@venizia/ignis 0.0.7-2 → 0.0.7-21

package/dist/components/auth/authorize/common/constants.js

@@ -0,0 +1,130 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CasbinRuleVariants = exports.CasbinEnforcerModelDrivers = exports.CasbinEnforcerCachedDrivers = exports.AuthorizationEnforcerTypes = exports.AuthorizationRoles = exports.AuthorizationDecisions = exports.AuthorizationActions = exports.Authorization = void 0;
+const authorization_role_model_1 = require("../models/authorization-role.model");
+class Authorization {
+    static { this.RULES = 'authorization.rules'; }
+    static { this.SKIP_AUTHORIZATION = 'authorization.skip'; }
+    static { this.ENFORCER = 'authorization.enforcer'; }
+}
+exports.Authorization = Authorization;
+class AuthorizationActions {
+    static { this.CREATE = 'create'; }
+    static { this.READ = 'read'; }
+    static { this.UPDATE = 'update'; }
+    static { this.DELETE = 'delete'; }
+    static { this.EXECUTE = 'execute'; }
+    static { this.SCHEME_SET = new Set([
+        this.CREATE,
+        this.READ,
+        this.UPDATE,
+        this.DELETE,
+        this.EXECUTE,
+    ]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.AuthorizationActions = AuthorizationActions;
+class AuthorizationDecisions {
+    static { this.ALLOW = 'allow'; }
+    static { this.DENY = 'deny'; }
+    static { this.ABSTAIN = 'abstain'; }
+    static { this.SCHEME_SET = new Set([this.ALLOW, this.DENY, this.ABSTAIN]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+    static isAllow(input) {
+        if (typeof input === 'number') {
+            return input > 0;
+        }
+        return input.toLowerCase() === this.ALLOW;
+    }
+    static isDeny(input) {
+        if (typeof input === 'number') {
+            return input < 0;
+        }
+        return input.toLowerCase() === this.DENY;
+    }
+    static isAbstain(input) {
+        if (typeof input === 'number') {
+            return input === 0;
+        }
+        return input.toLowerCase() === this.ABSTAIN;
+    }
+}
+exports.AuthorizationDecisions = AuthorizationDecisions;
+class AuthorizationRoles {
+    static { this.SUPER_ADMIN = authorization_role_model_1.AuthorizationRole.build({
+        name: 'super-admin',
+        priority: 999,
+    }); }
+    static { this.ADMIN = authorization_role_model_1.AuthorizationRole.build({
+        name: 'admin',
+        priority: 900,
+    }); }
+    static { this.USER = authorization_role_model_1.AuthorizationRole.build({
+        name: 'user',
+        priority: 10,
+    }); }
+    static { this.GUEST = authorization_role_model_1.AuthorizationRole.build({
+        name: 'guest',
+        priority: 1,
+    }); }
+    static { this.UNKNOWN_USER = authorization_role_model_1.AuthorizationRole.build({
+        name: 'unknown-user',
+        priority: 0,
+    }); }
+    static { this.SCHEME_SET = new Set([
+        this.SUPER_ADMIN.identifier,
+        this.ADMIN.identifier,
+        this.USER.identifier,
+        this.GUEST.identifier,
+        this.UNKNOWN_USER.identifier,
+    ]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.AuthorizationRoles = AuthorizationRoles;
+class AuthorizationEnforcerTypes {
+    static { this.CASBIN = 'casbin'; }
+    static { this.CUSTOM = 'custom'; }
+    static { this.SCHEME_SET = new Set([this.CASBIN, this.CUSTOM]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.AuthorizationEnforcerTypes = AuthorizationEnforcerTypes;
+class CasbinEnforcerCachedDrivers {
+    static { this.IN_MEMORY = 'in-memory'; }
+    static { this.REDIS = 'redis'; }
+    static { this.SCHEME_SET = new Set([this.IN_MEMORY, this.REDIS]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.CasbinEnforcerCachedDrivers = CasbinEnforcerCachedDrivers;
+class CasbinEnforcerModelDrivers {
+    static { this.FILE = 'file'; }
+    static { this.TEXT = 'text'; }
+    static { this.SCHEME_SET = new Set([this.FILE, this.TEXT]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.CasbinEnforcerModelDrivers = CasbinEnforcerModelDrivers;
+class CasbinRuleVariants {
+    static { this.POLICY = 'policy'; }
+    static { this.GROUP = 'group'; }
+    /** Casbin line prefix for policy rules. */
+    static { this.P = 'p'; }
+    /** Casbin line prefix for grouping rules. */
+    static { this.G = 'g'; }
+    static { this.SCHEME_SET = new Set([this.POLICY, this.GROUP]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.CasbinRuleVariants = CasbinRuleVariants;
+//# sourceMappingURL=constants.js.map

