@open-rlb/nestjs-amqp 2.0.13 → 2.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/amqp-lib/amqp/connection.d.ts +5 -0
- package/amqp-lib/amqp/connection.js +78 -21
- package/amqp-lib/amqp/connection.js.map +1 -1
- package/amqp-lib/amqp/retry-policy.d.ts +25 -0
- package/amqp-lib/amqp/retry-policy.js +101 -0
- package/amqp-lib/amqp/retry-policy.js.map +1 -0
- package/amqp-lib/config/rabbitmq.config.d.ts +2 -0
- package/amqp-lib/index.d.ts +1 -0
- package/amqp-lib/index.js +1 -0
- package/amqp-lib/index.js.map +1 -1
- package/amqp-lib/models/errors.model.d.ts +4 -0
- package/amqp-lib/models/errors.model.js +9 -1
- package/amqp-lib/models/errors.model.js.map +1 -1
- package/amqp-lib/models/rabbitmq-handler.model.d.ts +2 -0
- package/modules/acl/acl.module.js +3 -1
- package/modules/acl/acl.module.js.map +1 -1
- package/modules/acl/cache/acl-cache.service.d.ts +5 -1
- package/modules/acl/cache/acl-cache.service.js +23 -3
- package/modules/acl/cache/acl-cache.service.js.map +1 -1
- package/modules/acl/config/acl.config.d.ts +8 -0
- package/modules/acl/const.d.ts +2 -0
- package/modules/acl/const.js +3 -1
- package/modules/acl/const.js.map +1 -1
- package/modules/acl/index.d.ts +1 -0
- package/modules/acl/index.js +1 -0
- package/modules/acl/index.js.map +1 -1
- package/modules/acl/services/acl-invalidation.service.d.ts +18 -0
- package/modules/acl/services/acl-invalidation.service.js +81 -0
- package/modules/acl/services/acl-invalidation.service.js.map +1 -0
- package/modules/acl/services/acl-management.service.d.ts +7 -1
- package/modules/acl/services/acl-management.service.js +31 -15
- package/modules/acl/services/acl-management.service.js.map +1 -1
- package/modules/acl/services/acl.service.d.ts +9 -1
- package/modules/acl/services/acl.service.js +42 -12
- package/modules/acl/services/acl.service.js.map +1 -1
- package/modules/broker/broker.module.d.ts +2 -0
- package/modules/broker/broker.module.js +23 -2
- package/modules/broker/broker.module.js.map +1 -1
- package/modules/broker/config/topics.config.d.ts +2 -0
- package/modules/broker/decorators/broker-action.decorator.d.ts +3 -1
- package/modules/broker/decorators/broker-action.decorator.js +2 -1
- package/modules/broker/decorators/broker-action.decorator.js.map +1 -1
- package/modules/broker/services/broker.service.js +39 -16
- package/modules/broker/services/broker.service.js.map +1 -1
- package/modules/broker/services/metadata-scanner.service.js +45 -32
- package/modules/broker/services/metadata-scanner.service.js.map +1 -1
- package/modules/gateway-admin/config/gateway-admin.config.d.ts +1 -0
- package/modules/gateway-admin/const.d.ts +2 -0
- package/modules/gateway-admin/const.js +3 -1
- package/modules/gateway-admin/const.js.map +1 -1
- package/modules/gateway-admin/index.d.ts +1 -0
- package/modules/gateway-admin/index.js +1 -0
- package/modules/gateway-admin/index.js.map +1 -1
- package/modules/gateway-admin/repository/http-path.repository.js.map +1 -1
- package/modules/gateway-admin/scheduler-lock.d.ts +8 -0
- package/modules/gateway-admin/scheduler-lock.js +8 -0
- package/modules/gateway-admin/scheduler-lock.js.map +1 -0
- package/modules/gateway-admin/services/gateway-metrics-rollup.service.d.ts +8 -1
- package/modules/gateway-admin/services/gateway-metrics-rollup.service.js +59 -4
- package/modules/gateway-admin/services/gateway-metrics-rollup.service.js.map +1 -1
- package/modules/gateway-admin/services/gateway-metrics.service.d.ts +4 -1
- package/modules/gateway-admin/services/gateway-metrics.service.js +19 -6
- package/modules/gateway-admin/services/gateway-metrics.service.js.map +1 -1
- package/modules/gateway-admin/services/gateway-retention.service.d.ts +4 -1
- package/modules/gateway-admin/services/gateway-retention.service.js +33 -3
- package/modules/gateway-admin/services/gateway-retention.service.js.map +1 -1
- package/modules/gateway-admin/services/route-sync.service.js +25 -5
- package/modules/gateway-admin/services/route-sync.service.js.map +1 -1
- package/modules/proxy/config/path-definition.config.d.ts +7 -0
- package/modules/proxy/services/http-handler.service.d.ts +3 -0
- package/modules/proxy/services/http-handler.service.js +54 -6
- package/modules/proxy/services/http-handler.service.js.map +1 -1
- package/modules/proxy/services/websocket.service.js +28 -2
- package/modules/proxy/services/websocket.service.js.map +1 -1
- package/package.json +1 -1
- package/schematics/nest-add/files/skills/rlb-amqp/references/config-schema.md +20 -3
- package/schematics/nest-add/files/skills/rlb-amqp/references/gotchas.md +19 -3
- package/schematics/nest-add/files/skills/rlb-amqp-acl/SKILL.md +35 -10
- package/schematics/nest-add/files/skills/rlb-amqp-gateway-admin/SKILL.md +27 -1
|
@@ -17,16 +17,33 @@ exports.AclCacheService = void 0;
|
|
|
17
17
|
const common_1 = require("@nestjs/common");
|
|
18
18
|
const const_1 = require("../const");
|
|
19
19
|
let AclCacheService = AclCacheService_1 = class AclCacheService {
|
|
20
|
+
get generation() {
|
|
21
|
+
return this.gen;
|
|
22
|
+
}
|
|
20
23
|
constructor(options, store) {
|
|
21
24
|
this.store = store;
|
|
22
25
|
this.logger = new common_1.Logger(AclCacheService_1.name);
|
|
23
26
|
this.ram = new Map();
|
|
27
|
+
this.gen = 0;
|
|
24
28
|
this.ramTtlMs = options.cache?.ramTtlMs ?? 30_000;
|
|
25
29
|
this.l2TtlSec = options.cache?.l2TtlSec ?? 600;
|
|
30
|
+
this.maxRamEntries = options.cache?.maxRamEntries ?? 50_000;
|
|
26
31
|
}
|
|
27
32
|
key(userId, action) {
|
|
28
33
|
return `acl/${userId}/${action}`;
|
|
29
34
|
}
|
|
35
|
+
ramSet(key, entry) {
|
|
36
|
+
this.ram.delete(key);
|
|
37
|
+
this.ram.set(key, entry);
|
|
38
|
+
if (this.maxRamEntries > 0) {
|
|
39
|
+
while (this.ram.size > this.maxRamEntries) {
|
|
40
|
+
const oldest = this.ram.keys().next().value;
|
|
41
|
+
if (oldest === undefined)
|
|
42
|
+
break;
|
|
43
|
+
this.ram.delete(oldest);
|
|
44
|
+
}
|
|
45
|
+
}
|
|
46
|
+
}
|
|
30
47
|
async get(userId, action) {
|
|
31
48
|
const key = this.key(userId, action);
|
|
32
49
|
const local = this.ram.get(key);
|
|
@@ -39,7 +56,7 @@ let AclCacheService = AclCacheService_1 = class AclCacheService {
|
|
|
39
56
|
const cached = await this.store.get(key);
|
|
40
57
|
if (cached === '1' || cached === '0') {
|
|
41
58
|
const value = cached === '1';
|
|
42
|
-
this.
