@nestjs-kitchen/authz 2.0.3 → 2.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (65) hide show
  1. package/dist/authz.provider.d.ts +1 -3
  2. package/dist/authz.provider.js +27 -43
  3. package/dist/constants.d.ts +6 -8
  4. package/dist/constants.js +13 -46
  5. package/dist/errors.d.ts +3 -5
  6. package/dist/errors.js +29 -44
  7. package/dist/index.d.ts +5 -21
  8. package/dist/index.js +16 -45
  9. package/dist/jwt/extract-jwt.d.ts +4 -7
  10. package/dist/jwt/extract-jwt.js +136 -152
  11. package/dist/jwt/index.d.ts +2 -16
  12. package/dist/jwt/index.js +7 -30
  13. package/dist/jwt/jwt-authz-als.middleware.d.ts +6 -16
  14. package/dist/jwt/jwt-authz-als.middleware.js +40 -60
  15. package/dist/jwt/jwt-authz.guard.d.ts +8 -21
  16. package/dist/jwt/jwt-authz.guard.js +126 -148
  17. package/dist/jwt/jwt-authz.interface.d.ts +16 -25
  18. package/dist/jwt/jwt-authz.interface.js +66 -114
  19. package/dist/jwt/jwt-authz.module.d.ts +19 -31
  20. package/dist/jwt/jwt-authz.module.js +240 -242
  21. package/dist/jwt/jwt-authz.service.d.ts +6 -17
  22. package/dist/jwt/jwt-authz.service.js +113 -144
  23. package/dist/jwt/jwt-authz.strategy.d.ts +5 -17
  24. package/dist/jwt/jwt-authz.strategy.js +127 -150
  25. package/dist/session/index.d.ts +1 -12
  26. package/dist/session/index.js +5 -27
  27. package/dist/session/session-authz-als.middleware.d.ts +5 -12
  28. package/dist/session/session-authz-als.middleware.js +95 -109
  29. package/dist/session/session-authz.guard.d.ts +6 -15
  30. package/dist/session/session-authz.guard.js +96 -116
  31. package/dist/session/session-authz.interface.d.ts +5 -12
  32. package/dist/session/session-authz.interface.js +18 -40
  33. package/dist/session/session-authz.module.d.ts +18 -26
  34. package/dist/session/session-authz.module.js +231 -237
  35. package/dist/session/session-authz.service.d.ts +5 -13
  36. package/dist/session/session-authz.service.js +66 -83
  37. package/dist/session/session-authz.strategy.d.ts +4 -12
  38. package/dist/session/session-authz.strategy.js +65 -78
  39. package/dist/user.decorator.d.ts +3 -6
  40. package/dist/user.decorator.js +25 -33
  41. package/dist/utils/cookie-parsers.d.ts +3 -6
  42. package/dist/utils/cookie-parsers.js +62 -63
  43. package/dist/utils/create-authz-decorator-factory.d.ts +3 -9
  44. package/dist/utils/create-authz-decorator-factory.js +29 -50
  45. package/dist/utils/create-set-cookie-fn.d.ts +3 -9
  46. package/dist/utils/create-set-cookie-fn.js +21 -42
  47. package/dist/utils/generics.d.ts +4 -6
  48. package/dist/utils/generics.js +31 -54
  49. package/dist/utils/get-allow-anonymous.d.ts +2 -9
  50. package/dist/utils/get-allow-anonymous.js +6 -27
  51. package/dist/utils/get-als-store.d.ts +2 -5
  52. package/dist/utils/get-als-store.js +10 -32
  53. package/dist/utils/get-context-authz-meta-params-list.d.ts +2 -9
  54. package/dist/utils/get-context-authz-meta-params-list.js +15 -33
  55. package/dist/utils/get-passport-property.d.ts +1 -3
  56. package/dist/utils/get-passport-property.js +7 -28
  57. package/dist/utils/index.d.ts +11 -16
  58. package/dist/utils/index.js +26 -40
  59. package/dist/utils/merge-dynamic-module-configs.d.ts +2 -5
  60. package/dist/utils/merge-dynamic-module-configs.js +13 -38
  61. package/dist/utils/msgpackrs.d.ts +2 -4
  62. package/dist/utils/msgpackrs.js +9 -32
  63. package/dist/utils/types.d.ts +23 -26
  64. package/dist/utils/types.js +2 -15
  65. package/package.json +4 -4
@@ -1,27 +1,5 @@
1
- var __defProp = Object.defineProperty;
2
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
3
- var __getOwnPropNames = Object.getOwnPropertyNames;
4
- var __hasOwnProp = Object.prototype.hasOwnProperty;
5
- var __export = (target, all) => {
6
- for (var name in all)
7
- __defProp(target, name, { get: all[name], enumerable: true });
8
- };
9
