@postxl/generators 1.17.2 → 1.19.0

package/dist/backend-actions/actions.generator.d.ts

@@ -26,6 +26,7 @@ export type ActionsContext = {
      */
     readonly authorization: {
         readonly service: Generator.ImportableClass;
+        readonly policy: Generator.ImportableClass;
     };
     /**
      * The class that executes the actions

package/dist/backend-actions/actions.generator.js

@@ -48,6 +48,7 @@ const types_1 = require("../types");
 const action_types_generator_1 = require("./generators/action-types.generator");
 const actions_config_class_generator_1 = require("./generators/actions-config-class.generator");
 const actions_module_generator_1 = require("./generators/actions-module.generator");
+const authorization_policy_service_generator_1 = require("./generators/authorization-policy-service.generator");
 const authorization_service_generator_1 = require("./generators/authorization-service.generator");
 const dispatcher_service_generator_1 = require("./generators/dispatcher-service.generator");
 const execution_class_generator_1 = require("./generators/execution-class.generator");
@@ -100,6 +101,10 @@ exports.generator = {
                     name: Generator.toClassName('AuthorizationService'),
                     location: Generator.toBackendModuleLocation(`@actions/authorization/authorization.service`),
                 },
+                policy: {
+                    name: Generator.toClassName('AuthorizationPolicyService'),
+                    location: Generator.toBackendModuleLocation(`@actions/authorization/authorization-policy.service`),
+                },
             },
             execution: {
                 interface: {
@@ -180,6 +185,7 @@ exports.generator = {
         const srcVfs = new Generator.VirtualFileSystem();
         srcVfs.write(Generator.toLocalFile(actions.dispatcher), (0, dispatcher_service_generator_1.generateDispatcher)(context));
         srcVfs.write(Generator.toLocalFile(actions.authorization.service), (0, authorization_service_generator_1.generateAuthorizationService)(context));
+        srcVfs.write(Generator.toLocalFile(actions.authorization.policy), (0, authorization_policy_service_generator_1.generateAuthorizationPolicyService)(context));
         srcVfs.write(Generator.toLocalFile(actions.execution.class), (0, execution_class_generator_1.generateActionExecutionClass)(context));
         srcVfs.write(Generator.toLocalFile(actions.execution.interface), (0, execution_interface_generator_1.generateActionExecutionInterface)(context));
         srcVfs.write(Generator.toLocalFile(actions.summary.action), (0, action_types_generator_1.generateActionTypes)(actions));