|
|
59
|
+
this.ramSet(key, { v: value, exp: Date.now() + this.ramTtlMs });
|
|
43
60
|
return value;
|
|
44
61
|
}
|
|
45
62
|
}
|
|
@@ -49,9 +66,11 @@ let AclCacheService = AclCacheService_1 = class AclCacheService {
|
|
|
49
66
|
}
|
|
50
67
|
return null;
|
|
51
68
|
}
|
|
52
|
-
async set(userId, action, value) {
|
|
69
|
+
async set(userId, action, value, seenGen) {
|
|
70
|
+
if (seenGen !== undefined && seenGen !== this.gen)
|
|
71
|
+
return;
|
|
53
72
|
const key = this.key(userId, action);
|
|
54
|
-
this.
|
|
73
|
+
this.ramSet(key, { v: value, exp: Date.now() + this.ramTtlMs });
|
|
55
74
|
if (this.store) {
|
|
56
75
|
try {
|
|
57
76
|
await this.store.set(key, value ? '1' : '0', this.l2TtlSec);
|
|
@@ -76,6 +95,7 @@ let AclCacheService = AclCacheService_1 = class AclCacheService {
|
|
|
76
95
|
}
|
|
77
96
|
}
|
|
78
97
|
invalidateLocalRam(userId) {
|
|
98
|
+
this.gen++;
|
|
79
99
|
if (!userId) {
|
|
80
100
|
this.ram.clear();
|
|
81
101
|
return;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"acl-cache.service.js","sourceRoot":"","sources":["../../../../libs/rlb-nestjs-amqp/src/modules/acl/cache/acl-cache.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAsE;AAEtE,oCAAgE;AAMzD,IAAM,eAAe,uBAArB,MAAM,eAAe;
|
|
1
|
+
{"version":3,"file":"acl-cache.service.js","sourceRoot":"","sources":["../../../../libs/rlb-nestjs-amqp/src/modules/acl/cache/acl-cache.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAsE;AAEtE,oCAAgE;AAMzD,IAAM,eAAe,uBAArB,MAAM,eAAe;IAmB1B,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,YAC2B,OAAyB,EACT,KAAsC;QAArB,UAAK,GAAL,KAAK,CAAgB;QAxBhE,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;QAC1C,QAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;QAc3C,QAAG,GAAG,CAAC,CAAC;QAWd,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,MAAM,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,GAAG,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,aAAa,IAAI,MAAM,CAAC;IAC9D,CAAC;IAEO,GAAG,CAAC,MAAc,EAAE,MAAc;QACxC,OAAO,OAAO,MAAM,IAAI,MAAM,EAAE,CAAC;IACnC,CAAC;IAOO,MAAM,CAAC,GAAW,EAAE,KAAe;QAEzC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAC5C,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM;gBAChC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,MAAc;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACrC,MAAM,KAAK,GAAG,MAAM,KAAK,GAAG,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAChE,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,GAAG,KAAK,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,KAAc,EAAE,OAAgB;QAGxE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,GAAG,KAAK,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,UAAU,CAAC,MAAe;QAC9B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,OAAO,KAAK,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAGD,kBAAkB,CAAC,MAAe;QAIhC,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,MAAM,GAAG,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;CACF,CAAA;AAtHY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAyBR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;IACvB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,2BAAmB,CAAC,CAAA;;GAzB/B,eAAe,CAsH3B"}
|
|
@@ -1,8 +1,16 @@
|
|
|
1
1
|
export interface AclCacheOptions {
|
|
2
2
|
ramTtlMs?: number;
|
|
3
3
|
l2TtlSec?: number;
|
|
4
|
+
maxRamEntries?: number;
|
|
5
|
+
}
|
|
6
|
+
export interface AclInvalidationOptions {
|
|
7
|
+
exchange: string;
|
|
8
|
+
routingKey?: string;
|
|
4
9
|
}
|
|
5
10
|
export interface AclModuleOptions {
|
|
6
11
|
cache?: AclCacheOptions;
|
|
7
12
|
roleManagementAction?: string;
|
|
13
|
+
roleSystemAction?: string;
|
|
14
|
+
invalidation?: AclInvalidationOptions;
|
|
15
|
+
checkTimeoutMs?: number;
|
|
8
16
|
}
|
package/modules/acl/const.d.ts
CHANGED
|
@@ -1,7 +1,9 @@
|
|
|
1
1
|
export declare const ACL_TOPIC = "rlb-acl";
|
|
2
2
|
export declare const RLB_ACL_OPTIONS = "RLB_ACL_OPTIONS";
|
|
3
3
|
export declare const RLB_ACL_CACHE_STORE = "RLB_ACL_CACHE_STORE";
|
|
4
|
+
export declare const RLB_ACL_INVALIDATION = "RLB_ACL_INVALIDATION";
|
|
4
5
|
export declare const ACL_DEFAULT_ROLE_MANAGEMENT_ACTION = "role-management";
|
|
6
|
+
export declare const ACL_DEFAULT_ROLE_SYSTEM_ACTION = "role-system";
|
|
5
7
|
export declare const ACL_ACTIONS: {
|
|
6
8
|
readonly checkAction: "acl-check-action";
|
|
7
9
|
readonly listResourcesByUser: "acl-list-resources-by-user";
|
package/modules/acl/const.js
CHANGED
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ACL_ACTIONS = exports.ACL_DEFAULT_ROLE_MANAGEMENT_ACTION = exports.RLB_ACL_CACHE_STORE = exports.RLB_ACL_OPTIONS = exports.ACL_TOPIC = void 0;
|
|
3
|
+
exports.ACL_ACTIONS = exports.ACL_DEFAULT_ROLE_SYSTEM_ACTION = exports.ACL_DEFAULT_ROLE_MANAGEMENT_ACTION = exports.RLB_ACL_INVALIDATION = exports.RLB_ACL_CACHE_STORE = exports.RLB_ACL_OPTIONS = exports.ACL_TOPIC = void 0;
|
|
4
4
|
exports.ACL_TOPIC = 'rlb-acl';
|
|
5
5
|
exports.RLB_ACL_OPTIONS = 'RLB_ACL_OPTIONS';
|
|
6
6
|
exports.RLB_ACL_CACHE_STORE = 'RLB_ACL_CACHE_STORE';
|
|
7
|
+
exports.RLB_ACL_INVALIDATION = 'RLB_ACL_INVALIDATION';
|
|
7
8
|
exports.ACL_DEFAULT_ROLE_MANAGEMENT_ACTION = 'role-management';
|
|
9
|
+
exports.ACL_DEFAULT_ROLE_SYSTEM_ACTION = 'role-system';
|
|
8
10
|
exports.ACL_ACTIONS = {
|
|
9
11
|
checkAction: 'acl-check-action',
|
|
10
12
|
listResourcesByUser: 'acl-list-resources-by-user',
|
package/modules/acl/const.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"const.js","sourceRoot":"","sources":["../../../libs/rlb-nestjs-amqp/src/modules/acl/const.ts"],"names":[],"mappings":";;;AAGa,QAAA,SAAS,GAAG,SAAS,CAAC;AAEtB,QAAA,eAAe,GAAG,iBAAiB,CAAC;AAEpC,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;
|
|
1
|
+
{"version":3,"file":"const.js","sourceRoot":"","sources":["../../../libs/rlb-nestjs-amqp/src/modules/acl/const.ts"],"names":[],"mappings":";;;AAGa,QAAA,SAAS,GAAG,SAAS,CAAC;AAEtB,QAAA,eAAe,GAAG,iBAAiB,CAAC;AAEpC,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAE5C,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AAI9C,QAAA,kCAAkC,GAAG,iBAAiB,CAAC;AAKvD,QAAA,8BAA8B,GAAG,aAAa,CAAC;AAG/C,QAAA,WAAW,GAAG;IAGzB,WAAW,EAAE,kBAAkB;IAE/B,mBAAmB,EAAE,4BAA4B;IACjD,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,YAAY;IACpB,WAAW,EAAE,kBAAkB;IAC/B,UAAU,EAAE,gBAAgB;IAE5B,YAAY,EAAE,mBAAmB;IACjC,YAAY,EAAE,mBAAmB;IACjC,UAAU,EAAE,iBAAiB;IAC7B,SAAS,EAAE,gBAAgB;IAC3B,YAAY,EAAE,mBAAmB;IACjC,UAAU,EAAE,iBAAiB;IAC7B,UAAU,EAAE,iBAAiB;IAC7B,QAAQ,EAAE,eAAe;IACzB,OAAO,EAAE,cAAc;IACvB,UAAU,EAAE,iBAAiB;CACrB,CAAC"}
