@nestjs-kitchen/authz 2.0.3 → 2.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/authz.provider.d.ts +1 -3
- package/dist/authz.provider.js +27 -43
- package/dist/constants.d.ts +6 -8
- package/dist/constants.js +13 -46
- package/dist/errors.d.ts +3 -5
- package/dist/errors.js +29 -44
- package/dist/index.d.ts +5 -21
- package/dist/index.js +16 -45
- package/dist/jwt/extract-jwt.d.ts +4 -7
- package/dist/jwt/extract-jwt.js +136 -152
- package/dist/jwt/index.d.ts +2 -16
- package/dist/jwt/index.js +7 -30
- package/dist/jwt/jwt-authz-als.middleware.d.ts +6 -16
- package/dist/jwt/jwt-authz-als.middleware.js +40 -60
- package/dist/jwt/jwt-authz.guard.d.ts +8 -21
- package/dist/jwt/jwt-authz.guard.js +126 -148
- package/dist/jwt/jwt-authz.interface.d.ts +16 -25
- package/dist/jwt/jwt-authz.interface.js +66 -114
- package/dist/jwt/jwt-authz.module.d.ts +19 -31
- package/dist/jwt/jwt-authz.module.js +240 -242
- package/dist/jwt/jwt-authz.service.d.ts +6 -17
- package/dist/jwt/jwt-authz.service.js +113 -144
- package/dist/jwt/jwt-authz.strategy.d.ts +5 -17
- package/dist/jwt/jwt-authz.strategy.js +127 -150
- package/dist/session/index.d.ts +1 -12
- package/dist/session/index.js +5 -27
- package/dist/session/session-authz-als.middleware.d.ts +5 -12
- package/dist/session/session-authz-als.middleware.js +95 -109
- package/dist/session/session-authz.guard.d.ts +6 -15
- package/dist/session/session-authz.guard.js +96 -116
- package/dist/session/session-authz.interface.d.ts +5 -12
- package/dist/session/session-authz.interface.js +18 -40
- package/dist/session/session-authz.module.d.ts +18 -26
- package/dist/session/session-authz.module.js +231 -237
- package/dist/session/session-authz.service.d.ts +5 -13
- package/dist/session/session-authz.service.js +66 -83
- package/dist/session/session-authz.strategy.d.ts +4 -12
- package/dist/session/session-authz.strategy.js +65 -78
- package/dist/user.decorator.d.ts +3 -6
- package/dist/user.decorator.js +25 -33
- package/dist/utils/cookie-parsers.d.ts +3 -6
- package/dist/utils/cookie-parsers.js +62 -63
- package/dist/utils/create-authz-decorator-factory.d.ts +3 -9
- package/dist/utils/create-authz-decorator-factory.js +29 -50
- package/dist/utils/create-set-cookie-fn.d.ts +3 -9
- package/dist/utils/create-set-cookie-fn.js +21 -42
- package/dist/utils/generics.d.ts +4 -6
- package/dist/utils/generics.js +31 -54
- package/dist/utils/get-allow-anonymous.d.ts +2 -9
- package/dist/utils/get-allow-anonymous.js +6 -27
- package/dist/utils/get-als-store.d.ts +2 -5
- package/dist/utils/get-als-store.js +10 -32
- package/dist/utils/get-context-authz-meta-params-list.d.ts +2 -9
- package/dist/utils/get-context-authz-meta-params-list.js +15 -33
- package/dist/utils/get-passport-property.d.ts +1 -3
- package/dist/utils/get-passport-property.js +7 -28
- package/dist/utils/index.d.ts +11 -16
- package/dist/utils/index.js +26 -40
- package/dist/utils/merge-dynamic-module-configs.d.ts +2 -5
- package/dist/utils/merge-dynamic-module-configs.js +13 -38
- package/dist/utils/msgpackrs.d.ts +2 -4
- package/dist/utils/msgpackrs.js +9 -32
- package/dist/utils/types.d.ts +23 -26
- package/dist/utils/types.js +2 -15
- package/package.json +4 -4
package/dist/session/index.js
CHANGED
|
@@ -1,27 +1,5 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
var
|
|
5
|
-
|
|
6
|
-
for (var name in all)
|
|
7
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
8
|
-
};
|
|
9
|
-
var __copyProps = (to, from, except, desc) => {
|
|
10
|
-
if (from && typeof from === "object" || typeof from === "function") {
|
|
11
|
-
for (let key of __getOwnPropNames(from))
|
|
12
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
13
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
14
|
-
}
|
|
15
|
-
return to;
|
|
16
|
-
};
|
|
17
|
-
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
18
|
-
var session_exports = {};
|
|
19
|
-
__export(session_exports, {
|
|
20
|
-
cereateSessionAuthzModule: () => import_session_authz.cereateSessionAuthzModule
|
|
21
|
-
});
|
|
22
|
-
module.exports = __toCommonJS(session_exports);
|
|
23
|
-
