@stratum-hq/lib 0.6.0 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +28 -1
- package/dist/index.js.map +1 -1
- package/dist/migrations/019_rls_policies.sql +236 -0
- package/dist/pool-helpers.d.ts.map +1 -1
- package/dist/pool-helpers.js +31 -1
- package/dist/pool-helpers.js.map +1 -1
- package/dist/services/api-key-service.d.ts.map +1 -1
- package/dist/services/api-key-service.js +4 -1
- package/dist/services/api-key-service.js.map +1 -1
- package/dist/services/config-service.js +2 -2
- package/dist/services/config-service.js.map +1 -1
- package/dist/services/key-rotation-service.js +1 -1
- package/dist/services/key-rotation-service.js.map +1 -1
- package/dist/services/role-service.d.ts +13 -3
- package/dist/services/role-service.d.ts.map +1 -1
- package/dist/services/role-service.js +18 -5
- package/dist/services/role-service.js.map +1 -1
- package/dist/services/tenant-service.d.ts.map +1 -1
- package/dist/services/tenant-service.js +12 -2
- package/dist/services/tenant-service.js.map +1 -1
- package/dist/stratum.d.ts +4 -4
- package/dist/stratum.d.ts.map +1 -1
- package/dist/stratum.js +1 -1
- package/dist/stratum.js.map +1 -1
- package/package.json +8 -1
- package/dist/__tests__/crypto.test.d.ts +0 -2
- package/dist/__tests__/crypto.test.d.ts.map +0 -1
- package/dist/__tests__/crypto.test.js +0 -41
- package/dist/__tests__/crypto.test.js.map +0 -1
- package/dist/__tests__/migrate-schemas.test.d.ts +0 -2
- package/dist/__tests__/migrate-schemas.test.d.ts.map +0 -1
- package/dist/__tests__/migrate-schemas.test.js +0 -225
- package/dist/__tests__/migrate-schemas.test.js.map +0 -1
- package/dist/__tests__/stratum-als.test.d.ts +0 -2
- package/dist/__tests__/stratum-als.test.d.ts.map +0 -1
- package/dist/__tests__/stratum-als.test.js +0 -49
- package/dist/__tests__/stratum-als.test.js.map +0 -1
- package/dist/__tests__/webhook-signature.test.d.ts +0 -2
- package/dist/__tests__/webhook-signature.test.d.ts.map +0 -1
- package/dist/__tests__/webhook-signature.test.js +0 -103
- package/dist/__tests__/webhook-signature.test.js.map +0 -1
- package/dist/services/__tests__/abac-service.test.d.ts +0 -2
- package/dist/services/__tests__/abac-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/abac-service.test.js +0 -108
- package/dist/services/__tests__/abac-service.test.js.map +0 -1
- package/dist/services/__tests__/api-key-service.test.d.ts +0 -2
- package/dist/services/__tests__/api-key-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/api-key-service.test.js +0 -76
- package/dist/services/__tests__/api-key-service.test.js.map +0 -1
- package/dist/services/__tests__/audit-service.test.d.ts +0 -2
- package/dist/services/__tests__/audit-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/audit-service.test.js +0 -230
- package/dist/services/__tests__/audit-service.test.js.map +0 -1
- package/dist/services/__tests__/config-service.test.d.ts +0 -2
- package/dist/services/__tests__/config-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/config-service.test.js +0 -565
- package/dist/services/__tests__/config-service.test.js.map +0 -1
- package/dist/services/__tests__/consent-service.test.d.ts +0 -2
- package/dist/services/__tests__/consent-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/consent-service.test.js +0 -169
- package/dist/services/__tests__/consent-service.test.js.map +0 -1
- package/dist/services/__tests__/event-service.test.d.ts +0 -2
- package/dist/services/__tests__/event-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/event-service.test.js +0 -193
- package/dist/services/__tests__/event-service.test.js.map +0 -1
- package/dist/services/__tests__/key-rotation-service.test.d.ts +0 -2
- package/dist/services/__tests__/key-rotation-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/key-rotation-service.test.js +0 -132
- package/dist/services/__tests__/key-rotation-service.test.js.map +0 -1
- package/dist/services/__tests__/permission-service.test.d.ts +0 -2
- package/dist/services/__tests__/permission-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/permission-service.test.js +0 -480
- package/dist/services/__tests__/permission-service.test.js.map +0 -1
- package/dist/services/__tests__/retention-service.test.d.ts +0 -2
- package/dist/services/__tests__/retention-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/retention-service.test.js +0 -152
- package/dist/services/__tests__/retention-service.test.js.map +0 -1
- package/dist/services/__tests__/role-service.test.d.ts +0 -2
- package/dist/services/__tests__/role-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/role-service.test.js +0 -134
- package/dist/services/__tests__/role-service.test.js.map +0 -1
- package/dist/services/__tests__/tenant-service.test.d.ts +0 -2
- package/dist/services/__tests__/tenant-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/tenant-service.test.js +0 -548
- package/dist/services/__tests__/tenant-service.test.js.map +0 -1
- package/dist/services/__tests__/test-helpers.d.ts +0 -9
- package/dist/services/__tests__/test-helpers.d.ts.map +0 -1
- package/dist/services/__tests__/test-helpers.js +0 -19
- package/dist/services/__tests__/test-helpers.js.map +0 -1
- package/dist/services/__tests__/webhook-service.test.d.ts +0 -2
- package/dist/services/__tests__/webhook-service.test.d.ts.map +0 -1
- package/dist/services/__tests__/webhook-service.test.js +0 -184
- package/dist/services/__tests__/webhook-service.test.js.map +0 -1
|
@@ -1,225 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const vitest_1 = require("vitest");
|
|
4
|
-
const migrate_schemas_js_1 = require("../migrate-schemas.js");