package/dist/components/auth/authorize/common/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/constants.ts"],"names":[],"mappings":";;;AACA,iFAAuE;AAEvE,MAAa,aAAa;aACR,UAAK,GAAG,qBAAqB,CAAC;aAC9B,uBAAkB,GAAG,oBAAoB,CAAC;aAC1C,aAAQ,GAAG,wBAAwB,CAAC;;AAHtD,sCAIC;AAED,MAAa,oBAAoB;aACf,WAAM,GAAG,QAAQ,CAAC;aAClB,SAAI,GAAG,MAAM,CAAC;aACd,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAClB,YAAO,GAAG,SAAS,CAAC;aAEpB,eAAU,GAAG,IAAI,GAAG,CAAC;QACnC,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,OAAO;KACb,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAjBH,oDAkBC;AAGD,MAAa,sBAAsB;aACjB,UAAK,GAAG,OAAO,CAAC;aAChB,SAAI,GAAG,MAAM,CAAC;aACd,YAAO,GAAG,SAAS,CAAC;aAEpB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5E,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,KAAsB;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAAsB;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,KAAsB;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC;IAC9C,CAAC;;AA9BH,wDA+BC;AAGD,MAAa,kBAAkB;aACb,gBAAW,GAAG,4CAAiB,CAAC,KAAK,CAAC;QACpD,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;aACa,UAAK,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;aACa,SAAI,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC7C,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;aACa,UAAK,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;aACa,iBAAY,GAAG,4CAAiB,CAAC,KAAK,CAAC;QACrD,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;aAEa,eAAU,GAAG,IAAI,GAAG,CAAS;QAC3C,IAAI,CAAC,WAAW,CAAC,UAAU;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU;QACpB,IAAI,CAAC,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,YAAY,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAhCH,gDAiCC;AAED,MAAa,0BAA0B;aACrB,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAElB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,gEASC;AAID,MAAa,2BAA2B;aACtB,cAAS,GAAG,WAAW,CAAC;aACxB,UAAK,GAAG,OAAO,CAAC;aAEhB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,kEASC;AAID,MAAa,0BAA0B;aACrB,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,gEASC;AAID,MAAa,kBAAkB;aACb,WAAM,GAAG,QAAQ,CAAC;aAClB,UAAK,GAAG,OAAO,CAAC;IAEhC,2CAA2C;aAC3B,MAAC,GAAG,GAAG,CAAC;IACxB,6CAA6C;aAC7B,MAAC,GAAG,GAAG,CAAC;aAER,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEhE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAbH,gDAcC"}

package/dist/components/auth/authorize/common/index.d.ts

@@ -0,0 +1,4 @@
+export * from './constants';
+export * from './keys';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/components/auth/authorize/common/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./constants"), exports);
+__exportStar(require("./keys"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,yCAAuB;AACvB,0CAAwB"}

package/dist/components/auth/authorize/common/keys.d.ts

@@ -0,0 +1,6 @@
+export declare class AuthorizeBindingKeys {
+    static readonly OPTIONS = "@app/authorize/options";
+    static readonly ALWAYS_ALLOW_ROLES = "@app/authorize/always-allow-roles";
+    static enforcerOptions(name: string): string;
+}
+//# sourceMappingURL=keys.d.ts.map

package/dist/components/auth/authorize/common/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/keys.ts"],"names":[],"mappings":"AAAA,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,OAAO,4BAA4B;IACnD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uCAAuC;IAEzE,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAG7C"}

