@sendhome/common 1.0.155 → 1.0.158

package/build/index.d.ts

@@ -4,6 +4,7 @@ export * from "./errors/database-connection-error";
 export * from "./errors/not-authorized-error";
 export * from "./errors/not-found-error";
 export * from "./errors/request-validation-error";
+export * from "./middlewares/check-user-access";
 export * from "./middlewares/current-user";
 export * from "./middlewares/error-handler";
 export * from "./middlewares/require-auth";

package/build/index.js

@@ -17,6 +17,7 @@ __exportStar(require("./errors/database-connection-error"), exports);
 __exportStar(require("./errors/not-authorized-error"), exports);
 __exportStar(require("./errors/not-found-error"), exports);
 __exportStar(require("./errors/request-validation-error"), exports);
+__exportStar(require("./middlewares/check-user-access"), exports);
 __exportStar(require("./middlewares/current-user"), exports);
 __exportStar(require("./middlewares/error-handler"), exports);
 __exportStar(require("./middlewares/require-auth"), exports);

package/build/middlewares/check-user-access.d.ts

@@ -0,0 +1,20 @@
+import { Request, Response, NextFunction } from "express";
+interface UserPayload {
+    id: string;
+    sessionId: string;
+    account_type: string;
+    provider_level?: string;
+    admin_level?: string;
+}
+declare global {
+    namespace Express {
+        interface Request {
+            currentUser?: UserPayload;
+        }
+    }
+}
+export declare const checkUserAccess: (requiredAccountType: string, requiredLevels?: {
+    provider?: string[] | undefined;
+    admin?: string[] | undefined;
+} | undefined) => (req: Request, res: Response, next: NextFunction) => Response<any, Record<string, any>> | undefined;
+export {};

package/build/middlewares/check-user-access.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkUserAccess = void 0;
+const checkUserAccess = (requiredAccountType, requiredLevels) => {
+    return (req, res, next) => {
+        const { account_type, provider_level = '', admin_level = '' } = req.currentUser; // Default to empty string if undefined
+        // Check if the user's account_type matches the required account_type
+        if (account_type !== requiredAccountType) {
+            return res.status(403).send({ error: 'You do not have the necessary permissions to access this resource' });
+        }
+        // Check provider levels for 'provider' users
+        if (account_type === 'provider' && (requiredLevels === null || requiredLevels === void 0 ? void 0 : requiredLevels.provider)) {
+            if (!requiredLevels.provider.includes(provider_level)) {
+                return res.status(403).send({ error: 'Provider level not authorized for this route' });
+            }
+        }
+        // Check admin levels for 'admin' users
+        if (account_type === 'admin' && (requiredLevels === null || requiredLevels === void 0 ? void 0 : requiredLevels.admin)) {
+            if (!requiredLevels.admin.includes(admin_level)) {
+                return res.status(403).send({ error: 'Admin level not authorized for this route' });
+            }
+        }
+        next();
+    };
+};
+exports.checkUserAccess = checkUserAccess;

package/build/middlewares/current-user.d.ts

@@ -1,8 +1,10 @@
 import { Request, Response, NextFunction } from 'express';
 interface UserPayload {
     id: string;
-    email: string;
     sessionId: string;
+    account_type: string;
+    provider_level?: string;
+    admin_level?: string;
 }
 declare global {
     namespace Express {

package/build/middlewares/require-auth-old.d.ts

@@ -1,8 +1,10 @@
 import { Request, Response, NextFunction } from 'express';
 interface UserPayload {
     id: string;
-    email: string;
     sessionId: string;
+    account_type: string;
+    provider_level?: string;
+    admin_level?: string;
 }
 declare global {
     namespace Express {

package/build/middlewares/require-auth.d.ts

@@ -1,8 +1,10 @@
 import { Request, Response, NextFunction } from 'express';
 interface UserPayload {
     id: string;
-    email: string;
     sessionId: string;
+    account_type: string;
+    provider_level?: string;
+    admin_level?: string;
 }
 declare global {
     namespace Express {
@@ -11,5 +13,5 @@ declare global {
         }
     }
 }
-export declare const requireAuth: (sessionServiceUrl: string, deviceInfo: string) => (req: Request, res: Response, next: NextFunction) => Promise<void>;
+export declare const requireAuth: (sessionServiceUrl: string) => (req: Request, res: Response, next: NextFunction) => Promise<void>;
 export {};

package/build/middlewares/require-auth.js

@@ -16,7 +16,7 @@ exports.requireAuth = void 0;
 const axios_1 = __importDefault(require("axios"));
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 // Middleware to validate user session per device
-const requireAuth = (sessionServiceUrl, deviceInfo) => {
+const requireAuth = (sessionServiceUrl) => {
     return (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
         var _a;
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendhome/common",
-  "version": "1.0.155",
+  "version": "1.0.158",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",