@prosopo/user-access-policy 3.5.32 → 3.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (148) hide show
  1. package/.turbo/turbo-build$colon$cjs.log +10 -10
  2. package/.turbo/turbo-build$colon$tsc.log +38 -0
  3. package/.turbo/turbo-build.log +15 -11
  4. package/CHANGELOG.md +61 -0
  5. package/dist/.export.d.ts +6 -0
  6. package/dist/.export.d.ts.map +1 -0
  7. package/dist/.export.js.map +1 -0
  8. package/dist/api/.export.d.ts +7 -0
  9. package/dist/api/.export.d.ts.map +1 -0
  10. package/dist/api/.export.js.map +1 -0
  11. package/dist/api/accessRulesApiClient.d.ts +2 -0
  12. package/dist/api/accessRulesApiClient.d.ts.map +1 -0
  13. package/dist/api/accessRulesApiClient.js +2 -0
  14. package/dist/api/accessRulesApiClient.js.map +1 -0
  15. package/dist/api/delete/.export.d.ts +2 -0
  16. package/dist/api/delete/.export.d.ts.map +1 -0
  17. package/dist/api/delete/.export.js.map +1 -0
  18. package/dist/api/delete/deleteAllRules.d.ts +11 -0
  19. package/dist/api/delete/deleteAllRules.d.ts.map +1 -0
  20. package/dist/api/delete/deleteAllRules.js.map +1 -0
  21. package/dist/api/delete/deleteRuleGroups.d.ts +19 -0
  22. package/dist/api/delete/deleteRuleGroups.d.ts.map +1 -0
  23. package/dist/api/delete/deleteRuleGroups.js.map +1 -0
  24. package/dist/api/delete/deleteRules.d.ts +15 -0
  25. package/dist/api/delete/deleteRules.d.ts.map +1 -0
  26. package/dist/api/delete/deleteRules.js.map +1 -0
  27. package/dist/api/read/.export.d.ts +4 -0
  28. package/dist/api/read/.export.d.ts.map +1 -0
  29. package/dist/api/read/.export.js.map +1 -0
  30. package/dist/api/read/fetchRules.d.ts +53 -0
  31. package/dist/api/read/fetchRules.d.ts.map +1 -0
  32. package/dist/api/read/fetchRules.js.map +1 -0
  33. package/dist/api/read/findRuleIds.d.ts +28 -0
  34. package/dist/api/read/findRuleIds.d.ts.map +1 -0
  35. package/dist/api/read/findRuleIds.js.map +1 -0
  36. package/dist/api/read/getMissingIds.d.ts +28 -0
  37. package/dist/api/read/getMissingIds.d.ts.map +1 -0
  38. package/dist/api/read/getMissingIds.js.map +1 -0
  39. package/dist/api/ruleApiRoutes.d.ts +43 -0
  40. package/dist/api/ruleApiRoutes.d.ts.map +1 -0
  41. package/dist/api/ruleApiRoutes.js.map +1 -0
  42. package/dist/api/rulesApiClient.d.ts +20 -0
  43. package/dist/api/rulesApiClient.d.ts.map +1 -0
  44. package/dist/api/rulesApiClient.js.map +1 -0
  45. package/dist/api/write/.export.d.ts +2 -0
  46. package/dist/api/write/.export.d.ts.map +1 -0
  47. package/dist/api/write/.export.js.map +1 -0
  48. package/dist/api/write/insertRules.d.ts +29 -0
  49. package/dist/api/write/insertRules.d.ts.map +1 -0
  50. package/dist/api/write/insertRules.js +5 -3
  51. package/dist/api/write/insertRules.js.map +1 -0
  52. package/dist/api/write/rehashRules.d.ts +11 -0
  53. package/dist/api/write/rehashRules.d.ts.map +1 -0
  54. package/dist/api/write/rehashRules.js.map +1 -0
  55. package/dist/cjs/api/write/insertRules.cjs +4 -2
  56. package/dist/cjs/mongoose/mongooseRuleSchema.cjs +3 -1
  57. package/dist/cjs/redis/reader/redisRulesQuery.cjs +12 -1
  58. package/dist/cjs/redis/redisRuleIndex.cjs +4 -1
  59. package/dist/cjs/redis/redisRulesWriter.cjs +6 -0
  60. package/dist/cjs/ruleInput/policyInput.cjs +8 -0
  61. package/dist/cjs/ruleInput/userScopeInput.cjs +3 -1
  62. package/dist/cjs/ruleRecord.cjs +3 -1
  63. package/dist/mongoose/.export.d.ts +2 -0
  64. package/dist/mongoose/.export.d.ts.map +1 -0
  65. package/dist/mongoose/.export.js.map +1 -0
  66. package/dist/mongoose/mongooseRuleSchema.d.ts +4 -0
  67. package/dist/mongoose/mongooseRuleSchema.d.ts.map +1 -0
  68. package/dist/mongoose/mongooseRuleSchema.js +3 -1
  69. package/dist/mongoose/mongooseRuleSchema.js.map +1 -0
  70. package/dist/redis/.export.d.ts +3 -0
  71. package/dist/redis/.export.d.ts.map +1 -0
  72. package/dist/redis/.export.js.map +1 -0
  73. package/dist/redis/reader/redisAggregate.d.ts +4 -0
  74. package/dist/redis/reader/redisAggregate.d.ts.map +1 -0
  75. package/dist/redis/reader/redisAggregate.js.map +1 -0
  76. package/dist/redis/reader/redisRulesQuery.d.ts +4 -0
  77. package/dist/redis/reader/redisRulesQuery.d.ts.map +1 -0
  78. package/dist/redis/reader/redisRulesQuery.js +12 -1
  79. package/dist/redis/reader/redisRulesQuery.js.map +1 -0
  80. package/dist/redis/reader/redisRulesReader.d.ts +26 -0
  81. package/dist/redis/reader/redisRulesReader.d.ts.map +1 -0
  82. package/dist/redis/reader/redisRulesReader.js.map +1 -0
  83. package/dist/redis/redisClient.d.ts +11 -0
  84. package/dist/redis/redisClient.d.ts.map +1 -0
  85. package/dist/redis/redisClient.js.map +1 -0
  86. package/dist/redis/redisRuleIndex.d.ts +13 -0
  87. package/dist/redis/redisRuleIndex.d.ts.map +1 -0
  88. package/dist/redis/redisRuleIndex.js +4 -1
  89. package/dist/redis/redisRuleIndex.js.map +1 -0
  90. package/dist/redis/redisRulesStorage.d.ts +5 -0
