@prosopo/user-access-policy 3.5.27 → 3.5.28
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +17 -0
- package/package.json +9 -9
- package/coverage/base.css +0 -224
- package/coverage/block-navigation.js +0 -87
- package/coverage/clover.xml +0 -786
- package/coverage/coverage-final.json +0 -15
- package/coverage/favicon.png +0 -0
- package/coverage/index.html +0 -146
- package/coverage/prettify.css +0 -1
- package/coverage/prettify.js +0 -2
- package/coverage/sort-arrow-sprite.png +0 -0
- package/coverage/sorter.js +0 -210
- package/coverage/src/accessPolicy.ts.html +0 -457
- package/coverage/src/accessPolicyResolver.ts.html +0 -211
- package/coverage/src/accessRules.ts.html +0 -265
- package/coverage/src/api/accessRuleApiRoutes.ts.html +0 -379
- package/coverage/src/api/accessRulesApiClient.ts.html +0 -274
- package/coverage/src/api/deleteAllRulesEndpoint.ts.html +0 -229
- package/coverage/src/api/deleteRulesEndpoint.ts.html +0 -301
- package/coverage/src/api/index.html +0 -176
- package/coverage/src/api/insertRulesEndpoint.ts.html +0 -436
- package/coverage/src/index.html +0 -176
- package/coverage/src/index.ts.html +0 -277
- package/coverage/src/redis/index.html +0 -161
- package/coverage/src/redis/redisRulesIndex.ts.html +0 -769
- package/coverage/src/redis/redisRulesReader.ts.html +0 -652
- package/coverage/src/redis/redisRulesStorage.ts.html +0 -229
- package/coverage/src/redis/redisRulesWriter.ts.html +0 -424
- package/coverage/src/util.ts.html +0 -136
- package/dist/.export.d.ts +0 -6
- package/dist/.export.d.ts.map +0 -1
- package/dist/.export.js.map +0 -1
- package/dist/accessPolicy.d.ts +0 -169
- package/dist/accessPolicy.d.ts.map +0 -1
- package/dist/accessPolicy.js +0 -80
- package/dist/accessPolicy.js.map +0 -1
- package/dist/accessPolicyResolver.d.ts +0 -110
- package/dist/accessPolicyResolver.d.ts.map +0 -1
- package/dist/accessPolicyResolver.js +0 -31
- package/dist/accessPolicyResolver.js.map +0 -1
- package/dist/accessRules.d.ts +0 -16
- package/dist/accessRules.d.ts.map +0 -1
- package/dist/accessRules.js +0 -11
- package/dist/accessRules.js.map +0 -1
- package/dist/api/.export.d.ts +0 -7
- package/dist/api/.export.d.ts.map +0 -1
- package/dist/api/.export.js.map +0 -1
- package/dist/api/accessRuleApiRoutes.d.ts +0 -27
- package/dist/api/accessRuleApiRoutes.d.ts.map +0 -1
- package/dist/api/accessRuleApiRoutes.js +0 -79
- package/dist/api/accessRuleApiRoutes.js.map +0 -1
- package/dist/api/accessRulesApiClient.d.ts +0 -10
- package/dist/api/accessRulesApiClient.d.ts.map +0 -1
- package/dist/api/accessRulesApiClient.js +0 -38
- package/dist/api/accessRulesApiClient.js.map +0 -1
- package/dist/api/delete/.export.d.ts +0 -2
- package/dist/api/delete/.export.d.ts.map +0 -1
- package/dist/api/delete/.export.js.map +0 -1
- package/dist/api/delete/deleteAllRules.d.ts +0 -11
- package/dist/api/delete/deleteAllRules.d.ts.map +0 -1
- package/dist/api/delete/deleteAllRules.js.map +0 -1
- package/dist/api/delete/deleteRuleGroups.d.ts +0 -19
- package/dist/api/delete/deleteRuleGroups.d.ts.map +0 -1
- package/dist/api/delete/deleteRuleGroups.js.map +0 -1
- package/dist/api/delete/deleteRules.d.ts +0 -15
- package/dist/api/delete/deleteRules.d.ts.map +0 -1
- package/dist/api/delete/deleteRules.js.map +0 -1
- package/dist/api/deleteAllRulesEndpoint.d.ts +0 -12
- package/dist/api/deleteAllRulesEndpoint.d.ts.map +0 -1
- package/dist/api/deleteAllRulesEndpoint.js +0 -24
- package/dist/api/deleteAllRulesEndpoint.js.map +0 -1
- package/dist/api/deleteRulesEndpoint.d.ts +0 -116
- package/dist/api/deleteRulesEndpoint.d.ts.map +0 -1
- package/dist/api/deleteRulesEndpoint.js +0 -34
- package/dist/api/deleteRulesEndpoint.js.map +0 -1
- package/dist/api/insertRulesEndpoint.d.ts +0 -22
- package/dist/api/insertRulesEndpoint.d.ts.map +0 -1
- package/dist/api/insertRulesEndpoint.js +0 -62
- package/dist/api/insertRulesEndpoint.js.map +0 -1
- package/dist/api/read/.export.d.ts +0 -4
- package/dist/api/read/.export.d.ts.map +0 -1
- package/dist/api/read/.export.js.map +0 -1
- package/dist/api/read/fetchRules.d.ts +0 -53
- package/dist/api/read/fetchRules.d.ts.map +0 -1
- package/dist/api/read/fetchRules.js.map +0 -1
- package/dist/api/read/findRuleIds.d.ts +0 -28
- package/dist/api/read/findRuleIds.d.ts.map +0 -1
- package/dist/api/read/findRuleIds.js.map +0 -1
- package/dist/api/read/getMissingIds.d.ts +0 -28
- package/dist/api/read/getMissingIds.d.ts.map +0 -1
- package/dist/api/read/getMissingIds.js.map +0 -1
- package/dist/api/ruleApiRoutes.d.ts +0 -43
- package/dist/api/ruleApiRoutes.d.ts.map +0 -1
- package/dist/api/ruleApiRoutes.js.map +0 -1
- package/dist/api/rulesApiClient.d.ts +0 -20
- package/dist/api/rulesApiClient.d.ts.map +0 -1
- package/dist/api/rulesApiClient.js.map +0 -1
- package/dist/api/write/.export.d.ts +0 -2
- package/dist/api/write/.export.d.ts.map +0 -1
- package/dist/api/write/.export.js.map +0 -1
- package/dist/api/write/insertRules.d.ts +0 -29
- package/dist/api/write/insertRules.d.ts.map +0 -1
- package/dist/api/write/insertRules.js.map +0 -1
- package/dist/api/write/rehashRules.d.ts +0 -11
- package/dist/api/write/rehashRules.d.ts.map +0 -1
- package/dist/api/write/rehashRules.js.map +0 -1
- package/dist/cjs/accessPolicy.cjs +0 -80
- package/dist/cjs/accessPolicyResolver.cjs +0 -31
- package/dist/cjs/accessRules.cjs +0 -11
- package/dist/cjs/api/accessRuleApiRoutes.cjs +0 -79
- package/dist/cjs/api/deleteAllRulesEndpoint.cjs +0 -24
- package/dist/cjs/api/deleteRulesEndpoint.cjs +0 -34
- package/dist/cjs/api/insertRulesEndpoint.cjs +0 -62
- package/dist/cjs/index.cjs +0 -29
- package/dist/cjs/redis/redisAccessRules.cjs +0 -152
- package/dist/cjs/redis/redisAccessRulesIndex.cjs +0 -171
- package/dist/cjs/redis/redisIndex.cjs +0 -22
- package/dist/cjs/util.cjs +0 -5
- package/dist/index.d.ts +0 -15
- package/dist/index.d.ts.map +0 -1
- package/dist/index.js +0 -32
- package/dist/index.js.map +0 -1
- package/dist/mongoose/.export.d.ts +0 -2
- package/dist/mongoose/.export.d.ts.map +0 -1
- package/dist/mongoose/.export.js.map +0 -1
- package/dist/mongoose/mongooseRuleSchema.d.ts +0 -4
- package/dist/mongoose/mongooseRuleSchema.d.ts.map +0 -1
- package/dist/mongoose/mongooseRuleSchema.js.map +0 -1
- package/dist/redis/.export.d.ts +0 -3
- package/dist/redis/.export.d.ts.map +0 -1
- package/dist/redis/.export.js.map +0 -1
- package/dist/redis/reader/redisAggregate.d.ts +0 -4
- package/dist/redis/reader/redisAggregate.d.ts.map +0 -1
- package/dist/redis/reader/redisAggregate.js.map +0 -1
- package/dist/redis/reader/redisRulesQuery.d.ts +0 -4
