@open-rlb/ng-app 3.1.10 → 3.1.11

package/fesm2022/open-rlb-ng-app.mjs

@@ -9,7 +9,7 @@ import { provideServiceWorker } from '@angular/service-worker';
 import * as i1$8 from '@ngrx/effects';
 import { createEffect, ofType, provideEffects } from '@ngrx/effects';
 import * as i1$1 from '@ngrx/store';
-import { createActionGroup, props, emptyProps, createFeature, createReducer, on, provideStore, provideState } from '@ngrx/store';
+import { createActionGroup, props, emptyProps, Store, createFeature, createReducer, on, provideStore, provideState } from '@ngrx/store';
 import * as i2$1 from '@open-rlb/ng-bootstrap';
 import { RLB_TRANSLATION_SERVICE, RlbBootstrapModule, ModalDirective, ToastDirective, ModalRegistryOptions, ToastRegistryOptions, provideRlbBootstrap } from '@open-rlb/ng-bootstrap';
 import * as i1$5 from 'angular-auth-oidc-client';
@@ -2493,6 +2493,35 @@ const oauthGuard = (route, state) => {
     }));
 };
 
+const permissionGuard = (route) => {
+    console.log("permission guard", route);
+    const store = inject(Store);
+    const router = inject(Router);
+    // Get requirements from route data
+    const requiredResource = route.data['resource'];
+    const requiredAction = route.data['action'];
+    return store.select(state => state[aclFeatureKey]).pipe(
+    // Wait until the Initializer/Effect has actually finished loading the data
+    filter((acl) => acl.loaded), take(1), map((acl) => {
+        console.log("permission guard map", JSON.stringify(acl));
+        if (!acl.resources)
+            return router.createUrlTree(['/not-found']);
+        const hasPermission = acl.resources.some(product => product.resources.some(res => {
+            const matchName = res.resourceId === requiredResource || res.resourceName === requiredResource;
+            if (!requiredAction) {
+                return matchName;
+            }
+            return matchName && res.actions.includes(requiredAction);
+        }));
+        if (hasPermission) {
+            return true;
+        }
+        // Redirect on failure
+        console.warn(`Access denied for resource: ${requiredResource}`);
+        return router.createUrlTree(['/notFound']);
+    }));
+};
+
 const SESSION_RT = 'RT';
 const SESSION_AT = 'AT';
 const TOKEN_URL = `protocol/openid-connect/token`;
@@ -3255,5 +3284,5 @@ function flattenRoutes(routes, parentPath = '') {
  * Generated bundle index. Do not edit.
  */
 
-export { AbstractMdService, AbstractSupportService, AclActions, AppBreadcrumbService, AppContainerComponent, AppContextActions, AppContextActionsInternal, AppLoggerService, AppStorageService, AppTemplateComponent, AppsService, AsMultiPipe, AsSinglePipe, AuthActions, AuthActionsInternal, AuthFeatureService, AuthenticationService, AutolinkPipe, BaseComponent, CmsComponent, CmsPipe, ContentComponent, CookiesService, ErrorManagementService, ErrorModalComponent, KeycloakProfileService, LanguageService, LeftComponentPipe, LocalCacheService, ModalAppsComponent, NavbarActions, NavbarActionsInternal, OauthPasswordService, ParseJwtService, PwaUpdaterService, RLB_APPS, RLB_APP_NAVCOMP, RLB_CFG, RLB_CFG_ACL, RLB_CFG_AUTH, RLB_CFG_CMS, RLB_CFG_ENV, RLB_CFG_I18N, RLB_CFG_PAGES, RightComponentPipe, RlbAppModule, RlbRole, SidebarActions, SidebarActionsInternal, StrapiService, ToastComponent, TokenOauthInterceptor, TranslateBrowserLoader, TruncatePipe, UtilsService, aclFeatureKey, appContextFeatureKey, authsFeatureKey, getDefaultRoutes, initialAclState, initialAppContextState, initialAuthState, initialNavbarState, initialSidebarState, navbarsFeatureKey, oauthGuard, oauthPasswordGuard, provideApp, provideRlbCodeBrowserOAuth, provideRlbConfig, provideRlbI18n, sidebarsFeatureKey, translateBrowserLoaderFactory, verifyDeactivate };
+export { AbstractMdService, AbstractSupportService, AclActions, AppBreadcrumbService, AppContainerComponent, AppContextActions, AppContextActionsInternal, AppLoggerService, AppStorageService, AppTemplateComponent, AppsService, AsMultiPipe, AsSinglePipe, AuthActions, AuthActionsInternal, AuthFeatureService, AuthenticationService, AutolinkPipe, BaseComponent, CmsComponent, CmsPipe, ContentComponent, CookiesService, ErrorManagementService, ErrorModalComponent, KeycloakProfileService, LanguageService, LeftComponentPipe, LocalCacheService, ModalAppsComponent, NavbarActions, NavbarActionsInternal, OauthPasswordService, ParseJwtService, PwaUpdaterService, RLB_APPS, RLB_APP_NAVCOMP, RLB_CFG, RLB_CFG_ACL, RLB_CFG_AUTH, RLB_CFG_CMS, RLB_CFG_ENV, RLB_CFG_I18N, RLB_CFG_PAGES, RightComponentPipe, RlbAppModule, RlbRole, SidebarActions, SidebarActionsInternal, StrapiService, ToastComponent, TokenOauthInterceptor, TranslateBrowserLoader, TruncatePipe, UtilsService, aclFeatureKey, appContextFeatureKey, authsFeatureKey, getDefaultRoutes, initialAclState, initialAppContextState, initialAuthState, initialNavbarState, initialSidebarState, navbarsFeatureKey, oauthGuard, oauthPasswordGuard, permissionGuard, provideApp, provideRlbCodeBrowserOAuth, provideRlbConfig, provideRlbI18n, sidebarsFeatureKey, translateBrowserLoaderFactory, verifyDeactivate };
 //# sourceMappingURL=open-rlb-ng-app.mjs.map