@node-c/api-http 1.0.0-alpha9 → 1.0.0-beta0

package/dist/common/definitions/common.constants.d.ts

@@ -1,7 +1,7 @@
 export declare enum Constants {
     API_MODULE_AUTHORIZATION_SERVICE = "API_MODULE_AUTHORIZATION_SERVICE",
     API_MODULE_NAME = "API_MODULE_NAME",
-    AUTHENTICATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE = "AUTHENTICATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE",
+    AUTHORIZATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE = "AUTHORIZATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE",
     AUTHENTICATION_MIDDLEWARE_USERS_SERVICE = "AUTHENTICATION_MIDDLEWARE_USERS_SERVICE",
     AUTHORIZATION_INTERCEPTOR = "AUTHORIZATION_INTERCEPTOR",
     ERROR_INTERCEPTOR = "ERROR_INTERCEPTOR",

package/dist/common/definitions/common.constants.js

@@ -5,7 +5,7 @@ var Constants;
 (function (Constants) {
     Constants["API_MODULE_AUTHORIZATION_SERVICE"] = "API_MODULE_AUTHORIZATION_SERVICE";
     Constants["API_MODULE_NAME"] = "API_MODULE_NAME";
-    Constants["AUTHENTICATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE"] = "AUTHENTICATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE";
+    Constants["AUTHORIZATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE"] = "AUTHORIZATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE";
     Constants["AUTHENTICATION_MIDDLEWARE_USERS_SERVICE"] = "AUTHENTICATION_MIDDLEWARE_USERS_SERVICE";
     Constants["AUTHORIZATION_INTERCEPTOR"] = "AUTHORIZATION_INTERCEPTOR";
     Constants["ERROR_INTERCEPTOR"] = "ERROR_INTERCEPTOR";

package/dist/common/definitions/common.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.constants.js","sourceRoot":"","sources":["../../../src/common/definitions/common.constants.ts"],"names":[],"mappings":";;;AAAA,IAAY,SAeX;AAfD,WAAY,SAAS;IAEnB,kFAAqE,CAAA;IAErE,gDAAmC,CAAA;IAEnC,gHAAmG,CAAA;IAEnG,gGAAmF,CAAA;IAEnF,oEAAuD,CAAA;IAEvD,oDAAuC,CAAA;IAEvC,4DAA+C,CAAA;AACjD,CAAC,EAfW,SAAS,yBAAT,SAAS,QAepB"}
+{"version":3,"file":"common.constants.js","sourceRoot":"","sources":["../../../src/common/definitions/common.constants.ts"],"names":[],"mappings":";;;AAAA,IAAY,SAeX;AAfD,WAAY,SAAS;IAEnB,kFAAqE,CAAA;IAErE,gDAAmC,CAAA;IAEnC,8GAAiG,CAAA;IAEjG,gGAAmF,CAAA;IAEnF,oEAAuD,CAAA;IAEvD,oDAAuC,CAAA;IAEvC,4DAA+C,CAAA;AACjD,CAAC,EAfW,SAAS,yBAAT,SAAS,QAepB"}

package/dist/common/utils/index.d.ts

@@ -0,0 +1 @@
+export * from './utils.checkRoutes';

package/dist/{exceptionFilters → common/utils}/index.js

@@ -14,5 +14,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./http.exceptionFilters.httpException"), exports);
+__exportStar(require("./utils.checkRoutes"), exports);
 //# sourceMappingURL=index.js.map

package/dist/common/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/common/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC"}

package/dist/common/utils/utils.checkRoutes.d.ts

@@ -0,0 +1 @@
+export declare function checkRoutes(route: string, routes: string[]): boolean;

package/dist/common/utils/utils.checkRoutes.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkRoutes = checkRoutes;
+function checkRoutes(route, routes) {
+    const splitRoute = route.split('/');
+    for (const i in routes) {
+        const item = routes[i], splitItem = item.split('/');
+        if (item === '*' || route === item) {
+            return true;
+        }
+        if (item.indexOf(':') !== -1 && splitItem.length === splitRoute.length) {
+            let valid = true;
+            for (const j in splitItem) {
+                const innerItem = splitItem[j], routeItem = splitRoute[j];
+                if (routeItem !== innerItem && innerItem.indexOf(':') === -1) {
+                    valid = false;
+                    break;
+                }
+            }
+            if (valid) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=utils.checkRoutes.js.map

package/dist/common/utils/utils.checkRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.checkRoutes.js","sourceRoot":"","sources":["../../../src/common/utils/utils.checkRoutes.ts"],"names":[],"mappings":";;AAMA,kCAwBC;AAxBD,SAAgB,WAAW,CAAC,KAAa,EAAE,MAAgB;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,EACpB,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YACvE,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,EAC5B,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC7D,KAAK,GAAG,KAAK,CAAC;oBACd,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/{exceptionFilters/http.exceptionFilters.httpException.js → filters/http.filtes.exception.js}

