@solidxai/core 0.1.9-beta.8 → 0.1.10-alpha.0

package/dist/passport-strategies/facebook-oauth.strategy.js

@@ -16,43 +16,65 @@ const passport_1 = require("@nestjs/passport");
 const passport_facebook_1 = require("passport-facebook");
 const facebook_oauth_helper_1 = require("../helpers/facebook-oauth.helper");
 const uuid_1 = require("uuid");
+const setting_service_1 = require("../services/setting.service");
 const user_service_1 = require("../services/user.service");
-const DUMMY_CLIENT_ID = 'DUMMY_CLIENT_ID';
-const DUMMY_CLIENT_SECRET = 'DUMMY_CLIENT_SECRET';
-const DUMMY_CALLBACK_URL = 'DUMMY_CALLBACK_URL';
-let FacebookOauthGuard = class FacebookOauthGuard extends (0, passport_1.AuthGuard)('facebook') {
+const DUMMY_CLIENT_ID = "DUMMY_CLIENT_ID";
+const DUMMY_CLIENT_SECRET = "DUMMY_CLIENT_SECRET";
+const DUMMY_CALLBACK_URL = "DUMMY_CALLBACK_URL";
+let FacebookOauthGuard = class FacebookOauthGuard extends (0, passport_1.AuthGuard)("facebook") {
 };
 exports.FacebookOauthGuard = FacebookOauthGuard;
 exports.FacebookOauthGuard = FacebookOauthGuard = __decorate([
     (0, common_1.Injectable)()
 ], FacebookOauthGuard);
-let FacebookOAuthStrategy = FacebookOAuthStrategy_1 = class FacebookOAuthStrategy extends (0, passport_1.PassportStrategy)(passport_facebook_1.Strategy, 'facebook') {
-    constructor(userService) {
-        const clientID = process.env.IAM_FACEBOOK_OAUTH_CLIENT_ID ?? DUMMY_CLIENT_ID;
-        const clientSecret = process.env.IAM_FACEBOOK_OAUTH_CLIENT_SECRET ?? DUMMY_CLIENT_SECRET;
-        const callbackURL = process.env.IAM_FACEBOOK_OAUTH_CALLBACK_URL ?? DUMMY_CALLBACK_URL;
-        const redirectURL = process.env.IAM_FACEBOOK_OAUTH_REDIRECT_URL;
+let FacebookOAuthStrategy = FacebookOAuthStrategy_1 = class FacebookOAuthStrategy extends (0, passport_1.PassportStrategy)(passport_facebook_1.Strategy, "facebook") {
+    constructor(userService, settingService) {
+        const clientID = settingService.getConfigValue("FACEBOOK_CLIENT_ID") ??
+            process.env.IAM_FACEBOOK_OAUTH_CLIENT_ID ??
+            DUMMY_CLIENT_ID;
+        const clientSecret = settingService.getConfigValue("FACEBOOK_CLIENT_SECRET") ??
+            process.env.IAM_FACEBOOK_OAUTH_CLIENT_SECRET ??
+            DUMMY_CLIENT_SECRET;
+        const callbackURL = settingService.getConfigValue("FACEBOOK_CALLBACK_URL") ??
+            process.env.IAM_FACEBOOK_OAUTH_CALLBACK_URL ??
+            DUMMY_CALLBACK_URL;
+        const redirectURL = settingService.getConfigValue("FACEBOOK_REDIRECT_URL") ?? process.env.IAM_FACEBOOK_OAUTH_REDIRECT_URL;
         super({
             clientID,
             clientSecret,
             callbackURL,
-            scope: ['email'],
-            profileFields: ['id', 'emails', 'name', 'photos'],
+            scope: ["email"],
+            profileFields: ["id", "name", "email", "picture.type(large)"],
         });
         this.userService = userService;
+        this.settingService = settingService;
         this.logger = new common_1.Logger(FacebookOAuthStrategy_1.name);
-        const facebookOauth = { clientID, clientSecret, callbackURL, redirectURL };
+        const facebookOauth = {
+            clientID,
+            clientSecret,
+            callbackURL,
+            redirectURL,
+        };
         if (!(0, facebook_oauth_helper_1.isFacebookOAuthConfigured)(facebookOauth)) {
-            this.logger.debug('Facebook OAuth strategy is not configured');
+            this.logger.debug("Facebook OAuth strategy is not configured");
+        }
+        else {
+            this.logger.debug(`Facebook OAuth configured with callbackURL=${callbackURL}`);
         }
     }
     async validate(_accessToken, _refreshToken, profile, done) {
         const { id, name, emails, photos } = profile;
         const loginAccessCode = (0, uuid_1.v4)();
+        const email = emails && emails.length > 0 ? emails[0].value : null;
+        const firstName = name?.givenName || "";
+        const lastName = name?.familyName || "";
+        const fullName = firstName || lastName
+            ? `${firstName} ${lastName}`.trim()
+            : profile.displayName;
         const user = {
-            provider: 'facebook',
+            provider: "facebook",
             providerId: id,
-            email: emails?.[0]?.value,
+            email: email,
             name: `${name.givenName} ${name.familyName}`,
             picture: photos?.[0]?.value,
             accessCode: loginAccessCode,
@@ -60,7 +82,7 @@ let FacebookOAuthStrategy = FacebookOAuthStrategy_1 = class FacebookOAuthStrateg
         await this.userService.resolveUserOnOauthFacebook({
             ...user,
             accessToken: _accessToken,
-            refreshToken: null
+            refreshToken: null,
         });
         done(null, user);
     }
@@ -68,6 +90,7 @@ let FacebookOAuthStrategy = FacebookOAuthStrategy_1 = class FacebookOAuthStrateg
