@webiny/api-core 0.0.0-unstable.0d717d18dd

package/features/security/authentication/AuthenticationContext/events.d.ts

@@ -0,0 +1,30 @@
+import { DomainEvent } from "../../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../../features/eventPublisher/index.js";
+import type { Identity } from "../../../../features/security/IdentityContext/Identity.js";
+export interface BeforeAuthenticationPayload {
+    token: string;
+}
+export declare class BeforeAuthenticationEvent extends DomainEvent<BeforeAuthenticationPayload> {
+    eventType: "authentication.beforeAuthentication";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<BeforeAuthenticationEvent>>;
+}
+/** Hook into authentication lifecycle before authentication occurs. */
+export declare const BeforeAuthenticationEventHandler: import("@webiny/di").Abstraction<IEventHandler<BeforeAuthenticationEvent>>;
+export declare namespace BeforeAuthenticationEventHandler {
+    type Interface = IEventHandler<BeforeAuthenticationEvent>;
+    type Event = BeforeAuthenticationEvent;
+}
+export interface AfterAuthenticationPayload {
+    identity: Identity;
+    token: string;
+}
+export declare class AfterAuthenticationEvent extends DomainEvent<AfterAuthenticationPayload> {
+    eventType: "authentication.afterAuthentication";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<AfterAuthenticationEvent>>;
+}
+/** Hook into authentication lifecycle after authentication occurs. */
+export declare const AfterAuthenticationEventHandler: import("@webiny/di").Abstraction<IEventHandler<AfterAuthenticationEvent>>;
+export declare namespace AfterAuthenticationEventHandler {
+    type Interface = IEventHandler<AfterAuthenticationEvent>;
+    type Event = AfterAuthenticationEvent;
+}

package/features/security/authentication/AuthenticationContext/events.js

@@ -0,0 +1,23 @@
+import { DomainEvent } from "../../../eventPublisher/index.js";
+import { createAbstraction } from "@webiny/feature/api";
+class BeforeAuthenticationEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return BeforeAuthenticationEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "authentication.beforeAuthentication";
+    }
+}
+const BeforeAuthenticationEventHandler = createAbstraction("BeforeAuthenticationEventHandler");
+class AfterAuthenticationEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return AfterAuthenticationEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "authentication.afterAuthentication";
+    }
+}
+const AfterAuthenticationEventHandler = createAbstraction("AfterAuthenticationEventHandler");
+export { AfterAuthenticationEvent, AfterAuthenticationEventHandler, BeforeAuthenticationEvent, BeforeAuthenticationEventHandler };
+
+//# sourceMappingURL=events.js.map

package/features/security/authentication/AuthenticationContext/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authentication/AuthenticationContext/events.js","sources":["../../../../../src/features/security/authentication/AuthenticationContext/events.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface BeforeAuthenticationPayload {\n    token: string;\n}\n\nexport class BeforeAuthenticationEvent extends DomainEvent<BeforeAuthenticationPayload> {\n    eventType = \"authentication.beforeAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return BeforeAuthenticationEventHandler;\n    }\n}\n\n/** Hook into authentication lifecycle before authentication occurs. */\nexport const BeforeAuthenticationEventHandler = createAbstraction<\n    IEventHandler<BeforeAuthenticationEvent>\n>(\"BeforeAuthenticationEventHandler\");\n\nexport namespace BeforeAuthenticationEventHandler {\n    export type Interface = IEventHandler<BeforeAuthenticationEvent>;\n    export type Event = BeforeAuthenticationEvent;\n}\n\nexport interface AfterAuthenticationPayload {\n    identity: Identity;\n    token: string;\n}\n\nexport class AfterAuthenticationEvent extends DomainEvent<AfterAuthenticationPayload> {\n    eventType = \"authentication.afterAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return AfterAuthenticationEventHandler;\n    }\n}\n\n/** Hook into authentication lifecycle after authentication occurs. */\nexport const AfterAuthenticationEventHandler = createAbstraction<\n    IEventHandler<AfterAuthenticationEvent>\n>(\"AfterAuthenticationEventHandler\");\n\nexport namespace AfterAuthenticationEventHandler {\n    export type Interface = IEventHandler<AfterAuthenticationEvent>;\n    export type Event = AfterAuthenticationEvent;\n}\n"],"names":["BeforeAuthenticationEvent","DomainEvent","BeforeAuthenticationEventHandler","createAbstraction","AfterAuthenticationEvent","AfterAuthenticationEventHandler"],"mappings":";;AASO,MAAMA,kCAAkCC;IAG3C,wBAAwB;QACpB,OAAOC;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,mCAAmCC,kBAE9C;AAYK,MAAMC,iCAAiCH;IAG1C,wBAAwB;QACpB,OAAOI;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,kCAAkCF,kBAE7C"}