@@ -23,4 +23,4 @@ exports.HttpExceptionFilter = HttpExceptionFilter;
 exports.HttpExceptionFilter = HttpExceptionFilter = __decorate([
     (0, common_1.Catch)(common_1.HttpException)
 ], HttpExceptionFilter);
-//# sourceMappingURL=http.exceptionFilters.httpException.js.map
+//# sourceMappingURL=http.filtes.exception.js.map

package/dist/filters/http.filtes.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.filtes.exception.js","sourceRoot":"","sources":["../../src/filters/http.filtes.exception.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAsF;AAK/E,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,KAAK,CAAC,SAAwB,EAAE,IAAmB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAY,CAAC;QAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC3B,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAVY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,cAAK,EAAC,sBAAa,CAAC;GACR,mBAAmB,CAU/B"}

package/dist/filters/index.d.ts

@@ -0,0 +1 @@
+export * from './http.filtes.exception';

package/dist/filters/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./http.filtes.exception"), exports);
+//# sourceMappingURL=index.js.map

package/dist/filters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/filters/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC"}

package/dist/guards/http.guards.accessControl.d.ts

@@ -0,0 +1,2 @@
+export declare const AccessControlContext: (moduleName: string, resourceContext: string) => (target: object, propertyKey: string) => void;
+export declare const AccessControlResource: (resource: string) => (target: object, propertyKey: string) => void;

package/dist/guards/http.guards.accessControl.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessControlResource = exports.AccessControlContext = void 0;
+const AccessControlContext = (moduleName, resourceContext) => {
+    console.log(moduleName, resourceContext);
+    return (target, propertyKey) => {
+        console.log(target, propertyKey);
+    };
+};
+exports.AccessControlContext = AccessControlContext;
+const AccessControlResource = (resource) => {
+    console.log(resource);
+    return (target, propertyKey) => {
+        console.log(target, propertyKey);
+    };
+};
+exports.AccessControlResource = AccessControlResource;
+//# sourceMappingURL=http.guards.accessControl.js.map

package/dist/guards/http.guards.accessControl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.guards.accessControl.js","sourceRoot":"","sources":["../../src/guards/http.guards.accessControl.ts"],"names":[],"mappings":";;;AAAO,MAAM,oBAAoB,GAAG,CAAC,UAAkB,EAAE,eAAuB,EAAE,EAAE;IAClF,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACzC,OAAO,CAAC,MAAc,EAAE,WAAmB,EAAQ,EAAE;QACnD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC,CAAC;AALW,QAAA,oBAAoB,wBAK/B;AAEK,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAE,EAAE;IACxD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,MAAc,EAAE,WAAmB,EAAQ,EAAE;QACnD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC,CAAC;AALW,QAAA,qBAAqB,yBAKhC"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export * from './common/definitions';
-export * from './exceptionFilters';
+export * from './filters';
 export * from './interceptors';
 export * from './middlewares';
 export * from './module';

package/dist/index.js

@@ -15,7 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./common/definitions"), exports);
-__exportStar(require("./exceptionFilters"), exports);
+__exportStar(require("./filters"), exports);
 __exportStar(require("./interceptors"), exports);
 __exportStar(require("./middlewares"), exports);
 __exportStar(require("./module"), exports);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,qDAAmC;AACnC,iDAA+B;AAC/B,gDAA8B;AAC9B,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,4CAA0B;AAC1B,iDAA+B;AAC/B,gDAA8B;AAC9B,2CAAyB"}

package/dist/interceptors/{http.interceptors.authorization.d.ts → http.interceptors.accessControl.d.ts}

@@ -1,8 +1,8 @@
 import { CallHandler, ExecutionContext, NestInterceptor } from '@nestjs/common';
 import { ConfigProviderService } from '@node-c/core';
-import { AuthorizationPoint, IAMAuthorizationService, UserWithPermissionsData } from '@node-c/domain-iam';
+import { AuthorizationPoint, IAMAuthorizationService, IAMUserManagerUserWithPermissionsData } from '@node-c/domain-iam';
 import { Observable } from 'rxjs';
-export declare class HTTPAuthorizationInterceptor<User extends UserWithPermissionsData<unknown, unknown>> implements NestInterceptor {
+export declare class HTTPAccessControlInterceptor<User extends IAMUserManagerUserWithPermissionsData<unknown, unknown>> implements NestInterceptor {
     protected authorizationService: IAMAuthorizationService<AuthorizationPoint<unknown>>;
     protected configProvider: ConfigProviderService;
     protected moduleName: string;

package/dist/interceptors/{http.interceptors.authorization.js → http.interceptors.accessControl.js}