 exports.FacebookOAuthStrategy = FacebookOAuthStrategy;
 exports.FacebookOAuthStrategy = FacebookOAuthStrategy = FacebookOAuthStrategy_1 = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [user_service_1.UserService])
+    __metadata("design:paramtypes", [user_service_1.UserService,
+        setting_service_1.SettingService])
 ], FacebookOAuthStrategy);
 //# sourceMappingURL=facebook-oauth.strategy.js.map

package/dist/passport-strategies/facebook-oauth.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"facebook-oauth.strategy.js","sourceRoot":"","sources":["../../src/passport-strategies/facebook-oauth.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAA+D;AAC/D,yDAA6C;AAC7C,4EAAyG;AACzG,+BAAkC;AAClC,2DAAuD;AAEvD,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAClD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAGzC,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,IAAA,oBAAS,EAAC,UAAU,CAAC;CAAI,CAAA;AAApD,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;GACA,kBAAkB,CAAkC;AAG1D,IAAM,qBAAqB,6BAA3B,MAAM,qBAAsB,SAAQ,IAAA,2BAAgB,EAAC,4BAAQ,EAAE,UAAU,CAAC;IAG/E,YAA6B,WAAwB;QAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,eAAe,CAAC;QAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,mBAAmB,CAAC;QACzF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,kBAAkB,CAAC;QACtF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAEhE,KAAK,CAAC;YACJ,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,KAAK,EAAE,CAAC,OAAO,CAAC;YAChB,aAAa,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SAClD,CAAC,CAAC;QAbwB,gBAAW,GAAX,WAAW,CAAa;QAFpC,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;QAiB/D,MAAM,aAAa,GAA8B,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QACtG,IAAI,CAAC,IAAA,iDAAyB,EAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,aAAqB,EAAE,OAAY,EAAE,IAAS;QACjF,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAG7C,MAAM,eAAe,GAAW,IAAA,SAAI,GAAE,CAAC;QAEvC,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YACzB,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE;YAC5C,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YAC3B,UAAU,EAAE,eAAe;SAC5B,CAAC;QAGF,MAAM,IAAI,CAAC,WAAW,CAAC,0BAA0B,CAAC;YAC9C,GAAG,IAAI;YACP,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,IAAI;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC;CACF,CAAA;AAhDY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAI+B,0BAAW;GAH1C,qBAAqB,CAgDjC","sourcesContent":["import { Injectable, Logger } from '@nestjs/common';\nimport { AuthGuard, PassportStrategy } from '@nestjs/passport';\nimport { Strategy } from 'passport-facebook';\nimport { FacebookAuthConfiguration, isFacebookOAuthConfigured } from 'src/helpers/facebook-oauth.helper';\nimport { v4 as uuid } from 'uuid';\nimport { UserService } from '../services/user.service';\n\nconst DUMMY_CLIENT_ID = 'DUMMY_CLIENT_ID';\nconst DUMMY_CLIENT_SECRET = 'DUMMY_CLIENT_SECRET';\nconst DUMMY_CALLBACK_URL = 'DUMMY_CALLBACK_URL';\n\n@Injectable()\nexport class FacebookOauthGuard extends AuthGuard('facebook') { }\n\n@Injectable()\nexport class FacebookOAuthStrategy extends PassportStrategy(Strategy, 'facebook') {\n  private readonly logger = new Logger(FacebookOAuthStrategy.name);\n\n  constructor(private readonly userService: UserService) {\n    // Reading configuration from environment variables (Static approach like Google)\n    const clientID = process.env.IAM_FACEBOOK_OAUTH_CLIENT_ID ?? DUMMY_CLIENT_ID;\n    const clientSecret = process.env.IAM_FACEBOOK_OAUTH_CLIENT_SECRET ?? DUMMY_CLIENT_SECRET;\n    const callbackURL = process.env.IAM_FACEBOOK_OAUTH_CALLBACK_URL ?? DUMMY_CALLBACK_URL;\n    const redirectURL = process.env.IAM_FACEBOOK_OAUTH_REDIRECT_URL;\n\n    super({\n      clientID,\n      clientSecret,\n      callbackURL,\n      scope: ['email'],\n      profileFields: ['id', 'emails', 'name', 'photos'],\n    });\n\n    const facebookOauth: FacebookAuthConfiguration = { clientID, clientSecret, callbackURL, redirectURL };\n    if (!isFacebookOAuthConfigured(facebookOauth)) {\n      this.logger.debug('Facebook OAuth strategy is not configured');\n    }\n  }\n\n  async validate(_accessToken: string, _refreshToken: string, profile: any, done: any): Promise<any> {\n    const { id, name, emails, photos } = profile;\n\n    // generate a unique access code. \n    const loginAccessCode: string = uuid();\n\n    const user = {\n      provider: 'facebook',\n      providerId: id,\n      email: emails?.[0]?.value,\n      name: `${name.givenName} ${name.familyName}`,\n      picture: photos?.[0]?.value,\n      accessCode: loginAccessCode,\n    };\n\n    // store the access code and the access token in the database. \n    await this.userService.resolveUserOnOauthFacebook({ \n        ...user, \n        accessToken: _accessToken, \n        refreshToken: null \n    });\n\n    done(null, user);\n  }\n}"]}
