@prosopo/user-access-policy 3.15.6 → 3.15.8

package/dist/tsc/mongoose/mongooseRuleSchema.js

@@ -0,0 +1,48 @@
+const userAttributesSchema = {
+    userId: { type: String, required: false },
+    ja4Hash: { type: String, required: false },
+    userAgent: { type: String, required: false },
+    headersHash: { type: String, required: false },
+    headHash: { type: String, required: false },
+    coords: { type: String, required: false },
+    countryCode: { type: String, required: false },
+    asn: { type: Number, required: false },
+    os: { type: String, required: false },
+    browser: { type: String, required: false },
+    headerMatch: { type: String, required: false },
+    headerName: { type: String, required: false },
+    headerValue: { type: String, required: false },
+    headerOperator: { type: String, required: false },
+    webBotAuthAgent: { type: String, required: false },
+};
+const userIpSchema = {
+    ip: { type: String, required: false },
+    ipMask: { type: String, required: false },
+};
+const userScopeSchema = {
+    ...userAttributesSchema,
+    ...userIpSchema,
+};
+const policyScopeSchema = {
+    clientId: { type: String, required: false },
+};
+const accessPolicySchema = {
+    type: { type: String, required: true },
+    captchaType: { type: String, required: false },
+    description: { type: String, required: false },
+    solvedImagesCount: { type: Number, required: false },
+    imageThreshold: { type: Number, required: false },
+    powDifficulty: { type: Number, required: false },
+    unsolvedImagesCount: { type: Number, required: false },
+    frictionlessScore: { type: Number, required: false },
+    deferToVerify: { type: Boolean, required: false },
+    messageKey: { type: String, required: false },
+};
+export const accessRuleMongooseSchema = {
+    ...accessPolicySchema,
+    ...policyScopeSchema,
+    ...userScopeSchema,
+    ruleGroupId: { type: String, required: false },
+    excludedClientIds: { type: [String], required: false, default: undefined },
+};
+//# sourceMappingURL=mongooseRuleSchema.js.map

package/dist/tsc/mongoose/mongooseRuleSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongooseRuleSchema.js","sourceRoot":"","sources":["../../../src/mongoose/mongooseRuleSchema.ts"],"names":[],"mappings":"AAwBA,MAAM,oBAAoB,GAA2C;IACpE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACzC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC1C,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC5C,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACzC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC1C,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC7C,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjD,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACV,CAAC;AAE1C,MAAM,YAAY,GAAmC;IACpD,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACT,CAAC;AAElC,MAAM,eAAe,GAAsC;IAC1D,GAAG,oBAAoB;IACvB,GAAG,YAAY;CACiB,CAAC;AAElC,MAAM,iBAAiB,GAAkC;IACxD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACZ,CAAC;AAEjC,MAAM,kBAAkB,GAAmC;IAC1D,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACpD,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjD,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAChD,mBAAmB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtD,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACpD,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjD,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACb,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAuC;IAC3E,GAAG,kBAAkB;IACrB,GAAG,iBAAiB;IACpB,GAAG,eAAe;IAClB,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAG9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;CACzC,CAAC"}

package/dist/tsc/redis/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../src/redis/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/tsc/redis/.export.js

@@ -0,0 +1,3 @@
+export { createRedisAccessRulesStorage } from "./redisRulesStorage.js";
+export { accessRulesRedisIndex } from "./redisRuleIndex.js";
+//# sourceMappingURL=.export.js.map

package/dist/tsc/redis/.export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.js","sourceRoot":"","sources":["../../../src/redis/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/tsc/redis/reader/redisAggregate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisAggregate.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisAggregate.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAoB7C,eAAO,MAAM,sBAAsB,WAC1B,eAAe,SAChB,MAAM,WACJ,MAAM,KACb,OAAO,CAAC,MAAM,EAAE,CAWlB,CAAC;AAGF,eAAO,MAAM,kBAAkB,WACtB,eAAe,SAChB,MAAM,UACL,MAAM,iBACC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,YACtC,MAAM,KACd,OAAO,CAAC,MAAM,EAAE,CAkElB,CAAC"}