|
|
5
|
-
// Mock fs and path so we don't need real migration files
|
|
6
|
-
vitest_1.vi.mock("node:fs", () => ({
|
|
7
|
-
default: {
|
|
8
|
-
existsSync: vitest_1.vi.fn().mockReturnValue(true),
|
|
9
|
-
readdirSync: vitest_1.vi.fn().mockReturnValue(["001_init.sql", "002_schema.sql"]),
|
|
10
|
-
readFileSync: vitest_1.vi.fn().mockImplementation((_path) => {
|
|
11
|
-
if (_path.includes("001_init"))
|
|
12
|
-
return "CREATE TABLE test1 (id INT);";
|
|
13
|
-
return "CREATE TABLE test2 (id INT);";
|
|
14
|
-
}),
|
|
15
|
-
},
|
|
16
|
-
}));
|
|
17
|
-
function createMockClient() {
|
|
18
|
-
const applied = new Set();
|
|
19
|
-
return {
|
|
20
|
-
query: vitest_1.vi.fn().mockImplementation((sql, params) => {
|
|
21
|
-
// Track SET search_path calls
|
|
22
|
-
if (typeof sql === "string" && sql.includes("search_path")) {
|
|
23
|
-
return Promise.resolve({ rows: [] });
|
|
24
|
-
}
|
|
25
|
-
// Check if migration already applied
|
|
26
|
-
if (typeof sql === "string" &&
|
|
27
|
-
sql.includes("SELECT 1 FROM _migrations") &&
|
|
28
|
-
params) {
|
|
29
|
-
const name = params[0];
|
|
30
|
-
if (applied.has(name)) {
|
|
31
|
-
return Promise.resolve({ rows: [{ "?column?": 1 }] });
|
|
32
|
-
}
|
|
33
|
-
return Promise.resolve({ rows: [] });
|
|
34
|
-
}
|
|
35
|
-
// Record applied migration
|
|
36
|
-
if (typeof sql === "string" &&
|
|
37
|
-
sql.includes("INSERT INTO _migrations") &&
|
|
38
|
-
params) {
|
|
39
|
-
applied.add(params[0]);
|
|
40
|
-
return Promise.resolve({ rows: [] });
|
|
41
|
-
}
|
|
42
|
-
return Promise.resolve({ rows: [] });
|
|
43
|
-
}),
|
|
44
|
-
release: vitest_1.vi.fn(),
|
|
45
|
-
};
|
|
46
|
-
}
|
|
47
|
-
function createMockPool(schemas, opts) {
|
|
48
|
-
const clients = [];
|
|
49
|
-
const pool = {
|
|
50
|
-
query: vitest_1.vi.fn().mockImplementation((sql) => {
|
|
51
|
-
if (sql.includes("SELECT slug FROM tenants")) {
|
|
52
|
-
return Promise.resolve({
|
|
53
|
-
rows: schemas.map((s) => ({ slug: s })),
|
|
54
|
-
});
|
|
55
|
-
}
|
|
56
|
-
return Promise.resolve({ rows: [] });
|
|
57
|
-
}),
|
|
58
|
-
connect: vitest_1.vi.fn().mockImplementation(() => {
|
|
59
|
-
const client = createMockClient();
|
|
60
|
-
if (opts?.failSchema) {
|
|
61
|
-
const origQuery = client.query;
|
|
62
|
-
client.query = vitest_1.vi.fn().mockImplementation((sql, params) => {
|
|
63
|
-
// Fail on the actual migration SQL for the target schema
|
|
64
|
-
if (typeof sql === "string" &&
|
|
65
|
-
sql.includes("search_path") &&
|
|
66
|
-
sql.includes(`tenant_${opts.failSchema}`)) {
|
|
67
|
-
// Let the search_path call succeed, but fail on the next migration SQL
|
|
68
|
-
const innerQuery = vitest_1.vi.fn().mockImplementation((innerSql, innerParams) => {
|
|
69
|
-
if (innerSql.startsWith("CREATE TABLE test")) {
|
|
70
|
-
return Promise.reject(new Error(`Migration failed for schema tenant_${opts.failSchema}`));
|
|
71
|
-
}
|
|
72
|
-
return origQuery(innerSql, innerParams);
|
|
73
|
-
});
|
|
74
|
-
// Replace query for subsequent calls
|
|
75
|
-
client.query = innerQuery;
|
|
76
|
-
return Promise.resolve({ rows: [] });
|
|
77
|
-
}
|
|
78
|
-
return origQuery(sql, params);
|
|
79
|
-
});
|
|
80
|
-
}
|
|
81
|
-
clients.push(client);
|
|
82
|
-
return Promise.resolve(client);
|
|
83
|
-
}),
|
|
84
|
-
_clients: clients,
|
|
85
|
-
};
|
|
86
|
-
return pool;
|
|
87
|
-
}
|
|
88
|
-
(0, vitest_1.beforeEach)(() => {
|
|
89
|
-
vitest_1.vi.clearAllMocks();
|
|
90
|
-
});
|
|
91
|
-
(0, vitest_1.describe)("migrateAllSchemas", () => {
|
|
92
|
-
(0, vitest_1.it)("discovers schemas from tenants table", async () => {
|
|
93
|
-
const pool = createMockPool(["acme", "globex"]);
|
|
94
|
-
await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
|
|
95
|
-
(0, vitest_1.expect)(pool.query).toHaveBeenCalledWith(vitest_1.expect.stringContaining("SELECT slug FROM tenants"));
|
|
96
|
-
});
|
|
97
|
-
(0, vitest_1.it)("runs migrations per schema with correct search_path", async () => {
|
|
98
|
-
const pool = createMockPool(["acme"]);
|
|
99
|
-
const result = await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
|
|
100
|
-
(0, vitest_1.expect)(result.succeeded).toContain("tenant_acme");
|
|
101
|
-
(0, vitest_1.expect)(result.failed).toHaveLength(0);
|
|
102
|
-
// Verify search_path was set for the schema
|
|
103
|
-
const allCalls = pool._clients.flatMap((c) => c.query.mock.calls.map((call) => call[0]));
|
|
104
|
-
const searchPathCalls = allCalls.filter((s) => typeof s === "string" && s.includes("search_path"));
|
|
105
|
-
(0, vitest_1.expect)(searchPathCalls.some((s) => s.includes("tenant_acme"))).toBe(true);
|
|
106
|
-
});
|
|
107
|
-
(0, vitest_1.it)("continue-on-error: collects failures in result.failed[]", async () => {
|
|
108
|
-
// Create a pool where one schema will fail
|
|
109
|
-
const pool = createMockPool(["acme", "badco"]);
|
|
110
|
-
// Override connect to fail for badco's migration
|
|
111
|
-
let callCount = 0;
|
|
112
|
-
const origConnect = pool.connect;
|
|
113
|
-
pool.connect = vitest_1.vi.fn().mockImplementation(() => {
|
|
114
|
-
callCount++;
|
|
115
|
-
const client = createMockClient();
|
|
116
|
-
// Make every other set of clients fail for badco
|
|
117
|
-
const origQuery = client.query;
|
|
118
|
-
let currentSchema = "";
|
|
119
|
-
client.query = vitest_1.vi.fn().mockImplementation((sql, params) => {
|
|
120
|
-
if (typeof sql === "string" && sql.includes("search_path")) {
|
|
121
|
-
if (sql.includes("tenant_badco")) {
|
|
122
|
-
currentSchema = "badco";
|
|
123
|
-
}
|
|
124
|
-
else {
|
|
125
|
-
currentSchema = "";
|
|
126
|
-