var import_session_authz = require("./session-authz.module");
|
|
24
|
-
// Annotate the CommonJS export names for ESM import in node:
|
|
25
|
-
0 && (module.exports = {
|
|
26
|
-
cereateSessionAuthzModule
|
|
27
|
-
});
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.cereateSessionAuthzModule = void 0;
|
|
4
|
+
var session_authz_module_1 = require("./session-authz.module");
|
|
5
|
+
Object.defineProperty(exports, "cereateSessionAuthzModule", { enumerable: true, get: function () { return session_authz_module_1.cereateSessionAuthzModule; } });
|
|
@@ -1,13 +1,8 @@
|
|
|
1
|
-
import * as _nestjs_common from '@nestjs/common';
|
|
2
1
|
import { AsyncLocalStorage } from 'node:async_hooks';
|
|
3
|
-
import { Request, Response
|
|
4
|
-
import { CookieOptionsWithSecret } from '../utils
|
|
5
|
-
import { SessionAuthzOptions } from './session-authz.interface
|
|
6
|
-
|
|
7
|
-
import '../authz.provider.js';
|
|
8
|
-
import 'express-session';
|
|
9
|
-
|
|
10
|
-
interface SessionAlsType<P, U> {
|
|
2
|
+
import type { NextFunction, Request, Response } from 'express';
|
|
3
|
+
import { type CookieOptionsWithSecret } from '../utils';
|
|
4
|
+
import type { SessionAuthzOptions } from './session-authz.interface';
|
|
5
|
+
export interface SessionAlsType<P, U> {
|
|
11
6
|
user?: U;
|
|
12
7
|
allowAnonymous?: boolean;
|
|
13
8
|
guardResult?: boolean;
|
|
@@ -16,10 +11,8 @@ interface SessionAlsType<P, U> {
|
|
|
16
11
|
logOut: () => Promise<void>;
|
|
17
12
|
setCookie: (name: string, value: string, options?: CookieOptionsWithSecret) => void;
|
|
18
13
|
}
|
|
19
|
-
declare const createSessionAuthzAlsMiddleware: ([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]: [any, any]) =>
|
|
14
|
+
export declare const createSessionAuthzAlsMiddleware: ([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]: [any, any]) => import("@nestjs/common").Type<Omit<{
|
|
20
15
|
readonly als: AsyncLocalStorage<SessionAlsType<unknown, unknown>>;
|
|
21
16
|
readonly sessionAuthzOptions: SessionAuthzOptions;
|
|
22
17
|
use(req: Request, res: Response, next: NextFunction): void;
|
|
23
18
|
}, "als" | "sessionAuthzOptions">>;
|
|
24
|
-
|
|
25
|
-
export { type SessionAlsType, createSessionAuthzAlsMiddleware };
|
|
@@ -1,116 +1,102 @@
|
|
|
1
|
-
|
|
2
|
-
var
|
|
3
|
-
var
|
|
4
|
-
|
|
5
|
-
var
|
|
6
|
-
|
|
7
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
8
7
|
};
|
|
9
|
-
var
|
|
10
|
-
|
|
11
|
-
for (let key of __getOwnPropNames(from))
|
|
12
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
13
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
14
|
-
}
|
|
15
|
-
return to;
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
16
10
|
};
|
|
17
|
-
var
|
|
18
|
-
|
|
19
|
-
var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
|
|
20
|
-
for (var i = decorators.length - 1, decorator; i >= 0; i--)
|
|
21
|
-
if (decorator = decorators[i])
|
|
22
|
-
result = (kind ? decorator(target, key, result) : decorator(result)) || result;
|
|
23
|
-
if (kind && result) __defProp(target, key, result);
|
|
24
|
-
return result;
|
|
11
|
+
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
|
+
return function (target, key) { decorator(target, key, paramIndex); }
|
|
25
13
|
};
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
var import_constants = require("../constants");
|
|
34
|
-
var import_errors = require("../errors");
|
|
35
|
-
var import_utils = require("../utils");
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
exports.createSessionAuthzAlsMiddleware = void 0;
|
|
16
|
+
const node_async_hooks_1 = require("node:async_hooks");
|
|
17
|
+
const common_1 = require("@nestjs/common");
|
|
18
|
+
const constants_1 = require("../constants");
|
|
19
|
+
const errors_1 = require("../errors");
|
|
20
|
+
const utils_1 = require("../utils");
|
|
36
21
|
const createSessionAuthzAlsMiddleware = ([ALS_PROVIDER, SESSION_AUTHZ_OPTIONS]) => {
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
new import_errors.AuthzError("Login sessions require session support. Did you forget to use `express-session` middleware?")