- var __copyProps = (to, from, except, desc) => {
10
- if (from && typeof from === "object" || typeof from === "function") {
11
- for (let key of __getOwnPropNames(from))
12
- if (!__hasOwnProp.call(to, key) && key !== except)
13
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
14
- }
15
- return to;
16
- };
17
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
18
- var session_exports = {};
19
- __export(session_exports, {
20
- cereateSessionAuthzModule: () => import_session_authz.cereateSessionAuthzModule
21
- });
22
- module.exports = __toCommonJS(session_exports);
23
- var import_session_authz = require("./session-authz.module");
24
- // Annotate the CommonJS export names for ESM import in node:
25
- 0 && (module.exports = {
26
- cereateSessionAuthzModule
27
- });
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.cereateSessionAuthzModule = void 0;
4
+ var session_authz_module_1 = require("./session-authz.module");
5
+ Object.defineProperty(exports, "cereateSessionAuthzModule", { enumerable: true, get: function () { return session_authz_module_1.cereateSessionAuthzModule; } });
@@ -1,13 +1,8 @@
1
- import * as _nestjs_common from '@nestjs/common';
2
1
  import { AsyncLocalStorage } from 'node:async_hooks';
3
- import { Request, Response, NextFunction } from 'express';
4
- import { CookieOptionsWithSecret } from '../utils/types.js';
5
- import { SessionAuthzOptions } from './session-authz.interface.js';
6
- import '@nestjs/common/interfaces';
7
- import '../authz.provider.js';
8
- import 'express-session';
9
-
10
- interface SessionAlsType<P, U> {
2
+ import type { NextFunction, Request, Response } from 'express';
3
+ import { type CookieOptionsWithSecret } from '../utils';
4
+ import type { SessionAuthzOptions } from './session-authz.interface';
5
+ export interface SessionAlsType<P, U> {
11
6
  user?: U;
12
7
  allowAnonymous?: boolean;
13
8
  guardResult?: boolean;
@@ -16,10 +11,8 @@ interface SessionAlsType<P, U> {
16
11
  logOut: () => Promise<void>;
17
12
  setCookie: (name: string, value: string, options?: CookieOptionsWithSecret) => void;
18
13
  }
19
- declare const createSessionAuthzAlsMiddleware: ([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]: [any, any]) => _nestjs_common.Type<Omit<{
14
+ export declare const createSessionAuthzAlsMiddleware: ([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]: [any, any]) => import("@nestjs/common").Type<Omit<{
20
15
  readonly als: AsyncLocalStorage<SessionAlsType<unknown, unknown>>;
21
16
  readonly sessionAuthzOptions: SessionAuthzOptions;
22
17
  use(req: Request, res: Response, next: NextFunction): void;
23
18
  }, "als" | "sessionAuthzOptions">>;
24
-
25
- export { type SessionAlsType, createSessionAuthzAlsMiddleware };
@@ -1,116 +1,102 @@
1
- var __defProp = Object.defineProperty;
2
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
3
- var __getOwnPropNames = Object.getOwnPropertyNames;
4
- var __hasOwnProp = Object.prototype.hasOwnProperty;
5
- var __export = (target, all) => {
6
- for (var name in all)
7
- __defProp(target, name, { get: all[name], enumerable: true });
1
+ "use strict";
2
+ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
3
+ var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
4
+ if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
5
+ else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
6
+ return c > 3 && r && Object.defineProperty(target, key, r), r;
8
7
  };
9
- var __copyProps = (to, from, except, desc) => {
10
- if (from && typeof from === "object" || typeof from === "function") {
11
- for (let key of __getOwnPropNames(from))
12
- if (!__hasOwnProp.call(to, key) && key !== except)
13
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
14
- }
15
- return to;
8
+ var __metadata = (this && this.__metadata) || function (k, v) {
9
+ if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