package/dist/components/auth/authorize/common/keys.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizeBindingKeys = void 0;
+class AuthorizeBindingKeys {
+    static { this.OPTIONS = '@app/authorize/options'; }
+    static { this.ALWAYS_ALLOW_ROLES = '@app/authorize/always-allow-roles'; }
+    static enforcerOptions(name) {
+        return `@app/authorize/enforcers/${name}/options`;
+    }
+}
+exports.AuthorizeBindingKeys = AuthorizeBindingKeys;
+//# sourceMappingURL=keys.js.map

package/dist/components/auth/authorize/common/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/keys.ts"],"names":[],"mappings":";;;AAAA,MAAa,oBAAoB;aACf,YAAO,GAAG,wBAAwB,CAAC;aACnC,uBAAkB,GAAG,mCAAmC,CAAC;IAEzE,MAAM,CAAC,eAAe,CAAC,IAAY;QACjC,OAAO,4BAA4B,IAAI,UAAU,CAAC;IACpD,CAAC;;AANH,oDAOC"}

package/dist/components/auth/authorize/common/types.d.ts

@@ -0,0 +1,107 @@
+import { TContext } from '../../../../base/controllers/common/types';
+import { type DefaultRedisHelper, type ValueOrPromise } from '@venizia/ignis-helpers';
+import { type Adapter } from 'casbin';
+import { Env, type MiddlewareHandler } from 'hono';
+import { IAuthUser } from '../../authenticate';
+import { CasbinEnforcerCachedDrivers, CasbinEnforcerModelDrivers, TAuthorizationDecision } from './constants';
+export interface IAuthorizationRole {
+    readonly name: string;
+    readonly priority: number;
+    readonly identifier: string;
+}
+/** Key-value conditions for attribute-based access control. Values compared with strict equality. */
+export type TAuthorizationConditions<KeyType extends string | symbol = string | symbol, ValueType = string | number | boolean | null> = Record<KeyType, ValueType>;
+export interface IAuthorizationComparable<TElement = string, TCompareResult = number> {
+    value: TElement;
+    compare(other: TElement): TCompareResult;
+    isEqual(other: TElement): boolean;
+}
+export interface IAuthorizationRequest<TAction = string, TResource = string> {
+    action: TAction;
+    resource: TResource;
+    conditions?: TAuthorizationConditions;
+}
+/** Authorization enforcer that builds rules and evaluates authorization requests. */
+export interface IAuthorizationEnforcer<E extends Env = Env, TAction = string, TResource = string, TRules = unknown, TBuildRulesReturn = ValueOrPromise<TRules>, TEvaluateReturn = ValueOrPromise<TAuthorizationDecision>> {
+    name: string;
+    configure(): ValueOrPromise<void>;
+    buildRules(opts: {
+        user: {
+            principalType: string;
+        } & IAuthUser;
+        context: TContext<E, string>;
+    }): TBuildRulesReturn;
+    evaluate(opts: {
+        rules: TRules;
+        request: IAuthorizationRequest<TAction, TResource>;
+        context: TContext<E, string>;
+    }): TEvaluateReturn;
+}
+export type TAuthorizationVoter<E extends Env = Env, TAction = string, TResource = string> = (opts: {
+    user: IAuthUser;
+    action: TAction;
+    resource: TResource;
+    context: TContext<E, string>;
+}) => ValueOrPromise<TAuthorizationDecision>;
+export interface IAuthorizationSpec<E extends Env = Env, TAction = string, TResource = string> {
+    action: TAction;
+    resource: TResource;
+    conditions?: TAuthorizationConditions;
+    allowedRoles?: string[];
+    voters?: TAuthorizationVoter<E, TAction, TResource>[];
+}
+export type TAuthorizeFn<E extends Env = Env, TAction = string, TResource = string> = (opts: {
+    spec: IAuthorizationSpec<E, TAction, TResource>;
+    enforcerName?: string;
+}) => MiddlewareHandler;
+export interface ICasbinEnforcerCachedMemory {
+    driver: typeof CasbinEnforcerCachedDrivers.IN_MEMORY;
+    options: {
+        expiresIn: number;
+    };
+}
+export interface ICasbinEnforcerCachedRedis {
+    driver: typeof CasbinEnforcerCachedDrivers.REDIS;
+    options: {
+        connection: DefaultRedisHelper;
+        expiresIn: number;
+        keyFn: (opts: {
+            user: {
+                principalType: string;
+            } & IAuthUser;
+        }) => ValueOrPromise<string>;
+    };
+}
+export interface ICasbinEnforcerOptions<E extends Env = Env, TAction = string, TResource = string, TAdapter = Adapter> {
+    model: {
+        driver: typeof CasbinEnforcerModelDrivers.FILE;
+        definition: string;
+    } | {
+        driver: typeof CasbinEnforcerModelDrivers.TEXT;