- package/dist/redis/reader/redisRulesQuery.d.ts.map +0 -1
- package/dist/redis/reader/redisRulesQuery.js.map +0 -1
- package/dist/redis/reader/redisRulesReader.d.ts +0 -26
- package/dist/redis/reader/redisRulesReader.d.ts.map +0 -1
- package/dist/redis/reader/redisRulesReader.js.map +0 -1
- package/dist/redis/redisAccessRules.d.ts +0 -7
- package/dist/redis/redisAccessRules.d.ts.map +0 -1
- package/dist/redis/redisAccessRules.js +0 -119
- package/dist/redis/redisAccessRules.js.map +0 -1
- package/dist/redis/redisAccessRulesIndex.d.ts +0 -13
- package/dist/redis/redisAccessRulesIndex.d.ts.map +0 -1
- package/dist/redis/redisAccessRulesIndex.js +0 -140
- package/dist/redis/redisAccessRulesIndex.js.map +0 -1
- package/dist/redis/redisClient.d.ts +0 -11
- package/dist/redis/redisClient.d.ts.map +0 -1
- package/dist/redis/redisClient.js.map +0 -1
- package/dist/redis/redisIndex.d.ts +0 -9
- package/dist/redis/redisIndex.d.ts.map +0 -1
- package/dist/redis/redisIndex.js +0 -23
- package/dist/redis/redisIndex.js.map +0 -1
- package/dist/redis/redisRuleIndex.d.ts +0 -13
- package/dist/redis/redisRuleIndex.d.ts.map +0 -1
- package/dist/redis/redisRuleIndex.js.map +0 -1
- package/dist/redis/redisRulesIndex.d.ts +0 -9
- package/dist/redis/redisRulesIndex.d.ts.map +0 -1
- package/dist/redis/redisRulesIndex.js +0 -138
- package/dist/redis/redisRulesIndex.js.map +0 -1
- package/dist/redis/redisRulesReader.d.ts +0 -6
- package/dist/redis/redisRulesReader.d.ts.map +0 -1
- package/dist/redis/redisRulesReader.js +0 -125
- package/dist/redis/redisRulesReader.js.map +0 -1
- package/dist/redis/redisRulesStorage.d.ts +0 -5
- package/dist/redis/redisRulesStorage.d.ts.map +0 -1
- package/dist/redis/redisRulesStorage.js.map +0 -1
- package/dist/redis/redisRulesWriter.d.ts +0 -22
- package/dist/redis/redisRulesWriter.d.ts.map +0 -1
- package/dist/redis/redisRulesWriter.js.map +0 -1
- package/dist/rule.d.ts +0 -34
- package/dist/rule.d.ts.map +0 -1
- package/dist/rule.js.map +0 -1
- package/dist/ruleInput/.export.d.ts +0 -4
- package/dist/ruleInput/.export.d.ts.map +0 -1
- package/dist/ruleInput/.export.js.map +0 -1
- package/dist/ruleInput/policyInput.d.ts +0 -38
- package/dist/ruleInput/policyInput.d.ts.map +0 -1
- package/dist/ruleInput/policyInput.js.map +0 -1
- package/dist/ruleInput/ruleInput.d.ts +0 -145
- package/dist/ruleInput/ruleInput.d.ts.map +0 -1
- package/dist/ruleInput/ruleInput.js.map +0 -1
- package/dist/ruleInput/userScopeInput.d.ts +0 -93
- package/dist/ruleInput/userScopeInput.d.ts.map +0 -1
- package/dist/ruleInput/userScopeInput.js.map +0 -1
- package/dist/ruleRecord.d.ts +0 -18
- package/dist/ruleRecord.d.ts.map +0 -1
- package/dist/ruleRecord.js.map +0 -1
- package/dist/rulesStorage.d.ts +0 -30
- package/dist/rulesStorage.d.ts.map +0 -1
- package/dist/rulesStorage.js.map +0 -1
- package/dist/tests/accessPolicy.test.d.ts +0 -2
- package/dist/tests/accessPolicy.test.d.ts.map +0 -1
- package/dist/tests/accessPolicy.test.js +0 -27
- package/dist/tests/accessPolicy.test.js.map +0 -1
- package/dist/tests/redis/reader/redisRulesQuery.unit.test.d.ts +0 -2
- package/dist/tests/redis/reader/redisRulesQuery.unit.test.d.ts.map +0 -1
- package/dist/tests/redis/reader/redisRulesQuery.unit.test.js +0 -101
- package/dist/tests/redis/reader/redisRulesQuery.unit.test.js.map +0 -1
- package/dist/tests/redis/redisAccessRules.integration.test.d.ts +0 -2
- package/dist/tests/redis/redisAccessRules.integration.test.d.ts.map +0 -1
- package/dist/tests/redis/redisAccessRules.integration.test.js +0 -586
- package/dist/tests/redis/redisAccessRules.integration.test.js.map +0 -1
- package/dist/tests/redis/redisAccessRules.unit.test.d.ts +0 -2
- package/dist/tests/redis/redisAccessRules.unit.test.d.ts.map +0 -1
- package/dist/tests/redis/redisAccessRules.unit.test.js +0 -198
- package/dist/tests/redis/redisAccessRules.unit.test.js.map +0 -1
- package/dist/tests/redis/redisIndex.integration.test.d.ts +0 -2
- package/dist/tests/redis/redisIndex.integration.test.d.ts.map +0 -1
- package/dist/tests/redis/redisIndex.integration.test.js +0 -80
- package/dist/tests/redis/redisIndex.integration.test.js.map +0 -1
- package/dist/tests/redis/redisRulesIndex.unit.test.d.ts +0 -2
- package/dist/tests/redis/redisRulesIndex.unit.test.d.ts.map +0 -1
- package/dist/tests/redis/redisRulesIndex.unit.test.js +0 -101
- package/dist/tests/redis/redisRulesIndex.unit.test.js.map +0 -1
- package/dist/tests/redis/redisRulesStorage.integration.test.d.ts +0 -2
- package/dist/tests/redis/redisRulesStorage.integration.test.d.ts.map +0 -1
- package/dist/tests/redis/redisRulesStorage.integration.test.js +0 -611
- package/dist/tests/redis/redisRulesStorage.integration.test.js.map +0 -1
- package/dist/tests/redis/testRedisClient.d.ts +0 -3
- package/dist/tests/redis/testRedisClient.d.ts.map +0 -1
- package/dist/tests/redis/testRedisClient.js +0 -8
- package/dist/tests/redis/testRedisClient.js.map +0 -1
- package/dist/tests/testLogger.d.ts +0 -4
- package/dist/tests/testLogger.d.ts.map +0 -1
- package/dist/tests/testLogger.js +0 -22
- package/dist/tests/testLogger.js.map +0 -1
- package/dist/tests/transformRule.unit.test.d.ts +0 -2
- package/dist/tests/transformRule.unit.test.d.ts.map +0 -1
- package/dist/tests/transformRule.unit.test.js +0 -188
- package/dist/tests/transformRule.unit.test.js.map +0 -1
- package/dist/transformRule.d.ts +0 -7
- package/dist/transformRule.d.ts.map +0 -1
- package/dist/transformRule.js.map +0 -1
- package/dist/util.d.ts +0 -2
- package/dist/util.d.ts.map +0 -1
- package/dist/util.js +0 -5
- package/dist/util.js.map +0 -1
|
@@ -1,171 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
|
|
3
|
-
const crypto = require("node:crypto");
|
|
4
|
-
const search = require("@redis/search");
|
|
5
|
-
const accessPolicy = require("../accessPolicy.cjs");
|
|
6
|
-
const accessPolicyResolver = require("../accessPolicyResolver.cjs");
|
|
7
|
-
const redisIndex = require("./redisIndex.cjs");
|
|
8
|
-
const accessRulesRedisIndexName = "index:user-access-rules";
|
|
9
|
-
const accessRuleRedisKeyPrefix = "uar:";
|
|
10
|
-
const accessRuleContentHashAlgorithm = "md5";
|
|
11
|
-
const DEFAULT_SEARCH_LIMIT = 1e3;
|
|
12
|
-
const accessRulesIndex = {
|
|
13
|
-
name: accessRulesRedisIndexName,
|
|
14
|
-
/**
|
|
15
|
-
* Note on the field type decision
|
|
16
|
-
*
|
|
17
|
-
* TAG is designed for the exact value matching
|
|
18
|
-
* TEXT is designed for the word-based and pattern matching
|
|
19
|
-
*
|
|
20
|
-
* For our goal TAG fits perfectly and, more performant
|
|
21
|
-
*/
|
|
22
|
-
schema: {
|
|
23
|
-
clientId: {
|
|
24
|
-