package/dist/backend-actions/actions.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.generator.js","sourceRoot":"","sources":["../../src/backend-actions/actions.generator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAmC;AACnC,8CAAmB;AAEnB,6DAA8C;AAC9C,uDAAwC;AAExC,kDAA+E;AAC/E,wEAA8E;AAC9E,kCAAmD;AACnD,oCAAsD;AAEtD,gFAAyE;AACzE,gGAAmF;AACnF,oFAA6E;AAC7E,kGAA2F;AAC3F,4FAA8E;AAC9E,sFAAqF;AACrF,8FAA6F;AA+G7F,MAAM,UAAU,GAAG,aAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;AAK7C,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAAxD,QAAA,WAAW,eAA6C;AAmBxD,QAAA,WAAW,GAAG,SAAS,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAA;AAEjE,QAAA,SAAS,GAAiC;IACrD,EAAE,EAAE,mBAAW;IACf,QAAQ,EAAE,CAAC,iCAAkB,EAAE,sBAAe,EAAE,wBAAgB,EAAE,6CAAmB,CAAC;IAEtF,QAAQ,EAAE,CAAsC,OAAgB,EAAwB,EAAE;QACxF,aAAa,CAAC,OAAO,CAAC,CAAA;QAEtB,MAAM,MAAM,GAA6B;YACvC,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC;YAC5C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,yBAAyB,CAAC;SACvE,CAAA;QAED,MAAM,cAAc,GAAG,SAAS,CAAC,uBAAuB,CAAC,+BAA+B,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC;YAC5C,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE;gBACP,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,sBAAsB,CAAC;gBAClD,QAAQ,EAAE,cAAc;aACzB;SACF,CAAA;QAED,MAAM,aAAa,GAAiB;YAClC,IAAI,EAAE,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC;YAC9C,WAAW,EAAE,MAAM;YACnB,qBAAqB,EAAE;gBACrB,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,uCAAuC,CAAC;aAC5D;YACD,SAAS,EAAE;gBACT,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,yCAAyC,CAAC;gBACpE,kFAAkF;gBAClF,aAAa,EAAE,EAAE;gBACjB,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;aAC1B;SACF,CAAA;QACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAE3C,MAAM,OAAO,GAAmB;YAC9B,MAAM;YACN,MAAM;YACN,UAAU,EAAE;gBACV,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC;gBAChD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,6BAA6B,CAAC;aAC3E;YACD,aAAa,EAAE;gBACb,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,sBAAsB,CAAC;oBACnD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,8CAA8C,CAAC;iBAC5F;aACF;YACD,SAAS,EAAE;gBACT,SAAS,EAAE;oBACT,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC;oBAC9C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;oBACrF,iBAAiB,EAAE;wBACjB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,mBAAmB,CAAC;wBAC/C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;qBACtF;oBACD,0BAA0B,EAAE;wBAC1B,IAAI,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACrD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;qBACtF;iBACF;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,wBAAwB,CAAC;oBACrD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;iBAClF;gBACD,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,iBAAiB,CAAC;gBACvD,SAAS,EAAE;oBACT,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,KAAK,EAAE;wBACL,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,oBAAoB,CAAC;wBACrD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACxD;iBACF;gBACD,cAAc,EAAE;oBACd,eAAe,EAAE,SAAS,CAAC,cAAc,CAAC,wBAAwB,CAAC;oBACnE,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC,uBAAuB,CAAC;oBAChE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;iBACzD;gBACD,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;aACjE;YACD,SAAS,EAAE,EAAE;YACb,OAAO,EAAE;gBACP,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC;oBACpC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC;oBAC1C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;gBACD,oBAAoB,EAAE;oBACpB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC;oBAC5C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;aACF;SACF,CAAA;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;IAChC,CAAC;IAED,QAAQ,EAAE,KAAK,EAAiC,OAAgB,EAAoB,EAAE;QACpF,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAA,iDAAkB,EAAC,OAAO,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAA,8DAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACzG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAA,wDAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACnG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,IAAA,gEAAgC,EAAC,OAAO,CAAC,CAAC,CAAA;QAC3G,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC,CAAA;QACzF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,sDAAqB,EAAC,OAAO,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,gDAAqB,EAAC,OAAO,CAAC,CAAC,CAAA;QAEnF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAC7C,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QACrD,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;QAEpE,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;QAEpE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAE3E,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAA;AACD,SAAS,aAAa,CAAoC,OAAgB;IACxE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACvE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACnE,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACzE,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAC3E,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;AAC3E,CAAC"}
+{"version":3,"file":"actions.generator.js","sourceRoot":"","sources":["../../src/backend-actions/actions.generator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAmC;AACnC,8CAAmB;AAEnB,6DAA8C;AAC9C,uDAAwC;AAExC,kDAA+E;AAC/E,wEAA8E;AAC9E,kCAAmD;AACnD,oCAAsD;AAEtD,gFAAyE;AACzE,gGAAmF;AACnF,oFAA6E;AAC7E,gHAAwG;AACxG,kGAA2F;AAC3F,4FAA8E;AAC9E,sFAAqF;AACrF,8FAA6F;AAgH7F,MAAM,UAAU,GAAG,aAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;AAK7C,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAAxD,QAAA,WAAW,eAA6C;AAmBxD,QAAA,WAAW,GAAG,SAAS,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAA;AAEjE,QAAA,SAAS,GAAiC;IACrD,EAAE,EAAE,mBAAW;IACf,QAAQ,EAAE,CAAC,iCAAkB,EAAE,sBAAe,EAAE,wBAAgB,EAAE,6CAAmB,CAAC;IAEtF,QAAQ,EAAE,CAAsC,OAAgB,EAAwB,EAAE;QACxF,aAAa,CAAC,OAAO,CAAC,CAAA;QAEtB,MAAM,MAAM,GAA6B;YACvC,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC;YAC5C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,yBAAyB,CAAC;SACvE,CAAA;QAED,MAAM,cAAc,GAAG,SAAS,CAAC,uBAAuB,CAAC,+BAA+B,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC;YAC5C,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE;gBACP,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,sBAAsB,CAAC;gBAClD,QAAQ,EAAE,cAAc;aACzB;SACF,CAAA;QAED,MAAM,aAAa,GAAiB;YAClC,IAAI,EAAE,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC;YAC9C,WAAW,EAAE,MAAM;YACnB,qBAAqB,EAAE;gBACrB,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,uCAAuC,CAAC;aAC5D;YACD,SAAS,EAAE;gBACT,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,yCAAyC,CAAC;gBACpE,kFAAkF;gBAClF,aAAa,EAAE,EAAE;gBACjB,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;aAC1B;SACF,CAAA;QACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAE3C,MAAM,OAAO,GAAmB;YAC9B,MAAM;YACN,MAAM;YACN,UAAU,EAAE;gBACV,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC;gBAChD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,6BAA6B,CAAC;aAC3E;YACD,aAAa,EAAE;gBACb,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,sBAAsB,CAAC;oBACnD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,8CAA8C,CAAC;iBAC5F;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,4BAA4B,CAAC;oBACzD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,qDAAqD,CAAC;iBACnG;aACF;YACD,SAAS,EAAE;gBACT,SAAS,EAAE;oBACT,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC;oBAC9C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;oBACrF,iBAAiB,EAAE;wBACjB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,mBAAmB,CAAC;wBAC/C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;qBACtF;oBACD,0BAA0B,EAAE;wBAC1B,IAAI,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACrD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;qBACtF;iBACF;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,wBAAwB,CAAC;oBACrD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;iBAClF;gBACD,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,iBAAiB,CAAC;gBACvD,SAAS,EAAE;oBACT,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,KAAK,EAAE;wBACL,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,oBAAoB,CAAC;wBACrD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACxD;iBACF;gBACD,cAAc,EAAE;oBACd,eAAe,EAAE,SAAS,CAAC,cAAc,CAAC,wBAAwB,CAAC;oBACnE,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC,uBAAuB,CAAC;oBAChE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;iBACzD;gBACD,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;aACjE;YACD,SAAS,EAAE,EAAE;YACb,OAAO,EAAE;gBACP,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC;oBACpC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC;oBAC1C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;gBACD,oBAAoB,EAAE;oBACpB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC;oBAC5C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;aACF;SACF,CAAA;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;IAChC,CAAC;IAED,QAAQ,EAAE,KAAK,EAAiC,OAAgB,EAAoB,EAAE;QACpF,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAA,iDAAkB,EAAC,OAAO,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAA,8DAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACzG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,IAAA,2EAAkC,EAAC,OAAO,CAAC,CAAC,CAAA;QAC9G,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAA,wDAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACnG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,IAAA,gEAAgC,EAAC,OAAO,CAAC,CAAC,CAAA;QAC3G,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC,CAAA;QACzF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,sDAAqB,EAAC,OAAO,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,gDAAqB,EAAC,OAAO,CAAC,CAAC,CAAA;QAEnF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAC7C,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QACrD,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;QAEpE,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;QAEpE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAE3E,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAA;AACD,SAAS,aAAa,CAAoC,OAAgB;IACxE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACvE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACnE,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACzE,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAC3E,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;AAC3E,CAAC"}

