@pax2pay/model-banking 0.1.519 → 0.1.520
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/Client/Me.ts +15 -0
- package/Client/index.ts +3 -0
- package/Identity.ts +2 -2
- package/Key/Permissions.ts +56 -43
- package/Key/index.ts +4 -1
- package/User/Identity.ts +2 -3
- package/dist/cjs/Client/Me.d.ts +9 -0
- package/dist/cjs/Client/Me.js +17 -0
- package/dist/cjs/Client/Me.js.map +1 -0
- package/dist/cjs/Client/index.d.ts +2 -0
- package/dist/cjs/Client/index.js +3 -0
- package/dist/cjs/Client/index.js.map +1 -1
- package/dist/cjs/Identity.d.ts +1 -1
- package/dist/cjs/Identity.js +2 -2
- package/dist/cjs/Identity.js.map +1 -1
- package/dist/cjs/Key/Permissions.d.ts +1 -1
- package/dist/cjs/Key/Permissions.js +55 -42
- package/dist/cjs/Key/Permissions.js.map +1 -1
- package/dist/cjs/Key/index.js +4 -1
- package/dist/cjs/Key/index.js.map +1 -1
- package/dist/cjs/User/Identity.d.ts +2 -1
- package/dist/cjs/User/Identity.js +4 -2
- package/dist/cjs/User/Identity.js.map +1 -1
- package/dist/mjs/Client/Me.d.ts +9 -0
- package/dist/mjs/Client/Me.js +13 -0
- package/dist/mjs/Client/Me.js.map +1 -0
- package/dist/mjs/Client/index.d.ts +2 -0
- package/dist/mjs/Client/index.js +3 -0
- package/dist/mjs/Client/index.js.map +1 -1
- package/dist/mjs/Identity.d.ts +1 -1
- package/dist/mjs/Identity.js +2 -2
- package/dist/mjs/Identity.js.map +1 -1
- package/dist/mjs/Key/Permissions.d.ts +1 -1
- package/dist/mjs/Key/Permissions.js +55 -42
- package/dist/mjs/Key/Permissions.js.map +1 -1
- package/dist/mjs/Key/index.js +4 -1
- package/dist/mjs/Key/index.js.map +1 -1
- package/dist/mjs/User/Identity.d.ts +2 -1
- package/dist/mjs/User/Identity.js +4 -2
- package/dist/mjs/User/Identity.js.map +1 -1
- package/package.json +1 -1
package/Client/Me.ts
ADDED
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
import { gracely } from "gracely"
|
|
2
|
+
import { authly } from "authly"
|
|
3
|
+
import { http } from "cloudly-http"
|
|
4
|
+
import { Realm } from "../Realm"
|
|
5
|
+
import { User } from "../User"
|
|
6
|
+
|
|
7
|
+
export class Me {
|
|
8
|
+
constructor(private readonly client: http.Client) {}
|
|
9
|
+
|
|
10
|
+
async login(email: string, password: string, realm: Realm): Promise<User | gracely.Error> {
|
|
11
|
+
return await this.client.get<User>(`/me/${realm}`, {
|
|
12
|
+
authorization: `Basic ${authly.Base64.encode(email + ":" + password, "standard", "=")}`,
|
|
13
|
+
})
|
|
14
|
+
}
|
|
15
|
+
}
|
package/Client/index.ts
CHANGED
|
@@ -7,6 +7,7 @@ import { Cards } from "./Cards"
|
|
|
7
7
|
import { Exchanges } from "./Exchanges"
|
|
8
8
|
import { Labels } from "./Labels"
|
|
9
9
|
import { Logs } from "./Logs"
|
|
10
|
+
import { Me } from "./Me"
|
|
10
11
|
import { Operations } from "./Operations"
|
|
11
12
|
import { Organizations } from "./Organizations"
|
|
12
13
|
import { Processor } from "./Processor"
|
|
@@ -28,6 +29,7 @@ export class Client {
|
|
|
28
29
|
readonly flags: Labels
|
|
29
30
|
readonly groups: Labels
|
|
30
31
|
readonly logs: Logs
|
|
32
|
+
readonly me: Me
|
|
31
33
|
readonly operations: Operations
|
|
32
34
|
readonly organizations: Organizations
|
|
33
35
|
readonly processors: Processor
|
|
@@ -59,6 +61,7 @@ export class Client {
|
|
|
59
61
|
this.flags = new Labels(this.client, "flag")
|
|
60
62
|
this.groups = new Labels(this.client, "group")
|
|
61
63
|
this.logs = new Logs(this.client)
|
|
64
|
+
this.me = new Me(this.client)
|
|
62
65
|
this.operations = new Operations(this.client)
|
|
63
66
|
this.organizations = new Organizations(this.client)
|
|
64
67
|
this.processors = new Processor(this.client)
|
package/Identity.ts
CHANGED
|
@@ -67,7 +67,7 @@ export class Identity<T extends Identity.Require = never> {
|
|
|
67
67
|
const realms = Identity.getRealms(verified.permissions)
|
|
68
68
|
const identity = new Identity(
|
|
69
69
|
verified,
|
|
70
|
-
(realms?.length == 1 ? realms[0] : header.realm) as Realm,
|
|
70
|
+
((realms?.length == 1 ? realms[0] : header.realm) ?? verified.realm) as Realm,
|
|
71
71
|
(verified.organization ?? header.organization) as string
|
|
72
72
|
)
|
|
73
73
|
const requirement = (
|
|
@@ -97,7 +97,7 @@ export class Identity<T extends Identity.Require = never> {
|
|
|
97
97
|
}
|
|
98
98
|
return result
|
|
99
99
|
}
|
|
100
|
-
static async verify(authorization: string | undefined, key: string): Promise<Key | undefined> {
|
|
100
|
+
static async verify(authorization: string | undefined, key: string = publicKey): Promise<Key | undefined> {
|
|
101
101
|
const verifier = userwidgets.User.Key.Verifier.create<Key>(key)
|
|
102
102
|
const jwt = User.JWT.open({ public: key })
|
|
103
103
|
const unpacked = authorization ? await jwt.unpack(authorization) : undefined
|
package/Key/Permissions.ts
CHANGED
|
@@ -46,49 +46,62 @@ export namespace Permissions {
|
|
|
46
46
|
| true
|
|
47
47
|
cards?: { create?: true; view?: true; change?: true; cancel?: true } | true
|
|
48
48
|
}
|
|
49
|
-
export function from(permission: User.Access.Permission): Permissions {
|
|
50
|
-
|
|
51
|
-
if (permission["*"])
|
|
52
|
-
result
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
49
|
+
export function from(permission: User.Access.Permission): Permissions | true {
|
|
50
|
+
let result: Permissions | true = {}
|
|
51
|
+
if (User.Access.Permission.Level.get(permission["*"]) >= 2)
|
|
52
|
+
result = true
|
|
53
|
+
else {
|
|
54
|
+
if (permission["*"])
|
|
55
|
+
result = {
|
|
56
|
+
accounts: { view: true },
|
|
57
|
+
cards: { view: true },
|
|
58
|
+
logs: { view: true },
|
|
59
|
+
operations: { view: true },
|
|
60
|
+
organizations: { view: true },
|
|
61
|
+
rules: { view: true },
|
|
62
|
+
settlements: { view: true },
|
|
63
|
+
transactions: { view: true },
|
|
64
|
+
treasury: { view: true },
|
|
65
|
+
org: { view: true },
|
|
66
|
+
user: User.Access.Permission.Level.get(permission["user"]) >= 2 || { view: true },
|
|
67
|
+
app: { view: true },
|
|
68
|
+
}
|
|
69
|
+
if (permission["account"])
|
|
70
|
+
result.accounts = User.Access.Permission.Level.get(permission["account"]) >= 2 || {
|
|
71
|
+
view: true,
|
|
72
|
+
}
|
|
73
|
+
if (permission["card"])
|
|
74
|
+
result.cards = User.Access.Permission.Level.get(permission["card"]) >= 2 || {
|
|
75
|
+
view: true,
|
|
76
|
+
}
|
|
77
|
+
if (permission["log"])
|
|
78
|
+
result.logs = User.Access.Permission.Level.get(permission["log"]) >= 2 || {
|
|
79
|
+
view: true,
|
|
80
|
+
}
|
|
81
|
+
if (permission["operation"])
|
|
82
|
+
result.operations = User.Access.Permission.Level.get(permission["operation"]) >= 2 || {
|
|
83
|
+
view: true,
|
|
84
|
+
}
|
|
85
|
+
if (permission["organization"])
|
|
86
|
+
