@venizia/ignis 0.0.7-8 → 0.0.7

package/dist/components/auth/authorize/common/types.d.ts

@@ -1,127 +1,107 @@
 import { TContext } from '../../../../base/controllers/common/types';
-import { TClass, ValueOrPromise } from '@venizia/ignis-helpers';
+import { type DefaultRedisHelper, type ValueOrPromise } from '@venizia/ignis-helpers';
+import { type Adapter } from 'casbin';
 import { Env, type MiddlewareHandler } from 'hono';
 import { IAuthUser } from '../../authenticate';
-import { Authorization, TAuthorizationDecision, TPermissionEffect } from './constants';
+import { CasbinEnforcerCachedDrivers, CasbinEnforcerModelDrivers, TAuthorizationDecision } from './constants';
 export interface IAuthorizationRole {
     readonly name: string;
     readonly priority: number;
     readonly identifier: string;
 }
-/**
- * Key-value conditions for attribute-based access control.
- * Values are compared with strict equality (`===`).
- *
- * @typeParam T - Value type for condition entries. Defaults to primitive types.
- *
- * @example
- * ```typescript
- * // Default — accepts primitives
- * conditions: { ownerId: currentUser.userId, level: 3 }
- *
- * // Narrowed — string-only conditions
- * const filter: TAuthorizationConditions<string> = { department: 'engineering' }
- * ```
- */
-export type TAuthorizationConditions<T = string | number | boolean | null> = Record<string, T>;
-export interface IPermissionRule {
-    action: string;
-    resource: string;
-    effect: TPermissionEffect;
-    conditions?: TAuthorizationConditions;
+/** Key-value conditions for attribute-based access control. Values compared with strict equality. */
+export type TAuthorizationConditions<KeyType extends string | symbol = string | symbol, ValueType = string | number | boolean | null> = Record<KeyType, ValueType>;
+export interface IAuthorizationComparable<TElement = string, TCompareResult = number> {
+    value: TElement;
+    compare(other: TElement): TCompareResult;
+    isEqual(other: TElement): boolean;
 }
-export interface IAbilityBuilder {
-    allow(opts: {
-        action: string;
-        resource: string;
-        conditions?: TAuthorizationConditions;
-    }): void;
-    deny(opts: {
-        action: string;
-        resource: string;
-        conditions?: TAuthorizationConditions;
-    }): void;
-    build(): IPermissionRule[];
+export interface IAuthorizationRequest<TAction = string, TResource = string> {
+    action: TAction;
+    resource: TResource;
+    conditions?: TAuthorizationConditions;
 }
-/**
- * Authorization enforcer that builds abilities and evaluates permissions.
- *
- * @typeParam TAbilities - The abilities type produced by `buildAbilities` and consumed by `evaluate`.
- *   - `DefaultAuthorizationEnforcer` → `IPermissionRule[]`
- *   - `CasbinAuthorizationEnforcer` → `IAuthUser`
- *
- * The default (`unknown`) allows the registry and options to work polymorphically.
- * Concrete enforcers should specify their abilities type for full type safety.
- *
- * @example
- * ```typescript
- * class MyEnforcer implements IAuthorizationEnforcer<IPermissionRule[]> { ... }
- * ```
- */
-export interface IAuthorizationEnforcer<TAbilities = unknown> {
+/** Authorization enforcer that builds rules and evaluates authorization requests. */
+export interface IAuthorizationEnforcer<E extends Env = Env, TAction = string, TResource = string, TRules = unknown, TBuildRulesReturn = ValueOrPromise<TRules>, TEvaluateReturn = ValueOrPromise<TAuthorizationDecision>> {
     name: string;
-    configure?(): ValueOrPromise<void>;
-    buildAbilities(opts: {
-        user: IAuthUser;
-        context: TContext;
-    }): ValueOrPromise<TAbilities>;
+    configure(): ValueOrPromise<void>;
+    buildRules(opts: {
+        user: {
+            principalType: string;
+        } & IAuthUser;
+        context: TContext<E, string>;
+    }): TBuildRulesReturn;
     evaluate(opts: {
-        abilities: TAbilities;
-        action: string;
-        resource: string;
-        conditions?: TAuthorizationConditions;
-    }): boolean;
+        rules: TRules;
+        request: IAuthorizationRequest<TAction, TResource>;
+        context: TContext<E, string>;
