@riocrypto/common-server 1.0.1483 → 1.0.1485

package/build/index.d.ts

@@ -4,6 +4,7 @@ export * from "./middlewares/get-order";
 export * from "./middlewares/authorize";
 export * from "./middlewares/not-sandbox";
 export * from "./middlewares/set-trace";
+export * from "./middlewares/require-role";
 export * from "./services/apiKey";
 export * from "./services/password";
 export * from "./services/logger";

package/build/index.js

@@ -20,6 +20,7 @@ __exportStar(require("./middlewares/get-order"), exports);
 __exportStar(require("./middlewares/authorize"), exports);
 __exportStar(require("./middlewares/not-sandbox"), exports);
 __exportStar(require("./middlewares/set-trace"), exports);
+__exportStar(require("./middlewares/require-role"), exports);
 __exportStar(require("./services/apiKey"), exports);
 __exportStar(require("./services/password"), exports);
 __exportStar(require("./services/logger"), exports);

package/build/middlewares/require-role.d.ts

@@ -0,0 +1,3 @@
+import { AuthRole } from "@riocrypto/common";
+import { NextFunction, Request, Response } from "express";
+export declare const requireMinRole: (req: Request, res: Response, next: NextFunction, minRole: AuthRole) => Promise<void>;

package/build/middlewares/require-role.js

@@ -0,0 +1,28 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireMinRole = void 0;
+const common_1 = require("@riocrypto/common");
+const authRoleOrder = [
+    common_1.AuthRole.Read,
+    common_1.AuthRole.Write,
+    common_1.AuthRole.Owner,
+];
+const requireMinRole = (req, res, next, minRole) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a;
+    if (!req.admin) {
+        if (authRoleOrder.indexOf((_a = req.auth) === null || _a === void 0 ? void 0 : _a.role) >= authRoleOrder.indexOf(minRole)) {
+            throw new common_1.GenericInputError(`Insufficient permissions. This endpoint requires at least the ${minRole} role. Contact your account owner to change your access role.`);
+        }
+    }
+    next();
+});
+exports.requireMinRole = requireMinRole;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.1483",
+  "version": "1.0.1485",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -28,7 +28,7 @@
     "@google-cloud/storage": "^6.9.5",
     "@google-cloud/vision": "^4.0.2",
     "@hyperdx/node-opentelemetry": "^0.4.2",
-    "@riocrypto/common": "^1.0.1319",
+    "@riocrypto/common": "^1.0.1331",
     "@types/express": "^4.17.13",
     "axios": "^0.27.2",
     "ccxt": "^3.0.30",