@open-core/identity 1.0.0 → 1.2.1

package/dist/services/auth/api-auth.provider.js

@@ -1,4 +1,3 @@
-"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -8,11 +7,9 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ApiAuthProvider = void 0;
-const tsyringe_1 = require("tsyringe");
-const framework_1 = require("@open-core/framework");
-const memory_cache_service_1 = require("../cache/memory-cache.service");
+import { injectable } from "tsyringe";
+import { Server } from "@open-core/framework";
+import { MemoryCacheService } from "../cache/memory-cache.service";
 /**
  * API-based authentication provider that delegates auth to external API.
  * Does NOT require local database (uses memory cache only).
@@ -127,8 +124,8 @@ let ApiAuthProvider = class ApiAuthProvider {
         }
     }
 };
-exports.ApiAuthProvider = ApiAuthProvider;
-exports.ApiAuthProvider = ApiAuthProvider = __decorate([
-    (0, tsyringe_1.injectable)(),
-    __metadata("design:paramtypes", [framework_1.Server.ConfigService, framework_1.Server.HttpService, memory_cache_service_1.MemoryCacheService])
+ApiAuthProvider = __decorate([
+    injectable(),
+    __metadata("design:paramtypes", [Server.ConfigService, Server.HttpService, MemoryCacheService])
 ], ApiAuthProvider);
+export { ApiAuthProvider };

package/dist/services/auth/credentials-auth.provider.js

@@ -1,52 +1,16 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CredentialsAuthProvider = void 0;
-const tsyringe_1 = require("tsyringe");
-const framework_1 = require("@open-core/framework");
-const bcrypt = __importStar(require("bcrypt"));
-const account_service_1 = require("../account.service");
+import { injectable } from "tsyringe";
+import { Server } from "@open-core/framework";
+import * as bcrypt from "bcrypt";
+import { AccountService } from "../account.service";
 /**
  * Credentials-based authentication provider using username/password.
  * Requires password_hash column in accounts table (migration 005).
@@ -207,8 +171,8 @@ let CredentialsAuthProvider = class CredentialsAuthProvider {
         return result;
     }
 };
-exports.CredentialsAuthProvider = CredentialsAuthProvider;
-exports.CredentialsAuthProvider = CredentialsAuthProvider = __decorate([
-    (0, tsyringe_1.injectable)(),
-    __metadata("design:paramtypes", [account_service_1.AccountService, framework_1.Server.ConfigService])
+CredentialsAuthProvider = __decorate([
+    injectable(),
+    __metadata("design:paramtypes", [AccountService, Server.ConfigService])
 ], CredentialsAuthProvider);
+export { CredentialsAuthProvider };

package/dist/services/auth/local-auth.provider.js

@@ -1,4 +1,3 @@
-"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -8,11 +7,9 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LocalAuthProvider = void 0;
-const tsyringe_1 = require("tsyringe");
-const framework_1 = require("@open-core/framework");
-const account_service_1 = require("../account.service");
+import { injectable } from "tsyringe";
+import { Server } from "@open-core/framework";
+import { AccountService } from "../account.service";
 /**
  * Local authentication provider that auto-creates accounts based on FiveM identifiers.
  * This is the default/traditional authentication method for FiveM servers.
@@ -128,8 +125,8 @@ let LocalAuthProvider = class LocalAuthProvider {
         return result;
     }
 };
-exports.LocalAuthProvider = LocalAuthProvider;
-exports.LocalAuthProvider = LocalAuthProvider = __decorate([
-    (0, tsyringe_1.injectable)(),
-    __metadata("design:paramtypes", [account_service_1.AccountService, framework_1.Server.ConfigService])
+LocalAuthProvider = __decorate([
+    injectable(),
+    __metadata("design:paramtypes", [AccountService, Server.ConfigService])
 ], LocalAuthProvider);
+export { LocalAuthProvider };

package/dist/services/cache/memory-cache.service.js

@@ -1,4 +1,3 @@
-"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -8,9 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MemoryCacheService = void 0;
-const tsyringe_1 = require("tsyringe");
+import { injectable } from "tsyringe";
 /**
  * Simple in-memory cache with TTL support.
  * Used to cache API responses and reduce external calls.
@@ -101,8 +98,8 @@ let MemoryCacheService = class MemoryCacheService {
         }
     }
 };
-exports.MemoryCacheService = MemoryCacheService;
-exports.MemoryCacheService = MemoryCacheService = __decorate([
-    (0, tsyringe_1.injectable)(),
+MemoryCacheService = __decorate([
+    injectable(),
     __metadata("design:paramtypes", [])
 ], MemoryCacheService);
+export { MemoryCacheService };

