@qelos/api-kit 3.11.9 → 3.11.10

package/dist/index.d.ts

@@ -5,3 +5,4 @@ export * from './internal-service';
 export * from './user-middlewares';
 export * from './emit-internal-event';
 export * from './response-error';
+export * from './request-utils';

package/dist/index.js

@@ -21,4 +21,5 @@ __exportStar(require("./internal-service"), exports);
 __exportStar(require("./user-middlewares"), exports);
 __exportStar(require("./emit-internal-event"), exports);
 __exportStar(require("./response-error"), exports);
+__exportStar(require("./request-utils"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA0B;AAC1B,wCAAqB;AACrB,2CAAwB;AACxB,qDAAkC;AAClC,qDAAkC;AAClC,wDAAqC;AACrC,mDAAiC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA0B;AAC1B,wCAAqB;AACrB,2CAAwB;AACxB,qDAAkC;AAClC,qDAAkC;AAClC,wDAAqC;AACrC,mDAAiC;AACjC,kDAAgC"}

package/dist/request-utils.d.ts

@@ -0,0 +1,6 @@
+import type { Request } from 'express';
+/**
+ * Reads bypassAdmin from request body, query, or header (x-bypass-admin).
+ * When true, privileged users (e.g. admin) are treated as regular users for scope filtering.
+ */
+export declare function getBypassAdmin(req: Request): boolean;

package/dist/request-utils.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBypassAdmin = getBypassAdmin;
+/**
+ * Reads bypassAdmin from request body, query, or header (x-bypass-admin).
+ * When true, privileged users (e.g. admin) are treated as regular users for scope filtering.
+ */
+function getBypassAdmin(req) {
+    if (typeof req.body?.bypassAdmin !== 'undefined') {
+        return !!req.body.bypassAdmin;
+    }
+    if (req.query?.bypassAdmin === 'true') {
+        return true;
+    }
+    const h = req.headers?.['x-bypass-admin'];
+    return h === 'true' || h === '1';
+}
+//# sourceMappingURL=request-utils.js.map

package/dist/request-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-utils.js","sourceRoot":"","sources":["../src/request-utils.ts"],"names":[],"mappings":";;AAMA,wCASC;AAbD;;;GAGG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,IAAI,OAAQ,GAAW,CAAC,IAAI,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;QAC1D,OAAO,CAAC,CAAE,GAAW,CAAC,IAAI,CAAC,WAAW,CAAC;IACzC,CAAC;IACD,IAAK,GAAW,CAAC,KAAK,EAAE,WAAW,KAAK,MAAM,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;AACnC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qelos/api-kit",
-  "version": "3.11.9",
+  "version": "3.11.10",
   "description": "API-Kit package to help with qelos infrastructure and reuse capabilities across services",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/index.ts

@@ -4,4 +4,5 @@ export * from './router'
 export * from './internal-service'
 export * from './user-middlewares'
 export * from './emit-internal-event'
-export * from './response-error';
+export * from './response-error';
+export * from './request-utils';

package/src/request-utils.ts

@@ -0,0 +1,16 @@
+import type { Request } from 'express';
+
+/**
+ * Reads bypassAdmin from request body, query, or header (x-bypass-admin).
+ * When true, privileged users (e.g. admin) are treated as regular users for scope filtering.
+ */
+export function getBypassAdmin(req: Request): boolean {
+  if (typeof (req as any).body?.bypassAdmin !== 'undefined') {
+    return !!(req as any).body.bypassAdmin;
+  }
+  if ((req as any).query?.bypassAdmin === 'true') {
+    return true;
+  }
+  const h = req.headers?.['x-bypass-admin'];
+  return h === 'true' || h === '1';
+}