@punks/backend-entity-manager 0.0.258 → 0.0.259

package/dist/cjs/index.js

@@ -3732,7 +3732,7 @@ const Authenticated = () => common.SetMetadata(AuthenticationGuardsSymbols.Authe
 const Permissions = (...permissions) => common.SetMetadata(AuthenticationGuardsSymbols.Permissions, permissions);
 const Roles = (...roles) => common.SetMetadata(AuthenticationGuardsSymbols.Roles, roles);
 const MemberOf = (...groups) => common.SetMetadata(AuthenticationGuardsSymbols.MemberOf, groups);
-const ApiKeyAccess = () => common.SetMetadata(AuthenticationGuardsSymbols.ApiKey, true);
+const ApiKeyAccess = (options) => common.SetMetadata(AuthenticationGuardsSymbols.ApiKey, options ?? {});
 const buildRolesGuard = ({ mainRole, secondaryRoles, }, options) => Roles(mainRole.uid, ...(!options?.exact && secondaryRoles
     ? secondaryRoles.map((role) => role.uid)
     : []));
@@ -3828,18 +3828,20 @@ exports.AuthGuard = AuthGuard_1 = class AuthGuard {
             return true;
         }
         const auth = this.getCurrentAuth(context);
-        const isApiRoute = this.getIsApiRoute(context);
-        if (isApiRoute) {
+        const apiRoute = this.getApiRoute(context);
+        if (apiRoute) {
             if (auth?.apiKey && !auth.apiKey.disabled) {
                 this.logger.debug(`Authorized:true -> api route with valid api key`, this.getContextInfo({
                     context,
                 }));
                 return true;
             }
-            this.logger.debug(`Authorized:false -> api route without api key`, this.getContextInfo({
-                context,
-            }));
-            return false;
+            if (apiRoute.strict) {
+                this.logger.debug(`Authorized:false -> api route without api key`, this.getContextInfo({
+                    context,
+                }));
+                return false;
+            }
         }
         const allowedRoles = this.getAllowedRoles(context);
         if (allowedRoles) {
@@ -3909,7 +3911,7 @@ exports.AuthGuard = AuthGuard_1 = class AuthGuard {
     getIsPublic(context) {
         return this.getMetadata(AuthenticationGuardsSymbols.Public, context);
     }
-    getIsApiRoute(context) {
+    getApiRoute(context) {
         return this.getMetadata(AuthenticationGuardsSymbols.ApiKey, context);
     }
     getAllowedRoles(context) {