+{"version":3,"file":"facebook-oauth.strategy.js","sourceRoot":"","sources":["../../src/passport-strategies/facebook-oauth.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAA+D;AAC/D,yDAA6C;AAC7C,4EAG2C;AAC3C,+BAAkC;AAElC,iEAA6D;AAC7D,2DAAuD;AAEvD,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAClD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAGzC,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,IAAA,oBAAS,EAAC,UAAU,CAAC;CAAG,CAAA;AAAnD,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;GACA,kBAAkB,CAAiC;AAGzD,IAAM,qBAAqB,6BAA3B,MAAM,qBAAsB,SAAQ,IAAA,2BAAgB,EACzD,4BAAQ,EACR,UAAU,CACX;IAGC,YACmB,WAAwB,EACxB,cAA8B;QAG/C,MAAM,QAAQ,GACZ,cAAc,CAAC,cAAc,CAAmB,oBAAoB,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,4BAA4B;YACxC,eAAe,CAAC;QAClB,MAAM,YAAY,GAChB,cAAc,CAAC,cAAc,CAC3B,wBAAwB,CACzB;YACD,OAAO,CAAC,GAAG,CAAC,gCAAgC;YAC5C,mBAAmB,CAAC;QACtB,MAAM,WAAW,GACf,cAAc,CAAC,cAAc,CAC3B,uBAAuB,CACxB;YACD,OAAO,CAAC,GAAG,CAAC,+BAA+B;YAC3C,kBAAkB,CAAC;QACrB,MAAM,WAAW,GACf,cAAc,CAAC,cAAc,CAC3B,uBAAuB,CACxB,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAEnD,KAAK,CAAC;YACJ,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,KAAK,EAAE,CAAC,OAAO,CAAC;YAEhB,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,CAAC;SAC9D,CAAC,CAAC;QAhCc,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAJhC,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;QAqC/D,MAAM,aAAa,GAA8B;YAC/C,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,WAAW;SACZ,CAAC;QACF,IAAI,CAAC,IAAA,iDAAyB,EAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,8CAA8C,WAAW,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,YAAoB,EACpB,aAAqB,EACrB,OAAY,EACZ,IAAS;QAET,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAG7C,MAAM,eAAe,GAAW,IAAA,SAAI,GAAE,CAAC;QAEvC,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAEnE,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;QACxC,MAAM,QAAQ,GACZ,SAAS,IAAI,QAAQ;YACnB,CAAC,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,IAAI,EAAE;YACnC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAE1B,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE;YAC5C,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YAC3B,UAAU,EAAE,eAAe;SAC5B,CAAC;QAGF,MAAM,IAAI,CAAC,WAAW,CAAC,0BAA0B,CAAC;YAChD,GAAG,IAAI;YACP,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC;CACF,CAAA;AA9FY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAQqB,0BAAW;QACR,gCAAc;GARtC,qBAAqB,CA8FjC","sourcesContent":["import { Injectable, Logger } from \"@nestjs/common\";\nimport { AuthGuard, PassportStrategy } from \"@nestjs/passport\";\nimport { Strategy } from \"passport-facebook\";\nimport {\n  FacebookAuthConfiguration,\n  isFacebookOAuthConfigured,\n} from \"src/helpers/facebook-oauth.helper\";\nimport { v4 as uuid } from \"uuid\";\nimport type { SolidCoreSetting } from \"../services/settings/default-settings-provider.service\";\nimport { SettingService } from \"../services/setting.service\";\nimport { UserService } from \"../services/user.service\";\n\nconst DUMMY_CLIENT_ID = \"DUMMY_CLIENT_ID\";\nconst DUMMY_CLIENT_SECRET = \"DUMMY_CLIENT_SECRET\";\nconst DUMMY_CALLBACK_URL = \"DUMMY_CALLBACK_URL\";\n\n@Injectable()\nexport class FacebookOauthGuard extends AuthGuard(\"facebook\") {}\n\n@Injectable()\nexport class FacebookOAuthStrategy extends PassportStrategy(\n  Strategy,\n  \"facebook\",\n) {\n  private readonly logger = new Logger(FacebookOAuthStrategy.name);\n\n  constructor(\n    private readonly userService: UserService,\n    private readonly settingService: SettingService,\n  ) {\n    // Prefer settings cache (same source used by controller validation), fall back to env.\n    const clientID =\n      settingService.getConfigValue<SolidCoreSetting>(\"FACEBOOK_CLIENT_ID\") ??\n      process.env.IAM_FACEBOOK_OAUTH_CLIENT_ID ??\n      DUMMY_CLIENT_ID;\n    const clientSecret =\n      settingService.getConfigValue<SolidCoreSetting>(\n        \"FACEBOOK_CLIENT_SECRET\",\n      ) ??\n      process.env.IAM_FACEBOOK_OAUTH_CLIENT_SECRET ??\n      DUMMY_CLIENT_SECRET;\n    const callbackURL =\n      settingService.getConfigValue<SolidCoreSetting>(\n        \"FACEBOOK_CALLBACK_URL\",\n      ) ??\n      process.env.IAM_FACEBOOK_OAUTH_CALLBACK_URL ??\n      DUMMY_CALLBACK_URL;\n    const redirectURL =\n      settingService.getConfigValue<SolidCoreSetting>(\n        \"FACEBOOK_REDIRECT_URL\",\n      ) ?? process.env.IAM_FACEBOOK_OAUTH_REDIRECT_URL;\n\n    super({\n      clientID,\n      clientSecret,\n      callbackURL,\n      scope: [\"email\"],\n      // Facebook Graph API expects \"email\" and \"picture\", not \"emails\"/\"photos\".