16
10
  };
17
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
18
- var __decorateClass = (decorators, target, key, kind) => {
19
- var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
20
- for (var i = decorators.length - 1, decorator; i >= 0; i--)
21
- if (decorator = decorators[i])
22
- result = (kind ? decorator(target, key, result) : decorator(result)) || result;
23
- if (kind && result) __defProp(target, key, result);
24
- return result;
11
+ var __param = (this && this.__param) || function (paramIndex, decorator) {
12
+ return function (target, key) { decorator(target, key, paramIndex); }
25
13
  };
26
- var __decorateParam = (index, decorator) => (target, key) => decorator(target, key, index);
27
- var session_authz_als_middleware_exports = {};
28
- __export(session_authz_als_middleware_exports, {
29
- createSessionAuthzAlsMiddleware: () => createSessionAuthzAlsMiddleware
30
- });
31
- module.exports = __toCommonJS(session_authz_als_middleware_exports);
32
- var import_common = require("@nestjs/common");
33
- var import_constants = require("../constants");
34
- var import_errors = require("../errors");
35
- var import_utils = require("../utils");
14
+ Object.defineProperty(exports, "__esModule", { value: true });
15
+ exports.createSessionAuthzAlsMiddleware = void 0;
16
+ const node_async_hooks_1 = require("node:async_hooks");
17
+ const common_1 = require("@nestjs/common");
18
+ const constants_1 = require("../constants");
19
+ const errors_1 = require("../errors");
20
+ const utils_1 = require("../utils");
36
21
  const createSessionAuthzAlsMiddleware = ([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]) => {
37
- let SessionAuthzAlsMiddleware = class {
38
- constructor(als, sessionAuthzOptions) {
39
- this.als = als;
40
- this.sessionAuthzOptions = sessionAuthzOptions;
41
- }
42
- use(req, res, next) {
43
- const keepSessionInfo = Boolean(this.sessionAuthzOptions.keepSessionInfo);
44
- if (!req.session) {
45
- return next(
46
- new import_errors.AuthzError("Login sessions require session support. Did you forget to use `express-session` middleware?")
47
- );
48
- }
49
- const prevSession = req.session;
50
- const store = {
51
- user: void 0,
52
- allowAnonymous: void 0,
53
- guardResult: void 0,
54
- authOptions: this.sessionAuthzOptions,
55
- // ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L14
56
- logIn: (user) => {
57
- return new Promise((resolve, reject) => {
58
- req.session.regenerate(function(err) {
59
- if (err) {
60
- return reject(err);
61
- }
62
- if (keepSessionInfo) {
63
- (0, import_utils.merge)(req.session, prevSession);
64
- }
65
- if (!req.session[import_constants.SESSION_PASSPORT_KEY]) {
66
- req.session[import_constants.SESSION_PASSPORT_KEY] = {};
67
- }
68
- req.session[import_constants.SESSION_PASSPORT_KEY].user = user;
69
- req.session.save(function(err2) {
70
- if (err2) {
71
- return reject(err2);
72
- }
73
- resolve();
74
- });
75
- });
76
- });
77
- },
78
- // ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L57
79
- logOut: () => {
80
- return new Promise((resolve, reject) => {
81
- if (req.session[import_constants.SESSION_PASSPORT_KEY]) {
82
- delete req.session[import_constants.SESSION_PASSPORT_KEY].user;
22
+ let SessionAuthzAlsMiddleware = class SessionAuthzAlsMiddleware {
23
+ constructor(als, sessionAuthzOptions) {
24
+ this.als = als;
25
+ this.sessionAuthzOptions = sessionAuthzOptions;
26
+ }
27
+ use(req, res, next) {
28
+ const keepSessionInfo = Boolean(this.sessionAuthzOptions.keepSessionInfo);
29
+ if (!req.session) {
30
+ return next(new errors_1.AuthzError('Login sessions require session support. Did you forget to use `express-session` middleware?'));
83
31
  }
84
- req.session.save(function(err) {
85
- if (err) {
86
- return reject(err);
87
- }
88
- req.session.regenerate(function(err2) {
89
- if (err2) {
90