|
|
47
|
-
);
|
|
48
|
-
}
|
|
49
|
-
const prevSession = req.session;
|
|
50
|
-
const store = {
|
|
51
|
-
user: void 0,
|
|
52
|
-
allowAnonymous: void 0,
|
|
53
|
-
guardResult: void 0,
|
|
54
|
-
authOptions: this.sessionAuthzOptions,
|
|
55
|
-
// ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L14
|
|
56
|
-
logIn: (user) => {
|
|
57
|
-
return new Promise((resolve, reject) => {
|
|
58
|
-
req.session.regenerate(function(err) {
|
|
59
|
-
if (err) {
|
|
60
|
-
return reject(err);
|
|
61
|
-
}
|
|
62
|
-
if (keepSessionInfo) {
|
|
63
|
-
(0, import_utils.merge)(req.session, prevSession);
|
|
64
|
-
}
|
|
65
|
-
if (!req.session[import_constants.SESSION_PASSPORT_KEY]) {
|
|
66
|
-
req.session[import_constants.SESSION_PASSPORT_KEY] = {};
|
|
67
|
-
}
|
|
68
|
-
req.session[import_constants.SESSION_PASSPORT_KEY].user = user;
|
|
69
|
-
req.session.save(function(err2) {
|
|
70
|
-
if (err2) {
|
|
71
|
-
return reject(err2);
|
|
72
|
-
}
|
|
73
|
-
resolve();
|
|
74
|
-
});
|
|
75
|
-
});
|
|
76
|
-
});
|
|
77
|
-
},
|
|
78
|
-
// ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L57
|
|
79
|
-
logOut: () => {
|
|
80
|
-
return new Promise((resolve, reject) => {
|
|
81
|
-
if (req.session[import_constants.SESSION_PASSPORT_KEY]) {
|
|
82
|
-
delete req.session[import_constants.SESSION_PASSPORT_KEY].user;
|
|
22
|
+
let SessionAuthzAlsMiddleware = class SessionAuthzAlsMiddleware {
|
|
23
|
+
constructor(als, sessionAuthzOptions) {
|
|
24
|
+
this.als = als;
|
|
25
|
+
this.sessionAuthzOptions = sessionAuthzOptions;
|
|
26
|
+
}
|
|
27
|
+
use(req, res, next) {
|
|
28
|
+
const keepSessionInfo = Boolean(this.sessionAuthzOptions.keepSessionInfo);
|
|
29
|
+
if (!req.session) {
|
|
30
|
+
return next(new errors_1.AuthzError('Login sessions require session support. Did you forget to use `express-session` middleware?'));
|
|
83
31
|
}
|
|
84
|
-
req.session
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
32
|
+
const prevSession = req.session;
|
|
33
|
+
const store = {
|
|
34
|
+
user: undefined,
|
|
35
|
+
allowAnonymous: undefined,
|
|
36
|
+
guardResult: undefined,
|
|
37
|
+
authOptions: this.sessionAuthzOptions,
|
|
38
|
+
// ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L14
|
|
39
|
+
logIn: (user) => {
|
|
40
|
+
return new Promise((resolve, reject) => {
|
|
41
|
+
req.session.regenerate(function (err) {
|
|
42
|
+
if (err) {
|
|
43
|
+
return reject(err);
|
|
44
|
+
}
|
|
45
|
+
if (keepSessionInfo) {
|
|
46
|
+
(0, utils_1.merge)(req.session, prevSession);
|
|
47
|
+
}
|
|
48
|
+
// @ts-ignore
|
|
49
|
+
if (!req.session[constants_1.SESSION_PASSPORT_KEY]) {
|
|
50
|
+
// @ts-ignore
|
|
51
|
+
req.session[constants_1.SESSION_PASSPORT_KEY] = {};
|
|
52
|
+
}
|
|
53
|
+
// @ts-ignore
|
|
54
|
+
req.session[constants_1.SESSION_PASSPORT_KEY].user = user;
|
|
55
|
+
req.session.save(function (err) {
|
|
56
|
+
if (err) {
|
|
57
|
+
return reject(err);
|
|
58
|
+
}
|