type: search.SCHEMA_FIELD_TYPE.TAG,
|
|
25
|
-
// necessary to make possible use of the ismissing() function on this field in the search
|
|
26
|
-
INDEXMISSING: true
|
|
27
|
-
},
|
|
28
|
-
numericIpMaskMin: { type: search.SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
|
|
29
|
-
numericIpMaskMax: { type: search.SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
|
|
30
|
-
userId: { type: search.SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
|
|
31
|
-
numericIp: { type: search.SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
|
|
32
|
-
ja4Hash: { type: search.SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
|
|
33
|
-
headersHash: { type: search.SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
|
|
34
|
-
userAgentHash: { type: search.SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true }
|
|
35
|
-
},
|
|
36
|
-
// the satisfy statement is to guarantee that the keys are right
|
|
37
|
-
options: {
|
|
38
|
-
ON: "HASH",
|
|
39
|
-
PREFIX: [accessRuleRedisKeyPrefix]
|
|
40
|
-
}
|
|
41
|
-
};
|
|
42
|
-
const createRedisAccessRulesIndex = async (client, indexName) => {
|
|
43
|
-
if (indexName) {
|
|
44
|
-
accessRulesIndex.name = indexName;
|
|
45
|
-
}
|
|
46
|
-
return redisIndex.createRedisIndex(client, accessRulesIndex);
|
|
47
|
-
};
|
|
48
|
-
const numericIndexFields = [
|
|
49
|
-
"numericIp",
|
|
50
|
-
"numericIpMaskMin",
|
|
51
|
-
"numericIpMaskMax"
|
|
52
|
-
];
|
|
53
|
-
const greedyFieldComparisons = {
|
|
54
|
-
numericIp: (value, scope) => {
|
|
55
|
-
if (value !== void 0) {
|
|
56
|
-
return `( @numericIp:[${value}] | ( @numericIpMaskMin:[-inf ${value}] @numericIpMaskMax:[${value} +inf] ) )`;
|
|
57
|
-
}
|
|
58
|
-
if (scope.numericIpMaskMin === void 0 && scope.numericIpMaskMax === void 0) {
|
|
59
|
-
return "ismissing(@numericIp) ismissing(@numericIpMaskMin) ismissing(@numericIpMaskMax)";
|
|
60
|
-
}
|
|
61
|
-
return "";
|
|
62
|
-
},
|
|
63
|
-
numericIpMaskMin: (value, scope) => {
|
|
64
|
-
if (scope.numericIp !== void 0) {
|
|
65
|
-
return "";
|
|
66
|
-
}
|
|
67
|
-
return value !== void 0 ? `@numericIpMaskMin:[-inf ${value}]` : "ismissing(@numericIpMaskMin)";
|
|
68
|
-
},
|
|
69
|
-
numericIpMaskMax: (value, scope) => {
|
|
70
|
-
if (scope.numericIp !== void 0) {
|
|
71
|
-
return "";
|
|
72
|
-
}
|
|
73
|
-
return value !== void 0 ? `@numericIpMaskMax:[${value} +inf]` : "ismissing(@numericIpMaskMax)";
|
|
74
|
-
}
|
|
75
|
-
};
|
|
76
|
-
const accessRulesRedisSearchOptions = {
|
|
77
|
-
// #2 is a required option when the 'ismissing()' function is in the query body
|
|
78
|
-
DIALECT: 2
|
|
79
|
-
};
|
|
80
|
-
const accessRulesRedisDeleteOptions = {
|
|
81
|
-
// #2 is a required option when the 'ismissing()' function is in the query body
|
|
82
|
-
DIALECT: 2,
|
|
83
|
-
LIMIT: {
|
|
84
|
-
from: 0,
|
|
85
|
-
size: DEFAULT_SEARCH_LIMIT
|
|
86
|
-
}
|
|
87
|
-
};
|
|
88
|
-
const getRedisAccessRulesQuery = (filter, matchingFieldsOnly) => {
|
|
89
|
-
const { policyScope, userScope } = filter;
|
|
90
|
-
const policyScopeFilter = getPolicyScopeQuery(
|
|
91
|
-
policyScope,
|
|
92
|
-
filter.policyScopeMatch
|
|
93
|
-
);
|
|
94
|
-
if (userScope && Object.keys(userScope).length > 0) {
|
|
95
|
-
const userScopeFilter = getUserScopeQuery(
|
|
96
|
-
userScope,
|
|
97
|
-
filter.userScopeMatch,
|
|
98
|
-
matchingFieldsOnly
|
|
99
|
-
);
|
|
100
|
-
return `${policyScopeFilter} ( ${userScopeFilter} )`;
|
|
101
|
-
}
|
|
102
|
-
return policyScopeFilter ? policyScopeFilter : "*";
|
|
103
|
-
};
|
|
104
|
-
const getPolicyScopeQuery = (policyScope, scopeMatchType) => {
|
|
105
|
-
const clientId = policyScope?.clientId;
|
|
106
|
-
if ("string" === typeof clientId) {
|
|
107
|
-
return accessPolicyResolver.ScopeMatch.Exact === scopeMatchType ? `@clientId:{${clientId}}` : `( @clientId:{${clientId}} | ismissing(@clientId) )`;
|
|
108
|
-
}
|
|
109
|
-
return accessPolicyResolver.ScopeMatch.Exact === scopeMatchType ? "ismissing(@clientId)" : "";
|
|
110
|
-
};
|
|
111
|
-
const getUserScopeQuery = (userScope, scopeMatchType, matchingFieldsOnly) => {
|
|
112
|
-
let scopeEntries = Object.entries(userScope);
|
|
113
|
-
let scopeJoinType = " ";
|
|
114
|
-
if (scopeMatchType === accessPolicyResolver.ScopeMatch.Greedy) {
|
|
115
|
-
scopeEntries = scopeEntries.filter(
|
|
116
|
-
([_, value]) => value !== void 0
|
|
117
|
-
);
|
|
118
|
-
scopeJoinType = " | ";
|
|
119
|
-
}
|
|
120
|
-
if (matchingFieldsOnly) {
|
|
121
|
-
const scopeMap = new Map(scopeEntries);
|
|
122
|
-
if (scopeMap.has("numericIp") && scopeMap.get("numericIp") === void 0) {
|
|
123
|
-
scopeMap.set("numericIpMaskMin", void 0);
|
|
124
|
-
scopeMap.set("numericIpMaskMax", void 0);
|
|
125
|
-
}
|
|
126
|
-
for (const name of Object.keys(accessPolicy.userScopeSchema.shape)) {
|
|
127
|
-
if (!scopeMap.has(name)) {
|
|
128
|
-
scopeMap.set(name, void 0);
|
|
129
|
-
}
|
|
130
|
-
}
|
|
131
|
-
scopeEntries = [...scopeMap.entries()];
|
|
132
|
-
}
|
|
133
|
-
const scopeObj = Object.fromEntries(scopeEntries);
|
|
134
|
-
return scopeEntries.map(
|
|
135
|
-
([scopeFieldName, scopeFieldValue]) => getUserScopeFieldQuery(
|
|
136
|
-
scopeFieldName,
|
|
137
|
-
scopeFieldValue,
|
|
138
|
-
scopeMatchType,
|
|
139
|
-
scopeObj
|
|
140
|
-
)
|
|
141
|
-
).filter(Boolean).join(scopeJoinType);
|
|
142
|
-
};
|
|
143
|
-
const getUserScopeFieldQuery = (fieldName, fieldValue, matchType, fullScope) => {
|
|
144
|
-
if ("function" === typeof greedyFieldComparisons[fieldName]) {
|
|
145
|
-
return greedyFieldComparisons[fieldName](fieldValue, fullScope);
|
|
146
|
-
}
|
|
147
|
-
if (fieldValue === void 0) {
|
|
148
|
-
return `ismissing(@${fieldName})`;
|
|
149
|
-
}
|
|
150
|
-
return numericIndexFields.includes(fieldName) ? `@${fieldName}:[${fieldValue}]` : `@${fieldName}:{${fieldValue}}`;
|
|
151
|
-
};
|
|
152
|
-
const getRedisAccessRuleKey = (rule) => accessRuleRedisKeyPrefix + crypto.createHash(accessRuleContentHashAlgorithm).update(
|
|
153
|
-
JSON.stringify(
|
|
154
|
-
rule,
|
|
155
|
-
(key, value) => (
|
|
156
|
-
// JSON.stringify can't handle BigInt itself: throws "Do not know how to serialize a BigInt"
|
|
157
|
-
"bigint" === typeof value ? value.toString() : value
|
|
158
|
-
)
|
|
159
|
-
)
|
|
160
|
-
).digest("hex");
|
|
161
|
-
const getRedisAccessRuleValue = (rule) => Object.fromEntries(
|
|
162
|
-
Object.entries(rule).map(([key, value]) => [key, String(value)])
|
|
163
|
-
);
|
|
164
|
-
exports.accessRuleRedisKeyPrefix = accessRuleRedisKeyPrefix;
|
|
165
|
-
exports.accessRulesRedisDeleteOptions = accessRulesRedisDeleteOptions;
|
|
166