@@ -21,13 +21,13 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HTTPAuthorizationInterceptor = void 0;
+exports.HTTPAccessControlInterceptor = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@node-c/core");
 const domain_iam_1 = require("@node-c/domain-iam");
-const general_tools_1 = require("@ramster/general-tools");
+const rxjs_1 = require("rxjs");
 const definitions_1 = require("../common/definitions");
-let HTTPAuthorizationInterceptor = class HTTPAuthorizationInterceptor {
+let HTTPAccessControlInterceptor = class HTTPAccessControlInterceptor {
     constructor(authorizationService, configProvider, moduleName) {
         this.authorizationService = authorizationService;
         this.configProvider = configProvider;
@@ -46,42 +46,35 @@ let HTTPAuthorizationInterceptor = class HTTPAuthorizationInterceptor {
             const { moduleName } = this;
             const controllerName = context.getClass().name;
             const handlerName = context.getHandler().name;
-            const authorizationData = yield this.authorizationService.mapAuthorizationPoints(moduleName);
-            let controllerData = authorizationData[controllerName];
-            if (!controllerData) {
-                controllerData = authorizationData.__all;
-            }
             const user = locals.user;
-            let handlerData = controllerData[handlerName];
-            if (!handlerData) {
-                handlerData = controllerData.__all;
-                if (!Object.keys(handlerData).length) {
-                    const { endpointSecurityMode } = this.configProvider.config.api[moduleName];
-                    if (!endpointSecurityMode || endpointSecurityMode === core_1.EndpointSecurityMode.Strict) {
-                        console.info(`[${moduleName}][HTTPAuthorizationInterceptor]: No authorization point data for handler ${controllerName}.${handlerName}.`);
-                        throw new common_1.HttpException('Forbidden', common_1.HttpStatus.FORBIDDEN);
-                    }
-                    return next.handle();
-                }
-            }
-            const { hasAccess, inputDataToBeMutated } = domain_iam_1.IAMAuthorizationService.checkAccess(handlerData, { body: req.body, headers: req.headers, params: req.params, query: req.query }, user);
+            const { authorizationPoints: usedAuthorizationPoints, errorCode, hasAccess, inputDataToBeMutated } = domain_iam_1.IAMAuthorizationService.checkAccess({ body: req.body, headers: req.headers, params: req.params, query: req.query }, user, { moduleName, resource: handlerName, resourceContext: controllerName });
             if (!hasAccess) {
-                console.info(`[${moduleName}][HTTPAuthorizationInterceptor]: No user access to handler ${controllerName}.${handlerName}.`);
+                console.error(`[${moduleName}][HTTPAccessControlInterceptor]: No user access to handler ${controllerName}.${handlerName} - ${errorCode}.`);
                 throw new common_1.HttpException('Forbidden', common_1.HttpStatus.FORBIDDEN);
             }
             for (const key in inputDataToBeMutated) {
-                (0, general_tools_1.setNested)(req, key, inputDataToBeMutated[key]);
+                (0, core_1.setNested)(req, key, inputDataToBeMutated[key], { removeNestedFieldEscapeSign: true });
             }
-            return next.handle();
+            return next.handle().pipe((0, rxjs_1.map)((data) => {
+                if (typeof data === 'undefined' || data === null || typeof data !== 'object' || data instanceof Date) {
+                    return data;
+                }
+                const actualData = data;
+                const { outputDataToBeMutated } = domain_iam_1.IAMAuthorizationService.processOutputData(usedAuthorizationPoints, actualData);
+                for (const key in outputDataToBeMutated) {
+                    (0, core_1.setNested)(actualData, key, outputDataToBeMutated[key]);
+                }
+                return actualData;
+            }));
         });
     }
 };
-exports.HTTPAuthorizationInterceptor = HTTPAuthorizationInterceptor;
-exports.HTTPAuthorizationInterceptor = HTTPAuthorizationInterceptor = __decorate([
+exports.HTTPAccessControlInterceptor = HTTPAccessControlInterceptor;
+exports.HTTPAccessControlInterceptor = HTTPAccessControlInterceptor = __decorate([
     (0, common_1.Injectable)(),
     __param(0, (0, common_1.Inject)(definitions_1.Constants.API_MODULE_AUTHORIZATION_SERVICE)),
     __param(2, (0, common_1.Inject)(definitions_1.Constants.API_MODULE_NAME)),
     __metadata("design:paramtypes", [domain_iam_1.IAMAuthorizationService,
         core_1.ConfigProviderService, String])
-], HTTPAuthorizationInterceptor);
-//# sourceMappingURL=http.interceptors.authorization.js.map
+], HTTPAccessControlInterceptor);
+//# sourceMappingURL=http.interceptors.accessControl.js.map