  91. package/dist/redis/redisRulesStorage.d.ts.map +1 -0
  92. package/dist/redis/redisRulesStorage.js.map +1 -0
  93. package/dist/redis/redisRulesWriter.d.ts +22 -0
  94. package/dist/redis/redisRulesWriter.d.ts.map +1 -0
  95. package/dist/redis/redisRulesWriter.js +6 -0
  96. package/dist/redis/redisRulesWriter.js.map +1 -0
  97. package/dist/rule.d.ts +36 -0
  98. package/dist/rule.d.ts.map +1 -0
  99. package/dist/rule.js.map +1 -0
  100. package/dist/ruleInput/.export.d.ts +4 -0
  101. package/dist/ruleInput/.export.d.ts.map +1 -0
  102. package/dist/ruleInput/.export.js.map +1 -0
  103. package/dist/ruleInput/policyInput.d.ts +39 -0
  104. package/dist/ruleInput/policyInput.d.ts.map +1 -0
  105. package/dist/ruleInput/policyInput.js +9 -1
  106. package/dist/ruleInput/policyInput.js.map +1 -0
  107. package/dist/ruleInput/ruleInput.d.ts +157 -0
  108. package/dist/ruleInput/ruleInput.d.ts.map +1 -0
  109. package/dist/ruleInput/ruleInput.js.map +1 -0
  110. package/dist/ruleInput/userScopeInput.d.ts +109 -0
  111. package/dist/ruleInput/userScopeInput.d.ts.map +1 -0
  112. package/dist/ruleInput/userScopeInput.js +3 -1
  113. package/dist/ruleInput/userScopeInput.js.map +1 -0
  114. package/dist/ruleRecord.d.ts +18 -0
  115. package/dist/ruleRecord.d.ts.map +1 -0
  116. package/dist/ruleRecord.js +3 -1
  117. package/dist/ruleRecord.js.map +1 -0
  118. package/dist/rulesStorage.d.ts +30 -0
  119. package/dist/rulesStorage.d.ts.map +1 -0
  120. package/dist/rulesStorage.js.map +1 -0
  121. package/dist/tests/policyInput.unit.test.d.ts +2 -0
  122. package/dist/tests/policyInput.unit.test.d.ts.map +1 -0
  123. package/dist/tests/policyInput.unit.test.js +116 -0
  124. package/dist/tests/policyInput.unit.test.js.map +1 -0
  125. package/dist/tests/redis/reader/redisRulesQuery.unit.test.d.ts +2 -0
  126. package/dist/tests/redis/reader/redisRulesQuery.unit.test.d.ts.map +1 -0
  127. package/dist/tests/redis/reader/redisRulesQuery.unit.test.js +160 -0
  128. package/dist/tests/redis/reader/redisRulesQuery.unit.test.js.map +1 -0
  129. package/dist/tests/redis/redisRulesStorage.integration.test.d.ts +2 -0
  130. package/dist/tests/redis/redisRulesStorage.integration.test.d.ts.map +1 -0
  131. package/dist/tests/redis/redisRulesStorage.integration.test.js +706 -0
  132. package/dist/tests/redis/redisRulesStorage.integration.test.js.map +1 -0
  133. package/dist/tests/testLogger.d.ts +4 -0
  134. package/dist/tests/testLogger.d.ts.map +1 -0
  135. package/dist/tests/testLogger.js +22 -0
  136. package/dist/tests/testLogger.js.map +1 -0
  137. package/dist/tests/transformRule.unit.test.d.ts +2 -0
  138. package/dist/tests/transformRule.unit.test.d.ts.map +1 -0
  139. package/dist/tests/transformRule.unit.test.js +190 -0
  140. package/dist/tests/transformRule.unit.test.js.map +1 -0
  141. package/dist/transformRule.d.ts +7 -0
  142. package/dist/transformRule.d.ts.map +1 -0
  143. package/dist/transformRule.js.map +1 -0
  144. package/entries.ts +1 -1
  145. package/package.json +11 -10
  146. package/vite.cjs.config.ts +1 -1
  147. package/vite.esm.config.ts +1 -1
  148. package/vite.test.config.ts +1 -1
@@ -0,0 +1,39 @@
1
+ import { z } from "zod";
2
+ import { type AccessPolicy, AccessPolicyType } from "#policy/rule.js";
3
+ export declare const accessPolicyInput: z.ZodObject<{
4
+ type: z.ZodNativeEnum<typeof AccessPolicyType>;
5
+ captchaType: z.ZodOptional<z.ZodNativeEnum<typeof import("@prosopo/types").CaptchaType>>;
6
+ description: z.ZodOptional<z.ZodString>;
7
+ solvedImagesCount: z.ZodOptional<z.ZodNumber>;
8
+ imageThreshold: z.ZodOptional<z.ZodNumber>;
9
+ powDifficulty: z.ZodOptional<z.ZodNumber>;
10
+ unsolvedImagesCount: z.ZodOptional<z.ZodNumber>;
11
+ frictionlessScore: z.ZodOptional<z.ZodNumber>;
12
+ }, "strip", z.ZodTypeAny, {
13
+ type: AccessPolicyType;
14
+ captchaType?: import("@prosopo/types").CaptchaType | undefined;
15
+ description?: string | undefined;
16
+ solvedImagesCount?: number | undefined;
17
+ imageThreshold?: number | undefined;
18
+ powDifficulty?: number | undefined;
19
+ unsolvedImagesCount?: number | undefined;
20
+ frictionlessScore?: number | undefined;
21
+ }, {
22
+ type: AccessPolicyType;
23
+ captchaType?: import("@prosopo/types").CaptchaType | undefined;
24
+ description?: string | undefined;
25
+ solvedImagesCount?: number | undefined;
26
+ imageThreshold?: number | undefined;
27
+ powDifficulty?: number | undefined;
28
+ unsolvedImagesCount?: number | undefined;
29
+ frictionlessScore?: number | undefined;
30
+ }>;
31
+ export declare const sanitizeAccessPolicy: (policy: AccessPolicy) => AccessPolicy;
32
+ export declare const policyScopeInput: z.ZodObject<{
33
+ clientId: z.ZodOptional<z.ZodString>;
34
+ }, "strip", z.ZodTypeAny, {
35
+ clientId?: string | undefined;
36
+ }, {
37
+ clientId?: string | undefined;
38
+ }>;
39