package/features/security/authentication/AuthenticationContext/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const AuthenticationContextFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/security/authentication/AuthenticationContext/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { AuthenticationContext } from "./AuthenticationContext.js";
+const AuthenticationContextFeature = createFeature({
+    name: "AuthenticationContext",
+    register (container) {
+        container.register(AuthenticationContext).inSingletonScope();
+    }
+});
+export { AuthenticationContextFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/security/authentication/AuthenticationContext/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authentication/AuthenticationContext/feature.js","sources":["../../../../../src/features/security/authentication/AuthenticationContext/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { AuthenticationContext } from \"./AuthenticationContext.js\";\n\nexport const AuthenticationContextFeature = createFeature({\n    name: \"AuthenticationContext\",\n    register(container) {\n        container.register(AuthenticationContext).inSingletonScope();\n    }\n});\n"],"names":["AuthenticationContextFeature","createFeature","container","AuthenticationContext"],"mappings":";;AAGO,MAAMA,+BAA+BC,cAAc;IACtD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC,uBAAuB,gBAAgB;IAC9D;AACJ"}

package/features/security/authentication/AuthenticationContext/index.d.ts

@@ -0,0 +1,5 @@
+export { AuthenticationContextFeature } from "./feature.js";
+export { AuthenticationContext } from "./abstractions.js";
+export type { IAuthenticationContext } from "./abstractions.js";
+export * from "./events.js";
+export * from "./errors.js";

package/features/security/authentication/AuthenticationContext/index.js

@@ -0,0 +1,4 @@
+export * from "./events.js";
+export * from "./errors.js";
+export { AuthenticationContextFeature } from "./feature.js";
+export { AuthenticationContext } from "./abstractions.js";

package/features/security/authentication/Authenticator/abstractions.d.ts

@@ -0,0 +1,9 @@
+import type { IdentityData } from "../../../../features/security/IdentityContext/Identity.js";
+export interface IAuthenticator {
+    authenticate(token: string): Promise<IdentityData | null>;
+}
+/** Convert an authentication token into identity data. */
+export declare const Authenticator: import("@webiny/di").Abstraction<IAuthenticator>;
+export declare namespace Authenticator {
+    type Interface = IAuthenticator;
+}

package/features/security/authentication/Authenticator/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const Authenticator = createAbstraction("Authenticator");
+export { Authenticator };
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/authentication/Authenticator/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authentication/Authenticator/abstractions.js","sources":["../../../../../src/features/security/authentication/Authenticator/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { IdentityData } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface IAuthenticator {\n    authenticate(token: string): Promise<IdentityData | null>;\n}\n\n/** Convert an authentication token into identity data. */\nexport const Authenticator = createAbstraction<IAuthenticator>(\"Authenticator\");\n\nexport namespace Authenticator {\n    export type Interface = IAuthenticator;\n}\n"],"names":["Authenticator","createAbstraction"],"mappings":";AAQO,MAAMA,gBAAgBC,kBAAkC"}

package/features/security/authentication/Authenticator/index.d.ts

@@ -0,0 +1 @@
+export * from "./abstractions.js";

package/features/security/authentication/Authenticator/index.js

@@ -0,0 +1 @@
+export * from "./abstractions.js";

package/features/security/authorization/AuthorizationContext/AuthorizationContext.d.ts

@@ -0,0 +1,17 @@
+import { AuthorizationContext as Abstraction, PermissionTransformer } from "./abstractions.js";
+import { Authorizer } from "../Authorizer/index.js";
+import type { SecurityPermission } from "../../../../types/security.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+export declare class AuthorizationContext implements Abstraction.Interface {
+    private getAuthorizers;
+    private getTransformers;
+    private permissions?;
+    private permissionsLoader?;
+    constructor(getAuthorizers: () => Authorizer.Interface[], getTransformers: () => PermissionTransformer.Interface[]);
+    loadPermissions(identity: Identity): Promise<SecurityPermission[]>;
+    isAuthorizationEnabled(): boolean;
+    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;
+    clearPermissionsCache(): void;
+    private transformPermissions;
+    private deduplicatePermissions;
+}

package/features/security/authorization/AuthorizationContext/AuthorizationContext.js

