@tmlmobilidade/interfaces 20250828.1517.15 → 20250828.1816.30

package/dist/src/interfaces/auth/authorization.middleware.d.ts

@@ -0,0 +1,9 @@
+import { type FastifyRequest } from '@tmlmobilidade/connectors';
+import { type Permission, type User } from '@tmlmobilidade/types';
+declare module 'fastify' {
+    interface FastifyRequest {
+        me: null | User;
+        permissions: Permission<unknown>[];
+    }
+}
+export declare function authorizationMiddleware<T = unknown>(scope: string, action: string): (request: FastifyRequest) => Promise<void>;

package/dist/src/interfaces/auth/authorization.middleware.js

@@ -0,0 +1,18 @@
+/* * */
+import { authProvider } from '../../providers/auth/auth.js';
+import { HttpException, HttpStatus } from '@tmlmobilidade/lib';
+import { hasPermission } from '@tmlmobilidade/utils';
+export function authorizationMiddleware(scope, action) {
+    return async (request) => {
+        const token = request.cookies.session_token;
+        if (!token) {
+            throw new HttpException(HttpStatus.UNAUTHORIZED, 'Invalid authorization token');
+        }
+        const permissions = await authProvider.getPermissions(token);
+        if (!hasPermission(permissions, scope, action)) {
+            throw new HttpException(HttpStatus.FORBIDDEN, 'User does not have permissions');
+        }
+        const user = await authProvider.getUser(token);
+        request.me = user;
+    };
+}

package/dist/src/interfaces/auth/users.interface.d.ts

@@ -37,8 +37,8 @@ declare class UsersClass extends MongoCollectionClass<User, CreateUserDto, Updat
         updated_at: import("@tmlmobilidade/types").UnixTimestamp;
         phone?: string | null | undefined | undefined;
         email: string;
-        permissions: import("@tmlmobilidade/types").Permission<unknown>[];
         email_verified?: (null | import("@tmlmobilidade/types").UnixTimestamp) | undefined;
+        permissions: import("@tmlmobilidade/types").Permission<unknown>[];
         first_name: string;
         last_name: string;
         organization_ids: string[];
@@ -62,8 +62,8 @@ declare class UsersClass extends MongoCollectionClass<User, CreateUserDto, Updat
         updated_at: import("@tmlmobilidade/types").UnixTimestamp;
         phone?: string | null | undefined | undefined;
         email: string;
-        permissions: import("@tmlmobilidade/types").Permission<unknown>[];
         email_verified?: (null | import("@tmlmobilidade/types").UnixTimestamp) | undefined;
+        permissions: import("@tmlmobilidade/types").Permission<unknown>[];
         first_name: string;
         last_name: string;
         organization_ids: string[];

package/dist/src/interfaces/index.d.ts

@@ -1,6 +1,7 @@
 export * from './agencies/agencies.interface.js';
 export * from './alerts/alerts-realtime.interface.js';
 export * from './alerts/alerts.interface.js';
+export * from './auth/authorization.middleware.js';
 export * from './auth/roles.interface.js';
 export * from './auth/sessions.interface.js';
 export * from './auth/users.interface.js';

package/dist/src/interfaces/index.js

@@ -2,6 +2,7 @@
 export * from './agencies/agencies.interface.js';
 export * from './alerts/alerts-realtime.interface.js';
 export * from './alerts/alerts.interface.js';
+export * from './auth/authorization.middleware.js';
 export * from './auth/roles.interface.js';
 export * from './auth/sessions.interface.js';
 export * from './auth/users.interface.js';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tmlmobilidade/interfaces",
-	"version": "20250828.1517.15",
+	"version": "20250828.1816.30",
 	"author": "João de Vasconcelos & Jusi Monteiro",
 	"license": "AGPL-3.0-or-later",
 	"homepage": "https://github.com/tmlmobilidade/services#readme",