|
59
|
+
resolve();
|
|
60
|
+
});
|
|
61
|
+
});
|
|
62
|
+
});
|
|
63
|
+
},
|
|
64
|
+
// ref: https://github.com/jaredhanson/passport/blob/217018dbc46dcd4118dd6f2c60c8d97010c587f8/lib/sessionmanager.js#L57
|
|
65
|
+
logOut: () => {
|
|
66
|
+
return new Promise((resolve, reject) => {
|
|
67
|
+
// @ts-ignore
|
|
68
|
+
if (req.session[constants_1.SESSION_PASSPORT_KEY]) {
|
|
69
|
+
// @ts-ignore
|
|
70
|
+
delete req.session[constants_1.SESSION_PASSPORT_KEY].user;
|
|
71
|
+
}
|
|
72
|
+
req.session.save(function (err) {
|
|
73
|
+
if (err) {
|
|
74
|
+
return reject(err);
|
|
75
|
+
}
|
|
76
|
+
req.session.regenerate(function (err) {
|
|
77
|
+
if (err) {
|
|
78
|
+
return reject(err);
|
|
79
|
+
}
|
|
80
|
+
if (keepSessionInfo) {
|
|
81
|
+
(0, utils_1.merge)(req.session, prevSession);
|
|
82
|
+
}
|
|
83
|
+
resolve();
|
|
84
|
+
});
|
|
85
|
+
});
|
|
86
|
+
});
|
|
87
|
+
},
|
|
88
|
+
setCookie: (0, utils_1.createSetCookieFn)(req, res)
|
|
89
|
+
};
|
|
90
|
+
this.als.run(store, () => {
|
|
91
|
+
next();
|
|
97
92
|
});
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
};
|
|
107
|
-
SessionAuthzAlsMiddleware = __decorateClass([
|
|
108
|
-
__decorateParam(0, (0, import_common.Inject)(ALS_PROVIDER)),
|
|
109
|
-
__decorateParam(1, (0, import_common.Inject)(SESSION_AUTHZ_OPTIONS))
|
|
110
|
-
], SessionAuthzAlsMiddleware);
|
|
111
|
-
return (0, import_common.mixin)(SessionAuthzAlsMiddleware);
|
|
93
|
+
}
|
|
94
|
+
};
|
|
95
|
+
SessionAuthzAlsMiddleware = __decorate([
|
|
96
|
+
__param(0, (0, common_1.Inject)(ALS_PROVIDER)),
|
|
97
|
+
__param(1, (0, common_1.Inject)(SESSION_AUTHZ_OPTIONS)),
|
|
98
|
+
__metadata("design:paramtypes", [node_async_hooks_1.AsyncLocalStorage, Object])
|
|
99
|
+
], SessionAuthzAlsMiddleware);
|
|
100
|
+
return (0, common_1.mixin)(SessionAuthzAlsMiddleware);
|
|
112
101
|
};
|
|
113
|
-
|
|
114
|
-
0 && (module.exports = {
|
|
115
|
-
createSessionAuthzAlsMiddleware
|
|
116
|
-
});
|
|
102
|
+
exports.createSessionAuthzAlsMiddleware = createSessionAuthzAlsMiddleware;
|
|
@@ -1,18 +1,11 @@
|
|
|
1
|
-
import * as _nestjs_common from '@nestjs/common';
|
|
2
1
|
import { ExecutionContext } from '@nestjs/common';
|
|
3
2
|
import { Reflector } from '@nestjs/core';
|
|
4
|
-
import { AsyncLocalStorage } from 'async_hooks';
|
|
5
|
-
import { AuthzProviderClass } from '../authz.provider
|
|
6
|
-
import { AuthzError } from '../errors
|
|
7
|
-
import { SessionAlsType } from './session-authz-als.middleware
|
|
8
|
-
import { SessionAuthzOptions } from './session-authz.interface
|
|
9
|
-
|
|
10
|
-
import 'express';
|
|
11
|
-
import '../utils/types.js';
|
|
12
|
-
import '@nestjs/common/interfaces';
|
|
13
|
-
import 'express-session';
|
|
14
|
-
|
|
15
|
-
declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]: [string, any, any, any, any]) => _nestjs_common.Type<Omit<{
|
|
3
|
+
import type { AsyncLocalStorage } from 'async_hooks';
|
|
