@pax2pay/model-banking 0.1.577 → 0.1.579

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/Backup/User.ts +4 -4
  2. package/Client/index.ts +0 -3
  3. package/Realm.ts +2 -2
  4. package/Supplier/index.ts +1 -1
  5. package/dist/cjs/Backup/User.d.ts +4 -4
  6. package/dist/cjs/Backup/User.js.map +1 -1
  7. package/dist/cjs/Client/index.d.ts +0 -2
  8. package/dist/cjs/Client/index.js +0 -2
  9. package/dist/cjs/Client/index.js.map +1 -1
  10. package/dist/cjs/Realm.d.ts +1 -1
  11. package/dist/cjs/Realm.js +1 -1
  12. package/dist/cjs/Realm.js.map +1 -1
  13. package/dist/cjs/Supplier/index.js +1 -1
  14. package/dist/cjs/Supplier/index.js.map +1 -1
  15. package/dist/cjs/pax2pay.d.ts +0 -2
  16. package/dist/cjs/pax2pay.js +1 -5
  17. package/dist/cjs/pax2pay.js.map +1 -1
  18. package/dist/mjs/Backup/User.d.ts +4 -4
  19. package/dist/mjs/Backup/User.js.map +1 -1
  20. package/dist/mjs/Client/index.d.ts +0 -2
  21. package/dist/mjs/Client/index.js +0 -2
  22. package/dist/mjs/Client/index.js.map +1 -1
  23. package/dist/mjs/Realm.d.ts +1 -1
  24. package/dist/mjs/Realm.js +1 -1
  25. package/dist/mjs/Realm.js.map +1 -1
  26. package/dist/mjs/Supplier/index.js +1 -1
  27. package/dist/mjs/Supplier/index.js.map +1 -1
  28. package/dist/mjs/pax2pay.d.ts +0 -2
  29. package/dist/mjs/pax2pay.js +0 -2
  30. package/dist/mjs/pax2pay.js.map +1 -1
  31. package/package.json +1 -2
  32. package/pax2pay.ts +0 -2
  33. package/Identity.ts +0 -169
  34. package/Key/Permissions.ts +0 -112
  35. package/Key/Roles.ts +0 -111
  36. package/Key/index.ts +0 -40
  37. package/dist/cjs/Identity.d.ts +0 -41
  38. package/dist/cjs/Identity.js +0 -102
  39. package/dist/cjs/Identity.js.map +0 -1
  40. package/dist/cjs/Key/Permissions.d.ts +0 -95
  41. package/dist/cjs/Key/Permissions.js +0 -77
  42. package/dist/cjs/Key/Permissions.js.map +0 -1
  43. package/dist/cjs/Key/Roles.d.ts +0 -27
  44. package/dist/cjs/Key/Roles.js +0 -104
  45. package/dist/cjs/Key/Roles.js.map +0 -1
  46. package/dist/cjs/Key/index.d.ts +0 -23
  47. package/dist/cjs/Key/index.js +0 -29
  48. package/dist/cjs/Key/index.js.map +0 -1
  49. package/dist/mjs/Identity.d.ts +0 -41
  50. package/dist/mjs/Identity.js +0 -98
  51. package/dist/mjs/Identity.js.map +0 -1
  52. package/dist/mjs/Key/Permissions.d.ts +0 -95
  53. package/dist/mjs/Key/Permissions.js +0 -74
  54. package/dist/mjs/Key/Permissions.js.map +0 -1
  55. package/dist/mjs/Key/Roles.d.ts +0 -27
  56. package/dist/mjs/Key/Roles.js +0 -101
  57. package/dist/mjs/Key/Roles.js.map +0 -1
  58. package/dist/mjs/Key/index.d.ts +0 -23
  59. package/dist/mjs/Key/index.js +0 -26
  60. package/dist/mjs/Key/index.js.map +0 -1
@@ -1,104 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.Roles = void 0;
4
- const model_1 = require("@userwidgets/model");
5
- const isly_1 = require("isly");
6
- const Permissions_1 = require("./Permissions");
7
- var Roles;
8
- (function (Roles) {
9
- function get(realmOrganization) {
10
- const [realm] = realmOrganization.split("-");
11
- return [
12
- ...Object.entries(Realm.definitions).map(([role, value]) => ({
13
- label: "realm-" + role,
14
- permissions: () => Permissions_1.Permissions.stringify({ [realm + "-*"]: value }),
15
- })),
16
- ...Object.entries(Organization.definitions).map(([role, value]) => ({
17
- label: "organization-" + role,
18
- permissions: (id) => Permissions_1.Permissions.stringify({ [id]: value }),
19
- })),
20
- ];
21
- }
22
- Roles.get = get;
23
- function resolve(roles) {
24
- let result = {};
25
- for (const [key, role] of Object.entries(roles)) {
26
- const [, organizationCode] = key.split("-");
27
- result =
28
- role?.reduce((r, role) => model_1.userwidgets.User.Permissions.merge(r, {
29
- [key]: organizationCode == "*" && Realm.type.is(role)
30
- ? Realm.definitions[role]
31
- : Organization.definitions[role],
32
- }), result) ?? result;
33
- }
34
- return result;
35
- }
36
- Roles.resolve = resolve;
37
- let Realm;
38
- (function (Realm) {
39
- Realm.roles = ["admin", "fincrime-readonly", "fincrime", "finance", "operations", "support"];
40
- Realm.type = isly_1.isly.string(Realm.roles);
41
- Realm.definitions = {
42
- admin: true,
43
- "fincrime-readonly": {
44
- organizations: {
45
- view: true,
46
- accounts: { view: true },
47
- rules: { view: true },
48
- },
49
- transactions: { view: true },
50
- cards: { view: true },
51
- rules: { view: true },
52
- },
53
- fincrime: {
54
- organizations: {
55
- view: true,