package/dist/services/identity-auth.provider.js

@@ -1,4 +1,3 @@
-"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -8,11 +7,9 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IdentityAuthProvider = void 0;
-const tsyringe_1 = require("tsyringe");
-const framework_1 = require("@open-core/framework");
-const account_service_1 = require("./account.service");
+import { injectable } from "tsyringe";
+import { Server } from "@open-core/framework";
+import { AccountService } from "./account.service";
 let IdentityAuthProvider = class IdentityAuthProvider {
     constructor(accounts, config) {
         this.accounts = accounts;
@@ -118,8 +115,8 @@ let IdentityAuthProvider = class IdentityAuthProvider {
         return result;
     }
 };
-exports.IdentityAuthProvider = IdentityAuthProvider;
-exports.IdentityAuthProvider = IdentityAuthProvider = __decorate([
-    (0, tsyringe_1.injectable)(),
-    __metadata("design:paramtypes", [account_service_1.AccountService, framework_1.Server.ConfigService])
+IdentityAuthProvider = __decorate([
+    injectable(),
+    __metadata("design:paramtypes", [AccountService, Server.ConfigService])
 ], IdentityAuthProvider);
+export { IdentityAuthProvider };

package/dist/services/identity-principal.provider.js

@@ -1,4 +1,3 @@
-"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -8,12 +7,10 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IdentityPrincipalProvider = void 0;
-const tsyringe_1 = require("tsyringe");
-const framework_1 = require("@open-core/framework");
-const account_service_1 = require("./account.service");
-const account_repository_1 = require("../repositories/account.repository");
+import { injectable } from "tsyringe";
+import { Utils } from "@open-core/framework";
+import { AccountService } from "./account.service";
+import { AccountRepository } from "../repositories/account.repository";
 let IdentityPrincipalProvider = class IdentityPrincipalProvider {
     constructor(accounts, repo) {
         this.accounts = accounts;
@@ -22,11 +19,11 @@ let IdentityPrincipalProvider = class IdentityPrincipalProvider {
     async getPrincipal(player) {
         const linked = player.accountID;
         if (!linked) {
-            throw new framework_1.Utils.AppError("UNAUTHORIZED", "Player is not authenticated (no linked account)", "server");
+            throw new Utils.AppError("UNAUTHORIZED", "Player is not authenticated (no linked account)", "server");
         }
         const result = await this.repo.findByLinkedIdWithRole(String(linked));
         if (!result) {
-            throw new framework_1.Utils.AppError("UNAUTHORIZED", "Linked account not found", "server");
+            throw new Utils.AppError("UNAUTHORIZED", "Linked account not found", "server");
         }
         const { account, role } = result;
         if (this.accounts.isBanExpired(account)) {
@@ -34,7 +31,7 @@ let IdentityPrincipalProvider = class IdentityPrincipalProvider {
             account.banned = false;
         }
         if (account.banned) {
-            throw new framework_1.Utils.AppError("PERMISSION_DENIED", "Account is banned", "server", {
+            throw new Utils.AppError("PERMISSION_DENIED", "Account is banned", "server", {
                 banReason: account.banReason,
                 banExpires: account.banExpires,
             });
@@ -96,9 +93,9 @@ let IdentityPrincipalProvider = class IdentityPrincipalProvider {
         return Array.from(base);
     }
 };
-exports.IdentityPrincipalProvider = IdentityPrincipalProvider;
-exports.IdentityPrincipalProvider = IdentityPrincipalProvider = __decorate([
-    (0, tsyringe_1.injectable)(),
-    __metadata("design:paramtypes", [account_service_1.AccountService,
-        account_repository_1.AccountRepository])
+IdentityPrincipalProvider = __decorate([
+    injectable(),
+    __metadata("design:paramtypes", [AccountService,
+        AccountRepository])
 ], IdentityPrincipalProvider);
+export { IdentityPrincipalProvider };