+ //# sourceMappingURL=policyInput.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policyInput.d.ts","sourceRoot":"","sources":["../../src/ruleInput/policyInput.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAgB,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EACN,KAAK,YAAY,EACjB,gBAAgB,EAEhB,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAcoC,CAAC;AAGnE,eAAO,MAAM,oBAAoB,WAAY,YAAY,KAAG,YAM3D,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;EAEmC,CAAC"}
@@ -16,10 +16,18 @@ const accessPolicyInput = z.object({
16
16
  // used to increase the user's score
17
17
  frictionlessScore: z.coerce.number().optional()
18
18
  });
19
+ const sanitizeAccessPolicy = (policy) => {
20
+ if (policy.type === AccessPolicyType.Block) {
21
+ const { captchaType, solvedImagesCount, ...blockPolicy } = policy;
22
+ return blockPolicy;
23
+ }
24
+ return policy;
25
+ };
19
26
  const policyScopeInput = z.object({
20
27
  clientId: z.coerce.string().optional()
21
28
  });
22
29
  export {
23
30
  accessPolicyInput,
24
- policyScopeInput
31
+ policyScopeInput,
32
+ sanitizeAccessPolicy
25
33
  };
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policyInput.js","sourceRoot":"","sources":["../../src/ruleInput/policyInput.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAgB,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EAEN,gBAAgB,GAEhB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC;IACpC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEzC,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE/C,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE5C,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE3C,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEjD,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACf,CAAiC,CAAC;AAGnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAoB,EAAgB,EAAE;IAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC;QAClE,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACP,CAAgC,CAAC"}
@@ -0,0 +1,157 @@
1
+ import { type ZodType, z } from "zod";
2
+ import type { AccessPolicy, AccessRule, PolicyScope } from "#policy/rule.js";
3
+ import { type AccessRulesFilter, FilterScopeMatch } from "#policy/rulesStorage.js";
4
+ import { type UserScopeInput } from "./userScopeInput.js";
5
+ type RuleGroupInput = {
6
+ groupId?: string;
7
+ ruleGroupId?: string;
8
+ };
9
+ export type AccessRuleInput = AccessPolicy & PolicyScope & UserScopeInput & RuleGroupInput;
10
+ export declare const accessRuleInput: ZodType<AccessRule>;
11
+ export declare const ruleEntryInput: z.ZodObject<{
12
+ rule: ZodType<AccessRule, z.ZodTypeDef, AccessRule>;
13
+ expiresUnixTimestamp: z.ZodOptional<z.ZodNumber>;
14
+ }, "strip", z.ZodTypeAny, {
15
+ rule: AccessPolicy & PolicyScope & import("#policy/rule.js").UserAttributes & import("#policy/rule.js").UserIp & {
16
+ groupId?: string;
17
+ };
18
+ expiresUnixTimestamp?: number | undefined;
19
+ }, {
20
+ rule: AccessPolicy & PolicyScope & import("#policy/rule.js").UserAttributes & import("#policy/rule.js").UserIp & {
21
+ groupId?: string;
22
+ };
23
+ expiresUnixTimestamp?: number | undefined;
24
+ }>;
25
+ export type AccessRulesFilterInput = AccessRulesFilter & {
26
+ userScope?: UserScopeInput;
27
+ policyScopes?: PolicyScope[];
28
+ };
29
+ export declare const accessRulesFilterInput: z.ZodObject<{
30
+ policyScope: z.ZodOptional<z.ZodObject<{
31
+ clientId: z.ZodOptional<z.ZodString>;
32
+ }, "strip", z.ZodTypeAny, {
33
+ clientId?: string | undefined;
34
+ }, {
35
+ clientId?: string | undefined;
36
+ }>>;
37
+ policyScopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
38
+ clientId: z.ZodOptional<z.ZodString>;
39
+ }, "strip", z.ZodTypeAny, {
40
+ clientId?: string | undefined;
41
+ }, {
42
+ clientId?: string | undefined;
43
+ }>, "many">>;
44
+ policyScopeMatch: z.ZodDefault<z.ZodNativeEnum<typeof FilterScopeMatch>>;
45
+ userScope: z.ZodOptional<z.ZodEffects<z.ZodIntersection<z.ZodIntersection<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>, z.ZodEffects<z.ZodObject<{
46
+ ip: z.ZodOptional<z.ZodString>;
47
+ ipMask: z.ZodOptional<z.ZodString>;
48
+ numericIp: z.ZodOptional<z.ZodBigInt>;
49
+ numericIpMaskMin: z.ZodOptional<z.ZodBigInt>;
50
+ numericIpMaskMax: z.ZodOptional<z.ZodBigInt>;
51
+ }, "strip", z.ZodTypeAny, {
52
+ ip?: string | undefined;
53
+ ipMask?: string | undefined;
54
+ numericIp?: bigint | undefined;
55
+ numericIpMaskMin?: bigint | undefined;
56
+ numericIpMaskMax?: bigint | undefined;
57
+ }, {
58
+ ip?: string | undefined;
59
+ ipMask?: string | undefined;
60
+ numericIp?: bigint | undefined;
61
+ numericIpMaskMin?: bigint | undefined;
62
+ numericIpMaskMax?: bigint | undefined;
63
+ }>, import("#policy/rule.js").UserIp, {
64
+ ip?: string | undefined;
65
+ ipMask?: string | undefined;
66
+ numericIp?: bigint | undefined;
67
+ numericIpMaskMin?: bigint | undefined;
68
+ numericIpMaskMax?: bigint | undefined;
69
+ }>>, z.ZodEffects<z.ZodObject<{
70