56
- accounts: { balance: true, view: true },
57
- rules: true,
58
- },
59
- transactions: { view: true, resolve: true, comment: true },
60
- cards: { view: true, cancel: true },
61
- rules: true,
62
- },
63
- finance: {
64
- treasury: { rebalance: true, view: true },
65
- settlements: { view: true },
66
- },
67
- operations: {
68
- organizations: {
69
- create: true,
70
- update: true,
71
- accounts: true,
72
- rules: true,
73
- },
74
- },
75
- support: {
76
- organizations: {
77
- create: true,
78
- view: true,
79
- accounts: true,
80
- rules: {
81
- view: true,
82
- edit: true,
83
- },
84
- },
85
- transactions: { view: true },
86
- cards: { view: true, cancel: true },
87
- rules: { view: true },
88
- },
89
- };
90
- })(Realm = Roles.Realm || (Roles.Realm = {}));
91
- let Organization;
92
- (function (Organization) {
93
- Organization.roles = ["admin", "finance", "payments"];
94
- Organization.definitions = {
95
- admin: true,
96
- finance: {
97
- accounts: { balance: true, view: true, transactions: { view: true, create: true } },
98
- cards: true,
99
- },
100
- payments: { cards: true, accounts: { view: true, transactions: { create: true } } },
101
- };
102
- })(Organization = Roles.Organization || (Roles.Organization = {}));
103
- })(Roles || (exports.Roles = Roles = {}));
104
- //# sourceMappingURL=Roles.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"Roles.js","sourceRoot":"","sources":["../../../Key/Roles.ts"],"names":[],"mappings":";;;AAAA,8CAAgD;AAChD,+BAA2B;AAE3B,+CAA2C;AAM3C,IAAiB,KAAK,CAqGrB;AArGD,WAAiB,KAAK;IAErB,SAAgB,GAAG,CAAC,iBAAyB;QAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC5C,OAAO;YACN,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5D,KAAK,EAAE,QAAQ,GAAG,IAAI;gBACtB,WAAW,EAAE,GAAG,EAAE,CAAC,yBAAW,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnE,KAAK,EAAE,eAAe,GAAG,IAAI;gBAC7B,WAAW,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,yBAAW,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;aACnE,CAAC,CAAC;SACH,CAAA;IACF,CAAC;IAZe,SAAG,MAYlB,CAAA;IACD,SAAgB,OAAO,CAAC,KAAY;QACnC,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,EAAE,gBAAgB,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC3C,MAAM;gBACL,IAAI,EAAE,MAAM,CACX,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CACX,mBAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE;oBACrC,CAAC,GAAG,CAAC,EACJ,gBAAgB,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;wBAC7C,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;wBACzB,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,IAAyB,CAAC;iBACvD,CAAC,EACH,MAAM,CACN,IAAI,MAAM,CAAA;QACb,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IAjBe,aAAO,UAiBtB,CAAA;IACD,IAAiB,KAAK,CAsDrB;IAtDD,WAAiB,KAAK;QAGR,WAAK,GAAG,CAAC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAU,CAAA;QAC/F,UAAI,GAAG,WAAI,CAAC,MAAM,CAAC,MAAA,KAAK,CAAC,CAAA;QACzB,iBAAW,GAA2C;YAClE,KAAK,EAAE,IAAI;YACX,mBAAmB,EAAE;gBACpB,aAAa,EAAE;oBACd,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrB;gBACD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACrB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACrB;YACD,QAAQ,EAAE;gBACT,aAAa,EAAE;oBACd,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvC,KAAK,EAAE,IAAI;iBACX;gBACD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC1D,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;gBACnC,KAAK,EAAE,IAAI;aACX;YACD,OAAO,EAAE;gBACR,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;gBACzC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aAC3B;YACD,UAAU,EAAE;gBACX,aAAa,EAAE;oBACd,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,IAAI;iBACX;aACD;YACD,OAAO,EAAE;gBACR,aAAa,EAAE;oBACd,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE;wBACN,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,IAAI;qBACV;iBACD;gBACD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;gBACnC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACrB;SACD,CAAA;IACF,CAAC,EAtDgB,KAAK,GAAL,WAAK,KAAL,WAAK,QAsDrB;IACD,IAAiB,YAAY,CAY5B;IAZD,WAAiB,YAAY;QAGf,kBAAK,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAU,CAAA;QACjD,wBAAW,GAAkD;YACzE,KAAK,EAAE,IAAI;YACX,OAAO,EAAE;gBACR,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBACnF,KAAK,EAAE,IAAI;aACX;YACD,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;SACnF,CAAA;IACF,CAAC,EAZgB,YAAY,GAAZ,kBAAY,KAAZ,kBAAY,QAY5B;AACF,CAAC,EArGgB,KAAK,qBAAL,KAAK,QAqGrB"}
@@ -1,23 +0,0 @@
1
- import { userwidgets } from "@userwidgets/model";
2
- import { Realm } from "../Realm";