|
package/modules/acl/index.d.ts
CHANGED
|
@@ -8,5 +8,6 @@ export * from './models';
|
|
|
8
8
|
export * from './repository/acl-action.repository';
|
|
9
9
|
export * from './repository/acl-grant.repository';
|
|
10
10
|
export * from './repository/acl-role.repository';
|
|
11
|
+
export * from './services/acl-invalidation.service';
|
|
11
12
|
export * from './services/acl-management.service';
|
|
12
13
|
export * from './services/acl.service';
|
package/modules/acl/index.js
CHANGED
|
@@ -24,6 +24,7 @@ __exportStar(require("./models"), exports);
|
|
|
24
24
|
__exportStar(require("./repository/acl-action.repository"), exports);
|
|
25
25
|
__exportStar(require("./repository/acl-grant.repository"), exports);
|
|
26
26
|
__exportStar(require("./repository/acl-role.repository"), exports);
|
|
27
|
+
__exportStar(require("./services/acl-invalidation.service"), exports);
|
|
27
28
|
__exportStar(require("./services/acl-management.service"), exports);
|
|
28
29
|
__exportStar(require("./services/acl.service"), exports);
|
|
29
30
|
//# sourceMappingURL=index.js.map
|
package/modules/acl/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../libs/rlb-nestjs-amqp/src/modules/acl/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,+CAA6B;AAC7B,4DAA0C;AAC1C,sDAAoC;AACpC,sDAAoC;AACpC,0CAAwB;AACxB,2CAAyB;AACzB,qEAAmD;AACnD,oEAAkD;AAClD,mEAAiD;AACjD,oEAAkD;AAClD,yDAAuC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../libs/rlb-nestjs-amqp/src/modules/acl/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,+CAA6B;AAC7B,4DAA0C;AAC1C,sDAAoC;AACpC,sDAAoC;AACpC,0CAAwB;AACxB,2CAAyB;AACzB,qEAAmD;AACnD,oEAAkD;AAClD,mEAAiD;AACjD,sEAAoD;AACpD,oEAAkD;AAClD,yDAAuC"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
import { OnModuleInit } from '@nestjs/common';
|
|
2
|
+
import { AmqpConnection } from '../../../amqp-lib';
|
|
3
|
+
import { AclInvalidationOptions } from '../config/acl.config';
|
|
4
|
+
import { AclCacheService } from '../cache/acl-cache.service';
|
|
5
|
+
import { AclService } from './acl.service';
|
|
6
|
+
export declare class AclInvalidationService implements OnModuleInit {
|
|
7
|
+
private readonly cache;
|
|
8
|
+
private readonly acl;
|
|
9
|
+
private readonly amqp?;
|
|
10
|
+
private readonly logger;
|
|
11
|
+
private readonly exchange?;
|
|
12
|
+
private readonly routingKey;
|
|
13
|
+
private readonly enabled;
|
|
14
|
+
constructor(cache: AclCacheService, acl: AclService, amqp?: AmqpConnection, config?: AclInvalidationOptions);
|
|
15
|
+
onModuleInit(): Promise<void>;
|
|
16
|
+
private apply;
|
|
17
|
+
broadcast(scope: 'user' | 'all', userId?: string): Promise<void>;
|
|
18
|
+
}
|
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
10
|
+
};
|
|
11
|
+
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
|
+
return function (target, key) { decorator(target, key, paramIndex); }
|
|
13
|
+
};
|
|
14
|
+
var AclInvalidationService_1;
|
|
15
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
16
|
+
exports.AclInvalidationService = void 0;
|
|
17
|
+
const common_1 = require("@nestjs/common");
|
|
18
|
+
const crypto_1 = require("crypto");
|
|
19
|
+
const amqp_lib_1 = require("../../../amqp-lib");
|
|
20
|
+
const const_1 = require("../const");
|
|
21
|
+
const acl_cache_service_1 = require("../cache/acl-cache.service");
|
|
22
|
+
const acl_service_1 = require("./acl.service");
|
|
23
|
+
let AclInvalidationService = AclInvalidationService_1 = class AclInvalidationService {
|
|
24
|
+
constructor(cache, acl, amqp, config) {
|
|
25
|
+
this.cache = cache;
|
|
26
|
+
this.acl = acl;
|
|
27
|
+
this.amqp = amqp;
|
|
28
|
+
this.logger = new common_1.Logger(AclInvalidationService_1.name);
|
|
29
|
+
this.exchange = config?.exchange;
|
|
30
|
+
this.routingKey = config?.routingKey ?? 'acl-invalidate';
|
|
31
|
+
this.enabled = !!(this.exchange && this.amqp);
|
|
32
|
+
}
|
|
33
|
+
async onModuleInit() {
|
|
34
|
+
if (!this.enabled)
|
|
35
|
+
return;
|
|
36
|
+
const queue = `acl-invalidate-${process.pid}-${(0, crypto_1.randomUUID)().slice(0, 8)}`;
|
|
37
|
+
try {
|
|
38
|
+
await this.amqp.createSubscriber(async (msg) => this.apply(msg), {
|
|
39
|
+
queue,
|
|
40
|
+
exchange: this.exchange,
|
|
41
|
+
routingKey: this.routingKey,
|
|
42
|
+
createQueueIfNotExists: true,
|
|
43
|
+
queueOptions: { durable: false, autoDelete: true, exclusive: true },
|
|
44
|
+
}, '', {});
|
|
45
|
+
this.logger.log(`[acl] cross-instance invalidation active on exchange '${this.exchange}' (queue '${queue}')`);
|
|
46
|
+
}
|
|
47
|
+
catch (error) {
|
|
48
|
+
this.logger.error(`[acl] failed to bind invalidation queue on '${this.exchange}': ${error?.message}. Ensure the exchange is declared in broker.exchanges. Falling back to RAM-local invalidation.`);
|
|
49
|
+
}
|
|
50
|
+
}
|
|
51
|
+
apply(msg) {
|
|
52
|
+
if (msg?.scope === 'all') {
|
|
53
|
+
this.cache.invalidateLocalRam();
|
|
54
|
+
this.acl.invalidateRolesCache();
|
|
55
|
+
}
|
|
56
|
+
else {
|
|
57
|
+
this.cache.invalidateLocalRam(msg?.userId);
|
|
58
|
+
}
|
|
59
|
+
}
|
|
60
|
+
async broadcast(scope, userId) {
|
|
61
|
+
if (!this.enabled)
|
|
62
|
+
return;
|
|
63
|
+
try {
|
|
64
|
+
await this.amqp.publish(this.exchange, this.routingKey, { scope, userId });
|
|
65
|
+
}
|
|
66
|
+
catch (error) {
|
|
67
|
+
this.logger.warn(`[acl] failed to broadcast invalidation (${scope}${userId ? `/${userId}` : ''}): ${error?.message}`);
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
};
|
|
71
|
+
exports.AclInvalidationService = AclInvalidationService;
|
|
72
|
+
exports.AclInvalidationService = AclInvalidationService = AclInvalidationService_1 = __decorate([
|
|
73
|
+
(0, common_1.Injectable)(),
|
|
74
|
+
__param(2, (0, common_1.Optional)()),
|
|
75
|
+
__param(3, (0, common_1.Optional)()),
|
|
76
|
+
__param(3, (0, common_1.Inject)(const_1.RLB_ACL_INVALIDATION)),
|
|
77
|
+
__metadata("design:paramtypes", [acl_cache_service_1.AclCacheService,
|
|
78
|
+
acl_service_1.AclService,
|
|
79
|
+
amqp_lib_1.AmqpConnection, Object])
|
|
80
|
+
], AclInvalidationService);
|
|
81
|
+