package/dist/interceptors/http.interceptors.accessControl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.interceptors.accessControl.js","sourceRoot":"","sources":["../../src/interceptors/http.interceptors.accessControl.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAQwB;AAExB,uCAA+E;AAC/E,mDAAwH;AAExH,+BAAuC;AAEvC,uDAAqE;AAM9D,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAGvC,YAGY,oBAA0E,EAE1E,cAAqC,EAGrC,UAAkB;QALlB,yBAAoB,GAApB,oBAAoB,CAAsD;QAE1E,mBAAc,GAAd,cAAc,CAAuB;QAGrC,eAAU,GAAV,UAAU,CAAQ;IAC3B,CAAC;IAEE,SAAS,CAAC,OAAyB,EAAE,IAAiB;;YAC1D,MAAM,CAAC,GAAG,CAAC,GAAuC,OAAO,CAAC,OAAO,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAO,CAAC;YAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,mBAAU,CAAC,SAAS,CAAC,CAAC;YAC7D,CAAC;iBAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;YAC5B,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;YAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAK,CAAC;YAC1B,MAAM,EACJ,mBAAmB,EAAE,uBAAuB,EAC5C,SAAS,EACT,SAAS,EACT,oBAAoB,EACrB,GAAG,oCAAuB,CAAC,WAAW,CACrC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAC9E,IAAI,EACJ,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,CACvE,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBAWf,OAAO,CAAC,KAAK,CACX,IAAI,UAAU,8DAA8D,cAAc,IAAI,WAAW,MAAM,SAAS,GAAG,CAC5H,CAAC;gBACF,MAAM,IAAI,sBAAa,CAAC,WAAW,EAAE,mBAAU,CAAC,SAAS,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;gBACvC,IAAA,gBAAS,EAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,UAAG,EAAC,CAAC,IAAc,EAAE,EAAE;gBACrB,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;oBACrG,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,UAAU,GAAG,IAAqB,CAAC;gBACzC,MAAM,EAAE,qBAAqB,EAAE,GAAG,oCAAuB,CAAC,iBAAiB,CACzE,uBAAuB,EACvB,UAAU,CACX,CAAC;gBACF,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;oBACxC,IAAA,gBAAS,EAAC,UAAU,EAAE,GAAG,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzD,CAAC;gBACD,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;KAAA;CACF,CAAA;AAxEY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAS,CAAC,gCAAgC,CAAC,CAAA;IAKlD,WAAA,IAAA,eAAM,EAAC,uBAAS,CAAC,eAAe,CAAC,CAAA;qCAHF,oCAAuB;QAE7B,4BAAqB;GARtC,4BAA4B,CAwExC"}

package/dist/interceptors/http.interceptors.error.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.HTTPErrorInterceptor = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@node-c/core");
+const rxjs_1 = require("rxjs");
 const operators_1 = require("rxjs/operators");
 const common_errors_1 = require("../common/definitions/common.errors");
 let HTTPErrorInterceptor = class HTTPErrorInterceptor {
@@ -55,7 +56,7 @@ let HTTPErrorInterceptor = class HTTPErrorInterceptor {
                 .getResponse()
                 .status(status)
                 .json({ error: message instanceof Array ? message.join('\n') : message });
-            return [];
+            return new rxjs_1.Observable();
         }));
     }
 };

package/dist/interceptors/http.interceptors.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.interceptors.error.js","sourceRoot":"","sources":["../../src/interceptors/http.interceptors.error.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4F;AAE5F,uCAAgD;AAGhD,8CAA4C;AAE5C,uEAAkE;AAG3D,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,SAAS,CAAC,OAAyB,EAAE,IAAiB;QACpD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,sBAAU,EAAC,KAAK,CAAC,EAAE;YACjB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,OAAO,GAAsB,wBAAwB,CAAC;YAC1D,IAAI,MAAM,GAAG,GAAG,CAAC;YACjB,IAAI,KAAK,YAAY,uBAAgB,IAAI,KAAK,YAAY,2BAAW,EAAE,CAAC;gBACtE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC1B,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;oBACf,IAAI,WAAW,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBAC9B,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,SAAmB,CAAC;oBAC1C,CAAC;yBAAM,IAAI,YAAY,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBACtC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,UAAoB,CAAC;oBAC3C,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,GAAG,CAAC;oBACf,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,GAAG,CAAC;gBACf,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;gBAC3B,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;oBACxB,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;gBAC/B,CAAC;gBACD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAClC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,OAAO;iBACJ,YAAY,EAAE;iBACd,WAAW,EAAE;iBACb,MAAM,CAAC,MAAM,CAAC;iBACd,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,OAAO,EAAE,CAAC;QAIZ,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AAhDY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;GACA,oBAAoB,CAgDhC"}
+{"version":3,"file":"http.interceptors.error.js","sourceRoot":"","sources":["../../src/interceptors/http.interceptors.error.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4F;AAE5F,uCAAgD;AAEhD,+BAAkC;AAClC,8CAA4C;AAE5C,uEAAkE;AAG3D,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,SAAS,CAAC,OAAyB,EAAE,IAAiB;QACpD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,sBAAU,EAAC,KAAK,CAAC,EAAE;YACjB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,OAAO,GAAsB,wBAAwB,CAAC;YAC1D,IAAI,MAAM,GAAG,GAAG,CAAC;YACjB,IAAI,KAAK,YAAY,uBAAgB,IAAI,KAAK,YAAY,2BAAW,EAAE,CAAC;gBACtE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC1B,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;oBACf,IAAI,WAAW,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBAC9B,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,SAAmB,CAAC;oBAC1C,CAAC;yBAAM,IAAI,YAAY,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBACtC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,UAAoB,CAAC;oBAC3C,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,GAAG,CAAC;oBACf,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,GAAG,CAAC;gBACf,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;gBAC3B,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;oBACxB,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;gBAC/B,CAAC;gBACD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAClC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,OAAO;iBACJ,YAAY,EAAE;iBACd,WAAW,EAAE;iBACb,MAAM,CAAC,MAAM,CAAC;iBACd,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,OAAO,IAAI,iBAAU,EAAE,CAAC;QAC1B,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AA5CY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;GACA,oBAAoB,CA4ChC"}