package/dist/backend-actions/generators/actions-module.generator.js

@@ -8,6 +8,7 @@ function generateActionsModule({ actions, database }) {
         .from(actions.module.location)
         .add(actions.execution.class)
         .add(actions.dispatcher)
+        .add(actions.authorization.policy)
         .add(actions.authorization.service)
         .add(actions.config)
         .addType(actions.config.options)
@@ -37,8 +38,8 @@ export class ${actions.module.name} {
         ${database.module.moduleClass.name},
         ${moduleImports.join(',\n')}
       ],
-      providers: [${actions.dispatcher.name}, ${actions.execution.class.name}, ${actions.authorization.service.name}, configProvider],
-      exports: [${actions.dispatcher.name}, ${actions.execution.class.name}, ${actions.authorization.service.name}],
+      providers: [${actions.dispatcher.name}, ${actions.execution.class.name}, ${actions.authorization.policy.name}, ${actions.authorization.service.name}, configProvider],
+      exports: [${actions.dispatcher.name}, ${actions.execution.class.name}, ${actions.authorization.policy.name}, ${actions.authorization.service.name}],
       global: true
     }
   }

package/dist/backend-actions/generators/actions-module.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions-module.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/actions-module.generator.ts"],"names":[],"mappings":";;AAIA,sDA6CC;AAjDD,iDAAmD;AAInD,SAAgB,qBAAqB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAiB;IACxE,MAAM,OAAO,GAAG,2BAAe;QAC7B,EAAE;SACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC7B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;SACvB,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;SAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;SACnB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;SAC/B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAY,CAAC,CAAA,CAAC,UAAU;IAE/C,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,KAAK,MAAM,EACT,MAAM,EAAE,EAAE,WAAW,EAAE,GACxB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAQ;QACV,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACxB,aAAa,CAAC,IAAI,CAAC,oBAAoB,WAAW,CAAC,IAAI,GAAG,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;eAEL,OAAO,CAAC,MAAM,CAAC,IAAI;mCACC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;;iBAE7C,OAAO,CAAC,MAAM,CAAC,IAAI;sBACd,OAAO,CAAC,MAAM,CAAC,IAAI;;;gBAGzB,OAAO,CAAC,MAAM,CAAC,IAAI;;UAEzB,QAAQ,CAAC,MAAM,CAAC,WAAY,CAAC,IAAI;UACjC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;;oBAEf,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;kBACjG,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;;;;EAI/G,CAAA;AACF,CAAC"}
+{"version":3,"file":"actions-module.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/actions-module.generator.ts"],"names":[],"mappings":";;AAIA,sDA8CC;AAlDD,iDAAmD;AAInD,SAAgB,qBAAqB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAiB;IACxE,MAAM,OAAO,GAAG,2BAAe;QAC7B,EAAE;SACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC7B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;SACvB,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;SACjC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;SAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;SACnB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;SAC/B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAY,CAAC,CAAA,CAAC,UAAU;IAE/C,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,KAAK,MAAM,EACT,MAAM,EAAE,EAAE,WAAW,EAAE,GACxB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAQ;QACV,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACxB,aAAa,CAAC,IAAI,CAAC,oBAAoB,WAAW,CAAC,IAAI,GAAG,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;eAEL,OAAO,CAAC,MAAM,CAAC,IAAI;mCACC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;;iBAE7C,OAAO,CAAC,MAAM,CAAC,IAAI;sBACd,OAAO,CAAC,MAAM,CAAC,IAAI;;;gBAGzB,OAAO,CAAC,MAAM,CAAC,IAAI;;UAEzB,QAAQ,CAAC,MAAM,CAAC,WAAY,CAAC,IAAI;UACjC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;;oBAEf,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;kBACvI,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;;;;EAIrJ,CAAA;AACF,CAAC"}

package/dist/backend-actions/generators/authorization-policy-service.generator.d.ts

@@ -0,0 +1,2 @@
+import { ContextResult } from '../actions.generator';
+export declare function generateAuthorizationPolicyService({ actions, schema, types }: ContextResult): string;

package/dist/backend-actions/generators/authorization-policy-service.generator.js

