@spinajs/rbac-http 2.0.375 → 2.0.378

package/lib/cjs/controllers/GrantsController.js

@@ -13,7 +13,7 @@ exports.GrantsController = void 0;
 const http_1 = require("@spinajs/http");
 const rbac_1 = require("@spinajs/rbac");
 const di_1 = require("@spinajs/di");
-const LoggedPolicy_js_1 = require("../policies/LoggedPolicy.js");
+const AuthorizedPolicy_js_1 = require("../policies/AuthorizedPolicy.js");
 let GrantsController = class GrantsController extends http_1.BaseController {
     getGrants() {
         return new http_1.Ok(this.AC.getGrants());
@@ -32,6 +32,6 @@ __decorate([
 ], GrantsController.prototype, "getGrants", null);
 exports.GrantsController = GrantsController = __decorate([
     (0, http_1.BasePath)('grants'),
-    (0, http_1.Policy)(LoggedPolicy_js_1.LoggedPolicy)
+    (0, http_1.Policy)(AuthorizedPolicy_js_1.AuthorizedPolicy)
 ], GrantsController);
 //# sourceMappingURL=GrantsController.js.map

package/lib/cjs/controllers/GrantsController.js.map

@@ -1 +1 @@
-{"version":3,"file":"GrantsController.js","sourceRoot":"","sources":["../../../src/controllers/GrantsController.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0E;AAC1E,wCAA8C;AAC9C,oCAAyC;AACzC,iEAA2D;AAIpD,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,qBAAc;IAMzC,SAAS;QACZ,OAAO,IAAI,SAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACvC,CAAC;CAEJ,CAAA;AAVY,4CAAgB;AAGf;IADT,IAAA,eAAU,EAAC,oBAAa,CAAC;8BACZ,oBAAa;4CAAC;AAGrB;IADN,IAAA,UAAG,GAAE;;;;iDAGL;2BARQ,gBAAgB;IAF5B,IAAA,eAAQ,EAAC,QAAQ,CAAC;IAClB,IAAA,aAAM,EAAC,8BAAY,CAAC;GACR,gBAAgB,CAU5B"}
+{"version":3,"file":"GrantsController.js","sourceRoot":"","sources":["../../../src/controllers/GrantsController.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0E;AAC1E,wCAA8C;AAC9C,oCAAyC;AACzC,yEAAmE;AAI5D,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,qBAAc;IAMzC,SAAS;QACZ,OAAO,IAAI,SAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACvC,CAAC;CAEJ,CAAA;AAVY,4CAAgB;AAGf;IADT,IAAA,eAAU,EAAC,oBAAa,CAAC;8BACZ,oBAAa;4CAAC;AAGrB;IADN,IAAA,UAAG,GAAE;;;;iDAGL;2BARQ,gBAAgB;IAF5B,IAAA,eAAQ,EAAC,QAAQ,CAAC;IAClB,IAAA,aAAM,EAAC,sCAAgB,CAAC;GACZ,gBAAgB,CAU5B"}

package/lib/cjs/index.d.ts

@@ -9,5 +9,7 @@ export * from "./policies/BlockGuest.js";
 export * from "./policies/LoggedPolicy.js";
 export * from "./policies/NotLoggedPolicy.js";
 export * from "./policies/RbacPolicy.js";
+export * from "./policies/NotAthorizedPolicy.js";
+export * from "./policies/AuthorizedPolicy.js";
 export * from "./controllers/GrantsController.js";
 //# sourceMappingURL=index.d.ts.map

package/lib/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AAEzC,cAAc,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAE/C,cAAc,mCAAmC,CAAC"}

package/lib/cjs/index.js

@@ -25,5 +25,7 @@ __exportStar(require("./policies/BlockGuest.js"), exports);
 __exportStar(require("./policies/LoggedPolicy.js"), exports);
 __exportStar(require("./policies/NotLoggedPolicy.js"), exports);
 __exportStar(require("./policies/RbacPolicy.js"), exports);
+__exportStar(require("./policies/NotAthorizedPolicy.js"), exports);
+__exportStar(require("./policies/AuthorizedPolicy.js"), exports);
 __exportStar(require("./controllers/GrantsController.js"), exports);
 //# sourceMappingURL=index.js.map

