@punks/backend-entity-manager 0.0.107 → 0.0.109

package/dist/cjs/types/platforms/nest/__test__/server/infrastructure/authentication/processors/entity-auth/index.d.ts

@@ -1,4 +1,4 @@
-import { NestEntityAuthorizationMiddleware } from "../../../../../..";
+import { IMultiOrganizationEntity, NestEntityAuthorizationMiddleware } from "../../../../../..";
 import { IAuthorizationResult } from "../../../../../../../..";
 import { AppAuthContext, AppUserContext } from "../../types";
 export declare abstract class AppEntityAuthorizationMiddlewareBase<TEntity> extends NestEntityAuthorizationMiddleware<TEntity, AppAuthContext, AppUserContext> {
@@ -8,4 +8,11 @@ export declare abstract class AppEntityAuthorizationMiddlewareBase<TEntity> exte
     protected defaultCanUpdate(entity: Partial<TEntity>, context: AppAuthContext): Promise<IAuthorizationResult>;
     protected defaultCanDelete(entity: Partial<TEntity>, context: AppAuthContext): Promise<IAuthorizationResult>;
     protected defaultCanDeleteItems(context: AppAuthContext): Promise<IAuthorizationResult>;
+    protected organizationEntityCanSearch(context: AppAuthContext): Promise<IAuthorizationResult>;
+    protected organizationEntityCanRead(entity: IMultiOrganizationEntity, context: AppAuthContext): Promise<IAuthorizationResult>;
+    protected organizationEntityCanCreate(entity: IMultiOrganizationEntity, context: AppAuthContext): Promise<IAuthorizationResult>;
+    protected organizationEntityCanUpdate(entity: IMultiOrganizationEntity, context: AppAuthContext): Promise<IAuthorizationResult>;
+    protected organizationEntityCanDelete(entity: IMultiOrganizationEntity, context: AppAuthContext): Promise<IAuthorizationResult>;
+    protected organizationEntityCanDeleteItems(context: AppAuthContext): Promise<IAuthorizationResult>;
+    private isOrganizationMatching;
 }

package/dist/cjs/types/platforms/nest/__test__/server/infrastructure/authentication/providers/context/index.d.ts

@@ -1,8 +1,8 @@
-import { AppAuthContext } from "../../types";
+import { AppUserContext } from "../../types";
 import { AppSessionService, IAuthenticationContext, IAuthenticationContextProvider } from "../../../../../../../..";
-export declare class AppAuthContextProvider implements IAuthenticationContextProvider<AppAuthContext> {
+export declare class AppAuthContextProvider implements IAuthenticationContextProvider<AppUserContext> {
     private readonly appSessionService;
     constructor(appSessionService: AppSessionService);
-    getContext(): Promise<IAuthenticationContext<AppAuthContext>>;
+    getContext(): Promise<IAuthenticationContext<AppUserContext>>;
     private getRequestAuth;
 }

package/dist/cjs/types/platforms/nest/__test__/server/infrastructure/authentication/types.d.ts

@@ -5,7 +5,9 @@ export type AppUserInfo = {
     lastName: string;
 };
 export type AppUserContext = {
-    organizationUid: string;
+    organizationId?: string;
+    organizationUid?: string;
+    tenantId: string;
     tenantUid: string;
 };
 export declare class AppAuthContext implements IAuthenticationContext<AppUserContext> {

package/dist/cjs/types/platforms/nest/__test__/tests/multitenancy/multitenancy-actions.test.d.ts

@@ -0,0 +1,5 @@
+import { AppTenantEntity } from "../../server/database/core/entities/appTenant.entity";
+import { AppOrganizationEntity } from "../../server/database/core/entities/appOrganization.entity";
+import { AppAuthContextProvider } from "../../server/infrastructure/authentication";
+export declare const mockAdminUser: (auth: AppAuthContextProvider, tenant: AppTenantEntity) => void;
+export declare const mockOrganizationUser: (auth: AppAuthContextProvider, organization: AppOrganizationEntity) => void;

package/dist/cjs/types/platforms/nest/__test__/tests/ports.d.ts

@@ -6,6 +6,7 @@ export declare const NestTestServerPorts: {
     SessionTest: number;
     InitApiTest: number;
     VersioningApiTest: number;
+    MultiTenancyApiTest: number;
     TenantInitPipeline: number;
     CompanyInitPipeline: number;
 };