- return reject(err2);
91
- }
92
- if (keepSessionInfo) {
93
- (0, import_utils.merge)(req.session, prevSession);
94
- }
95
- resolve();
96
- });
32
+ const prevSession = req.session;
33
+ const store = {
34
+ user: undefined,
35
+ allowAnonymous: undefined,
36
+ guardResult: undefined,
37
+ authOptions: this.sessionAuthzOptions,
38
+ // ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L14
39
+ logIn: (user) => {
40
+ return new Promise((resolve, reject) => {
41
+ req.session.regenerate(function (err) {
42
+ if (err) {
43
+ return reject(err);
44
+ }
45
+ if (keepSessionInfo) {
46
+ (0, utils_1.merge)(req.session, prevSession);
47
+ }
48
+ // @ts-ignore
49
+ if (!req.session[constants_1.SESSION_PASSPORT_KEY]) {
50
+ // @ts-ignore
51
+ req.session[constants_1.SESSION_PASSPORT_KEY] = {};
52
+ }
53
+ // @ts-ignore
54
+ req.session[constants_1.SESSION_PASSPORT_KEY].user = user;
55
+ req.session.save(function (err) {
56
+ if (err) {
57
+ return reject(err);
58
+ }
59
+ resolve();
60
+ });
61
+ });
62
+ });
63
+ },
64
+ // ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L57
65
+ logOut: () => {
66
+ return new Promise((resolve, reject) => {
67
+ // @ts-ignore
68
+ if (req.session[constants_1.SESSION_PASSPORT_KEY]) {
69
+ // @ts-ignore
70
+ delete req.session[constants_1.SESSION_PASSPORT_KEY].user;
71
+ }
72
+ req.session.save(function (err) {
73
+ if (err) {
74
+ return reject(err);
75
+ }
76
+ req.session.regenerate(function (err) {
77
+ if (err) {
78
+ return reject(err);
79
+ }
80
+ if (keepSessionInfo) {
81
+ (0, utils_1.merge)(req.session, prevSession);
82
+ }
83
+ resolve();
84
+ });
85
+ });
86
+ });
87
+ },
88
+ setCookie: (0, utils_1.createSetCookieFn)(req, res)
89
+ };
90
+ this.als.run(store, () => {
91
+ next();
97
92
  });
98
- });
99
- },
100
- setCookie: (0, import_utils.createSetCookieFn)(req, res)
101
- };
102
- this.als.run(store, () => {
103
- next();
104
- });
105
- }
106
- };
107
- SessionAuthzAlsMiddleware = __decorateClass([
108
- __decorateParam(0, (0, import_common.Inject)(ALS_PROVIDER)),
109
- __decorateParam(1, (0, import_common.Inject)(SESSION_AUTHZ_OPTIONS))
110
- ], SessionAuthzAlsMiddleware);
111
- return (0, import_common.mixin)(SessionAuthzAlsMiddleware);
93
+ }
94
+ };
95
+ SessionAuthzAlsMiddleware = __decorate([
96
+ __param(0, (0, common_1.Inject)(ALS_PROVIDER)),
97
+ __param(1, (0, common_1.Inject)(SESSION_AUTHZ_OPTIONS)),
98
+ __metadata("design:paramtypes", [node_async_hooks_1.AsyncLocalStorage, Object])
99
+ ], SessionAuthzAlsMiddleware);
100
+ return (0, common_1.mixin)(SessionAuthzAlsMiddleware);
112
101
  };
113
- // Annotate the CommonJS export names for ESM import in node:
114
- 0 && (module.exports = {
115
- createSessionAuthzAlsMiddleware
116
- });
102
+ exports.createSessionAuthzAlsMiddleware = createSessionAuthzAlsMiddleware;
@@ -1,18 +1,11 @@
1
- import * as _nestjs_common from '@nestjs/common';
2
1
  import { ExecutionContext } from '@nestjs/common';
3
2
  import { Reflector } from '@nestjs/core';
4
- import { AsyncLocalStorage } from 'async_hooks';
5
- import { AuthzProviderClass } from '../authz.provider.js';
6
- import { AuthzError } from '../errors.js';
7
- import { SessionAlsType } from './session-authz-als.middleware.js';
8
- import { SessionAuthzOptions } from './session-authz.interface.js';
9
- import 'node:async_hooks';
10
- import 'express';
11
- import '../utils/types.js';
12
- import '@nestjs/common/interfaces';
13
- import 'express-session';
14
-
15
- declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]: [string, any, any, any, any]) => _nestjs_common.Type<Omit<{
3
+ import type { AsyncLocalStorage } from 'async_hooks';
4
+ import { AuthzProviderClass } from '../authz.provider';
5
+ import { type AuthzError } from '../errors';
6
+ import type { SessionAlsType } from './session-authz-als.middleware';
7