@@ -0,0 +1,54 @@
+import { AsyncLocalStorage } from "async_hooks";
+const authorizationEnabledStorage = new AsyncLocalStorage();
+class AuthorizationContext {
+    constructor(getAuthorizers, getTransformers){
+        this.getAuthorizers = getAuthorizers;
+        this.getTransformers = getTransformers;
+    }
+    async loadPermissions(identity) {
+        if (this.permissions) return this.permissions;
+        if (this.permissionsLoader) return this.permissionsLoader;
+        this.permissionsLoader = new Promise(async (resolve)=>{
+            const authorizers = this.getAuthorizers();
+            for (const authorizer of authorizers){
+                const permissions = await authorizer.authorize(identity);
+                if (Array.isArray(permissions)) {
+                    this.permissions = this.transformPermissions(permissions);
+                    return resolve(this.permissions);
+                }
+            }
+            this.permissions = [];
+            resolve(this.permissions);
+        });
+        return this.permissionsLoader;
+    }
+    isAuthorizationEnabled() {
+        const override = authorizationEnabledStorage.getStore();
+        return override ?? true;
+    }
+    withoutAuthorization(cb) {
+        return authorizationEnabledStorage.run(false, cb);
+    }
+    clearPermissionsCache() {
+        this.permissions = void 0;
+        this.permissionsLoader = void 0;
+    }
+    transformPermissions(permissions) {
+        const transformers = this.getTransformers();
+        if (0 === transformers.length) return this.deduplicatePermissions(permissions);
+        const transformed = permissions.map((permission)=>transformers.map((t)=>t.execute(permission)).flat()).flat();
+        return this.deduplicatePermissions(transformed);
+    }
+    deduplicatePermissions(permissions) {
+        const seen = new Set();
+        return permissions.filter((permission)=>{
+            const key = JSON.stringify(permission);
+            if (seen.has(key)) return false;
+            seen.add(key);
+            return true;
+        });
+    }
+}
+export { AuthorizationContext };
+
+//# sourceMappingURL=AuthorizationContext.js.map