//# sourceMappingURL=acl-invalidation.service.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"acl-invalidation.service.js","sourceRoot":"","sources":["../../../../libs/rlb-nestjs-amqp/src/modules/acl/services/acl-invalidation.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoF;AACpF,mCAAoC;AACpC,gDAAmD;AAEnD,oCAAgD;AAChD,kEAA6D;AAC7D,+CAA2C;AAmBpC,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAMjC,YACmB,KAAsB,EACtB,GAAe,EACpB,IAAsC,EACR,MAA+B;QAHxD,UAAK,GAAL,KAAK,CAAiB;QACtB,QAAG,GAAH,GAAG,CAAY;QACH,SAAI,GAAJ,IAAI,CAAiB;QARnC,WAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;QAWhE,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,gBAAgB,CAAC;QACzD,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAI1B,MAAM,KAAK,GAAG,kBAAkB,OAAO,CAAC,GAAG,IAAI,IAAA,mBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAK,CAAC,gBAAgB,CAC/B,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAC9B;gBACE,KAAK;gBACL,QAAQ,EAAE,IAAI,CAAC,QAAS;gBACxB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,sBAAsB,EAAE,IAAI;gBAC5B,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;aACpE,EACD,EAAE,EACF,EAAE,CACH,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yDAAyD,IAAI,CAAC,QAAQ,aAAa,KAAK,IAAI,CAAC,CAAC;QAChH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,IAAI,CAAC,QAAQ,MAAO,KAAe,EAAE,OAAO,gGAAgG,CAAC,CAAC;QACjN,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,GAA4B;QACxC,IAAI,GAAG,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,SAAS,CAAC,KAAqB,EAAE,MAAe;QACpD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAA4B,CAAC,CAAC;QACzG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAO,KAAe,EAAE,OAAO,EAAE,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;CACF,CAAA;AAjEY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAUR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,4BAAoB,CAAC,CAAA;qCAHjB,mCAAe;QACjB,wBAAU;QACI,yBAAc;GATzC,sBAAsB,CAiElC"}
|
|
@@ -5,6 +5,7 @@ import { AclAction, AclGrant, AclRole } from '../models';
|
|
|
5
5
|
import { AclActionRepository } from '../repository/acl-action.repository';
|
|
6
6
|
import { AclGrantRepository } from '../repository/acl-grant.repository';
|
|
7
7
|
import { AclRoleRepository } from '../repository/acl-role.repository';
|
|
8
|
+
import { AclInvalidationService } from './acl-invalidation.service';
|
|
8
9
|
import { AclService } from './acl.service';
|
|
9
10
|
export declare class AclManagementService {
|
|
10
11
|
private readonly actions;
|
|
@@ -12,9 +13,14 @@ export declare class AclManagementService {
|
|
|
12
13
|
private readonly grants;
|
|
13
14
|
private readonly cache;
|
|
14
15
|
private readonly acl;
|
|
16
|
+
private readonly invalidation;
|
|
15
17
|
private readonly logger;
|
|
16
18
|
private readonly roleMgmtAction;
|
|
17
|
-
|
|
19
|
+
private readonly roleSystemAction;
|
|
20
|
+
constructor(actions: AclActionRepository, roles: AclRoleRepository, grants: AclGrantRepository, cache: AclCacheService, acl: AclService, invalidation: AclInvalidationService, options: AclModuleOptions);
|
|
21
|
+
private assertCanManage;
|
|
22
|
+
private invalidateUser;
|
|
23
|
+
private invalidateAll;
|
|
18
24
|
grant(userId: string, roles: string[], resourceId?: string, companyId?: string, friendlyName?: string, currentUser?: string): Promise<AclGrant>;
|
|
19
25
|
revoke(userId: string, roles: string[], resourceId?: string, companyId?: string, currentUser?: string): Promise<AclGrant | null>;
|
|
20
26
|
private findGrant;
|
|
@@ -23,25 +23,42 @@ const const_1 = require("../const");
|
|
|
23
23
|
const acl_action_repository_1 = require("../repository/acl-action.repository");
|
|
24
24
|
const acl_grant_repository_1 = require("../repository/acl-grant.repository");
|
|
25
25
|
const acl_role_repository_1 = require("../repository/acl-role.repository");
|
|
26
|
+
const acl_invalidation_service_1 = require("./acl-invalidation.service");
|
|
26
27
|
const acl_service_1 = require("./acl.service");
|
|
27
28
|
let AclManagementService = AclManagementService_1 = class AclManagementService {
|
|
28
|
-
constructor(actions, roles, grants, cache, acl, options) {
|
|
29
|
+
constructor(actions, roles, grants, cache, acl, invalidation, options) {
|
|
29
30
|
this.actions = actions;
|
|
30
31
|
this.roles = roles;
|
|
31
32
|
this.grants = grants;
|
|
32
33
|
this.cache = cache;
|
|
33
34
|
this.acl = acl;
|
|
35
|
+
this.invalidation = invalidation;
|
|
34
36
|
this.logger = new common_1.Logger(AclManagementService_1.name);
|
|
35
37
|
this.roleMgmtAction = options.roleManagementAction ?? const_1.ACL_DEFAULT_ROLE_MANAGEMENT_ACTION;
|
|
38
|
+
this.roleSystemAction = options.roleSystemAction ?? const_1.ACL_DEFAULT_ROLE_SYSTEM_ACTION;
|
|
39
|
+
}
|
|
40
|
+
async assertCanManage(currentUser, companyId, resourceId, verb) {
|
|
41
|
+
if (await this.acl.checkAction(currentUser, { companyId, resourceId }, this.roleMgmtAction))
|
|
42
|
+
return;
|
|
43
|
+
if (await this.acl.checkAction(currentUser, undefined, this.roleSystemAction))
|
|
44
|
+
return;
|
|
45
|
+
throw new common_2.ForbiddenError(`'${this.roleMgmtAction}' on the target resource, or the system-level '${this.roleSystemAction}', is required to ${verb}`);
|
|
46
|
+
}
|
|
47
|
+
async invalidateUser(userId) {
|
|
48
|
+
await this.cache.invalidate(userId);
|
|
49
|
+
await this.invalidation.broadcast('user', userId);
|
|
50
|
+
}
|
|
51
|
+
async invalidateAll() {
|
|
52
|
+
await this.cache.invalidate();
|
|
53
|
+
this.acl.invalidateRolesCache();
|
|
54
|
+
await this.invalidation.broadcast('all');
|
|
36
55
|
}
|
|
37
56
|
async grant(userId, roles, resourceId, companyId, friendlyName, currentUser) {
|
|
38
57
|
if (!userId)
|
|
39
58
|
throw new common_2.BadRequestError('userId is required');
|
|
40
59
|
if (!roles?.length)
|
|
41
60
|
throw new common_2.BadRequestError('roles are required');
|
|
42
|
-
|
|
43
|
-
throw new common_2.ForbiddenError(`'${this.roleMgmtAction}' is required on the target resource to grant`);
|
|
44
|
-
}
|
|
61
|
+
await this.assertCanManage(currentUser ?? '', companyId, resourceId, 'grant');
|
|
45
62
|
await this.assertRolesExist(roles);
|
|
46
63
|
const existing = await this.findGrant(userId, companyId, resourceId);
|
|
47
64
|
let result;
|
|
@@ -56,7 +73,7 @@ let AclManagementService = AclManagementService_1 = class AclManagementService {
|
|
|
56
73
|
else {
|
|
57
74
|
result = await this.grants.insert({ userId, roles: Array.from(new Set(roles)), resourceId, companyId, friendlyName });
|
|
58
75
|
}
|
|
59
|
-
await this.