\n      profileFields: [\"id\", \"name\", \"email\", \"picture.type(large)\"],\n    });\n\n    const facebookOauth: FacebookAuthConfiguration = {\n      clientID,\n      clientSecret,\n      callbackURL,\n      redirectURL,\n    };\n    if (!isFacebookOAuthConfigured(facebookOauth)) {\n      this.logger.debug(\"Facebook OAuth strategy is not configured\");\n    } else {\n      this.logger.debug(\n        `Facebook OAuth configured with callbackURL=${callbackURL}`,\n      );\n    }\n  }\n\n  async validate(\n    _accessToken: string,\n    _refreshToken: string,\n    profile: any,\n    done: any,\n  ): Promise<any> {\n    const { id, name, emails, photos } = profile;\n\n    // generate a unique access code.\n    const loginAccessCode: string = uuid();\n\n    const email = emails && emails.length > 0 ? emails[0].value : null;\n\n    const firstName = name?.givenName || \"\";\n    const lastName = name?.familyName || \"\";\n    const fullName =\n      firstName || lastName\n        ? `${firstName} ${lastName}`.trim()\n        : profile.displayName;\n\n    const user = {\n      provider: \"facebook\",\n      providerId: id,\n      email: email,\n      name: `${name.givenName} ${name.familyName}`,\n      picture: photos?.[0]?.value,\n      accessCode: loginAccessCode,\n    };\n\n    // store the access code and the access token in the database.\n    await this.userService.resolveUserOnOauthFacebook({\n      ...user,\n      accessToken: _accessToken,\n      refreshToken: null,\n    });\n\n    done(null, user);\n  }\n}\n"]}

package/dist/repository/security-rule.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"security-rule.repository.js","sourceRoot":"","sources":["../../src/repository/security-rule.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAK5C,6EAAmE;AACnE,2EAAiE;AACjE,2EAAiE;AACjE,8DAA2D;AAE3D,yEAAqE;AACrE,qCAAmE;AACnE,mEAA8D;AAGvD,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,2CAAiC;IACzE,YACa,UAAsB,EAEtB,aAA4B,EAC5B,iBAAoC;QAE7C,KAAK,CAAC,mCAAY,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QALnC,eAAU,GAAV,UAAU,CAAY;QAEtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,sBAAiB,GAAjB,iBAAiB,CAAmB;IAGjD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAyB,EAAyB,EAAE,iBAAyB,EAAE,UAA0B,EAAE,oBAA4B,EAAE,CAAC,KAAK;QAEnK,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAG/F,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,EAAE,CAAC;QAE1B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAE/B,IAAI,aAAa,GAAG,IAAI,CAAC;YAEzB,IAAI,CAAC;gBAED,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;oBAElC,MAAM,kCAAkC,GAAG,IAAI,CAAC,aAAa,CAAC,qCAAqC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;oBACrI,IAAI,CAAC,kCAAkC,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CAAC,iEAAiE,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;oBACxH,CAAC;oBACD,aAAa,GAAG,MAAM,kCAAkC,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAClG,CAAC;qBACI,CAAC;oBACF,aAAa,GAAG,IAAI,CAAC,KAAK,CACtB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAChD,CAAC;gBAC5B,CAAC;gBAED,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,CAAC,CAAC;gBACpF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;QAID,EAAE,CAAC,QAAQ,CAAC,IAAI,kBAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACvC,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;gBACzC,IAAI,aAAa,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;oBACzC,OAAO,CAAC,OAAO,CACX,IAAI,kBAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;wBACrB,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;oBAC/F,CAAC,CAAC,CACL,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACd,CAAC;IAEO,yBAAyB,CAAC,YAAoB,EAAE,UAA0B;QAC9E,OAAO,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,YAA0B;QAElC,IAAI,qBAAqB,GAAiB,YAAY,CAAC;QAEvD,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;YACpD,qBAAqB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBACvC,KAAK,EAAE;oBACH,EAAE,EAAE,YAAY,CAAC,EAAE;iBACtB;gBACD,SAAS,EAAE;oBACP,IAAI,EAAE,IAAI;oBACV,aAAa,EAAE,IAAI;iBACtB;aACJ,CAAC,CAAC;QACP,CAAC;QAED,OAAO;YACH,EAAE,EAAE,qBAAqB,CAAC,EAAE;YAC5B,IAAI,EAAE,qBAAqB,CAAC,IAAI;YAChC,WAAW,EAAE,qBAAqB,CAAC,WAAW;YAC9C,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE;YACrC,WAAW,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI;YAC5C,eAAe,EAAE,qBAAqB,CAAC,aAAa,CAAC,EAAE;YACvD,oBAAoB,EAAE,qBAAqB,CAAC,aAAa,CAAC,YAAY;YACtE,kBAAkB,EAAE,qBAAqB,CAAC,kBAAkB;YAC5D,0BAA0B,EAAE,qBAAqB,CAAC,0BAA0B;SAC/E,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAgC;QAEhD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,mCAAY,CAAC,CAAC;QACnE,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBACtC,KAAK,EAAE;oBACH,EAAE,EAAE,SAAS,CAAC,MAAM;iBACvB;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBACtC,KAAK,EAAE;oBACH,IAAI,EAAE,SAAS,CAAC,WAAW;iBAC9B;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;QAGD,MAAM,uBAAuB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,qCAAa,CAAC,CAAC;QAC7E,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE;oBACH,EAAE,EAAE,SAAS,CAAC,eAAe;iBAChC;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QACD,IAAI,SAAS,CAAC,oBAAoB,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE;oBACH,YAAY,EAAE,SAAS,CAAC,oBAAoB;iBAC/C;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QAGD,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS,CAAC,IAAI;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,oBAAoB,EAAE,CAAC;YACvB,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1C,CAAC;aACI,CAAC;YACF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;CAEJ,CAAA;AA7JY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAGgB,oBAAU;QAEP,8BAAa;QACT,uCAAiB;GALxC,sBAAsB,CA6JlC","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { CreateSecurityRuleDto } from 'src/dtos/create-security-rule.dto';\nimport { SecurityRuleConfig } from 'src/dtos/security-rule-config.dto';\nimport { UpdateSecurityRuleDto } from 'src/dtos/update-security-rule.dto';\nimport { CommonEntity } from 'src/entities/common.entity';\nimport { ModelMetadata } from 'src/entities/model-metadata.entity';\nimport { RoleMetadata } from 'src/entities/role-metadata.entity';\nimport { SecurityRule } from 'src/entities/security-rule.entity';\nimport { SolidRegistry } from 'src/helpers/solid-registry';\nimport { ActiveUserData } from 'src/interfaces/active-user-data.interface';\nimport { CrudHelperService } from 'src/services/crud-helper.service';\nimport { Brackets, DataSource, SelectQueryBuilder } from 'typeorm';\nimport { SolidBaseRepository } from './solid-base.repository';\n\n@Injectable()\nexport class SecurityRuleRepository extends SolidBaseRepository<SecurityRule> {\n    constructor(\n        readonly dataSource: DataSource,\n        // readonly requestContextService: RequestContextService,\n        readonly solidRegistry: SolidRegistry,\n        readonly crudHelperService: CrudHelperService,\n    ) {\n        super(SecurityRule, dataSource, null, null);\n    }\n\n    async applySecurityRules<T extends CommonEntity>(qb: SelectQueryBuilder<T>, modelSingularName: string, activeUser: ActiveUserData, securityRuleAlias: string = qb.alias): Promise<SelectQueryBuilder<T>> {\n        // Fetch the security rules for the model and roles\n        const securityRules = this.solidRegistry.getSecurityRules(modelSingularName, activeUser.roles);\n\n        // If no security rules, return the original query builder\n        if (!securityRules.length) {\n            return qb;\n        }\n\n        const evaluatedRules = [];\n\n        for (const rule of securityRules) {\n\n            let evaluatedRule = null;\n\n            try {\n                // First check if the rule has a \"dynamic\" security rule config provider. \n                if (rule.securityRuleConfigProvider) {\n                    // TODO: Evaluation of the securityRuleConfig Provider should happen outside first...\n                    const securityRuleConfigProviderInstance = this.solidRegistry.getSecurityRuleConfigProviderInstance(rule.securityRuleConfigProvider);\n                    if (!securityRuleConfigProviderInstance) {\n                        throw new Error(`Unable to resolve instance for security rule config provider: ${rule.securityRuleConfigProvider}`);\n                    }\n                    evaluatedRule = await securityRuleConfigProviderInstance.securityRuleConfig(activeUser, rule);\n                }\n                else {\n                    evaluatedRule = JSON.parse(\n                        this.resolveSecurityRuleConfig(rule.securityRuleConfig, activeUser)\n                    ) as SecurityRuleConfig;\n                }\n\n                evaluatedRules.push(evaluatedRule);\n\n            } catch (error) {\n                this.logger.error(`Error parsing security rule: ${rule.securityRuleConfig}`, error);\n                this.logger.error(error.stack);\n                throw error;\n            }\n        }\n\n\n        // Apply each security rule to the query builder. The rules are combined with OR logic at the top level.\n        qb.andWhere(new Brackets(async (outerQb) => {\n            for (const evaluatedRule of evaluatedRules) {\n                if (evaluatedRule && evaluatedRule.filters) {\n                    outerQb.orWhere( // combine each rule-group with OR at the outer level\n                        new Brackets((innerQb) => {\n                            this.crudHelperService.applyFilters(innerQb, evaluatedRule.filters, securityRuleAlias, qb); // AND within a rule\n                        })\n                    );\n                }\n            }\n        }));\n\n        return qb;\n    }\n\n    private resolveSecurityRuleConfig(configString: string, activeUser: ActiveUserData) {\n        return configString.replace('$activeUserId', activeUser.sub.toString());\n    }\n\n    async toDto(securityRule: SecurityRule): Promise<UpdateSecurityRuleDto> {\n        // load the role and model relations for the security rule\n        let populatedSecurityRule: SecurityRule = securityRule;\n        // If the security rule