+ // ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L57
65
+ logOut: () => {
66
+ return new Promise((resolve, reject) => {
67
+ // @ts-ignore
68
+ if (req.session[constants_1.SESSION_PASSPORT_KEY]) {
69
+ // @ts-ignore
70
+ delete req.session[constants_1.SESSION_PASSPORT_KEY].user;
71
+ }
72
+ req.session.save(function (err) {
73
+ if (err) {
74
+ return reject(err);
75
+ }
76
+ req.session.regenerate(function (err) {
77
+ if (err) {
78
+ return reject(err);
79
+ }
80
+ if (keepSessionInfo) {
81
+ (0, utils_1.merge)(req.session, prevSession);
82
+ }
83
+ resolve();
84
+ });
85
+ });
86
+ });
87
+ },
88
+ setCookie: (0, utils_1.createSetCookieFn)(req, res)
89
+ };
90
+ this.als.run(store, () => {
91
+ next();
110
92
  });
111
- });
112
- }, "logOut"),
113
- setCookie: (0, import_utils.createSetCookieFn)(req, res)
114
- };
115
- this.als.run(store, () => {
116
- next();
117
- });
118
- }
119
- }, __name(_a, "SessionAuthzAlsMiddleware"), _a);
120
- SessionAuthzAlsMiddleware = _ts_decorate([
121
- _ts_param(0, (0, import_common.Inject)(ALS_PROVIDER)),
122
- _ts_param(1, (0, import_common.Inject)(SESSION_AUTHZ_OPTIONS)),
123
- _ts_metadata("design:type", Function),
124
- _ts_metadata("design:paramtypes", [
125
- typeof import_node_async_hooks.AsyncLocalStorage === "undefined" ? Object : import_node_async_hooks.AsyncLocalStorage,
126
- typeof SessionAuthzOptions === "undefined" ? Object : SessionAuthzOptions
127
- ])
128
- ], SessionAuthzAlsMiddleware);
129
- return (0, import_common.mixin)(SessionAuthzAlsMiddleware);
130
- }, "createSessionAuthzAlsMiddleware");
131
- // Annotate the CommonJS export names for ESM import in node:
132
- 0 && (module.exports = {
133
- createSessionAuthzAlsMiddleware
134
- });
93
+ }
94
+ };
95
+ SessionAuthzAlsMiddleware = __decorate([
96
+ __param(0, (0, common_1.Inject)(ALS_PROVIDER)),
97
+ __param(1, (0, common_1.Inject)(SESSION_AUTHZ_OPTIONS)),
98
+ __metadata("design:paramtypes", [node_async_hooks_1.AsyncLocalStorage, Object])
99
+ ], SessionAuthzAlsMiddleware);
100
+ return (0, common_1.mixin)(SessionAuthzAlsMiddleware);
101
+ };
102
+ exports.createSessionAuthzAlsMiddleware = createSessionAuthzAlsMiddleware;
@@ -1,18 +1,11 @@
1
- import * as _nestjs_common from '@nestjs/common';
2
1
  import { ExecutionContext } from '@nestjs/common';
3
2
  import { Reflector } from '@nestjs/core';
4
- import { AsyncLocalStorage } from 'async_hooks';
5
- import { AuthzProviderClass } from '../authz.provider.js';
6
- import { AuthzError } from '../errors.js';
7
- import { SessionAlsType } from './session-authz-als.middleware.js';
8
- import { SessionAuthzOptions } from './session-authz.interface.js';
9
- import 'node:async_hooks';
10
- import 'express';
11
- import '../utils/types.js';
12
- import '@nestjs/common/interfaces';
13
- import 'express-session';
14
-
15
- declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]: [string, any, any, any, any]) => _nestjs_common.Type<Omit<{
3
+ import type { AsyncLocalStorage } from 'async_hooks';
4
+ import { AuthzProviderClass } from '../authz.provider';
5
+ import { type AuthzError } from '../errors';
6
+ import type { SessionAlsType } from './session-authz-als.middleware';
7
+ import type { SessionAuthzOptions } from './session-authz.interface';
8
+ export declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]: [string, any, any, any, any]) => import("@nestjs/common").Type<Omit<{
16
9
  readonly reflector: Reflector;
17
10
  readonly authzProvider: AuthzProviderClass<unknown, unknown>;
18
11
  readonly sessionAuthzOptions: SessionAuthzOptions;
@@ -39,5 +32,3 @@ declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSI
39
32
  } = any>(request: TRequest): Promise<void>;
40
33
  getRequest(context: ExecutionContext): any;
41