package/features/security/authorization/AuthorizationContext/AuthorizationContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authorization/AuthorizationContext/AuthorizationContext.js","sources":["../../../../../src/features/security/authorization/AuthorizationContext/AuthorizationContext.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\nimport { AuthorizationContext as Abstraction, PermissionTransformer } from \"./abstractions.js\";\nimport { Authorizer } from \"../Authorizer/index.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nconst authorizationEnabledStorage = new AsyncLocalStorage<boolean>();\n\nexport class AuthorizationContext implements Abstraction.Interface {\n    private permissions?: SecurityPermission[];\n    private permissionsLoader?: Promise<SecurityPermission[]>;\n\n    constructor(\n        private getAuthorizers: () => Authorizer.Interface[],\n        private getTransformers: () => PermissionTransformer.Interface[]\n    ) {}\n\n    async loadPermissions(identity: Identity): Promise<SecurityPermission[]> {\n        if (this.permissions) {\n            return this.permissions;\n        }\n\n        if (this.permissionsLoader) {\n            return this.permissionsLoader;\n        }\n\n        this.permissionsLoader = new Promise<SecurityPermission[]>(async resolve => {\n            // Execute authorizers in sequence until one returns permissions\n            const authorizers = this.getAuthorizers();\n            for (const authorizer of authorizers) {\n                const permissions = await authorizer.authorize(identity);\n                if (Array.isArray(permissions)) {\n                    this.permissions = this.transformPermissions(permissions);\n                    return resolve(this.permissions);\n                }\n            }\n\n            // No authorizer returned permissions\n            this.permissions = [];\n            resolve(this.permissions);\n        });\n\n        return this.permissionsLoader;\n    }\n\n    isAuthorizationEnabled(): boolean {\n        const override = authorizationEnabledStorage.getStore();\n        return override ?? true;\n    }\n\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T> {\n        return authorizationEnabledStorage.run(false, cb);\n    }\n\n    clearPermissionsCache(): void {\n        this.permissions = undefined;\n        this.permissionsLoader = undefined;\n    }\n\n    private transformPermissions(permissions: SecurityPermission[]) {\n        const transformers = this.getTransformers();\n        if (transformers.length === 0) {\n            return this.deduplicatePermissions(permissions);\n        }\n\n        const transformed = permissions\n            .map(permission => {\n                // A transformer can return one or multiple permissions, so we flatten the result.\n                return transformers.map(t => t.execute(permission)).flat();\n            })\n            .flat();\n\n        return this.deduplicatePermissions(transformed);\n    }\n\n    private deduplicatePermissions(permissions: SecurityPermission[]) {\n        const seen = new Set<string>();\n\n        return permissions.filter(permission => {\n            const key = JSON.stringify(permission);\n            if (seen.has(key)) {\n                return false;\n            }\n            seen.add(key);\n            return true;\n        });\n    }\n}\n"],"names":["authorizationEnabledStorage","AsyncLocalStorage","AuthorizationContext","getAuthorizers","getTransformers","identity","Promise","resolve","authorizers","authorizer","permissions","Array","override","cb","undefined","transformers","transformed","permission","t","seen","Set","key","JSON"],"mappings":";AAMA,MAAMA,8BAA8B,IAAIC;AAEjC,MAAMC;IAIT,YACYC,cAA4C,EAC5CC,eAAwD,CAClE;aAFUD,cAAc,GAAdA;aACAC,eAAe,GAAfA;IACT;IAEH,MAAM,gBAAgBC,QAAkB,EAAiC;QACrE,IAAI,IAAI,CAAC,WAAW,EAChB,OAAO,IAAI,CAAC,WAAW;QAG3B,IAAI,IAAI,CAAC,iBAAiB,EACtB,OAAO,IAAI,CAAC,iBAAiB;QAGjC,IAAI,CAAC,iBAAiB,GAAG,IAAIC,QAA8B,OAAMC;YAE7D,MAAMC,cAAc,IAAI,CAAC,cAAc;YACvC,KAAK,MAAMC,cAAcD,YAAa;gBAClC,MAAME,cAAc,MAAMD,WAAW,SAAS,CAACJ;gBAC/C,IAAIM,MAAM,OAAO,CAACD,cAAc;oBAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAACA;oBAC7C,OAAOH,QAAQ,IAAI,CAAC,WAAW;gBACnC;YACJ;YAGA,IAAI,CAAC,WAAW,GAAG,EAAE;YACrBA,QAAQ,IAAI,CAAC,WAAW;QAC5B;QAEA,OAAO,IAAI,CAAC,iBAAiB;IACjC;IAEA,yBAAkC;QAC9B,MAAMK,WAAWZ,4BAA4B,QAAQ;QACrD,OAAOY,YAAY;IACvB;IAEA,qBAAwBC,EAAoB,EAAc;QACtD,OAAOb,4BAA4B,GAAG,CAAC,OAAOa;IAClD;IAEA,wBAA8B;QAC1B,IAAI,CAAC,WAAW,GAAGC;QACnB,IAAI,CAAC,iBAAiB,GAAGA;IAC7B;IAEQ,qBAAqBJ,WAAiC,EAAE;QAC5D,MAAMK,eAAe,IAAI,CAAC,eAAe;QACzC,IAAIA,AAAwB,MAAxBA,aAAa,MAAM,EACnB,OAAO,IAAI,CAAC,sBAAsB,CAACL;QAGvC,MAAMM,cAAcN,YACf,GAAG,CAACO,CAAAA,aAEMF,aAAa,GAAG,CAACG,CAAAA,IAAKA,EAAE,OAAO,CAACD,aAAa,IAAI,IAE3D,IAAI;QAET,OAAO,IAAI,CAAC,sBAAsB,CAACD;IACvC;IAEQ,uBAAuBN,WAAiC,EAAE;QAC9D,MAAMS,OAAO,IAAIC;QAEjB,OAAOV,YAAY,MAAM,CAACO,CAAAA;YACtB,MAAMI,MAAMC,KAAK,SAAS,CAACL;YAC3B,IAAIE,KAAK,GAAG,CAACE,MACT,OAAO;YAEXF,KAAK,GAAG,CAACE;YACT,OAAO;QACX;IACJ;AACJ"}