}
|
|
127
|
-
}
|
|
128
|
-
if (currentSchema === "badco" &&
|
|
129
|
-
typeof sql === "string" &&
|
|
130
|
-
sql.startsWith("CREATE TABLE test")) {
|
|
131
|
-
return Promise.reject(new Error("Schema migration failed"));
|
|
132
|
-
}
|
|
133
|
-
return origQuery(sql, params);
|
|
134
|
-
});
|
|
135
|
-
pool._clients.push(client);
|
|
136
|
-
return Promise.resolve(client);
|
|
137
|
-
});
|
|
138
|
-
const result = await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
|
|
139
|
-
(0, vitest_1.expect)(result.succeeded).toContain("tenant_acme");
|
|
140
|
-
(0, vitest_1.expect)(result.failed.length).toBeGreaterThan(0);
|
|
141
|
-
(0, vitest_1.expect)(result.failed[0].schema).toBe("tenant_badco");
|
|
142
|
-
(0, vitest_1.expect)(result.failed[0].error).toBeInstanceOf(Error);
|
|
143
|
-
});
|
|
144
|
-
(0, vitest_1.it)("progress callback called with correct args", async () => {
|
|
145
|
-
const pool = createMockPool(["acme", "globex"]);
|
|
146
|
-
const progress = vitest_1.vi.fn();
|
|
147
|
-
await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool, onProgress: progress });
|
|
148
|
-
(0, vitest_1.expect)(progress).toHaveBeenCalledTimes(2);
|
|
149
|
-
// Each call should have (schema, index, total)
|
|
150
|
-
const calls = progress.mock.calls;
|
|
151
|
-
for (const call of calls) {
|
|
152
|
-
(0, vitest_1.expect)(typeof call[0]).toBe("string");
|
|
153
|
-
(0, vitest_1.expect)(typeof call[1]).toBe("number");
|
|
154
|
-
(0, vitest_1.expect)(call[2]).toBe(2);
|
|
155
|
-
}
|
|
156
|
-
// Indices should be 1 and 2 (completed count)
|
|
157
|
-
const indices = calls.map((c) => c[1]).sort();
|
|
158
|
-
(0, vitest_1.expect)(indices).toEqual([1, 2]);
|
|
159
|
-
});
|
|
160
|
-
(0, vitest_1.it)("idempotent re-run: already-applied migrations skipped", async () => {
|
|
161
|
-
// Create pool with a client that reports migrations as already applied
|
|
162
|
-
const pool = createMockPool(["acme"]);
|
|
163
|
-
const origConnect = pool.connect;
|
|
164
|
-
pool.connect = vitest_1.vi.fn().mockImplementation(() => {
|
|
165
|
-
const client = createMockClient();
|
|
166
|
-
// Override: all migrations already applied
|
|
167
|
-
const origQuery = client.query;
|
|
168
|
-
client.query = vitest_1.vi.fn().mockImplementation((sql, params) => {
|
|
169
|
-
if (typeof sql === "string" &&
|
|
170
|
-
sql.includes("SELECT 1 FROM _migrations") &&
|
|
171
|
-
params) {
|
|
172
|
-
return Promise.resolve({ rows: [{ "?column?": 1 }] });
|
|
173
|
-
}
|
|
174
|
-
return origQuery(sql, params);
|
|
175
|
-
});
|
|
176
|
-
pool._clients.push(client);
|
|
177
|
-
return Promise.resolve(client);
|
|
178
|
-
});
|
|
179
|
-
const result = await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
|
|
180
|
-
(0, vitest_1.expect)(result.succeeded).toContain("tenant_acme");
|
|
181
|
-
(0, vitest_1.expect)(result.failed).toHaveLength(0);
|
|
182
|
-
// No INSERT should have been called (migrations skipped)
|
|
183
|
-
const allCalls = pool._clients.flatMap((c) => c.query.mock.calls.map((call) => call[0]));
|
|
184
|
-
const inserts = allCalls.filter((s) => typeof s === "string" && s.includes("INSERT INTO _migrations"));
|
|
185
|
-
(0, vitest_1.expect)(inserts).toHaveLength(0);
|
|
186
|
-
});
|
|
187
|
-
(0, vitest_1.it)("empty schema list returns empty result", async () => {
|
|
188
|
-
const pool = createMockPool([]);
|
|
189
|
-
const result = await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
|
|
190
|
-
(0, vitest_1.expect)(result.succeeded).toEqual([]);
|
|
191
|
-
(0, vitest_1.expect)(result.failed).toEqual([]);
|
|
192
|
-
});
|
|
193
|
-
(0, vitest_1.it)("respects concurrency limit", async () => {
|
|
194
|
-
const schemas = Array.from({ length: 10 }, (_, i) => `tenant${i}`);
|
|
195
|
-
const pool = createMockPool(schemas);
|
|
196
|
-
let maxConcurrent = 0;
|
|
197
|
-
let currentConcurrent = 0;
|
|
198
|
-
const origConnect = pool.connect;
|
|
199
|
-
pool.connect = vitest_1.vi.fn().mockImplementation(async () => {
|
|
200
|
-
currentConcurrent++;
|
|
201
|
-
if (currentConcurrent > maxConcurrent) {
|
|
202
|
-
maxConcurrent = currentConcurrent;
|
|
203
|
-
}
|
|
204
|
-
const client = createMockClient();
|
|
205
|
-
// Add a small delay to simulate work
|
|
206
|
-
const origQuery = client.query;
|
|
207
|
-
client.query = vitest_1.vi.fn().mockImplementation(async (sql, params) => {
|
|
208
|
-
if (typeof sql === "string" && sql.includes("COMMIT")) {
|
|
209
|
-
// Small delay on commit
|
|
210
|
-
await new Promise((r) => setTimeout(r, 5));
|
|
211
|
-
currentConcurrent--;
|
|
212
|
-
}
|
|
213
|
-
return origQuery(sql, params);
|
|
214
|
-
});
|
|
215
|
-
pool._clients.push(client);
|
|
216
|
-
return client;
|
|
217
|
-
});
|
|
218
|
-
await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool, concurrency: 3 });
|
|
219
|
-
// maxConcurrent should not exceed concurrency * migrations_per_schema
|
|
220
|
-
// but the schema-level concurrency should be limited
|
|
221
|
-
// Due to the semaphore, we expect at most 3 schemas in flight
|
|
222
|
-
(0, vitest_1.expect)(maxConcurrent).toBeLessThanOrEqual(3 * 2); // 3 concurrent * 2 migration files
|
|
223
|
-
});
|
|
224
|
-
});
|
|
225
|
-