result.organizations = User.Access.Permission.Level.get(permission["organization"]) >= 2 || {
|
|
87
|
+
view: true,
|
|
88
|
+
rules: { view: true, customer: { view: true }, product: { view: true }, fincrime: { view: true } },
|
|
89
|
+
accounts: { view: true },
|
|
90
|
+
}
|
|
91
|
+
if (permission["rule"])
|
|
92
|
+
result.rules = User.Access.Permission.Level.get(permission["rule"]) >= 2 || {
|
|
93
|
+
view: true,
|
|
94
|
+
customer: { view: true },
|
|
95
|
+
product: { view: true },
|
|
96
|
+
fincrime: { view: true },
|
|
97
|
+
}
|
|
98
|
+
if (permission["settlement"])
|
|
99
|
+
result.settlements = User.Access.Permission.Level.get(permission["settlement"]) >= 2 || { view: true }
|
|
100
|
+
if (permission["transaction"])
|
|
101
|
+
result.transactions = User.Access.Permission.Level.get(permission["transaction"]) >= 2 || { view: true }
|
|
102
|
+
if (permission["treasury"])
|
|
103
|
+
result.treasury = User.Access.Permission.Level.get(permission["treasury"]) >= 2 || { view: true }
|
|
104
|
+
}
|
|
92
105
|
return result
|
|
93
106
|
}
|
|
94
107
|
}
|
package/Key/index.ts
CHANGED
|
@@ -26,7 +26,10 @@ export namespace Key {
|
|
|
26
26
|
audience: payload.aud,
|
|
27
27
|
email: payload.sub,
|
|
28
28
|
realm: payload.realm,
|
|
29
|
-
permissions: {
|
|
29
|
+
permissions: {
|
|
30
|
+
[payload.realm + "-*"]: Permissions.from(payload.permission),
|
|
31
|
+
...(payload.permission.user ? { ["*"]: true } : {}),
|
|
32
|
+
},
|
|
30
33
|
expires: payload.exp ? isoly.DateTime.create(payload.exp) : isoly.DateTime.nextYear(isoly.DateTime.now(), 10),
|
|
31
34
|
issued: isoly.DateTime.create(payload.iat),
|
|
32
35
|
issuer: payload.iss,
|
package/User/Identity.ts
CHANGED
|
@@ -1,5 +1,4 @@
|
|
|
1
1
|
import { gracely } from "gracely"
|
|
2
|
-
import { http } from "cloudly-http"
|
|
3
2
|
import { Realm } from "../Realm"
|
|
4
3
|
import { Access } from "./Access"
|
|
5
4
|
import { JWT } from "./JWT"
|
|
@@ -8,7 +7,7 @@ export class Identity {
|
|
|
8
7
|
get realm(): Realm {
|
|
9
8
|
return this.payload.realm
|
|
10
9
|
}
|
|
11
|
-
constructor(public readonly payload: JWT.Payload) {}
|
|
10
|
+
constructor(public readonly payload: JWT.Payload, public readonly jwt: string) {}
|
|
12
11
|
|
|
13
12
|
authenticate(constraint: Access.Permission | Access.Permission[]): Identity | gracely.Error {
|
|
14
13
|
let allowed: boolean
|
|
@@ -26,7 +25,7 @@ export class Identity {
|
|
|
26
25
|
): Promise<Identity | gracely.Error> {
|
|
27
26
|
const jwt = authorization?.startsWith("Bearer ") ? authorization.replace("Bearer ", "") : undefined
|
|
28
27
|
const payload = jwt ? await JWT.open({ public: options.key }, options.whitelist).verify(jwt) : undefined
|
|
29
|
-
return jwt && payload ? new Identity(payload) : gracely.client.unauthorized()
|
|
28
|
+
return jwt && payload ? new Identity(payload, jwt) : gracely.client.unauthorized()
|
|
30
29
|
}
|
|
31
30
|
}
|
|
32
31
|
export namespace Identity {}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import { gracely } from "gracely";
|
|
2
|
+
import { http } from "cloudly-http";
|
|
3
|
+
import { Realm } from "../Realm";
|
|
4
|
+
import { User } from "../User";
|
|
5
|
+
export declare class Me {
|
|
6
|
+
private readonly client;
|
|
7
|
+
constructor(client: http.Client);
|
|
8
|
+
login(email: string, password: string, realm: Realm): Promise<User | gracely.Error>;
|
|
9
|
+
}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.Me = void 0;
|
|
4
|
+
const authly_1 = require("authly");
|
|
5
|
+
class Me {
|
|
6
|
+
client;
|
|
7
|
+
constructor(client) {
|
|
8
|
+
this.client = client;
|
|
9
|
+
}
|
|
10
|
+
async login(email, password, realm) {
|
|
11
|
+
return await this.client.get(`/me/${realm}`, {
|
|
12
|
+
authorization: `Basic ${authly_1.authly.Base64.encode(email + ":" + password, "standard", "=")}`,
|
|
13
|
+
});
|
|
14
|
+
}
|
|
15
|
+
}
|
|
16
|
+
exports.Me = Me;
|
|
17
|
+
//# sourceMappingURL=Me.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"Me.js","sourceRoot":"","sources":["../../../Client/Me.ts"],"names":[],"mappings":";;;AACA,mCAA+B;AAK/B,MAAa,EAAE;IACe;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,QAAgB,EAAE,KAAY;QACxD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAO,OAAO,KAAK,EAAE,EAAE;YAClD,aAAa,EAAE,SAAS,eAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,GAAG,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE;SACvF,CAAC,CAAA;IACH,CAAC;CACD;AARD,gBAQC"}
|
|
@@ -6,6 +6,7 @@ import { Cards } from "./Cards";
|
|
|
6
6
|
import { Exchanges } from "./Exchanges";
|
|
7
7
|
import { Labels } from "./Labels";
|
|
8
8
|
import { Logs } from "./Logs";
|
|
9
|
+
import { Me } from "./Me";
|
|
9
10
|
import { Operations } from "./Operations";
|
|
10
11
|
import { Organizations } from "./Organizations";
|
|
11
12
|
import { Processor } from "./Processor";
|
|
@@ -27,6 +28,7 @@ export declare class Client {
|
|
|
27
28
|
readonly flags: Labels;
|
|
28
29
|
readonly groups: Labels;
|
|
29
30
|
readonly logs: Logs;
|
|
31
|
+
readonly me: Me;
|
|
30
32
|
readonly operations: Operations;
|
|
31
33
|
readonly organizations: Organizations;
|
|
32
34
|
readonly processors: Processor;
|
package/dist/cjs/Client/index.js
CHANGED
|
@@ -9,6 +9,7 @@ const Cards_1 = require("./Cards");
|
|
|
9
9
|
const Exchanges_1 = require("./Exchanges");
|
|
10
10
|
const Labels_1 = require("./Labels");
|
|
11
11
|
const Logs_1 = require("./Logs");
|
|
12
|
+
const Me_1 = require("./Me");
|
|
12
13
|
const Operations_1 = require("./Operations");
|
|
13
14
|
const Organizations_1 = require("./Organizations");
|
|
14
15
|
const Processor_1 = require("./Processor");
|
|
@@ -30,6 +31,7 @@ class Client {
|
|
|
30
31
|
flags;
|
|
31
32
|
groups;
|
|
32
33
|
logs;
|
|
34
|
+
me;
|
|
33
35
|
operations;
|
|
34
36
|
organizations;
|
|
35
37
|
processors;
|
|
@@ -62,6 +64,7 @@ class Client {
|
|
|
62
64
|
this.flags = new Labels_1.Labels(this.client, "flag");
|
|
63
65
|
this.groups = new Labels_1.Labels(this.client, "group");
|
|
64
66
|
this.logs = new Logs_1.Logs(this.client);
|
|
67
|
+
this.me = new Me_1.Me(this.client);
|
|
65
68
|
this.operations = new Operations_1.Operations(this.client);
|
|
66
69
|
this.organizations = new Organizations_1.Organizations(this.client);
|
|
67
70
|
