@prosopo/user-access-policy 3.5.27 → 3.5.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (240) hide show
  1. package/CHANGELOG.md +54 -0
  2. package/package.json +11 -11
  3. package/coverage/base.css +0 -224
  4. package/coverage/block-navigation.js +0 -87
  5. package/coverage/clover.xml +0 -786
  6. package/coverage/coverage-final.json +0 -15
  7. package/coverage/favicon.png +0 -0
  8. package/coverage/index.html +0 -146
  9. package/coverage/prettify.css +0 -1
  10. package/coverage/prettify.js +0 -2
  11. package/coverage/sort-arrow-sprite.png +0 -0
  12. package/coverage/sorter.js +0 -210
  13. package/coverage/src/accessPolicy.ts.html +0 -457
  14. package/coverage/src/accessPolicyResolver.ts.html +0 -211
  15. package/coverage/src/accessRules.ts.html +0 -265
  16. package/coverage/src/api/accessRuleApiRoutes.ts.html +0 -379
  17. package/coverage/src/api/accessRulesApiClient.ts.html +0 -274
  18. package/coverage/src/api/deleteAllRulesEndpoint.ts.html +0 -229
  19. package/coverage/src/api/deleteRulesEndpoint.ts.html +0 -301
  20. package/coverage/src/api/index.html +0 -176
  21. package/coverage/src/api/insertRulesEndpoint.ts.html +0 -436
  22. package/coverage/src/index.html +0 -176
  23. package/coverage/src/index.ts.html +0 -277
  24. package/coverage/src/redis/index.html +0 -161
  25. package/coverage/src/redis/redisRulesIndex.ts.html +0 -769
  26. package/coverage/src/redis/redisRulesReader.ts.html +0 -652
  27. package/coverage/src/redis/redisRulesStorage.ts.html +0 -229
  28. package/coverage/src/redis/redisRulesWriter.ts.html +0 -424
  29. package/coverage/src/util.ts.html +0 -136
  30. package/dist/.export.d.ts +0 -6
  31. package/dist/.export.d.ts.map +0 -1
  32. package/dist/.export.js.map +0 -1
  33. package/dist/accessPolicy.d.ts +0 -169
  34. package/dist/accessPolicy.d.ts.map +0 -1
  35. package/dist/accessPolicy.js +0 -80
  36. package/dist/accessPolicy.js.map +0 -1
  37. package/dist/accessPolicyResolver.d.ts +0 -110
  38. package/dist/accessPolicyResolver.d.ts.map +0 -1
  39. package/dist/accessPolicyResolver.js +0 -31
  40. package/dist/accessPolicyResolver.js.map +0 -1
  41. package/dist/accessRules.d.ts +0 -16
  42. package/dist/accessRules.d.ts.map +0 -1
  43. package/dist/accessRules.js +0 -11
  44. package/dist/accessRules.js.map +0 -1
  45. package/dist/api/.export.d.ts +0 -7
  46. package/dist/api/.export.d.ts.map +0 -1
  47. package/dist/api/.export.js.map +0 -1
  48. package/dist/api/accessRuleApiRoutes.d.ts +0 -27
  49. package/dist/api/accessRuleApiRoutes.d.ts.map +0 -1
  50. package/dist/api/accessRuleApiRoutes.js +0 -79
  51. package/dist/api/accessRuleApiRoutes.js.map +0 -1
  52. package/dist/api/accessRulesApiClient.d.ts +0 -10
  53. package/dist/api/accessRulesApiClient.d.ts.map +0 -1
  54. package/dist/api/accessRulesApiClient.js +0 -38
  55. package/dist/api/accessRulesApiClient.js.map +0 -1
  56. package/dist/api/delete/.export.d.ts +0 -2
  57. package/dist/api/delete/.export.d.ts.map +0 -1
  58. package/dist/api/delete/.export.js.map +0 -1
  59. package/dist/api/delete/deleteAllRules.d.ts +0 -11
  60. package/dist/api/delete/deleteAllRules.d.ts.map +0 -1
  61. package/dist/api/delete/deleteAllRules.js.map +0 -1
  62. package/dist/api/delete/deleteRuleGroups.d.ts +0 -19
  63. package/dist/api/delete/deleteRuleGroups.d.ts.map +0 -1
  64. package/dist/api/delete/deleteRuleGroups.js.map +0 -1
  65. package/dist/api/delete/deleteRules.d.ts +0 -15
  66. package/dist/api/delete/deleteRules.d.ts.map +0 -1
  67. package/dist/api/delete/deleteRules.js.map +0 -1
  68. package/dist/api/deleteAllRulesEndpoint.d.ts +0 -12
  69. package/dist/api/deleteAllRulesEndpoint.d.ts.map +0 -1
  70. package/dist/api/deleteAllRulesEndpoint.js +0 -24
  71. package/dist/api/deleteAllRulesEndpoint.js.map +0 -1
  72. package/dist/api/deleteRulesEndpoint.d.ts +0 -116
  73. package/dist/api/deleteRulesEndpoint.d.ts.map +0 -1
  74. package/dist/api/deleteRulesEndpoint.js +0 -34
  75. package/dist/api/deleteRulesEndpoint.js.map +0 -1
  76. package/dist/api/insertRulesEndpoint.d.ts +0 -22
  77. package/dist/api/insertRulesEndpoint.d.ts.map +0 -1
  78. package/dist/api/insertRulesEndpoint.js +0 -62
  79. package/dist/api/insertRulesEndpoint.js.map +0 -1
  80. package/dist/api/read/.export.d.ts +0 -4
  81. package/dist/api/read/.export.d.ts.map +0 -1
  82. package/dist/api/read/.export.js.map +0 -1
  83. package/dist/api/read/fetchRules.d.ts +0 -53
  84. package/dist/api/read/fetchRules.d.ts.map +0 -1
  85. package/dist/api/read/fetchRules.js.map +0 -1
  86. package/dist/api/read/findRuleIds.d.ts +0 -28
  87. package/dist/api/read/findRuleIds.d.ts.map +0 -1
  88. package/dist/api/read/findRuleIds.js.map +0 -1
  89. package/dist/api/read/getMissingIds.d.ts +0 -28
  90. package/dist/api/read/getMissingIds.d.ts.map +0 -1
  91. package/dist/api/read/getMissingIds.js.map +0 -1
  92. package/dist/api/ruleApiRoutes.d.ts +0 -43
  93. package/dist/api/ruleApiRoutes.d.ts.map +0 -1
  94. package/dist/api/ruleApiRoutes.js.map +0 -1
  95. package/dist/api/rulesApiClient.d.ts +0 -20
  96. package/dist/api/rulesApiClient.d.ts.map +0 -1
  97. package/dist/api/rulesApiClient.js.map +0 -1
  98. package/dist/api/write/.export.d.ts +0 -2
  99. package/dist/api/write/.export.d.ts.map +0 -1
  100. package/dist/api/write/.export.js.map +0 -1
  101. package/dist/api/write/insertRules.d.ts +0 -29
  102. package/dist/api/write/insertRules.d.ts.map +0 -1
  103. package/dist/api/write/insertRules.js.map +0 -1
  104. package/dist/api/write/rehashRules.d.ts +0 -11
  105. package/dist/api/write/rehashRules.d.ts.map +0 -1
  106. package/dist/api/write/rehashRules.js.map +0 -1
  107. package/dist/cjs/accessPolicy.cjs +0 -80
  108. package/dist/cjs/accessPolicyResolver.cjs +0 -31
  109. package/dist/cjs/accessRules.cjs +0 -11
  110. package/dist/cjs/api/accessRuleApiRoutes.cjs +0 -79
  111. package/dist/cjs/api/deleteAllRulesEndpoint.cjs +0 -24
  112. package/dist/cjs/api/deleteRulesEndpoint.cjs +0 -34
  113. package/dist/cjs/api/insertRulesEndpoint.cjs +0 -62
  114. package/dist/cjs/index.cjs +0 -29
  115. package/dist/cjs/redis/redisAccessRules.cjs +0 -152
  116. package/dist/cjs/redis/redisAccessRulesIndex.cjs +0 -171
  117. package/dist/cjs/redis/redisIndex.cjs +0 -22
  118. package/dist/cjs/util.cjs +0 -5
  119. package/dist/index.d.ts +0 -15
  120. package/dist/index.d.ts.map +0 -1
  121. package/dist/index.js +0 -32
  122. package/dist/index.js.map +0 -1
  123. package/dist/mongoose/.export.d.ts +0 -2
  124. package/dist/mongoose/.export.d.ts.map +0 -1