package/dist/tsc/redis/reader/redisAggregate.js

@@ -0,0 +1,69 @@
+import { z } from "zod";
+import { REDIS_QUERY_DIALECT } from "#policy/redis/reader/redisRulesQuery.js";
+import { REDIS_BATCH_SIZE, parseRedisRecords, } from "#policy/redis/redisClient.js";
+import { ACCESS_RULES_REDIS_INDEX_NAME } from "#policy/redis/redisRuleIndex.js";
+export const searchRedisKeysBounded = async (client, query, maxKeys) => {
+    const reply = await client.ft.searchNoContent(ACCESS_RULES_REDIS_INDEX_NAME, query, {
+        DIALECT: REDIS_QUERY_DIALECT,
+        LIMIT: { from: 0, size: maxKeys },
+    });
+    return reply.documents;
+};
+export const aggregateRedisKeys = async (client, query, logger, batchHandler, maxKeys) => {
+    const keyField = "__key";
+    const recordSchema = z.object({
+        [keyField]: z.string(),
+    });
+    const foundKeys = [];
+    let stopRequested = false;
+    const addRecordKeys = async (records) => {
+        if (stopRequested) {
+            return;
+        }
+        const parsedRecords = parseRedisRecords(records, recordSchema, logger);
+        const recordKeys = parsedRecords.map((record) => record[keyField]);
+        if (batchHandler) {
+            await batchHandler(recordKeys);
+        }
+        else {
+            if (maxKeys !== undefined &&
+                foundKeys.length + recordKeys.length > maxKeys) {
+                const remaining = Math.max(0, maxKeys - foundKeys.length);
+                foundKeys.push(...recordKeys.slice(0, remaining));
+                stopRequested = true;
+                logger.warn(() => ({
+                    msg: "Redis aggregation candidate cap hit; truncating result set. This can suppress less-frequent rules and should be investigated.",
+                    data: {
+                        maxKeys,
+                        query,
+                    },
+                }));
+                return;
+            }
+            foundKeys.push(...recordKeys);
+            logger.debug(() => ({
+                msg: "Processed aggregation batch",
+                data: {
+                    size: recordKeys.length,
+                },
+            }));
+        }
+    };
+    await executeAggregation(client, query, {
+        DIALECT: REDIS_QUERY_DIALECT,
+        COUNT: REDIS_BATCH_SIZE,
+        LOAD: `@${keyField}`,
+    }, addRecordKeys, () => stopRequested);
+    return foundKeys;
+};
+const executeAggregation = async (client, query, aggregateOptions, handleBatch, shouldStop) => {
+    const initialReply = await client.ft.aggregateWithCursor(ACCESS_RULES_REDIS_INDEX_NAME, query, aggregateOptions);
+    await handleBatch(initialReply.results);
+    let cursor = initialReply.cursor;
+    while (0 !== cursor && !shouldStop?.()) {
+        const batchReply = await client.ft.cursorRead(ACCESS_RULES_REDIS_INDEX_NAME, cursor, { COUNT: aggregateOptions.COUNT });
+        await handleBatch(batchReply.results);
+        cursor = batchReply.cursor;
+    }
+};
+//# sourceMappingURL=redisAggregate.js.map

package/dist/tsc/redis/reader/redisAggregate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisAggregate.js","sourceRoot":"","sources":["../../../../src/redis/reader/redisAggregate.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EACN,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAahF,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EAC1C,MAAuB,EACvB,KAAa,EACb,OAAe,EACK,EAAE;IACtB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,eAAe,CAC5C,6BAA6B,EAC7B,KAAK,EACL;QACC,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;KACjC,CACD,CAAC;IAEF,OAAO,KAAK,CAAC,SAAS,CAAC;AACxB,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACtC,MAAuB,EACvB,KAAa,EACb,MAAc,EACd,YAAgD,EAChD,OAAgB,EACI,EAAE;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC;IAEzB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;QAE7B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,MAAM,aAAa,GAAG,KAAK,EAAE,OAAiB,EAAE,EAAE;QACjD,IAAI,aAAa,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAEvE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEnE,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACP,IACC,OAAO,KAAK,SAAS;gBACrB,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,OAAO,EAC7C,CAAC;gBACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC1D,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBAClD,aAAa,GAAG,IAAI,CAAC;gBAErB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAClB,GAAG,EAAE,+HAA+H;oBACpI,IAAI,EAAE;wBACL,OAAO;wBACP,KAAK;qBACL;iBACD,CAAC,CAAC,CAAC;gBACJ,OAAO;YACR,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;YAE9B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,6BAA6B;gBAClC,IAAI,EAAE;oBACL,IAAI,EAAE,UAAU,CAAC,MAAM;iBACvB;aACD,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,kBAAkB,CACvB,MAAM,EACN,KAAK,EACL;QAEC,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,IAAI,QAAQ,EAAE;KACpB,EACD,aAAa,EACb,GAAG,EAAE,CAAC,aAAa,CACnB,CAAC;IAEF,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC/B,MAAuB,EACvB,KAAa,EACb,gBAA8C,EAC9C,WAAiD,EACjD,UAA0B,EACV,EAAE;IAClB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,mBAAmB,CACvD,6BAA6B,EAC7B,KAAK,EACL,gBAAgB,CAChB,CAAC;IAEF,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAEjC,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,UAAU,CAC5C,6BAA6B,EAC7B,MAAM,EACN,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CACjC,CAAC;QAEF,MAAM,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,CAAC;AACF,CAAC,CAAC"}