package/dist/interceptors/index.d.ts

@@ -1,2 +1,2 @@
-export * from './http.interceptors.authorization';
+export * from './http.interceptors.accessControl';
 export * from './http.interceptors.error';

package/dist/interceptors/index.js

@@ -14,6 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./http.interceptors.authorization"), exports);
+__exportStar(require("./http.interceptors.accessControl"), exports);
 __exportStar(require("./http.interceptors.error"), exports);
 //# sourceMappingURL=index.js.map

package/dist/middlewares/http.middlewares.authorization.d.ts

@@ -0,0 +1,14 @@
+import { NestMiddleware } from '@nestjs/common';
+import { ConfigProviderService } from '@node-c/core';
+import { AuthorizationPoint, IAMAuthorizationService, IAMTokenManagerService, IAMUserManagerService, IAMUserManagerUserTokenEnityFields } from '@node-c/domain-iam';
+import { NextFunction, Response } from 'express';
+import { RequestWithLocals } from '../common/definitions';
+export declare class HTTPAuthorizationMiddleware<User extends object> implements NestMiddleware {
+    protected configProvider: ConfigProviderService;
+    protected moduleName: string;
+    protected authorizationService: IAMAuthorizationService<AuthorizationPoint<unknown>>;
+    protected tokenManager?: IAMTokenManagerService<IAMUserManagerUserTokenEnityFields> | undefined;
+    protected usersService?: IAMUserManagerService<User> | undefined;
+    constructor(configProvider: ConfigProviderService, moduleName: string, authorizationService: IAMAuthorizationService<AuthorizationPoint<unknown>>, tokenManager?: IAMTokenManagerService<IAMUserManagerUserTokenEnityFields> | undefined, usersService?: IAMUserManagerService<User> | undefined);
+    use(req: RequestWithLocals<unknown>, res: Response, next: NextFunction): void;
+}

package/dist/middlewares/{http.middlewares.authentication.js → http.middlewares.authorization.js}