4
|
+
import { AuthzProviderClass } from '../authz.provider';
|
|
5
|
+
import { type AuthzError } from '../errors';
|
|
6
|
+
import type { SessionAlsType } from './session-authz-als.middleware';
|
|
7
|
+
import type { SessionAuthzOptions } from './session-authz.interface';
|
|
8
|
+
export declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]: [string, any, any, any, any]) => import("@nestjs/common").Type<Omit<{
|
|
16
9
|
readonly reflector: Reflector;
|
|
17
10
|
readonly authzProvider: AuthzProviderClass<unknown, unknown>;
|
|
18
11
|
readonly sessionAuthzOptions: SessionAuthzOptions;
|
|
@@ -39,5 +32,3 @@ declare const createSessionAuthzGuard: ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSI
|
|
|
39
32
|
} = any>(request: TRequest): Promise<void>;
|
|
40
33
|
getRequest(context: ExecutionContext): any;
|
|
41
34
|
}, "als" | "reflector" | "authzProvider" | "sessionAuthzOptions">>;
|
|
42
|
-
|
|
43
|
-
export { createSessionAuthzGuard };
|
|
@@ -1,122 +1,102 @@
|
|
|
1
|
-
|
|
2
|
-
var
|
|
3
|
-
var
|
|
4
|
-
|
|
5
|
-
var
|
|
6
|
-
|
|
7
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
8
7
|
};
|
|
9
|
-
var
|
|
10
|
-
|
|
11
|
-
for (let key of __getOwnPropNames(from))
|
|
12
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
13
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
14
|
-
}
|
|
15
|
-
return to;
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
16
10
|
};
|
|
17
|
-
var
|
|
18
|
-
|
|
19
|
-
var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
|
|
20
|
-
for (var i = decorators.length - 1, decorator; i >= 0; i--)
|
|
21
|
-
if (decorator = decorators[i])
|
|
22
|
-
result = (kind ? decorator(target, key, result) : decorator(result)) || result;
|
|
23
|
-
if (kind && result) __defProp(target, key, result);
|
|
24
|
-
return result;
|
|
11
|
+
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
|
+
return function (target, key) { decorator(target, key, paramIndex); }
|
|
25
13
|
};
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
]) => {
|
|
43
|
-
let SessionAuthzGuard = class extends (0, import_passport.AuthGuard)(SESSION_STRATEGY) {
|
|
44
|
-
constructor(reflector, authzProvider, sessionAuthzOptions, als) {
|
|
45
|
-
super();
|
|
46
|
-
this.reflector = reflector;
|
|
47
|
-
this.authzProvider = authzProvider;
|
|
48
|
-
this.sessionAuthzOptions = sessionAuthzOptions;
|
|
49
|
-
this.als = als;
|
|
50
|
-
}
|
|
51
|
-
getAuthenticateOptions() {
|
|
52
|
-
return {
|
|
53
|
-
property: this.sessionAuthzOptions.passportProperty,
|
|
54
|
-
session: false
|
|
55
|
-
};
|
|
56
|
-
}
|
|
57
|
-
/**
|
|
58
|
-
*
|
|
59
|
-
* recives err, user, info from JwtStrategy.validate
|
|
60
|
-
*
|
|
61
|
-
* will return request.user=null if allowAnonymous=true
|
|
62
|
-
*
|
|
63
|
-
* @param _err will always be null
|
|
64
|
-
* @param user if user is null, then info will be AuthError. if user is defined, then info will be undefined.