package/lib/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,kDAAgC;AAChC,mDAAiC;AACjC,2DAAyC;AACzC,oDAAkC;AAClC,kDAAgC;AAEhC,2DAAyC;AACzC,2DAAyC;AACzC,6DAA2C;AAC3C,gEAA8C;AAC9C,2DAAyC;AAEzC,oEAAkD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,kDAAgC;AAChC,mDAAiC;AACjC,2DAAyC;AACzC,oDAAkC;AAClC,kDAAgC;AAEhC,2DAAyC;AACzC,2DAAyC;AACzC,6DAA2C;AAC3C,gEAA8C;AAC9C,2DAAyC;AACzC,mEAAiD;AACjD,iEAA+C;AAE/C,oEAAkD"}

package/lib/cjs/policies/AuthorizedPolicy.d.ts

@@ -0,0 +1,10 @@
+import { BasePolicy, IController, IRoute, Request as sRequest } from '@spinajs/http';
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+export declare class AuthorizedPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: sRequest): Promise<void>;
+}
+//# sourceMappingURL=AuthorizedPolicy.d.ts.map

package/lib/cjs/policies/AuthorizedPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizedPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/AuthorizedPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErF;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,UAAU;IACvC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO;IAKrD,OAAO,CAAC,GAAG,EAAE,QAAQ;CAOnC"}

package/lib/cjs/policies/AuthorizedPolicy.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizedPolicy = void 0;
+const exceptions_1 = require("@spinajs/exceptions");
+const http_1 = require("@spinajs/http");
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+class AuthorizedPolicy extends http_1.BasePolicy {
+    isEnabled(_action, _instance) {
+        // acl is always on if set
+        return true;
+    }
+    async execute(req) {
+        if (!req.storage || !req.storage.User || !req.storage.Session?.Data.get('Authorized')) {
+            throw new exceptions_1.AuthenticationFailed('user not authorized or session expired');
+        }
+        return Promise.resolve();
+    }
+}
+exports.AuthorizedPolicy = AuthorizedPolicy;
+//# sourceMappingURL=AuthorizedPolicy.js.map

package/lib/cjs/policies/AuthorizedPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizedPolicy.js","sourceRoot":"","sources":["../../../src/policies/AuthorizedPolicy.ts"],"names":[],"mappings":";;;AAAA,oDAA2D;AAC3D,wCAAqF;AAErF;;;GAGG;AACH,MAAa,gBAAiB,SAAQ,iBAAU;IACvC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,iCAAoB,CAAC,wCAAwC,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAbD,4CAaC"}

package/lib/cjs/policies/LoggedPolicy.js

@@ -13,7 +13,7 @@ class LoggedPolicy extends http_1.BasePolicy {
         return true;
     }
     async execute(req) {
-        if (!req.storage || !req.storage.User || !req.storage.Session?.Data.get('Authorized')) {
+        if (!req.storage || !req.storage.User || !req.storage.Session?.Data.get('Logged')) {
             throw new exceptions_1.AuthenticationFailed('user not logged or session expired');
         }
         return Promise.resolve();

package/lib/cjs/policies/LoggedPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"LoggedPolicy.js","sourceRoot":"","sources":["../../../src/policies/LoggedPolicy.ts"],"names":[],"mappings":";;;AAAA,oDAA2D;AAC3D,wCAAqF;AAErF;;;GAGG;AACH,MAAa,YAAa,SAAQ,iBAAU;IACnC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,iCAAoB,CAAC,oCAAoC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAbD,oCAaC"}
+{"version":3,"file":"LoggedPolicy.js","sourceRoot":"","sources":["../../../src/policies/LoggedPolicy.ts"],"names":[],"mappings":";;;AAAA,oDAA2D;AAC3D,wCAAqF;AAErF;;;GAGG;AACH,MAAa,YAAa,SAAQ,iBAAU;IACnC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,iCAAoB,CAAC,oCAAoC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAbD,oCAaC"}