@@ -21,23 +21,26 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HTTPAuthenticationMiddleware = void 0;
+exports.HTTPAuthorizationMiddleware = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@node-c/core");
 const domain_iam_1 = require("@node-c/domain-iam");
-const general_tools_1 = require("@ramster/general-tools");
 const definitions_1 = require("../common/definitions");
-let HTTPAuthenticationMiddleware = class HTTPAuthenticationMiddleware {
-    constructor(configProvider, moduleName, tokenManager, usersService) {
+const utils_1 = require("../common/utils");
+let HTTPAuthorizationMiddleware = class HTTPAuthorizationMiddleware {
+    constructor(configProvider, moduleName, authorizationService, tokenManager, usersService) {
         this.configProvider = configProvider;
         this.moduleName = moduleName;
+        this.authorizationService = authorizationService;
         this.tokenManager = tokenManager;
         this.usersService = usersService;
     }
     use(req, res, next) {
         (() => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const { anonymousAccessRoutes } = this.configProvider.config.api[this.moduleName];
+            var _a, _b, _c, _d, _e;
+            const moduleConfig = this.configProvider.config.api[this.moduleName];
+            const { anonymousAccessRoutes } = moduleConfig;
+            const requestMethod = req.method.toLowerCase();
             if (!req.locals) {
                 req.locals = {};
             }
@@ -45,8 +48,8 @@ let HTTPAuthenticationMiddleware = class HTTPAuthenticationMiddleware {
                 const originalUrl = req.originalUrl.split('?')[0];
                 let isAnonymous = false;
                 for (const route in anonymousAccessRoutes) {
-                    if ((0, general_tools_1.checkRoutes)(originalUrl, [route]) &&
-                        anonymousAccessRoutes[route].find(method => method === req.method.toLowerCase())) {
+                    if ((0, utils_1.checkRoutes)(originalUrl, [route]) &&
+                        anonymousAccessRoutes[route].find(method => method === requestMethod)) {
                         isAnonymous = true;
                         break;
                     }
@@ -58,11 +61,42 @@ let HTTPAuthenticationMiddleware = class HTTPAuthenticationMiddleware {
                 }
             }
             const { tokenManager, usersService } = this;
+            const hasApiKey = !!((_a = req.headers.authorization) === null || _a === void 0 ? void 0 : _a.match(/^ApiKey\s/));
+            if (hasApiKey) {
+                const [apiKeyFromHeader, requestSignature] = ((_c = (_b = req.headers.authorization) === null || _b === void 0 ? void 0 : _b.replace(/^ApiKey\s/, '')) === null || _c === void 0 ? void 0 : _c.split(' ')) || [];
+                let signatureContent = '';
+                if (requestMethod === 'get' && req.query && Object.keys(req.query).length) {
+                    signatureContent = JSON.stringify(req.query);
+                }
+                else if ((requestMethod === 'delete' ||
+                    requestMethod === 'patch' ||
+                    requestMethod === 'post' ||
+                    requestMethod === 'put') &&
+                    req.body &&
+                    Object.keys(req.body).length) {
+                    signatureContent = JSON.stringify(req.body);
+                }
+                else {
+                    signatureContent = req.originalUrl.split('?')[0];
+                }
+                const { valid } = yield this.authorizationService.authorizeApiKey({
+                    apiKey: apiKeyFromHeader,
+                    signature: requestSignature,
+                    signatureContent
+                }, { config: moduleConfig });
+                if (!valid) {
+                    throw new common_1.HttpException('Unauthorized', common_1.HttpStatus.UNAUTHORIZED);
+                }
+                next();
+                return;
+            }
+            else if (!tokenManager) {
+                console.error('Missing api key in the configuration and no tokenManager set up.');
+                throw new common_1.HttpException('Unauthorized', common_1.HttpStatus.UNAUTHORIZED);
+            }
             let tokens = [];
             let authToken = req.headers.authorization;
-            let authTokenIsNew = false;
             let refreshToken;
-            let tokenContent;
             let useCookie = false;
             if (typeof authToken === 'string' && authToken.length && authToken.match(/^Bearer\s/)) {
                 tokens = authToken.split(' ');
@@ -75,40 +109,30 @@ let HTTPAuthenticationMiddleware = class HTTPAuthenticationMiddleware {
                 authToken = req.cookies['sid'];
                 useCookie = true;
             }
-            if (!authToken) {
-                console.error('Missing auth token.');
+            const { newAuthToken, tokenContent, valid } = yield this.authorizationService.authorizeBearer({ authToken, refreshToken }, { identifierDataField: usersService ? 'userId' : undefined });
+            if (!valid) {
                 throw new common_1.HttpException('Unauthorized', common_1.HttpStatus.UNAUTHORIZED);
             }
-            try {
-                const tokenRes = yield tokenManager.verifyAccessToken(authToken, {
-                    deleteFromStoreIfExpired: true,
-                    identifierDataField: 'userId',
-                    persistNewToken: true,
-                    purgeStoreOnRenew: true,
-                    refreshToken,
-                    refreshTokenAccessTokenIdentifierDataField: 'accessToken'
-                });
-                tokenContent = tokenRes.content;
-                if (tokenRes.newToken) {
-                    authTokenIsNew = true;
+            if (usersService) {
+                const userId = (_d = tokenContent === null || tokenContent === void 0 ? void 0 : tokenContent.data) === null || _d === void 0 ? void 0 : _d.userId;
+                if (!userId) {
+                    console.error('Missing userId in the tokenContent data.');
+                    throw new common_1.HttpException('Unauthorized', common_1.HttpStatus.UNAUTHORIZED);
+                }
+                const user = (_e = tokenContent === null || tokenContent === void 0 ? void 0 : tokenContent.data) === null || _e === void 0 ? void 0 : _e.user;
+                if (user) {
+                    req.locals.user = user;
+                }
+                else {
+                    req.locals.user = yield usersService.getUserWithPermissionsData({ filters: { id: userId } });
                 }
             }
-            catch (e) {
-                console.error('Failed to parse the access or refresh token:', e);
-                throw new common_1.HttpException('Unauthorized', common_1.HttpStatus.UNAUTHORIZED);
-            }
-            if (authTokenIsNew) {
-                res.setHeader('Authorization', `Bearer ${authToken}${refreshToken ? ` ${refreshToken}` : ''}`);
+            if (newAuthToken) {
+                res.setHeader('Authorization', `Bearer ${newAuthToken}${refreshToken ? ` ${refreshToken}` : ''}`);
                 if (useCookie) {
-                    res.cookie('sid', authToken);
+                    res.cookie('sid', newAuthToken);
                 }
             }
-            const userId = (_a = tokenContent === null || tokenContent === void 0 ? void 0 : tokenContent.data) === null || _a === void 0 ? void 0 : _a.userId;
-            if (!userId) {
-                console.error('Missing userId in the tokenContent data.');
-                throw new common_1.HttpException('Unauthorized', common_1.HttpStatus.UNAUTHORIZED);
-            }
-            req.locals.user = yield usersService.getUserWithPermissionsData({ filters: { id: userId } });
             next();
         }))().then(() => true, err => {
             console.error(err);
@@ -116,13 +140,15 @@ let HTTPAuthenticationMiddleware = class HTTPAuthenticationMiddleware {
         });
     }
 };
-exports.HTTPAuthenticationMiddleware = HTTPAuthenticationMiddleware;
-exports.HTTPAuthenticationMiddleware = HTTPAuthenticationMiddleware = __decorate([
+exports.HTTPAuthorizationMiddleware = HTTPAuthorizationMiddleware;
+exports.HTTPAuthorizationMiddleware = HTTPAuthorizationMiddleware = __decorate([
     (0, common_1.Injectable)(),
     __param(1, (0, common_1.Inject)(definitions_1.Constants.API_MODULE_NAME)),
-    __param(2, (0, common_1.Inject)(definitions_1.Constants.AUTHENTICATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE)),
-    __param(3, (0, common_1.Inject)(definitions_1.Constants.AUTHENTICATION_MIDDLEWARE_USERS_SERVICE)),
-    __metadata("design:paramtypes", [core_1.ConfigProviderService, String, domain_iam_1.IAMTokenManagerService,
-        domain_iam_1.IAMUsersService])
-], HTTPAuthenticationMiddleware);
-//# sourceMappingURL=http.middlewares.authentication.js.map
+    __param(2, (0, common_1.Inject)(definitions_1.Constants.API_MODULE_AUTHORIZATION_SERVICE)),
+    __param(3, (0, common_1.Inject)(definitions_1.Constants.AUTHORIZATION_MIDDLEWARE_TOKEN_MANAGER_SERVICE)),
+    __param(4, (0, common_1.Inject)(definitions_1.Constants.AUTHENTICATION_MIDDLEWARE_USERS_SERVICE)),
+    __metadata("design:paramtypes", [core_1.ConfigProviderService, String, domain_iam_1.IAMAuthorizationService,
+        domain_iam_1.IAMTokenManagerService,
+        domain_iam_1.IAMUserManagerService])
+], HTTPAuthorizationMiddleware);
+//# sourceMappingURL=http.middlewares.authorization.js.map