|
|
65
|
-
* @param info AuthzError or undefined
|
|
66
|
-
* @returns
|
|
67
|
-
*/
|
|
68
|
-
handleRequest(_err, user, info) {
|
|
69
|
-
const store = (0, import_utils.getAlsStore)(this.als);
|
|
70
|
-
if (info) {
|
|
71
|
-
if (store.allowAnonymous && info.name === import_errors.AuthzAnonymousError.name) {
|
|
72
|
-
return user;
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
exports.createSessionAuthzGuard = void 0;
|
|
16
|
+
const common_1 = require("@nestjs/common");
|
|
17
|
+
const core_1 = require("@nestjs/core");
|
|
18
|
+
const passport_1 = require("@nestjs/passport");
|
|
19
|
+
const authz_provider_1 = require("../authz.provider");
|
|
20
|
+
const errors_1 = require("../errors");
|
|
21
|
+
const utils_1 = require("../utils");
|
|
22
|
+
const createSessionAuthzGuard = ([SESSION_STRATEGY, AUTHZ_PROVIDER, SESSION_AUTHZ_OPTIONS, ALS_PROVIDER, SESSION_META_KEY]) => {
|
|
23
|
+
let SessionAuthzGuard = class SessionAuthzGuard extends (0, passport_1.AuthGuard)(SESSION_STRATEGY) {
|
|
24
|
+
constructor(reflector, authzProvider, sessionAuthzOptions, als) {
|
|
25
|
+
super();
|
|
26
|
+
this.reflector = reflector;
|
|
27
|
+
this.authzProvider = authzProvider;
|
|
28
|
+
this.sessionAuthzOptions = sessionAuthzOptions;
|
|
29
|
+
this.als = als;
|
|
73
30
|
}
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
async canActivate(context) {
|
|
80
|
-
const store = (0, import_utils.getAlsStore)(this.als);
|
|
81
|
-
if ((0, import_utils.isNotFalsy)(store.guardResult)) {
|
|
82
|
-
return store.guardResult;
|
|
83
|
-
}
|
|
84
|
-
const paramsList = (0, import_utils.normalizedArray)(
|
|
85
|
-
this.reflector.getAll(SESSION_META_KEY, [context.getClass(), context.getHandler()])
|
|
86
|
-
);
|
|
87
|
-
if (paramsList.length && Boolean(paramsList[paramsList.length - 1].options?.public)) {
|
|
88
|
-
store.guardResult = true;
|
|
89
|
-
return true;
|
|
90
|
-
}
|
|
91
|
-
const contextParamsList = (0, import_utils.getContextAuthzMetaParamsList)(paramsList, {
|
|
92
|
-
defaultOverride: this.sessionAuthzOptions.defaultOverride,
|
|
93
|
-
skipFalsyMetadata: this.sessionAuthzOptions.skipFalsyMetadata
|
|
94
|
-
});
|
|
95
|
-
const req = context.switchToHttp().getRequest();
|
|
96
|
-
store.allowAnonymous = (0, import_utils.getAllowAnonymous)(contextParamsList, {
|
|
97
|
-
defaultAllowAnonymous: this.sessionAuthzOptions.defaultAllowAnonymous
|
|
98
|
-
});
|
|
99
|
-
await super.canActivate(context);
|
|
100
|
-
const user = (0, import_utils.getPassportProperty)(req);
|
|
101
|
-
if (store.allowAnonymous && !user) {
|
|
102
|
-
return true;
|
|
103
|
-
}
|
|
104
|
-
for (const ele of contextParamsList) {
|
|
105
|
-
if (!await this.authzProvider.authorize(user, ele.metaData)) {
|
|
106
|
-
return false;
|
|
31
|
+
getAuthenticateOptions() {
|
|
32
|
+
return {
|
|
33
|
+
property: this.sessionAuthzOptions.passportProperty,
|
|
34
|
+
session: false
|
|
35
|
+
};
|
|
107
36
|
}
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
37
|
+
/**
|
|
38
|
+
*
|
|
39
|
+
* recives err, user, info from JwtStrategy.validate
|
|
40
|
+
*
|
|
41
|
+
* will return request.user=null if allowAnonymous=true
|
|
42
|
+
*
|
|
43
|
+
* @param _err will always be null
|
|
44
|
+
* @param user if user is null, then info will be AuthError. if user is defined, then info will be undefined.