+        definition: string;
+    };
+    cached: {
+        use: false;
+    } | (ICasbinEnforcerCachedMemory & {
+        use: true;
+    }) | (ICasbinEnforcerCachedRedis & {
+        use: true;
+    });
+    adapter?: TAdapter;
+    normalizePayloadFn?(opts: {
+        user: IAuthUser;
+        action: TAction;
+        resource: TResource;
+        context: TContext<E, string>;
+    }): {
+        subject: string;
+        resource: string;
+        action: string;
+        domain?: string;
+    };
+}
+export interface IAuthorizeOptions {
+    defaultDecision: TAuthorizationDecision;
+    alwaysAllowRoles?: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/components/auth/authorize/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,aAAa,CAAC;AACrB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,qGAAqG;AACrG,MAAM,MAAM,wBAAwB,CAClC,OAAO,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EACjD,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,IAC1C,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAE/B,MAAM,WAAW,wBAAwB,CAAC,QAAQ,GAAG,MAAM,EAAE,cAAc,GAAG,MAAM;IAClF,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,cAAc,CAAC;IACzC,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB,CAAC,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM;IACzE,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,wBAAwB,CAAC;CACvC;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB,CACrC,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,EAClB,MAAM,GAAG,OAAO,EAChB,iBAAiB,GAAG,cAAc,CAAC,MAAM,CAAC,EAC1C,eAAe,GAAG,cAAc,CAAC,sBAAsB,CAAC;IAExD,IAAI,EAAE,MAAM,CAAC;IAEb,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAElC,UAAU,CAAC,IAAI,EAAE;QACf,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,iBAAiB,CAAC;IAEtB,QAAQ,CAAC,IAAI,EAAE;QACb,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,eAAe,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,CAC7B,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,IAChB,CAAC,IAAI,EAAE;IACT,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;CAC9B,KAAK,cAAc,CAAC,sBAAsB,CAAC,CAAC;AAE7C,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM;IAC3F,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;CACvD;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;IAC3F,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KAAK,iBAAiB,CAAC;AAExB,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,2BAA2B,CAAC,SAAS,CAAC;IACrD,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,OAAO,2BAA2B,CAAC,KAAK,CAAC;IACjD,OAAO,EAAE;QACP,UAAU,EAAE,kBAAkB,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE;gBAAE,aAAa,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAA;SAAE,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC;KAC1F,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB,CACrC,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,EAClB,QAAQ,GAAG,OAAO;IAElB,KAAK,EACD;QAAE,MAAM,EAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GACtE;QAAE,MAAM,EAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,MAAM,EACF;QAAE,GAAG,EAAE,KAAK,CAAA;KAAE,GACd,CAAC,2BAA2B,GAAG;QAAE,GAAG,EAAE,IAAI,CAAA;KAAE,CAAC,GAC7C,CAAC,0BAA0B,GAAG;QAAE,GAAG,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,kBAAkB,CAAC,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,SAAS,CAAC;QACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG;QACF,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,sBAAsB,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B"}

package/dist/components/auth/authorize/{middleware.js → common/types.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=middleware.js.map
+//# sourceMappingURL=types.js.map

package/dist/components/auth/authorize/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/types.ts"],"names":[],"mappings":""}

package/dist/components/auth/authorize/component.d.ts

@@ -0,0 +1,10 @@
+import { BaseApplication } from '../../../base/applications/base';
+import { BaseComponent } from '../../../base/components/base';
+import { ValueOrPromise } from '@venizia/ignis-helpers';
+export declare class AuthorizeComponent extends BaseComponent {
+    private application;
+    constructor(application: BaseApplication);
+    binding(): ValueOrPromise<void>;
+    private bindAlwaysAllowRoles;
+}
+//# sourceMappingURL=component.d.ts.map

