@thzero/library_server 0.17.9 → 0.17.11

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@thzero/library_server",
   "type": "module",
-  "version": "0.17.9",
+  "version": "0.17.11",
   "version_major": 0,
   "version_minor": 17,
-  "version_patch": 9,
-  "version_date": "03/22/2023",
+  "version_patch": 11,
+  "version_date": "04/15/2023",
   "description": "An opinionated library of common functionality to bootstrap an API using either Fastify or Koa as the web server.",
   "author": "thZero",
   "license": "MIT",

package/service/baseSecurity.js

@@ -18,9 +18,134 @@ class BaseSecurityService extends Service {
 
 		this._enforcer = new rbac(model)
 	}
+	
+	async authorizationCheckClaims(correlationId, claims, roles, logical) {
+		if (!claims)
+			return false;
+		if (!(claims && Array.isArray(claims)))
+			return false;
+		if (!roles)
+			return true;
+
+		if (String.isNullOrEmpty(logical) || (logical !== BaseSecurityService.logicalAnd) || (logical !== BaseSecurityService.logicalOr))
+			logical = BaseSecurityService.logicalOr;
+
+		let success = (logical === BaseSecurityService.logicalOr ? false : true);
+
+		let result;
+		let roleAct;
+		let roleObj;
+		let roleParts;
+		for (const claim of claims) {
+			this._logger.debug('BaseSecurityService', 'authorizationCheckClaims', 'authorization.claim', claim, correlationId);
+
+			for (const role of roles) {
+				this._logger.debug('BaseSecurityService', 'authorizationCheckClaims', 'role', role, correlationId);
+
+				roleParts = role.split('.');
+				if (roleParts && roleParts.length < 1)
+					success = false;
+
+				roleObj = roleParts[0];
+				roleAct = roleParts.length >= 2 ? roleParts[1] : null
+
+				result = await this.validate(claim, null, roleObj, roleAct);
+				this._logger.debug('BaseSecurityService', 'authorizationCheckClaims', 'result', result, correlationId);
+				if (logical === BaseSecurityService.logicalOr)
+					success = success || result;
+				else
+					success = success && result;
+			}
+		}
+
+		return success;
+	}
+
+	async authorizationCheckRoles(correlationId, user, roles, logical) {
+		if (!user)
+			return false;
+		if (!roles)
+			return true;
+
+		this._logger.debug('BaseSecurityService', 'authorizationCheckRoles', 'user', user, correlationId);
+		if (!(user && user.roles && Array.isArray(user.roles)))
+			return false;
+
+		this._logger.debug('BaseSecurityService', 'authorizationCheckRoles', 'logical', logical, correlationId);
+
+		if (String.isNullOrEmpty(logical) || (logical !== BaseSecurityService.logicalAnd) || (logical !== BaseSecurityService.logicalOr))
+			logical = BaseSecurityService.logicalOr;
+
+		let success = (logical === BaseSecurityService.logicalOr ? false : true);
+
+		let result;
+		let roleAct;
+		let roleObj;
+		let roleParts;
+		for (const userRole of user.roles) {
+			this._logger.debug('BaseSecurityService', 'authorizationCheckRoles', 'userRole', userRole, correlationId);
+
+			for (const role of roles) {
+				this._logger.debug('BaseSecurityService', 'authorizationCheckRoles', 'role', role, correlationId);
+
+				roleParts = role.split('.');
+				if (roleParts && roleParts.length < 1)
+					success = false;
+
+				roleObj = roleParts[0];
+				roleAct = roleParts.length >= 2 ? roleParts[1] : null
+
+				result = await this.validate(userRole, null, roleObj, roleAct);
+				this._logger.debug('BaseSecurityService', 'authorizationCheckRoles', 'result', result, correlationId);
+				if (logical === BaseSecurityService.logicalOr) {
+					if (result)
+						return result;
+
+					success = false;
+				}
+				else
+					success = success && result;
+			}
+		}
+
+		return success;
+	}
+
+	initializeRoles(correlationId, requestRoles, roles) {
+		if (Array.isArray(roles)) {
+			this._logger.debug('BaseSecurityService', 'initalizeRoles', 'roles1a', roles, correlationId);
+			requestRoles = roles;
+			return requestRoles;
+		}
+		
+		if ((typeof(roles) === 'string') || (roles instanceof String)) {
+			// this._logger.debug('BaseSecurityService', 'initalizeRoles', 'roles1b', roles, correlationId);
+			requestRoles = roles.split(',');
+			requestRoles.map(item => item ? item.trim() : item);
+			return requestRoles;
+		}
+	}
+
+	initializeOptionsLogical(correlationId, options) {
+		if (!options)
+			return logicalOr;
+
+		let logical = options.logical;
+		if (String.isNullOrEmpty(logical) || (logical !== logicalAnd) || (logical !== logicalOr))
+			logical = logicalOr;
+
+		return logical;
+	}
+
+	initializeOptionsRoles(correlationId, options) {
+		let roles = [];
+		if (options.roles && Array.isArray(options.roles) && (options.roles.length > 0))
+			roles = options.roles;
+		return roles;
+	}
 
 	// eslint-disable-next-line
-	async validate(sub, dom, obj, act) {
+	async validate(correlationId, sub, dom, obj, act) {
 		if (!this._enforcer)
 			throw Error('No enforcer found');
 
@@ -39,6 +164,9 @@ class BaseSecurityService extends Service {
 	_initModel() {
 		return null;
 	}
+
+	static logicalAnd = 'and';
+	static logicalOr = 'or';
 }
 
 export default BaseSecurityService;