|
|
45
|
+
* @param info AuthzError or undefined
|
|
46
|
+
* @returns
|
|
47
|
+
*/
|
|
48
|
+
handleRequest(_err, user, info) {
|
|
49
|
+
const store = (0, utils_1.getAlsStore)(this.als);
|
|
50
|
+
if (info) {
|
|
51
|
+
if (store.allowAnonymous && info.name === errors_1.AuthzAnonymousError.name) {
|
|
52
|
+
// user is null.
|
|
53
|
+
return user;
|
|
54
|
+
}
|
|
55
|
+
store.guardResult = false;
|
|
56
|
+
throw info;
|
|
57
|
+
}
|
|
58
|
+
return user;
|
|
59
|
+
}
|
|
60
|
+
async canActivate(context) {
|
|
61
|
+
const store = (0, utils_1.getAlsStore)(this.als);
|
|
62
|
+
if ((0, utils_1.isNotFalsy)(store.guardResult)) {
|
|
63
|
+
return store.guardResult;
|
|
64
|
+
}
|
|
65
|
+
const paramsList = (0, utils_1.normalizedArray)(this.reflector.getAll(SESSION_META_KEY, [context.getClass(), context.getHandler()]));
|
|
66
|
+
// bypass if last meta is public
|
|
67
|
+
if (paramsList.length && Boolean(paramsList[paramsList.length - 1].options?.public)) {
|
|
68
|
+
store.guardResult = true;
|
|
69
|
+
return true;
|
|
70
|
+
}
|
|
71
|
+
const contextParamsList = (0, utils_1.getContextAuthzMetaParamsList)(paramsList, {
|
|
72
|
+
defaultOverride: this.sessionAuthzOptions.defaultOverride,
|
|
73
|
+
skipFalsyMetadata: this.sessionAuthzOptions.skipFalsyMetadata
|
|
74
|
+
});
|
|
75
|
+
const req = context.switchToHttp().getRequest();
|
|
76
|
+
store.allowAnonymous = (0, utils_1.getAllowAnonymous)(contextParamsList, {
|
|
77
|
+
defaultAllowAnonymous: this.sessionAuthzOptions.defaultAllowAnonymous
|
|
78
|
+
});
|
|
79
|
+
await super.canActivate(context);
|
|
80
|
+
// will be null if allowAnonymous=true.
|
|
81
|
+
const user = (0, utils_1.getPassportProperty)(req);
|
|
82
|
+
if (store.allowAnonymous && !user) {
|
|
83
|
+
return true;
|
|
84
|
+
}
|
|
85
|
+
for (const ele of contextParamsList) {
|
|
86
|
+
if (!(await this.authzProvider.authorize(user, ele.metaData))) {
|
|
87
|
+
return false;
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
return true;
|
|
91
|
+
}
|
|
92
|
+
};
|
|
93
|
+
SessionAuthzGuard = __decorate([
|
|
94
|
+
__param(1, (0, common_1.Inject)(AUTHZ_PROVIDER)),
|
|
95
|
+
__param(2, (0, common_1.Inject)(SESSION_AUTHZ_OPTIONS)),
|
|
96
|
+
__param(3, (0, common_1.Inject)(ALS_PROVIDER)),
|
|
97
|
+
__metadata("design:paramtypes", [core_1.Reflector,
|
|
98
|
+
authz_provider_1.AuthzProviderClass, Object, Function])
|
|
99
|
+
], SessionAuthzGuard);
|
|
100
|
+
return (0, common_1.mixin)(SessionAuthzGuard);
|
|
118
101
|
};
|
|
119
|
-
|
|
120
|
-
0 && (module.exports = {
|
|
121
|
-
createSessionAuthzGuard
|
|
122
|
-
});
|
|
102
|
+
exports.createSessionAuthzGuard = createSessionAuthzGuard;
|
|
@@ -1,12 +1,7 @@
|
|
|
1
1
|
import session from 'express-session';
|
|
2
|
-
import { AuthzModuleBaseOptions } from '../utils
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
import 'express';
|
|
6
|
-
import '../authz.provider.js';
|
|
7
|
-
|
|
8
|
-
type SessionOptions = Parameters<typeof session>[0];
|
|
9
|
-
type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
|
|
2
|
+
import type { AuthzModuleBaseOptions } from '../utils';
|
|
3
|
+
export type SessionOptions = Parameters<typeof session>[0];
|
|
4
|
+
export type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
|
|
10
5
|
/**
|
|
11
6
|
* Session options.