3
- import { User } from "../User";
4
- import { Permissions as KeyPermissions } from "./Permissions";
5
- import { Roles as KeyRoles } from "./Roles";
6
- type Claims = {
7
- organization: string;
8
- realm: Realm;
9
- };
10
- export type Key = userwidgets.User.Key<userwidgets.User.Key.Creatable.Claims | Claims, Key.Permissions>;
11
- export declare namespace Key {
12
- export import Permissions = KeyPermissions;
13
- type Roles = KeyRoles;
14
- const Roles: typeof KeyRoles;
15
- namespace Roles {
16
- type Role = KeyRoles.Role;
17
- namespace Organization {
18
- type Role = KeyRoles.Organization.Role;
19
- }
20
- }
21
- function from(payload: User.JWT.Payload, token: string): Key;
22
- }
23
- export {};
@@ -1,29 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.Key = void 0;
4
- const isoly_1 = require("isoly");
5
- const Permissions_1 = require("./Permissions");
6
- const Roles_1 = require("./Roles");
7
- var Key;
8
- (function (Key) {
9
- Key.Permissions = Permissions_1.Permissions;
10
- Key.Roles = Roles_1.Roles;
11
- function from(payload, token) {
12
- return {
13
- audience: payload.aud,
14
- email: payload.sub,
15
- realm: payload.realm,
16
- permissions: {
17
- [payload.realm + "-*"]: Key.Permissions.from(payload.permission),
18
- ...(payload.permission.user ? { ["*"]: true } : {}),
19
- },
20
- expires: payload.exp ? isoly_1.isoly.DateTime.create(payload.exp) : isoly_1.isoly.DateTime.nextYear(isoly_1.isoly.DateTime.now(), 10),
21
- issued: isoly_1.isoly.DateTime.create(payload.iat),
22
- issuer: payload.iss,
23
- name: { first: "", last: "" },
24
- token,
25
- };
26
- }
27
- Key.from = from;
28
- })(Key || (exports.Key = Key = {}));
29
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../Key/index.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAI7B,+CAA6D;AAC7D,mCAA2C;AAQ3C,IAAiB,GAAG,CA0BnB;AA1BD,WAAiB,GAAG;IACL,eAAW,GAAG,yBAAc,CAAA;IAE7B,SAAK,GAAG,aAAQ,CAAA;IAO7B,SAAgB,IAAI,CAAC,OAAyB,EAAE,KAAa;QAC5D,OAAO;YACN,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,KAAK,EAAE,OAAO,CAAC,GAAG;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE;gBACZ,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,IAAA,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC5D,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;YACD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,aAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YAC7G,MAAM,EAAE,aAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAC1C,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC7B,KAAK;SACL,CAAA;IACF,CAAC;IAfe,QAAI,OAenB,CAAA;AACF,CAAC,EA1BgB,GAAG,mBAAH,GAAG,QA0BnB"}
@@ -1,41 +0,0 @@
1
- import { gracely } from "gracely";
2
- import { storage } from "cloudly-storage";
3
- import { slackly } from "slackly";
4
- import { Key } from "./Key";
5
- import { Realm } from "./Realm";
6
- import { User } from "./User";
7
- export declare class Identity<T extends Identity.Require = never> {
8
- #private;
9
- readonly key: Key;
10
- readonly realm: T["realm"] extends true ? Realm : Realm | undefined;
11
- readonly organization: T["organization"] extends true ? string : string | undefined;
12
- get realms(): Realm[] | undefined;
13
- constructor(key: Key, realm: T["realm"] extends true ? Realm : Realm | undefined, organization: T["organization"] extends true ? string : string | undefined);
14
- check(constraint: Key.Permissions | Key.Permissions[], realm?: Realm, organization?: string): boolean;
15
- collectionCheck(collection: string): boolean;
16
- static authenticate<T extends Identity.Require = Record<string, never>>(header: Identity.Header, constraint: Key.Permissions | Key.Permissions[], requires?: T, key?: string, output?: "undefined", notify?: Identity.Notify, store?: storage.KeyValueStore<User.JWT.Payload.LongTerm>): Promise<Identity<T> | undefined>;
17
- static authenticate<T extends Identity.Require = Record<string, never>>(header: {
18
- authorization?: string | undefined;
19
- realm?: Realm;
20
- organization?: string;
21
- }, constraint: Key.Permissions | Key.Permissions[], requires?: T, key?: string, output?: "error", notify?: Identity.Notify, store?: storage.KeyValueStore<User.JWT.Payload.LongTerm>): Promise<Identity<T> | gracely.Error>;
22
- static verify(authorization: string | undefined, key?: string, store?: storage.KeyValueStore<User.JWT.Payload.LongTerm>): Promise<Key | undefined>;
23
- static getRealm(header: Identity.Header, key?: string): Promise<Realm | undefined>;
24