|
-
exports.accessRulesRedisIndexName = accessRulesRedisIndexName;
|
|
167
|
-
exports.accessRulesRedisSearchOptions = accessRulesRedisSearchOptions;
|
|
168
|
-
exports.createRedisAccessRulesIndex = createRedisAccessRulesIndex;
|
|
169
|
-
exports.getRedisAccessRuleKey = getRedisAccessRuleKey;
|
|
170
|
-
exports.getRedisAccessRuleValue = getRedisAccessRuleValue;
|
|
171
|
-
exports.getRedisAccessRulesQuery = getRedisAccessRulesQuery;
|
|
@@ -1,22 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
|
|
3
|
-
const crypto = require("node:crypto");
|
|
4
|
-
const redisIndexHashesRecordKey = "_index_hashes";
|
|
5
|
-
const redisIndexHashAlgorithm = "sha256";
|
|
6
|
-
const createRedisIndex = async (client, index) => {
|
|
7
|
-
const indexHash = createIndexHash(index);
|
|
8
|
-
const existingIndexes = await client.ft._LIST();
|
|
9
|
-
if (existingIndexes.includes(index.name)) {
|
|
10
|
-
const existingIndexHash = await fetchIndexHash(client, index.name);
|
|
11
|
-
if (indexHash === existingIndexHash) {
|
|
12
|
-
return;
|
|
13
|
-
}
|
|
14
|
-
await client.ft.dropIndex(index.name);
|
|
15
|
-
}
|
|
16
|
-
await client.ft.create(index.name, index.schema, index.options);
|
|
17
|
-
await saveIndexHash(client, index.name, indexHash);
|
|
18
|
-
};
|
|
19
|
-
const createIndexHash = (index) => crypto.createHash(redisIndexHashAlgorithm).update(JSON.stringify(index)).digest("hex");
|
|
20
|
-
const fetchIndexHash = async (client, indexName) => client.hGet(redisIndexHashesRecordKey, indexName);
|
|
21
|
-
const saveIndexHash = async (client, indexName, indexHash) => client.hSet(redisIndexHashesRecordKey, indexName, indexHash);
|
|
22
|
-
exports.createRedisIndex = createRedisIndex;
|
package/dist/cjs/util.cjs
DELETED
package/dist/index.d.ts
DELETED
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
export { type AccessPolicy, AccessPolicyType, type AccessRuleExtended, type PolicyScope, type UserScope, type UserScopeApiInput, type UserScopeApiOutput, accessPolicySchema, accessRuleSchemaExtended, policyScopeSchema, } from "#policy/accessPolicy.js";
|
|
2
|
-
export { type PolicyFilter, ScopeMatch } from "#policy/accessPolicyResolver.js";
|
|
3
|
-
export { type AccessRule, type AccessRulesStorage, accessRuleSchema, } from "#policy/accessRules.js";
|
|
4
|
-
export { accessRuleApiPaths, getExpressApiRuleRateLimits, } from "#policy/api/accessRuleApiRoutes.js";
|
|
5
|
-
export { type DeleteAllRulesEndpointSchema, deleteAllRulesEndpointSchema, } from "#policy/api/deleteAllRulesEndpoint.js";
|
|
6
|
-
export { type DeleteRulesEndpointSchemaInput, type DeleteRulesEndpointSchemaOutput, deleteRulesEndpointSchema, } from "#policy/api/deleteRulesEndpoint.js";
|
|
7
|
-
export { type InsertManyRulesEndpointInputSchema, type InsertManyRulesEndpointOutputSchema, insertRulesEndpointSchema, } from "#policy/api/insertRulesEndpoint.js";
|
|
8
|
-
export { createRedisAccessRulesStorage } from "#policy/redis/redisRulesStorage.js";
|
|
9
|
-
export { userScopeInputSchema } from "./accessPolicy.js";
|
|
10
|
-
export { redisAccessRulesIndex } from "./redis/redisRulesIndex.js";
|
|
11
|
-
export { AccessRulesApiClient } from "./api/accessRulesApiClient.js";
|
|
12
|
-
import type { ApiRoutesProvider } from "@prosopo/api-route";
|
|
13
|
-
import type { AccessRulesStorage } from "#policy/accessRules.js";
|
|
14
|
-
export declare const createApiRuleRoutesProvider: (rulesStorage: AccessRulesStorage) => ApiRoutesProvider;
|
|
15
|
-
//# sourceMappingURL=index.d.ts.map
|
package/dist/index.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,YAAY,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,YAAY,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EACN,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,gBAAgB,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,kBAAkB,EAClB,2BAA2B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,KAAK,4BAA4B,EACjC,4BAA4B,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACN,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,KAAK,kCAAkC,EACvC,KAAK,mCAAmC,EACxC,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,eAAO,MAAM,2BAA2B,iBACzB,kBAAkB,KAC9B,iBAEF,CAAC"}
|
package/dist/index.js
DELETED
|
@@ -1,32 +0,0 @@
|
|
|
1
|
-
import { AccessPolicyType, accessPolicySchema, accessRuleSchemaExtended, policyScopeSchema, userScopeInputSchema } from "./accessPolicy.js";
|
|
2
|
-
import { ScopeMatch } from "./accessPolicyResolver.js";
|
|
3
|
-
import { accessRuleSchema } from "./accessRules.js";
|
|
4
|
-
import { AccessRuleApiRoutes } from "./api/accessRuleApiRoutes.js";
|
|
5
|
-
import { accessRuleApiPaths, getExpressApiRuleRateLimits } from "./api/accessRuleApiRoutes.js";
|
|
6
|
-
import { deleteAllRulesEndpointSchema } from "./api/deleteAllRulesEndpoint.js";
|
|
7
|
-
import { deleteRulesEndpointSchema } from "./api/deleteRulesEndpoint.js";
|
|
8
|
-
import { insertRulesEndpointSchema } from "./api/insertRulesEndpoint.js";
|
|
9
|
-
import { createRedisAccessRulesStorage } from "./redis/redisRulesStorage.js";
|
|
10
|
-
import { redisAccessRulesIndex } from "./redis/redisRulesIndex.js";
|
|
11
|
-
import { AccessRulesApiClient } from "./api/accessRulesApiClient.js";
|
|
12
|
-
const createApiRuleRoutesProvider = (rulesStorage) => {
|
|
13
|
-
return new AccessRuleApiRoutes(rulesStorage);
|
|
14
|
-
};
|
|
15
|
-
export {
|
|
16
|
-
AccessPolicyType,
|
|
17
|
-
AccessRulesApiClient,
|
|
18
|
-
ScopeMatch,
|
|
19
|
-
accessPolicySchema,
|
|
20
|
-
accessRuleApiPaths,
|
|
21
|
-
accessRuleSchema,
|
|
22
|
-
accessRuleSchemaExtended,
|
|
23
|
-
createApiRuleRoutesProvider,
|
|
24
|
-
createRedisAccessRulesStorage,
|
|
25
|
-
deleteAllRulesEndpointSchema,
|
|
26
|
-
deleteRulesEndpointSchema,
|
|
27
|
-
getExpressApiRuleRateLimits,
|
|
28
|
-
insertRulesEndpointSchema,
|
|
29
|
-
policyScopeSchema,
|
|
30
|
-
redisAccessRulesIndex,
|
|
31
|
-
userScopeInputSchema
|
|
32
|
-
};
|