package/dist/components/auth/authorize/component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authorize/component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD,OAAO,EAAY,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGlE,qBAAa,kBAAmB,SAAQ,aAAa;IAEG,OAAO,CAAC,WAAW;gBAAX,WAAW,EAAE,eAAe;IAQjF,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;IAkBxC,OAAO,CAAC,oBAAoB;CAS7B"}

package/dist/components/auth/authorize/component.js

@@ -0,0 +1,58 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AuthorizeComponent_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizeComponent = void 0;
+const base_1 = require("../../../base/applications/base");
+const base_2 = require("../../../base/components/base");
+const injectors_1 = require("../../../base/metadata/injectors");
+const bindings_1 = require("../../../common/bindings");
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const common_1 = require("./common");
+let AuthorizeComponent = AuthorizeComponent_1 = class AuthorizeComponent extends base_2.BaseComponent {
+    constructor(application) {
+        super({
+            scope: AuthorizeComponent_1.name,
+            initDefault: { enable: true, container: application },
+        });
+        this.application = application;
+    }
+    binding() {
+        const options = this.application.get({
+            key: common_1.AuthorizeBindingKeys.OPTIONS,
+            isOptional: true,
+        });
+        if (!options) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[AuthorizeComponent] No authorize options found. Bind options to AuthorizeBindingKeys.OPTIONS before registering the component.',
+            });
+        }
+        this.bindAlwaysAllowRoles({ options });
+        this.logger.for(this.binding.name).info('Authorization configured');
+    }
+    bindAlwaysAllowRoles(opts) {
+        if (!opts.options.alwaysAllowRoles?.length) {
+            return;
+        }
+        this.application
+            .bind({ key: common_1.AuthorizeBindingKeys.ALWAYS_ALLOW_ROLES })
+            .toValue(opts.options.alwaysAllowRoles);
+    }
+};
+exports.AuthorizeComponent = AuthorizeComponent;
+exports.AuthorizeComponent = AuthorizeComponent = AuthorizeComponent_1 = __decorate([
+    __param(0, (0, injectors_1.inject)({ key: bindings_1.CoreBindings.APPLICATION_INSTANCE })),
+    __metadata("design:paramtypes", [base_1.BaseApplication])
+], AuthorizeComponent);
+//# sourceMappingURL=component.js.map

package/dist/components/auth/authorize/component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../src/components/auth/authorize/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAA2D;AAC3D,iDAAuD;AACvD,yDAAmD;AACnD,gDAAiD;AACjD,0DAAkE;AAClE,qCAAmE;AAEnE,IAAa,kBAAkB,0BAA/B,MAAa,kBAAmB,SAAQ,oBAAa;IACnD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,oBAAkB,CAAC,IAAI;YAC9B,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;SACtD,CAAC,CAAC;QALyD,gBAAW,GAAX,WAAW,CAAiB;IAM1F,CAAC;IAEQ,OAAO;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAoB;YACtD,GAAG,EAAE,6BAAoB,CAAC,OAAO;YACjC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,iIAAiI;aACpI,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACtE,CAAC;IAEO,oBAAoB,CAAC,IAAoC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAAW,EAAE,GAAG,EAAE,6BAAoB,CAAC,kBAAkB,EAAE,CAAC;aAChE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;CACF,CAAA;AArCY,gDAAkB;6BAAlB,kBAAkB;IAE1B,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,uBAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;qCAAsB,sBAAe;GAF/E,kBAAkB,CAqC9B"}