does not have the role and model relations loaded, load them\n        if (!securityRule.role || !securityRule.modelMetadata) {\n            populatedSecurityRule = await this.findOne({\n                where: {\n                    id: securityRule.id,\n                },\n                relations: {\n                    role: true,\n                    modelMetadata: true,\n                },\n            });\n        }\n\n        return {\n            id: populatedSecurityRule.id,\n            name: populatedSecurityRule.name,\n            description: populatedSecurityRule.description,\n            roleId: populatedSecurityRule.role.id,\n            roleUserKey: populatedSecurityRule.role.name,\n            modelMetadataId: populatedSecurityRule.modelMetadata.id,\n            modelMetadataUserKey: populatedSecurityRule.modelMetadata.singularName,\n            securityRuleConfig: populatedSecurityRule.securityRuleConfig,\n            securityRuleConfigProvider: populatedSecurityRule.securityRuleConfigProvider,\n        };\n    }\n\n    async upsertWithDto(createDto: CreateSecurityRuleDto) {\n        // Populate the role from roleId or roleUserKey\n        const roleRepository = this.dataSource.getRepository(RoleMetadata);\n        if (createDto.roleId) {\n            const role = await roleRepository.findOne({\n                where: {\n                    id: createDto.roleId,\n                },\n            });\n            createDto['role'] = role;\n        }\n\n        if (createDto.roleUserKey) {\n            const role = await roleRepository.findOne({\n                where: {\n                    name: createDto.roleUserKey,\n                },\n            });\n            createDto['role'] = role;\n        }\n\n        // Populate the model from modelMetadataId or modelMetadataUserKey\n        const modelMetadataRepository = this.dataSource.getRepository(ModelMetadata);\n        if (createDto.modelMetadataId) {\n            const modelMetadata = await modelMetadataRepository.findOne({\n                where: {\n                    id: createDto.modelMetadataId,\n                },\n            });\n            createDto['modelMetadata'] = modelMetadata;\n        }\n        if (createDto.modelMetadataUserKey) {\n            const modelMetadata = await modelMetadataRepository.findOne({\n                where: {\n                    singularName: createDto.modelMetadataUserKey,\n                },\n            });\n            createDto['modelMetadata'] = modelMetadata;\n        }\n\n        // First check if module already exists using name\n        const existingSecurityRule = await this.findOne({\n            where: {\n                name: createDto.name,\n            },\n        });\n\n        if (existingSecurityRule) {\n            const updatedSecurityRule = this.merge(existingSecurityRule, createDto);\n            return this.save(updatedSecurityRule);\n        }\n        else {\n            const securityRule = this.create(createDto);\n            return this.save(securityRule);\n        }\n    }\n\n}"]}
+{"version":3,"file":"security-rule.repository.js","sourceRoot":"","sources":["../../src/repository/security-rule.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAK5C,6EAAmE;AACnE,2EAAiE;AACjE,2EAAiE;AACjE,8DAA2D;AAE3D,yEAAqE;AACrE,qCAAmE;AACnE,mEAA8D;AAGvD,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,2CAAiC;IACzE,YACa,UAAsB,EAEtB,aAA4B,EAC5B,iBAAoC;QAE7C,KAAK,CAAC,mCAAY,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QALnC,eAAU,GAAV,UAAU,CAAY;QAEtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,sBAAiB,GAAjB,iBAAiB,CAAmB;IAGjD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAyB,EAAyB,EAAE,iBAAyB,EAAE,UAA0B,EAAE,oBAA4B,EAAE,CAAC,KAAK;QAEnK,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAG/F,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,EAAE,CAAC;QAE1B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAE/B,IAAI,aAAa,GAAG,IAAI,CAAC;YAEzB,IAAI,CAAC;gBAED,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;oBAElC,MAAM,kCAAkC,GAAG,IAAI,CAAC,aAAa,CAAC,qCAAqC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;oBACrI,IAAI,CAAC,kCAAkC,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CAAC,iEAAiE,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;oBACxH,CAAC;oBACD,aAAa,GAAG,MAAM,kCAAkC,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAClG,CAAC;qBACI,CAAC;oBACF,aAAa,GAAG,IAAI,CAAC,KAAK,CACtB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAChD,CAAC;gBAC5B,CAAC;gBAED,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEvC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,CAAC,CAAC;gBACpF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;QAID,EAAE,CAAC,QAAQ,CAAC,IAAI,kBAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACvC,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;gBACzC,IAAI,aAAa,