package/features/security/authorization/AuthorizationContext/abstractions.d.ts

@@ -0,0 +1,23 @@
+import type { SecurityPermission } from "../../../../types/security.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+export interface IAuthorizationContext {
+    loadPermissions(identity: Identity): Promise<SecurityPermission[]>;
+    isAuthorizationEnabled(): boolean;
+    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;
+    clearPermissionsCache(): void;
+}
+/** Load and cache security permissions for the current identity. */
+export declare const AuthorizationContext: import("@webiny/di").Abstraction<IAuthorizationContext>;
+export declare namespace AuthorizationContext {
+    type Interface = IAuthorizationContext;
+}
+export interface IPermissionTransformer {
+    execute(permission: SecurityPermission): SecurityPermission | SecurityPermission[];
+}
+/** Transform security permissions before they are applied. */
+export declare const PermissionTransformer: import("@webiny/di").Abstraction<IPermissionTransformer>;
+export declare namespace PermissionTransformer {
+    type Interface = IPermissionTransformer;
+    type Permission = SecurityPermission;
+    type Return = SecurityPermission | SecurityPermission[];
+}

package/features/security/authorization/AuthorizationContext/abstractions.js

@@ -0,0 +1,6 @@
+import { createAbstraction } from "@webiny/feature/api";
+const AuthorizationContext = createAbstraction("AuthorizationContext");
+const PermissionTransformer = createAbstraction("PermissionTransformer");
+export { AuthorizationContext, PermissionTransformer };
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/authorization/AuthorizationContext/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authorization/AuthorizationContext/abstractions.js","sources":["../../../../../src/features/security/authorization/AuthorizationContext/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface IAuthorizationContext {\n    loadPermissions(identity: Identity): Promise<SecurityPermission[]>;\n    isAuthorizationEnabled(): boolean;\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;\n    clearPermissionsCache(): void;\n}\n\n/** Load and cache security permissions for the current identity. */\nexport const AuthorizationContext =\n    createAbstraction<IAuthorizationContext>(\"AuthorizationContext\");\n\nexport namespace AuthorizationContext {\n    export type Interface = IAuthorizationContext;\n}\n\nexport interface IPermissionTransformer {\n    execute(permission: SecurityPermission): SecurityPermission | SecurityPermission[];\n}\n\n/** Transform security permissions before they are applied. */\nexport const PermissionTransformer =\n    createAbstraction<IPermissionTransformer>(\"PermissionTransformer\");\n\nexport namespace PermissionTransformer {\n    export type Interface = IPermissionTransformer;\n    export type Permission = SecurityPermission;\n    export type Return = SecurityPermission | SecurityPermission[];\n}\n"],"names":["AuthorizationContext","createAbstraction","PermissionTransformer"],"mappings":";AAYO,MAAMA,uBACTC,kBAAyC;AAWtC,MAAMC,wBACTD,kBAA0C"}

package/features/security/authorization/AuthorizationContext/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const AuthorizationContextFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/security/authorization/AuthorizationContext/feature.js

@@ -0,0 +1,16 @@
+import { createFeature } from "@webiny/feature/api";
+import { AuthorizationContext } from "./AuthorizationContext.js";
+import { AuthorizationContext as external_abstractions_js_AuthorizationContext, PermissionTransformer } from "./abstractions.js";
+import { Authorizer } from "../Authorizer/index.js";
+const AuthorizationContextFeature = createFeature({
+    name: "AuthorizationContext",
+    register (container) {
+        const getAuthorizers = ()=>container.resolveAll(Authorizer);
+        const getTransformers = ()=>container.resolveAll(PermissionTransformer);
+        const authorizationContext = new AuthorizationContext(getAuthorizers, getTransformers);
+        container.registerInstance(external_abstractions_js_AuthorizationContext, authorizationContext);
+    }
+});
+export { AuthorizationContextFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/security/authorization/AuthorizationContext/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authorization/AuthorizationContext/feature.js","sources":["../../../../../src/features/security/authorization/AuthorizationContext/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { AuthorizationContext } from \"./AuthorizationContext.js\";\nimport { AuthorizationContext as Abstraction, PermissionTransformer } from \"./abstractions.js\";\nimport { Authorizer } from \"~/features/security/authorization/Authorizer/index.js\";\n\nexport const AuthorizationContextFeature = createFeature({\n    name: \"AuthorizationContext\",\n    register(container) {\n        const getAuthorizers = () => container.resolveAll(Authorizer);\n        const getTransformers = () => container.resolveAll(PermissionTransformer);\n\n        const authorizationContext = new AuthorizationContext(getAuthorizers, getTransformers);\n\n        container.registerInstance(Abstraction, authorizationContext);\n    }\n});\n"],"names":["AuthorizationContextFeature","createFeature","container","getAuthorizers","Authorizer","getTransformers","PermissionTransformer","authorizationContext","AuthorizationContext","Abstraction"],"mappings":";;;;AAKO,MAAMA,8BAA8BC,cAAc;IACrD,MAAM;IACN,UAASC,SAAS;QACd,MAAMC,iBAAiB,IAAMD,UAAU,UAAU,CAACE;QAClD,MAAMC,kBAAkB,IAAMH,UAAU,UAAU,CAACI;QAEnD,MAAMC,uBAAuB,IAAIC,qBAAqBL,gBAAgBE;QAEtEH,UAAU,gBAAgB,CAACO,+CAAaF;IAC5C;AACJ"}