+ import type { SessionAuthzOptions } from './session-authz.interface';
8
+ export declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]: [string, any, any, any, any]) => import("@nestjs/common").Type<Omit<{
16
9
  readonly reflector: Reflector;
17
10
  readonly authzProvider: AuthzProviderClass<unknown, unknown>;
18
11
  readonly sessionAuthzOptions: SessionAuthzOptions;
@@ -39,5 +32,3 @@ declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSI
39
32
  } = any>(request: TRequest): Promise<void>;
40
33
  getRequest(context: ExecutionContext): any;
41
34
  }, "als" | "reflector" | "authzProvider" | "sessionAuthzOptions">>;
42
-
43
- export { createSessionAuthzGuard };
@@ -1,122 +1,102 @@
1
- var __defProp = Object.defineProperty;
2
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
3
- var __getOwnPropNames = Object.getOwnPropertyNames;
4
- var __hasOwnProp = Object.prototype.hasOwnProperty;
5
- var __export = (target, all) => {
6
- for (var name in all)
7
- __defProp(target, name, { get: all[name], enumerable: true });
1
+ "use strict";
2
+ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
3
+ var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
4
+ if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
5
+ else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
6
+ return c > 3 && r && Object.defineProperty(target, key, r), r;
8
7
  };
9
- var __copyProps = (to, from, except, desc) => {
10
- if (from && typeof from === "object" || typeof from === "function") {
11
- for (let key of __getOwnPropNames(from))
12
- if (!__hasOwnProp.call(to, key) && key !== except)
13
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
14
- }
15
- return to;
8
+ var __metadata = (this && this.__metadata) || function (k, v) {
9
+ if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
16
10
  };
17
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
18
- var __decorateClass = (decorators, target, key, kind) => {
19
- var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
20
- for (var i = decorators.length - 1, decorator; i >= 0; i--)
21
- if (decorator = decorators[i])
22
- result = (kind ? decorator(target, key, result) : decorator(result)) || result;
23
- if (kind && result) __defProp(target, key, result);
24
- return result;
11
+ var __param = (this && this.__param) || function (paramIndex, decorator) {
12
+ return function (target, key) { decorator(target, key, paramIndex); }
25
13
  };
26
- var __decorateParam = (index, decorator) => (target, key) => decorator(target, key, index);
27
- var session_authz_guard_exports = {};
28
- __export(session_authz_guard_exports, {
29
- createSessionAuthzGuard: () => createSessionAuthzGuard
30
- });
31
- module.exports = __toCommonJS(session_authz_guard_exports);
32
- var import_common = require("@nestjs/common");
33
- var import_passport = require("@nestjs/passport");
34
- var import_errors = require("../errors");
35
- var import_utils = require("../utils");
36
- const createSessionAuthzGuard = ([
37
- SESSION_STRATEGY,
38
- AUTHZ_PROVIDER,
39
- SESSION_AUTHZ_OPTIONS,
40
- ALS_PROVIDER,
41
- SESSION_META_KEY
42
- ]) => {
43
- let SessionAuthzGuard = class extends (0, import_passport.AuthGuard)(SESSION_STRATEGY) {
44
- constructor(reflector, authzProvider, sessionAuthzOptions, als) {
45
- super();
46
- this.reflector = reflector;
47
- this.authzProvider = authzProvider;
48
- this.sessionAuthzOptions = sessionAuthzOptions;
49
- this.als = als;
50
- }
51
- getAuthenticateOptions() {
52
- return {
53
- property: this.sessionAuthzOptions.passportProperty,
54
- session: false
55
- };
56
- }
57
- /**
58
- *
59
- * recives err, user, info from JwtStrategy.validate
60
- *
61
- * will return request.user=null if allowAnonymous=true
62
- *
63
- * @param _err will always be null
64
- * @param user if user is null, then info will be AuthError. if user is defined, then info will be undefined.
