@webiny/api-core-testing 0.0.0-unstable.7c2def32a7 → 0.0.0-unstable.a85ef555b2

package/mocks/TestAuthorizer.d.ts

@@ -1,21 +1,27 @@
 import { Abstraction } from "@webiny/di";
 import type { IAuthorizer } from "@webiny/api-core/features/security/authorization/Authorizer/abstractions.js";
 import type { SecurityPermission } from "@webiny/api-core/types/security.js";
-import type { IdentityData } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import type { Identity, IdentityData } from "@webiny/api-core/features/security/IdentityContext/index.js";
 /**
  * The permissions granted to the test identity, wrapped in a holder so DI treats it as a single
  * value (not a multiple-binding of SecurityPermission):
  * `container.registerInstance(TestPermissions, { list: [{ name: "*" }] })`.
+ *
+ * `byIdentity` grants other identities their own permissions (by identity id), for code that
+ * evaluates another user through `IdentityContext.withIdentity`. Other identities not listed get
+ * no permissions.
  */
 export interface TestPermissionsHolder {
     list: SecurityPermission[];
+    byIdentity?: Record<string, SecurityPermission[]>;
 }
 export declare const TestPermissions: Abstraction<TestPermissionsHolder>;
 declare class TestAuthorizerImpl implements IAuthorizer {
     private permissions;
-    private identity;
-    constructor(permissions: TestPermissionsHolder, identity: IdentityData | null);
-    authorize(): Promise<SecurityPermission[] | null>;
+    private requestIdentity;
+    constructor(permissions: TestPermissionsHolder, requestIdentity: IdentityData | null);
+    authorize(identity: Identity): Promise<SecurityPermission[] | null>;
+    private isRequestIdentity;
 }
 export declare const TestAuthorizer: typeof TestAuthorizerImpl & {
     __abstraction: Abstraction<IAuthorizer>;

package/mocks/TestAuthorizer.js

@@ -3,14 +3,22 @@ import { Authorizer } from "@webiny/api-core/features/security/authorization/Aut
 import { TestIdentity } from "./TestAuthenticator.js";
 const TestPermissions = new Abstraction("TestPermissions");
 class TestAuthorizerImpl {
-    constructor(permissions, identity){
+    constructor(permissions, requestIdentity){
         this.permissions = permissions;
-        this.identity = identity;
+        this.requestIdentity = requestIdentity;
     }
-    async authorize() {
-        if (this.permissions.list.length > 0) return this.permissions.list;
-        if (this.identity?.type === "api-key" && Array.isArray(this.identity.permissions)) return this.identity.permissions;
-        return this.permissions.list;
+    async authorize(identity) {
+        if (this.isRequestIdentity(identity)) {
+            if (this.permissions.list.length > 0) return this.permissions.list;
+            if ("api-key" === identity.type) return identity.permissions;
+            return this.permissions.list;
+        }
+        if ("api-key" === identity.type) return null;
+        return this.permissions.byIdentity?.[identity.id] ?? [];
+    }
+    isRequestIdentity(identity) {
+        if (!this.requestIdentity) return identity.isAnonymous();
+        return identity.id === this.requestIdentity.id;
     }
 }
 const TestAuthorizer = Authorizer.createImplementation({