- static getRealms(permissions: Key.Permissions): Realm[];
25
- }
26
- export declare namespace Identity {
27
- type Require = {
28
- realm?: true;
29
- organization?: true;
30
- };
31
- interface Header {
32
- authorization?: string | undefined;
33
- realm?: Realm;
34
- organization?: string;
35
- }
36
- type Notify = {
37
- slack: slackly.Connection<"notifications">;
38
- endpoint: string;
39
- method: string;
40
- };
41
- }
@@ -1,98 +0,0 @@
1
- import { gracely } from "gracely";
2
- import { userwidgets } from "@userwidgets/model";
3
- import { Key } from "./Key";
4
- import { Realm } from "./Realm";
5
- import { User } from "./User";
6
- export class Identity {
7
- key;
8
- realm;
9
- organization;
10
- #realms;
11
- get realms() {
12
- return (this.#realms ??= Identity.getRealms(this.key.permissions));
13
- }
14
- constructor(key, realm, organization) {
15
- this.key = key;
16
- this.realm = realm;
17
- this.organization = organization;
18
- }
19
- check(constraint, realm, organization) {
20
- return Array.isArray(constraint)
21
- ? constraint.some(c => this.check(c, realm, organization))
22
- : [
23
- { [`${realm ?? this.realm}-${organization ?? this.organization}`]: constraint },
24
- { [`${organization ?? this.organization}`]: constraint },
25
- { [`${realm ?? this.realm}-*`]: constraint },
26
- { [`*-*`]: constraint },
27
- ].some(e => userwidgets.User.Permissions.check(this.key.permissions, e));
28
- }
29
- collectionCheck(collection) {
30
- return Object.values(this.key.permissions).some(value => (typeof value == "object" && value[collection]) || value == true);
31
- }
32
- static async authenticate(header, constraint, requires, key = publicKey, output = "undefined", notify, store) {
33
- let result;
34
- const authorization = header.authorization?.startsWith("Bearer ")
35
- ? header.authorization.replace("Bearer ", "")
36
- : undefined;
37
- const verified = await Identity.verify(authorization, key, store);
38
- if (!verified)
39
- output !== "undefined" && (result = gracely.client.unauthorized());
40
- else {
41
- const realms = Identity.getRealms(verified.permissions);
42
- const identity = new Identity(verified, ((realms.length == 1 ? realms[0] : header.realm && realms.includes(header.realm) ? header.realm : undefined) ??
43
- verified.realm), (verified.organization ?? header.organization));
44
- const requirement = (value) => (requires?.organization ? !!identity?.organization : true) &&
45
- (requires?.realm ? Realm.type.is(identity?.realm) : true);
46
- if (identity?.check(constraint) && requirement(identity))
47
- result = identity;
48
- else if (output === "undefined")
49
- result = undefined;
50
- else {
51
- await notify?.slack.send("notifications", `Unauthorized access attempt at ${notify.method.toUpperCase()} ${notify.endpoint}`);
52
- console.log(identity.key.email, "unauthorized access attempt at", notify?.method.toUpperCase(), notify?.endpoint);
53
- result = gracely.client.forbidden();
54
- }
55
- }
56
- return result;
57
- }
58
- static async verify(authorization, key = publicKey, store) {
59
- const verifier = userwidgets.User.Key.Verifier.create(key);
60
- const jwt = User.JWT.open({ public: key }, store);
61
- const unpacked = authorization ? await jwt.unpack(authorization) : undefined;
62
- let verified;
63
- if (User.JWT.Payload.type.is(unpacked) && authorization) {
64
- const payload = await jwt.verify(authorization);
65
- verified = payload && Key.from(payload, authorization);
66
- }
67
- else
68
- verified = await verifier.verify(authorization);
69
- return verified;
70
- }
71
- static async getRealm(header, key = publicKey) {
72
- let result;
73
- const authorization = header.authorization?.startsWith("Bearer ")
74
- ? header.authorization.replace("Bearer ", "")
75
- : undefined;
76
- const jwt = User.JWT.open({ public: key });
77
- const unpacked = authorization ? await jwt.unpack(authorization) : undefined;
78
- if (User.JWT.Payload.type.is(unpacked))
79
- result = unpacked.realm;
80
- else {
81
- const verified = await userwidgets.User.Key.Verifier.create(key).verify(authorization);
82
- const realms = verified && Identity.getRealms(verified.permissions);
83
- result =
84
- realms &&
85
- (realms.length == 1 ? realms[0] : header.realm && realms.includes(header.realm) ? header.realm : undefined);
86
- }
87
- return result;
88
- }
89
- static getRealms(permissions) {
90
- return [
91
- ...new Set(Object.keys(permissions).flatMap(code => code.split("-").length > 1 && code.split("-")[0] == "*"