package/dist/middlewares/http.middlewares.authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.middlewares.authorization.js","sourceRoot":"","sources":["../../src/middlewares/http.middlewares.authorization.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA+F;AAE/F,uCAAuE;AACvE,mDAM4B;AAI5B,uDAAqE;AACrE,2CAA8C;AAMvC,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC,YAEY,cAAqC,EAGrC,UAAkB,EAGlB,oBAA0E,EAG1E,YAAyE,EAGzE,YAA0C;QAZ1C,mBAAc,GAAd,cAAc,CAAuB;QAGrC,eAAU,GAAV,UAAU,CAAQ;QAGlB,yBAAoB,GAApB,oBAAoB,CAAsD;QAG1E,iBAAY,GAAZ,YAAY,CAA6D;QAGzE,iBAAY,GAAZ,YAAY,CAA8B;IACnD,CAAC;IAEJ,GAAG,CAAC,GAA+B,EAAE,GAAa,EAAE,IAAkB;QACpE,CAAC,GAAS,EAAE;;YACV,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAI,CAAC,IAAI,CAAC,UAAU,CAAqB,CAAC;YAC1F,MAAM,EAAE,qBAAqB,EAAE,GAAG,YAAY,CAAC;YAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;YAClB,CAAC;YACD,IAAI,qBAAqB,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC;gBACvE,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClD,IAAI,WAAW,GAAG,KAAK,CAAC;gBACxB,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;oBAC1C,IACE,IAAA,mBAAW,EAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;wBACjC,qBAAqB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,aAAa,CAAC,EACrE,CAAC;wBACD,WAAW,GAAG,IAAI,CAAC;wBACnB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,WAAW,EAAE,CAAC;oBAChB,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;oBAC9B,IAAI,EAAE,CAAC;oBACP,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;YAC5C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,GAAG,CAAC,OAAO,CAAC,aAAa,0CAAE,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC;YAClE,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GACxC,CAAA,MAAA,MAAA,GAAG,CAAC,OAAO,CAAC,aAAa,0CAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,0CAAE,KAAK,CAAC,GAAG,CAAC,KAAI,EAAE,CAAC;gBACxE,IAAI,gBAAgB,GAAG,EAAE,CAAC;gBAC1B,IAAI,aAAa,KAAK,KAAK,IAAI,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;oBAC1E,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC/C,CAAC;qBAAM,IACL,CAAC,aAAa,KAAK,QAAQ;oBACzB,aAAa,KAAK,OAAO;oBACzB,aAAa,KAAK,MAAM;oBACxB,aAAa,KAAK,KAAK,CAAC;oBAC1B,GAAG,CAAC,IAAI;oBACR,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAC5B,CAAC;oBACD,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,gBAAgB,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnD,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAC/D;oBACE,MAAM,EAAE,gBAAgB;oBACxB,SAAS,EAAE,gBAAgB;oBAC3B,gBAAgB;iBACjB,EACD,EAAE,MAAM,EAAE,YAAY,EAAE,CACzB,CAAC;gBACF,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,sBAAa,CAAC,cAAc,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;gBACnE,CAAC;gBACD,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;iBAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;gBAClF,MAAM,IAAI,sBAAa,CAAC,cAAc,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,MAAM,GAAa,EAAE,CAAC;YAC1B,IAAI,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC1C,IAAI,YAAgC,CAAC;YACrC,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtF,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACtB,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/B,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YACD,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,GACzC,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAC7C,EAAE,SAAS,EAAE,YAAY,EAAE,EAC3B,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAC7D,CAAC;YACJ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,sBAAa,CAAC,cAAc,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,IAAI,0CAAE,MAAM,CAAC;gBAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;oBAC1D,MAAM,IAAI,sBAAa,CAAC,cAAc,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;gBACnE,CAAC;gBAED,MAAM,IAAI,GAAG,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,IAAI,0CAAE,IAAI,CAAC;gBACtC,IAAI,IAAI,EAAE,CAAC;oBACT,GAAG,CAAC,MAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,MAAO,CAAC,IAAI,GAAG,MAAM,YAAY,CAAC,0BAA0B,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChG,CAAC;YACH,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClG,IAAI,SAAS,EAAE,CAAC;oBACd,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC,CAAA,CAAC,EAAE,CAAC,IAAI,CACP,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,CAAC,EAAE;YACJ,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,mBAAU,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5E,CAAC,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AApIY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAS,CAAC,eAAe,CAAC,CAAA;IAGjC,WAAA,IAAA,eAAM,EAAC,uBAAS,CAAC,gCAAgC,CAAC,CAAA;IAGlD,WAAA,IAAA,eAAM,EAAC,uBAAS,CAAC,8CAA8C,CAAC,CAAA;IAGhE,WAAA,IAAA,eAAM,EAAC,uBAAS,CAAC,uCAAuC,CAAC,CAAA;qCAVhC,4BAAqB,UAMf,oCAAuB;QAG9B,mCAAsB;QAGtB,kCAAqB;GAfrC,2BAA2B,CAoIvC"}