//# sourceMappingURL=migrate-schemas.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"migrate-schemas.test.js","sourceRoot":"","sources":["../../src/__tests__/migrate-schemas.test.ts"],"names":[],"mappings":";;AAAA,mCAA8D;AAC9D,8DAA0D;AAE1D,yDAAyD;AACzD,WAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE;QACP,UAAU,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;QACzC,WAAW,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACxE,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,KAAa,EAAE,EAAE;YACzD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,OAAO,8BAA8B,CAAC;YACtE,OAAO,8BAA8B,CAAC;QACxC,CAAC,CAAC;KACH;CACF,CAAC,CAAC,CAAC;AAEJ,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,MAAkB,EAAE,EAAE;YACpE,8BAA8B;YAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC3D,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,qCAAqC;YACrC,IACE,OAAO,GAAG,KAAK,QAAQ;gBACvB,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC;gBACzC,MAAM,EACN,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;gBACjC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACxD,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,2BAA2B;YAC3B,IACE,OAAO,GAAG,KAAK,QAAQ;gBACvB,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC;gBACvC,MAAM,EACN,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC;gBACjC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,OAAO,EAAE,WAAE,CAAC,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAiB,EAAE,IAA8B;IACvE,MAAM,OAAO,GAA0C,EAAE,CAAC;IAE1D,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC7C,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;iBACxC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,OAAO,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACvC,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAElC,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC;gBACrB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC/B,MAAM,CAAC,KAAK,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,MAAkB,EAAE,EAAE;oBAC5E,yDAAyD;oBACzD,IACE,OAAO,GAAG,KAAK,QAAQ;wBACvB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAC3B,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC,EACzC,CAAC;wBACD,uEAAuE;wBACvE,MAAM,UAAU,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,QAAgB,EAAE,WAAuB,EAAE,EAAE;4BAC1F,IAAI,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gCAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;4BAC5F,CAAC;4BACD,OAAO,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;wBAC1C,CAAC,CAAC,CAAC;wBACH,qCAAqC;wBACrC,MAAM,CAAC,KAAK,GAAG,UAAiB,CAAC;wBACjC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;oBACvC,CAAC;oBACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChC,CAAC,CAAQ,CAAC;YACZ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,QAAQ,EAAE,OAAO;KAClB,CAAC;IAEF,OAAO,IAAW,CAAC;AACrB,CAAC;AAED,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,WAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAA,WAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACrC,eAAM,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CACpD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEtC,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CACpC,CAAC,CAAsC,EAAE,EAAE,CACzC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC;QACF,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAClE,CAAC;QACF,IAAA,eAAM,EAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,2CAA2C;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,iDAAiD;QACjD,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YAC7C,SAAS,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAElC,iDAAiD;YACjD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YAC/B,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,MAAkB,EAAE,EAAE;gBAC5E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC3D,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;wBACjC,aAAa,GAAG,OAAO,CAAC;oBAC1B,CAAC;yBAAM,CAAC;wBACN,aAAa,GAAG,EAAE,CAAC;oBACrB,CAAC;gBACH,CAAC;gBACD,IACE,aAAa,KAAK,OAAO;oBACzB,OAAO,GAAG,KAAK,QAAQ;oBACvB,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACnC,CAAC;oBACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,CAAC,CAAQ,CAAC;YAEV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAQ,CAAC;QAEV,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAExD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,+CAA+C;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAA,eAAM,EAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,8CAA8C;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,uEAAuE;QACvE,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YAC7C,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,2CAA2C;YAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YAC/B,MAAM,CAAC,KAAK,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,MAAkB,EAAE,EAAE;gBAC5E,IACE,OAAO,GAAG,KAAK,QAAQ;oBACvB,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC;oBACzC,MAAM,EACN,CAAC;oBACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACxD,CAAC;gBACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,CAAC,CAAQ,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAQ,CAAC;QAEV,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEtC,yDAAyD;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CACpC,CAAC,CAAsC,EAAE,EAAE,CACzC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC7B,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAC9E,CAAC;QACF,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjC,IAAI,CAAC,OAAO,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACnD,iBAAiB,EAAE,CAAC;YACpB,IAAI,iBAAiB,GAAG,aAAa,EAAE,CAAC;gBACtC,aAAa,GAAG,iBAAiB,CAAC;YACpC,CAAC;YACD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,qCAAqC;YACrC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YAC/B,MAAM,CAAC,KAAK,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAW,EAAE,MAAkB,EAAE,EAAE;gBAClF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,wBAAwB;oBACxB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC3C,iBAAiB,EAAE,CAAC;gBACtB,CAAC;gBACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,CAAC,CAAQ,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAQ,CAAC;QAEV,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAElD,sEAAsE;QACtE,qDAAqD;QACrD,8DAA8D;QAC9D,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mCAAmC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"stratum-als.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/stratum-als.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,49 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const vitest_1 = require("vitest");