|
|
12
7
|
*
|
|
@@ -21,7 +16,7 @@ type SessionAuthzModuleOptions = Partial<AuthzModuleBaseOptions> & {
|
|
|
21
16
|
keepSessionInfo?: boolean;
|
|
22
17
|
};
|
|
23
18
|
};
|
|
24
|
-
declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAuthzModuleOptions>) => {
|
|
19
|
+
export declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAuthzModuleOptions>) => {
|
|
25
20
|
defaultOverride: boolean;
|
|
26
21
|
passportProperty: string;
|
|
27
22
|
skipFalsyMetadata: boolean;
|
|
@@ -29,6 +24,4 @@ declare const normalizedSessionAuthzModuleOptions: (options?: Partial<SessionAut
|
|
|
29
24
|
keepSessionInfo: boolean | undefined;
|
|
30
25
|
session: SessionOptions;
|
|
31
26
|
};
|
|
32
|
-
type SessionAuthzOptions = ReturnType<typeof normalizedSessionAuthzModuleOptions>;
|
|
33
|
-
|
|
34
|
-
export { type SessionAuthzModuleOptions, type SessionAuthzOptions, type SessionOptions, normalizedSessionAuthzModuleOptions };
|
|
27
|
+
export type SessionAuthzOptions = ReturnType<typeof normalizedSessionAuthzModuleOptions>;
|
|
@@ -1,42 +1,20 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
var __export = (target, all) => {
|
|
6
|
-
for (var name in all)
|
|
7
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
8
|
-
};
|
|
9
|
-
var __copyProps = (to, from, except, desc) => {
|
|
10
|
-
if (from && typeof from === "object" || typeof from === "function") {
|
|
11
|
-
for (let key of __getOwnPropNames(from))
|
|
12
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
13
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
14
|
-
}
|
|
15
|
-
return to;
|
|
16
|
-
};
|
|
17
|
-
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
18
|
-
var session_authz_interface_exports = {};
|
|
19
|
-
__export(session_authz_interface_exports, {
|
|
20
|
-
normalizedSessionAuthzModuleOptions: () => normalizedSessionAuthzModuleOptions
|
|
21
|
-
});
|
|
22
|
-
module.exports = __toCommonJS(session_authz_interface_exports);
|
|
23
|
-
var import_constants = require("../constants");
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.normalizedSessionAuthzModuleOptions = void 0;
|
|
4
|
+
const constants_1 = require("../constants");
|
|
24
5
|
const normalizedSessionAuthzModuleOptions = (options = {}) => {
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
6
|
+
const { keepSessionInfo, ...sessionOpts } = options.session ?? {};
|
|
7
|
+
return {
|
|
8
|
+
defaultOverride: options.defaultOverride || false,
|
|
9
|
+
passportProperty: options.passportProperty || constants_1.DEFAULT_PASSPORT_PROPERTY_VALUE,
|
|
10
|
+
skipFalsyMetadata: options.skipFalsyMetadata || false,
|
|
11
|
+
defaultAllowAnonymous: options.defaultAllowAnonymous || false,
|
|
12
|
+
keepSessionInfo,
|
|
13
|
+
session: {
|
|
14
|
+
resave: false,
|
|
15
|
+
saveUninitialized: false,
|
|
16
|
+
...sessionOpts
|
|
17
|
+
}
|
|
18
|
+
};
|
|
38
19
|
};
|
|
39
|
-
|
|
40
|
-
0 && (module.exports = {
|
|
41
|
-
normalizedSessionAuthzModuleOptions
|
|
42
|
-
});
|
|
20
|
+
exports.normalizedSessionAuthzModuleOptions = normalizedSessionAuthzModuleOptions;
|