package/lib/cjs/policies/NoSessionPolicy.d.ts

@@ -0,0 +1,11 @@
+import { BasePolicy, IController, IRoute, Request as sRequest } from '@spinajs/http';
+/**
+ * Simple policy to only check if user sends session
+ *
+ * WARN: this is not check for user auth / not auth
+ */
+export declare class NoSessionPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: sRequest): Promise<void>;
+}
+//# sourceMappingURL=NoSessionPolicy.d.ts.map

package/lib/cjs/policies/NoSessionPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NoSessionPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/NoSessionPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGrF;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,UAAU;IACtC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO;IAIrD,OAAO,CAAC,GAAG,EAAE,QAAQ;CAQnC"}

package/lib/cjs/policies/NoSessionPolicy.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoSessionPolicy = void 0;
+const http_1 = require("@spinajs/http");
+const exceptions_1 = require("@spinajs/exceptions");
+/**
+ * Simple policy to only check if user sends session
+ *
+ * WARN: this is not check for user auth / not auth
+ */
+class NoSessionPolicy extends http_1.BasePolicy {
+    isEnabled(_action, _instance) {
+        return true;
+    }
+    async execute(req) {
+        if (!req.storage || !req.storage.User || !req.storage.Session) {
+            return Promise.resolve();
+        }
+        throw new exceptions_1.Forbidden('User already have session');
+    }
+}
+exports.NoSessionPolicy = NoSessionPolicy;
+//# sourceMappingURL=NoSessionPolicy.js.map

package/lib/cjs/policies/NoSessionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NoSessionPolicy.js","sourceRoot":"","sources":["../../../src/policies/NoSessionPolicy.ts"],"names":[],"mappings":";;;AAAA,wCAAqF;AACrF,oDAAgD;AAEhD;;;;GAIG;AACH,MAAa,eAAgB,SAAQ,iBAAU;IACtC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC9D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,sBAAS,CAAC,2BAA2B,CAAC,CAAC;IAEnD,CAAC;CACF;AAbD,0CAaC"}

package/lib/cjs/policies/NotAthorizedPolicy.d.ts

@@ -0,0 +1,10 @@
+import { BasePolicy, IController, IRoute, Request as sRequest } from '@spinajs/http';
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+export declare class NotAuthorizedPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: sRequest): Promise<void>;
+}
+//# sourceMappingURL=NotAthorizedPolicy.d.ts.map

package/lib/cjs/policies/NotAthorizedPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotAthorizedPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/NotAthorizedPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGrF;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,UAAU;IAC1C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO;IAIrD,OAAO,CAAC,GAAG,EAAE,QAAQ;CAQnC"}

package/lib/cjs/policies/NotAthorizedPolicy.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotAuthorizedPolicy = void 0;
+const http_1 = require("@spinajs/http");
+const exceptions_1 = require("@spinajs/exceptions");
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+class NotAuthorizedPolicy extends http_1.BasePolicy {
+    isEnabled(_action, _instance) {
+        return true;
+    }
+    async execute(req) {
+        if (!req.storage.Session?.Data.get('Authorized')) {
+            return Promise.resolve();
+        }
+        throw new exceptions_1.Forbidden('User already authorized, please logout first');
+    }
+}
+exports.NotAuthorizedPolicy = NotAuthorizedPolicy;
+//# sourceMappingURL=NotAthorizedPolicy.js.map