package/dist/middlewares/http.middlewares.cors.js

@@ -28,9 +28,9 @@ let HTTPCORSMiddleware = class HTTPCORSMiddleware {
             res.set('Access-Control-Allow-Origin', origin);
         }
         res.set('Access-Control-Allow-Headers', 'accept,accept-encoding,accept-language,authorization,connection,content-type,host,origin,referer,user-agent');
-        res.set('Access-Control-Expose-Headers', 'Authorization');
         res.set('Access-Control-Allow-Methods', 'OPTIONS,GET,POST,PUT,PATCH,DELETE');
         res.set('Access-Control-Allow-Credentials', 'true');
+        res.set('Access-Control-Expose-Headers', 'Authorization');
         if (req.method.toLowerCase() === 'options') {
             res.status(common_1.HttpStatus.OK).end();
             return;

package/dist/middlewares/http.middlewares.cors.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.middlewares.cors.js","sourceRoot":"","sources":["../../src/middlewares/http.middlewares.cors.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAgF;AAEhF,uCAAuE;AAGvE,uDAAqE;AAG9D,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YAEY,cAAqC,EAGrC,UAAkB;QAHlB,mBAAc,GAAd,cAAc,CAAuB;QAGrC,eAAU,GAAV,UAAU,CAAQ;IAC3B,CAAC;IAEJ,GAAG,CAAC,GAA+B,EAAE,GAAa,EAAE,IAAkB;QACpE,MAAM,cAAc,GAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAI,CAAC,IAAI,CAAC,UAAU,CAAsB,CAAC,cAAc,CAAC;QAC7G,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAgB,CAAC;QAC5C,IAAI,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,GAAG,CAAC,GAAG,CACL,8BAA8B,EAC9B,6GAA6G,CAC9G,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,eAAe,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,mCAAmC,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC;CACF,CAAA;AA5BY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAS,CAAC,eAAe,CAAC,CAAA;qCADR,4BAAqB;GAHtC,kBAAkB,CA4B9B"}
+{"version":3,"file":"http.middlewares.cors.js","sourceRoot":"","sources":["../../src/middlewares/http.middlewares.cors.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAgF;AAEhF,uCAAuE;AAGvE,uDAAqE;AAG9D,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YAEY,cAAqC,EAGrC,UAAkB;QAHlB,mBAAc,GAAd,cAAc,CAAuB;QAGrC,eAAU,GAAV,UAAU,CAAQ;IAC3B,CAAC;IAEJ,GAAG,CAAC,GAA+B,EAAE,GAAa,EAAE,IAAkB;QACpE,MAAM,cAAc,GAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAI,CAAC,IAAI,CAAC,UAAU,CAAsB,CAAC,cAAc,CAAC;QAC7G,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAgB,CAAC;QAC5C,IAAI,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,GAAG,CAAC,GAAG,CACL,8BAA8B,EAC9B,6GAA6G,CAC9G,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,mCAAmC,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,eAAe,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC;CACF,CAAA;AA5BY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAS,CAAC,eAAe,CAAC,CAAA;qCADR,4BAAqB;GAHtC,kBAAkB,CA4B9B"}

package/dist/middlewares/index.d.ts

@@ -1,2 +1,2 @@
-export * from './http.middlewares.authentication';
+export * from './http.middlewares.authorization';
 export * from './http.middlewares.cors';

package/dist/middlewares/index.js

@@ -14,6 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./http.middlewares.authentication"), exports);
+__exportStar(require("./http.middlewares.authorization"), exports);
 __exportStar(require("./http.middlewares.cors"), exports);
 //# sourceMappingURL=index.js.map

package/dist/middlewares/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oEAAkD;AAClD,0DAAwC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mEAAiD;AACjD,0DAAwC"}