|
|
76
|
+
await this.invalidateUser(userId);
|
|
60
77
|
return result;
|
|
61
78
|
}
|
|
62
79
|
async revoke(userId, roles, resourceId, companyId, currentUser) {
|
|
@@ -64,9 +81,7 @@ let AclManagementService = AclManagementService_1 = class AclManagementService {
|
|
|
64
81
|
throw new common_2.BadRequestError('userId is required');
|
|
65
82
|
if (!roles?.length)
|
|
66
83
|
throw new common_2.BadRequestError('roles are required');
|
|
67
|
-
|
|
68
|
-
throw new common_2.ForbiddenError(`'${this.roleMgmtAction}' is required on the target resource to revoke`);
|
|
69
|
-
}
|
|
84
|
+
await this.assertCanManage(currentUser ?? '', companyId, resourceId, 'revoke');
|
|
70
85
|
const existing = await this.findGrant(userId, companyId, resourceId);
|
|
71
86
|
if (!existing)
|
|
72
87
|
return null;
|
|
@@ -74,7 +89,7 @@ let AclManagementService = AclManagementService_1 = class AclManagementService {
|
|
|
74
89
|
const result = remaining.length
|
|
75
90
|
? await this.grants.updateById(existing._id, { roles: remaining })
|
|
76
91
|
: await this.grants.removeById(existing._id);
|
|
77
|
-
await this.
|
|
92
|
+
await this.invalidateUser(userId);
|
|
78
93
|
return result;
|
|
79
94
|
}
|
|
80
95
|
async findGrant(userId, companyId, resourceId) {
|
|
@@ -86,14 +101,14 @@ let AclManagementService = AclManagementService_1 = class AclManagementService {
|
|
|
86
101
|
throw new common_2.BadRequestError('name is required');
|
|
87
102
|
const model = { name, ...(description !== undefined ? { description } : {}) };
|
|
88
103
|
const result = await this.actions.upsertOne({ name }, model);
|
|
89
|
-
await this.
|
|
104
|
+
await this.invalidateAll();
|
|
90
105
|
return result;
|
|
91
106
|
}
|
|
92
107
|
async deleteAction(name) {
|
|
93
108
|
if (!name)
|
|
94
109
|
throw new common_2.BadRequestError('name is required');
|
|
95
110
|
const removed = await this.actions.removeOne({ name });
|
|
96
|
-
await this.
|
|
111
|
+
await this.invalidateAll();
|
|
97
112
|
return removed;
|
|
98
113
|
}
|
|
99
114
|
async listActions(page, limit) {
|
|
@@ -112,14 +127,14 @@ let AclManagementService = AclManagementService_1 = class AclManagementService {
|
|
|
112
127
|
await this.assertActionsExist(actions);
|
|
113
128
|
const model = { name, actions, ...(description !== undefined ? { description } : {}) };
|
|
114
129
|
const result = await this.roles.upsertOne({ name }, model);
|
|
115
|
-
await this.
|
|
130
|
+
await this.invalidateAll();
|
|
116
131
|
return result;
|
|
117
132
|
}
|
|
118
133
|
async deleteRole(name) {
|
|
119
134
|
if (!name)
|
|
120
135
|
throw new common_2.BadRequestError('name is required');
|
|
121
136
|
const removed = await this.roles.removeOne({ name });
|
|
122
|
-
await this.