|
|
4
|
-
const stratum_js_1 = require("../stratum.js");
|
|
5
|
-
const mockContext = {
|
|
6
|
-
tenant_id: "t_abc-123",
|
|
7
|
-
ancestry_path: "/t_abc-123",
|
|
8
|
-
depth: 0,
|
|
9
|
-
resolved_config: { feature_x: true },
|
|
10
|
-
resolved_permissions: {},
|
|
11
|
-
isolation_strategy: "SHARED_RLS",
|
|
12
|
-
};
|
|
13
|
-
(0, vitest_1.describe)("Stratum ALS convenience methods", () => {
|
|
14
|
-
(0, vitest_1.it)("currentTenantId() returns tenant ID inside runWithTenant", () => {
|
|
15
|
-
const result = stratum_js_1.Stratum.runWithTenant(mockContext, () => {
|
|
16
|
-
return stratum_js_1.Stratum.currentTenantId();
|
|
17
|
-
});
|
|
18
|
-
(0, vitest_1.expect)(result).toBe("t_abc-123");
|
|
19
|
-
});
|
|
20
|
-
(0, vitest_1.it)("currentTenantId() returns undefined outside any context", () => {
|
|
21
|
-
(0, vitest_1.expect)(stratum_js_1.Stratum.currentTenantId()).toBeUndefined();
|
|
22
|
-
});
|
|
23
|
-
(0, vitest_1.it)("currentTenantContext() returns full context object", () => {
|
|
24
|
-
const result = stratum_js_1.Stratum.runWithTenant(mockContext, () => {
|
|
25
|
-
return stratum_js_1.Stratum.currentTenantContext();
|
|
26
|
-
});
|
|
27
|
-
(0, vitest_1.expect)(result).toEqual(mockContext);
|
|
28
|
-
});
|
|
29
|
-
(0, vitest_1.it)("currentTenantContext() returns undefined outside any context", () => {
|
|
30
|
-
(0, vitest_1.expect)(stratum_js_1.Stratum.currentTenantContext()).toBeUndefined();
|
|
31
|
-
});
|
|
32
|
-
(0, vitest_1.it)("runWithTenant() executes the function and returns its value", () => {
|
|
33
|
-
const result = stratum_js_1.Stratum.runWithTenant(mockContext, () => 42);
|
|
34
|
-
(0, vitest_1.expect)(result).toBe(42);
|
|
35
|
-
});
|
|
36
|
-
(0, vitest_1.it)("nested runWithTenant() uses innermost context", () => {
|
|
37
|
-
const inner = {
|
|
38
|
-
...mockContext,
|
|
39
|
-
tenant_id: "t_inner-456",
|
|
40
|
-
};
|
|
41
|
-
const result = stratum_js_1.Stratum.runWithTenant(mockContext, () => {
|
|
42
|
-
return stratum_js_1.Stratum.runWithTenant(inner, () => {
|
|
43
|
-
return stratum_js_1.Stratum.currentTenantId();
|
|
44
|
-
});
|
|
45
|
-
});
|
|
46
|
-
(0, vitest_1.expect)(result).toBe("t_inner-456");
|
|
47
|
-
});
|
|
48
|
-
});
|
|
49
|
-
//# sourceMappingURL=stratum-als.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"stratum-als.test.js","sourceRoot":"","sources":["../../src/__tests__/stratum-als.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,8CAAwC;AAGxC,MAAM,WAAW,GAAwB;IACvC,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,YAAY;IAC3B,KAAK,EAAE,CAAC;IACR,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;IACpC,oBAAoB,EAAE,EAAE;IACxB,kBAAkB,EAAE,YAAY;CACjC,CAAC;AAEF,IAAA,iBAAQ,EAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAA,WAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,oBAAO,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE;YACrD,OAAO,oBAAO,CAAC,eAAe,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAA,eAAM,EAAC,oBAAO,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,MAAM,GAAG,oBAAO,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE;YACrD,OAAO,oBAAO,CAAC,oBAAoB,EAAE,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,IAAA,eAAM,EAAC,oBAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,oBAAO,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,KAAK,GAAwB;YACjC,GAAG,WAAW;YACd,SAAS,EAAE,aAAa;SACzB,CAAC;QACF,MAAM,MAAM,GAAG,oBAAO,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE;YACrD,OAAO,oBAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE;gBACvC,OAAO,oBAAO,CAAC,eAAe,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"webhook-signature.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/webhook-signature.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,103 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const vitest_1 = require("vitest");
|
|
4
|
-
const webhook_signature_js_1 = require("../webhook-signature.js");
|
|
5
|
-
const SECRET = "whsec_test_secret";
|
|
6
|
-
const PAYLOAD = JSON.stringify({ id: "evt_1", type: "tenant.created" });
|
|
7
|
-
(0, vitest_1.describe)("signWebhookPayload", () => {
|
|
8
|
-
(0, vitest_1.it)("binds the timestamp into the signature", () => {
|
|
9
|
-
const t1 = "2026-07-24T00:00:00.000Z";
|
|
10
|
-
const t2 = "2026-07-24T00:00:01.000Z";
|
|
11
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.signWebhookPayload)(SECRET, t1, PAYLOAD)).not.toBe((0, webhook_signature_js_1.signWebhookPayload)(SECRET, t2, PAYLOAD));
|
|
12
|
-
});
|
|
13
|
-
(0, vitest_1.it)("produces a sha256= prefixed hex digest", () => {
|
|
14
|
-
const sig = (0, webhook_signature_js_1.signWebhookPayload)(SECRET, "2026-07-24T00:00:00.000Z", PAYLOAD);
|
|
15
|
-
(0, vitest_1.expect)(sig).toMatch(/^sha256=[0-9a-f]{64}$/);
|
|
16
|
-
});
|
|
17
|
-
});
|
|
18
|
-
(0, vitest_1.describe)("verifyWebhookSignature", () => {
|
|
19
|
-
const now = Date.parse("2026-07-24T12:00:00.000Z");
|
|
20
|
-
const timestamp = "2026-07-24T12:00:00.000Z";
|
|
21
|
-
const signature = (0, webhook_signature_js_1.signWebhookPayload)(SECRET, timestamp, PAYLOAD);