+ userAgent: z.ZodOptional<z.ZodString>;
71
+ userId: z.ZodOptional<z.ZodString>;
72
+ ja4Hash: z.ZodOptional<z.ZodString>;
73
+ headersHash: z.ZodOptional<z.ZodString>;
74
+ userAgentHash: z.ZodOptional<z.ZodString>;
75
+ headHash: z.ZodOptional<z.ZodString>;
76
+ coords: z.ZodOptional<z.ZodString>;
77
+ }, "strip", z.ZodTypeAny, {
78
+ userAgentHash?: string | undefined;
79
+ userId?: string | undefined;
80
+ ja4Hash?: string | undefined;
81
+ headersHash?: string | undefined;
82
+ headHash?: string | undefined;
83
+ coords?: string | undefined;
84
+ userAgent?: string | undefined;
85
+ }, {
86
+ userAgentHash?: string | undefined;
87
+ userId?: string | undefined;
88
+ ja4Hash?: string | undefined;
89
+ headersHash?: string | undefined;
90
+ headHash?: string | undefined;
91
+ coords?: string | undefined;
92
+ userAgent?: string | undefined;
93
+ }>, import("#policy/rule.js").UserAttributes, {
94
+ userAgentHash?: string | undefined;
95
+ userId?: string | undefined;
96
+ ja4Hash?: string | undefined;
97
+ headersHash?: string | undefined;
98
+ headHash?: string | undefined;
99
+ coords?: string | undefined;
100
+ userAgent?: string | undefined;
101
+ }>>, UserScopeInput, {} & {
102
+ ip?: string | undefined;
103
+ ipMask?: string | undefined;
104
+ numericIp?: bigint | undefined;
105
+ numericIpMaskMin?: bigint | undefined;
106
+ numericIpMaskMax?: bigint | undefined;
107
+ } & {
108
+ userAgentHash?: string | undefined;
109
+ userId?: string | undefined;
110
+ ja4Hash?: string | undefined;
111
+ headersHash?: string | undefined;
112
+ headHash?: string | undefined;
113
+ coords?: string | undefined;
114
+ userAgent?: string | undefined;
115
+ }>>;
116
+ userScopeMatch: z.ZodDefault<z.ZodNativeEnum<typeof FilterScopeMatch>>;
117
+ groupId: z.ZodOptional<z.ZodString>;
118
+ }, "strip", z.ZodTypeAny, {
119
+ policyScopeMatch: FilterScopeMatch;
120
+ userScopeMatch: FilterScopeMatch;
121
+ userScope?: UserScopeInput | undefined;
122
+ groupId?: string | undefined;
123
+ policyScope?: {
124
+ clientId?: string | undefined;
125
+ } | undefined;
126
+ policyScopes?: {
127
+ clientId?: string | undefined;
128
+ }[] | undefined;
129
+ }, {
130
+ userScope?: ({} & {
131
+ ip?: string | undefined;
132
+ ipMask?: string | undefined;
133
+ numericIp?: bigint | undefined;
134
+ numericIpMaskMin?: bigint | undefined;
135
+ numericIpMaskMax?: bigint | undefined;
136
+ } & {
137
+ userAgentHash?: string | undefined;
138
+ userId?: string | undefined;
139
+ ja4Hash?: string | undefined;
140
+ headersHash?: string | undefined;
141
+ headHash?: string | undefined;
142
+ coords?: string | undefined;
143
+ userAgent?: string | undefined;
144
+ }) | undefined;
145
+ groupId?: string | undefined;
146
+ policyScope?: {
147
+ clientId?: string | undefined;
148
+ } | undefined;
149
+ policyScopeMatch?: FilterScopeMatch | undefined;
150
+ userScopeMatch?: FilterScopeMatch | undefined;
151
+ policyScopes?: {
152
+ clientId?: string | undefined;
153
+ }[] | undefined;
154
+ }>;
155
+ export declare const getAccessRuleFiltersFromInput: (filterInput: AccessRulesFilterInput) => AccessRulesFilter[];
156
+ export {};
157
+ //# sourceMappingURL=ruleInput.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ruleInput.d.ts","sourceRoot":"","sources":["../../src/ruleInput/ruleInput.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAEN,KAAK,iBAAiB,EACtB,gBAAgB,EAChB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,KAAK,cAAc,EAAkB,MAAM,qBAAqB,CAAC;AAE1E,KAAK,cAAc,GAAG;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,YAAY,GACzC,WAAW,GACX,cAAc,GACd,cAAc,CAAC;AAiBhB,eAAO,MAAM,eAAe,EAAE,OAAO,CAAC,UAAU,CAQkB,CAAC;AAEnE,eAAO,MAAM,cAAc;;;;;;;;;;;;;EAG6C,CAAC;AAEzE,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,GAAG;IACxD,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWmD,CAAC;AAEvF,eAAO,MAAM,6BAA6B,gBAC5B,sBAAsB,KACjC,iBAAiB,EAiBnB,CAAC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ruleInput.js","sourceRoot":"","sources":["../../src/ruleInput/ruleInput.ts"],"names":[],"mappings":"AAeA,OAAO,EAAgB,CAAC,EAAE,MAAM,KAAK,CAAC;AAEtC,OAAO,EAGN,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAuB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAY1E,MAAM,cAAc,GAAG,CAAC;KACtB,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACP,CAAC;KACnC,SAAS,CAAC,CAAC,cAA8B,EAAE,EAAE;IAC7C,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,GAAG,cAAc,CAAC;IAErD,IAAI,QAAQ,KAAK,OAAO,WAAW,EAAE,CAAC;QACrC,SAAS,CAAC,OAAO,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAwB,CAAC;KACnD,MAAM,CAAC;IACP,GAAG,iBAAiB,CAAC,KAAK;IAC1B,GAAG,gBAAgB,CAAC,KAAK;CACzB,CAAC;KACD,GAAG,CAAC,cAAc,CAAC;KACnB,GAAG,CAAC,cAAc,CAAC;KAEnB,SAAS,CAAC,CAAC,SAA0B,EAAc,EAAE,CAAC,SAAS,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,eAAe;IACrB,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACf,CAAoC,CAAC;AAOzE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAClD,gBAAgB,EAAE,CAAC;SACjB,UAAU,CAAC,gBAAgB,CAAC;SAC5B,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC;IACjC,SAAS,EAAE,cAAc,CAAC,QAAQ,EAAE;IACpC,cAAc,EAAE,CAAC;SACf,UAAU,CAAC,gBAAgB,CAAC;SAC5B,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACY,CAA2C,CAAC;AAEvF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC5C,WAAmC,EACb,EAAE;IACxB,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC;IAEjE,MAAM,eAAe,GAAG,YAAY,IAAI,EAAE,CAAC;IAE3C,IAAI,WAAW,EAAE,CAAC;QACjB,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC5C,GAAG,UAAU;YACb,WAAW;SACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,UAAU,CAAC,CAAC;AACrB,CAAC,CAAC"}