package/dist/services/principal/api-principal.provider.js

@@ -1,4 +1,3 @@
-"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -8,11 +7,9 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ApiPrincipalProvider = void 0;
-const tsyringe_1 = require("tsyringe");
-const framework_1 = require("@open-core/framework");
-const memory_cache_service_1 = require("../cache/memory-cache.service");
+import { injectable } from "tsyringe";
+import { Server, Utils } from "@open-core/framework";
+import { MemoryCacheService } from "../cache/memory-cache.service";
 /**
  * API-based principal provider that fetches permissions from external API.
  * Does NOT require local database (uses memory cache only).
@@ -46,7 +43,7 @@ let ApiPrincipalProvider = class ApiPrincipalProvider {
     async getPrincipal(player) {
         const linked = player.accountID;
         if (!linked) {
-            throw new framework_1.Utils.AppError("UNAUTHORIZED", "Player is not authenticated (no linked account)", "server");
+            throw new Utils.AppError("UNAUTHORIZED", "Player is not authenticated (no linked account)", "server");
         }
         // Check cache first
         const cacheKey = `principal:${linked}`;
@@ -82,7 +79,7 @@ let ApiPrincipalProvider = class ApiPrincipalProvider {
                     meta: {},
                 };
             }
-            throw new framework_1.Utils.AppError("UNAUTHORIZED", `Failed to fetch principal from API: ${error instanceof Error ? error.message : "Unknown error"}`, "server");
+            throw new Utils.AppError("UNAUTHORIZED", `Failed to fetch principal from API: ${error instanceof Error ? error.message : "Unknown error"}`, "server");
         }
     }
     async refreshPrincipal(player) {
@@ -134,8 +131,8 @@ let ApiPrincipalProvider = class ApiPrincipalProvider {
         }
     }
 };
-exports.ApiPrincipalProvider = ApiPrincipalProvider;
-exports.ApiPrincipalProvider = ApiPrincipalProvider = __decorate([
-    (0, tsyringe_1.injectable)(),
-    __metadata("design:paramtypes", [framework_1.Server.ConfigService, framework_1.Server.HttpService, memory_cache_service_1.MemoryCacheService])
+ApiPrincipalProvider = __decorate([
+    injectable(),
+    __metadata("design:paramtypes", [Server.ConfigService, Server.HttpService, MemoryCacheService])
 ], ApiPrincipalProvider);
+export { ApiPrincipalProvider };

package/dist/services/principal/local-principal.provider.js

@@ -1,4 +1,3 @@
-"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -8,12 +7,10 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LocalPrincipalProvider = void 0;
-const tsyringe_1 = require("tsyringe");
-const framework_1 = require("@open-core/framework");
-const account_service_1 = require("../account.service");
-const account_repository_1 = require("../../repositories/account.repository");
+import { injectable } from "tsyringe";
+import { Utils } from "@open-core/framework";
+import { AccountService } from "../account.service";
+import { AccountRepository } from "../../repositories/account.repository";
 /**
  * Local principal provider that reads roles and permissions from local database.
  * This is the default/traditional principal provider for FiveM servers.
@@ -32,11 +29,11 @@ let LocalPrincipalProvider = class LocalPrincipalProvider {
     async getPrincipal(player) {
         const linked = player.accountID;
         if (!linked) {
-            throw new framework_1.Utils.AppError("UNAUTHORIZED", "Player is not authenticated (no linked account)", "server");
+            throw new Utils.AppError("UNAUTHORIZED", "Player is not authenticated (no linked account)", "server");
         }
         const result = await this.repo.findByLinkedIdWithRole(String(linked));
         if (!result) {
-            throw new framework_1.Utils.AppError("UNAUTHORIZED", "Linked account not found", "server");
+            throw new Utils.AppError("UNAUTHORIZED", "Linked account not found", "server");
         }
         const { account, role } = result;
         if (this.accounts.isBanExpired(account)) {
@@ -44,7 +41,7 @@ let LocalPrincipalProvider = class LocalPrincipalProvider {
             account.banned = false;
         }
         if (account.banned) {
-            throw new framework_1.Utils.AppError("PERMISSION_DENIED", "Account is banned", "server", {
+            throw new Utils.AppError("PERMISSION_DENIED", "Account is banned", "server", {
                 banReason: account.banReason,
                 banExpires: account.banExpires,
             });
@@ -106,9 +103,9 @@ let LocalPrincipalProvider = class LocalPrincipalProvider {
         return Array.from(base);
     }
 };
-exports.LocalPrincipalProvider = LocalPrincipalProvider;
-exports.LocalPrincipalProvider = LocalPrincipalProvider = __decorate([
-    (0, tsyringe_1.injectable)(),
-    __metadata("design:paramtypes", [account_service_1.AccountService,
-        account_repository_1.AccountRepository])
+LocalPrincipalProvider = __decorate([
+    injectable(),
+    __metadata("design:paramtypes", [AccountService,
+        AccountRepository])
 ], LocalPrincipalProvider);
+export { LocalPrincipalProvider };