92
- ? Realm.realms
93
- : Realm.type.get(code.split("-")[0]) ?? [])),
94
- ];
95
- }
96
- }
97
- const publicKey = "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";
98
- //# sourceMappingURL=Identity.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAE7B,MAAM,OAAO,QAAQ;IAOV;IACA;IACA;IARV,OAAO,CAAqB;IAC5B,IAAI,MAAM;QACT,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,YACU,GAAQ,EACR,KAA0D,EAC1D,YAA0E;QAF1E,QAAG,GAAH,GAAG,CAAK;QACR,UAAK,GAAL,KAAK,CAAqD;QAC1D,iBAAY,GAAZ,YAAY,CAA8D;IACjF,CAAC;IACJ,KAAK,CAAC,UAA+C,EAAE,KAAa,EAAE,YAAqB;QAC1F,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAC1D,CAAC,CAAC;gBACA,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBAC/E,EAAE,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE;gBACxD,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,UAAU,EAAE;gBAC5C,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE;aACtB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,eAAe,CAAC,UAAkB;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAC9C,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CACzE,CAAA;IACF,CAAC;IAoBD,MAAM,CAAC,KAAK,CAAC,YAAY,CACxB,MAAoF,EACpF,UAA+C,EAC/C,QAAY,EACZ,MAAc,SAAS,EACvB,SAAgC,WAAW,EAC3C,MAAwB,EACxB,KAAwD;QAExD,IAAI,MAA+C,CAAA;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QACjE,IAAI,CAAC,QAAQ;YACZ,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;aAC9D,CAAC;YACL,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC5B,QAAQ,EACR,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3G,QAAQ,CAAC,KAAK,CAAU,EACzB,CAAC,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAW,CACxD,CAAA;YACD,MAAM,WAAW,GAAG,CACnB,KAA2B,EAGf,EAAE,CACd,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1D,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC1D,IAAI,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC;gBACvD,MAAM,GAAG,QAAQ,CAAA;iBACb,IAAI,MAAM,KAAK,WAAW;gBAC9B,MAAM,GAAG,SAAS,CAAA;iBACd,CAAC;gBACL,MAAM,MAAM,EAAE,KAAK,CAAC,IAAI,CACvB,eAAe,EACf,kCAAkC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAA;gBACD,OAAO,CAAC,GAAG,CACV,QAAQ,CAAC,GAAG,CAAC,KAAK,EAClB,gCAAgC,EAChC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAC5B,MAAM,EAAE,QAAQ,CAChB,CAAA;gBACD,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;YACpC,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,MAAM,CAClB,aAAiC,EACjC,MAAc,SAAS,EACvB,KAAwD;QAExD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAM,GAAG,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,CAAA;QACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5E,IAAI,QAAyB,CAAA;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YAC/C,QAAQ,GAAG,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QACvD,CAAC;;YACA,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAChD,OAAO,QAAQ,CAAA;IAChB,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAuB,EAAE,MAAc,SAAS;QACrE,IAAI,MAAyB,CAAA;QAC7B,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5E,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;YACrC,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAA;aACnB,CAAC;YACL,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAM,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;YAC3F,MAAM,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACnE,MAAM;gBACL,MAAM;oBACN,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC7G,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IACD,MAAM,CAAC,SAAS,CAAC,WAA4B;QAC5C,OAAO;YACN,GAAG,IAAI,GAAG,CACT,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG;gBACtD,CAAC,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAC3C,CACD;SACD,CAAA;IACF,CAAC;CACD;AAkBD,MAAM,SAAS,GACd,kuBAAkuB,CAAA"}
@@ -1,95 +0,0 @@
1
- import { userwidgets } from "@userwidgets/model";
2
- import { User } from "../User";
3
- export type Permissions = Permissions.Organization | Permissions.Realm;
4
- export declare namespace Permissions {
5
- function stringify(permissions: Permissions): string;
6
- interface Realm extends userwidgets.User.Permissions {
7
- organizations?: {
8
- create?: true;
9
- view?: true;
10
- update?: true;
11
- remove?: true;
12
- accounts?: {
13
- balance?: true;
14
- view?: true;
15
- create?: true;
16
- change?: true;
17
- cancel?: true;
18
- } | true;
19
- rules?: {
20
- edit?: true;
21
- view?: true;
22
- customer?: {
23
- edit?: true;
24
- view?: true;
25
- } | true;
26
- product?: {
27
- edit?: true;
28
- view?: true;
29
- } | true;
30
- fincrime?: {
31
- edit?: true;
32
- view?: true;
33