  125. package/dist/mongoose/.export.js.map +0 -1
  126. package/dist/mongoose/mongooseRuleSchema.d.ts +0 -4
  127. package/dist/mongoose/mongooseRuleSchema.d.ts.map +0 -1
  128. package/dist/mongoose/mongooseRuleSchema.js.map +0 -1
  129. package/dist/redis/.export.d.ts +0 -3
  130. package/dist/redis/.export.d.ts.map +0 -1
  131. package/dist/redis/.export.js.map +0 -1
  132. package/dist/redis/reader/redisAggregate.d.ts +0 -4
  133. package/dist/redis/reader/redisAggregate.d.ts.map +0 -1
  134. package/dist/redis/reader/redisAggregate.js.map +0 -1
  135. package/dist/redis/reader/redisRulesQuery.d.ts +0 -4
  136. package/dist/redis/reader/redisRulesQuery.d.ts.map +0 -1
  137. package/dist/redis/reader/redisRulesQuery.js.map +0 -1
  138. package/dist/redis/reader/redisRulesReader.d.ts +0 -26
  139. package/dist/redis/reader/redisRulesReader.d.ts.map +0 -1
  140. package/dist/redis/reader/redisRulesReader.js.map +0 -1
  141. package/dist/redis/redisAccessRules.d.ts +0 -7
  142. package/dist/redis/redisAccessRules.d.ts.map +0 -1
  143. package/dist/redis/redisAccessRules.js +0 -119
  144. package/dist/redis/redisAccessRules.js.map +0 -1
  145. package/dist/redis/redisAccessRulesIndex.d.ts +0 -13
  146. package/dist/redis/redisAccessRulesIndex.d.ts.map +0 -1
  147. package/dist/redis/redisAccessRulesIndex.js +0 -140
  148. package/dist/redis/redisAccessRulesIndex.js.map +0 -1
  149. package/dist/redis/redisClient.d.ts +0 -11
  150. package/dist/redis/redisClient.d.ts.map +0 -1
  151. package/dist/redis/redisClient.js.map +0 -1
  152. package/dist/redis/redisIndex.d.ts +0 -9
  153. package/dist/redis/redisIndex.d.ts.map +0 -1
  154. package/dist/redis/redisIndex.js +0 -23
  155. package/dist/redis/redisIndex.js.map +0 -1
  156. package/dist/redis/redisRuleIndex.d.ts +0 -13
  157. package/dist/redis/redisRuleIndex.d.ts.map +0 -1
  158. package/dist/redis/redisRuleIndex.js.map +0 -1
  159. package/dist/redis/redisRulesIndex.d.ts +0 -9
  160. package/dist/redis/redisRulesIndex.d.ts.map +0 -1
  161. package/dist/redis/redisRulesIndex.js +0 -138
  162. package/dist/redis/redisRulesIndex.js.map +0 -1
  163. package/dist/redis/redisRulesReader.d.ts +0 -6
  164. package/dist/redis/redisRulesReader.d.ts.map +0 -1
  165. package/dist/redis/redisRulesReader.js +0 -125
  166. package/dist/redis/redisRulesReader.js.map +0 -1
  167. package/dist/redis/redisRulesStorage.d.ts +0 -5
  168. package/dist/redis/redisRulesStorage.d.ts.map +0 -1
  169. package/dist/redis/redisRulesStorage.js.map +0 -1
  170. package/dist/redis/redisRulesWriter.d.ts +0 -22
  171. package/dist/redis/redisRulesWriter.d.ts.map +0 -1
  172. package/dist/redis/redisRulesWriter.js.map +0 -1
  173. package/dist/rule.d.ts +0 -34
  174. package/dist/rule.d.ts.map +0 -1
  175. package/dist/rule.js.map +0 -1
  176. package/dist/ruleInput/.export.d.ts +0 -4
  177. package/dist/ruleInput/.export.d.ts.map +0 -1
  178. package/dist/ruleInput/.export.js.map +0 -1
  179. package/dist/ruleInput/policyInput.d.ts +0 -38
  180. package/dist/ruleInput/policyInput.d.ts.map +0 -1
  181. package/dist/ruleInput/policyInput.js.map +0 -1
  182. package/dist/ruleInput/ruleInput.d.ts +0 -145
  183. package/dist/ruleInput/ruleInput.d.ts.map +0 -1
  184. package/dist/ruleInput/ruleInput.js.map +0 -1
  185. package/dist/ruleInput/userScopeInput.d.ts +0 -93
  186. package/dist/ruleInput/userScopeInput.d.ts.map +0 -1
  187. package/dist/ruleInput/userScopeInput.js.map +0 -1
  188. package/dist/ruleRecord.d.ts +0 -18
  189. package/dist/ruleRecord.d.ts.map +0 -1
  190. package/dist/ruleRecord.js.map +0 -1
  191. package/dist/rulesStorage.d.ts +0 -30
  192. package/dist/rulesStorage.d.ts.map +0 -1
  193. package/dist/rulesStorage.js.map +0 -1
  194. package/dist/tests/accessPolicy.test.d.ts +0 -2
  195. package/dist/tests/accessPolicy.test.d.ts.map +0 -1
  196. package/dist/tests/accessPolicy.test.js +0 -27
  197. package/dist/tests/accessPolicy.test.js.map +0 -1
  198. package/dist/tests/redis/reader/redisRulesQuery.unit.test.d.ts +0 -2
  199. package/dist/tests/redis/reader/redisRulesQuery.unit.test.d.ts.map +0 -1
  200. package/dist/tests/redis/reader/redisRulesQuery.unit.test.js +0 -101
  201. package/dist/tests/redis/reader/redisRulesQuery.unit.test.js.map +0 -1
  202. package/dist/tests/redis/redisAccessRules.integration.test.d.ts +0 -2
  203. package/dist/tests/redis/redisAccessRules.integration.test.d.ts.map +0 -1
  204. package/dist/tests/redis/redisAccessRules.integration.test.js +0 -586
  205. package/dist/tests/redis/redisAccessRules.integration.test.js.map +0 -1
  206. package/dist/tests/redis/redisAccessRules.unit.test.d.ts +0 -2
  207. package/dist/tests/redis/redisAccessRules.unit.test.d.ts.map +0 -1
  208. package/dist/tests/redis/redisAccessRules.unit.test.js +0 -198
  209. package/dist/tests/redis/redisAccessRules.unit.test.js.map +0 -1
  210. package/dist/tests/redis/redisIndex.integration.test.d.ts +0 -2
  211. package/dist/tests/redis/redisIndex.integration.test.d.ts.map +0 -1
  212. package/dist/tests/redis/redisIndex.integration.test.js +0 -80
  213. package/dist/tests/redis/redisIndex.integration.test.js.map +0 -1
  214. package/dist/tests/redis/redisRulesIndex.unit.test.d.ts +0 -2
  215. package/dist/tests/redis/redisRulesIndex.unit.test.d.ts.map +0 -1
  216. package/dist/tests/redis/redisRulesIndex.unit.test.js +0 -101
  217. package/dist/tests/redis/redisRulesIndex.unit.test.js.map +0 -1
  218. package/dist/tests/redis/redisRulesStorage.integration.test.d.ts +0 -2
  219. package/dist/tests/redis/redisRulesStorage.integration.test.d.ts.map +0 -1
  220. package/dist/tests/redis/redisRulesStorage.integration.test.js +0 -611
  221. package/dist/tests/redis/redisRulesStorage.integration.test.js.map +0 -1
  222. package/dist/tests/redis/testRedisClient.d.ts +0 -3
  223. package/dist/tests/redis/testRedisClient.d.ts.map +0 -1
  224. package/dist/tests/redis/testRedisClient.js +0 -8
  225. package/dist/tests/redis/testRedisClient.js.map +0 -1
  226. package/dist/tests/testLogger.d.ts +0 -4
  227. package/dist/tests/testLogger.d.ts.map +0 -1
  228. package/dist/tests/testLogger.js +0 -22
  229. package/dist/tests/testLogger.js.map +0 -1
  230. package/dist/tests/transformRule.unit.test.d.ts +0 -2
  231. package/dist/tests/transformRule.unit.test.d.ts.map +0 -1
  232. package/dist/tests/transformRule.unit.test.js +0 -188
  233. package/dist/tests/transformRule.unit.test.js.map +0 -1
  234. package/dist/transformRule.d.ts +0 -7
  235. package/dist/transformRule.d.ts.map +0 -1
  236. package/dist/transformRule.js.map +0 -1