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;oBACzC,OAAO,CAAC,OAAO,CACX,IAAI,kBAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;wBACrB,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;oBAC/F,CAAC,CAAC,CACL,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACd,CAAC;IAEO,yBAAyB,CAAC,YAAoB,EAAE,UAA0B;QAC9E,OAAO,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,YAA0B;QAElC,IAAI,qBAAqB,GAAiB,YAAY,CAAC;QAEvD,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;YACpD,qBAAqB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBACvC,KAAK,EAAE;oBACH,EAAE,EAAE,YAAY,CAAC,EAAE;iBACtB;gBACD,SAAS,EAAE;oBACP,IAAI,EAAE,IAAI;oBACV,aAAa,EAAE,IAAI;iBACtB;aACJ,CAAC,CAAC;QACP,CAAC;QAED,OAAO;YACH,EAAE,EAAE,qBAAqB,CAAC,EAAE;YAC5B,IAAI,EAAE,qBAAqB,CAAC,IAAI;YAChC,WAAW,EAAE,qBAAqB,CAAC,WAAW;YAC9C,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE;YACrC,WAAW,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI;YAC5C,eAAe,EAAE,qBAAqB,CAAC,aAAa,CAAC,EAAE;YACvD,oBAAoB,EAAE,qBAAqB,CAAC,aAAa,CAAC,YAAY;YACtE,kBAAkB,EAAE,qBAAqB,CAAC,kBAAkB;YAC5D,0BAA0B,EAAE,qBAAqB,CAAC,0BAA0B;SAC/E,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAgC;QAEhD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,mCAAY,CAAC,CAAC;QACnE,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBACtC,KAAK,EAAE;oBACH,EAAE,EAAE,SAAS,CAAC,MAAM;iBACvB;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBACtC,KAAK,EAAE;oBACH,IAAI,EAAE,SAAS,CAAC,WAAW;iBAC9B;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;QAGD,MAAM,uBAAuB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,qCAAa,CAAC,CAAC;QAC7E,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE;oBACH,EAAE,EAAE,SAAS,CAAC,eAAe;iBAChC;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QACD,IAAI,SAAS,CAAC,oBAAoB,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE;oBACH,YAAY,EAAE,SAAS,CAAC,oBAAoB;iBAC/C;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QAGD,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS,CAAC,IAAI;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,oBAAoB,EAAE,CAAC;YACvB,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1C,CAAC;aACI,CAAC;YACF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;CAEJ,CAAA;AA7JY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAGgB,oBAAU;QAEP,8BAAa;QACT,uCAAiB;GALxC,sBAAsB,CA6JlC","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { CreateSecurityRuleDto } from 'src/dtos/create-security-rule.dto';\nimport { SecurityRuleConfig } from 'src/dtos/security-rule-config.dto';\nimport { UpdateSecurityRuleDto } from 'src/dtos/update-security-rule.dto';\nimport { CommonEntity } from 'src/entities/common.entity';\nimport { ModelMetadata } from 'src/entities/model-metadata.entity';\nimport { RoleMetadata } from 'src/entities/role-metadata.entity';\nimport { SecurityRule } from 'src/entities/security-rule.entity';\nimport { SolidRegistry } from 'src/helpers/solid-registry';\nimport { ActiveUserData } from 'src/interfaces/active-user-data.interface';\nimport { CrudHelperService } from 'src/services/crud-helper.service';\nimport { Brackets, DataSource, SelectQueryBuilder } from 'typeorm';\nimport { SolidBaseRepository } from './solid-base.repository';\n\n@Injectable()\nexport class SecurityRuleRepository extends SolidBaseRepository<SecurityRule> {\n    constructor(\n        readonly dataSource: DataSource,\n        // readonly requestContextService: RequestContextService,\n        readonly solidRegistry: SolidRegistry,\n        readonly crudHelperService: CrudHelperService,\n    ) {\n        super(SecurityRule, dataSource, null, null);\n    }\n\n    async applySecurityRules<T extends CommonEntity>(qb: SelectQueryBuilder<T>, modelSingularName: string, activeUser: ActiveUserData, securityRuleAlias: string = qb.alias): Promise<SelectQueryBuilder<T>> {\n        // Fetch the security rules for the model and roles\n        const securityRules = this.solidRegistry.getSecurityRules(modelSingularName, activeUser.roles);\n\n        // If no security rules, return the original query builder\n        if (!securityRules.length) {\n            return qb;\n        }\n\n        const evaluatedRules = [];\n\n        for (const rule of securityRules) {\n\n            let evaluatedRule = null;\n\n            try {\n                // First check if the rule has a \"dynamic\" security rule config provider. \n                if (rule.securityRuleConfigProvider) {\n                    // TODO: Evaluation of the securityRuleConfig Provider should happen outside first...