@@ -0,0 +1,214 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateAuthorizationPolicyService = generateAuthorizationPolicyService;
+const generator_1 = require("@postxl/generator");
+function stringifyAuthRuleSet(input) {
+    if (!input) {
+        return '{}';
+    }
+    const typedInput = input;
+    const result = {};
+    if (typedInput.read) {
+        result.read = typedInput.read;
+    }
+    if (typedInput.write) {
+        result.write = typedInput.write;
+    }
+    if (typedInput.create) {
+        result.create = typedInput.create;
+    }
+    if (typedInput.update) {
+        result.update = typedInput.update;
+    }
+    if (typedInput.delete) {
+        result.delete = typedInput.delete;
+    }
+    if (typedInput.actions) {
+        result.actions = typedInput.actions;
+    }
+    if (typedInput.adminUi) {
+        result.adminUi = typedInput.adminUi;
+    }
+    return JSON.stringify(result);
+}
+function stringifyAuthScopeRuleSet(input) {
+    if (!input) {
+        return '{}';
+    }
+    const typedInput = input;
+    const result = {};
+    if (typedInput.actions) {
+        result.actions = typedInput.actions;
+    }
+    return JSON.stringify(result);
+}
+function generateAuthorizationPolicyService({ actions, schema, types }) {
+    const imports = generator_1.ImportGenerator.from(actions.authorization.policy.location)
+        .addType(types.modelNames)
+        .addType(types.authorizationContext)
+        .addType(types.userRoles)
+        .addType(actions.summary.action);
+    const schemaRules = [...schema.schemaAuth.entries()]
+        .map(([schemaName, ruleSet]) => `    ${JSON.stringify(schemaName)}: ${stringifyAuthRuleSet(ruleSet)},`)
+        .join('\n');
+    const modelRules = schema.modelNames
+        .map((modelName) => {
+        const model = schema.models.get(modelName);
+        return `    ${JSON.stringify(modelName)}: ${stringifyAuthRuleSet(model?.auth)},`;
+    })
+        .join('\n');
+    const modelSchemas = schema.modelNames
+        .map((modelName) => {
+        const model = schema.models.get(modelName);
+        return `    ${JSON.stringify(modelName)}: ${JSON.stringify(model?.databaseSchema ?? schema.defaultDatabaseSchema)},`;
+    })
+        .join('\n');
+    const scopeRules = Object.entries(schema.auth?.scopes ?? {})
+        .map(([scope, ruleSet]) => `    ${JSON.stringify(scope)}: ${stringifyAuthScopeRuleSet(ruleSet)},`)
+        .join('\n');
+    const knownScopes = new Set();
+    for (const provider of actions.providers) {
+        for (const scope of provider.scopes) {
+            knownScopes.add(scope);
+        }
+    }
+    const scopeToModel = schema.modelNames
+        .map((modelName) => {
+        const scope = `${modelName.charAt(0).toLowerCase()}${modelName.slice(1)}`;
+        if (!knownScopes.has(scope)) {
+            return null;
+        }
+        return `    ${JSON.stringify(scope)}: ${JSON.stringify(modelName)},`;
+    })
+        .filter(Boolean)
+        .join('\n');
+    return /* ts */ `
+import { Injectable } from '@nestjs/common'
+
+${imports.generate()}
+
+type RoleRule = { anyRole: string[] }
+
+type RuleSet = {
+  read?: RoleRule
+  write?: RoleRule
+  create?: RoleRule
+  update?: RoleRule
+  delete?: RoleRule
+  actions?: Record<string, RoleRule>
+  adminUi?: {
+    visibleFor: string[]
+  }
+}
+
+type Operation = 'read' | 'write' | 'create' | 'update' | 'delete'
+type ActionScope = Action['scope']
+type ScopeRuleSet = {
+  actions?: Record<string, RoleRule>
+}
+
+type PolicyMatrix = {
+  defaultDeny: boolean
+  schemas: Record<string, RuleSet>
+  models: Record<ModelName, RuleSet>
+  modelSchemas: Record<ModelName, string>
+  scopes: Partial<Record<ActionScope, ScopeRuleSet>>
+  scopeModels: Partial<Record<ActionScope, ModelName>>
+}
+
+@Injectable()
+export class ${actions.authorization.policy.name} {
+  private readonly matrix: PolicyMatrix = {
+    defaultDeny: ${schema.auth?.defaultDeny ?? true},
+    schemas: {
+${schemaRules}
+    },
+    models: {
+${modelRules}
+    },
+    modelSchemas: {
+${modelSchemas}
+    },
+    scopes: {
+${scopeRules}
+    },
+    scopeModels: {
+${scopeToModel}
+    },
+  }
+
+  public canRead(params: { authorization: AuthorizationContext; modelName: ModelName }): boolean {
+    return this.canOperate({ ...params, operation: 'read' })
+  }
+
+  public canRunAction(params: { authorization: AuthorizationContext; scope: ActionScope; actionType: string }): boolean {
+    const scopeRules = this.matrix.scopes[params.scope]
+    const scopedRule = scopeRules?.actions?.[params.actionType] ?? scopeRules?.actions?.['*']
+    if (scopedRule) {
+      return this.matchesAnyRole(params.authorization.userRoles, scopedRule.anyRole)
+    }
+
+    const modelName = this.matrix.scopeModels[params.scope]
+    if (modelName) {
+      const rules = this.getEffectiveRules(modelName)
+      const direct = rules.actions?.[params.actionType]
+      const wildcard = rules.actions?.['*']
+      const selectedRule = direct ?? wildcard
+
+      if (selectedRule) {
+        return this.matchesAnyRole(params.authorization.userRoles, selectedRule.anyRole)
+      }
+
+      return this.canOperate({ authorization: params.authorization, modelName, operation: 'write' })
+    }
+
+    return !this.matrix.defaultDeny
+  }
+
+  public canWriteOperation(params: { authorization: AuthorizationContext; modelName: ModelName; operation: Exclude<Operation, 'read'> }): boolean {
+    return this.canOperate(params)
+  }
+
+  public canAccessAdminUi(params: { authorization: AuthorizationContext; modelName: ModelName }): boolean {
+    const rules = this.getEffectiveRules(params.modelName)
+    const adminRule = rules.adminUi
+    if (adminRule) {
+      return this.matchesAnyRole(params.authorization.userRoles, adminRule.visibleFor)
+    }
+    return !this.matrix.defaultDeny
+  }
+
+  private canOperate(params: { authorization: AuthorizationContext; modelName: ModelName; operation: Operation }): boolean {
+    const rules = this.getEffectiveRules(params.modelName)
+    const selectedRule =
+      rules[params.operation] ??
+      (params.operation === 'create' || params.operation === 'update' || params.operation === 'delete'
+        ? rules.write
+        : undefined)
+
+    if (!selectedRule) {
+      return !this.matrix.defaultDeny
+    }
+
+    return this.matchesAnyRole(params.authorization.userRoles, selectedRule.anyRole)
+  }
+
+  private getEffectiveRules(modelName: ModelName): RuleSet {
+    const modelRules = this.matrix.models[modelName] ?? {}
+    const schemaName = this.matrix.modelSchemas[modelName]
+    const schemaRules = schemaName ? (this.matrix.schemas[schemaName] ?? {}) : {}
+    return { ...schemaRules, ...modelRules }
+  }
+
+  private matchesAnyRole(userRoles: UserRoles, requiredRoles: string[]): boolean {
+    for (const role of userRoles) {
+      if (requiredRoles.includes(role)) {
+        return true
+      }
+    }
+    return false
+  }
+}
+`;
+}
+//# sourceMappingURL=authorization-policy-service.generator.js.map