this.processors = new Processor_1.Processor(this.client);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Client/index.ts"],"names":[],"mappings":";;;AACA,8CAAgD;AAChD,+CAAmC;AACnC,yCAAqC;AACrC,mCAA+B;AAC/B,mCAA+B;AAC/B,2CAAuC;AACvC,qCAAiC;AACjC,iCAA6B;AAC7B,6CAAyC;AACzC,mDAA+C;AAC/C,2CAAuC;AACvC,uCAAmC;AACnC,mCAA+B;AAC/B,+CAA2C;AAC3C,iDAAmE;AACnE,yCAAqC;AACrC,mCAA+B;AAC/B,uCAAmC;AAEnC,MAAa,MAAM;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Client/index.ts"],"names":[],"mappings":";;;AACA,8CAAgD;AAChD,+CAAmC;AACnC,yCAAqC;AACrC,mCAA+B;AAC/B,mCAA+B;AAC/B,2CAAuC;AACvC,qCAAiC;AACjC,iCAA6B;AAC7B,6BAAyB;AACzB,6CAAyC;AACzC,mDAA+C;AAC/C,2CAAuC;AACvC,uCAAmC;AACnC,mCAA+B;AAC/B,+CAA2C;AAC3C,iDAAmE;AACnE,yCAAqC;AACrC,mCAA+B;AAC/B,uCAAmC;AAEnC,MAAa,MAAM;IAiCmB;IAhCrC,KAAK,CAAS;IACd,YAAY,CAAS;IACZ,QAAQ,CAAU;IAClB,MAAM,CAAO;IACb,KAAK,CAAO;IACZ,SAAS,CAAW;IACpB,KAAK,CAAQ;IACb,MAAM,CAAQ;IACd,IAAI,CAAM;IACV,EAAE,CAAI;IACN,UAAU,CAAY;IACtB,aAAa,CAAe;IAC5B,UAAU,CAAW;IACrB,OAAO,CAAS;IAChB,KAAK,CAAO;IACZ,WAAW,CAAa;IACxB,YAAY,CAAoB;IAChC,QAAQ,CAAU;IAClB,KAAK,CAAO;IACZ,OAAO,CAAS;IACzB,IAAI,GAAG,CAAC,KAAyB;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAA;IACxB,CAAC;IACD,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;IACvB,CAAC;IACD,IAAI,OAAO,CAAC,KAAyF;QACpG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAA;IAC5B,CAAC;IACD,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA;IAC3B,CAAC;IACD,YAAqC,MAAkC;QAAlC,WAAM,GAAN,MAAM,CAA4B;QACtE,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9G,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,aAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,aAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,eAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,WAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjC,IAAI,CAAC,EAAE,GAAG,IAAI,OAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,uBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,6BAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnD,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,aAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,CAAC,YAAY,GAAG,IAAI,2BAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvD,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,aAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC;IACQ,WAAW,GAAG,CAAC,MAAc,EAAE,WAAmB,EAAE,EAAE,CAC9D,IAAI,mBAAW,CAAC,gBAAgB,CAAC,IAAI,mBAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3E,cAAc,CAAuC;IAErD,MAAM,CAAC,MAAM,CAAC,MAAc,EAAE,GAAY;QACzC,MAAM,UAAU,GAA+B,IAAI,mBAAI,CAAC,MAAM,CAAgB,MAAM,EAAE,GAAG,EAAE;YAC1F,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACzB,GAAG,OAAO,CAAC,MAAM;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;oBACrD,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE;oBACtE,CAAC,CAAC,EAAE,CAAC;aACN,CAAC;YACF,WAAW,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;gBAC7B,IAAI,MAAM,GAAG,QAAQ,CAAA;gBACrB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAA;gBAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBACtB,MAAM,GAAG,mBAAI,CAAC,QAAQ,CAAC,MAAM,CAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE;wBACrC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;qBACtE,CAAC,CACF,CAAA;gBACF,OAAO,MAAM,CAAA;YACd,CAAC;SACD,CAAC,CAAA;QACF,MAAM,MAAM,GAAW,IAAI,MAAM,CAAC,UAAU,CAAC,CAAA;QAC7C,OAAO,MAAM,CAAA;IACd,CAAC;CACD;AAlFD,wBAkFC;AACD,WAAiB,MAAM;IACR,mBAAY,GAAG,2BAAkB,CAAA;AAChD,CAAC,EAFgB,MAAM,sBAAN,MAAM,QAEtB"}
|
package/dist/cjs/Identity.d.ts
CHANGED
|
@@ -17,7 +17,7 @@ export declare class Identity<T extends Identity.Require = never> {
|
|
|
17
17
|
realm?: Realm;
|
|
18
18
|
organization?: string;
|
|
19
19
|
}, constraint: Key.Permissions | Key.Permissions[], requires?: T, key?: string, output?: "error", notify?: Identity.Notify): Promise<Identity<T> | gracely.Error>;
|
|
20
|
-
static verify(authorization: string | undefined, key
|
|
20
|
+
static verify(authorization: string | undefined, key?: string): Promise<Key | undefined>;
|
|
21
21
|
static getRealms(permissions: Key.Permissions): Realm[];
|
|
22
22
|
}
|
|
23
23
|
export declare namespace Identity {
|
package/dist/cjs/Identity.js
CHANGED
|
@@ -42,7 +42,7 @@ class Identity {
|
|
|
42
42
|
output !== "undefined" && (result = gracely_1.gracely.client.unauthorized());
|
|
43
43
|
else {
|
|
44
44
|
const realms = Identity.getRealms(verified.permissions);
|
|
45
|
-
const identity = new Identity(verified, (realms?.length == 1 ? realms[0] : header.realm), (verified.organization ?? header.organization));
|
|
45
|
+
const identity = new Identity(verified, ((realms?.length == 1 ? realms[0] : header.realm) ?? verified.realm), (verified.organization ?? header.organization));
|
|
46
46
|
const requirement = (value) => (requires?.organization ? !!identity?.organization : true) &&
|
|
47
47
|
(requires?.realm ? Realm_1.Realm.type.is(identity?.realm) : true);
|
|
48
48
|
if (identity?.check(constraint) && requirement(identity))
|
|
@@ -57,7 +57,7 @@ class Identity {
|
|
|
57
57
|
}
|
|
58
58
|
return result;
|
|
59
59
|
}
|
|
60
|
-
static async verify(authorization, key) {
|
|
60
|
+
static async verify(authorization, key = publicKey) {
|
|
61
61
|
const verifier = model_1.userwidgets.User.Key.Verifier.create(key);
|
|
62
62
|
const jwt = User_1.User.JWT.open({ public: key });
|
|
63
63
|
const unpacked = authorization ? await jwt.unpack(authorization) : undefined;
|
package/dist/cjs/Identity.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../Identity.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;AACjC,8CAAgD;AAEhD,+BAA2B;AAC3B,mCAA+B;AAC/B,iCAA6B;AAE7B,MAAa,QAAQ;IAOV;IACA;IACA;IARV,OAAO,CAAqB;IAC5B,IAAI,MAAM;QACT,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,YACU,GAAQ,EACR,KAA0D,EAC1D,YAA0E;QAF1E,QAAG,GAAH,GAAG,CAAK;QACR,UAAK,GAAL,KAAK,CAAqD;QAC1D,iBAAY,GAAZ,YAAY,CAA8D;IACjF,CAAC;IACJ,KAAK,CAAC,UAA+C,EAAE,KAAa,EAAE,YAAqB;QAC1F,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC1D,CAAC,CAAC;gBACA,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBAC/E,EAAE,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBACxD,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,UAAU,EAAE;gBAC5C,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE;aACtB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,eAAe,CAAC,UAAkB;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAC9C,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CACzE,CAAA;IACF,CAAC;IAkBD,MAAM,CAAC,KAAK,CAAC,YAAY,CACxB,MAAoF,EACpF,UAA+C,EAC/C,QAAY,EACZ,MAAc,SAAS,EACvB,SAAgC,WAAW,EAC3C,MAAwB;QAExB,IAAI,MAA+C,CAAA;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;QAC1D,IAAI,CAAC,QAAQ;YACZ,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,GAAG,iBAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;aAC9D,CAAC;YACL,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC5B,QAAQ,EACR,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAU,
|
|
1
|
+