package/dist/components/auth/authorize/enforcers/casbin.enforcer.d.ts

@@ -0,0 +1,56 @@
+import { TContext } from '../../../../base/controllers/common/types';
+import { BaseHelper } from '@venizia/ignis-helpers';
+import type { CachedEnforcer as CasbinCachedEnforcerType, Enforcer as CasbinEnforcerType } from 'casbin';
+import { Env } from 'hono';
+import { IAuthUser } from '../../authenticate';
+import { IAuthorizationEnforcer, ICasbinEnforcerCachedRedis, ICasbinEnforcerOptions, type IAuthorizationComparable, type IAuthorizationRequest, type TAuthorizationDecision } from '../common';
+export declare class CasbinAuthorizationEnforcer<E extends Env = Env, TAction extends string | IAuthorizationComparable = string, TResource extends string | IAuthorizationComparable = string> extends BaseHelper implements IAuthorizationEnforcer<E, TAction, TResource, IAuthUser> {
+    private options;
+    name: string;
+    private readonly MIN_EXPIRES_IN;
+    private enforcer;
+    private inMemoryInvalidationTimer;
+    constructor(options: ICasbinEnforcerOptions<E, TAction, TResource>);
+    configure(): Promise<void>;
+    destroy(): void;
+    buildRules(opts: {
+        user: {
+            principalType: string;
+        } & IAuthUser;
+        context: TContext<E, string>;
+    }): Promise<IAuthUser>;
+    evaluate(opts: {
+        rules: IAuthUser;
+        request: IAuthorizationRequest<TAction, TResource>;
+        context: TContext<E, string>;
+    }): Promise<TAuthorizationDecision>;
+    protected resolveCasbinEnforcer(opts: {
+        casbin: typeof import('casbin');
+        model: import('casbin').Model;
+        adapter?: unknown;
+        cached: ICasbinEnforcerOptions['cached'];
+    }): Promise<CasbinEnforcerType | CasbinCachedEnforcerType>;
+    protected resolveModel(opts: {
+        casbin: typeof import('casbin');
+        model: ICasbinEnforcerOptions['model'];
+    }): import("casbin").Model;
+    protected validateExpiresIn(opts: {
+        expiresIn: number;
+    }): void;
+    protected loadPoliciesFromAdapter(opts: {
+        user: {
+            principalType: string;
+        } & IAuthUser;
+    }): Promise<void>;
+    protected loadPoliciesWithRedisCache(opts: {
+        user: {
+            principalType: string;
+        } & IAuthUser;
+        cached: ICasbinEnforcerCachedRedis;
+    }): Promise<void>;
+    protected extractPolicyLines(): Promise<string[]>;
+    protected loadPolicyLinesIntoModel(opts: {
+        lines: string[];
+    }): Promise<void>;
+}
+//# sourceMappingURL=casbin.enforcer.d.ts.map

package/dist/components/auth/authorize/enforcers/casbin.enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"casbin.enforcer.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/casbin.enforcer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,UAAU,EAA6B,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EACV,cAAc,IAAI,wBAAwB,EAC1C,QAAQ,IAAI,kBAAkB,EAC/B,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAOL,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,WAAW,CAAC;AAInB,qBAAa,2BAA2B,CACtC,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,SAAS,MAAM,GAAG,wBAAwB,GAAG,MAAM,EAC1D,SAAS,SAAS,MAAM,GAAG,wBAAwB,GAAG,MAAM,CAE5D,SAAQ,UACR,YAAW,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;IAUjE,OAAO,CAAC,OAAO;IARjB,IAAI,SAAoC;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEzC,OAAO,CAAC,QAAQ,CAAkE;IAClF,OAAO,CAAC,yBAAyB,CAAmC;gBAI1D,OAAO,EAAE,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC;IAO1D,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAoChC,OAAO;IAWD,UAAU,CAAC,IAAI,EAAE;QACrB,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,OAAO,CAAC,SAAS,CAAC;IAwChB,QAAQ,CAAC,IAAI,EAAE;QACnB,KAAK,EAAE,SAAS,CAAC;QACjB,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,OAAO,CAAC,sBAAsB,CAAC;cAoDnB,qBAAqB,CAAC,IAAI,EAAE;QAC1C,MAAM,EAAE,cAAc,QAAQ,CAAC,CAAC;QAChC,KAAK,EAAE,OAAO,QAAQ,EAAE,KAAK,CAAC;QAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;KAC1C,GAAG,OAAO,CAAC,kBAAkB,GAAG,wBAAwB,CAAC;IAmC1D,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,cAAc,QAAQ,CAAC,CAAC;QAChC,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;KACxC;IAkBD,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;cAY9C,uBAAuB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE;cAc7E,0BAA0B,CAAC,IAAI,EAAE;QAC/C,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAC5C,MAAM,EAAE,0BAA0B,CAAC;KACpC;cAmCe,kBAAkB;cAgBlB,wBAAwB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAkBnF"}