package/lib/cjs/policies/NotAthorizedPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotAthorizedPolicy.js","sourceRoot":"","sources":["../../../src/policies/NotAthorizedPolicy.ts"],"names":[],"mappings":";;;AAAA,wCAAqF;AACrF,oDAAgD;AAEhD;;;GAGG;AACH,MAAa,mBAAoB,SAAQ,iBAAU;IAC1C,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAG,CAAC;YAClD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,sBAAS,CAAC,8CAA8C,CAAC,CAAC;IAEtE,CAAC;CACF;AAbD,kDAaC"}

package/lib/cjs/policies/NotLoggedPolicy.js

@@ -12,7 +12,7 @@ class NotLoggedPolicy extends http_1.BasePolicy {
         return true;
     }
     async execute(req) {
-        if (!req.storage || !req.storage.User || !req.storage.Session?.Data.get('Authorized')) {
+        if (!req.storage.Session?.Data.get('Logged')) {
             return Promise.resolve();
         }
         throw new exceptions_1.Forbidden('User already logged in, please logout first');

package/lib/cjs/policies/NotLoggedPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"NotLoggedPolicy.js","sourceRoot":"","sources":["../../../src/policies/NotLoggedPolicy.ts"],"names":[],"mappings":";;;AAAA,wCAAqF;AACrF,oDAAgD;AAEhD;;;GAGG;AACH,MAAa,eAAgB,SAAQ,iBAAU;IACtC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,sBAAS,CAAC,6CAA6C,CAAC,CAAC;IAErE,CAAC;CACF;AAbD,0CAaC"}
+{"version":3,"file":"NotLoggedPolicy.js","sourceRoot":"","sources":["../../../src/policies/NotLoggedPolicy.ts"],"names":[],"mappings":";;;AAAA,wCAAqF;AACrF,oDAAgD;AAEhD;;;GAGG;AACH,MAAa,eAAgB,SAAQ,iBAAU;IACtC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,sBAAS,CAAC,6CAA6C,CAAC,CAAC;IAErE,CAAC;CACF;AAbD,0CAaC"}

package/lib/mjs/controllers/GrantsController.js

@@ -10,7 +10,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 import { BaseController, BasePath, Get, Ok, Policy } from '@spinajs/http';
 import { AccessControl } from '@spinajs/rbac';
 import { Autoinject } from '@spinajs/di';
-import { LoggedPolicy } from '../policies/LoggedPolicy.js';
+import { AuthorizedPolicy } from '../policies/AuthorizedPolicy.js';
 let GrantsController = class GrantsController extends BaseController {
     getGrants() {
         return new Ok(this.AC.getGrants());
@@ -28,7 +28,7 @@ __decorate([
 ], GrantsController.prototype, "getGrants", null);
 GrantsController = __decorate([
     BasePath('grants'),
-    Policy(LoggedPolicy)
+    Policy(AuthorizedPolicy)
 ], GrantsController);
 export { GrantsController };
 //# sourceMappingURL=GrantsController.js.map

package/lib/mjs/controllers/GrantsController.js.map

@@ -1 +1 @@
-{"version":3,"file":"GrantsController.js","sourceRoot":"","sources":["../../../src/controllers/GrantsController.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAIpD,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,cAAc;IAMzC,SAAS;QACZ,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACvC,CAAC;CAEJ,CAAA;AAPa;IADT,UAAU,CAAC,aAAa,CAAC;8BACZ,aAAa;4CAAC;AAGrB;IADN,GAAG,EAAE;;;;iDAGL;AARQ,gBAAgB;IAF5B,QAAQ,CAAC,QAAQ,CAAC;IAClB,MAAM,CAAC,YAAY,CAAC;GACR,gBAAgB,CAU5B"}
+{"version":3,"file":"GrantsController.js","sourceRoot":"","sources":["../../../src/controllers/GrantsController.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAI5D,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,cAAc;IAMzC,SAAS;QACZ,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACvC,CAAC;CAEJ,CAAA;AAPa;IADT,UAAU,CAAC,aAAa,CAAC;8BACZ,aAAa;4CAAC;AAGrB;IADN,GAAG,EAAE;;;;iDAGL;AARQ,gBAAgB;IAF5B,QAAQ,CAAC,QAAQ,CAAC;IAClB,MAAM,CAAC,gBAAgB,CAAC;GACZ,gBAAgB,CAU5B"}