package/dist/index.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAEN,gBAAgB,EAMhB,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAqB,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAGN,gBAAgB,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,kBAAkB,EAClB,2BAA2B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAEN,4BAA4B,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAGN,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAGN,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAIrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAC1C,YAAgC,EACZ,EAAE;IACtB,OAAO,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;AAC9C,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../src/mongoose/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":".export.js","sourceRoot":"","sources":["../../src/mongoose/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"mongooseRuleSchema.d.ts","sourceRoot":"","sources":["../../src/mongoose/mongooseRuleSchema.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjD,OAAO,KAAK,EACX,gBAAgB,EAIhB,MAAM,uBAAuB,CAAC;AAkC/B,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,gBAAgB,CAKtC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"mongooseRuleSchema.js","sourceRoot":"","sources":["../../src/mongoose/mongooseRuleSchema.ts"],"names":[],"mappings":"AAwBA,MAAM,oBAAoB,GAA2C;IACpE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACzC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC1C,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC5C,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACN,CAAC;AAE1C,MAAM,YAAY,GAAmC;IACpD,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACT,CAAC;AAElC,MAAM,eAAe,GAAsC;IAC1D,GAAG,oBAAoB;IACvB,GAAG,YAAY;CACiB,CAAC;AAElC,MAAM,iBAAiB,GAAkC;IACxD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACZ,CAAC;AAEjC,MAAM,kBAAkB,GAAmC;IAC1D,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACpD,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjD,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAChD,mBAAmB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtD,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACpB,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAuC;IAC3E,GAAG,kBAAkB;IACrB,GAAG,iBAAiB;IACpB,GAAG,eAAe;IAClB,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACb,CAAC"}
|
package/dist/redis/.export.d.ts
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../src/redis/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":".export.js","sourceRoot":"","sources":["../../src/redis/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}
|
|
@@ -1,4 +0,0 @@
|
|
|
1
|
-
import type { Logger } from "@prosopo/common";
|
|
2
|
-
import type { RedisClientType } from "redis";
|
|
3
|
-
export declare const aggregateRedisKeys: (client: RedisClientType, query: string, logger: Logger, batchHandler?: (keys: string[]) => Promise<void>) => Promise<string[]>;
|
|
4
|
-
//# sourceMappingURL=redisAggregate.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisAggregate.d.ts","sourceRoot":"","sources":["../../../src/redis/reader/redisAggregate.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAU7C,eAAO,MAAM,kBAAkB,WACtB,eAAe,SAChB,MAAM,UACL,MAAM,iBACC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,KAC9C,OAAO,CAAC,MAAM,EAAE,CA0ClB,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisAggregate.js","sourceRoot":"","sources":["../../../src/redis/reader/redisAggregate.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EACN,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAGhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACtC,MAAuB,EACvB,KAAa,EACb,MAAc,EACd,YAAgD,EAC5B,EAAE;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC;IAEzB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;QAE7B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,MAAM,aAAa,GAAG,KAAK,EAAE,OAAiB,EAAE,EAAE;QACjD,MAAM,aAAa,GAAG,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAEvE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEnE,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;YAE9B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,6BAA6B;gBAClC,IAAI,EAAE;oBACL,IAAI,EAAE,UAAU,CAAC,MAAM;iBACvB;aACD,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,kBAAkB,CACvB,MAAM,EACN,KAAK,EACL;QAEC,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,IAAI,QAAQ,EAAE;KACpB,EACD,aAAa,CACb,CAAC;IAEF,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC/B,MAAuB,EACvB,KAAa,EACb,gBAA8C,EAC9C,WAAiD,EACjC,EAAE;IAClB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,mBAAmB,CACvD,6BAA6B,EAC7B,KAAK,EACL,gBAAgB,CAChB,CAAC;IAEF,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAEjC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,UAAU,CAC5C,6BAA6B,EAC7B,MAAM,EACN,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CACjC,CAAC;QAEF,MAAM,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,CAAC;AACF,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisRulesQuery.d.ts","sourceRoot":"","sources":["../../../src/redis/reader/redisRulesQuery.ts"],"names":[],"mappings":"AAgBA,OAAO,EACN,KAAK,iBAAiB,EAEtB,MAAM,yBAAyB,CAAC;AAKjC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAmIrC,eAAO,MAAM,kBAAkB,WACtB,iBAAiB,sBACL,OAAO,KACzB,MA4BF,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisRulesQuery.js","sourceRoot":"","sources":["../../../src/redis/reader/redisRulesQuery.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAEN,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AAKjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,aAAa,GAAuC;IACzD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,iBAAiB,KAAK,IAAI,KAAK,iCAAiC,KAAK,wBAAwB,KAAK,YAAY,CAAC;QACvH,CAAC;QAED,IACC,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACpC,KAAK,CAAC,gBAAgB,KAAK,SAAS,EACnC,CAAC;YACF,OAAO,iFAAiF,CAAC;QAC1F,CAAC;QAED,OAAO,EAAE,CAAC;IACX,CAAC;IACD,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACX,CAAC;QACD,OAAO,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,2BAA2B,KAAK,GAAG;YACrC,CAAC,CAAC,8BAA8B,CAAC;IACnC,CAAC;IACD,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACX,CAAC;QACD,OAAO,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,sBAAsB,KAAK,QAAQ;YACrC,CAAC,CAAC,8BAA8B,CAAC;IACnC,CAAC;CACD,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACzB,SAAoB,EACpB,oBAAkD,EAClD,kBAA2B,EAClB,EAAE;IACX,IAAI,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAE1C,CAAC;IACF,IAAI,aAAa,GAAG,GAAG,CAAC;IAGxB,IAAI,oBAAoB,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACtD,YAAY,GAAG,YAAY,CAAC,MAAM,CACjC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CACE,CAAC;QACvC,aAAa,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAA2B,YAAY,CAAC,CAAC;QAGjE,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1E,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC5C,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;QAGD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAEnD,EAAE,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;QAED,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAuB,CAAC;IAExE,OAAO,YAAY;SACjB,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,EAAE,EAAE,CAC1C,sBAAsB,CACrB,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,QAAQ,CACR,CACD;SACA,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,aAAa,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC9B,SAA0B,EAC1B,UAAmB,EACnB,UAAwC,EACxC,SAA6B,EACpB,EAAE;IACX,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAyB,CAAC,CAAC;QAE9D,OAAO,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,SAAS,KAAK,UAAU;QAC9B,CAAC,CAAC,cAAc,SAAS,GAAG;QAC5B,CAAC,CAAC,IAAI,SAAS,KAAK,UAAU,GAAG,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC3B,WAAoC,EACpC,UAAwC,EAC/B,EAAE;IACX,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,CAAC;IAEvC,IAAI,QAAQ,KAAK,OAAO,QAAQ,EAAE,CAAC;QAClC,OAAO,gBAAgB,CAAC,KAAK,KAAK,UAAU;YAC3C,CAAC,CAAC,cAAc,QAAQ,GAAG;YAC3B,CAAC,CAAC,gBAAgB,QAAQ,4BAA4B,CAAC;IACzD,CAAC;IAED,OAAO,gBAAgB,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CACjC,MAAyB,EACzB,kBAA2B,EAClB,EAAE;IACX,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC1C,MAAM,UAAU,GAAG,EAAE,CAAC;IAEtB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,gBAAgB,GAAG,mBAAmB,CAC3C,WAAW,EACX,MAAM,CAAC,gBAAgB,CACvB,CAAC;IAEF,IAAI,gBAAgB,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,eAAe,GAAG,iBAAiB,CACxC,SAAS,EACT,MAAM,CAAC,cAAc,EACrB,kBAAkB,CAClB,CAAC;QAEF,UAAU,CAAC,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3D,CAAC,CAAC"}
|
|
@@ -1,26 +0,0 @@
|
|
|
1
|
-
import { type Logger } from "@prosopo/common";
|
|
2
|
-
import type { RedisClientType } from "redis";
|
|
3
|
-
import type { AccessRule } from "#policy/rule.js";
|
|
4
|
-
import type { AccessRuleEntry, AccessRulesFilter, AccessRulesReader } from "#policy/rulesStorage.js";
|
|
5
|
-
export declare class RedisRulesReader implements AccessRulesReader {
|
|
6
|
-
private readonly client;
|
|
7
|
-
private readonly logger;
|
|
8
|
-
constructor(client: RedisClientType, logger: Logger);
|
|
9
|
-
getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
|
|
10
|
-
fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
|
|
11
|
-
findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
|
|
12
|
-
findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
|
|
13
|
-
fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
|
|
14
|
-
protected fetchRuleEntries(keys: string[]): Promise<AccessRuleEntry[]>;
|
|
15
|
-
protected getRuleKeys(ruleIds: string[]): string[];
|
|
16
|
-
}
|
|
17
|
-
export declare class DummyRedisRulesReader implements AccessRulesReader {
|
|
18
|
-
private readonly logger;
|
|
19
|
-
constructor(logger: Logger);
|
|
20
|
-
getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
|
|
21
|
-
fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
|
|
22
|
-
findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
|
|
23
|
-
findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
|
|
24
|
-
fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
|
|
25
|
-
}
|
|
26
|
-
//# sourceMappingURL=redisRulesReader.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisRulesReader.d.ts","sourceRoot":"","sources":["../../../src/redis/reader/redisRulesReader.ts"],"names":[],"mappings":"AAeA,OAAO,EACN,KAAK,MAAM,EAGX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAe7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAGjC,qBAAa,gBAAiB,YAAW,iBAAiB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM;IAG1B,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAazD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;IAiElB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAgDd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;cAYA,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA8B5E,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;CAGlD;AAED,qBAAa,qBAAsB,YAAW,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAWvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAWzD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;IAWlB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAWd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;CAKhB"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisRulesReader.js","sourceRoot":"","sources":["../../../src/redis/reader/redisRulesReader.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAEN,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACN,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACN,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,6BAA6B,EAC7B,4BAA4B,GAC5B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAMjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,OAAO,gBAAgB;IAC5B,YACkB,MAAuB,EACvB,MAAc;QADd,WAAM,GAAN,MAAM,CAAiB;QACvB,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAEhE,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,UAAU,EACV,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAChE,CAAC;QAEF,OAAO,iBAAiB;aACtB,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAiB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAEhE,MAAM,YAAY,GAAG,MAAM,0BAA0B,CACpD,UAAU,EACV,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAC/C,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CACd,MAAyB,EACzB,kBAAkB,GAAG,KAAK,EAC1B,mBAAmB,GAAG,IAAI;QAE1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAE7D,IAAI,mBAAmB,IAAI,KAAK,KAAK,sBAAsB,EAAE,CAAC;YAE7D,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,WAAwB,CAAC;QAE7B,IAAI,CAAC;YAEJ,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CACxC,6BAA6B,EAC7B,KAAK,EACL;gBACC,OAAO,EAAE,mBAAmB;gBAE5B,KAAK,EAAE;oBACN,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,gBAAgB;iBACtB;aACD,CACD,CAAC;YAEF,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,uBAAuB;oBAC5B,IAAI,EAAE;wBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;4BACC,MAAM,EAAE,MAAM;4BACd,WAAW,EAAE,WAAW;4BACxB,KAAK,EAAE,KAAK;yBACZ,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CACf;qBACD;iBACD,CAAC,CAAC,CAAC;YACL,CAAC;QACF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;wBACC,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,MAAM;qBACd,EACD;wBACC,KAAK,EAAE,IAAI;qBACX,CACD;iBACD;gBACD,GAAG,EAAE,gCAAgC;aACrC,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,CAAC;QACX,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAEhE,OAAO,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,MAAyB,EACzB,kBAAkB,GAAG,KAAK;QAE1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAE7D,IAAI,OAAO,GAAa,EAAE,CAAC;QAE3B,IAAI,CAAC;YAEJ,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACxC,IAAI,CAAC,MAAM,EACX,KAAK,EACL,IAAI,CAAC,MAAM,CACX,CAAC;YAEF,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAClC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAClD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;wBACC,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,MAAM;qBACd,EACD;wBACC,KAAK,EAAE,IAAI;qBACX,CACD;iBACD;gBACD,GAAG,EAAE,6CAA6C;aAClD,