{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../Identity.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;AACjC,8CAAgD;AAEhD,+BAA2B;AAC3B,mCAA+B;AAC/B,iCAA6B;AAE7B,MAAa,QAAQ;IAOV;IACA;IACA;IARV,OAAO,CAAqB;IAC5B,IAAI,MAAM;QACT,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,YACU,GAAQ,EACR,KAA0D,EAC1D,YAA0E;QAF1E,QAAG,GAAH,GAAG,CAAK;QACR,UAAK,GAAL,KAAK,CAAqD;QAC1D,iBAAY,GAAZ,YAAY,CAA8D;IACjF,CAAC;IACJ,KAAK,CAAC,UAA+C,EAAE,KAAa,EAAE,YAAqB;QAC1F,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC1D,CAAC,CAAC;gBACA,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBAC/E,EAAE,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBACxD,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,UAAU,EAAE;gBAC5C,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE;aACtB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,eAAe,CAAC,UAAkB;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAC9C,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CACzE,CAAA;IACF,CAAC;IAkBD,MAAM,CAAC,KAAK,CAAC,YAAY,CACxB,MAAoF,EACpF,UAA+C,EAC/C,QAAY,EACZ,MAAc,SAAS,EACvB,SAAgC,WAAW,EAC3C,MAAwB;QAExB,IAAI,MAA+C,CAAA;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;QAC1D,IAAI,CAAC,QAAQ;YACZ,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,GAAG,iBAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;aAC9D,CAAC;YACL,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC5B,QAAQ,EACR,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAU,EAC7E,CAAC,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAW,CACxD,CAAA;YACD,MAAM,WAAW,GAAG,CACnB,KAA2B,EAGf,EAAE,CACd,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1D,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,aAAK,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC1D,IAAI,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC;gBACvD,MAAM,GAAG,QAAQ,CAAA;iBACb,IAAI,MAAM,KAAK,WAAW;gBAC9B,MAAM,GAAG,SAAS,CAAA;iBACd,CAAC;gBACL,MAAM,MAAM,EAAE,KAAK,CAAC,IAAI,CACvB,eAAe,EACf,kCAAkC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAA;gBACD,OAAO,CAAC,GAAG,CACV,QAAQ,CAAC,GAAG,CAAC,KAAK,EAClB,gCAAgC,EAChC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAC5B,MAAM,EAAE,QAAQ,CAChB,CAAA;gBACD,MAAM,GAAG,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;YACpC,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAiC,EAAE,MAAc,SAAS;QAC7E,MAAM,QAAQ,GAAG,mBAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAM,GAAG,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,WAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5E,IAAI,QAAyB,CAAA;QAC7B,IAAI,WAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YAC/C,QAAQ,GAAG,OAAO,IAAI,SAAG,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QACvD,CAAC;;YACA,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAChD,OAAO,QAAQ,CAAA;IAChB,CAAC;IACD,MAAM,CAAC,SAAS,CAAC,WAA4B;QAC5C,OAAO;YACN,GAAG,IAAI,GAAG,CACT,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CACnF,CACD;SACD,CAAA;IACF,CAAC;CACD;AAjHD,4BAiHC;AAkBD,MAAM,SAAS,GACd,kuBAAkuB,CAAA"}
|
|
@@ -10,48 +10,61 @@ var Permissions;
|
|
|
10
10
|
}
|
|
11
11
|
Permissions.stringify = stringify;
|
|
12
12
|
function from(permission) {
|
|
13
|
-
|
|
14
|
-
if (permission["*"])
|
|
15
|
-
result
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
13
|
+
let result = {};
|
|
14
|
+
if (User_1.User.Access.Permission.Level.get(permission["*"]) >= 2)
|
|
15
|
+
result = true;
|
|
16
|
+
else {
|
|
17
|
+
if (permission["*"])
|
|
18
|
+
result = {
|
|
19
|
+
accounts: { view: true },
|
|
20
|
+
cards: { view: true },
|
|
21
|
+
logs: { view: true },
|
|
22
|
+
operations: { view: true },
|
|
23
|
+
organizations: { view: true },
|
|
24
|
+
rules: { view: true },
|
|
25
|
+
settlements: { view: true },
|
|
26
|
+
transactions: { view: true },
|
|
27
|
+
treasury: { view: true },
|
|
28
|
+
org: { view: true },
|
|
29
|
+
user: User_1.User.Access.Permission.Level.get(permission["user"]) >= 2 || { view: true },
|
|
30
|
+
app: { view: true },
|
|
31
|
+
};
|
|
32
|
+
if (permission["account"])
|
|
33
|
+
result.accounts = User_1.User.Access.Permission.Level.get(permission["account"]) >= 2 || {
|
|
34
|
+
view: true,
|
|
35
|
+
};
|
|
36
|
+
if (permission["card"])
|
|
37
|
+
result.cards = User_1.User.Access.Permission.Level.get(permission["card"]) >= 2 || {
|
|
38
|
+
view: true,
|
|
39
|
+
};
|
|
40
|
+
if (permission["log"])
|
|
41
|
+
result.logs = User_1.User.Access.Permission.Level.get(permission["log"]) >= 2 || {
|
|
42
|
+
view: true,
|
|
43
|
+
};
|
|
44
|
+
if (permission["operation"])
|
|
45
|
+
result.operations = User_1.User.Access.Permission.Level.get(permission["operation"]) >= 2 || {
|
|
46
|
+
view: true,
|
|
47
|
+
};
|
|
48
|
+
if (permission["organization"])
|
|
49
|
+
result.organizations = User_1.User.Access.Permission.Level.get(permission["organization"]) >= 2 || {
|
|
50
|
+
view: true,
|
|
51
|
+
rules: { view: true, customer: { view: true }, product: { view: true }, fincrime: { view: true } },
|
|
52
|
+
accounts: { view: true },
|
|
53
|
+
};
|
|
54
|
+
if (permission["rule"])
|
|
55
|
+
result.rules = User_1.User.Access.Permission.Level.get(permission["rule"]) >= 2 || {
|
|
56
|
+
view: true,
|
|
57
|
+
customer: { view: true },
|
|
58
|
+
product: { view: true },
|
|
59
|
+
fincrime: { view: true },
|
|
60
|
+
};
|
|
61
|
+
if (permission["settlement"])
|
|
62
|
+
result.settlements = User_1.User.Access.Permission.Level.get(permission["settlement"]) >= 2 || { view: true };
|
|
63
|
+
if (permission["transaction"])
|
|
64
|
+
result.transactions = User_1.User.Access.Permission.Level.get(permission["transaction"]) >= 2 || { view: true };
|
|
65
|
+
if (permission["treasury"])
|
|
66
|
+
result.treasury = User_1.User.Access.Permission.Level.get(permission["treasury"]) >= 2 || { view: true };
|
|
67
|
+
}
|
|
55
68
|
return result;
|
|
56
69
|
}
|
|
57
70
|
Permissions.from = from;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Permissions.js","sourceRoot":"","sources":["../../../Key/Permissions.ts"],"names":[],"mappings":";;;AAAA,8CAAgD;AAChD,kCAA8B;AAG9B,IAAiB,WAAW,
|
|
1
|
+