package/dist/services/role.service.d.ts

@@ -1,73 +1,52 @@
-import type { Role } from "../entities/role.entity";
-import type { CreateRoleInput, UpdateRoleInput } from "../types";
-import { RoleRepository } from "../repositories/role.repository";
+import { RoleStore } from "../contracts";
+import type { IdentityOptions, IdentityRole } from "../types";
 /**
- * Service for managing roles and their permissions.
- * Handles CRUD operations and permission management for roles.
+ * High-level service for managing security roles and their associated permissions.
+ *
+ * Provides a programmer-friendly API for role administration, including creation,
+ * updates, and permission retrieval. This service interacts with the configured
+ * {@link RoleStore}.
+ *
+ * @public
+ * @injectable
  */
 export declare class RoleService {
-    private readonly repo;
-    constructor(repo: RoleRepository);
+    private readonly store;
+    private readonly options;
     /**
-     * Find a role by its ID.
+     * Initializes a new instance of the RoleService.
      *
-     * @param id - Role ID
-     * @returns The role or null if not found
+     * @param store - Persistence layer for role definitions.
+     * @param options - Identity system configuration options.
      */
-    findById(id: number): Promise<Role | null>;
+    constructor(store: RoleStore, options: IdentityOptions);
     /**
-     * Find a role by its internal name.
+     * Persists a new security role definition.
      *
-     * @param name - Role name (e.g., 'admin', 'user')
-     * @returns The role or null if not found
+     * @param role - The complete role definition to create.
+     * @returns A promise that resolves when the role is saved.
      */
-    findByName(name: string): Promise<Role | null>;
+    create(role: IdentityRole): Promise<void>;
     /**
-     * Get all roles.
+     * Updates an existing role's rank or permissions.
      *
-     * @returns Array of all roles
+     * @param name - The unique technical name of the role to update.
+     * @param data - Partial object containing the fields to modify.
+     * @returns A promise that resolves when the update is complete.
      */
-    getAll(): Promise<Role[]>;
+    update(name: string, data: Partial<Omit<IdentityRole, "name">>): Promise<void>;
     /**
-     * Get the default role for new accounts.
+     * Permanently removes a role definition from the system.
      *
-     * @returns The default role or null if none is configured
+     * @param name - The technical name of the role to delete.
+     * @returns A promise that resolves when the role is deleted.
      */
-    getDefaultRole(): Promise<Role | null>;
+    delete(name: string): Promise<void>;
     /**
-     * Create a new role.
+     * Retrieves the full list of permissions granted to a specific role.
      *
-     * @param input - Role creation data
-     * @returns The created role
+     * @param name - The technical name of the role.
+     * @returns A promise resolving to an array of permission strings.
      */
-    create(input: CreateRoleInput): Promise<Role>;
-    /**
-     * Update an existing role.
-     *
-     * @param id - Role ID
-     * @param input - Update data
-     * @returns The updated role or null if not found
-     */
-    update(id: number, input: UpdateRoleInput): Promise<Role | null>;
-    /**
-     * Delete a role.
-     *
-     * @param id - Role ID
-     * @returns true if deleted, false if not found
-     */
-    delete(id: number): Promise<boolean>;
-    /**
-     * Add a permission to a role.
-     *
-     * @param roleId - Role ID
-     * @param permission - Permission string to add
-     */
-    addPermission(roleId: number, permission: string): Promise<void>;
-    /**
-     * Remove a permission from a role.
-     *
-     * @param roleId - Role ID
-     * @param permission - Permission string to remove
-     */
-    removePermission(roleId: number, permission: string): Promise<void>;
+    getPermissions(name: string): Promise<string[]>;
 }