package/dist/backend-actions/generators/authorization-policy-service.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-policy-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/authorization-policy-service.generator.ts"],"names":[],"mappings":";;AAwEA,gFA+KC;AAvPD,iDAAmD;AAwBnD,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,UAAU,GAAG,KAAoB,CAAA;IACvC,MAAM,MAAM,GAAgB,EAAE,CAAA;IAE9B,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAA;IAC/B,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IACjC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACnC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACnC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACnC,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;IACrC,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;IACrC,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,UAAU,GAAG,KAAyB,CAAA;IAC5C,MAAM,MAAM,GAAqB,EAAE,CAAA;IAEnC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;IACrC,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;AAED,SAAgB,kCAAkC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAiB;IAC1F,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;SACxE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;SACzB,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;SACnC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;SACxB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAElC,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC;SACtG,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU;SACjC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC1C,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAA;IAClF,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU;SACnC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC1C,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,IAAI,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAA;IACtH,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;SACzD,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC;SACjG,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU;SACnC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAA;IACtE,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAgCL,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;;mBAE7B,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI;;EAEjD,WAAW;;;EAGX,UAAU;;;EAGV,YAAY;;;EAGZ,UAAU;;;EAGV,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Eb,CAAA;AACD,CAAC"}

package/dist/backend-actions/generators/authorization-service.generator.d.ts

@@ -1,2 +1,2 @@
 import { ContextResult } from '../actions.generator';
-export declare function generateAuthorizationService({ actions, database, types }: ContextResult): string;
+export declare function generateAuthorizationService({ actions, types, schema }: ContextResult): string;

package/dist/backend-actions/generators/authorization-service.generator.js

@@ -2,31 +2,43 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateAuthorizationService = generateAuthorizationService;
 const generator_1 = require("@postxl/generator");
-function generateAuthorizationService({ actions, database, types }) {
+function generateAuthorizationService({ actions, types, schema }) {
     const imports = generator_1.ImportGenerator.from(actions.authorization.service.location)
-        .add(database.service)
+        .add(actions.authorization.policy)
         .addType(actions.summary.action)
-        .addType(types.user)
+        .addType(types.authorizationContext)
         .addType(actions.execution.interface);
     return /* ts */ `
 import { Injectable, Logger } from '@nestjs/common'
 
 ${imports.generate()}
 
-type AuthorizationContext = {
+type AuthorizeActionContext = AuthorizationContext & {
   action: Action
-  user: User
   execution: IActionExecution
 }
 
 @Injectable()
 export class ${actions.authorization.service.name} {
   private readonly _logger = new Logger(${actions.authorization.service.name}.name)
+  private static readonly SYSTEM_USER_ID = ${JSON.stringify(schema.systemUser.id ?? 'root')}
 
-  constructor(private readonly databaseService: DatabaseService) {}
+  constructor(private readonly authorizationPolicyService: ${actions.authorization.policy.name}) {}
 
-  public async authorizeAction({ action: _action, user: _user, execution: _execution }: AuthorizationContext): Promise<boolean> {
-    return Promise.resolve(true) // NOSONAR
+  public authorizeAction({ action, user, userRoles, execution: _execution }: AuthorizeActionContext): boolean {
+    if (user.id === ${actions.authorization.service.name}.SYSTEM_USER_ID) {
+      return true
+    }
+
+    const isAllowed = this.authorizationPolicyService.canRunAction({
+      authorization: { user, userRoles },
+      scope: action.scope,
+      actionType: action.type,
+    })
+    if (!isAllowed) {
+      this._logger.warn(\`Authorization denied for action scope/type "\${action.scope}.\${action.type}".\`)
+    }
+    return isAllowed
   }
 
 }

package/dist/backend-actions/generators/authorization-service.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/authorization-service.generator.ts"],"names":[],"mappings":";;AAIA,oEA8BC;AAlCD,iDAAmD;AAInD,SAAgB,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAiB;IACtF,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;SACzE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;SACrB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;SACnB,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAEvC,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;eASL,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;0CACP,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;;;;;;;;;CAS3E,CAAA;AACD,CAAC"}
+{"version":3,"file":"authorization-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/authorization-service.generator.ts"],"names":[],"mappings":";;AAIA,oEA0CC;AA9CD,iDAAmD;AAInD,SAAgB,4BAA4B,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAiB;IACpF,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;SACzE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;SACjC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;SACnC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAEvC,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;eAQL,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;0CACP,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;6CAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,MAAM,CAAC;;6DAE9B,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;;;sBAGxE,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;CAgBvD,CAAA;AACD,CAAC"}

package/dist/backend-actions/generators/dispatcher-service.generator.js

@@ -12,6 +12,7 @@ function generateDispatcher({ actions, database, types }) {
     imports.add(actions.summary.resultOfActionHelper);
     imports.add(actions.authorization.service);
     imports.addType(types.user);
+    imports.addType(types.userRoles);
     const injections = [];
     const executeMethods = [];
     if (actions.providers.length === 0) {
@@ -50,10 +51,10 @@ export class DispatcherService {
   public async dispatch<
     A extends Action,
     Result = ${actions.summary.resultOfActionHelper.name}<A, ${actions.summary.result.name}>
-  >({ action, user, migrationOrder }: { action: A; user: User; migrationOrder?: number }): Promise<Result> {
+  >({ action, user, userRoles = [], migrationOrder }: { action: A; user: User; userRoles?: UserRoles; migrationOrder?: number }): Promise<Result> {
     const execution = await this.actionExecutionFactory.create({ action, databaseService: this.databaseService, user, migrationOrder })
 