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,oCAAoC;YACzC,IAAI,EAAE;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,QAAQ,EAAE,OAAO;aACjB;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,YAAkD;QAElD,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAc,EAAE,EAAE;YACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAChC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAClD,CAAC;YAEF,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,IAAc;QAC9C,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,CAC3D,IAAI,CAAC,MAAM,EACX,IAAI,EACJ,IAAI,CAAC,MAAM,CACX,CAAC;QACF,MAAM,OAAO,GAAsB,EAAE,CAAC;QAEtC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAEvD,IAAI,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,iBAAiB,CAC7B,CAAC,QAAQ,CAAC,EACV,eAAe,EACf,IAAI,CAAC,MAAM,CACX,CAAC,CAAC,CAAC,CAAC;gBAEL,IAAI,IAAI,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,IAAI;wBACV,oBAAoB,EAAE,WAAW,CAAC,KAAK,CAAC;qBACxC,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAES,WAAW,CAAC,OAAiB;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,4BAA4B,GAAG,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;CACD;AAED,MAAM,OAAO,qBAAqB;IACjC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,8DAA8D;YACnE,IAAI,EAAE;gBACL,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAiB;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,sDAAsD;YAC3D,IAAI,EAAE;gBACL,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,SAAS,CACd,MAAyB,EACzB,kBAAkB,GAAG,KAAK,EAC1B,mBAAmB,GAAG,IAAI;QAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,sDAAsD;YAC3D,IAAI,EAAE;gBACL,MAAM;aACN;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,MAAyB,EACzB,kBAAkB,GAAG,KAAK;QAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,wDAAwD;YAC7D,IAAI,EAAE;gBACL,MAAM;aACN;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,YAAkD;QAElD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,4DAA4D;SACjE,CAAC,CAAC,CAAC;IACL,CAAC;CACD"}
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
import type { Logger } from "@prosopo/common";
|
|
2
|
-
import type { RedisClientType } from "redis";
|
|
3
|
-
import { type AccessRulesReader, type AccessRulesStorage, type AccessRulesWriter } from "#policy/accessRules.js";
|
|
4
|
-
export declare const createRedisAccessRulesReader: (client: RedisClientType, logger: Logger) => AccessRulesReader;
|
|
5
|
-
export declare const createRedisAccessRulesWriter: (client: RedisClientType) => AccessRulesWriter;
|
|
6
|
-
export declare const createRedisAccessRulesStorage: (client: RedisClientType, logger: Logger) => AccessRulesStorage;
|
|
7
|
-
//# sourceMappingURL=redisAccessRules.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisAccessRules.d.ts","sourceRoot":"","sources":["../../src/redis/redisAccessRules.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAE7C,OAAO,EAEN,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EAEtB,MAAM,wBAAwB,CAAC;AAUhC,eAAO,MAAM,4BAA4B,WAChC,eAAe,UACf,MAAM,KACZ,iBAmGF,CAAC;AAEF,eAAO,MAAM,4BAA4B,WAChC,eAAe,KACrB,iBAoCF,CAAC;AAEF,eAAO,MAAM,6BAA6B,WACjC,eAAe,UACf,MAAM,KACZ,kBAKF,CAAC"}
|
|
@@ -1,119 +0,0 @@
|
|
|
1
|
-
import * as util from "node:util";
|
|
2
|
-
import { accessRuleSchema, } from "#policy/accessRules.js";
|
|
3
|
-
import { accessRuleRedisKeyPrefix, accessRulesRedisIndexName, accessRulesRedisSearchOptions, getRedisAccessRuleKey, getRedisAccessRuleValue, getRedisAccessRulesQuery, } from "#policy/redis/redisAccessRulesIndex.js";
|
|
4
|
-
export const createRedisAccessRulesReader = (client, logger) => {
|
|
5
|
-
return {
|
|
6
|
-
findRules: async (filter, matchingFieldsOnly = false, skipEmptyUserScopes = true) => {
|
|
7
|
-
const query = getRedisAccessRulesQuery(filter, matchingFieldsOnly);
|
|
8
|
-
if (skipEmptyUserScopes && query === "ismissing(@clientId)") {
|
|
9
|
-
return [];
|
|
10
|
-
}
|
|
11
|
-
let searchReply;
|
|
12
|
-
try {
|
|
13
|
-
searchReply = await client.ft.search(accessRulesRedisIndexName, query, accessRulesRedisSearchOptions);
|
|
14
|
-
if (searchReply.total > 0) {
|
|
15
|
-
logger.debug(() => ({
|
|
16
|
-
msg: "Executed search query",
|
|
17
|
-
data: {
|
|
18
|
-
inspect: util.inspect({
|
|
19
|
-
filter: filter,
|
|
20
|
-
searchReply: searchReply,
|
|
21
|
-
query: query,
|
|
22
|
-
}, { depth: null }),
|
|
23
|
-
},
|
|
24
|
-
}));
|
|
25
|
-
}
|
|
26
|
-
}
|
|
27
|
-
catch (e) {
|
|
28
|
-
logger.error(() => ({
|
|
29
|
-
err: e,
|
|
30
|
-
data: {
|
|
31
|
-
inspect: util.inspect({
|
|
32
|
-
query: query,
|
|
33
|
-
filter: filter,
|
|
34
|
-
}, {
|
|
35
|
-
depth: null,
|
|
36
|
-
}),
|
|
37
|
-
},
|
|
38
|
-
msg: "failed to execute search query",
|
|
39
|
-
}));
|
|
40
|
-
return [];
|
|
41
|
-
}
|
|
42
|
-
return extractAccessRulesFromSearchReply(searchReply, logger);
|
|
43
|
-
},
|
|
44
|
-
findRuleIds: async (filter, matchingFieldsOnly = false) => {
|
|
45
|
-
const query = getRedisAccessRulesQuery(filter, matchingFieldsOnly);
|
|
46
|
-
let searchReply;
|
|
47
|
-
try {
|
|
48
|
-
searchReply = await client.ft.searchNoContent(accessRulesRedisIndexName, query, accessRulesRedisSearchOptions);
|
|
49
|
-
}
|
|
50
|
-
catch (e) {
|
|
51
|
-
logger.error(() => ({
|
|
52
|
-
err: e,
|
|
53
|
-
data: {
|
|
54
|
-
inspect: util.inspect({
|
|
55
|
-
query: query,
|
|
56
|
-
filter: filter,
|
|
57
|
-
}, {
|
|
58
|
-
depth: null,
|
|
59
|
-
}),
|
|
60
|
-
},
|
|
61
|
-
msg: "Failed to execute search query for rule IDs",
|
|
62
|
-
}));
|
|
63
|
-
return [];
|
|
64
|
-
}
|
|
65
|
-
return searchReply.documents;
|
|
66
|
-
},
|
|
67
|
-
};
|
|
68
|
-
};
|
|
69
|
-
export const createRedisAccessRulesWriter = (client) => {
|
|
70
|
-
return {
|
|
71
|
-
insertRule: async (rule, expirationTimestamp) => {
|
|
72
|
-
const ruleKey = getRedisAccessRuleKey(rule);
|
|
73
|
-
const ruleValue = getRedisAccessRuleValue(rule);
|
|
74
|
-
await client.hSet(ruleKey, ruleValue);
|
|
75
|
-
if (expirationTimestamp) {
|
|
76
|
-
const expiryDate = new Date(expirationTimestamp);
|
|
77
|
-
if (expiryDate.getUTCFullYear() === 1970) {
|
|
78
|
-
await client.expireAt(ruleKey, expirationTimestamp);
|
|
79
|
-
}
|
|
80
|
-
else {
|
|
81
|
-
const timestampInSeconds = Math.floor(expirationTimestamp / 1000);
|
|
82
|
-
await client.expireAt(ruleKey, timestampInSeconds);
|
|
83
|
-
}
|
|
84
|
-
}
|
|
85
|
-
return ruleKey;
|
|
86
|
-
},
|
|
87
|
-
deleteRules: async (ruleIds) => void (await client.del(ruleIds)),
|
|
88
|
-
deleteAllRules: async () => {
|
|
89
|
-
const keys = await client.keys(`${accessRuleRedisKeyPrefix}*`);
|
|
90
|
-
if (keys.length === 0)
|
|
91
|
-
return 0;
|
|
92
|
-
return await client.del(keys);