package/mocks/TestAuthorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"mocks/TestAuthorizer.js","sources":["../../src/mocks/TestAuthorizer.ts"],"sourcesContent":["import { Abstraction } from \"@webiny/di\";\nimport { Authorizer } from \"@webiny/api-core/features/security/authorization/Authorizer/abstractions.js\";\nimport type { IAuthorizer } from \"@webiny/api-core/features/security/authorization/Authorizer/abstractions.js\";\nimport type { SecurityPermission } from \"@webiny/api-core/types/security.js\";\nimport type { IdentityData } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { TestIdentity } from \"./TestAuthenticator.js\";\n\n/**\n * The permissions granted to the test identity, wrapped in a holder so DI treats it as a single\n * value (not a multiple-binding of SecurityPermission):\n * `container.registerInstance(TestPermissions, { list: [{ name: \"*\" }] })`.\n */\nexport interface TestPermissionsHolder {\n    list: SecurityPermission[];\n}\n\nexport const TestPermissions = new Abstraction<TestPermissionsHolder>(\"TestPermissions\");\n\nclass TestAuthorizerImpl implements IAuthorizer {\n    constructor(\n        private permissions: TestPermissionsHolder,\n        private identity: IdentityData | null\n    ) {}\n\n    async authorize(): Promise<SecurityPermission[] | null> {\n        if (this.permissions.list.length > 0) {\n            return this.permissions.list;\n        }\n        // For api-key identities with embedded permissions, return those (mirrors apiKeyAuthorization).\n        if (\n            this.identity?.type === \"api-key\" &&\n            Array.isArray((this.identity as { permissions?: unknown }).permissions)\n        ) {\n            return (this.identity as unknown as { permissions: SecurityPermission[] }).permissions;\n        }\n        return this.permissions.list;\n    }\n}\n\nexport const TestAuthorizer = Authorizer.createImplementation({\n    implementation: TestAuthorizerImpl,\n    dependencies: [TestPermissions, TestIdentity]\n});\n"],"names":["TestPermissions","Abstraction","TestAuthorizerImpl","permissions","identity","Array","TestAuthorizer","Authorizer","TestIdentity"],"mappings":";;;AAgBO,MAAMA,kBAAkB,IAAIC,YAAmC;AAEtE,MAAMC;IACF,YACYC,WAAkC,EAClCC,QAA6B,CACvC;aAFUD,WAAW,GAAXA;aACAC,QAAQ,GAARA;IACT;IAEH,MAAM,YAAkD;QACpD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,GAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI;QAGhC,IACI,IAAI,CAAC,QAAQ,EAAE,SAAS,aACxBC,MAAM,OAAO,CAAE,IAAI,CAAC,QAAQ,CAA+B,WAAW,GAEtE,OAAQ,IAAI,CAAC,QAAQ,CAAsD,WAAW;QAE1F,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI;IAChC;AACJ;AAEO,MAAMC,iBAAiBC,WAAW,oBAAoB,CAAC;IAC1D,gBAAgBL;IAChB,cAAc;QAACF;QAAiBQ;KAAa;AACjD"}
+{"version":3,"file":"mocks/TestAuthorizer.js","sources":["../../src/mocks/TestAuthorizer.ts"],"sourcesContent":["import { Abstraction } from \"@webiny/di\";\nimport { Authorizer } from \"@webiny/api-core/features/security/authorization/Authorizer/abstractions.js\";\nimport type { IAuthorizer } from \"@webiny/api-core/features/security/authorization/Authorizer/abstractions.js\";\nimport type { SecurityPermission } from \"@webiny/api-core/types/security.js\";\nimport type {\n    Identity,\n    IdentityData\n} from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { TestIdentity } from \"./TestAuthenticator.js\";\n\n/**\n * The permissions granted to the test identity, wrapped in a holder so DI treats it as a single\n * value (not a multiple-binding of SecurityPermission):\n * `container.registerInstance(TestPermissions, { list: [{ name: \"*\" }] })`.