-    const isAuthorized = await this.authorizationService.authorizeAction({ action, user, execution })
+    const isAuthorized = this.authorizationService.authorizeAction({ action, user, userRoles, execution })
     if (!isAuthorized) {
       const message = \`User \${user.id} is not authorized to execute \${action.scope}.\${action.type}\`
       await execution.error(message)

package/dist/backend-actions/generators/dispatcher-service.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatcher-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/dispatcher-service.generator.ts"],"names":[],"mappings":";;AAIA,gDAkGC;AAtGD,iDAAmD;AAInD,SAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAiB;IAC5E,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACjD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IAC1C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAE3B,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,cAAc,CAAC,IAAI,CACjB;;KAED,CACA,CAAA;IACH,CAAC;IAED,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACpB,UAAU,CAAC,IAAI,CACb,4BAA4B,OAAO,CAAC,IAAI,uBAAuB,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CACvG,CAAA;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC;gBACV,SAAS;wBACD,OAAO,CAAC,YAAY,qDAAqD,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;;;;EAIhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;;;;MAYd,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;;;;;eAKjB,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;eA0B3E,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;QAUlF,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;CAOhC,CAAA;AACD,CAAC"}
+{"version":3,"file":"dispatcher-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/dispatcher-service.generator.ts"],"names":[],"mappings":";;AAIA,gDAmGC;AAvGD,iDAAmD;AAInD,SAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAiB;IAC5E,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACjD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IAC1C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3B,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhC,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,cAAc,CAAC,IAAI,CACjB;;KAED,CACA,CAAA;IACH,CAAC;IAED,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACpB,UAAU,CAAC,IAAI,CACb,4BAA4B,OAAO,CAAC,IAAI,uBAAuB,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CACvG,CAAA;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC;gBACV,SAAS;wBACD,OAAO,CAAC,YAAY,qDAAqD,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;;;;EAIhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;;;;MAYd,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;;;;;eAKjB,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;eA0B3E,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;QAUlF,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;CAOhC,CAAA;AACD,CAAC"}

package/dist/backend-ai/generators/ai-route.generator.js

@@ -14,15 +14,15 @@ export const ai = router({
   ask: procedure
     .use(authMiddleware)
     .input(zAskTaskInput)
-    .mutation(async ({ input, ctx }) => ctx.aiAgent.startExecution(input, ctx.user.id)),
+    .mutation(async ({ input, ctx }) => ctx.aiAgent.startExecution(input, ctx.viewer.user.id)),
   step: procedure
     .use(authMiddleware)
     .input(zAskStepInput)
-    .mutation(async ({ input, ctx }) => ctx.aiAgent.continueExecution(input, ctx.user.id)),
+    .mutation(async ({ input, ctx }) => ctx.aiAgent.continueExecution(input, ctx.viewer.user.id)),
   cancel: procedure
     .use(authMiddleware)
     .input(z.object({ conversation: z.string() }))
-    .mutation(({ input, ctx }) => ctx.aiAgent.cancelExecution(input.conversation, ctx.user.id)),
+    .mutation(({ input, ctx }) => ctx.aiAgent.cancelExecution(input.conversation, ctx.viewer.user.id)),
 })
 `;
 }

package/dist/backend-authentication/authentication.generator.js

@@ -63,6 +63,7 @@ exports.generator = {
                 code: Generator.ts(`AuthenticationModule.forRoot(config.auth)`),
             },
             envConfig: {
+                imports: [Generator.ts(`import { parseStringList } from '@authentication/utils'`)],
                 decoder: Generator.ts(`
           AUTH: zEnvBoolean.optional().default(true),
           KEYCLOAK_URL: z.string().url().transform((val) => new URL(val)),
@@ -70,10 +71,17 @@ exports.generator = {
           KEYCLOAK_CLIENT_SECRET: z.string(),
           KEYCLOAK_REALM: z.string(),
           KEYCLOAK_REDIRECT_URL: z.string().url().transform((val) => new URL(val)),
-          KEYCLOAK_LOGOUT_REDIRECT_URL: z.string().url().transform((val) => new URL(val)),`),
+          KEYCLOAK_LOGOUT_REDIRECT_URL: z.string().url().transform((val) => new URL(val)),
+          AUTH_MOCK_SUB: z.string().optional(),
+          AUTH_MOCK_NAME: z.string().optional(),
+          AUTH_MOCK_EMAIL: z.string().optional(),
+          AUTH_MOCK_ROLES: z.string().optional(),
+          AUTH_MOCK_GROUPS: z.string().optional(),
+          AUTH_TEST_OVERRIDES: zEnvBoolean.optional().default(false),`),
                 transformer: Generator.ts(`
           auth: val.AUTH ? {
             enableAuthentication: true as const,
+            roleClaimPath: ${JSON.stringify(context.schema.auth?.roleClaimPath ?? 'realm_access.roles')},
             url: val.API_URL,
             urlPrefix: val.API_PREFIX,
             
@@ -89,6 +97,14 @@ exports.generator = {
             postLogoutRedirectUrl: val.KEYCLOAK_LOGOUT_REDIRECT_URL,
           } : {
             enableAuthentication: false as const,
+            mockIdentity: {
+              sub: val.AUTH_MOCK_SUB ?? 'test',
+              name: val.AUTH_MOCK_NAME ?? 'Test User',
+              email: val.AUTH_MOCK_EMAIL ?? 'test@postxl.com',
+              roles: parseStringList(val.AUTH_MOCK_ROLES, ['viewer']),
+              groups: parseStringList(val.AUTH_MOCK_GROUPS),
+            },
+            allowTestOverrides: val.AUTH_TEST_OVERRIDES,
           }`),
                 dotEnvExample: `
           KEYCLOAK_URL=http://localhost:8080
@@ -97,6 +113,12 @@ exports.generator = {
           KEYCLOAK_REALM=postxl
           KEYCLOAK_REDIRECT_URL=\${API_URL}/auth/callback
           KEYCLOAK_LOGOUT_REDIRECT_URL=\${FRONTEND_URL}
+          AUTH_MOCK_SUB=test
+          AUTH_MOCK_NAME="Test User"
+          AUTH_MOCK_EMAIL=test@postxl.com
+          AUTH_MOCK_ROLES=viewer
+          AUTH_MOCK_GROUPS=
+          AUTH_TEST_OVERRIDES=false
           `,
             },
         };