  237. package/dist/util.d.ts +0 -2
  238. package/dist/util.d.ts.map +0 -1
  239. package/dist/util.js +0 -5
  240. package/dist/util.js.map +0 -1
@@ -1,171 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
3
- const crypto = require("node:crypto");
4
- const search = require("@redis/search");
5
- const accessPolicy = require("../accessPolicy.cjs");
6
- const accessPolicyResolver = require("../accessPolicyResolver.cjs");
7
- const redisIndex = require("./redisIndex.cjs");
8
- const accessRulesRedisIndexName = "index:user-access-rules";
9
- const accessRuleRedisKeyPrefix = "uar:";
10
- const accessRuleContentHashAlgorithm = "md5";
11
- const DEFAULT_SEARCH_LIMIT = 1e3;
12
- const accessRulesIndex = {
13
- name: accessRulesRedisIndexName,
14
- /**
15
- * Note on the field type decision
16
- *
17
- * TAG is designed for the exact value matching
18
- * TEXT is designed for the word-based and pattern matching
19
- *
20
- * For our goal TAG fits perfectly and, more performant
21
- */
22
- schema: {
23
- clientId: {
24
- type: search.SCHEMA_FIELD_TYPE.TAG,
25
- // necessary to make possible use of the ismissing() function on this field in the search
26
- INDEXMISSING: true
27
- },
28
- numericIpMaskMin: { type: search.SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
29
- numericIpMaskMax: { type: search.SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
30
- userId: { type: search.SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
31
- numericIp: { type: search.SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
32
- ja4Hash: { type: search.SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
33
- headersHash: { type: search.SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
34
- userAgentHash: { type: search.SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true }
35
- },
36
- // the satisfy statement is to guarantee that the keys are right
37
- options: {
38
- ON: "HASH",
39
- PREFIX: [accessRuleRedisKeyPrefix]
40
- }
41
- };
42
- const createRedisAccessRulesIndex = async (client, indexName) => {
43
- if (indexName) {
44
- accessRulesIndex.name = indexName;
45
- }
46
- return redisIndex.createRedisIndex(client, accessRulesIndex);
47
- };
48
- const numericIndexFields = [
49
- "numericIp",
50
- "numericIpMaskMin",
51
- "numericIpMaskMax"
52
- ];
53
- const greedyFieldComparisons = {
54
- numericIp: (value, scope) => {
55
- if (value !== void 0) {
56
- return `( @numericIp:[${value}] | ( @numericIpMaskMin:[-inf ${value}] @numericIpMaskMax:[${value} +inf] ) )`;
57
- }
58
- if (scope.numericIpMaskMin === void 0 && scope.numericIpMaskMax === void 0) {
59
- return "ismissing(@numericIp) ismissing(@numericIpMaskMin) ismissing(@numericIpMaskMax)";
60
- }
61
- return "";
62
- },
63
- numericIpMaskMin: (value, scope) => {
64
- if (scope.numericIp !== void 0) {
65
- return "";
66
- }
67
- return value !== void 0 ? `@numericIpMaskMin:[-inf ${value}]` : "ismissing(@numericIpMaskMin)";
68
- },
69
- numericIpMaskMax: (value, scope) => {
70
- if (scope.numericIp !== void 0) {
71
- return "";
72
- }
73
- return value !== void 0 ? `@numericIpMaskMax:[${value} +inf]` : "ismissing(@numericIpMaskMax)";
74
- }
75
- };
76
- const accessRulesRedisSearchOptions = {
77
- // #2 is a required option when the 'ismissing()' function is in the query body
78
- DIALECT: 2
79
- };
80
- const accessRulesRedisDeleteOptions = {
81
- // #2 is a required option when the 'ismissing()' function is in the query body
82
- DIALECT: 2,
83
- LIMIT: {
84
- from: 0,
85
- size: DEFAULT_SEARCH_LIMIT
86
- }
87
- };
88
- const getRedisAccessRulesQuery = (filter, matchingFieldsOnly) => {
89
- const { policyScope, userScope } = filter;
90
- const policyScopeFilter = getPolicyScopeQuery(
91
- policyScope,
92
- filter.policyScopeMatch
93
- );
94
- if (userScope && Object.keys(userScope).length > 0) {
95
- const userScopeFilter = getUserScopeQuery(
96
- userScope,
97
- filter.userScopeMatch,
98
- matchingFieldsOnly
99
- );
100
- return `${policyScopeFilter} ( ${userScopeFilter} )`;
101
- }
102
- return policyScopeFilter ? policyScopeFilter : "*";
103
- };
104
- const getPolicyScopeQuery = (policyScope, scopeMatchType) => {
105
- const clientId = policyScope?.clientId;
106
- if ("string" === typeof clientId) {
107
- return accessPolicyResolver.ScopeMatch.Exact === scopeMatchType ? `@clientId:{${clientId}}` : `( @clientId:{${clientId}} | ismissing(@clientId) )`;
108
- }
109
- return accessPolicyResolver.ScopeMatch.Exact === scopeMatchType ? "ismissing(@clientId)" : "";
110
- };
111
- const getUserScopeQuery = (userScope, scopeMatchType, matchingFieldsOnly) => {
112
- let scopeEntries = Object.entries(userScope);
113
- let scopeJoinType = " ";
114
- if (scopeMatchType === accessPolicyResolver.ScopeMatch.Greedy) {
115
- scopeEntries = scopeEntries.filter(
116
- ([_, value]) => value !== void 0
117
- );
118
- scopeJoinType = " | ";
119
- }
120
- if (matchingFieldsOnly) {
121
- const scopeMap = new Map(scopeEntries);
122
- if (scopeMap.has("numericIp") && scopeMap.get("numericIp") === void 0) {
123
- scopeMap.set("numericIpMaskMin", void 0);
124
- scopeMap.set("numericIpMaskMax", void 0);
125
- }
126
- for (const name of Object.keys(accessPolicy.userScopeSchema.shape)) {
127
- if (!scopeMap.has(name)) {
128
- scopeMap.set(name, void 0);
129
- }
130
- }
131
- scopeEntries = [...scopeMap.entries()];
132
- }
133
- const scopeObj = Object.fromEntries(scopeEntries);
134
- return scopeEntries.map(
135
- ([scopeFieldName, scopeFieldValue]) => getUserScopeFieldQuery(
136
- scopeFieldName,
137
- scopeFieldValue,
138
- scopeMatchType,
139
- scopeObj
140
- )
141
- ).filter(Boolean).join(scopeJoinType);
142
- };
143
- const getUserScopeFieldQuery = (fieldName, fieldValue, matchType, fullScope) => {
144
- if ("function" === typeof greedyFieldComparisons[fieldName]) {
145
- return greedyFieldComparisons[fieldName](fieldValue, fullScope);
146
- }
147
- if (fieldValue === void 0) {
148
- return `ismissing(@${fieldName})`;
149
- }
150
- return numericIndexFields.includes(fieldName) ? `@${fieldName}:[${fieldValue}]` : `@${fieldName}:{${fieldValue}}`;
151
- };
152
- const getRedisAccessRuleKey = (rule) => accessRuleRedisKeyPrefix + crypto.createHash(accessRuleContentHashAlgorithm).update(
153
- JSON.stringify(
154
- rule,
155
- (key, value) => (
156
- // JSON.stringify can't handle BigInt itself: throws "Do not know how to serialize a BigInt"
157
- "bigint" === typeof value ? value.toString() : value
158
- )
159
- )
160
- ).digest("hex");
161
- const getRedisAccessRuleValue = (rule) => Object.fromEntries(
162