@@ -0,0 +1,109 @@
1
+ import { z } from "zod";
2
+ import type { UserAttributes, UserIp } from "#policy/rule.js";
3
+ import type { UserAttributesRecord, UserIpRecord } from "#policy/ruleRecord.js";
4
+ export type UserAttributesInput = UserAttributes & UserAttributesRecord;
5
+ export type UserIpInput = UserIp & UserIpRecord;
6
+ export type UserScopeInput = UserAttributesInput & UserIpInput;
7
+ export declare const userScopeSchema: z.ZodObject<{
8
+ userId: z.ZodOptional<z.ZodString>;
9
+ ja4Hash: z.ZodOptional<z.ZodString>;
10
+ headersHash: z.ZodOptional<z.ZodString>;
11
+ userAgentHash: z.ZodOptional<z.ZodString>;
12
+ headHash: z.ZodOptional<z.ZodString>;
13
+ coords: z.ZodOptional<z.ZodString>;
14
+ numericIp: z.ZodOptional<z.ZodBigInt>;
15
+ numericIpMaskMin: z.ZodOptional<z.ZodBigInt>;
16
+ numericIpMaskMax: z.ZodOptional<z.ZodBigInt>;
17
+ }, "strip", z.ZodTypeAny, {
18
+ userAgentHash?: string | undefined;
19
+ userId?: string | undefined;
20
+ ja4Hash?: string | undefined;
21
+ headersHash?: string | undefined;
22
+ headHash?: string | undefined;
23
+ coords?: string | undefined;
24
+ numericIp?: bigint | undefined;
25
+ numericIpMaskMin?: bigint | undefined;
26
+ numericIpMaskMax?: bigint | undefined;
27
+ }, {
28
+ userAgentHash?: string | undefined;
29
+ userId?: string | undefined;
30
+ ja4Hash?: string | undefined;
31
+ headersHash?: string | undefined;
32
+ headHash?: string | undefined;
33
+ coords?: string | undefined;
34
+ numericIp?: bigint | undefined;
35
+ numericIpMaskMin?: bigint | undefined;
36
+ numericIpMaskMax?: bigint | undefined;
37
+ }>;
38
+ export declare const userScopeInput: z.ZodEffects<z.ZodIntersection<z.ZodIntersection<z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>, z.ZodEffects<z.ZodObject<{
39
+ ip: z.ZodOptional<z.ZodString>;
40
+ ipMask: z.ZodOptional<z.ZodString>;
41
+ numericIp: z.ZodOptional<z.ZodBigInt>;
42
+ numericIpMaskMin: z.ZodOptional<z.ZodBigInt>;
43
+ numericIpMaskMax: z.ZodOptional<z.ZodBigInt>;
44
+ }, "strip", z.ZodTypeAny, {
45
+ ip?: string | undefined;
46
+ ipMask?: string | undefined;
47
+ numericIp?: bigint | undefined;
48
+ numericIpMaskMin?: bigint | undefined;
49
+ numericIpMaskMax?: bigint | undefined;
50
+ }, {
51
+ ip?: string | undefined;
52
+ ipMask?: string | undefined;
53
+ numericIp?: bigint | undefined;
54
+ numericIpMaskMin?: bigint | undefined;
55
+ numericIpMaskMax?: bigint | undefined;
56
+ }>, UserIp, {
57
+ ip?: string | undefined;
58
+ ipMask?: string | undefined;
59
+ numericIp?: bigint | undefined;
60
+ numericIpMaskMin?: bigint | undefined;
61
+ numericIpMaskMax?: bigint | undefined;
62
+ }>>, z.ZodEffects<z.ZodObject<{
63
+ userAgent: z.ZodOptional<z.ZodString>;
64
+ userId: z.ZodOptional<z.ZodString>;
65
+ ja4Hash: z.ZodOptional<z.ZodString>;
66
+ headersHash: z.ZodOptional<z.ZodString>;
67
+ userAgentHash: z.ZodOptional<z.ZodString>;
68
+ headHash: z.ZodOptional<z.ZodString>;
69
+ coords: z.ZodOptional<z.ZodString>;
70
+ }, "strip", z.ZodTypeAny, {
71
+ userAgentHash?: string | undefined;
72
+ userId?: string | undefined;
73
+ ja4Hash?: string | undefined;
74
+ headersHash?: string | undefined;
75
+ headHash?: string | undefined;
76
+ coords?: string | undefined;
77
+ userAgent?: string | undefined;
78
+ }, {
79
+ userAgentHash?: string | undefined;
80
+ userId?: string | undefined;
81
+ ja4Hash?: string | undefined;
82
+ headersHash?: string | undefined;
83
+ headHash?: string | undefined;
84
+ coords?: string | undefined;
85
+ userAgent?: string | undefined;
86
+ }>, UserAttributes, {
87
+ userAgentHash?: string | undefined;
88
+ userId?: string | undefined;
89
+ ja4Hash?: string | undefined;
90
+ headersHash?: string | undefined;
91
+ headHash?: string | undefined;
92
+ coords?: string | undefined;
93
+ userAgent?: string | undefined;
94
+ }>>, UserScopeInput, {} & {
95
+ ip?: string | undefined;
96
+ ipMask?: string | undefined;
97
+ numericIp?: bigint | undefined;
98
+ numericIpMaskMin?: bigint | undefined;
99
+ numericIpMaskMax?: bigint | undefined;
100
+ } & {
101
+ userAgentHash?: string | undefined;
102
+ userId?: string | undefined;
103
+ ja4Hash?: string | undefined;
104
+ headersHash?: string | undefined;
105
+ headHash?: string | undefined;
106
+ coords?: string | undefined;