\n *\n * `byIdentity` grants other identities their own permissions (by identity id), for code that\n * evaluates another user through `IdentityContext.withIdentity`. Other identities not listed get\n * no permissions.\n */\nexport interface TestPermissionsHolder {\n    list: SecurityPermission[];\n    byIdentity?: Record<string, SecurityPermission[]>;\n}\n\nexport const TestPermissions = new Abstraction<TestPermissionsHolder>(\"TestPermissions\");\n\nclass TestAuthorizerImpl implements IAuthorizer {\n    constructor(\n        private permissions: TestPermissionsHolder,\n        private requestIdentity: IdentityData | null\n    ) {}\n\n    async authorize(identity: Identity): Promise<SecurityPermission[] | null> {\n        if (this.isRequestIdentity(identity)) {\n            if (this.permissions.list.length > 0) {\n                return this.permissions.list;\n            }\n            // An API-key request identity with embedded permissions (mirrors ApiKeyAuthorizer).\n            if (identity.type === \"api-key\") {\n                return identity.permissions;\n            }\n            return this.permissions.list;\n        }\n        // A real API key authenticated during the test: leave it to api-core's ApiKeyAuthorizer.\n        if (identity.type === \"api-key\") {\n            return null;\n        }\n        // Another identity (withIdentity): only what the test granted it (R70).\n        return this.permissions.byIdentity?.[identity.id] ?? [];\n    }\n\n    private isRequestIdentity(identity: Identity): boolean {\n        if (!this.requestIdentity) {\n            return identity.isAnonymous();\n        }\n        return identity.id === this.requestIdentity.id;\n    }\n}\n\nexport const TestAuthorizer = Authorizer.createImplementation({\n    implementation: TestAuthorizerImpl,\n    dependencies: [TestPermissions, TestIdentity]\n});\n"],"names":["TestPermissions","Abstraction","TestAuthorizerImpl","permissions","requestIdentity","identity","TestAuthorizer","Authorizer","TestIdentity"],"mappings":";;;AAwBO,MAAMA,kBAAkB,IAAIC,YAAmC;AAEtE,MAAMC;IACF,YACYC,WAAkC,EAClCC,eAAoC,CAC9C;aAFUD,WAAW,GAAXA;aACAC,eAAe,GAAfA;IACT;IAEH,MAAM,UAAUC,QAAkB,EAAwC;QACtE,IAAI,IAAI,CAAC,iBAAiB,CAACA,WAAW;YAClC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,GAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI;YAGhC,IAAIA,AAAkB,cAAlBA,SAAS,IAAI,EACb,OAAOA,SAAS,WAAW;YAE/B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI;QAChC;QAEA,IAAIA,AAAkB,cAAlBA,SAAS,IAAI,EACb,OAAO;QAGX,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAACA,SAAS,EAAE,CAAC,IAAI,EAAE;IAC3D;IAEQ,kBAAkBA,QAAkB,EAAW;QACnD,IAAI,CAAC,IAAI,CAAC,eAAe,EACrB,OAAOA,SAAS,WAAW;QAE/B,OAAOA,SAAS,EAAE,KAAK,IAAI,CAAC,eAAe,CAAC,EAAE;IAClD;AACJ;AAEO,MAAMC,iBAAiBC,WAAW,oBAAoB,CAAC;IAC1D,gBAAgBL;IAChB,cAAc;QAACF;QAAiBQ;KAAa;AACjD"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@webiny/api-core-testing",
-	"version": "0.0.0-unstable.7c2def32a7",
+	"version": "0.0.0-unstable.a85ef555b2",
 	"type": "module",
 	"exports": {
 		".": "./index.js",
@@ -15,13 +15,13 @@
 	"author": "Webiny Ltd.",
 	"license": "MIT",
 	"dependencies": {
-		"@webiny/api-core": "0.0.0-unstable.7c2def32a7",
+		"@webiny/api-core": "0.0.0-unstable.a85ef555b2",
 		"@webiny/di": "2.0.0",
-		"@webiny/event-handler-core": "0.0.0-unstable.7c2def32a7",
-		"@webiny/feature": "0.0.0-unstable.7c2def32a7"
+		"@webiny/event-handler-core": "0.0.0-unstable.a85ef555b2",
+		"@webiny/feature": "0.0.0-unstable.a85ef555b2"
 	},
 	"devDependencies": {
-		"@webiny/build-tools": "0.0.0-unstable.7c2def32a7",
+		"@webiny/build-tools": "0.0.0-unstable.a85ef555b2",
 		"rimraf": "6.1.3",
 		"typescript": "7.0.2"
 	},