{"version":3,"file":"Permissions.js","sourceRoot":"","sources":["../../../Key/Permissions.ts"],"names":[],"mappings":";;;AAAA,8CAAgD;AAChD,kCAA8B;AAG9B,IAAiB,WAAW,CAsG3B;AAtGD,WAAiB,WAAW;IAC3B,SAAgB,SAAS,CAAC,WAAwB;QACjD,OAAO,mBAAW,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAC3D,CAAC;IAFe,qBAAS,YAExB,CAAA;IAyCD,SAAgB,IAAI,CAAC,UAAkC;QACtD,IAAI,MAAM,GAAuB,EAAE,CAAA;QACnC,IAAI,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACzD,MAAM,GAAG,IAAI,CAAA;aACT,CAAC;YACL,IAAI,UAAU,CAAC,GAAG,CAAC;gBAClB,MAAM,GAAG;oBACR,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACrB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACpB,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC1B,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACrB,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnB,IAAI,EAAE,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;oBACjF,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACnB,CAAA;YACF,IAAI,UAAU,CAAC,SAAS,CAAC;gBACxB,MAAM,CAAC,QAAQ,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI;oBACjF,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,KAAK,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3E,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,KAAK,CAAC;gBACpB,MAAM,CAAC,IAAI,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI;oBACzE,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,WAAW,CAAC;gBAC1B,MAAM,CAAC,UAAU,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI;oBACrF,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,cAAc,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3F,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;oBAClG,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACxB,CAAA;YACF,IAAI,UAAU,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,KAAK,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3E,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACxB,CAAA;YACF,IAAI,UAAU,CAAC,YAAY,CAAC;gBAC3B,MAAM,CAAC,WAAW,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACvG,IAAI,UAAU,CAAC,aAAa,CAAC;gBAC5B,MAAM,CAAC,YAAY,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACzG,IAAI,UAAU,CAAC,UAAU,CAAC;gBACzB,MAAM,CAAC,QAAQ,GAAG,WAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACnG,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IAzDe,gBAAI,OAyDnB,CAAA;AACF,CAAC,EAtGgB,WAAW,2BAAX,WAAW,QAsG3B"}
|
package/dist/cjs/Key/index.js
CHANGED
|
@@ -13,7 +13,10 @@ var Key;
|
|
|
13
13
|
audience: payload.aud,
|
|
14
14
|
email: payload.sub,
|
|
15
15
|
realm: payload.realm,
|
|
16
|
-
permissions: {
|
|
16
|
+
permissions: {
|
|
17
|
+
[payload.realm + "-*"]: Key.Permissions.from(payload.permission),
|
|
18
|
+
...(payload.permission.user ? { ["*"]: true } : {}),
|
|
19
|
+
},
|
|
17
20
|
expires: payload.exp ? isoly_1.isoly.DateTime.create(payload.exp) : isoly_1.isoly.DateTime.nextYear(isoly_1.isoly.DateTime.now(), 10),
|
|
18
21
|
issued: isoly_1.isoly.DateTime.create(payload.iat),
|
|
19
22
|
issuer: payload.iss,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Key/index.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAI7B,+CAA6D;AAC7D,mCAA2C;AAQ3C,IAAiB,GAAG,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Key/index.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAI7B,+CAA6D;AAC7D,mCAA2C;AAQ3C,IAAiB,GAAG,CA0BnB;AA1BD,WAAiB,GAAG;IACL,eAAW,GAAG,yBAAc,CAAA;IAE7B,SAAK,GAAG,aAAQ,CAAA;IAO7B,SAAgB,IAAI,CAAC,OAAyB,EAAE,KAAa;QAC5D,OAAO;YACN,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,KAAK,EAAE,OAAO,CAAC,GAAG;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE;gBACZ,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,IAAA,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC5D,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;YACD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,aAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YAC7G,MAAM,EAAE,aAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAC1C,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC7B,KAAK;SACL,CAAA;IACF,CAAC;IAfe,QAAI,OAenB,CAAA;AACF,CAAC,EA1BgB,GAAG,mBAAH,GAAG,QA0BnB"}
|
|
@@ -4,8 +4,9 @@ import { Access } from "./Access";
|
|
|
4
4
|
import { JWT } from "./JWT";
|
|
5
5
|
export declare class Identity {
|
|
6
6
|
readonly payload: JWT.Payload;
|
|
7
|
+
readonly jwt: string;
|
|
7
8
|
get realm(): Realm;
|
|
8
|
-
constructor(payload: JWT.Payload);
|
|
9
|
+
constructor(payload: JWT.Payload, jwt: string);
|
|
9
10
|
authenticate(constraint: Access.Permission | Access.Permission[]): Identity | gracely.Error;
|
|
10
11
|
static open(authorization: string | undefined, options: {
|
|
11
12
|
whitelist?: JWT.Whitelist;
|
|
@@ -6,11 +6,13 @@ const Access_1 = require("./Access");
|
|
|
6
6
|
const JWT_1 = require("./JWT");
|
|
7
7
|
class Identity {
|
|
8
8
|
payload;
|
|
9
|
+
jwt;
|
|
9
10
|
get realm() {
|
|
10
11
|
return this.payload.realm;
|
|
11
12
|
}
|
|
12
|
-
constructor(payload) {
|
|
13
|
+
constructor(payload, jwt) {
|
|
13
14
|
this.payload = payload;
|
|
15
|
+
this.jwt = jwt;
|
|
14
16
|
}
|
|
15
17
|
authenticate(constraint) {
|
|
16
18
|
let allowed;
|
|
@@ -23,7 +25,7 @@ class Identity {
|
|
|
23
25
|
static async open(authorization, options) {
|
|
24
26
|
const jwt = authorization?.startsWith("Bearer ") ? authorization.replace("Bearer ", "") : undefined;
|
|
25
27
|
const payload = jwt ? await JWT_1.JWT.open({ public: options.key }, options.whitelist).verify(jwt) : undefined;
|
|
26
|
-
return jwt && payload ? new Identity(payload) : gracely_1.gracely.client.unauthorized();
|
|
28
|
+
return jwt && payload ? new Identity(payload, jwt) : gracely_1.gracely.client.unauthorized();
|
|
27
29
|
}
|
|
28
30
|
}
|
|
29
31
|
exports.Identity = Identity;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../../User/Identity.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;
|
|
1
|
+
{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../../User/Identity.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;AAEjC,qCAAiC;AACjC,+BAA2B;AAE3B,MAAa,QAAQ;IAIQ;IAAsC;IAHlE,IAAI,KAAK;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAA;IAC1B,CAAC;IACD,YAA4B,OAAoB,EAAkB,GAAW;QAAjD,YAAO,GAAP,OAAO,CAAa;QAAkB,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAEjF,YAAY,CAAC,UAAmD;QAC/D,IAAI,OAAgB,CAAA;QACpB,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5B,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;;YAEpD,OAAO,GAAG,eAAM,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACvE,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;IACnD,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,IAAI,CAChB,aAAiC,EACjC,OAAoD;QAEpD,MAAM,GAAG,GAAG,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACnG,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,SAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACxG,OAAO,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAA;IACnF,CAAC;CACD;AAxBD,4BAwBC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import { gracely } from "gracely";
|
|
2
|
+
import { http } from "cloudly-http";
|
|
3
|
+
import { Realm } from "../Realm";
|
|
4
|
+
import { User } from "../User";
|
|
5
|
+
export declare class Me {
|
|
6
|
+
private readonly client;
|
|
7
|
+
constructor(client: http.Client);
|
|
8
|
+
login(email: string, password: string, realm: Realm): Promise<User | gracely.Error>;
|
|
9
|
+
}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import { authly } from "authly";
|
|
2
|
+
export class Me {
|
|
3
|
+
client;
|
|
4
|
+
constructor(client) {
|
|
5
|
+
this.client = client;
|
|
6
|
+
}
|
|
7
|
+
async login(email, password, realm) {
|
|
8
|
+
return await this.client.get(`/me/${realm}`, {
|
|
9
|
+