65
- * @param info AuthzError or undefined
66
- * @returns
67
- */
68
- handleRequest(_err, user, info) {
69
- const store = (0, import_utils.getAlsStore)(this.als);
70
- if (info) {
71
- if (store.allowAnonymous && info.name === import_errors.AuthzAnonymousError.name) {
72
- return user;
14
+ Object.defineProperty(exports, "__esModule", { value: true });
15
+ exports.createSessionAuthzGuard = void 0;
16
+ const common_1 = require("@nestjs/common");
17
+ const core_1 = require("@nestjs/core");
18
+ const passport_1 = require("@nestjs/passport");
19
+ const authz_provider_1 = require("../authz.provider");
20
+ const errors_1 = require("../errors");
21
+ const utils_1 = require("../utils");
22
+ const createSessionAuthzGuard = ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]) => {
23
+ let SessionAuthzGuard = class SessionAuthzGuard extends (0, passport_1.AuthGuard)(SESSION_STRATEGY) {
24
+ constructor(reflector, authzProvider, sessionAuthzOptions, als) {
25
+ super();
26
+ this.reflector = reflector;
27
+ this.authzProvider = authzProvider;
28
+ this.sessionAuthzOptions = sessionAuthzOptions;
29
+ this.als = als;
73
30
  }
74
- store.guardResult = false;
75
- throw info;
76
- }
77
- return user;
78
- }
79
- async canActivate(context) {
80
- const store = (0, import_utils.getAlsStore)(this.als);
81
- if ((0, import_utils.isNotFalsy)(store.guardResult)) {
82
- return store.guardResult;
83
- }
84
- const paramsList = (0, import_utils.normalizedArray)(
85
- this.reflector.getAll(SESSION_META_KEY, [context.getClass(), context.getHandler()])
86
- );
87
- if (paramsList.length && Boolean(paramsList[paramsList.length - 1].options?.public)) {
88
- store.guardResult = true;
89
- return true;
90
- }
91
- const contextParamsList = (0, import_utils.getContextAuthzMetaParamsList)(paramsList, {
92
- defaultOverride: this.sessionAuthzOptions.defaultOverride,
93
- skipFalsyMetadata: this.sessionAuthzOptions.skipFalsyMetadata
94
- });
95
- const req = context.switchToHttp().getRequest();
96
- store.allowAnonymous = (0, import_utils.getAllowAnonymous)(contextParamsList, {
97
- defaultAllowAnonymous: this.sessionAuthzOptions.defaultAllowAnonymous
98
- });
99
- await super.canActivate(context);
100
- const user = (0, import_utils.getPassportProperty)(req);
101
- if (store.allowAnonymous && !user) {
102
- return true;
103
- }
104
- for (const ele of contextParamsList) {
105
- if (!await this.authzProvider.authorize(user, ele.metaData)) {
106
- return false;
31
+ getAuthenticateOptions() {
32
+ return {
33
+ property: this.sessionAuthzOptions.passportProperty,
34
+ session: false
35
+ };
107
36
  }
108
- }
109
- return true;
110
- }
111
- };
112
- SessionAuthzGuard = __decorateClass([
113
- __decorateParam(1, (0, import_common.Inject)(AUTHZ_PROVIDER)),
114
- __decorateParam(2, (0, import_common.Inject)(SESSION_AUTHZ_OPTIONS)),
115
- __decorateParam(3, (0, import_common.Inject)(ALS_PROVIDER))
116
- ], SessionAuthzGuard);
117
- return (0, import_common.mixin)(SessionAuthzGuard);
37
+ /**
38
+ *
39
+ * recives err, user, info from JwtStrategy.validate
40
+ *
41
+ * will return request.user=null if allowAnonymous=true
42
+ *
43
+ * @param _err will always be null
44
+ * @param user if user is null, then info will be AuthError. if user is defined, then info will be undefined.