- } | true;
34
- } | true;
35
- } | true;
36
- transactions?: {
37
- create?: true;
38
- view?: true;
39
- resolve?: true;
40
- comment?: true;
41
- } | true;
42
- cards?: {
43
- create?: true;
44
- view?: true;
45
- change?: true;
46
- cancel?: true;
47
- } | true;
48
- rules?: {
49
- edit?: true;
50
- view?: true;
51
- product?: {
52
- edit?: true;
53
- view?: true;
54
- } | true;
55
- fincrime?: {
56
- edit?: true;
57
- view?: true;
58
- } | true;
59
- } | true;
60
- settlements?: {
61
- create?: true;
62
- view?: true;
63
- amend?: true;
64
- } | true;
65
- treasury?: {
66
- rebalance?: true;
67
- view?: true;
68
- } | true;
69
- operations?: {
70
- view?: true;
71
- } | true;
72
- logs?: {
73
- view?: true;
74
- } | true;
75
- }
76
- interface Organization extends userwidgets.User.Permissions {
77
- accounts?: {
78
- balance?: true;
79
- view?: true;
80
- create?: true;
81
- change?: true;
82
- transactions?: {
83
- view?: true;
84
- create?: true;
85
- };
86
- } | true;
87
- cards?: {
88
- create?: true;
89
- view?: true;
90
- change?: true;
91
- cancel?: true;
92
- } | true;
93
- }
94
- function from(permission: User.Access.Permission): Permissions | true;
95
- }
@@ -1,74 +0,0 @@
1
- import { userwidgets } from "@userwidgets/model";
2
- import { User } from "../User";
3
- export var Permissions;
4
- (function (Permissions) {
5
- function stringify(permissions) {
6
- return userwidgets.User.Permissions.stringify(permissions);
7
- }
8
- Permissions.stringify = stringify;
9
- function from(permission) {
10
- let result = {};
11
- if (User.Access.Permission.Level.get(permission["*"]) >= 2)
12
- result = true;
13
- else {
14
- if (permission["*"])
15
- result = {
16
- accounts: { view: true },
17
- cards: { view: true },
18
- logs: { view: true },
19
- operations: { view: true },
20
- organizations: {
21
- view: true,
22
- rules: { view: true, customer: { view: true }, product: { view: true }, fincrime: { view: true } },
23
- accounts: { view: true },
24
- },
25
- rules: {
26
- view: true,
27
- customer: { view: true },
28
- product: { view: true },
29
- fincrime: { view: true },
30
- },
31
- settlements: { view: true },
32
- transactions: { view: true },
33
- treasury: { view: true },
34
- org: { view: true },
35
- user: User.Access.Permission.Level.get(permission["user"]) >= 2 || { view: true },
36
- app: { view: true },
37
- };
38
- if (permission["card"])
39
- result.cards = User.Access.Permission.Level.get(permission["card"]) >= 2 || {
40
- view: true,
41
- };
42
- if (permission["log"])
43
- result.logs = User.Access.Permission.Level.get(permission["log"]) >= 2 || {
44
- view: true,
45
- };
46
- if (permission["operation"])
47
- result.operations = User.Access.Permission.Level.get(permission["operation"]) >= 2 || {
48
- view: true,
49
- };
50
- if (permission["organization"])
51
- result.organizations = User.Access.Permission.Level.get(permission["organization"]) >= 2 || {
52
- view: true,
53
- rules: { view: true, customer: { view: true }, product: { view: true }, fincrime: { view: true } },
54
- accounts: { view: true },
55
- };
56
- if (permission["rule"])
57
- result.rules = User.Access.Permission.Level.get(permission["rule"]) >= 2 || {
58
- view: true,
59
- customer: { view: true },
60
- product: { view: true },
61
- fincrime: { view: true },
62
- };
63
- if (permission["settlement"])
64
- result.settlements = User.Access.Permission.Level.get(permission["settlement"]) >= 2 || { view: true };
65
- if (permission["transaction"])
66
- result.transactions = User.Access.Permission.Level.get(permission["transaction"]) >= 2 || { view: true };
67
- if (permission["treasury"])
68
- result.treasury = User.Access.Permission.Level.get(permission["treasury"]) >= 2 || { view: true };
69
- }
70
- return result;
71
- }
72
- Permissions.from = from;
73
- })(Permissions || (Permissions = {}));
74