|
|
137
|
+
await this.invalidateAll();
|
|
123
138
|
return removed;
|
|
124
139
|
}
|
|
125
140
|
async listRoles(page, limit) {
|
|
@@ -269,11 +284,12 @@ __decorate([
|
|
|
269
284
|
], AclManagementService.prototype, "searchGrants", null);
|
|
270
285
|
exports.AclManagementService = AclManagementService = AclManagementService_1 = __decorate([
|
|
271
286
|
(0, common_1.Injectable)(),
|
|
272
|
-
__param(
|
|
287
|
+
__param(6, (0, common_1.Inject)(const_1.RLB_ACL_OPTIONS)),
|
|
273
288
|
__metadata("design:paramtypes", [acl_action_repository_1.AclActionRepository,
|
|
274
289
|
acl_role_repository_1.AclRoleRepository,
|
|
275
290
|
acl_grant_repository_1.AclGrantRepository,
|
|
276
291
|
acl_cache_service_1.AclCacheService,
|
|
277
|
-
acl_service_1.AclService,
|
|
292
|
+
acl_service_1.AclService,
|
|
293
|
+
acl_invalidation_service_1.AclInvalidationService, Object])
|
|
278
294
|
], AclManagementService);
|
|
279
295
|
//# sourceMappingURL=acl-management.service.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"acl-management.service.js","sourceRoot":"","sources":["../../../../libs/rlb-nestjs-amqp/src/modules/acl/services/acl-management.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4D;AAC5D,4CAAmF;AACnF,yCAAyD;AACzD,8CAAqD;AACrD,kEAA6D;AAE7D,oCAAuG;AAEvG,+EAA0E;AAC1E,6EAAwE;AACxE,2EAAsE;AACtE,+CAA2C;AAGpC,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAK/B,YACmB,OAA4B,EAC5B,KAAwB,EACxB,MAA0B,EAC1B,KAAsB,EACtB,GAAe,EACP,OAAyB;QALjC,YAAO,GAAP,OAAO,CAAqB;QAC5B,UAAK,GAAL,KAAK,CAAmB;QACxB,WAAM,GAAN,MAAM,CAAoB;QAC1B,UAAK,GAAL,KAAK,CAAiB;QACtB,QAAG,GAAH,GAAG,CAAY;QATjB,WAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;QAY9D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,oBAAoB,IAAI,0CAAkC,CAAC;IAC3F,CAAC;IAOK,AAAN,KAAK,CAAC,KAAK,CACsB,MAAc,EACf,KAAe,EACV,UAAmB,EACpB,SAAkB,EACf,YAAqB,EACd,WAAoB;QAEhE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,uBAAc,CAAC,IAAI,IAAI,CAAC,cAAc,+CAA+C,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAGnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,MAAgB,CAAC;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAI,EAAE;gBACnD,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;gBAC1C,YAAY,EAAE,YAAY,IAAI,QAAQ,CAAC,YAAY;aACpD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACqB,MAAc,EACf,KAAe,EACV,UAAmB,EACpB,SAAkB,EACR,WAAoB;QAEhE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,uBAAc,CAAC,IAAI,IAAI,CAAC,cAAc,gDAAgD,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAG3B,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM;YAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACnE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAI,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAGO,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,SAAkB,EAAE,UAAmB;QAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iCAAoB,EAAC,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CACa,IAAY,EACL,WAAoB;QAExD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAuB,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAClG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAA8B,IAAY;QAC1D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACc,IAAa,EACZ,KAAc;QAE5C,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAA8B,IAAY;QACvD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAKK,AAAN,KAAK,CAAC,UAAU,CACe,IAAY,EACT,OAAiB,EACb,WAAoB;QAExD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,sBAAsB,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAA8B,IAAY;QAGxD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CACgB,IAAa,EACZ,KAAc;QAE5C,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CAA8B,IAAY;QACrD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAIK,AAAN,KAAK,CAAC,aAAa,CAA2B,CAAU,EAA+B,IAAa,EAAgC,KAAc;QAChJ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAIK,AAAN,KAAK,CAAC,WAAW,CAA2B,CAAU,EAA+B,IAAa,EAAgC,KAAc;QAC9I,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IAIK,AAAN,KAAK,CAAC,YAAY,CAA2B,CAAU,EAA+B,IAAa,EAAgC,KAAc;QAC/I,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAe;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,KAAe;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,KAAe;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;CACF,CAAA;AAlMY,oDAAoB;AAqBzB;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,KAAK,EAAE,KAAK,CAAC;IAE/C,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC7B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACjC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAChC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACnC,WAAA,IAAA,oBAAW,EAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;;;;iDAwB5C;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,MAAM,EAAE,KAAK,CAAC;IAEhD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC7B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACjC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAChC,WAAA,IAAA,oBAAW,EAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;;;;kDAiB5C;AAWK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,YAAY,EAAE,KAAK,CAAC;IAEtD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,aAAa,CAAC,CAAA;;;;wDAOpC;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,YAAY,EAAE,KAAK,CAAC;IACrC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;;;;wDAK9C;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,UAAU,EAAE,KAAK,CAAC;IAEpD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;uDAG9B;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,SAAS,EAAE,KAAK,CAAC;IACrC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;;;;qDAG3C;AAKK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,UAAU,EAAE,KAAK,CAAC;IAEpD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC9B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,aAAa,CAAC,CAAA;;;;sDASpC;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,UAAU,EAAE,KAAK,CAAC;IACrC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;;;;sDAO5C;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,QAAQ,EAAE,KAAK,CAAC;IAElD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;qDAG9B;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,OAAO,EAAE,KAAK,CAAC;IACrC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;;;;mDAGzC;AAIK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,YAAY,EAAE,KAAK,CAAC;IACpC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAAc,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAAiB,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;yDAElI;AAIK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,UAAU,EAAE,KAAK,CAAC;IACpC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAAc,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAAiB,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;uDAEhI;AAIK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,WAAW,EAAE,KAAK,CAAC;IACpC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAAc,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAAiB,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;wDAEjI;+BAjLU,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAYR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCALE,2CAAmB;QACrB,uCAAiB;QAChB,yCAAkB;QACnB,mCAAe;QACjB,wBAAU;GAVvB,oBAAoB,CAkMhC"}
|
|
1
|
+