package/lib/mjs/index.d.ts

@@ -9,5 +9,7 @@ export * from "./policies/BlockGuest.js";
 export * from "./policies/LoggedPolicy.js";
 export * from "./policies/NotLoggedPolicy.js";
 export * from "./policies/RbacPolicy.js";
+export * from "./policies/NotAthorizedPolicy.js";
+export * from "./policies/AuthorizedPolicy.js";
 export * from "./controllers/GrantsController.js";
 //# sourceMappingURL=index.d.ts.map

package/lib/mjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AAEzC,cAAc,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAE/C,cAAc,mCAAmC,CAAC"}

package/lib/mjs/index.js

@@ -9,5 +9,7 @@ export * from "./policies/BlockGuest.js";
 export * from "./policies/LoggedPolicy.js";
 export * from "./policies/NotLoggedPolicy.js";
 export * from "./policies/RbacPolicy.js";
+export * from "./policies/NotAthorizedPolicy.js";
+export * from "./policies/AuthorizedPolicy.js";
 export * from "./controllers/GrantsController.js";
 //# sourceMappingURL=index.js.map

package/lib/mjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AAEzC,cAAc,mCAAmC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAE/C,cAAc,mCAAmC,CAAC"}

package/lib/mjs/policies/AuthorizedPolicy.d.ts

@@ -0,0 +1,10 @@
+import { BasePolicy, IController, IRoute, Request as sRequest } from '@spinajs/http';
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+export declare class AuthorizedPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: sRequest): Promise<void>;
+}
+//# sourceMappingURL=AuthorizedPolicy.d.ts.map

package/lib/mjs/policies/AuthorizedPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizedPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/AuthorizedPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErF;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,UAAU;IACvC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO;IAKrD,OAAO,CAAC,GAAG,EAAE,QAAQ;CAOnC"}

package/lib/mjs/policies/AuthorizedPolicy.js

@@ -0,0 +1,19 @@
+import { AuthenticationFailed } from '@spinajs/exceptions';
+import { BasePolicy } from '@spinajs/http';
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+export class AuthorizedPolicy extends BasePolicy {
+    isEnabled(_action, _instance) {
+        // acl is always on if set
+        return true;
+    }
+    async execute(req) {
+        if (!req.storage || !req.storage.User || !req.storage.Session?.Data.get('Authorized')) {
+            throw new AuthenticationFailed('user not authorized or session expired');
+        }
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=AuthorizedPolicy.js.map

package/lib/mjs/policies/AuthorizedPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizedPolicy.js","sourceRoot":"","sources":["../../../src/policies/AuthorizedPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAA4C,MAAM,eAAe,CAAC;AAErF;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,UAAU;IACvC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/lib/mjs/policies/LoggedPolicy.js

@@ -10,7 +10,7 @@ export class LoggedPolicy extends BasePolicy {
         return true;
     }
     async execute(req) {
-        if (!req.storage || !req.storage.User || !req.storage.Session?.Data.get('Authorized')) {
+        if (!req.storage || !req.storage.User || !req.storage.Session?.Data.get('Logged')) {
             throw new AuthenticationFailed('user not logged or session expired');
         }
         return Promise.resolve();

package/lib/mjs/policies/LoggedPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"LoggedPolicy.js","sourceRoot":"","sources":["../../../src/policies/LoggedPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAA4C,MAAM,eAAe,CAAC;AAErF;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,UAAU;IACnC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"LoggedPolicy.js","sourceRoot":"","sources":["../../../src/policies/LoggedPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAA4C,MAAM,eAAe,CAAC;AAErF;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,UAAU;IACnC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/lib/mjs/policies/NoSessionPolicy.d.ts