package/dist/backend-authentication/authentication.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.generator.js","sourceRoot":"","sources":["../../src/backend-authentication/authentication.generator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAmC;AAEnC,6DAA8C;AAE9C,wDAA2E;AAC3E,kDAA+E;AAC/E,kDAAkE;AAClE,kCAAmD;AAGnD,4EAAqE;AACrE,kGAA2F;AAC3F,oGAA6F;AAC7F,gGAAyF;AAiB5E,QAAA,WAAW,GAAG,SAAS,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,CAAA;AAExE,QAAA,SAAS,GAAiC;IACrD,EAAE,EAAE,mBAAW;IACf,QAAQ,EAAE,CAAC,iCAAkB,EAAE,sBAAe,EAAE,qCAAsB,EAAE,2CAAyB,CAAC;IAElG,QAAQ,EAAE,CAAsC,OAAgB,EAAiB,EAAE;QACjF,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3G,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAC3C,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EACrD,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,EACnD,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EACrD,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,EACjD,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CACpD,CAAA;QAED,MAAM,MAAM,GAAiE;YAC3E,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,sBAAsB,CAAC;YACnD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,uCAAuC,CAAC;YACpF,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,yBAAyB,CAAC;SAC3D,CAAA;QACD,MAAM,oBAAoB,GAAiB;YACzC,IAAI,EAAE,SAAS,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YACrD,WAAW,EAAE,MAAM;YACnB,qBAAqB,EAAE;gBACrB,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,2CAA2C,CAAC;aAChE;YACD,SAAS,EAAE;gBACT,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;;;;;;;2FAO6D,CAAC;gBAEpF,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;;;;;;;;;;;;;;;;;;YAkBtB,CAAC;gBACL,aAAa,EAAE;;;;;;;WAOZ;aACJ;SACF,CAAA;QACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAElD,MAAM,OAAO,GAAkE;YAC7E,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,uBAAuB,CAAC;YACpD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;YACrF,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,6BAA6B,CAAC;SAC/D,CAAA;QACD,MAAM,KAAK,GAAkE;YAC3E,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,WAAW,CAAC;YACxC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,4BAA4B,CAAC;YACzE,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC;SACnD,CAAA;QAED,MAAM,qBAAqB,GAA0B;YACnD,MAAM;YACN,OAAO;YACP,KAAK;YACL,KAAK,EAAE;gBACL,QAAQ,EAAE;oBACR,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;oBACtC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,sCAAsC,CAAC;iBACpF;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;oBACvC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,sCAAsC,CAAC;iBACpF;aACF;SACF,CAAA;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAA;IAC9D,CAAC;IAED,QAAQ,EAAE,KAAK,EAAiC,OAAgB,EAAoB,EAAE;QACpF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,IAAA,8DAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACzG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,IAAA,wCAAiB,EAAC,OAAO,CAAC,CAAC,CAAA;QAChF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,IAAA,gEAA6B,EAAC,OAAO,CAAC,CAAC,CAAA;QAC9F,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAA,4DAA2B,EAAC,OAAO,CAAC,CAAC,CAAA;QAEhH,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAC7C,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QAErD,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;QAEpE,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAE7E,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAA;QAE7E,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAA"}
+{"version":3,"file":"authentication.generator.js","sourceRoot":"","sources":["../../src/backend-authentication/authentication.generator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAmC;AAEnC,6DAA8C;AAE9C,wDAA2E;AAC3E,kDAA+E;AAC/E,kDAAkE;AAClE,kCAAmD;AAGnD,4EAAqE;AACrE,kGAA2F;AAC3F,oGAA6F;AAC7F,gGAAyF;AAiB5E,QAAA,WAAW,GAAG,SAAS,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,CAAA;AAExE,QAAA,SAAS,GAAiC;IACrD,EAAE,EAAE,mBAAW;IACf,QAAQ,EAAE,CAAC,iCAAkB,EAAE,sBAAe,EAAE,qCAAsB,EAAE,2CAAyB,CAAC;IAElG,QAAQ,EAAE,CAAsC,OAAgB,EAAiB,EAAE;QACjF,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3G,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAC3C,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EACrD,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,EACnD,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EACrD,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,EACjD,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CACpD,CAAA;QAED,MAAM,MAAM,GAAiE;YAC3E,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,sBAAsB,CAAC;YACnD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,uCAAuC,CAAC;YACpF,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,yBAAyB,CAAC;SAC3D,CAAA;QACD,MAAM,oBAAoB,GAAiB;YACzC,IAAI,EAAE,SAAS,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YACrD,WAAW,EAAE,MAAM;YACnB,qBAAqB,EAAE;gBACrB,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,2CAA2C,CAAC;aAChE;YACD,SAAS,EAAE;gBACT,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,yDAAyD,CAAC,CAAC;gBAClF,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;;;;;;;;;;;;;sEAawC,CAAC;gBAE/D,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;;;6BAGL,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,IAAI,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;YAwB3F,CAAC;gBACL,aAAa,EAAE;;;;;;;;;;;;;WAaZ;aACJ;SACF,CAAA;QACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAElD,MAAM,OAAO,GAAkE;YAC7E,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,uBAAuB,CAAC;YACpD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;YACrF,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,6BAA6B,CAAC;SAC/D,CAAA;QACD,MAAM,KAAK,GAAkE;YAC3E,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,WAAW,CAAC;YACxC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,4BAA4B,CAAC;YACzE,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC;SACnD,CAAA;QAED,MAAM,qBAAqB,GAA0B;YACnD,MAAM;YACN,OAAO;YACP,KAAK;YACL,KAAK,EAAE;gBACL,QAAQ,EAAE;oBACR,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;oBACtC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,sCAAsC,CAAC;iBACpF;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;oBACvC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,sCAAsC,CAAC;iBACpF;aACF;SACF,CAAA;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAA;IAC9D,CAAC;IAED,QAAQ,EAAE,KAAK,EAAiC,OAAgB,EAAoB,EAAE;QACpF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,IAAA,8DAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACzG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,IAAA,wCAAiB,EAAC,OAAO,CAAC,CAAC,CAAA;QAChF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,IAAA,gEAA6B,EAAC,OAAO,CAAC,CAAC,CAAA;QAC9F,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAA,4DAA2B,EAAC,OAAO,CAAC,CAAC,CAAA;QAEhH,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAC7C,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QAErD,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;QAEpE,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAE7E,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAA;QAE7E,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAA"}

package/dist/backend-authentication/generators/auth-guard.generator.js

@@ -39,7 +39,6 @@ function generateAuthGuard(context) {
     const imports = Generator.ImportGenerator.from(context.authentication.guard._filePath);
     imports.add(context.view.service);
     imports.add(context.actions.dispatcher);
-    imports.add(context.types.user);
     imports.add({ name: context.authentication.service.name, location: context.authentication.service._filePath });
     return /* ts */ `
   import { CanActivate, ExecutionContext, Injectable } from '@nestjs/common'
@@ -48,9 +47,10 @@ import { FastifyRequest } from 'fastify'
 