package/dist/tsc/redis/reader/redisRulesQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesQuery.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesQuery.ts"],"names":[],"mappings":"AAsBA,OAAO,EACN,KAAK,iBAAiB,EAEtB,MAAM,yBAAyB,CAAC;AAcjC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAmLrC,eAAO,MAAM,kBAAkB,oBAAqB,OAAO,KAAG,MAGA,CAAC;AAY/D,eAAO,MAAM,kBAAkB,WACtB,iBAAiB,sBACL,OAAO,KACzB,MAgCF,CAAC"}

package/dist/tsc/redis/reader/redisRulesQuery.js

@@ -0,0 +1,124 @@
+import { AccessPolicyType, GLOBAL_CLIENT_SCOPE_SENTINEL, } from "#policy/rule.js";
+import { userScopeSchema } from "#policy/ruleInput/userScopeInput.js";
+import { FilterScopeMatch, } from "#policy/rulesStorage.js";
+const escapeTagValue = (value) => {
+    return value.replace(/([,.<>{}\[\]"':;!@#$%^&*()\-+=~|/\\])/g, "\\$1");
+};
+export const REDIS_QUERY_DIALECT = 2;
+const userIpQueries = {
+    numericIp: (value, scope) => {
+        if (undefined !== value) {
+            return `( @numericIp:[${value} ${value}] | ( @numericIpMaskMin:[-inf ${value}] @numericIpMaskMax:[${value} +inf] ) )`;
+        }
+        if (scope.numericIpMaskMin === undefined &&
+            scope.numericIpMaskMax === undefined) {
+            return "ismissing(@numericIp) ismissing(@numericIpMaskMin) ismissing(@numericIpMaskMax)";
+        }
+        return "";
+    },
+    numericIpMaskMin: (value, scope) => {
+        if (scope.numericIp !== undefined) {
+            return "";
+        }
+        if (value === undefined && scope.numericIpMaskMax === undefined) {
+            return "";
+        }
+        return value !== undefined
+            ? `@numericIpMaskMin:[-inf ${value}]`
+            : "ismissing(@numericIpMaskMin)";
+    },
+    numericIpMaskMax: (value, scope) => {
+        if (scope.numericIp !== undefined) {
+            return "";
+        }
+        if (value === undefined && scope.numericIpMaskMin === undefined) {
+            return "";
+        }
+        return value !== undefined
+            ? `@numericIpMaskMax:[${value} +inf]`
+            : "ismissing(@numericIpMaskMax)";
+    },
+};
+const getUserScopeQuery = (userScope, FilterScopeMatchType, matchingFieldsOnly) => {
+    let scopeEntries = Object.entries(userScope);
+    let scopeJoinType = " ";
+    if (FilterScopeMatchType === FilterScopeMatch.Greedy) {
+        scopeEntries = scopeEntries.filter(([_, value]) => value !== undefined);
+        scopeJoinType = " | ";
+    }
+    if (matchingFieldsOnly) {
+        const scopeMap = new Map(scopeEntries);
+        if (scopeMap.has("numericIp") && scopeMap.get("numericIp") === undefined) {
+            scopeMap.set("numericIpMaskMin", undefined);
+            scopeMap.set("numericIpMaskMax", undefined);
+        }
+        for (const name of Object.keys(userScopeSchema.shape)) {
+            if (!scopeMap.has(name)) {