45
+ * @param info AuthzError or undefined
46
+ * @returns
47
+ */
48
+ handleRequest(_err, user, info) {
49
+ const store = (0, utils_1.getAlsStore)(this.als);
50
+ if (info) {
51
+ if (store.allowAnonymous && info.name === errors_1.AuthzAnonymousError.name) {
52
+ // user is null.
53
+ return user;
54
+ }
55
+ store.guardResult = false;
56
+ throw info;
57
+ }
58
+ return user;
59
+ }
60
+ async canActivate(context) {
61
+ const store = (0, utils_1.getAlsStore)(this.als);
62
+ if ((0, utils_1.isNotFalsy)(store.guardResult)) {
63
+ return store.guardResult;
64
+ }
65
+ const paramsList = (0, utils_1.normalizedArray)(this.reflector.getAll(SESSION_META_KEY, [context.getClass(), context.getHandler()]));
66
+ // bypass if last meta is public
67
+ if (paramsList.length && Boolean(paramsList[paramsList.length - 1].options?.public)) {
68
+ store.guardResult = true;
69
+ return true;
70
+ }
71
+ const contextParamsList = (0, utils_1.getContextAuthzMetaParamsList)(paramsList, {
72
+ defaultOverride: this.sessionAuthzOptions.defaultOverride,
73
+ skipFalsyMetadata: this.sessionAuthzOptions.skipFalsyMetadata
74
+ });
75
+ const req = context.switchToHttp().getRequest();
76
+ store.allowAnonymous = (0, utils_1.getAllowAnonymous)(contextParamsList, {
77
+ defaultAllowAnonymous: this.sessionAuthzOptions.defaultAllowAnonymous
78
+ });
79
+ await super.canActivate(context);
80
+ // will be null if allowAnonymous=true.
81
+ const user = (0, utils_1.getPassportProperty)(req);
82
+ if (store.allowAnonymous && !user) {
83
+ return true;
84
+ }
85
+ for (const ele of contextParamsList) {
86
+ if (!(await this.authzProvider.authorize(user, ele.metaData))) {
87
+ return false;
88
+ }
89
+ }
90
+ return true;
91
+ }
92
+ };
93
+ SessionAuthzGuard = __decorate([
94
+ __param(1, (0, common_1.Inject)(AUTHZ_PROVIDER)),
95
+ __param(2, (0, common_1.Inject)(SESSION_AUTHZ_OPTIONS)),
96
+ __param(3, (0, common_1.Inject)(ALS_PROVIDER)),
97
+ __metadata("design:paramtypes", [core_1.Reflector,
98
+ authz_provider_1.AuthzProviderClass, Object, Function])
99
+ ], SessionAuthzGuard);
100
+ return (0, common_1.mixin)(SessionAuthzGuard);
118
101
  };
119
- // Annotate the CommonJS export names for ESM import in node:
120
- 0 && (module.exports = {
121
- createSessionAuthzGuard
122
- });
102
+ exports.createSessionAuthzGuard = createSessionAuthzGuard;
@@ -1,12 +1,7 @@
1
1
  import session from 'express-session';
2
- import { AuthzModuleBaseOptions } from '../utils/types.js';
3
- import '@nestjs/common';
4
- import '@nestjs/common/interfaces';
5
- import 'express';
6
- import '../authz.provider.js';
7
-
8
- type SessionOptions = Parameters<typeof session>[0];
9
- type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
2
+ import type { AuthzModuleBaseOptions } from '../utils';
3
+ export type SessionOptions = Parameters<typeof session>[0];
4
+ export type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
10
5
  /**
11
6
  * Session options.