+    }): TEvaluateReturn;
 }
-export type TAuthorizationVoter<E extends Env = Env> = (opts: {
+export type TAuthorizationVoter<E extends Env = Env, TAction = string, TResource = string> = (opts: {
     user: IAuthUser;
-    action: string;
-    resource: string;
+    action: TAction;
+    resource: TResource;
     context: TContext<E, string>;
 }) => ValueOrPromise<TAuthorizationDecision>;
-export interface IAuthorizationSpec<E extends Env = Env> {
-    action: string;
-    resource: string;
+export interface IAuthorizationSpec<E extends Env = Env, TAction = string, TResource = string> {
+    action: TAction;
+    resource: TResource;
     conditions?: TAuthorizationConditions;
     allowedRoles?: string[];
-    voters?: TAuthorizationVoter<E>[];
+    voters?: TAuthorizationVoter<E, TAction, TResource>[];
 }
-export type TAuthorizeFn = (opts: {
-    spec: IAuthorizationSpec;
+export type TAuthorizeFn<E extends Env = Env, TAction = string, TResource = string> = (opts: {
+    spec: IAuthorizationSpec<E, TAction, TResource>;
     enforcerName?: string;
 }) => MiddlewareHandler;
-export interface IAuthorizeOptions {
-    enforcer: TClass<IAuthorizationEnforcer>;
-    defaultDecision?: TAuthorizationDecision;
-    alwaysAllowRoles?: string[];
-    defineAbilitiesFor?: (opts: {
-        user: IAuthUser;
-        builder: IAbilityBuilder;
-    }) => void;
-    loadPermissions?: (opts: {
-        user: IAuthUser;
-        context: TContext;
-    }) => ValueOrPromise<IPermissionRule[]>;
-    normalizePayloadFn?: (opts: {
+export interface ICasbinEnforcerCachedMemory {
+    driver: typeof CasbinEnforcerCachedDrivers.IN_MEMORY;
+    options: {
+        expiresIn: number;
+    };
+}
+export interface ICasbinEnforcerCachedRedis {
+    driver: typeof CasbinEnforcerCachedDrivers.REDIS;
+    options: {
+        connection: DefaultRedisHelper;
+        expiresIn: number;
+        keyFn: (opts: {
+            user: {
+                principalType: string;
+            } & IAuthUser;
+        }) => ValueOrPromise<string>;
+    };
+}
+export interface ICasbinEnforcerOptions<E extends Env = Env, TAction = string, TResource = string, TAdapter = Adapter> {
+    model: {
+        driver: typeof CasbinEnforcerModelDrivers.FILE;
+        definition: string;
+    } | {
+        driver: typeof CasbinEnforcerModelDrivers.TEXT;
+        definition: string;
+    };
+    cached: {
+        use: false;
+    } | (ICasbinEnforcerCachedMemory & {
+        use: true;
+    }) | (ICasbinEnforcerCachedRedis & {
+        use: true;
+    });
+    adapter?: TAdapter;
+    normalizePayloadFn?(opts: {
         user: IAuthUser;
-        action: string;
-        resource: string;
-    }) => {
+        action: TAction;
+        resource: TResource;
+        context: TContext<E, string>;
+    }): {
         subject: string;
         resource: string;
         action: string;
-    };
-    casbinOptions?: {
-        model: string;
-        /** Casbin adapter instance (e.g. `FileAdapter`, `SequelizeAdapter`). Requires `casbin` peer dep. */
-        adapter?: unknown;
-        useFilteredPolicy?: boolean;
+        domain?: string;
     };
 }
-declare module 'hono' {
-    interface ContextVariableMap {
-        /** Cached abilities built by the enforcer's `buildAbilities()`. Type depends on enforcer. */
-        [Authorization.ABILITIES]: unknown;
-        [Authorization.SKIP_AUTHORIZATION]: boolean;
-    }
+export interface IAuthorizeOptions {
+    defaultDecision: TAuthorizationDecision;
+    alwaysAllowRoles?: string[];
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/components/auth/authorize/common/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAMvF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,wBAAwB,CAAC,CAAC,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAM/F,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,CAAC,EAAE,wBAAwB,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,wBAAwB,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/F,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,wBAAwB,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9F,KAAK,IAAI,eAAe,EAAE,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,sBAAsB,CAAC,UAAU,GAAG,OAAO;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,cAAc,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAA;KAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzF,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,UAAU,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,wBAAwB,CAAC;KACvC,GAAG,OAAO,CAAC;CACb;AAMD,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;IAC5D,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;CAC9B,KAAK,cAAc,CAAC,sBAAsB,CAAC,CAAC;AAE7C,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;CACnC;AAMD,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE;IAChC,IAAI,EAAE,kBAAkB,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KAAK,iBAAiB,CAAC;AAMxB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACzC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,KAAK,IAAI,CAAC;IAEnF,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QACvB,IAAI,EAAE,SAAS,CAAC;QAChB,OAAO,EAAE,QAAQ,CAAC;KACnB,KAAK,cAAc,CAAC,eAAe,EAAE,CAAC,CAAC;IAExC,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK;QACpF,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAEF,aAAa,CAAC,EAAE;QACd,KAAK,EAAE,MAAM,CAAC;QACd,oGAAoG;QACpG,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC;CACH;AAMD,OAAO,QAAQ,MAAM,CAAC;IAEpB,UAAU,kBAAkB;QAC1B,6FAA6F;QAC7F,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QACnC,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC7C;CACF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,aAAa,CAAC;AACrB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,qGAAqG;AACrG,MAAM,MAAM,wBAAwB,CAClC,OAAO,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EACjD,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,IAC1C,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAE/B,MAAM,WAAW,wBAAwB,CAAC,QAAQ,GAAG,MAAM,EAAE,cAAc,GAAG,MAAM;IAClF,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,cAAc,CAAC;IACzC,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB,CAAC,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM;IACzE,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,wBAAwB,CAAC;CACvC;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB,CACrC,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,EAClB,MAAM,GAAG,OAAO,EAChB,iBAAiB,GAAG,cAAc,CAAC,MAAM,CAAC,EAC1C,eAAe,GAAG,cAAc,CAAC,sBAAsB,CAAC;IAExD,IAAI,EAAE,MAAM,CAAC;IAEb,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAElC,UAAU,CAAC,IAAI,EAAE;QACf,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,iBAAiB,CAAC;IAEtB,QAAQ,CAAC,IAAI,EAAE;QACb,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,eAAe,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,CAC7B,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,IAChB,CAAC,IAAI,EAAE;IACT,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;CAC9B,KAAK,cAAc,CAAC,sBAAsB,CAAC,CAAC;AAE7C,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM;IAC3F,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;CACvD;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;IAC3F,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KAAK,iBAAiB,CAAC;AAExB,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,2BAA2B,CAAC,SAAS,CAAC;IACrD,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,OAAO,2BAA2B,CAAC,KAAK,CAAC;IACjD,OAAO,EAAE;QACP,UAAU,EAAE,kBAAkB,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE;gBAAE,aAAa,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAA;SAAE,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC;KAC1F,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB,CACrC,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,EAClB,QAAQ,GAAG,OAAO;IAElB,KAAK,EACD;QAAE,MAAM,EAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GACtE;QAAE,MAAM,EAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,MAAM,EACF;QAAE,GAAG,EAAE,KAAK,CAAA;KAAE,GACd,CAAC,2BAA2B,GAAG;QAAE,GAAG,EAAE,IAAI,CAAA;KAAE,CAAC,GAC7C,CAAC,0BAA0B,GAAG;QAAE,GAAG,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,kBAAkB,CAAC,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,SAAS,CAAC;QACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG;QACF,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,sBAAsB,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B"}