+                scopeMap.set(name, undefined);
+            }
+        }
+        scopeEntries = [...scopeMap.entries()];
+    }
+    const scopeObj = Object.fromEntries(scopeEntries);
+    return scopeEntries
+        .map(([scopeFieldName, scopeFieldValue]) => getUserScopeFieldQuery(scopeFieldName, scopeFieldValue, FilterScopeMatchType, scopeObj))
+        .filter(Boolean)
+        .join(scopeJoinType);
+};
+const FIELDS_REQUIRING_ESCAPE = new Set([
+    "coords",
+    "webBotAuthAgent",
+]);
+const NUMERIC_FIELDS = new Set(["asn"]);
+const getUserScopeFieldQuery = (fieldName, fieldValue, scopeMatch, fullScope) => {
+    if (fieldName in userIpQueries) {
+        const queryBuilder = userIpQueries[fieldName];
+        return queryBuilder(fieldValue, fullScope);
+    }
+    if (undefined === fieldValue) {
+        return `ismissing(@${fieldName})`;
+    }
+    const stringValue = String(fieldValue);
+    if (NUMERIC_FIELDS.has(fieldName)) {
+        return `@${fieldName}:[${stringValue} ${stringValue}]`;
+    }
+    const queryValue = FIELDS_REQUIRING_ESCAPE.has(fieldName)
+        ? escapeTagValue(stringValue)
+        : stringValue;
+    return `@${fieldName}:{${queryValue}}`;
+};
+const GLOBAL_MATCH_CLAUSE_INNER = `@clientId:{${GLOBAL_CLIENT_SCOPE_SENTINEL}} | ismissing(@clientId)`;
+const getPolicyScopeQuery = (policyScope, scopeMatch) => {
+    const clientId = policyScope?.clientId;
+    if ("string" === typeof clientId) {
+        return FilterScopeMatch.Exact === scopeMatch
+            ? `@clientId:{${clientId}}`
+            : `( @clientId:{${clientId}} | ${GLOBAL_MATCH_CLAUSE_INNER} )`;
+    }
+    return FilterScopeMatch.Exact === scopeMatch
+        ? `( ${GLOBAL_MATCH_CLAUSE_INNER} )`
+        : "";
+};
+export const getBlockPoolClause = (includeDeferred) => includeDeferred
+    ? `(@type:{${AccessPolicyType.Block}} | @deferToVerify:{true})`
+    : `@type:{${AccessPolicyType.Block}} -@deferToVerify:{true}`;
+export const getRulesRedisQuery = (filter, matchingFieldsOnly) => {
+    const { policyScope, userScope } = filter;
+    const queryParts = [];
+    if (filter.groupId) {
+        queryParts.push(`@groupId:{${filter.groupId}}`);
+    }
+    if (filter.blockOnly) {
+        queryParts.push(getBlockPoolClause(filter.includeDeferred === true));
+    }
+    const policyScopeQuery = getPolicyScopeQuery(policyScope, filter.policyScopeMatch);
+    if (policyScopeQuery) {
+        queryParts.push(policyScopeQuery);
+    }
+    if (userScope && Object.keys(userScope).length > 0) {
+        const userScopeFilter = getUserScopeQuery(userScope, filter.userScopeMatch, matchingFieldsOnly);
+        queryParts.push(`( ${userScopeFilter} )`);
+    }
+    return queryParts.length > 0 ? queryParts.join(" ") : "*";
+};
+//# sourceMappingURL=redisRulesQuery.js.map