34
  }, "als" | "reflector" | "authzProvider" | "sessionAuthzOptions">>;
42
-
43
- export { createSessionAuthzGuard };
@@ -1,139 +1,102 @@
1
- var __defProp = Object.defineProperty;
2
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
3
- var __getOwnPropNames = Object.getOwnPropertyNames;
4
- var __hasOwnProp = Object.prototype.hasOwnProperty;
5
- var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
6
- var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
7
- var __export = (target, all) => {
8
- for (var name in all)
9
- __defProp(target, name, { get: all[name], enumerable: true });
1
+ "use strict";
2
+ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
3
+ var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
4
+ if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
5
+ else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
6
+ return c > 3 && r && Object.defineProperty(target, key, r), r;
10
7
  };
11
- var __copyProps = (to, from, except, desc) => {
12
- if (from && typeof from === "object" || typeof from === "function") {
13
- for (let key of __getOwnPropNames(from))
14
- if (!__hasOwnProp.call(to, key) && key !== except)
15
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
16
- }
17
- return to;
8
+ var __metadata = (this && this.__metadata) || function (k, v) {
9
+ if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
18
10
  };
19
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
20
- var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
21
- var session_authz_guard_exports = {};
22
- __export(session_authz_guard_exports, {
23
- createSessionAuthzGuard: () => createSessionAuthzGuard
24
- });
25
- module.exports = __toCommonJS(session_authz_guard_exports);
26
- var import_common = require("@nestjs/common");
27
- var import_core = require("@nestjs/core");
28
- var import_passport = require("@nestjs/passport");
29
- var import_authz = require("../authz.provider");
30
- var import_errors = require("../errors");
31
- var import_utils = require("../utils");
32
- function _ts_decorate(decorators, target, key, desc) {
33
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
34
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
35
- else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
36
- return c > 3 && r && Object.defineProperty(target, key, r), r;
37
- }
38
- __name(_ts_decorate, "_ts_decorate");
39
- function _ts_metadata(k, v) {
40
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
41
- }
42
- __name(_ts_metadata, "_ts_metadata");
43
- function _ts_param(paramIndex, decorator) {
44
- return function(target, key) {
45
- decorator(target, key, paramIndex);
46
- };
47
- }
48
- __name(_ts_param, "_ts_param");
49
- const createSessionAuthzGuard = /* @__PURE__ */ __name(([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]) => {
50
- var _a;
51
- let SessionAuthzGuard = (_a = class extends (0, import_passport.AuthGuard)(SESSION_STRATEGY) {
52
- constructor(reflector, authzProvider, sessionAuthzOptions, als) {
53
- super();
54
- __publicField(this, "reflector");
55
- __publicField(this, "authzProvider");
56
- __publicField(this, "sessionAuthzOptions");
57
- __publicField(this, "als");
58
- this.reflector = reflector, this.authzProvider = authzProvider, this.sessionAuthzOptions = sessionAuthzOptions, this.als = als;
59
- }
60
- getAuthenticateOptions() {
61
- return {
62
- property: this.sessionAuthzOptions.passportProperty,
63
- session: false
64
- };
65
- }
66
- /**
67
- *
68
- * recives err, user, info from JwtStrategy.validate
69
- *
70
- * will return request.user=null if allowAnonymous=true
71
- *
72
- * @param _err will always be null
73
- * @param user if user is null, then info will be AuthError. if user is defined, then info will be undefined.