- Object.entries(rule).map(([key, value]) => [key, String(value)])
163
- );
164
- exports.accessRuleRedisKeyPrefix = accessRuleRedisKeyPrefix;
165
- exports.accessRulesRedisDeleteOptions = accessRulesRedisDeleteOptions;
166
- exports.accessRulesRedisIndexName = accessRulesRedisIndexName;
167
- exports.accessRulesRedisSearchOptions = accessRulesRedisSearchOptions;
168
- exports.createRedisAccessRulesIndex = createRedisAccessRulesIndex;
169
- exports.getRedisAccessRuleKey = getRedisAccessRuleKey;
170
- exports.getRedisAccessRuleValue = getRedisAccessRuleValue;
171
- exports.getRedisAccessRulesQuery = getRedisAccessRulesQuery;
@@ -1,22 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
3
- const crypto = require("node:crypto");
4
- const redisIndexHashesRecordKey = "_index_hashes";
5
- const redisIndexHashAlgorithm = "sha256";
6
- const createRedisIndex = async (client, index) => {
7
- const indexHash = createIndexHash(index);
8
- const existingIndexes = await client.ft._LIST();
9
- if (existingIndexes.includes(index.name)) {
10
- const existingIndexHash = await fetchIndexHash(client, index.name);
11
- if (indexHash === existingIndexHash) {
12
- return;
13
- }
14
- await client.ft.dropIndex(index.name);
15
- }
16
- await client.ft.create(index.name, index.schema, index.options);
17
- await saveIndexHash(client, index.name, indexHash);
18
- };
19
- const createIndexHash = (index) => crypto.createHash(redisIndexHashAlgorithm).update(JSON.stringify(index)).digest("hex");
20
- const fetchIndexHash = async (client, indexName) => client.hGet(redisIndexHashesRecordKey, indexName);
21
- const saveIndexHash = async (client, indexName, indexHash) => client.hSet(redisIndexHashesRecordKey, indexName, indexHash);
22
- exports.createRedisIndex = createRedisIndex;
package/dist/cjs/util.cjs DELETED
@@ -1,5 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
3
- const crypto = require("node:crypto");
4
- const hashUserAgent = (userAgent) => crypto.createHash("sha256").update(userAgent).digest("hex");
5
- exports.hashUserAgent = hashUserAgent;
package/dist/index.d.ts DELETED
@@ -1,15 +0,0 @@
1
- export { type AccessPolicy, AccessPolicyType, type AccessRuleExtended, type PolicyScope, type UserScope, type UserScopeApiInput, type UserScopeApiOutput, accessPolicySchema, accessRuleSchemaExtended, policyScopeSchema, } from "#policy/accessPolicy.js";
2
- export { type PolicyFilter, ScopeMatch } from "#policy/accessPolicyResolver.js";
3
- export { type AccessRule, type AccessRulesStorage, accessRuleSchema, } from "#policy/accessRules.js";
4
- export { accessRuleApiPaths, getExpressApiRuleRateLimits, } from "#policy/api/accessRuleApiRoutes.js";
5
- export { type DeleteAllRulesEndpointSchema, deleteAllRulesEndpointSchema, } from "#policy/api/deleteAllRulesEndpoint.js";
6
- export { type DeleteRulesEndpointSchemaInput, type DeleteRulesEndpointSchemaOutput, deleteRulesEndpointSchema, } from "#policy/api/deleteRulesEndpoint.js";
7
- export { type InsertManyRulesEndpointInputSchema, type InsertManyRulesEndpointOutputSchema, insertRulesEndpointSchema, } from "#policy/api/insertRulesEndpoint.js";
8
- export { createRedisAccessRulesStorage } from "#policy/redis/redisRulesStorage.js";
9
- export { userScopeInputSchema } from "./accessPolicy.js";
10
- export { redisAccessRulesIndex } from "./redis/redisRulesIndex.js";
11
- export { AccessRulesApiClient } from "./api/accessRulesApiClient.js";
12
- import type { ApiRoutesProvider } from "@prosopo/api-route";
13
- import type { AccessRulesStorage } from "#policy/accessRules.js";
14
- export declare const createApiRuleRoutesProvider: (rulesStorage: AccessRulesStorage) => ApiRoutesProvider;
15
- //# sourceMappingURL=index.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,YAAY,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,YAAY,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EACN,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,gBAAgB,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,kBAAkB,EAClB,2BAA2B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,KAAK,4BAA4B,EACjC,4BAA4B,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACN,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,KAAK,kCAAkC,EACvC,KAAK,mCAAmC,EACxC,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,eAAO,MAAM,2BAA2B,iBACzB,kBAAkB,KAC9B,iBAEF,CAAC"}
package/dist/index.js DELETED
@@ -1,32 +0,0 @@
1
- import { AccessPolicyType, accessPolicySchema, accessRuleSchemaExtended, policyScopeSchema, userScopeInputSchema } from "./accessPolicy.js";
2
- import { ScopeMatch } from "./accessPolicyResolver.js";
3
- import { accessRuleSchema } from "./accessRules.js";
4
- import { AccessRuleApiRoutes } from "./api/accessRuleApiRoutes.js";
5
- import { accessRuleApiPaths, getExpressApiRuleRateLimits } from "./api/accessRuleApiRoutes.js";
6
- import { deleteAllRulesEndpointSchema } from "./api/deleteAllRulesEndpoint.js";
7
- import { deleteRulesEndpointSchema } from "./api/deleteRulesEndpoint.js";
8
- import { insertRulesEndpointSchema } from "./api/insertRulesEndpoint.js";
9
- import { createRedisAccessRulesStorage } from "./redis/redisRulesStorage.js";
10
- import { redisAccessRulesIndex } from "./redis/redisRulesIndex.js";
11
- import { AccessRulesApiClient } from "./api/accessRulesApiClient.js";
12
- const createApiRuleRoutesProvider = (rulesStorage) => {
13
- return new AccessRuleApiRoutes(rulesStorage);
14
- };
15
- export {
16
- AccessPolicyType,
17
- AccessRulesApiClient,
18
- ScopeMatch,
19
- accessPolicySchema,
20
- accessRuleApiPaths,
21
- accessRuleSchema,
22
- accessRuleSchemaExtended,
23
- createApiRuleRoutesProvider,
24
- createRedisAccessRulesStorage,
25
- deleteAllRulesEndpointSchema,
26
- deleteRulesEndpointSchema,
27
- getExpressApiRuleRateLimits,
28
- insertRulesEndpointSchema,
29
- policyScopeSchema,
30
- redisAccessRulesIndex,
31
- userScopeInputSchema
32
- };
package/dist/index.js.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAEN,gBAAgB,EAMhB,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAqB,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAGN,gBAAgB,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,kBAAkB,EAClB,2BAA2B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAEN,4BAA4B,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAGN,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAGN,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAIrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAC1C,YAAgC,EACZ,EAAE;IACtB,OAAO,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;AAC9C,CAAC,CAAC"}
@@ -1,2 +0,0 @@
1