package/dist/tsc/redis/reader/redisRulesQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesQuery.js","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesQuery.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,gBAAgB,EAChB,4BAA4B,GAI5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAEN,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AAQjC,MAAM,cAAc,GAAG,CAAC,KAAa,EAAU,EAAE;IAEhD,OAAO,KAAK,CAAC,OAAO,CAAC,wCAAwC,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,aAAa,GAAuC;IACzD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,iBAAiB,KAAK,IAAI,KAAK,iCAAiC,KAAK,wBAAwB,KAAK,YAAY,CAAC;QACvH,CAAC;QAED,IACC,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACpC,KAAK,CAAC,gBAAgB,KAAK,SAAS,EACnC,CAAC;YACF,OAAO,iFAAiF,CAAC;QAC1F,CAAC;QAED,OAAO,EAAE,CAAC;IACX,CAAC;IACD,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACjE,OAAO,EAAE,CAAC;QACX,CAAC;QACD,OAAO,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,2BAA2B,KAAK,GAAG;YACrC,CAAC,CAAC,8BAA8B,CAAC;IACnC,CAAC;IACD,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACjE,OAAO,EAAE,CAAC;QACX,CAAC;QACD,OAAO,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,sBAAsB,KAAK,QAAQ;YACrC,CAAC,CAAC,8BAA8B,CAAC;IACnC,CAAC;CACD,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACzB,SAAoB,EACpB,oBAAkD,EAClD,kBAA2B,EAClB,EAAE;IACX,IAAI,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAE1C,CAAC;IACF,IAAI,aAAa,GAAG,GAAG,CAAC;IAGxB,IAAI,oBAAoB,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACtD,YAAY,GAAG,YAAY,CAAC,MAAM,CACjC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CACE,CAAC;QACvC,aAAa,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAA2B,YAAY,CAAC,CAAC;QAGjE,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1E,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC5C,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;QAGD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAEnD,EAAE,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;QAED,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAuB,CAAC;IAExE,OAAO,YAAY;SACjB,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,EAAE,EAAE,CAC1C,sBAAsB,CACrB,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,QAAQ,CACR,CACD;SACA,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,aAAa,CAAC,CAAC;AACvB,CAAC,CAAC;AAGF,MAAM,uBAAuB,GAAiC,IAAI,GAAG,CAAC;IACrE,QAAQ;IACR,iBAAiB;CACjB,CAAC,CAAC;AAIH,MAAM,cAAc,GAAiC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAEtE,MAAM,sBAAsB,GAAG,CAC9B,SAA0B,EAC1B,UAAmB,EACnB,UAAwC,EACxC,SAA6B,EACpB,EAAE;IACX,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAyB,CAAC,CAAC;QAE9D,OAAO,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,cAAc,SAAS,GAAG,CAAC;IACnC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEvC,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,SAAS,KAAK,WAAW,IAAI,WAAW,GAAG,CAAC;IACxD,CAAC;IAGD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC;QACxD,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC;QAC7B,CAAC,CAAC,WAAW,CAAC;IAEf,OAAO,IAAI,SAAS,KAAK,UAAU,GAAG,CAAC;AACxC,CAAC,CAAC;AAOF,MAAM,yBAAyB,GAAG,cAAc,4BAA4B,0BAA0B,CAAC;AAEvG,MAAM,mBAAmB,GAAG,CAC3B,WAAoC,EACpC,UAAwC,EAC/B,EAAE;IACX,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,CAAC;IAEvC,IAAI,QAAQ,KAAK,OAAO,QAAQ,EAAE,CAAC;QAClC,OAAO,gBAAgB,CAAC,KAAK,KAAK,UAAU;YAC3C,CAAC,CAAC,cAAc,QAAQ,GAAG;YAC3B,CAAC,CAAC,gBAAgB,QAAQ,OAAO,yBAAyB,IAAI,CAAC;IACjE,CAAC;IAED,OAAO,gBAAgB,CAAC,KAAK,KAAK,UAAU;QAC3C,CAAC,CAAC,KAAK,yBAAyB,IAAI;QACpC,CAAC,CAAC,EAAE,CAAC;AACP,CAAC,CAAC;AAoBF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,eAAwB,EAAU,EAAE,CACtE,eAAe;IACd,CAAC,CAAC,WAAW,gBAAgB,CAAC,KAAK,4BAA4B;IAC/D,CAAC,CAAC,UAAU,gBAAgB,CAAC,KAAK,0BAA0B,CAAC;AAY/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CACjC,MAAyB,EACzB,kBAA2B,EAClB,EAAE;IACX,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC1C,MAAM,UAAU,GAAG,EAAE,CAAC;IAEtB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,gBAAgB,GAAG,mBAAmB,CAC3C,WAAW,EACX,MAAM,CAAC,gBAAgB,CACvB,CAAC;IAEF,IAAI,gBAAgB,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,eAAe,GAAG,iBAAiB,CACxC,SAAS,EACT,MAAM,CAAC,cAAc,EACrB,kBAAkB,CAClB,CAAC;QAEF,UAAU,CAAC,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3D,CAAC,CAAC"}

package/dist/tsc/redis/reader/redisRulesReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesReader.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesReader.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAgB7C,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,KAAK,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAuBjC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AA4HzC,qBAAa,gBAAiB,YAAW,iBAAiB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM;IAG1B,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAazD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;YAoDV,cAAc;YA4Hd,eAAe;YA0Hf,eAAe;IAuDvB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAgDd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;cAYA,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA8B5E,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;CAGlD;AAED,qBAAa,qBAAsB,YAAW,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAWvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAWzD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;IAWlB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAWd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;CAKhB"}