|
|
22
|
-
(0, vitest_1.it)("accepts a fresh, correctly signed delivery", () => {
|
|
23
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({ secret: SECRET, payload: PAYLOAD, signature, timestamp, now })).toBe(true);
|
|
24
|
-
});
|
|
25
|
-
(0, vitest_1.it)("rejects a tampered payload", () => {
|
|
26
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
|
|
27
|
-
secret: SECRET,
|
|
28
|
-
payload: PAYLOAD + "x",
|
|
29
|
-
signature,
|
|
30
|
-
timestamp,
|
|
31
|
-
now,
|
|
32
|
-
})).toBe(false);
|
|
33
|
-
});
|
|
34
|
-
(0, vitest_1.it)("rejects a wrong secret", () => {
|
|
35
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
|
|
36
|
-
secret: "whsec_wrong",
|
|
37
|
-
payload: PAYLOAD,
|
|
38
|
-
signature,
|
|
39
|
-
timestamp,
|
|
40
|
-
now,
|
|
41
|
-
})).toBe(false);
|
|
42
|
-
});
|
|
43
|
-
(0, vitest_1.it)("rejects a replayed delivery once it ages past the window", () => {
|
|
44
|
-
const stale = now + (webhook_signature_js_1.DEFAULT_WEBHOOK_TOLERANCE_SECONDS + 1) * 1000;
|
|
45
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
|
|
46
|
-
secret: SECRET,
|
|
47
|
-
payload: PAYLOAD,
|
|
48
|
-
signature,
|
|
49
|
-
timestamp,
|
|
50
|
-
now: stale,
|
|
51
|
-
})).toBe(false);
|
|
52
|
-
});
|
|
53
|
-
(0, vitest_1.it)("rejects a timestamp too far in the future", () => {
|
|
54
|
-
const future = now - (webhook_signature_js_1.DEFAULT_WEBHOOK_TOLERANCE_SECONDS + 1) * 1000;
|
|
55
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
|
|
56
|
-
secret: SECRET,
|
|
57
|
-
payload: PAYLOAD,
|
|
58
|
-
signature,
|
|
59
|
-
timestamp,
|
|
60
|
-
now: future,
|
|
61
|
-
})).toBe(false);
|
|
62
|
-
});
|
|
63
|
-
(0, vitest_1.it)("accepts a delivery at the edge of the window", () => {
|
|
64
|
-
const edge = now + webhook_signature_js_1.DEFAULT_WEBHOOK_TOLERANCE_SECONDS * 1000;
|
|
65
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
|
|
66
|
-
secret: SECRET,
|
|
67
|
-
payload: PAYLOAD,
|
|
68
|
-
signature,
|
|
69
|
-
timestamp,
|
|
70
|
-
now: edge,
|
|
71
|
-
})).toBe(true);
|
|
72
|
-
});
|
|
73
|
-
(0, vitest_1.it)("respects a custom tolerance", () => {
|
|
74
|
-
const drift = now + 10_000; // 10s later
|
|
75
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
|
|
76
|
-
secret: SECRET,
|
|
77
|
-
payload: PAYLOAD,
|
|
78
|
-
signature,
|
|
79
|
-
timestamp,
|
|
80
|
-
toleranceSeconds: 5,
|
|
81
|
-
now: drift,
|
|
82
|
-
})).toBe(false);
|
|
83
|
-
});
|
|
84
|
-
(0, vitest_1.it)("fails closed on a malformed timestamp", () => {
|
|
85
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
|
|
86
|
-
secret: SECRET,
|
|
87
|
-
payload: PAYLOAD,
|
|
88
|
-
signature,
|
|
89
|
-
timestamp: "not-a-date",
|
|
90
|
-
now,
|
|
91
|
-
})).toBe(false);
|
|
92
|
-
});
|
|
93
|
-
(0, vitest_1.it)("rejects a malformed signature without throwing", () => {
|
|
94
|
-
(0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
|
|
95
|
-
secret: SECRET,
|
|
96
|
-
payload: PAYLOAD,
|
|
97
|
-
signature: "sha256=deadbeef",
|
|
98
|
-
timestamp,
|
|
99
|
-
now,
|
|
100
|
-
})).toBe(false);
|
|
101
|
-
});
|
|
102
|
-
});
|
|
103
|
-
//# sourceMappingURL=webhook-signature.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"webhook-signature.test.js","sourceRoot":"","sources":["../../src/__tests__/webhook-signature.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,kEAIiC;AAEjC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAExE,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAA,WAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,EAAE,GAAG,0BAA0B,CAAC;QACtC,MAAM,EAAE,GAAG,0BAA0B,CAAC;QACtC,IAAA,eAAM,EAAC,IAAA,yCAAkB,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CACtD,IAAA,yCAAkB,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,IAAA,yCAAkB,EAAC,MAAM,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC;QAC5E,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,0BAA0B,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAA,yCAAkB,EAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAEjE,IAAA,WAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CACxF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO,GAAG,GAAG;YACtB,SAAS;YACT,SAAS;YACT,GAAG;SACJ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,GAAG;SACJ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,wDAAiC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;QACnE,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,GAAG,EAAE,KAAK;SACX,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,wDAAiC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;QACpE,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,GAAG,EAAE,MAAM;SACZ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,GAAG,GAAG,GAAG,wDAAiC,GAAG,IAAI,CAAC;QAC5D,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,GAAG,EAAE,IAAI;SACV,CAAC,CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,YAAY;QACxC,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,gBAAgB,EAAE,CAAC;YACnB,GAAG,EAAE,KAAK;SACX,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS,EAAE,YAAY;YACvB,GAAG;SACJ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,iBAAiB;YAC5B,SAAS;YACT,GAAG;SACJ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"abac-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/abac-service.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,108 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const vitest_1 = require("vitest");
|
|
4
|
-
const abac_service_js_1 = require("../abac-service.js");
|
|
5
|
-
function makePolicy(overrides = {}) {
|
|
6
|
-
return {
|
|
7
|
-
id: "pol-1",
|
|
8
|
-
tenant_id: "t-1",
|
|
9
|
-
name: "test-policy",