107
+ userAgent?: string | undefined;
108
+ }>;
109
+ //# sourceMappingURL=userScopeInput.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"userScopeInput.d.ts","sourceRoot":"","sources":["../../src/ruleInput/userScopeInput.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAgB,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEhF,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG,oBAAoB,CAAC;AA+BxE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,YAAY,CAAC;AAsChD,MAAM,MAAM,cAAc,GAAG,mBAAmB,GAAG,WAAW,CAAC;AAE/D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGgC,CAAC;AAE7D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQzB,CAAC"}
@@ -7,7 +7,9 @@ const userAttributesSchema = z.object({
7
7
  userId: z.coerce.string().optional(),
8
8
  ja4Hash: z.coerce.string().optional(),
9
9
  headersHash: z.coerce.string().optional(),
10
- userAgentHash: z.coerce.string().optional()
10
+ userAgentHash: z.coerce.string().optional(),
11
+ headHash: z.coerce.string().optional(),
12
+ coords: z.coerce.string().optional()
11
13
  });
12
14
  const userAttributesInput = z.object({
13
15
  ...userAttributesSchema.shape,
@@ -0,0 +1 @@
1
+ {"version":3,"file":"userScopeInput.js","sourceRoot":"","sources":["../../src/ruleInput/userScopeInput.ts"],"names":[],"mappings":"AAcA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAgB,CAAC,EAAE,MAAM,KAAK,CAAC;AAMtC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAErC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACF,CAAmC,CAAC;AAEvE,MAAM,mBAAmB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACP,GAAG,oBAAoB,CAAC,KAAK;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACA,CAAC;KACxC,SAAS,CAAC,CAAC,mBAAwC,EAAkB,EAAE;IAEvE,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,mBAAmB,CAAC;IAExD,IAAI,QAAQ,KAAK,OAAO,SAAS,EAAE,CAAC;QACnC,SAAS,CAAC,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC,CAAC;AAEJ,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAU,EAAE,CACnD,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAI7D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9C,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpB,CAA2B,CAAC;AAEvD,MAAM,WAAW,GAAG,CAAC;KACnB,MAAM,CAAC;IACP,GAAG,YAAY,CAAC,KAAK;IACrB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACE,CAAC;KAChC,SAAS,CAAC,CAAC,WAAwB,EAAU,EAAE;IAE/C,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,GAAG,WAAW,CAAC;IAErD,IAAI,QAAQ,KAAK,OAAO,EAAE,EAAE,CAAC;QAC5B,aAAa,CAAC,SAAS,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACrD,CAAC;IAGD,IAAI,QAAQ,KAAK,OAAO,MAAM,EAAE,CAAC;QAGhC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAGtC,aAAa,CAAC,gBAAgB,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC;QAGlE,aAAa,CAAC,gBAAgB,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,CAAC;IACjE,CAAC;IAED,OAAO,aAAa,CAAC;AACtB,CAAC,CAAC,CAAC;AAIJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,GAAG,YAAY,CAAC,KAAK;IACrB,GAAG,oBAAoB,CAAC,KAAK;CACA,CAA8B,CAAC;AAE7D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC7B,MAAM,CAAC,EAAE,CAAC;KAEV,GAAG,CAAC,WAAW,CAAC;KAChB,GAAG,CAAC,mBAAmB,CAAC;KACxB,SAAS,CAET,CAAC,cAAc,EAAkB,EAAE,CAAC,cAAc,CAClD,CAAC"}
@@ -0,0 +1,18 @@
1
+ import type { AccessPolicy, PolicyScope, UserAttributes } from "#policy/rule.js";
2
+ export type UserAttributesRecord = Omit<UserAttributes, "userAgentHash"> & {
3
+ userAgent?: string;
4
+ };
5
+ export declare const userAttributesRecordFields: ["userId", "ja4Hash", "headersHash", "userAgent", "headHash", "coords"];
6
+ export type UserIpRecord = {
7
+ ip?: string;
8
+ ipMask?: string;
9
+ };
10
+ export declare const userIpRecordFields: ["ip", "ipMask"];
11
+ export type UserScopeRecord = UserAttributesRecord & UserIpRecord;
12
+ export declare const userScopeRecordFields: ["userId", "ja4Hash", "headersHash", "userAgent", "headHash", "coords", "ip", "ipMask"];
13
+ export type UserScopeRecordField = (typeof userScopeRecordFields)[number];
14
+ export type AccessRuleRecord = AccessPolicy & PolicyScope & UserScopeRecord & {
15
+ ruleGroupId?: string;
16
+ };
17
+ export declare const getUserScopeRecordFromAccessRuleRecord: (ruleRecord: AccessRuleRecord) => UserScopeRecord;
18
+ //# sourceMappingURL=ruleRecord.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ruleRecord.d.ts","sourceRoot":"","sources":["../src/ruleRecord.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACX,YAAY,EACZ,WAAW,EACX,cAAc,EACd,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,GAAG;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,0BAA0B,yEAOY,CAAC;AAEpD,MAAM,MAAM,YAAY,GAAG;IAE1B,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,kBAAkB,kBAGY,CAAC;AAE5C,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,YAAY,CAAC;AAElE,eAAO,MAAM,qBAAqB,yFAGY,CAAC;AAE/C,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAC1C,WAAW,GACX,eAAe,GAAG;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEH,eAAO,MAAM,sCAAsC,eACtC,gBAAgB,KAC1B,eAKD,CAAC"}