- export { accessRuleMongooseSchema } from "./mongooseRuleSchema.js";
2
- //# sourceMappingURL=.export.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../src/mongoose/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}
@@ -1 +0,0 @@
1
- {"version":3,"file":".export.js","sourceRoot":"","sources":["../../src/mongoose/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}
@@ -1,4 +0,0 @@
1
- import type { SchemaDefinition } from "mongoose";
2
- import type { AccessRuleRecord } from "#policy/ruleRecord.js";
3
- export declare const accessRuleMongooseSchema: SchemaDefinition<AccessRuleRecord>;
4
- //# sourceMappingURL=mongooseRuleSchema.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"mongooseRuleSchema.d.ts","sourceRoot":"","sources":["../../src/mongoose/mongooseRuleSchema.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjD,OAAO,KAAK,EACX,gBAAgB,EAIhB,MAAM,uBAAuB,CAAC;AAkC/B,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,gBAAgB,CAKtC,CAAC"}
@@ -1 +0,0 @@
1
- {"version":3,"file":"mongooseRuleSchema.js","sourceRoot":"","sources":["../../src/mongoose/mongooseRuleSchema.ts"],"names":[],"mappings":"AAwBA,MAAM,oBAAoB,GAA2C;IACpE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACzC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC1C,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC5C,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACN,CAAC;AAE1C,MAAM,YAAY,GAAmC;IACpD,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACT,CAAC;AAElC,MAAM,eAAe,GAAsC;IAC1D,GAAG,oBAAoB;IACvB,GAAG,YAAY;CACiB,CAAC;AAElC,MAAM,iBAAiB,GAAkC;IACxD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACZ,CAAC;AAEjC,MAAM,kBAAkB,GAAmC;IAC1D,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACpD,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjD,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IAChD,mBAAmB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtD,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACpB,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAuC;IAC3E,GAAG,kBAAkB;IACrB,GAAG,iBAAiB;IACpB,GAAG,eAAe;IAClB,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;CACb,CAAC"}
@@ -1,3 +0,0 @@
1
- export { createRedisAccessRulesStorage } from "./redisRulesStorage.js";
2
- export { accessRulesRedisIndex } from "./redisRuleIndex.js";
3
- //# sourceMappingURL=.export.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../src/redis/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}
@@ -1 +0,0 @@
1
- {"version":3,"file":".export.js","sourceRoot":"","sources":["../../src/redis/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}
@@ -1,4 +0,0 @@
1
- import type { Logger } from "@prosopo/common";
2
- import type { RedisClientType } from "redis";
3
- export declare const aggregateRedisKeys: (client: RedisClientType, query: string, logger: Logger, batchHandler?: (keys: string[]) => Promise<void>) => Promise<string[]>;
4
- //# sourceMappingURL=redisAggregate.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisAggregate.d.ts","sourceRoot":"","sources":["../../../src/redis/reader/redisAggregate.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAU7C,eAAO,MAAM,kBAAkB,WACtB,eAAe,SAChB,MAAM,UACL,MAAM,iBACC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,KAC9C,OAAO,CAAC,MAAM,EAAE,CA0ClB,CAAC"}
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisAggregate.js","sourceRoot":"","sources":["../../../src/redis/reader/redisAggregate.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EACN,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAGhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACtC,MAAuB,EACvB,KAAa,EACb,MAAc,EACd,YAAgD,EAC5B,EAAE;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC;IAEzB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;QAE7B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,MAAM,aAAa,GAAG,KAAK,EAAE,OAAiB,EAAE,EAAE;QACjD,MAAM,aAAa,GAAG,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAEvE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEnE,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;YAE9B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,6BAA6B;gBAClC,IAAI,EAAE;oBACL,IAAI,EAAE,UAAU,CAAC,MAAM;iBACvB;aACD,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,kBAAkB,CACvB,MAAM,EACN,KAAK,EACL;QAEC,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,IAAI,QAAQ,EAAE;KACpB,EACD,aAAa,CACb,CAAC;IAEF,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC/B,MAAuB,EACvB,KAAa,EACb,gBAA8C,EAC9C,WAAiD,EACjC,EAAE;IAClB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,mBAAmB,CACvD,6BAA6B,EAC7B,KAAK,EACL,gBAAgB,CAChB,CAAC;IAEF,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAEjC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,UAAU,CAC5C,6BAA6B,EAC7B,MAAM,EACN,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CACjC,CAAC;QAEF,MAAM,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,CAAC;AACF,CAAC,CAAC"}
@@ -1,4 +0,0 @@
1
- import { type AccessRulesFilter } from "#policy/rulesStorage.js";
2
- export declare const REDIS_QUERY_DIALECT = 2;
3
- export declare const getRulesRedisQuery: (filter: AccessRulesFilter, matchingFieldsOnly: boolean) => string;
4
- //# sourceMappingURL=redisRulesQuery.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisRulesQuery.d.ts","sourceRoot":"","sources":["../../../src/redis/reader/redisRulesQuery.ts"],"names":[],"mappings":"AAgBA,OAAO,EACN,KAAK,iBAAiB,EAEtB,MAAM,yBAAyB,CAAC;AAKjC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAmIrC,eAAO,MAAM,kBAAkB,WACtB,iBAAiB,sBACL,OAAO,KACzB,MA4BF,CAAC"}
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisRulesQuery.js","sourceRoot":"","sources":["../../../src/redis/reader/redisRulesQuery.