authorization: `Basic ${authly.Base64.encode(email + ":" + password, "standard", "=")}`,
|
|
10
|
+
});
|
|
11
|
+
}
|
|
12
|
+
}
|
|
13
|
+
//# sourceMappingURL=Me.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"Me.js","sourceRoot":"","sources":["../../../Client/Me.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAK/B,MAAM,OAAO,EAAE;IACe;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,QAAgB,EAAE,KAAY;QACxD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAO,OAAO,KAAK,EAAE,EAAE;YAClD,aAAa,EAAE,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,GAAG,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE;SACvF,CAAC,CAAA;IACH,CAAC;CACD"}
|
|
@@ -6,6 +6,7 @@ import { Cards } from "./Cards";
|
|
|
6
6
|
import { Exchanges } from "./Exchanges";
|
|
7
7
|
import { Labels } from "./Labels";
|
|
8
8
|
import { Logs } from "./Logs";
|
|
9
|
+
import { Me } from "./Me";
|
|
9
10
|
import { Operations } from "./Operations";
|
|
10
11
|
import { Organizations } from "./Organizations";
|
|
11
12
|
import { Processor } from "./Processor";
|
|
@@ -27,6 +28,7 @@ export declare class Client {
|
|
|
27
28
|
readonly flags: Labels;
|
|
28
29
|
readonly groups: Labels;
|
|
29
30
|
readonly logs: Logs;
|
|
31
|
+
readonly me: Me;
|
|
30
32
|
readonly operations: Operations;
|
|
31
33
|
readonly organizations: Organizations;
|
|
32
34
|
readonly processors: Processor;
|
package/dist/mjs/Client/index.js
CHANGED
|
@@ -6,6 +6,7 @@ import { Cards } from "./Cards";
|
|
|
6
6
|
import { Exchanges } from "./Exchanges";
|
|
7
7
|
import { Labels } from "./Labels";
|
|
8
8
|
import { Logs } from "./Logs";
|
|
9
|
+
import { Me } from "./Me";
|
|
9
10
|
import { Operations } from "./Operations";
|
|
10
11
|
import { Organizations } from "./Organizations";
|
|
11
12
|
import { Processor } from "./Processor";
|
|
@@ -27,6 +28,7 @@ export class Client {
|
|
|
27
28
|
flags;
|
|
28
29
|
groups;
|
|
29
30
|
logs;
|
|
31
|
+
me;
|
|
30
32
|
operations;
|
|
31
33
|
organizations;
|
|
32
34
|
processors;
|
|
@@ -59,6 +61,7 @@ export class Client {
|
|
|
59
61
|
this.flags = new Labels(this.client, "flag");
|
|
60
62
|
this.groups = new Labels(this.client, "group");
|
|
61
63
|
this.logs = new Logs(this.client);
|
|
64
|
+
this.me = new Me(this.client);
|
|
62
65
|
this.operations = new Operations(this.client);
|
|
63
66
|
this.organizations = new Organizations(this.client);
|
|
64
67
|
this.processors = new Processor(this.client);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Client/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,MAAM,OAAO,MAAM;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Client/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAA;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,MAAM,OAAO,MAAM;IAiCmB;IAhCrC,KAAK,CAAS;IACd,YAAY,CAAS;IACZ,QAAQ,CAAU;IAClB,MAAM,CAAO;IACb,KAAK,CAAO;IACZ,SAAS,CAAW;IACpB,KAAK,CAAQ;IACb,MAAM,CAAQ;IACd,IAAI,CAAM;IACV,EAAE,CAAI;IACN,UAAU,CAAY;IACtB,aAAa,CAAe;IAC5B,UAAU,CAAW;IACrB,OAAO,CAAS;IAChB,KAAK,CAAO;IACZ,WAAW,CAAa;IACxB,YAAY,CAAoB;IAChC,QAAQ,CAAU;IAClB,KAAK,CAAO;IACZ,OAAO,CAAS;IACzB,IAAI,GAAG,CAAC,KAAyB;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAA;IACxB,CAAC;IACD,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;IACvB,CAAC;IACD,IAAI,OAAO,CAAC,KAAyF;QACpG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAA;IAC5B,CAAC;IACD,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA;IAC3B,CAAC;IACD,YAAqC,MAAkC;QAAlC,WAAM,GAAN,MAAM,CAA4B;QACtE,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9G,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnD,IAAI,CAAC,UAAU,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,CAAC,YAAY,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvD,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC;IACQ,WAAW,GAAG,CAAC,MAAc,EAAE,WAAmB,EAAE,EAAE,CAC9D,IAAI,WAAW,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3E,cAAc,CAAuC;IAErD,MAAM,CAAC,MAAM,CAAC,MAAc,EAAE,GAAY;QACzC,MAAM,UAAU,GAA+B,IAAI,IAAI,CAAC,MAAM,CAAgB,MAAM,EAAE,GAAG,EAAE;YAC1F,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACzB,GAAG,OAAO,CAAC,MAAM;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;oBACrD,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE;oBACtE,CAAC,CAAC,EAAE,CAAC;aACN,CAAC;YACF,WAAW,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;gBAC7B,IAAI,MAAM,GAAG,QAAQ,CAAA;gBACrB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAA;gBAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBACtB,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE;wBACrC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;qBACtE,CAAC,CACF,CAAA;gBACF,OAAO,MAAM,CAAA;YACd,CAAC;SACD,CAAC,CAAA;QACF,MAAM,MAAM,GAAW,IAAI,MAAM,CAAC,UAAU,CAAC,CAAA;QAC7C,OAAO,MAAM,CAAA;IACd,CAAC;CACD;AACD,WAAiB,MAAM;IACR,mBAAY,GAAG,kBAAkB,CAAA;AAChD,CAAC,EAFgB,MAAM,KAAN,MAAM,QAEtB"}
|
package/dist/mjs/Identity.d.ts
CHANGED
|
@@ -17,7 +17,7 @@ export declare class Identity<T extends Identity.Require = never> {
|
|
|
17
17
|
realm?: Realm;
|
|
18
18
|
organization?: string;
|
|
19
19
|
}, constraint: Key.Permissions | Key.Permissions[], requires?: T, key?: string, output?: "error", notify?: Identity.Notify): Promise<Identity<T> | gracely.Error>;
|
|
20
|
-
static verify(authorization: string | undefined, key
|
|
20
|
+
static verify(authorization: string | undefined, key?: string): Promise<Key | undefined>;
|
|
21
21
|
static getRealms(permissions: Key.Permissions): Realm[];
|
|
22
22
|
}
|
|
23
23
|
export declare namespace Identity {
|
package/dist/mjs/Identity.js
CHANGED
|
@@ -39,7 +39,7 @@ export class Identity {
|
|
|
39
39
|
output !== "undefined" && (result = gracely.client.unauthorized());
|
|
40
40
|
else {
|
|
41
41
|
const realms = Identity.getRealms(verified.permissions);
|
|
42
|
-
const identity = new Identity(verified, (realms?.length == 1 ? realms[0] : header.realm), (verified.organization ?? header.organization));
|
|
42
|
+
const identity = new Identity(verified, ((realms?.length == 1 ? realms[0] : header.realm) ?? verified.realm), (verified.organization ?? header.organization));
|
|
43
43
|
const requirement = (value) => (requires?.organization ? !!identity?.organization : true) &&
|
|
44
44
|
(requires?.realm ? Realm.type.is(identity?.realm) : true);
|
|
45
45
|
if (identity?.check(constraint) && requirement(identity))
|
|
@@ -54,7 +54,7 @@ export class Identity {
|
|
|
54
54
|
}
|
|
55
55
|
return result;
|
|
56
56
|
}
|
|
57
|
-
static async verify(authorization, key) {
|
|
57
|
+
static async verify(authorization, key = publicKey) {
|
|
58
58
|
const verifier = userwidgets.User.Key.Verifier.create(key);
|
|
59
59
|
const jwt = User.JWT.open({ public: key });
|
|
60
60
|
const unpacked = authorization ? await jwt.unpack(authorization) : undefined;