@@ -2,7 +2,9 @@ const userAttributesRecordFields = [
2
2
  "userId",
3
3
  "ja4Hash",
4
4
  "headersHash",
5
- "userAgent"
5
+ "userAgent",
6
+ "headHash",
7
+ "coords"
6
8
  ];
7
9
  const userIpRecordFields = [
8
10
  "ip",
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ruleRecord.js","sourceRoot":"","sources":["../src/ruleRecord.ts"],"names":[],"mappings":"AAwBA,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACzC,QAAQ;IACR,SAAS;IACT,aAAa;IACb,WAAW;IACX,UAAU;IACV,QAAQ;CAC0C,CAAC;AASpD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IACjC,IAAI;IACJ,QAAQ;CACkC,CAAC;AAI5C,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,GAAG,0BAA0B;IAC7B,GAAG,kBAAkB;CACwB,CAAC;AAU/C,MAAM,CAAC,MAAM,sCAAsC,GAAG,CACrD,UAA4B,EACV,EAAE,CACpB,MAAM,CAAC,WAAW,CACjB,qBAAqB;KACnB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;KAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC5C,CAAC"}
@@ -0,0 +1,30 @@
1
+ import type { AccessRule, PolicyScope, UserScope } from "#policy/rule.js";
2
+ export declare enum FilterScopeMatch {
3
+ Exact = "exact",
4
+ Greedy = "greedy"
5
+ }
6
+ export type AccessRulesFilter = {
7
+ policyScope?: PolicyScope;
8
+ policyScopeMatch?: FilterScopeMatch;
9
+ userScope?: UserScope;
10
+ userScopeMatch?: FilterScopeMatch;
11
+ groupId?: string;
12
+ };
13
+ export type AccessRuleEntry = {
14
+ rule: AccessRule;
15
+ expiresUnixTimestamp?: number;
16
+ };
17
+ export type AccessRulesReader = {
18
+ fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
19
+ getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
20
+ findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
21
+ findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
22
+ fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
23
+ };
24
+ export type AccessRulesWriter = {
25
+ insertRules(ruleEntries: AccessRuleEntry[]): Promise<string[]>;
26
+ deleteRules(ruleIds: string[]): Promise<void>;
27
+ deleteAllRules(): Promise<number>;
28
+ };
29
+ export type AccessRulesStorage = AccessRulesReader & AccessRulesWriter;
30
+ //# sourceMappingURL=rulesStorage.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rulesStorage.d.ts","sourceRoot":"","sources":["../src/rulesStorage.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE1E,oBAAY,gBAAgB;IAC3B,KAAK,UAAU;IACf,MAAM,WAAW;CACjB;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC/B,WAAW,CAAC,EAAE,WAAW,CAAC;IAK1B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,SAAS,CAAC,EAAE,SAAS,CAAC;IAKtB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAE1D,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAExD,SAAS,CACR,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,CAAC,EAAE,OAAO,EAC5B,mBAAmB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAEzB,WAAW,CACV,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,CAAC,EAAE,OAAO,GAC1B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErB,eAAe,CACd,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,WAAW,CAAC,WAAW,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE/D,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rulesStorage.js","sourceRoot":"","sources":["../src/rulesStorage.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC3B,mCAAe,CAAA;IACf,qCAAiB,CAAA;AAClB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=policyInput.unit.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policyInput.unit.test.d.ts","sourceRoot":"","sources":["../../src/tests/policyInput.unit.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,116 @@
1
+ import { CaptchaType } from "@prosopo/types";
2
+ import { describe, expect, it } from "vitest";
3
+ import { AccessPolicyType } from "#policy/rule.js";
4
+ import { sanitizeAccessPolicy } from "#policy/ruleInput/policyInput.js";
5
+ describe("sanitizeAccessPolicy", () => {
6
+ describe("block policies", () => {
7
+ it("should remove captchaType from block policies", () => {
8
+ const input = {
9
+ type: AccessPolicyType.Block,
10
+ captchaType: CaptchaType.image,
11
+ description: "test block policy",
12
+ };
13
+ const result = sanitizeAccessPolicy(input);
14
+ expect(result).toEqual({
15
+ type: AccessPolicyType.Block,
16
+ description: "test block policy",
17
+ });
18
+ expect(result.captchaType).toBeUndefined();
19
+ });
20
+ it("should remove solvedImagesCount from block policies", () => {
21
+ const input = {
22
+ type: AccessPolicyType.Block,
23
+ solvedImagesCount: 5,
24
+ description: "test block policy",
25
+ };
26
+ const result = sanitizeAccessPolicy(input);
27
+ expect(result).toEqual({
28
+ type: AccessPolicyType.Block,
29
+ description: "test block policy",
30
+ });
31
+ expect(result.solvedImagesCount).toBeUndefined();
32
+ });
33
+ it("should remove both captchaType and solvedImagesCount from block policies", () => {
34
+ const input = {
35
+ type: AccessPolicyType.Block,
36
+ captchaType: CaptchaType.image,
37
+ solvedImagesCount: 5,
38