package/dist/cjs/types/platforms/nest/extensions/authentication/guards/auth.d.ts

@@ -2,6 +2,7 @@ import { CanActivate, ExecutionContext } from "@nestjs/common";
 import { Reflector } from "@nestjs/core";
 export declare class AuthGuard implements CanActivate {
     private reflector;
+    private readonly logger;
     constructor(reflector: Reflector);
     canActivate(context: ExecutionContext): boolean;
     private isRoleMatching;
@@ -10,4 +11,5 @@ export declare class AuthGuard implements CanActivate {
     private getAllowedRoles;
     private getCurrentAuth;
     private getMetadata;
+    private getContextInfo;
 }

package/dist/cjs/types/platforms/nest/extensions/multi-tenancy/abstractions/entities.d.ts

@@ -0,0 +1,10 @@
+import { IAppCompany, IAppOrganization, IAppTenant } from "./models";
+export interface IMultiTenantEntity {
+    tenant: IAppTenant;
+}
+export interface IMultiOrganizationEntity {
+    organization: IAppOrganization;
+}
+export interface IMultiCompanyEntity {
+    company: IAppCompany;
+}

package/dist/cjs/types/platforms/nest/extensions/multi-tenancy/abstractions/index.d.ts

@@ -1 +1,2 @@
 export * from "./models";
+export { IMultiCompanyEntity, IMultiOrganizationEntity, IMultiTenantEntity, } from "./entities";

package/dist/esm/index.js

@@ -2394,24 +2394,53 @@ const AuthenticationEvents = {
     UserPasswordResetCompleted: `${AUTHENTICATION_EVENTS_NAMESPACE}:user.passwordResetCompleted`,
 };
 
-let AuthGuard = class AuthGuard {
+var AuthGuard_1;
+let AuthGuard = AuthGuard_1 = class AuthGuard {
     constructor(reflector) {
         this.reflector = reflector;
+        this.logger = Log.getLogger(AuthGuard_1.name);
     }
     canActivate(context) {
         const isPublic = this.getIsPublic(context);
         if (isPublic) {
+            this.logger.debug(`Authorized:true -> public route`, this.getContextInfo({
+                context,
+            }));
             return true;
         }
         const auth = this.getCurrentAuth(context);
         const allowedRoles = this.getAllowedRoles(context);
         if (allowedRoles) {
-            return this.isRoleMatching(allowedRoles, auth?.roles ?? []);
+            const isAllowed = this.isRoleMatching(allowedRoles, auth?.roles ?? []);
+            this.logger.debug(`Authorized:${isAllowed} -> authorization guard`, {
+                ...this.getContextInfo({
+                    context,
+                    roles: auth?.roles,
+                    user: auth?.user,
+                }),
+                allowedRoles,
+            });
+            return isAllowed;
         }
         const isForAllAuthenticated = this.getIsForAllAuthenticated(context);
         if (isForAllAuthenticated) {
-            return !!auth?.user;
+            const isAuthenticated = !!auth?.user;
+            this.logger.debug(`Authorized:${isAuthenticated} -> authentication guard`, {
+                ...this.getContextInfo({
+                    context,
+                    roles: auth?.roles,
+                    user: auth?.user,
+                }),
+            });
+            return isAuthenticated;
         }
+        this.logger.debug(`Authorized:false -> auth guard`, {
+            ...this.getContextInfo({
+                context,
+                roles: auth?.roles,
+                user: auth?.user,
+            }),
+        });
         return false;
     }
     isRoleMatching(allowedRoles, userRoles) {
@@ -2441,8 +2470,28 @@ let AuthGuard = class AuthGuard {
             context.getClass(),
         ]);
     }
+    getContextInfo({ context, user, roles, }) {
+        return {
+            request: {
+                path: context.switchToHttp()?.getRequest()?.path,
+                method: context.switchToHttp()?.getRequest()?.method,
+            },
+            ...(user
+                ? {
+                    id: user.id,
+                    userName: user.userName,
+                    email: user.email,
+                    roles: roles?.map((role) => ({
+                        id: role.id,
+                        name: role.name,
+                        uid: role.uid,
+                    })),
+                }
+                : {}),
+        };
+    }
 };
-AuthGuard = __decorate([
+AuthGuard = AuthGuard_1 = __decorate([
     Injectable(),
     __metadata("design:paramtypes", [Reflector])
 ], AuthGuard);