|
package/dist/mjs/Identity.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAE7B,MAAM,OAAO,QAAQ;IAOV;IACA;IACA;IARV,OAAO,CAAqB;IAC5B,IAAI,MAAM;QACT,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,YACU,GAAQ,EACR,KAA0D,EAC1D,YAA0E;QAF1E,QAAG,GAAH,GAAG,CAAK;QACR,UAAK,GAAL,KAAK,CAAqD;QAC1D,iBAAY,GAAZ,YAAY,CAA8D;IACjF,CAAC;IACJ,KAAK,CAAC,UAA+C,EAAE,KAAa,EAAE,YAAqB;QAC1F,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC1D,CAAC,CAAC;gBACA,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBAC/E,EAAE,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBACxD,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,UAAU,EAAE;gBAC5C,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE;aACtB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,eAAe,CAAC,UAAkB;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAC9C,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CACzE,CAAA;IACF,CAAC;IAkBD,MAAM,CAAC,KAAK,CAAC,YAAY,CACxB,MAAoF,EACpF,UAA+C,EAC/C,QAAY,EACZ,MAAc,SAAS,EACvB,SAAgC,WAAW,EAC3C,MAAwB;QAExB,IAAI,MAA+C,CAAA;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;QAC1D,IAAI,CAAC,QAAQ;YACZ,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;aAC9D,CAAC;YACL,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC5B,QAAQ,EACR,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAU,
|
|
1
|
+
{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAE7B,MAAM,OAAO,QAAQ;IAOV;IACA;IACA;IARV,OAAO,CAAqB;IAC5B,IAAI,MAAM;QACT,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,YACU,GAAQ,EACR,KAA0D,EAC1D,YAA0E;QAF1E,QAAG,GAAH,GAAG,CAAK;QACR,UAAK,GAAL,KAAK,CAAqD;QAC1D,iBAAY,GAAZ,YAAY,CAA8D;IACjF,CAAC;IACJ,KAAK,CAAC,UAA+C,EAAE,KAAa,EAAE,YAAqB;QAC1F,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC1D,CAAC,CAAC;gBACA,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBAC/E,EAAE,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBACxD,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,UAAU,EAAE;gBAC5C,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE;aACtB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,eAAe,CAAC,UAAkB;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAC9C,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CACzE,CAAA;IACF,CAAC;IAkBD,MAAM,CAAC,KAAK,CAAC,YAAY,CACxB,MAAoF,EACpF,UAA+C,EAC/C,QAAY,EACZ,MAAc,SAAS,EACvB,SAAgC,WAAW,EAC3C,MAAwB;QAExB,IAAI,MAA+C,CAAA;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;QAC1D,IAAI,CAAC,QAAQ;YACZ,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;aAC9D,CAAC;YACL,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC5B,QAAQ,EACR,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAU,EAC7E,CAAC,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAW,CACxD,CAAA;YACD,MAAM,WAAW,GAAG,CACnB,KAA2B,EAGf,EAAE,CACd,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1D,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC1D,IAAI,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC;gBACvD,MAAM,GAAG,QAAQ,CAAA;iBACb,IAAI,MAAM,KAAK,WAAW;gBAC9B,MAAM,GAAG,SAAS,CAAA;iBACd,CAAC;gBACL,MAAM,MAAM,EAAE,KAAK,CAAC,IAAI,CACvB,eAAe,EACf,kCAAkC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAA;gBACD,OAAO,CAAC,GAAG,CACV,QAAQ,CAAC,GAAG,CAAC,KAAK,EAClB,gCAAgC,EAChC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAC5B,MAAM,EAAE,QAAQ,CAChB,CAAA;gBACD,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;YACpC,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAiC,EAAE,MAAc,SAAS;QAC7E,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAM,GAAG,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5E,IAAI,QAAyB,CAAA;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YAC/C,QAAQ,GAAG,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QACvD,CAAC;;YACA,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAChD,OAAO,QAAQ,CAAA;IAChB,CAAC;IACD,MAAM,CAAC,SAAS,CAAC,WAA4B;QAC5C,OAAO;YACN,GAAG,IAAI,GAAG,CACT,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CACnF,CACD;SACD,CAAA;IACF,CAAC;CACD;AAkBD,MAAM,SAAS,GACd,kuBAAkuB,CAAA"}
|
|
@@ -7,48 +7,61 @@ export var Permissions;
|
|
|
7
7
|
}
|
|
8
8
|
Permissions.stringify = stringify;
|
|
9
9
|
function from(permission) {
|
|
10
|
-
|
|
11
|
-
if (permission["*"])
|
|
12
|
-
result
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
10
|
+
let result = {};
|
|
11
|
+
if (User.Access.Permission.Level.get(permission["*"]) >= 2)
|
|
12
|
+
result = true;
|
|
13
|
+
else {
|
|
14
|
+
if (permission["*"])
|
|
15
|
+
result = {
|
|
16
|
+
accounts: { view: true },
|
|
17
|
+
cards: { view: true },
|
|
18
|
+
logs: { view: true },
|
|
19
|
+
operations: { view: true },
|
|
20
|
+
organizations: { view: true },
|
|
21
|
+
rules: { view: true },
|
|
22
|
+
settlements: { view: true },
|
|
23
|
+
transactions: { view: true },
|
|
24
|
+
treasury: { view: true },
|
|
25
|
+
org: { view: true },
|
|
26
|
+
user: User.Access.Permission.Level.get(permission["user"]) >= 2 || { view: true },
|
|
27
|
+
app: { view: true },
|
|
28
|
+
};
|
|
29
|
+
if (permission["account"])
|
|
30
|
+
result.accounts = User.Access.Permission.Level.get(permission["account"]) >= 2 || {
|
|
31
|
+
view: true,
|
|
32
|
+
};
|
|
33
|
+
if (permission["card"])
|
|
34
|
+
result.cards = User.Access.Permission.Level.get(permission["card"]) >= 2 || {
|
|
35
|
+
view: true,
|
|
36
|
+
};
|
|
37
|
+
if (permission["log"])
|
|
38
|
+
result.logs = User.Access.Permission.Level.get(permission["log"]) >= 2 || {
|
|
39
|
+
view: true,
|
|
40
|
+
};
|
|
41
|
+
if (permission["operation"])
|
|
42
|
+
result.operations = User.Access.Permission.Level.get(permission["operation"]) >= 2 || {
|
|
43
|
+
view: true,
|
|
44
|
+
};
|
|
45
|
+
if (permission["organization"])
|
|
46
|
+
result.organizations = User.Access.Permission.Level.get(permission["organization"]) >= 2 || {
|
|
47
|
+
view: true,
|
|
48
|
+
rules: { view: true, customer: { view: true }, product: { view: true }, fincrime: { view: true } },
|
|
49
|
+
accounts: { view: true },
|
|
50
|
+
};
|
|
51
|
+
if (permission["rule"])
|
|
52
|
+
result.rules = User.Access.Permission.Level.get(permission["rule"]) >= 2 || {
|
|
53
|
+
view: true,
|
|
54
|
+
customer: { view: true },
|
|
55
|
+
product: { view: true },
|
|
56
|
+
fincrime: { view: true },
|
|
57
|
+
};
|
|
58
|
+
if (permission["settlement"])
|
|
59
|
+
result.settlements = User.Access.Permission.Level.get(permission["settlement"]) >= 2 || { view: true };
|
|
60
|
+
if (permission["transaction"])
|
|
61
|
+
result.transactions = User.Access.Permission.Level.get(permission["transaction"]) >= 2 || { view: true };
|
|
62
|
+
if (permission["treasury"])
|
|
63
|
+
result.treasury = User.Access.Permission.Level.get(permission["treasury"]) >= 2 || { view: true };
|
|
64
|
+
}
|
|
52
65
|
return result;