package/dist/components/auth/authorize/component.d.ts

@@ -5,5 +5,6 @@ export declare class AuthorizeComponent extends BaseComponent {
     private application;
     constructor(application: BaseApplication);
     binding(): ValueOrPromise<void>;
+    private bindAlwaysAllowRoles;
 }
 //# sourceMappingURL=component.d.ts.map

package/dist/components/auth/authorize/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authorize/component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD,OAAO,EAAY,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAIlE,qBAAa,kBAAmB,SAAQ,aAAa;IAEG,OAAO,CAAC,WAAW;gBAAX,WAAW,EAAE,eAAe;IASjF,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;CAgDzC"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authorize/component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD,OAAO,EAAY,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGlE,qBAAa,kBAAmB,SAAQ,aAAa;IAEG,OAAO,CAAC,WAAW;gBAAX,WAAW,EAAE,eAAe;IAQjF,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;IAkBxC,OAAO,CAAC,oBAAoB;CAS7B"}

package/dist/components/auth/authorize/component.js

@@ -20,7 +20,6 @@ const injectors_1 = require("../../../base/metadata/injectors");
 const bindings_1 = require("../../../common/bindings");
 const ignis_helpers_1 = require("@venizia/ignis-helpers");
 const common_1 = require("./common");
-const enforcers_1 = require("./enforcers");
 let AuthorizeComponent = AuthorizeComponent_1 = class AuthorizeComponent extends base_2.BaseComponent {
     constructor(application) {
         super({
@@ -29,47 +28,26 @@ let AuthorizeComponent = AuthorizeComponent_1 = class AuthorizeComponent extends
         });
         this.application = application;
     }
-    // ---------------------------------------------------------------------------
     binding() {
-        const authorizeOptions = this.application.get({
+        const options = this.application.get({
             key: common_1.AuthorizeBindingKeys.OPTIONS,
             isOptional: true,
         });
-        if (!authorizeOptions) {
-            this.logger
-                .for(this.binding.name)
-                .debug('No authorize options found, skipping authorization setup');
-            return;
-        }
-        if (!authorizeOptions.enforcer) {
+        if (!options) {
             throw (0, ignis_helpers_1.getError)({
-                message: '[AuthorizeComponent] enforcer class is required in authorize options',
+                message: '[AuthorizeComponent] No authorize options found. Bind options to AuthorizeBindingKeys.OPTIONS before registering the component.',
             });
         }
-        // Register the enforcer with the registry
-        const enforcerInstance = new authorizeOptions.enforcer(authorizeOptions);
-        const enforcerName = enforcerInstance.name;
-        enforcers_1.AuthorizationEnforcerRegistry.getInstance().register({
-            container: this.application,
-            enforcers: [{ enforcer: authorizeOptions.enforcer, name: enforcerName }],
-        });
-        // Bind alwaysAllowRoles if provided
-        if (authorizeOptions.alwaysAllowRoles?.length) {
-            this.application
-                .bind({ key: common_1.AuthorizeBindingKeys.ALWAYS_ALLOW_ROLES })
-                .toValue(authorizeOptions.alwaysAllowRoles);
-        }
-        // Bind normalizePayloadFn if provided
-        if (authorizeOptions.normalizePayloadFn) {
-            this.application
-                .bind({
-                key: common_1.AuthorizeBindingKeys.NORMALIZE_PAYLOAD_FN,
-            })
-                .toValue(authorizeOptions.normalizePayloadFn);
+        this.bindAlwaysAllowRoles({ options });
+        this.logger.for(this.binding.name).info('Authorization configured');
+    }
+    bindAlwaysAllowRoles(opts) {
+        if (!opts.options.alwaysAllowRoles?.length) {
+            return;
         }
-        this.logger
-            .for(this.binding.name)
-            .info('Authorization configured with enforcer: %s', enforcerName);
+        this.application
+            .bind({ key: common_1.AuthorizeBindingKeys.ALWAYS_ALLOW_ROLES })
+            .toValue(opts.options.alwaysAllowRoles);
     }
 };
 exports.AuthorizeComponent = AuthorizeComponent;