74
- * @param info AuthzError or undefined
75
- * @returns
76
- */
77
- handleRequest(_err, user, info) {
78
- const store = (0, import_utils.getAlsStore)(this.als);
79
- if (info) {
80
- if (store.allowAnonymous && info.name === import_errors.AuthzAnonymousError.name) {
81
- return user;
11
+ var __param = (this && this.__param) || function (paramIndex, decorator) {
12
+ return function (target, key) { decorator(target, key, paramIndex); }
13
+ };
14
+ Object.defineProperty(exports, "__esModule", { value: true });
15
+ exports.createSessionAuthzGuard = void 0;
16
+ const common_1 = require("@nestjs/common");
17
+ const core_1 = require("@nestjs/core");
18
+ const passport_1 = require("@nestjs/passport");
19
+ const authz_provider_1 = require("../authz.provider");
20
+ const errors_1 = require("../errors");
21
+ const utils_1 = require("../utils");
22
+ const createSessionAuthzGuard = ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]) => {
23
+ let SessionAuthzGuard = class SessionAuthzGuard extends (0, passport_1.AuthGuard)(SESSION_STRATEGY) {
24
+ constructor(reflector, authzProvider, sessionAuthzOptions, als) {
25
+ super();
26
+ this.reflector = reflector;
27
+ this.authzProvider = authzProvider;
28
+ this.sessionAuthzOptions = sessionAuthzOptions;
29
+ this.als = als;
30
+ }
31
+ getAuthenticateOptions() {
32
+ return {
33
+ property: this.sessionAuthzOptions.passportProperty,
34
+ session: false
35
+ };
82
36
  }
83
- store.guardResult = false;
84
- throw info;
85
- }
86
- return user;
87
- }
88
- async canActivate(context) {
89
- const store = (0, import_utils.getAlsStore)(this.als);
90
- if ((0, import_utils.isNotFalsy)(store.guardResult)) {
91
- return store.guardResult;
92
- }
93
- const paramsList = (0, import_utils.normalizedArray)(this.reflector.getAll(SESSION_META_KEY, [
94
- context.getClass(),
95
- context.getHandler()
96
- ]));
97
- if (paramsList.length && Boolean(paramsList[paramsList.length - 1].options?.public)) {
98
- store.guardResult = true;
99
- return true;
100
- }
101
- const contextParamsList = (0, import_utils.getContextAuthzMetaParamsList)(paramsList, {
102
- defaultOverride: this.sessionAuthzOptions.defaultOverride,
103
- skipFalsyMetadata: this.sessionAuthzOptions.skipFalsyMetadata
104
- });
105
- const req = context.switchToHttp().getRequest();
106
- store.allowAnonymous = (0, import_utils.getAllowAnonymous)(contextParamsList, {
107
- defaultAllowAnonymous: this.sessionAuthzOptions.defaultAllowAnonymous
108
- });
109
- await super.canActivate(context);
110
- const user = (0, import_utils.getPassportProperty)(req);
111
- if (store.allowAnonymous && !user) {
112
- return true;
113
- }
114
- for (const ele of contextParamsList) {
115
- if (!await this.authzProvider.authorize(user, ele.metaData)) {
116
- return false;
37
+ /**
38
+ *
39
+ * recives err, user, info from JwtStrategy.validate
40
+ *
41
+ * will return request.user=null if allowAnonymous=true
42
+ *
43
+ * @param _err will always be null
44
+ * @param user if user is null, then info will be AuthError. if user is defined, then info will be undefined.
45
+ * @param info AuthzError or undefined
46
+ * @returns
47
+ */
48
+ handleRequest(_err, user, info) {
49
+ const store = (0, utils_1.getAlsStore)(this.als);
50
+ if (info) {
51
+ if (store.allowAnonymous && info.name === errors_1.AuthzAnonymousError.name) {
52
+ // user is null.