- //# sourceMappingURL=Permissions.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"Permissions.js","sourceRoot":"","sources":["../../../Key/Permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAG9B,MAAM,KAAW,WAAW,CA2G3B;AA3GD,WAAiB,WAAW;IAC3B,SAAgB,SAAS,CAAC,WAAwB;QACjD,OAAO,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAC3D,CAAC;IAFe,qBAAS,YAExB,CAAA;IAyCD,SAAgB,IAAI,CAAC,UAAkC;QACtD,IAAI,MAAM,GAAuB,EAAE,CAAA;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACzD,MAAM,GAAG,IAAI,CAAA;aACT,CAAC;YACL,IAAI,UAAU,CAAC,GAAG,CAAC;gBAClB,MAAM,GAAG;oBACR,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACrB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACpB,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC1B,aAAa,EAAE;wBACd,IAAI,EAAE,IAAI;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;wBAClG,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;qBACxB;oBACD,KAAK,EAAE;wBACN,IAAI,EAAE,IAAI;wBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;wBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;wBACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;qBACxB;oBACD,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;oBACjF,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACnB,CAAA;YACF,IAAI,UAAU,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3E,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,KAAK,CAAC;gBACpB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI;oBACzE,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,WAAW,CAAC;gBAC1B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI;oBACrF,IAAI,EAAE,IAAI;iBACV,CAAA;YACF,IAAI,UAAU,CAAC,cAAc,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3F,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;oBAClG,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACxB,CAAA;YACF,IAAI,UAAU,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI;oBAC3E,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACxB,CAAA;YACF,IAAI,UAAU,CAAC,YAAY,CAAC;gBAC3B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACvG,IAAI,UAAU,CAAC,aAAa,CAAC;gBAC5B,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACzG,IAAI,UAAU,CAAC,UAAU,CAAC;gBACzB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACnG,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IA9De,gBAAI,OA8DnB,CAAA;AACF,CAAC,EA3GgB,WAAW,KAAX,WAAW,QA2G3B"}
@@ -1,27 +0,0 @@
1
- import { isly } from "isly";
2
- import { Realm } from "../Realm";
3
- import { Permissions } from "./Permissions";
4
- type OrganizationCode = string;
5
- export type Roles = Partial<Record<`${Realm | "*"}-*`, (Roles.Realm.Role | Roles.Organization.Role)[]>> | Partial<Record<`${Realm | "*"}-${OrganizationCode}`, Roles.Organization.Role[]>>;
6
- export declare namespace Roles {
7
- type Role = Realm.Role | Organization.Role;
8
- function get(realmOrganization: string): {
9
- label: string;
10
- permissions: (id: string) => string;
11
- }[];
12
- function resolve(roles: Roles): Permissions;
13
- namespace Realm {
14
- type Roles = Partial<Record<Role, true>>;
15
- type Role = typeof roles[number];
16
- const roles: readonly ["admin", "fincrime-readonly", "fincrime", "finance", "operations", "support"];
17
- const type: isly.Type<"fincrime" | "operations" | "admin" | "fincrime-readonly" | "finance" | "support">;
18
- const definitions: Record<Role, Permissions.Realm | true>;
19
- }
20
- namespace Organization {
21
- type Roles = Partial<Record<Role, true>>;
22
- type Role = typeof roles[number];
23
- const roles: readonly ["admin", "finance", "payments"];
24
- const definitions: Record<Role, Permissions.Organization | true>;
25
- }
26
- }
27
- export {};
@@ -1,101 +0,0 @@
1
- import { userwidgets } from "@userwidgets/model";
2
- import { isly } from "isly";
3
- import { Permissions } from "./Permissions";
4
- export var Roles;
5
- (function (Roles) {
6
- function get(realmOrganization) {
7
- const [realm] = realmOrganization.split("-");
8
- return [
9
- ...Object.entries(Realm.definitions).map(([role, value]) => ({
10
- label: "realm-" + role,
11
- permissions: () => Permissions.stringify({ [realm + "-*"]: value }),
12
- })),
13
- ...Object.entries(Organization.definitions).map(([role, value]) => ({
14
- label: "organization-" + role,
15
- permissions: (id) => Permissions.stringify({ [id]: value }),
16
- })),
17
- ];
18
- }
19
- Roles.get = get;
20
- function resolve(roles) {
21
- let result = {};
22
- for (const [key, role] of Object.entries(roles)) {
23
- const [, organizationCode] = key.split("-");
24
- result =
25
- role?.reduce((r, role) => userwidgets.User.Permissions.merge(r, {
26
- [key]: organizationCode == "*" && Realm.type.is(role)
27
- ? Realm.definitions[role]
28
- : Organization.definitions[role],
29
- }), result) ?? result;
30
- }
31
- return result;
32
- }
33
- Roles.resolve = resolve;
34
- let Realm;
35
- (function (Realm) {
36
- Realm.roles = ["admin", "fincrime-readonly", "fincrime", "finance", "operations", "support"];
37
- Realm.type = isly.string(Realm.roles);
38
- Realm.definitions = {
39
- admin: true,
40
- "fincrime-readonly": {
41
- organizations: {
42
- view: true,