package/dist/components/auth/authorize/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../src/components/auth/authorize/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAA2D;AAC3D,iDAAuD;AACvD,yDAAmD;AACnD,gDAAiD;AACjD,0DAAkE;AAClE,qCAAmE;AACnE,2CAA4D;AAE5D,IAAa,kBAAkB,0BAA/B,MAAa,kBAAmB,SAAQ,oBAAa;IACnD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,oBAAkB,CAAC,IAAI;YAC9B,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;SACtD,CAAC,CAAC;QALyD,gBAAW,GAAX,WAAW,CAAiB;IAM1F,CAAC;IAED,8EAA8E;IACrE,OAAO;QACd,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAoB;YAC/D,GAAG,EAAE,6BAAoB,CAAC,OAAO;YACjC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;iBACtB,KAAK,CAAC,0DAA0D,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,sEAAsE;aAChF,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC;QAE3C,yCAA6B,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;YACnD,SAAS,EAAE,IAAI,CAAC,WAAW;YAC3B,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;SACzE,CAAC,CAAC;QAEH,oCAAoC;QACpC,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;YAC9C,IAAI,CAAC,WAAW;iBACb,IAAI,CAAW,EAAE,GAAG,EAAE,6BAAoB,CAAC,kBAAkB,EAAE,CAAC;iBAChE,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAChD,CAAC;QAED,sCAAsC;QACtC,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;YACxC,IAAI,CAAC,WAAW;iBACb,IAAI,CAA6C;gBAChD,GAAG,EAAE,6BAAoB,CAAC,oBAAoB;aAC/C,CAAC;iBACD,OAAO,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;aACtB,IAAI,CAAC,4CAA4C,EAAE,YAAY,CAAC,CAAC;IACtE,CAAC;CACF,CAAA;AA3DY,gDAAkB;6BAAlB,kBAAkB;IAE1B,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,uBAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;qCAAsB,sBAAe;GAF/E,kBAAkB,CA2D9B"}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../src/components/auth/authorize/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAA2D;AAC3D,iDAAuD;AACvD,yDAAmD;AACnD,gDAAiD;AACjD,0DAAkE;AAClE,qCAAmE;AAEnE,IAAa,kBAAkB,0BAA/B,MAAa,kBAAmB,SAAQ,oBAAa;IACnD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,oBAAkB,CAAC,IAAI;YAC9B,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;SACtD,CAAC,CAAC;QALyD,gBAAW,GAAX,WAAW,CAAiB;IAM1F,CAAC;IAEQ,OAAO;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAoB;YACtD,GAAG,EAAE,6BAAoB,CAAC,OAAO;YACjC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,iIAAiI;aACpI,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACtE,CAAC;IAEO,oBAAoB,CAAC,IAAoC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAAW,EAAE,GAAG,EAAE,6BAAoB,CAAC,kBAAkB,EAAE,CAAC;aAChE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;CACF,CAAA;AArCY,gDAAkB;6BAAlB,kBAAkB;IAE1B,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,uBAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;qCAAsB,sBAAe;GAF/E,kBAAkB,CAqC9B"}

package/dist/components/auth/authorize/enforcers/casbin.enforcer.d.ts

@@ -1,22 +1,56 @@
 import { TContext } from '../../../../base/controllers/common/types';
 import { BaseHelper } from '@venizia/ignis-helpers';
+import type { CachedEnforcer as CasbinCachedEnforcerType, Enforcer as CasbinEnforcerType } from 'casbin';
+import { Env } from 'hono';
 import { IAuthUser } from '../../authenticate';
-import { IAuthorizationEnforcer, IAuthorizeOptions, TAuthorizationConditions } from '../common';
-export declare class CasbinAuthorizationEnforcer extends BaseHelper implements IAuthorizationEnforcer<IAuthUser> {
+import { IAuthorizationEnforcer, ICasbinEnforcerCachedRedis, ICasbinEnforcerOptions, type IAuthorizationComparable, type IAuthorizationRequest, type TAuthorizationDecision } from '../common';
+export declare class CasbinAuthorizationEnforcer<E extends Env = Env, TAction extends string | IAuthorizationComparable = string, TResource extends string | IAuthorizationComparable = string> extends BaseHelper implements IAuthorizationEnforcer<E, TAction, TResource, IAuthUser> {
     private options;
     name: string;
+    private readonly MIN_EXPIRES_IN;
     private enforcer;
-    constructor(options: IAuthorizeOptions);
+    private inMemoryInvalidationTimer;
+    constructor(options: ICasbinEnforcerOptions<E, TAction, TResource>);
     configure(): Promise<void>;
-    buildAbilities(opts: {
-        user: IAuthUser;
-        context: TContext;
+    destroy(): void;
+    buildRules(opts: {
+        user: {
+            principalType: string;
+        } & IAuthUser;
+        context: TContext<E, string>;
     }): Promise<IAuthUser>;
     evaluate(opts: {
-        abilities: IAuthUser;
-        action: string;
-        resource: string;
-        conditions?: TAuthorizationConditions;
-    }): boolean;
+        rules: IAuthUser;
+        request: IAuthorizationRequest<TAction, TResource>;
+        context: TContext<E, string>;
+    }): Promise<TAuthorizationDecision>;
+    protected resolveCasbinEnforcer(opts: {
+        casbin: typeof import('casbin');
+        model: import('casbin').Model;
+        adapter?: unknown;
+        cached: ICasbinEnforcerOptions['cached'];
+    }): Promise<CasbinEnforcerType | CasbinCachedEnforcerType>;
+    protected resolveModel(opts: {
+        casbin: typeof import('casbin');
+        model: ICasbinEnforcerOptions['model'];
+    }): import("casbin").Model;
+    protected validateExpiresIn(opts: {
+        expiresIn: number;
+    }): void;
+    protected loadPoliciesFromAdapter(opts: {
+        user: {
+            principalType: string;
+        } & IAuthUser;
+    }): Promise<void>;
+    protected loadPoliciesWithRedisCache(opts: {
+        user: {
+            principalType: string;
+        } & IAuthUser;
+        cached: ICasbinEnforcerCachedRedis;
+    }): Promise<void>;
+    protected extractPolicyLines(): Promise<string[]>;
+    protected loadPolicyLinesIntoModel(opts: {
+        lines: string[];
+    }): Promise<void>;
 }
 //# sourceMappingURL=casbin.enforcer.d.ts.map