{"version":3,"file":"acl-management.service.js","sourceRoot":"","sources":["../../../../libs/rlb-nestjs-amqp/src/modules/acl/services/acl-management.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4D;AAC5D,4CAAmF;AACnF,yCAAyD;AACzD,8CAAqD;AACrD,kEAA6D;AAE7D,oCAAuI;AAEvI,+EAA0E;AAC1E,6EAAwE;AACxE,2EAAsE;AACtE,yEAAoE;AACpE,+CAA2C;AAGpC,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAO/B,YACmB,OAA4B,EAC5B,KAAwB,EACxB,MAA0B,EAC1B,KAAsB,EACtB,GAAe,EACf,YAAoC,EAC5B,OAAyB;QANjC,YAAO,GAAP,OAAO,CAAqB;QAC5B,UAAK,GAAL,KAAK,CAAmB;QACxB,WAAM,GAAN,MAAM,CAAoB;QAC1B,UAAK,GAAL,KAAK,CAAiB;QACtB,QAAG,GAAH,GAAG,CAAY;QACf,iBAAY,GAAZ,YAAY,CAAwB;QAZtC,WAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;QAe9D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,oBAAoB,IAAI,0CAAkC,CAAC;QACzF,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,sCAA8B,CAAC;IACrF,CAAC;IAWO,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,SAA6B,EAAE,UAA8B,EAAE,IAAwB;QACxI,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC;YAAE,OAAO;QACpG,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC;YAAE,OAAO;QACtF,MAAM,IAAI,uBAAc,CAAC,IAAI,IAAI,CAAC,cAAc,kDAAkD,IAAI,CAAC,gBAAgB,qBAAqB,IAAI,EAAE,CAAC,CAAC;IACtJ,CAAC;IAMO,KAAK,CAAC,cAAc,CAAC,MAAc;QACzC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAMO,KAAK,CAAC,aAAa;QACzB,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAOK,AAAN,KAAK,CAAC,KAAK,CACsB,MAAc,EACf,KAAe,EACV,UAAmB,EACpB,SAAkB,EACf,YAAqB,EACd,WAAoB;QAEhE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAGnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,MAAgB,CAAC;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAI,EAAE;gBACnD,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;gBAC1C,YAAY,EAAE,YAAY,IAAI,QAAQ,CAAC,YAAY;aACpD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACqB,MAAc,EACf,KAAe,EACV,UAAmB,EACpB,SAAkB,EACR,WAAoB;QAEhE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAG3B,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM;YAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACnE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAI,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAGO,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,SAAkB,EAAE,UAAmB;QAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iCAAoB,EAAC,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CACa,IAAY,EACL,WAAoB;QAExD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAuB,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAClG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAA8B,IAAY;QAC1D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACc,IAAa,EACZ,KAAc;QAE5C,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAA8B,IAAY;QACvD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAKK,AAAN,KAAK,CAAC,UAAU,CACe,IAAY,EACT,OAAiB,EACb,WAAoB;QAExD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,sBAAsB,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAA8B,IAAY;QAGxD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CACgB,IAAa,EACZ,KAAc;QAE5C,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CAA8B,IAAY;QACrD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAIK,AAAN,KAAK,CAAC,aAAa,CAA2B,CAAU,EAA+B,IAAa,EAAgC,KAAc;QAChJ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAIK,AAAN,KAAK,CAAC,WAAW,CAA2B,CAAU,EAA+B,IAAa,EAAgC,KAAc;QAC9I,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IAIK,AAAN,KAAK,CAAC,YAAY,CAA2B,CAAU,EAA+B,IAAa,EAAgC,KAAc;QAC/I,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAe;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,KAAe;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,KAAe;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,wBAAe,CAAC,kBAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;CACF,CAAA;AApOY,oDAAoB;AA2DzB;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,KAAK,EAAE,KAAK,CAAC;IAE/C,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC7B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACjC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAChC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACnC,WAAA,IAAA,oBAAW,EAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;;;;iDAsB5C;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,MAAM,EAAE,KAAK,CAAC;IAEhD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC7B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACjC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAChC,WAAA,IAAA,oBAAW,EAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;;;;kDAe5C;AAWK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,YAAY,EAAE,KAAK,CAAC;IAEtD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,aAAa,CAAC,CAAA;;;;wDAOpC;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,YAAY,EAAE,KAAK,CAAC;IACrC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;;;;wDAK9C;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,UAAU,EAAE,KAAK,CAAC;IAEpD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;uDAG9B;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,SAAS,EAAE,KAAK,CAAC;IACrC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;;;;qDAG3C;AAKK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,UAAU,EAAE,KAAK,CAAC;IAEpD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC9B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,aAAa,CAAC,CAAA;;;;sDASpC;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,UAAU,EAAE,KAAK,CAAC;IACrC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;;;;sDAO5C;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,QAAQ,EAAE,KAAK,CAAC;IAElD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;qDAG9B;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,OAAO,EAAE,KAAK,CAAC;IACrC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;;;;mDAGzC;AAIK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,YAAY,EAAE,KAAK,CAAC;IACpC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAAc,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAAiB,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;yDAElI;AAIK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,UAAU,EAAE,KAAK,CAAC;IACpC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAAc,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAAiB,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;uDAEhI;AAIK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,WAAW,EAAE,KAAK,CAAC;IACpC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAAc,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAAiB,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;;;;wDAEjI;+BAnNU,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAeR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCANE,2CAAmB;QACrB,uCAAiB;QAChB,yCAAkB;QACnB,mCAAe;QACjB,wBAAU;QACD,iDAAsB;GAb5C,oBAAoB,CAoOhC"}
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { IAclRoleService } from '../../proxy/services/acl.service';
|
|
2
2
|
import { AclResourceContext } from '../auth-match';
|
|
3
3
|
import { AclCacheService } from '../cache/acl-cache.service';
|
|
4
|
+
import { AclModuleOptions } from '../config/acl.config';
|
|
4
5
|
import { AclResourceGroup } from '../models';
|
|
5
6
|
import { AclGrantRepository } from '../repository/acl-grant.repository';
|
|
6
7
|
import { AclRoleRepository } from '../repository/acl-role.repository';
|
|
@@ -9,9 +10,16 @@ export declare class AclService implements IAclRoleService {
|
|
|
9
10
|
private readonly roles;
|
|
10
11
|
private readonly cache;
|
|
11
12
|
private readonly logger;
|
|
12
|
-
|
|
13
|
+
private rolesCache?;
|
|
14
|
+
private readonly rolesTtlMs;
|
|
15
|
+
private readonly checkTimeoutMs;
|
|
16
|
+
constructor(grants: AclGrantRepository, roles: AclRoleRepository, cache: AclCacheService, options: AclModuleOptions);
|
|
17
|
+
private withTimeout;
|
|
13
18
|
private toList;
|
|
19
|
+
private listRolesCached;
|
|
20
|
+
invalidateRolesCache(): void;
|
|
14
21
|
checkAction(userId: string, ctx: AclResourceContext | undefined, action: string | string[]): Promise<boolean>;
|
|
22
|
+
private resolveAllowed;
|
|
15
23
|
handleCheckAction(userId: string, action: string | string[], companyId?: string, resourceId?: string): Promise<boolean>;
|
|
16
24
|
listResourcesByUser(userId: string): Promise<AclResourceGroup[]>;
|
|
17
25
|
}
|
|
@@ -23,15 +23,38 @@ const const_1 = require("../const");
|
|
|
23
23
|
const acl_grant_repository_1 = require("../repository/acl-grant.repository");
|
|
24
24
|
const acl_role_repository_1 = require("../repository/acl-role.repository");
|
|
25
25
|
let AclService = AclService_1 = class AclService {
|
|
26
|
-
constructor(grants, roles, cache) {
|
|
26
|
+
constructor(grants, roles, cache, options) {
|
|
27
27
|
this.grants = grants;
|
|
28
28
|
this.roles = roles;
|
|
29
29
|
this.cache = cache;
|
|
30
30
|
this.logger = new common_1.Logger(AclService_1.name);
|
|
31
|
+
this.rolesTtlMs = options?.cache?.ramTtlMs ?? 30_000;
|
|
32
|
+
this.checkTimeoutMs = options?.checkTimeoutMs ?? 5_000;
|
|
33
|
+
}
|
|
34
|
+
withTimeout(p, ms, label) {
|
|
35
|
+
if (!ms || ms <= 0)
|
|
36
|
+
return p;
|
|
37
|
+
let timer;
|
|
38
|
+
const deadline = new Promise((_, reject) => {
|
|
39
|
+
timer = setTimeout(() => reject(new Error(`ACL ${label} timed out after ${ms}ms`)), ms);
|
|
40
|
+
timer.unref?.();
|
|
41
|
+
});
|
|
42
|
+
return Promise.race([p, deadline]).finally(() => clearTimeout(timer));
|
|
31
43
|
}
|
|
32
44
|
toList(value) {
|