\n                    const securityRuleConfigProviderInstance = this.solidRegistry.getSecurityRuleConfigProviderInstance(rule.securityRuleConfigProvider);\n                    if (!securityRuleConfigProviderInstance) {\n                        throw new Error(`Unable to resolve instance for security rule config provider: ${rule.securityRuleConfigProvider}`);\n                    }\n                    evaluatedRule = await securityRuleConfigProviderInstance.securityRuleConfig(activeUser, rule);\n                }\n                else {\n                    evaluatedRule = JSON.parse(\n                        this.resolveSecurityRuleConfig(rule.securityRuleConfig, activeUser)\n                    ) as SecurityRuleConfig;\n                }\n\n                evaluatedRules.push(evaluatedRule);\n\n            } catch (error: any) {\n                this.logger.error(`Error parsing security rule: ${rule.securityRuleConfig}`, error);\n                this.logger.error(error.stack);\n                throw error;\n            }\n        }\n\n\n        // Apply each security rule to the query builder. The rules are combined with OR logic at the top level.\n        qb.andWhere(new Brackets(async (outerQb) => {\n            for (const evaluatedRule of evaluatedRules) {\n                if (evaluatedRule && evaluatedRule.filters) {\n                    outerQb.orWhere( // combine each rule-group with OR at the outer level\n                        new Brackets((innerQb) => {\n                            this.crudHelperService.applyFilters(innerQb, evaluatedRule.filters, securityRuleAlias, qb); // AND within a rule\n                        })\n                    );\n                }\n            }\n        }));\n\n        return qb;\n    }\n\n    private resolveSecurityRuleConfig(configString: string, activeUser: ActiveUserData) {\n        return configString.replace('$activeUserId', activeUser.sub.toString());\n    }\n\n    async toDto(securityRule: SecurityRule): Promise<UpdateSecurityRuleDto> {\n        // load the role and model relations for the security rule\n        let populatedSecurityRule: SecurityRule = securityRule;\n        // If the security rule does not have the role and model relations loaded, load them\n        if (!securityRule.role || !securityRule.modelMetadata) {\n            populatedSecurityRule = await this.findOne({\n                where: {\n                    id: securityRule.id,\n                },\n                relations: {\n                    role: true,\n                    modelMetadata: true,\n                },\n            });\n        }\n\n        return {\n            id: populatedSecurityRule.id,\n            name: populatedSecurityRule.name,\n            description: populatedSecurityRule.description,\n            roleId: populatedSecurityRule.role.id,\n            roleUserKey: populatedSecurityRule.role.name,\n            modelMetadataId: populatedSecurityRule.modelMetadata.id,\n            modelMetadataUserKey: populatedSecurityRule.modelMetadata.singularName,\n            securityRuleConfig: populatedSecurityRule.securityRuleConfig,\n            securityRuleConfigProvider: populatedSecurityRule.securityRuleConfigProvider,\n        };\n    }\n\n    async upsertWithDto(createDto: CreateSecurityRuleDto) {\n        // Populate the role from roleId or roleUserKey\n        const roleRepository = this.dataSource.getRepository(RoleMetadata);\n        if (createDto.roleId) {\n            const role = await roleRepository.findOne({\n                where: {\n                    id: createDto.roleId,\n                },\n            });\n            createDto['role'] = role;\n        }\n\n        if (createDto.roleUserKey) {\n            const role = await roleRepository.findOne({\n                where: {\n                    name: createDto.roleUserKey,\n                },\n            });\n            createDto['role'] = role;\n        }\n\n        // Populate the model from modelMetadataId or modelMetadataUserKey\n        const modelMetadataRepository = this.dataSource.getRepository(ModelMetadata);\n        if (createDto.modelMetadataId) {\n            const modelMetadata = await modelMetadataRepository.findOne({\n                where: {\n                    id: createDto.modelMetadataId,\n                },\n            });\n            createDto['modelMetadata'] = modelMetadata;\n        }\n        if (createDto.modelMetadataUserKey) {\n            const modelMetadata = await modelMetadataRepository.findOne({\n                where: {\n                    singularName: createDto.modelMetadataUserKey,\n                },\n            });\n            createDto['modelMetadata'] = modelMetadata;\n        }\n\n        // First check if module already exists using name\n        const existingSecurityRule = await this.findOne({\n            where: {\n                name: createDto.name,\n            },\n        });\n\n        if (existingSecurityRule) {\n            const updatedSecurityRule = this.merge(existingSecurityRule, createDto);\n            return this.save(updatedSecurityRule);\n        }\n        else {\n            const securityRule = this.create(createDto);\n            return this.save(securityRule);\n        }\n    }\n\n}"]}