53
+ return user;
54
+ }
55
+ store.guardResult = false;
56
+ throw info;
57
+ }
58
+ return user;
117
59
  }
118
- }
119
- return true;
120
- }
121
- }, __name(_a, "SessionAuthzGuard"), _a);
122
- SessionAuthzGuard = _ts_decorate([
123
- _ts_param(1, (0, import_common.Inject)(AUTHZ_PROVIDER)),
124
- _ts_param(2, (0, import_common.Inject)(SESSION_AUTHZ_OPTIONS)),
125
- _ts_param(3, (0, import_common.Inject)(ALS_PROVIDER)),
126
- _ts_metadata("design:type", Function),
127
- _ts_metadata("design:paramtypes", [
128
- typeof import_core.Reflector === "undefined" ? Object : import_core.Reflector,
129
- typeof import_authz.AuthzProviderClass === "undefined" ? Object : import_authz.AuthzProviderClass,
130
- typeof SessionAuthzOptions === "undefined" ? Object : SessionAuthzOptions,
131
- typeof AsyncLocalStorage === "undefined" ? Object : AsyncLocalStorage
132
- ])
133
- ], SessionAuthzGuard);
134
- return (0, import_common.mixin)(SessionAuthzGuard);
135
- }, "createSessionAuthzGuard");
136
- // Annotate the CommonJS export names for ESM import in node:
137
- 0 && (module.exports = {
138
- createSessionAuthzGuard
139
- });
60
+ async canActivate(context) {
61
+ const store = (0, utils_1.getAlsStore)(this.als);
62
+ if ((0, utils_1.isNotFalsy)(store.guardResult)) {
63
+ return store.guardResult;
64
+ }
65
+ const paramsList = (0, utils_1.normalizedArray)(this.reflector.getAll(SESSION_META_KEY, [context.getClass(), context.getHandler()]));
66
+ // bypass if last meta is public
67
+ if (paramsList.length && Boolean(paramsList[paramsList.length - 1].options?.public)) {
68
+ store.guardResult = true;
69
+ return true;
70
+ }
71
+ const contextParamsList = (0, utils_1.getContextAuthzMetaParamsList)(paramsList, {
72
+ defaultOverride: this.sessionAuthzOptions.defaultOverride,
73
+ skipFalsyMetadata: this.sessionAuthzOptions.skipFalsyMetadata
74
+ });
75
+ const req = context.switchToHttp().getRequest();
76
+ store.allowAnonymous = (0, utils_1.getAllowAnonymous)(contextParamsList, {
77
+ defaultAllowAnonymous: this.sessionAuthzOptions.defaultAllowAnonymous
78
+ });
79
+ await super.canActivate(context);
80
+ // will be null if allowAnonymous=true.
81
+ const user = (0, utils_1.getPassportProperty)(req);
82
+ if (store.allowAnonymous && !user) {
83
+ return true;
84
+ }
85
+ for (const ele of contextParamsList) {
86
+ if (!(await this.authzProvider.authorize(user, ele.metaData))) {
87
+ return false;
88
+ }
89
+ }
90
+ return true;
91
+ }
92
+ };
93
+ SessionAuthzGuard = __decorate([
94
+ __param(1, (0, common_1.Inject)(AUTHZ_PROVIDER)),
95
+ __param(2, (0, common_1.Inject)(SESSION_AUTHZ_OPTIONS)),
96
+ __param(3, (0, common_1.Inject)(ALS_PROVIDER)),
97
+ __metadata("design:paramtypes", [core_1.Reflector,
98
+ authz_provider_1.AuthzProviderClass, Object, Function])
99
+ ], SessionAuthzGuard);
100
+ return (0, common_1.mixin)(SessionAuthzGuard);
101
+ };
102
+ exports.createSessionAuthzGuard = createSessionAuthzGuard;
@@ -1,12 +1,7 @@
1
1
  import session from 'express-session';
2
- import { AuthzModuleBaseOptions } from '../utils/types.js';
3
- import '@nestjs/common';
4
- import '@nestjs/common/interfaces';
5
- import 'express';
6
- import '../authz.provider.js';
7
-
8
- type SessionOptions = Parameters<typeof session>[0];
9
- type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
2
+ import type { AuthzModuleBaseOptions } from '../utils';
3
+ export type SessionOptions = Parameters<typeof session>[0];
4
+ export type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
10
5
  /**
11
6
  * Session options.