12
7
  *
@@ -21,7 +16,7 @@ type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
21
16
  keepSessionInfo?: boolean;
22
17
  };
23
18
  };
24
- declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAuthzModuleOptions>) => {
19
+ export declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAuthzModuleOptions>) => {
25
20
  defaultOverride: boolean;
26
21
  passportProperty: string;
27
22
  skipFalsyMetadata: boolean;
@@ -29,6 +24,4 @@ declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAut
29
24
  keepSessionInfo: boolean | undefined;
30
25
  session: SessionOptions;
31
26
  };
32
- type SessionAuthzOptions = ReturnType<typeof normalizedSessionAuthzModuleOptions>;
33
-
34
- export { type SessionAuthzModuleOptions, type SessionAuthzOptions, type SessionOptions, normalizedSessionAuthzModuleOptions };
27
+ export type SessionAuthzOptions = ReturnType<typeof normalizedSessionAuthzModuleOptions>;
@@ -1,42 +1,20 @@
1
- var __defProp = Object.defineProperty;
2
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
3
- var __getOwnPropNames = Object.getOwnPropertyNames;
4
- var __hasOwnProp = Object.prototype.hasOwnProperty;
5
- var __export = (target, all) => {
6
- for (var name in all)
7
- __defProp(target, name, { get: all[name], enumerable: true });
8
- };
9
- var __copyProps = (to, from, except, desc) => {
10
- if (from && typeof from === "object" || typeof from === "function") {
11
- for (let key of __getOwnPropNames(from))
12
- if (!__hasOwnProp.call(to, key) && key !== except)
13
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
14
- }
15
- return to;
16
- };
17
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
18
- var session_authz_interface_exports = {};
19
- __export(session_authz_interface_exports, {
20
- normalizedSessionAuthzModuleOptions: () => normalizedSessionAuthzModuleOptions
21
- });
22
- module.exports = __toCommonJS(session_authz_interface_exports);
23
- var import_constants = require("../constants");
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.normalizedSessionAuthzModuleOptions = void 0;
4
+ const constants_1 = require("../constants");
24
5
  const normalizedSessionAuthzModuleOptions = (options = {}) => {
25
- const { keepSessionInfo, ...sessionOpts } = options.session ?? {};
26
- return {
27
- defaultOverride: options.defaultOverride || false,
28
- passportProperty: options.passportProperty || import_constants.DEFAULT_PASSPORT_PROPERTY_VALUE,
29
- skipFalsyMetadata: options.skipFalsyMetadata || false,
30
- defaultAllowAnonymous: options.defaultAllowAnonymous || false,
31
- keepSessionInfo,
32
- session: {
33
- resave: false,
34
- saveUninitialized: false,
35
- ...sessionOpts
36
- }
37
- };
6
+ const { keepSessionInfo, ...sessionOpts } = options.session ?? {};
7
+ return {
8
+ defaultOverride: options.defaultOverride || false,
9
+ passportProperty: options.passportProperty || constants_1.DEFAULT_PASSPORT_PROPERTY_VALUE,
10
+ skipFalsyMetadata: options.skipFalsyMetadata || false,
11
+ defaultAllowAnonymous: options.defaultAllowAnonymous || false,
12
+ keepSessionInfo,
13
+ session: {
14
+ resave: false,
15
+ saveUninitialized: false,
16
+ ...sessionOpts
17
+ }
18
+ };
38
19
  };
39
- // Annotate the CommonJS export names for ESM import in node:
40
- 0 && (module.exports = {
41
- normalizedSessionAuthzModuleOptions
42
- });
20
+ exports.normalizedSessionAuthzModuleOptions = normalizedSessionAuthzModuleOptions;