@@ -0,0 +1,11 @@
+import { BasePolicy, IController, IRoute, Request as sRequest } from '@spinajs/http';
+/**
+ * Simple policy to only check if user sends session
+ *
+ * WARN: this is not check for user auth / not auth
+ */
+export declare class NoSessionPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: sRequest): Promise<void>;
+}
+//# sourceMappingURL=NoSessionPolicy.d.ts.map

package/lib/mjs/policies/NoSessionPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NoSessionPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/NoSessionPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGrF;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,UAAU;IACtC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO;IAIrD,OAAO,CAAC,GAAG,EAAE,QAAQ;CAQnC"}

package/lib/mjs/policies/NoSessionPolicy.js

@@ -0,0 +1,19 @@
+import { BasePolicy } from '@spinajs/http';
+import { Forbidden } from '@spinajs/exceptions';
+/**
+ * Simple policy to only check if user sends session
+ *
+ * WARN: this is not check for user auth / not auth
+ */
+export class NoSessionPolicy extends BasePolicy {
+    isEnabled(_action, _instance) {
+        return true;
+    }
+    async execute(req) {
+        if (!req.storage || !req.storage.User || !req.storage.Session) {
+            return Promise.resolve();
+        }
+        throw new Forbidden('User already have session');
+    }
+}
+//# sourceMappingURL=NoSessionPolicy.js.map

package/lib/mjs/policies/NoSessionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NoSessionPolicy.js","sourceRoot":"","sources":["../../../src/policies/NoSessionPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA4C,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,OAAO,eAAgB,SAAQ,UAAU;IACtC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC9D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAEnD,CAAC;CACF"}

package/lib/mjs/policies/NotAthorizedPolicy.d.ts

@@ -0,0 +1,10 @@
+import { BasePolicy, IController, IRoute, Request as sRequest } from '@spinajs/http';
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+export declare class NotAuthorizedPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: sRequest): Promise<void>;
+}
+//# sourceMappingURL=NotAthorizedPolicy.d.ts.map

package/lib/mjs/policies/NotAthorizedPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotAthorizedPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/NotAthorizedPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGrF;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,UAAU;IAC1C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO;IAIrD,OAAO,CAAC,GAAG,EAAE,QAAQ;CAQnC"}

package/lib/mjs/policies/NotAthorizedPolicy.js

@@ -0,0 +1,18 @@
+import { BasePolicy } from '@spinajs/http';
+import { Forbidden } from '@spinajs/exceptions';
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+export class NotAuthorizedPolicy extends BasePolicy {
+    isEnabled(_action, _instance) {
+        return true;
+    }
+    async execute(req) {
+        if (!req.storage.Session?.Data.get('Authorized')) {
+            return Promise.resolve();
+        }
+        throw new Forbidden('User already authorized, please logout first');
+    }
+}
+//# sourceMappingURL=NotAthorizedPolicy.js.map

package/lib/mjs/policies/NotAthorizedPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotAthorizedPolicy.js","sourceRoot":"","sources":["../../../src/policies/NotAthorizedPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA4C,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IAC1C,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAG,CAAC;YAClD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IAEtE,CAAC;CACF"}

package/lib/mjs/policies/NotLoggedPolicy.js

@@ -9,7 +9,7 @@ export class NotLoggedPolicy extends BasePolicy {
         return true;
     }
     async execute(req) {
-        if (!req.storage || !req.storage.User || !req.storage.Session?.Data.get('Authorized')) {
+        if (!req.storage.Session?.Data.get('Logged')) {
             return Promise.resolve();
         }
         throw new Forbidden('User already logged in, please logout first');

package/lib/mjs/policies/NotLoggedPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"NotLoggedPolicy.js","sourceRoot":"","sources":["../../../src/policies/NotLoggedPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA4C,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,UAAU;IACtC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAErE,CAAC;CACF"}
+{"version":3,"file":"NotLoggedPolicy.js","sourceRoot":"","sources":["../../../src/policies/NotLoggedPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA4C,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,UAAU;IACtC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAErE,CAAC;CACF"}