12
7
  *
@@ -21,7 +16,7 @@ type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
21
16
  keepSessionInfo?: boolean;
22
17
  };
23
18
  };
24
- declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAuthzModuleOptions>) => {
19
+ export declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAuthzModuleOptions>) => {
25
20
  defaultOverride: boolean;
26
21
  passportProperty: string;
27
22
  skipFalsyMetadata: boolean;
@@ -29,6 +24,4 @@ declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAut
29
24
  keepSessionInfo: boolean | undefined;
30
25
  session: SessionOptions;
31
26
  };
32
- type SessionAuthzOptions = ReturnType<typeof normalizedSessionAuthzModuleOptions>;
33
-
34
- export { type SessionAuthzModuleOptions, type SessionAuthzOptions, type SessionOptions, normalizedSessionAuthzModuleOptions };
27
+ export type SessionAuthzOptions = ReturnType<typeof normalizedSessionAuthzModuleOptions>;
@@ -1,43 +1,20 @@
1
- var __defProp = Object.defineProperty;
2
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
3
- var __getOwnPropNames = Object.getOwnPropertyNames;
4
- var __hasOwnProp = Object.prototype.hasOwnProperty;
5
- var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
6
- var __export = (target, all) => {
7
- for (var name in all)
8
- __defProp(target, name, { get: all[name], enumerable: true });
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.normalizedSessionAuthzModuleOptions = void 0;
4
+ const constants_1 = require("../constants");
5
+ const normalizedSessionAuthzModuleOptions = (options = {}) => {
6
+ const { keepSessionInfo, ...sessionOpts } = options.session ?? {};
7
+ return {
8
+ defaultOverride: options.defaultOverride || false,
9
+ passportProperty: options.passportProperty || constants_1.DEFAULT_PASSPORT_PROPERTY_VALUE,
10
+ skipFalsyMetadata: options.skipFalsyMetadata || false,
11
+ defaultAllowAnonymous: options.defaultAllowAnonymous || false,
12
+ keepSessionInfo,
13
+ session: {
14
+ resave: false,
15
+ saveUninitialized: false,
16
+ ...sessionOpts
17
+ }
18
+ };
9
19
  };
10
- var __copyProps = (to, from, except, desc) => {
11
- if (from && typeof from === "object" || typeof from === "function") {
12
- for (let key of __getOwnPropNames(from))
13
- if (!__hasOwnProp.call(to, key) && key !== except)
14
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
15
- }
16
- return to;
17
- };
18
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
19
- var session_authz_interface_exports = {};
20
- __export(session_authz_interface_exports, {
21
- normalizedSessionAuthzModuleOptions: () => normalizedSessionAuthzModuleOptions
22
- });
23
- module.exports = __toCommonJS(session_authz_interface_exports);
24
- var import_constants = require("../constants");
25
- const normalizedSessionAuthzModuleOptions = /* @__PURE__ */ __name((options = {}) => {
26
- const { keepSessionInfo, ...sessionOpts } = options.session ?? {};
27
- return {
28
- defaultOverride: options.defaultOverride || false,
29
- passportProperty: options.passportProperty || import_constants.DEFAULT_PASSPORT_PROPERTY_VALUE,
30
- skipFalsyMetadata: options.skipFalsyMetadata || false,
31
- defaultAllowAnonymous: options.defaultAllowAnonymous || false,
32
- keepSessionInfo,
33
- session: {
34
- resave: false,
35
- saveUninitialized: false,
36
- ...sessionOpts
37
- }
38
- };
39
- }, "normalizedSessionAuthzModuleOptions");
40
- // Annotate the CommonJS export names for ESM import in node:
41
- 0 && (module.exports = {
42
- normalizedSessionAuthzModuleOptions
43
- });
20
+ exports.normalizedSessionAuthzModuleOptions = normalizedSessionAuthzModuleOptions;