 ${imports.generate()}
 
-import { UserInfo, UserRoles } from './authentication.types'
+import type { AuthorizationContext } from '@types'
+import { UserInfo } from './authentication.types'
 
-export type Viewer = { userInfo: UserInfo; userRoles: UserRoles; user: User; isAuthorized: boolean }
+export type Viewer = AuthorizationContext
 
 export type FastifyRequestWithViewer = FastifyRequest & { viewer: Viewer }
 @Injectable()
@@ -68,10 +68,7 @@ export class ${context.authentication.guard.name} implements CanActivate {
     let viewer: Viewer | null = null
 
     let userInfo: UserInfo | null = null
-    let userRoles: UserRoles = []
-
-    // TODO: Add authorization check
-    const isAuthorized = true
+    let userRoles: Viewer['userRoles'] = []
 
     const associatedUserInfo = await this.authService.getUserInfoFromRequest(req)
 
@@ -105,7 +102,7 @@ export class ${context.authentication.guard.name} implements CanActivate {
         }
       }
 
-      viewer = { userInfo, userRoles, user, isAuthorized }
+      viewer = { userRoles, user }
     }
 
     if (!viewer) {

package/dist/backend-authentication/generators/auth-guard.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-guard.generator.js","sourceRoot":"","sources":["../../../src/backend-authentication/generators/auth-guard.generator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,8CAmFC;AAvFD,6DAA8C;AAI9C,SAAgB,iBAAiB,CAAC,OAAsB;IACtD,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEtF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACvC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC9G,OAAO,QAAQ,CAAC;;;;;EAKhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;eAQL,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI;;oCAEZ,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI;oCACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;0CACnB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0DvE,CAAA;AACF,CAAC"}
+{"version":3,"file":"auth-guard.generator.js","sourceRoot":"","sources":["../../../src/backend-authentication/generators/auth-guard.generator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,8CAgFC;AApFD,6DAA8C;AAI9C,SAAgB,iBAAiB,CAAC,OAAsB;IACtD,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEtF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACvC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC9G,OAAO,QAAQ,CAAC;;;;;EAKhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;eASL,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI;;oCAEZ,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI;oCACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;0CACnB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuDvE,CAAA;AACF,CAAC"}

package/dist/backend-authentication/generators/authentication-module.generator.js

@@ -63,7 +63,7 @@ export class ${context.authentication.module.name} {
           }
         : {
             provide: ${context.authentication.service.name},
-            useClass: MockAuthenticationService,
+            useValue: new MockAuthenticationService(config),
           }        
 
     return {

package/dist/backend-authentication/generators/authentication-service.generator.js

@@ -14,9 +14,12 @@ import jwt from 'jsonwebtoken'
 import { JwksClient } from 'jwks-rsa'
 import { OidcClient } from 'oidc-client-ts'
 
+import { USER_ROLES } from '@types'
+import type { UserRole, UserRoles } from '@types'
+
 import type { AuthenticationConfig_EnabledKeycloak } from './authentication.config'
-import { authenticationCookieName, UserInfo, UserRoles, zUserInfo, zUserRoles } from './authentication.types'
-import { unknownToErrorMessage } from './utils'
+import { authenticationCookieName, UserInfo, zUserInfo } from './authentication.types'
+import { getByPath, parseStringList, unknownToErrorMessage } from './utils'
 
 /**
  * State object for the authentication service.
@@ -282,14 +285,14 @@ export class ${context.authentication.service.name} implements OnModuleInit {
       const decoded = await _jwtVerify(accessToken, getKey, { algorithms: ['RS256'] })
 
       if (typeof decoded === 'object' && decoded !== null) {
-        const rawUserRoles = decoded.realm_access?.roles || []
+        const rawUserRoles = getByPath(decoded, this.config.roleClaimPath)
+        const normalizedUserRoles = Array.isArray(rawUserRoles) ? rawUserRoles : parseStringList(rawUserRoles)
 
-        const userRoles = zUserRoles.safeParse(rawUserRoles)
-        if (userRoles.success) {
-          return { ok: true, userRoles: userRoles.data }
-        }
+        const filteredRoles = normalizedUserRoles.filter(
+          (role): role is UserRole => typeof role === 'string' && USER_ROLES.includes(role as UserRole),
+        )
 
-        return { ok: false }
+        return { ok: true, userRoles: filteredRoles }
       }
 
       return { ok: true, userRoles: [] }

package/dist/backend-authentication/generators/authentication-service.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication-service.generator.js","sourceRoot":"","sources":["../../../src/backend-authentication/generators/authentication-service.generator.ts"],"names":[],"mappings":";;AAEA,sEAoYC;AApYD,SAAgB,6BAA6B,CAAC,OAAsB;IAClE,OAAO,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA6BH,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI;yCACT,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoW1E,CAAA;AACF,CAAC"}
+{"version":3,"file":"authentication-service.generator.js","sourceRoot":"","sources":["../../../src/backend-authentication/generators/authentication-service.generator.ts"],"names":[],"mappings":";;AAEA,sEAuYC;AAvYD,SAAgB,6BAA6B,CAAC,OAAsB;IAClE,OAAO,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAgCH,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI;yCACT,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoW1E,CAAA;AACF,CAAC"}