|
|
53
66
|
}
|
|
54
67
|
Permissions.from = from;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Permissions.js","sourceRoot":"","sources":["../../../Key/Permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAG9B,MAAM,KAAW,WAAW,
|
|
1
|
+
{"version":3,"file":"Permissions.js","sourceRoot":"","sources":["../../../Key/Permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAG9B,MAAM,KAAW,WAAW,CAsG3B;AAtGD,WAAiB,WAAW;IAC3B,SAAgB,SAAS,CAAC,WAAwB;QACjD,OAAO,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAC3D,CAAC;IAFe,qBAAS,YAExB,CAAA;IAyCD,SAAgB,IAAI,CAAC,UAAkC;QACtD,IAAI,MAAM,GAAuB,EAAE,CAAA;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACzD,MAAM,GAAG,IAAI,CAAA;aACT,CAAC;YACL,IAAI,UAAU,CAAC,GAAG,CAAC;gBAClB,MAAM,GAAG;oBACR,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACrB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACpB,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC1B,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACrB,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;oBACjF,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACnB,CAAA;YACF,IAAI,UAAU,CAAC,SAAS,CAAC;gBACxB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI;oBACjF,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3E,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,KAAK,CAAC;gBACpB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI;oBACzE,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,WAAW,CAAC;gBAC1B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI;oBACrF,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,cAAc,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3F,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;oBAClG,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACxB,CAAA;YACF,IAAI,UAAU,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3E,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACxB,CAAA;YACF,IAAI,UAAU,CAAC,YAAY,CAAC;gBAC3B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACvG,IAAI,UAAU,CAAC,aAAa,CAAC;gBAC5B,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACzG,IAAI,UAAU,CAAC,UAAU,CAAC;gBACzB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACnG,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IAzDe,gBAAI,OAyDnB,CAAA;AACF,CAAC,EAtGgB,WAAW,KAAX,WAAW,QAsG3B"}
|
package/dist/mjs/Key/index.js
CHANGED
|
@@ -10,7 +10,10 @@ export var Key;
|
|
|
10
10
|
audience: payload.aud,
|
|
11
11
|
email: payload.sub,
|
|
12
12
|
realm: payload.realm,
|
|
13
|
-
permissions: {
|
|
13
|
+
permissions: {
|
|
14
|
+
[payload.realm + "-*"]: Key.Permissions.from(payload.permission),
|
|
15
|
+
...(payload.permission.user ? { ["*"]: true } : {}),
|
|
16
|
+
},
|
|
14
17
|
expires: payload.exp ? isoly.DateTime.create(payload.exp) : isoly.DateTime.nextYear(isoly.DateTime.now(), 10),
|
|
15
18
|
issued: isoly.DateTime.create(payload.iat),
|
|
16
19
|
issuer: payload.iss,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Key/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAI7B,OAAO,EAAE,WAAW,IAAI,cAAc,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,SAAS,CAAA;AAQ3C,MAAM,KAAW,GAAG,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Key/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAI7B,OAAO,EAAE,WAAW,IAAI,cAAc,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,SAAS,CAAA;AAQ3C,MAAM,KAAW,GAAG,CA0BnB;AA1BD,WAAiB,GAAG;IACL,eAAW,GAAG,cAAc,CAAA;IAE7B,SAAK,GAAG,QAAQ,CAAA;IAO7B,SAAgB,IAAI,CAAC,OAAyB,EAAE,KAAa;QAC5D,OAAO;YACN,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,KAAK,EAAE,OAAO,CAAC,GAAG;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE;gBACZ,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,IAAA,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC5D,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;YACD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YAC7G,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAC1C,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC7B,KAAK;SACL,CAAA;IACF,CAAC;IAfe,QAAI,OAenB,CAAA;AACF,CAAC,EA1BgB,GAAG,KAAH,GAAG,QA0BnB"}
|
|
@@ -4,8 +4,9 @@ import { Access } from "./Access";
|
|
|
4
4
|
import { JWT } from "./JWT";
|
|
5
5
|
export declare class Identity {
|
|
6
6
|
readonly payload: JWT.Payload;
|
|
7
|
+
readonly jwt: string;
|
|
7
8
|
get realm(): Realm;
|
|
8
|
-
constructor(payload: JWT.Payload);
|
|
9
|
+
constructor(payload: JWT.Payload, jwt: string);
|
|
9
10
|
authenticate(constraint: Access.Permission | Access.Permission[]): Identity | gracely.Error;
|
|
10
11
|
static open(authorization: string | undefined, options: {
|
|
11
12
|
whitelist?: JWT.Whitelist;
|
|
@@ -3,11 +3,13 @@ import { Access } from "./Access";
|
|
|
3
3
|
import { JWT } from "./JWT";
|
|
4
4
|
export class Identity {
|
|
5
5
|
payload;
|
|
6
|
+
jwt;
|
|
6
7
|
get realm() {
|
|
7
8
|
return this.payload.realm;
|
|
8
9
|
}
|
|
9
|
-
constructor(payload) {
|
|
10
|
+
constructor(payload, jwt) {
|
|
10
11
|
this.payload = payload;
|
|
12
|
+
this.jwt = jwt;
|
|
11
13
|
}
|
|
12
14
|
authenticate(constraint) {
|
|
13
15
|
let allowed;
|
|
@@ -20,7 +22,7 @@ export class Identity {
|
|
|
20
22
|
static async open(authorization, options) {
|
|
21
23
|
const jwt = authorization?.startsWith("Bearer ") ? authorization.replace("Bearer ", "") : undefined;
|
|
22
24
|
const payload = jwt ? await JWT.open({ public: options.key }, options.whitelist).verify(jwt) : undefined;
|
|
23
|
-
return jwt && payload ? new Identity(payload) : gracely.client.unauthorized();
|
|
25
|
+
return jwt && payload ? new Identity(payload, jwt) : gracely.client.unauthorized();
|
|
24
26
|
}
|
|
25
27
|
}
|
|
26
28
|
//# sourceMappingURL=Identity.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../../User/Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;
|
|
1
|
+
{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../../User/Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAE3B,MAAM,OAAO,QAAQ;IAIQ;IAAsC;IAHlE,IAAI,KAAK;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAA;IAC1B,CAAC;IACD,YAA4B,OAAoB,EAAkB,GAAW;QAAjD,YAAO,GAAP,OAAO,CAAa;QAAkB,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAEjF,YAAY,CAAC,UAAmD;QAC/D,IAAI,OAAgB,CAAA;QACpB,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5B,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;;YAEpD,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACvE,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;IACnD,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,IAAI,CAChB,aAAiC,EACjC,OAAoD;QAEpD,MAAM,GAAG,GAAG,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACnG,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACxG,OAAO,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAA;IACnF,CAAC;CACD"}
|