|
|
93
|
-
},
|
|
94
|
-
};
|
|
95
|
-
};
|
|
96
|
-
export const createRedisAccessRulesStorage = (client, logger) => {
|
|
97
|
-
return {
|
|
98
|
-
...createRedisAccessRulesReader(client, logger),
|
|
99
|
-
...createRedisAccessRulesWriter(client),
|
|
100
|
-
};
|
|
101
|
-
};
|
|
102
|
-
const extractAccessRulesFromSearchReply = (searchReply, logger) => {
|
|
103
|
-
const accessRules = [];
|
|
104
|
-
searchReply.documents.map(({ id, value: document }) => {
|
|
105
|
-
const parsedDocument = accessRuleSchema.safeParse(document);
|
|
106
|
-
if (parsedDocument.success) {
|
|
107
|
-
accessRules.push(parsedDocument.data);
|
|
108
|
-
}
|
|
109
|
-
else {
|
|
110
|
-
logger.debug(() => ({
|
|
111
|
-
msg: "Failed to parse access rule from search reply",
|
|
112
|
-
id: id,
|
|
113
|
-
error: parsedDocument.error,
|
|
114
|
-
}));
|
|
115
|
-
}
|
|
116
|
-
});
|
|
117
|
-
return accessRules;
|
|
118
|
-
};
|
|
119
|
-
//# sourceMappingURL=redisAccessRules.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisAccessRules.js","sourceRoot":"","sources":["../../src/redis/redisAccessRules.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAMlC,OAAO,EAKN,gBAAgB,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,GACxB,MAAM,wCAAwC,CAAC;AAEhD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC3C,MAAuB,EACvB,MAAc,EACM,EAAE;IACtB,OAAO;QACN,SAAS,EAAE,KAAK,EACf,MAAoB,EACpB,kBAAkB,GAAG,KAAK,EAC1B,mBAAmB,GAAG,IAAI,EACF,EAAE;YAC1B,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YAEnE,IAAI,mBAAmB,IAAI,KAAK,KAAK,sBAAsB,EAAE,CAAC;gBAE7D,OAAO,EAAE,CAAC;YACX,CAAC;YAED,IAAI,WAAwB,CAAC;YAE7B,IAAI,CAAC;gBACJ,WAAW,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,MAAM,CACnC,yBAAyB,EACzB,KAAK,EACL,6BAA6B,CAC7B,CAAC;gBAEF,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACnB,GAAG,EAAE,uBAAuB;wBAC5B,IAAI,EAAE;4BACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;gCACC,MAAM,EAAE,MAAM;gCACd,WAAW,EAAE,WAAW;gCACxB,KAAK,EAAE,KAAK;6BACZ,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CACf;yBACD;qBACD,CAAC,CAAC,CAAC;gBACL,CAAC;YACF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACnB,GAAG,EAAE,CAAC;oBACN,IAAI,EAAE;wBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;4BACC,KAAK,EAAE,KAAK;4BACZ,MAAM,EAAE,MAAM;yBACd,EACD;4BACC,KAAK,EAAE,IAAI;yBACX,CACD;qBACD;oBACD,GAAG,EAAE,gCAAgC;iBACrC,CAAC,CAAC,CAAC;gBAEJ,OAAO,EAAE,CAAC;YACX,CAAC;YAED,OAAO,iCAAiC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QAED,WAAW,EAAE,KAAK,EACjB,MAAoB,EACpB,kBAAkB,GAAG,KAAK,EACN,EAAE;YACtB,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YAEnE,IAAI,WAAiC,CAAC;YAEtC,IAAI,CAAC;gBACJ,WAAW,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,eAAe,CAC5C,yBAAyB,EACzB,KAAK,EACL,6BAA6B,CAC7B,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAEZ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACnB,GAAG,EAAE,CAAC;oBACN,IAAI,EAAE;wBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;4BACC,KAAK,EAAE,KAAK;4BACZ,MAAM,EAAE,MAAM;yBACd,EACD;4BACC,KAAK,EAAE,IAAI;yBACX,CACD;qBACD;oBACD,GAAG,EAAE,6CAA6C;iBAClD,CAAC,CAAC,CAAC;gBAEJ,OAAO,EAAE,CAAC;YACX,CAAC;YAED,OAAO,WAAW,CAAC,SAAS,CAAC;QAC9B,CAAC;KACD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC3C,MAAuB,EACH,EAAE;IACtB,OAAO;QACN,UAAU,EAAE,KAAK,EAChB,IAAgB,EAChB,mBAA4B,EACV,EAAE;YACpB,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;YAEhD,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEtC,IAAI,mBAAmB,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACjD,IAAI,UAAU,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;oBAE1C,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACP,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;oBAClE,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;gBACpD,CAAC;YACF,CAAC;YAED,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,OAAiB,EAAiB,EAAE,CACvD,KAAK,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEjC,cAAc,EAAE,KAAK,IAAqB,EAAE;YAC3C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,wBAAwB,GAAG,CAAC,CAAC;YAE/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;YAEhC,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;KACD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC5C,MAAuB,EACvB,MAAc,EACO,EAAE;IACvB,OAAO;QACN,GAAG,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC;QAC/C,GAAG,4BAA4B,CAAC,MAAM,CAAC;KACvC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACzC,WAAwB,EACxB,MAAc,EACC,EAAE;IACjB,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrD,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,+CAA+C;gBACpD,EAAE,EAAE,EAAE;gBACN,KAAK,EAAE,cAAc,CAAC,KAAK;aAC3B,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACpB,CAAC,CAAC"}
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
import { type FtSearchOptions } from "@redis/search";
|
|
2
|
-
import type { RedisClientType } from "redis";
|
|
3
|
-
import { type PolicyFilter } from "#policy/accessPolicyResolver.js";
|
|
4
|
-
import type { AccessRule } from "#policy/accessRules.js";
|
|
5
|
-
export declare const accessRulesRedisIndexName = "index:user-access-rules";
|
|
6
|
-
export declare const accessRuleRedisKeyPrefix = "uar:";
|
|
7
|
-
export declare const createRedisAccessRulesIndex: (client: RedisClientType, indexName?: string) => Promise<void>;
|
|
8
|
-
export declare const accessRulesRedisSearchOptions: FtSearchOptions;
|
|
9
|
-
export declare const accessRulesRedisDeleteOptions: FtSearchOptions;
|
|
10
|
-
export declare const getRedisAccessRulesQuery: (filter: PolicyFilter, matchingFieldsOnly: boolean) => string;
|
|
11
|
-
export declare const getRedisAccessRuleKey: (rule: AccessRule) => string;
|
|
12
|
-
export declare const getRedisAccessRuleValue: (rule: AccessRule) => Record<string, string>;
|
|
13
|
-
//# sourceMappingURL=redisAccessRulesIndex.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"redisAccessRulesIndex.d.ts","sourceRoot":"","sources":["../../src/redis/redisAccessRulesIndex.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,eAAe,EAAqB,MAAM,eAAe,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAM7C,OAAO,EAAE,KAAK,YAAY,EAAc,MAAM,iCAAiC,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGzD,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AAEnE,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAmC/C,eAAO,MAAM,2BAA2B,WAC/B,eAAe,cACX,MAAM,KAChB,OAAO,CAAC,IAAI,CAKd,CAAC;AA8CF,eAAO,MAAM,6BAA6B,EAAE,eAG3C,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,eAO3C,CAAC;AAYF,eAAO,MAAM,wBAAwB,WAC5B,YAAY,sBACA,OAAO,KACzB,MAkBF,CAAC;AA0FF,eAAO,MAAM,qBAAqB,SAAU,UAAU,KAAG,MAUzC,CAAC;AAEjB,eAAO,MAAM,uBAAuB,SAC7B,UAAU,KACd,MAAM,CAAC,MAAM,EAAE,MAAM,CAGtB,CAAC"}
|