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAEN,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AAKjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,aAAa,GAAuC;IACzD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,iBAAiB,KAAK,IAAI,KAAK,iCAAiC,KAAK,wBAAwB,KAAK,YAAY,CAAC;QACvH,CAAC;QAED,IACC,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACpC,KAAK,CAAC,gBAAgB,KAAK,SAAS,EACnC,CAAC;YACF,OAAO,iFAAiF,CAAC;QAC1F,CAAC;QAED,OAAO,EAAE,CAAC;IACX,CAAC;IACD,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACX,CAAC;QACD,OAAO,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,2BAA2B,KAAK,GAAG;YACrC,CAAC,CAAC,8BAA8B,CAAC;IACnC,CAAC;IACD,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACX,CAAC;QACD,OAAO,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,sBAAsB,KAAK,QAAQ;YACrC,CAAC,CAAC,8BAA8B,CAAC;IACnC,CAAC;CACD,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACzB,SAAoB,EACpB,oBAAkD,EAClD,kBAA2B,EAClB,EAAE;IACX,IAAI,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAE1C,CAAC;IACF,IAAI,aAAa,GAAG,GAAG,CAAC;IAGxB,IAAI,oBAAoB,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACtD,YAAY,GAAG,YAAY,CAAC,MAAM,CACjC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CACE,CAAC;QACvC,aAAa,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAA2B,YAAY,CAAC,CAAC;QAGjE,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1E,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC5C,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;QAGD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAEnD,EAAE,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;QAED,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAuB,CAAC;IAExE,OAAO,YAAY;SACjB,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,EAAE,EAAE,CAC1C,sBAAsB,CACrB,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,QAAQ,CACR,CACD;SACA,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,aAAa,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC9B,SAA0B,EAC1B,UAAmB,EACnB,UAAwC,EACxC,SAA6B,EACpB,EAAE;IACX,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAyB,CAAC,CAAC;QAE9D,OAAO,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,SAAS,KAAK,UAAU;QAC9B,CAAC,CAAC,cAAc,SAAS,GAAG;QAC5B,CAAC,CAAC,IAAI,SAAS,KAAK,UAAU,GAAG,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC3B,WAAoC,EACpC,UAAwC,EAC/B,EAAE;IACX,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,CAAC;IAEvC,IAAI,QAAQ,KAAK,OAAO,QAAQ,EAAE,CAAC;QAClC,OAAO,gBAAgB,CAAC,KAAK,KAAK,UAAU;YAC3C,CAAC,CAAC,cAAc,QAAQ,GAAG;YAC3B,CAAC,CAAC,gBAAgB,QAAQ,4BAA4B,CAAC;IACzD,CAAC;IAED,OAAO,gBAAgB,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CACjC,MAAyB,EACzB,kBAA2B,EAClB,EAAE;IACX,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC1C,MAAM,UAAU,GAAG,EAAE,CAAC;IAEtB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,gBAAgB,GAAG,mBAAmB,CAC3C,WAAW,EACX,MAAM,CAAC,gBAAgB,CACvB,CAAC;IAEF,IAAI,gBAAgB,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,eAAe,GAAG,iBAAiB,CACxC,SAAS,EACT,MAAM,CAAC,cAAc,EACrB,kBAAkB,CAClB,CAAC;QAEF,UAAU,CAAC,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3D,CAAC,CAAC"}
@@ -1,26 +0,0 @@
1
- import { type Logger } from "@prosopo/common";
2
- import type { RedisClientType } from "redis";
3
- import type { AccessRule } from "#policy/rule.js";
4
- import type { AccessRuleEntry, AccessRulesFilter, AccessRulesReader } from "#policy/rulesStorage.js";
5
- export declare class RedisRulesReader implements AccessRulesReader {
6
- private readonly client;
7
- private readonly logger;
8
- constructor(client: RedisClientType, logger: Logger);
9
- getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
10
- fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
11
- findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
12
- findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
13
- fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
14
- protected fetchRuleEntries(keys: string[]): Promise<AccessRuleEntry[]>;
15
- protected getRuleKeys(ruleIds: string[]): string[];
16
- }
17
- export declare class DummyRedisRulesReader implements AccessRulesReader {
18
- private readonly logger;
19
- constructor(logger: Logger);
20
- getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
21
- fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
22
- findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
23
- findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
24
- fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
25
- }
26
- //# sourceMappingURL=redisRulesReader.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisRulesReader.d.ts","sourceRoot":"","sources":["../../../src/redis/reader/redisRulesReader.ts"],"names":[],"mappings":"AAeA,OAAO,EACN,KAAK,MAAM,EAGX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAe7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAGjC,qBAAa,gBAAiB,YAAW,iBAAiB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM;IAG1B,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAazD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;IAiElB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAgDd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;cAYA,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA8B5E,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;CAGlD;AAED,qBAAa,qBAAsB,YAAW,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAWvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAWzD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;IAWlB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAWd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;CAKhB"}
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisRulesReader.js","sourceRoot":"","sources":["../../../src/redis/reader/redisRulesReader.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAEN,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACN,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACN,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,6BAA6B,EAC7B,4BAA4B,GAC5B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAMjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,OAAO,gBAAgB;IAC5B,YACkB,MAAuB,EACvB,MAAc;QADd,WAAM,GAAN,MAAM,CAAiB;QACvB,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAEhE,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,UAAU,EACV,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAChE,CAAC;QAEF,OAAO,iBAAiB;aACtB,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAiB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAEhE,MAAM,YAAY,GAAG,MAAM,0BAA0B,CACpD,UAAU,EACV,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAC/C,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CACd,MAAyB,EACzB,kBAAkB,GAAG,KAAK,EAC1B,mBAAmB,GAAG,IAAI;QAE1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAE7D,IAAI,mBAAmB,IAAI,KAAK,KAAK,sBAAsB,EAAE,CAAC;YAE7D,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,WAAwB,CAAC;QAE7B,IAAI,CAAC;YAEJ,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CACxC,6BAA6B,EAC7B,KAAK,EACL;gBACC,OAAO,EAAE,mBAAmB;gBAE5B,KAAK,EAAE;oBACN,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,gBAAgB;iBACtB;aACD,CACD,CAAC;YAEF,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,uBAAuB;oBAC5B,IAAI,EAAE;wBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;4BACC,MAAM,EAAE,MAAM;4BACd,WAAW,EAAE,WAAW;4BACxB,KAAK,EAAE,KAAK;yBACZ,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CACf;qBACD;iBACD,CAAC,CAAC,CAAC;YACL,CAAC;QACF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;wBACC,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