+ description: "test block policy",
39
+ };
40
+ const result = sanitizeAccessPolicy(input);
41
+ expect(result).toEqual({
42
+ type: AccessPolicyType.Block,
43
+ description: "test block policy",
44
+ });
45
+ expect(result.captchaType).toBeUndefined();
46
+ expect(result.solvedImagesCount).toBeUndefined();
47
+ });
48
+ it("should keep other fields in block policies", () => {
49
+ const input = {
50
+ type: AccessPolicyType.Block,
51
+ captchaType: CaptchaType.image,
52
+ solvedImagesCount: 5,
53
+ description: "test block policy",
54
+ imageThreshold: 0.5,
55
+ powDifficulty: 10,
56
+ unsolvedImagesCount: 3,
57
+ frictionlessScore: 100,
58
+ };
59
+ const result = sanitizeAccessPolicy(input);
60
+ expect(result).toEqual({
61
+ type: AccessPolicyType.Block,
62
+ description: "test block policy",
63
+ imageThreshold: 0.5,
64
+ powDifficulty: 10,
65
+ unsolvedImagesCount: 3,
66
+ frictionlessScore: 100,
67
+ });
68
+ expect(result.captchaType).toBeUndefined();
69
+ expect(result.solvedImagesCount).toBeUndefined();
70
+ });
71
+ });
72
+ describe("restrict policies", () => {
73
+ it("should keep captchaType in restrict policies", () => {
74
+ const input = {
75
+ type: AccessPolicyType.Restrict,
76
+ captchaType: CaptchaType.image,
77
+ description: "test restrict policy",
78
+ };
79
+ const result = sanitizeAccessPolicy(input);
80
+ expect(result).toEqual({
81
+ type: AccessPolicyType.Restrict,
82
+ captchaType: CaptchaType.image,
83
+ description: "test restrict policy",
84
+ });
85
+ });
86
+ it("should keep solvedImagesCount in restrict policies", () => {
87
+ const input = {
88
+ type: AccessPolicyType.Restrict,
89
+ solvedImagesCount: 5,
90
+ description: "test restrict policy",
91
+ };
92
+ const result = sanitizeAccessPolicy(input);
93
+ expect(result).toEqual({
94
+ type: AccessPolicyType.Restrict,
95
+ solvedImagesCount: 5,
96
+ description: "test restrict policy",
97
+ });
98
+ });
99
+ it("should keep both captchaType and solvedImagesCount in restrict policies", () => {
100
+ const input = {
101
+ type: AccessPolicyType.Restrict,
102
+ captchaType: CaptchaType.image,
103
+ solvedImagesCount: 5,
104
+ description: "test restrict policy",
105
+ };
106
+ const result = sanitizeAccessPolicy(input);
107
+ expect(result).toEqual({
108
+ type: AccessPolicyType.Restrict,
109
+ captchaType: CaptchaType.image,
110
+ solvedImagesCount: 5,
111
+ description: "test restrict policy",
112
+ });
113
+ });
114
+ });
115
+ });
116
+ //# sourceMappingURL=policyInput.unit.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policyInput.unit.test.js","sourceRoot":"","sources":["../../src/tests/policyInput.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACxD,MAAM,KAAK,GAAG;gBACb,IAAI,EAAE,gBAAgB,CAAC,KAAK;gBAC5B,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,WAAW,EAAE,mBAAmB;aAChC,CAAC;YAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,gBAAgB,CAAC,KAAK;gBAC5B,WAAW,EAAE,mBAAmB;aAChC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC9D,MAAM,KAAK,GAAG;gBACb,IAAI,EAAE,gBAAgB,CAAC,KAAK;gBAC5B,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,mBAAmB;aAChC,CAAC;YAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,gBAAgB,CAAC,KAAK;gBAC5B,WAAW,EAAE,mBAAmB;aAChC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;YACnF,MAAM,KAAK,GAAG;gBACb,IAAI,EAAE,gBAAgB,CAAC,KAAK;gBAC5B,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,mBAAmB;aAChC,CAAC;YAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,gBAAgB,CAAC,KAAK;gBAC5B,WAAW,EAAE,mBAAmB;aAChC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACrD,MAAM,KAAK,GAAG;gBACb,IAAI,EAAE,gBAAgB,CAAC,KAAK;gBAC5B,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,mBAAmB;gBAChC,cAAc,EAAE,GAAG;gBACnB,aAAa,EAAE,EAAE;gBACjB,mBAAmB,EAAE,CAAC;gBACtB,iBAAiB,EAAE,GAAG;aACtB,CAAC;YAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,gBAAgB,CAAC,KAAK;gBAC5B,WAAW,EAAE,mBAAmB;gBAChC,cAAc,EAAE,GAAG;gBACnB,aAAa,EAAE,EAAE;gBACjB,mBAAmB,EAAE,CAAC;gBACtB,iBAAiB,EAAE,GAAG;aACtB,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;QAClD,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACvD,MAAM,KAAK,GAAG;gBACb,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,WAAW,EAAE,sBAAsB;aACnC,CAAC;YAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,WAAW,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC7D,MAAM,KAAK,GAAG;gBACb,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,sBAAsB;aACnC,CAAC;YAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YAClF,MAAM,KAAK,GAAG;gBACb,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,sBAAsB;aACnC,CAAC;YAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;gBAC/B,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=redisRulesQuery.unit.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"redisRulesQuery.unit.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/redis/reader/redisRulesQuery.unit.test.ts"],"names":[],"mappings":""}