|
|
10
|
-
resource_type: "document",
|
|
11
|
-
action: "read",
|
|
12
|
-
effect: "allow",
|
|
13
|
-
conditions: [],
|
|
14
|
-
priority: 0,
|
|
15
|
-
mode: "INHERITED",
|
|
16
|
-
source_tenant_id: "t-1",
|
|
17
|
-
created_at: new Date(),
|
|
18
|
-
updated_at: new Date(),
|
|
19
|
-
...overrides,
|
|
20
|
-
};
|
|
21
|
-
}
|
|
22
|
-
// ---------------------------------------------------------------------------
|
|
23
|
-
// evaluateCondition — operator tests
|
|
24
|
-
// ---------------------------------------------------------------------------
|
|
25
|
-
(0, vitest_1.describe)("evaluateCondition", () => {
|
|
26
|
-
(0, vitest_1.it)("eq: matches when values are equal", () => {
|
|
27
|
-
const c = { attribute: "role", operator: "eq", value: "admin" };
|
|
28
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { role: "admin" })).toBe(true);
|
|
29
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { role: "viewer" })).toBe(false);
|
|
30
|
-
});
|
|
31
|
-
(0, vitest_1.it)("neq: matches when values differ", () => {
|
|
32
|
-
const c = { attribute: "role", operator: "neq", value: "admin" };
|
|
33
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { role: "viewer" })).toBe(true);
|
|
34
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { role: "admin" })).toBe(false);
|
|
35
|
-
});
|
|
36
|
-
(0, vitest_1.it)("in: matches when value is in array", () => {
|
|
37
|
-
const c = { attribute: "dept", operator: "in", value: ["eng", "product"] };
|
|
38
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { dept: "eng" })).toBe(true);
|
|
39
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { dept: "sales" })).toBe(false);
|
|
40
|
-
});
|
|
41
|
-
(0, vitest_1.it)("not_in: matches when value is not in array", () => {
|
|
42
|
-
const c = { attribute: "dept", operator: "not_in", value: ["eng", "product"] };
|
|
43
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { dept: "sales" })).toBe(true);
|
|
44
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { dept: "eng" })).toBe(false);
|
|
45
|
-
});
|
|
46
|
-
(0, vitest_1.it)("contains: matches when array attribute contains value", () => {
|
|
47
|
-
const c = { attribute: "tags", operator: "contains", value: "urgent" };
|
|
48
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { tags: ["urgent", "important"] })).toBe(true);
|
|
49
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { tags: ["normal"] })).toBe(false);
|
|
50
|
-
});
|
|
51
|
-
(0, vitest_1.it)("gt: numeric greater than", () => {
|
|
52
|
-
const c = { attribute: "level", operator: "gt", value: 5 };
|
|
53
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 10 })).toBe(true);
|
|
54
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 5 })).toBe(false);
|
|
55
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 3 })).toBe(false);
|
|
56
|
-
});
|
|
57
|
-
(0, vitest_1.it)("gte: numeric greater than or equal", () => {
|
|
58
|
-
const c = { attribute: "level", operator: "gte", value: 5 };
|
|
59
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 5 })).toBe(true);
|
|
60
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 4 })).toBe(false);
|
|
61
|
-
});
|
|
62
|
-
(0, vitest_1.it)("lt: numeric less than", () => {
|
|
63
|
-
const c = { attribute: "risk", operator: "lt", value: 3 };
|
|
64
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { risk: 1 })).toBe(true);
|
|
65
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { risk: 3 })).toBe(false);
|
|
66
|
-
});
|
|
67
|
-
(0, vitest_1.it)("lte: numeric less than or equal", () => {
|
|
68
|
-
const c = { attribute: "risk", operator: "lte", value: 3 };
|
|
69
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { risk: 3 })).toBe(true);
|
|
70
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { risk: 4 })).toBe(false);
|
|
71
|
-
});
|
|
72
|
-
(0, vitest_1.it)("returns false when attribute is missing from context", () => {
|
|
73
|
-
const c = { attribute: "missing", operator: "eq", value: "x" };
|
|
74
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { other: "y" })).toBe(false);
|
|
75
|
-
});
|
|
76
|
-
(0, vitest_1.it)("throws for unknown operator", () => {
|
|
77
|
-
const c = { attribute: "x", operator: "nope", value: "y" };
|
|
78
|
-
(0, vitest_1.expect)(() => (0, abac_service_js_1.evaluateCondition)(c, { x: "y" })).toThrow();
|
|
79
|
-
});
|
|
80
|
-
});
|
|
81
|
-
// ---------------------------------------------------------------------------
|
|
82
|
-
// evaluatePolicy
|
|
83
|
-
// ---------------------------------------------------------------------------
|
|
84
|
-
(0, vitest_1.describe)("evaluatePolicy", () => {
|
|
85
|
-
(0, vitest_1.it)("empty conditions → always matches", () => {
|
|
86
|
-
const policy = makePolicy({ conditions: [] });
|
|
87
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluatePolicy)(policy, {})).toBe(true);
|
|
88
|
-
});
|
|
89
|
-
(0, vitest_1.it)("all conditions true → matches", () => {
|
|
90
|
-
const policy = makePolicy({
|
|
91
|
-
conditions: [
|
|
92
|
-
{ attribute: "role", operator: "eq", value: "admin" },
|
|
93
|
-
{ attribute: "level", operator: "gte", value: 3 },
|
|
94
|
-
],
|
|
95
|
-
});
|
|
96
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluatePolicy)(policy, { role: "admin", level: 5 })).toBe(true);
|
|
97
|
-
});
|
|
98
|
-
(0, vitest_1.it)("one condition false → does not match (AND semantics)", () => {
|
|
99
|
-
const policy = makePolicy({
|
|
100
|
-
conditions: [
|
|
101
|
-
{ attribute: "role", operator: "eq", value: "admin" },
|
|
102
|
-
{ attribute: "level", operator: "gte", value: 10 },
|
|
103
|
-
],
|
|
104
|
-
});