,MAAM;qBACd,EACD;wBACC,KAAK,EAAE,IAAI;qBACX,CACD;iBACD;gBACD,GAAG,EAAE,gCAAgC;aACrC,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,CAAC;QACX,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAEhE,OAAO,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,MAAyB,EACzB,kBAAkB,GAAG,KAAK;QAE1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAE7D,IAAI,OAAO,GAAa,EAAE,CAAC;QAE3B,IAAI,CAAC;YAEJ,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACxC,IAAI,CAAC,MAAM,EACX,KAAK,EACL,IAAI,CAAC,MAAM,CACX,CAAC;YAEF,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAClC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAClD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;wBACC,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,MAAM;qBACd,EACD;wBACC,KAAK,EAAE,IAAI;qBACX,CACD;iBACD;gBACD,GAAG,EAAE,6CAA6C;aAClD,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,oCAAoC;YACzC,IAAI,EAAE;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,QAAQ,EAAE,OAAO;aACjB;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,YAAkD;QAElD,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAc,EAAE,EAAE;YACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAChC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAClD,CAAC;YAEF,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,IAAc;QAC9C,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,CAC3D,IAAI,CAAC,MAAM,EACX,IAAI,EACJ,IAAI,CAAC,MAAM,CACX,CAAC;QACF,MAAM,OAAO,GAAsB,EAAE,CAAC;QAEtC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAEvD,IAAI,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,iBAAiB,CAC7B,CAAC,QAAQ,CAAC,EACV,eAAe,EACf,IAAI,CAAC,MAAM,CACX,CAAC,CAAC,CAAC,CAAC;gBAEL,IAAI,IAAI,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,IAAI;wBACV,oBAAoB,EAAE,WAAW,CAAC,KAAK,CAAC;qBACxC,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAES,WAAW,CAAC,OAAiB;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,4BAA4B,GAAG,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;CACD;AAED,MAAM,OAAO,qBAAqB;IACjC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,8DAA8D;YACnE,IAAI,EAAE;gBACL,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAiB;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,sDAAsD;YAC3D,IAAI,EAAE;gBACL,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,SAAS,CACd,MAAyB,EACzB,kBAAkB,GAAG,KAAK,EAC1B,mBAAmB,GAAG,IAAI;QAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,sDAAsD;YAC3D,IAAI,EAAE;gBACL,MAAM;aACN;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,MAAyB,EACzB,kBAAkB,GAAG,KAAK;QAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,wDAAwD;YAC7D,IAAI,EAAE;gBACL,MAAM;aACN;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,YAAkD;QAElD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,4DAA4D;SACjE,CAAC,CAAC,CAAC;IACL,CAAC;CACD"}
@@ -1,7 +0,0 @@
1
- import type { Logger } from "@prosopo/common";
2
- import type { RedisClientType } from "redis";
3
- import { type AccessRulesReader, type AccessRulesStorage, type AccessRulesWriter } from "#policy/accessRules.js";
4
- export declare const createRedisAccessRulesReader: (client: RedisClientType, logger: Logger) => AccessRulesReader;
5
- export declare const createRedisAccessRulesWriter: (client: RedisClientType) => AccessRulesWriter;
6
- export declare const createRedisAccessRulesStorage: (client: RedisClientType, logger: Logger) => AccessRulesStorage;
7
- //# sourceMappingURL=redisAccessRules.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisAccessRules.d.ts","sourceRoot":"","sources":["../../src/redis/redisAccessRules.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAE7C,OAAO,EAEN,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EAEtB,MAAM,wBAAwB,CAAC;AAUhC,eAAO,MAAM,4BAA4B,WAChC,eAAe,UACf,MAAM,KACZ,iBAmGF,CAAC;AAEF,eAAO,MAAM,4BAA4B,WAChC,eAAe,KACrB,iBAoCF,CAAC;AAEF,eAAO,MAAM,6BAA6B,WACjC,eAAe,UACf,MAAM,KACZ,kBAKF,CAAC"}
@@ -1,119 +0,0 @@
1
- import * as util from "node:util";
2
- import { accessRuleSchema, } from "#policy/accessRules.js";
3
- import { accessRuleRedisKeyPrefix, accessRulesRedisIndexName, accessRulesRedisSearchOptions, getRedisAccessRuleKey, getRedisAccessRuleValue, getRedisAccessRulesQuery, } from "#policy/redis/redisAccessRulesIndex.js";
4
- export const createRedisAccessRulesReader = (client, logger) => {
5
- return {
6
- findRules: async (filter, matchingFieldsOnly = false, skipEmptyUserScopes = true) => {
7
- const query = getRedisAccessRulesQuery(filter, matchingFieldsOnly);
8
- if (skipEmptyUserScopes && query === "ismissing(@clientId)") {
9
- return [];
10
- }
11
- let searchReply;
12
- try {
13
- searchReply = await client.ft.search(accessRulesRedisIndexName, query, accessRulesRedisSearchOptions);
14
- if (searchReply.total > 0) {
15
- logger.debug(() => ({
16
- msg: "Executed search query",
17
- data: {
18
- inspect: util.inspect({
19
- filter: filter,
20
- searchReply: searchReply,
21
- query: query,
22
- }, { depth: null }),
23
- },
24
- }));
25
- }
26
- }
27
- catch (e) {
28
- logger.error(() => ({
29
- err: e,
30
- data: {
31
- inspect: util.inspect({
32
- query: query,
33
- filter: filter,
34
- }, {
35
- depth: null,
36
- }),
37
- },
38
- msg: "failed to execute search query",
39
- }));
40
- return [];
41
- }
42
- return extractAccessRulesFromSearchReply(searchReply, logger);
43
- },
44
- findRuleIds: async (filter, matchingFieldsOnly = false) => {
45
- const query = getRedisAccessRulesQuery(filter, matchingFieldsOnly);
46
- let searchReply;
47
- try {
48
- searchReply = await client.ft.searchNoContent(accessRulesRedisIndexName, query, accessRulesRedisSearchOptions);
49
- }
50
- catch (e) {
51
- logger.error(() => ({
52
- err: e,
53
- data: {
54
- inspect: util.inspect({
55
- query: query,
56
- filter: filter,
57
- }, {
58
- depth: null,
59
- }),
60
- },
61
- msg: "Failed to execute search query for rule IDs",
62
- }));
63
- return [];
64
- }
65
- return searchReply.documents;
66
- },
67
- };
68
- };
69
- export const createRedisAccessRulesWriter = (client) => {
70
- return {
71
- insertRule: async (rule, expirationTimestamp) => {
72
- const ruleKey = getRedisAccessRuleKey(rule);
73
- const ruleValue = getRedisAccessRuleValue(rule);
74
- await client.hSet(ruleKey, ruleValue);
75
- if (expirationTimestamp) {
76
- const expiryDate = new Date(expirationTimestamp);
77
- if (expiryDate.getUTCFullYear() === 1970) {
78
- await client.expireAt(ruleKey, expirationTimestamp);
79
- }
80
- else {
81
- const timestampInSeconds = Math.floor(expirationTimestamp / 1000);
82
- await client.expireAt(ruleKey, timestampInSeconds);
83
- }
84
- }
85
- return ruleKey;
86
- },