43
- accounts: { view: true },
44
- rules: { view: true },
45
- },
46
- transactions: { view: true },
47
- cards: { view: true },
48
- rules: { view: true },
49
- },
50
- fincrime: {
51
- organizations: {
52
- view: true,
53
- accounts: { balance: true, view: true },
54
- rules: true,
55
- },
56
- transactions: { view: true, resolve: true, comment: true },
57
- cards: { view: true, cancel: true },
58
- rules: true,
59
- },
60
- finance: {
61
- treasury: { rebalance: true, view: true },
62
- settlements: { view: true },
63
- },
64
- operations: {
65
- organizations: {
66
- create: true,
67
- update: true,
68
- accounts: true,
69
- rules: true,
70
- },
71
- },
72
- support: {
73
- organizations: {
74
- create: true,
75
- view: true,
76
- accounts: true,
77
- rules: {
78
- view: true,
79
- edit: true,
80
- },
81
- },
82
- transactions: { view: true },
83
- cards: { view: true, cancel: true },
84
- rules: { view: true },
85
- },
86
- };
87
- })(Realm = Roles.Realm || (Roles.Realm = {}));
88
- let Organization;
89
- (function (Organization) {
90
- Organization.roles = ["admin", "finance", "payments"];
91
- Organization.definitions = {
92
- admin: true,
93
- finance: {
94
- accounts: { balance: true, view: true, transactions: { view: true, create: true } },
95
- cards: true,
96
- },
97
- payments: { cards: true, accounts: { view: true, transactions: { create: true } } },
98
- };
99
- })(Organization = Roles.Organization || (Roles.Organization = {}));
100
- })(Roles || (Roles = {}));
101
- //# sourceMappingURL=Roles.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"Roles.js","sourceRoot":"","sources":["../../../Key/Roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAM3C,MAAM,KAAW,KAAK,CAqGrB;AArGD,WAAiB,KAAK;IAErB,SAAgB,GAAG,CAAC,iBAAyB;QAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC5C,OAAO;YACN,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5D,KAAK,EAAE,QAAQ,GAAG,IAAI;gBACtB,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnE,KAAK,EAAE,eAAe,GAAG,IAAI;gBAC7B,WAAW,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;aACnE,CAAC,CAAC;SACH,CAAA;IACF,CAAC;IAZe,SAAG,MAYlB,CAAA;IACD,SAAgB,OAAO,CAAC,KAAY;QACnC,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,EAAE,gBAAgB,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC3C,MAAM;gBACL,IAAI,EAAE,MAAM,CACX,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CACX,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE;oBACrC,CAAC,GAAG,CAAC,EACJ,gBAAgB,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;wBAC7C,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;wBACzB,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,IAAyB,CAAC;iBACvD,CAAC,EACH,MAAM,CACN,IAAI,MAAM,CAAA;QACb,CAAC;QACD,OAAO,MAAM,CAAA;IACd,CAAC;IAjBe,aAAO,UAiBtB,CAAA;IACD,IAAiB,KAAK,CAsDrB;IAtDD,WAAiB,KAAK;QAGR,WAAK,GAAG,CAAC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAU,CAAA;QAC/F,UAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAA,KAAK,CAAC,CAAA;QACzB,iBAAW,GAA2C;YAClE,KAAK,EAAE,IAAI;YACX,mBAAmB,EAAE;gBACpB,aAAa,EAAE;oBACd,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrB;gBACD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACrB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACrB;YACD,QAAQ,EAAE;gBACT,aAAa,EAAE;oBACd,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvC,KAAK,EAAE,IAAI;iBACX;gBACD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC1D,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;gBACnC,KAAK,EAAE,IAAI;aACX;YACD,OAAO,EAAE;gBACR,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;gBACzC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aAC3B;YACD,UAAU,EAAE;gBACX,aAAa,EAAE;oBACd,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,IAAI;iBACX;aACD;YACD,OAAO,EAAE;gBACR,aAAa,EAAE;oBACd,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE;wBACN,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,IAAI;qBACV;iBACD;gBACD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;gBACnC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACrB;SACD,CAAA;IACF,CAAC,EAtDgB,KAAK,GAAL,WAAK,KAAL,WAAK,QAsDrB;IACD,IAAiB,YAAY,CAY5B;IAZD,WAAiB,YAAY;QAGf,kBAAK,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAU,CAAA;QACjD,wBAAW,GAAkD;YACzE,KAAK,EAAE,IAAI;YACX,OAAO,EAAE;gBACR,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBACnF,KAAK,EAAE,IAAI;aACX;YACD,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;SACnF,CAAA;IACF,CAAC,EAZgB,YAAY,GAAZ,kBAAY,KAAZ,kBAAY,QAY5B;AACF,CAAC,EArGgB,KAAK,KAAL,KAAK,QAqGrB"}