|
|
105
|
-
(0, vitest_1.expect)((0, abac_service_js_1.evaluatePolicy)(policy, { role: "admin", level: 5 })).toBe(false);
|
|
106
|
-
});
|
|
107
|
-
});
|
|
108
|
-
//# sourceMappingURL=abac-service.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"abac-service.test.js","sourceRoot":"","sources":["../../../src/services/__tests__/abac-service.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,wDAAuE;AAGvE,SAAS,UAAU,CAAC,YAAiC,EAAE;IACrD,OAAO;QACL,EAAE,EAAE,OAAO;QACX,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,UAAU;QACzB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,WAAW;QACjB,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,IAAI,IAAI,EAAE;QACtB,UAAU,EAAE,IAAI,IAAI,EAAE;QACtB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAC9E,IAAA,iBAAQ,EAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC/E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAChF,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1F,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9F,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtF,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACzE,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC9E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAClE,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAC9E,IAAA,iBAAQ,EAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,IAAA,gCAAc,EAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,UAAU,EAAE;gBACV,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;gBACrD,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;aAClD;SACF,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,IAAA,gCAAc,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,UAAU,EAAE;gBACV,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;gBACrD,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;aACnD;SACF,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,IAAA,gCAAc,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"api-key-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/api-key-service.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,76 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
-
if (k2 === undefined) k2 = k;
|
|
4
|
-
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
-
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
-
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
-
}
|
|
8
|
-
Object.defineProperty(o, k2, desc);
|
|
9
|
-
}) : (function(o, m, k, k2) {
|
|
10
|
-
if (k2 === undefined) k2 = k;
|
|
11
|
-
o[k2] = m[k];
|
|
12
|
-
}));
|
|
13
|
-
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
-
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
-
}) : function(o, v) {
|
|
16
|
-
o["default"] = v;
|
|
17
|
-
});
|
|
18
|
-
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
-
var ownKeys = function(o) {
|
|
20
|
-
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
-
var ar = [];
|
|
22
|
-
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
-
return ar;
|
|
24
|
-
};
|
|
25
|
-
return ownKeys(o);
|
|
26
|
-
};
|
|
27
|
-
return function (mod) {
|
|
28
|
-
if (mod && mod.__esModule) return mod;
|
|
29
|
-
var result = {};
|
|
30
|
-
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
-
__setModuleDefault(result, mod);
|
|
32
|
-
return result;
|
|
33
|
-
};
|
|
34
|
-
})();
|
|
35
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
-
const vitest_1 = require("vitest");
|
|
37
|
-
// Mock pool-helpers before importing api-key-service
|
|
38
|
-
vitest_1.vi.mock("../../pool-helpers.js", () => ({
|
|
39
|
-
withClient: vitest_1.vi.fn(),
|
|
40
|
-
withTransaction: vitest_1.vi.fn(),
|
|
41
|
-
}));
|
|
42
|
-
const poolHelpers = __importStar(require("../../pool-helpers.js"));
|
|
43
|
-
const apiKeyService = __importStar(require("../api-key-service.js"));
|
|
44
|
-
const test_helpers_js_1 = require("./test-helpers.js");
|
|
45
|
-
/** Wire withClient to call the callback with a { query } client. */
|
|
46
|
-
function withMockQuery(mockQuery) {
|
|
47
|
-
vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
|
|
48
|
-
const client = { query: mockQuery };
|
|
49
|
-
return fn(client);
|
|
50
|
-
});
|
|
51
|
-
}
|
|
52
|
-
(0, vitest_1.beforeEach)(() => {
|
|
53
|
-
vitest_1.vi.clearAllMocks();
|
|
54
|
-
});
|
|
55
|
-
(0, vitest_1.describe)("getApiKey", () => {
|
|
56
|
-
(0, vitest_1.it)("selects a key by id and returns its owning tenant", async () => {
|
|
57
|
-
const pool = (0, test_helpers_js_1.makeMockPool)();
|
|
58
|
-
const row = { id: "key-1", tenant_id: "tenant-1", name: null, created_at: new Date(), last_used_at: null, revoked_at: null, expires_at: null };
|
|
59
|
-
const mockQuery = vitest_1.vi.fn().mockResolvedValueOnce({ rows: [row] });
|
|
60
|
-
withMockQuery(mockQuery);
|
|
61
|
-
const result = await apiKeyService.getApiKey(pool, "key-1");
|
|
62
|
-
(0, vitest_1.expect)(result).toEqual(row);
|
|
63
|
-
const [sql, params] = mockQuery.mock.calls[0];
|
|
64
|
-
(0, vitest_1.expect)(sql).toContain("FROM api_keys WHERE id = $1");
|
|
65
|
-
(0, vitest_1.expect)(sql).toContain("tenant_id");
|
|
66
|
-
(0, vitest_1.expect)(params).toEqual(["key-1"]);
|
|
67
|
-
});
|
|
68
|
-
(0, vitest_1.it)("returns null when no key has that id", async () => {
|
|
69
|
-
const pool = (0, test_helpers_js_1.makeMockPool)();
|
|
70
|
-
const mockQuery = vitest_1.vi.fn().mockResolvedValueOnce({ rows: [] });
|
|
71
|
-
withMockQuery(mockQuery);
|
|
72
|
-
const result = await apiKeyService.getApiKey(pool, "ghost");
|
|
73
|
-
(0, vitest_1.expect)(result).toBeNull();
|
|
74
|
-
});
|
|
75
|
-
});
|
|
76
|
-
//# sourceMappingURL=api-key-service.test.js.map
|