87
- deleteRules: async (ruleIds) => void (await client.del(ruleIds)),
88
- deleteAllRules: async () => {
89
- const keys = await client.keys(`${accessRuleRedisKeyPrefix}*`);
90
- if (keys.length === 0)
91
- return 0;
92
- return await client.del(keys);
93
- },
94
- };
95
- };
96
- export const createRedisAccessRulesStorage = (client, logger) => {
97
- return {
98
- ...createRedisAccessRulesReader(client, logger),
99
- ...createRedisAccessRulesWriter(client),
100
- };
101
- };
102
- const extractAccessRulesFromSearchReply = (searchReply, logger) => {
103
- const accessRules = [];
104
- searchReply.documents.map(({ id, value: document }) => {
105
- const parsedDocument = accessRuleSchema.safeParse(document);
106
- if (parsedDocument.success) {
107
- accessRules.push(parsedDocument.data);
108
- }
109
- else {
110
- logger.debug(() => ({
111
- msg: "Failed to parse access rule from search reply",
112
- id: id,
113
- error: parsedDocument.error,
114
- }));
115
- }
116
- });
117
- return accessRules;
118
- };
119
- //# sourceMappingURL=redisAccessRules.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisAccessRules.js","sourceRoot":"","sources":["../../src/redis/redisAccessRules.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAMlC,OAAO,EAKN,gBAAgB,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,GACxB,MAAM,wCAAwC,CAAC;AAEhD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC3C,MAAuB,EACvB,MAAc,EACM,EAAE;IACtB,OAAO;QACN,SAAS,EAAE,KAAK,EACf,MAAoB,EACpB,kBAAkB,GAAG,KAAK,EAC1B,mBAAmB,GAAG,IAAI,EACF,EAAE;YAC1B,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YAEnE,IAAI,mBAAmB,IAAI,KAAK,KAAK,sBAAsB,EAAE,CAAC;gBAE7D,OAAO,EAAE,CAAC;YACX,CAAC;YAED,IAAI,WAAwB,CAAC;YAE7B,IAAI,CAAC;gBACJ,WAAW,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,MAAM,CACnC,yBAAyB,EACzB,KAAK,EACL,6BAA6B,CAC7B,CAAC;gBAEF,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACnB,GAAG,EAAE,uBAAuB;wBAC5B,IAAI,EAAE;4BACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;gCACC,MAAM,EAAE,MAAM;gCACd,WAAW,EAAE,WAAW;gCACxB,KAAK,EAAE,KAAK;6BACZ,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CACf;yBACD;qBACD,CAAC,CAAC,CAAC;gBACL,CAAC;YACF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACnB,GAAG,EAAE,CAAC;oBACN,IAAI,EAAE;wBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;4BACC,KAAK,EAAE,KAAK;4BACZ,MAAM,EAAE,MAAM;yBACd,EACD;4BACC,KAAK,EAAE,IAAI;yBACX,CACD;qBACD;oBACD,GAAG,EAAE,gCAAgC;iBACrC,CAAC,CAAC,CAAC;gBAEJ,OAAO,EAAE,CAAC;YACX,CAAC;YAED,OAAO,iCAAiC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QAED,WAAW,EAAE,KAAK,EACjB,MAAoB,EACpB,kBAAkB,GAAG,KAAK,EACN,EAAE;YACtB,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YAEnE,IAAI,WAAiC,CAAC;YAEtC,IAAI,CAAC;gBACJ,WAAW,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,eAAe,CAC5C,yBAAyB,EACzB,KAAK,EACL,6BAA6B,CAC7B,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAEZ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACnB,GAAG,EAAE,CAAC;oBACN,IAAI,EAAE;wBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;4BACC,KAAK,EAAE,KAAK;4BACZ,MAAM,EAAE,MAAM;yBACd,EACD;4BACC,KAAK,EAAE,IAAI;yBACX,CACD;qBACD;oBACD,GAAG,EAAE,6CAA6C;iBAClD,CAAC,CAAC,CAAC;gBAEJ,OAAO,EAAE,CAAC;YACX,CAAC;YAED,OAAO,WAAW,CAAC,SAAS,CAAC;QAC9B,CAAC;KACD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC3C,MAAuB,EACH,EAAE;IACtB,OAAO;QACN,UAAU,EAAE,KAAK,EAChB,IAAgB,EAChB,mBAA4B,EACV,EAAE;YACpB,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;YAEhD,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEtC,IAAI,mBAAmB,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACjD,IAAI,UAAU,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;oBAE1C,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACP,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;oBAClE,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;gBACpD,CAAC;YACF,CAAC;YAED,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,OAAiB,EAAiB,EAAE,CACvD,KAAK,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEjC,cAAc,EAAE,KAAK,IAAqB,EAAE;YAC3C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,wBAAwB,GAAG,CAAC,CAAC;YAE/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;YAEhC,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;KACD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC5C,MAAuB,EACvB,MAAc,EACO,EAAE;IACvB,OAAO;QACN,GAAG,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC;QAC/C,GAAG,4BAA4B,CAAC,MAAM,CAAC;KACvC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACzC,WAAwB,EACxB,MAAc,EACC,EAAE;IACjB,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrD,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,+CAA+C;gBACpD,EAAE,EAAE,EAAE;gBACN,KAAK,EAAE,cAAc,CAAC,KAAK;aAC3B,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACpB,CAAC,CAAC"}
@@ -1,13 +0,0 @@
1
- import { type FtSearchOptions } from "@redis/search";
2
- import type { RedisClientType } from "redis";
3
- import { type PolicyFilter } from "#policy/accessPolicyResolver.js";
4
- import type { AccessRule } from "#policy/accessRules.js";
5
- export declare const accessRulesRedisIndexName = "index:user-access-rules";
6
- export declare const accessRuleRedisKeyPrefix = "uar:";
7
- export declare const createRedisAccessRulesIndex: (client: RedisClientType, indexName?: string) => Promise<void>;
8
- export declare const accessRulesRedisSearchOptions: FtSearchOptions;
9
- export declare const accessRulesRedisDeleteOptions: FtSearchOptions;
10
- export declare const getRedisAccessRulesQuery: (filter: PolicyFilter, matchingFieldsOnly: boolean) => string;
11
- export declare const getRedisAccessRuleKey: (rule: AccessRule) => string;
12
- export declare const getRedisAccessRuleValue: (rule: AccessRule) => Record<string, string>;
13
- //# sourceMappingURL=redisAccessRulesIndex.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"redisAccessRulesIndex.d.ts","sourceRoot":"","sources":["../../src/redis/redisAccessRulesIndex.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,eAAe,EAAqB,MAAM,eAAe,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAM7C,OAAO,EAAE,KAAK,YAAY,EAAc,MAAM,iCAAiC,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGzD,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AAEnE,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAmC/C,eAAO,MAAM,2BAA2B,WAC/B,eAAe,cACX,MAAM,KAChB,OAAO,CAAC,IAAI,CAKd,CAAC;AA8CF,eAAO,MAAM,6BAA6B,EAAE,eAG3C,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,eAO3C,CAAC;AAYF,eAAO,MAAM,wBAAwB,WAC5B,YAAY,sBACA,OAAO,KACzB,MAkBF,CAAC;AA0FF,eAAO,MAAM,qBAAqB,SAAU,UAAU,KAAG,MAUzC,CAAC;AAEjB,eAAO,MAAM,uBAAuB,SAC7B,UAAU,KACd,MAAM,CAAC,MAAM,EAAE,MAAM,CAGtB,CAAC"}