package/dist/components/auth/authorize/enforcers/casbin.enforcer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"casbin.enforcer.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/casbin.enforcer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAY,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,sBAAsB,EACtB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,WAAW,CAAC;AAMnB,qBAAa,2BACX,SAAQ,UACR,YAAW,sBAAsB,CAAC,SAAS,CAAC;IAMe,OAAO,CAAC,OAAO;IAJ1E,IAAI,SAAY;IAEhB,OAAO,CAAC,QAAQ,CAAa;gBAEsC,OAAO,EAAE,iBAAiB;IAKvF,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B1B,cAAc,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAyBtF,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,wBAAwB,CAAC;KACvC,GAAG,OAAO;CAuBZ"}
+{"version":3,"file":"casbin.enforcer.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/casbin.enforcer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,UAAU,EAA6B,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EACV,cAAc,IAAI,wBAAwB,EAC1C,QAAQ,IAAI,kBAAkB,EAC/B,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAOL,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,WAAW,CAAC;AAInB,qBAAa,2BAA2B,CACtC,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,SAAS,MAAM,GAAG,wBAAwB,GAAG,MAAM,EAC1D,SAAS,SAAS,MAAM,GAAG,wBAAwB,GAAG,MAAM,CAE5D,SAAQ,UACR,YAAW,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;IAUjE,OAAO,CAAC,OAAO;IARjB,IAAI,SAAoC;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEzC,OAAO,CAAC,QAAQ,CAAkE;IAClF,OAAO,CAAC,yBAAyB,CAAmC;gBAI1D,OAAO,EAAE,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC;IAO1D,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAoChC,OAAO;IAWD,UAAU,CAAC,IAAI,EAAE;QACrB,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,OAAO,CAAC,SAAS,CAAC;IAwChB,QAAQ,CAAC,IAAI,EAAE;QACnB,KAAK,EAAE,SAAS,CAAC;QACjB,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,OAAO,CAAC,sBAAsB,CAAC;cAoDnB,qBAAqB,CAAC,IAAI,EAAE;QAC1C,MAAM,EAAE,cAAc,QAAQ,CAAC,CAAC;QAChC,KAAK,EAAE,OAAO,QAAQ,EAAE,KAAK,CAAC;QAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;KAC1C,GAAG,OAAO,CAAC,kBAAkB,GAAG,wBAAwB,CAAC;IAmC1D,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,cAAc,QAAQ,CAAC,CAAC;QAChC,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;KACxC;IAkBD,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;cAY9C,uBAAuB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE;cAc7E,0BAA0B,CAAC,IAAI,EAAE;QAC/C,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAC5C,MAAM,EAAE,0BAA0B,CAAC;KACpC;cAmCe,kBAAkB;cAgBlB,wBAAwB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAkBnF"}