|
33
45
|
return Array.isArray(value) ? value : (value ? [value] : []);
|
|
34
46
|
}
|
|
47
|
+
async listRolesCached() {
|
|
48
|
+
const now = Date.now();
|
|
49
|
+
if (this.rolesCache && this.rolesCache.exp > now)
|
|
50
|
+
return this.rolesCache.data;
|
|
51
|
+
const data = (await this.roles.list()) || [];
|
|
52
|
+
this.rolesCache = { data, exp: now + this.rolesTtlMs };
|
|
53
|
+
return data;
|
|
54
|
+
}
|
|
55
|
+
invalidateRolesCache() {
|
|
56
|
+
this.rolesCache = undefined;
|
|
57
|
+
}
|
|
35
58
|
async checkAction(userId, ctx, action) {
|
|
36
59
|
const actions = this.toList(action);
|
|
37
60
|
if (!userId || !actions.length)
|
|
@@ -41,17 +64,20 @@ let AclService = AclService_1 = class AclService {
|
|
|
41
64
|
const cached = await this.cache.get(userId, cacheAction);
|
|
42
65
|
if (cached !== null)
|
|
43
66
|
return cached;
|
|
44
|
-
const
|
|
45
|
-
const
|
|
46
|
-
|
|
47
|
-
if (roleNames.size) {
|
|
48
|
-
const grants = await this.grants.filter({ userId });
|
|
49
|
-
const scoped = ctx === undefined ? grants : grants.filter((g) => (0, auth_match_1.grantMatchesResource)(g, ctx));
|
|
50
|
-
allowed = scoped.some((g) => (g.roles || []).some((r) => roleNames.has(r)));
|
|
51
|
-
}
|
|
52
|
-
await this.cache.set(userId, cacheAction, allowed);
|
|
67
|
+
const seenGen = this.cache.generation;
|
|
68
|
+
const allowed = await this.withTimeout(this.resolveAllowed(userId, ctx, actions), this.checkTimeoutMs, 'checkAction');
|
|
69
|
+
await this.cache.set(userId, cacheAction, allowed, seenGen);
|
|
53
70
|
return allowed;
|
|
54
71
|
}
|
|
72
|
+
async resolveAllowed(userId, ctx, actions) {
|
|
73
|
+
const allRoles = await this.listRolesCached();
|
|
74
|
+
const roleNames = new Set((allRoles || []).filter((r) => (r.actions || []).some((a) => actions.includes(a))).map((r) => r.name));
|
|
75
|
+
if (!roleNames.size)
|
|
76
|
+
return false;
|
|
77
|
+
const grants = await this.grants.filter({ userId });
|
|
78
|
+
const scoped = ctx === undefined ? grants : grants.filter((g) => (0, auth_match_1.grantMatchesResource)(g, ctx));
|
|
79
|
+
return scoped.some((g) => (g.roles || []).some((r) => roleNames.has(r)));
|
|
80
|
+
}
|
|
55
81
|
async handleCheckAction(userId, action, companyId, resourceId) {
|
|
56
82
|
try {
|
|
57
83
|
return await this.checkAction(userId, { companyId, resourceId }, action);
|
|
@@ -66,6 +92,9 @@ let AclService = AclService_1 = class AclService {
|
|
|
66
92
|
if (!userId)
|
|
67
93
|
throw new common_2.UnauthorizedError('User ID is required');
|
|
68
94
|
const acls = await this.grants.filter({ userId });
|
|
95
|
+
const actionsByRole = new Map();
|
|
96
|
+
for (const r of await this.listRolesCached())
|
|
97
|
+
actionsByRole.set(r.name, r.actions || []);
|
|
69
98
|
const grouped = {};
|
|
70
99
|
for (const item of acls || []) {
|
|
71
100
|
const companyKey = item.companyId ?? '';
|
|
@@ -78,7 +107,7 @@ let AclService = AclService_1 = class AclService {
|
|
|
78
107
|
grouped[companyKey].resources.push(resource);
|
|
79
108
|
}
|
|
80
109
|
const roleNames = Array.isArray(item.roles) ? item.roles : [item.roles];
|
|
81
|
-
const actions =
|
|
110
|
+
const actions = roleNames.flatMap((rn) => actionsByRole.get(rn) || []);
|
|
82
111
|
resource.actions.push(...actions);
|
|
83
112
|
resource.actions = Array.from(new Set(resource.actions));
|
|
84
113
|
}
|
|
@@ -110,8 +139,9 @@ __decorate([
|
|
|
110
139
|
], AclService.prototype, "listResourcesByUser", null);
|
|
111
140
|
exports.AclService = AclService = AclService_1 = __decorate([
|
|
112
141
|
(0, common_1.Injectable)(),
|
|
142
|
+
__param(3, (0, common_1.Inject)(const_1.RLB_ACL_OPTIONS)),
|
|
113
143
|
__metadata("design:paramtypes", [acl_grant_repository_1.AclGrantRepository,
|
|
114
144
|
acl_role_repository_1.AclRoleRepository,
|
|
115
|
-
acl_cache_service_1.AclCacheService])
|
|
145
|
+
acl_cache_service_1.AclCacheService, Object])
|
|
116
146
|
], AclService);
|
|
117
147
|
//# sourceMappingURL=acl.service.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"acl.service.js","sourceRoot":"","sources":["../../../../libs/rlb-nestjs-amqp/src/modules/acl/services/acl.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,
|
|
1
|
+
{"version":3,"file":"acl.service.js","sourceRoot":"","sources":["../../../../libs/rlb-nestjs-amqp/src/modules/acl/services/acl.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4D;AAC5D,4CAAoD;AACpD,yCAAyD;AAEzD,8CAAyE;AACzE,kEAA6D;AAE7D,oCAAmE;AAEnE,6EAAwE;AACxE,2EAAsE;AAG/D,IAAM,UAAU,kBAAhB,MAAM,UAAU;IASrB,YACmB,MAA0B,EAC1B,KAAwB,EACxB,KAAsB,EACd,OAAyB;QAHjC,WAAM,GAAN,MAAM,CAAoB;QAC1B,UAAK,GAAL,KAAK,CAAmB;QACxB,UAAK,GAAL,KAAK,CAAiB;QAXxB,WAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAC;QAcpD,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,MAAM,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC;IACzD,CAAC;IAMO,WAAW,CAAI,CAAa,EAAE,EAAU,EAAE,KAAa;QAC7D,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,KAAoC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,oBAAoB,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,MAAM,CAAC,KAAwB;QACrC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IASO,KAAK,CAAC,eAAe;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,oBAAoB;QAClB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAQD,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,GAAmC,EAAE,MAAyB;QAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,QAAQ,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QACrG,MAAM,WAAW,GAAG,OAAO,QAAQ,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAInC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAGtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;QACtH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC;IACjB,CAAC;IAGO,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,GAAmC,EAAE,OAAiB;QAGjG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACtG,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iCAAoB,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/F,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAGK,AAAN,KAAK,CAAC,iBAAiB,CACU,MAAc,EACd,MAAyB,EACtB,SAAkB,EACjB,UAAmB;QAEtD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,mBAAmB,CACqB,MAAc;QAE1D,IAAI,CAAC;YACH,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,0BAAiB,CAAC,qBAAqB,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAGlD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;YAClD,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,eAAe,EAAE;gBAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACzF,MAAM,OAAO,GAAqC,EAAE,CAAC;YACrD,KAAK,MAAM,IAAI,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;gBACrE,CAAC;gBACD,IAAI,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC3F,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,QAAQ,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;oBACzF,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;gBAClC,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CAEF,CAAA;AAhJY,gCAAU;AAgGf;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,WAAW,EAAE,KAAK,CAAC;IAErD,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC7B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC7B,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAChC,WAAA,IAAA,oBAAW,EAAC,MAAM,EAAE,YAAY,CAAC,CAAA;;;;mDAQnC;AAGK;IADL,IAAA,qBAAY,EAAC,iBAAS,EAAE,mBAAW,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAE7D,WAAA,IAAA,oBAAW,EAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;;;;qDA8B5C;qBA9IU,UAAU;IADtB,IAAA,mBAAU,GAAE;IAcR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCAHC,yCAAkB;QACnB,uCAAiB;QACjB,mCAAe;GAZ9B,UAAU,CAgJtB"}
|
|
@@ -5,6 +5,8 @@ import { AppConfig } from './services/utils.service';
|
|
|
5
5
|
export declare const ConfigurableModuleClass: import("@nestjs/common").ConfigurableModuleCls<RabbitMQConfig, "forRoot", "create", {}>, MODULE_OPTIONS_TOKEN: string | symbol;
|
|
6
6
|
export declare class BrokerModule {
|
|
7
7
|
private static withServiceNameConnection;
|
|
8
|
+
private static withInstanceUniqueConnectionName;
|
|
9
|
+
private static buildOptions;
|
|
8
10
|
static forRoot(options: RabbitMQConfig, topics: BrokerTopic[], appOptions?: AppConfig): DynamicModule;
|
|
9
11
|
static forRootAsync(asyncOptions: {
|
|
10
12
|
useFactory: (...args: any[]) => Promise<{
|