package/features/security/authorization/AuthorizationContext/index.d.ts

@@ -0,0 +1,4 @@
+export { AuthorizationContextFeature } from "./feature.js";
+export { AuthorizationContext } from "./abstractions.js";
+export { PermissionTransformer } from "./abstractions.js";
+export type { IAuthorizationContext } from "./abstractions.js";

package/features/security/authorization/AuthorizationContext/index.js

@@ -0,0 +1,2 @@
+export { AuthorizationContextFeature } from "./feature.js";
+export { AuthorizationContext, PermissionTransformer } from "./abstractions.js";

package/features/security/authorization/Authorizer/abstractions.d.ts

@@ -0,0 +1,10 @@
+import type { SecurityPermission } from "../../../../types/security.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+export interface IAuthorizer {
+    authorize(identity: Identity): Promise<SecurityPermission[] | null>;
+}
+/** Retrieve permissions for an identity. */
+export declare const Authorizer: import("@webiny/di").Abstraction<IAuthorizer>;
+export declare namespace Authorizer {
+    type Interface = IAuthorizer;
+}

package/features/security/authorization/Authorizer/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const Authorizer = createAbstraction("Authorizer");
+export { Authorizer };
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/authorization/Authorizer/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authorization/Authorizer/abstractions.js","sources":["../../../../../src/features/security/authorization/Authorizer/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface IAuthorizer {\n    authorize(identity: Identity): Promise<SecurityPermission[] | null>;\n}\n\n/** Retrieve permissions for an identity. */\nexport const Authorizer = createAbstraction<IAuthorizer>(\"Authorizer\");\n\nexport namespace Authorizer {\n    export type Interface = IAuthorizer;\n}\n"],"names":["Authorizer","createAbstraction"],"mappings":";AASO,MAAMA,aAAaC,kBAA+B"}

package/features/security/authorization/Authorizer/index.d.ts

@@ -0,0 +1 @@
+export * from "./abstractions.js";

package/features/security/authorization/Authorizer/index.js

@@ -0,0 +1 @@
+export * from "./abstractions.js";

package/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.d.ts

@@ -0,0 +1,23 @@
+import { WcpContext } from "../../../../features/wcp/WcpContext/index.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+import { PermissionsProcessor } from "./abstractions.js";
+import { RolesRepository } from "../../../../features/security/roles/shared/abstractions.js";
+import { TeamsRepository } from "../../../../features/security/teams/shared/abstractions.js";
+import { AdminUsersRepository } from "../../../../features/users/shared/abstractions.js";
+export type RoleId = string | undefined;
+export type TeamId = string | undefined;
+declare class GetPermissionsFromGroupsAndTeamsImpl implements PermissionsProcessor.Interface {
+    private wcpContext;
+    private usersRepository;
+    private rolesRepository;
+    private teamsRepository;
+    constructor(wcpContext: WcpContext.Interface, usersRepository: AdminUsersRepository.Interface, rolesRepository: RolesRepository.Interface, teamsRepository: TeamsRepository.Interface);
+    getPermissions(identity: Identity): Promise<{
+        name: string;
+        _src: string;
+    }[] | null>;
+}
+export declare const GetPermissionsFromIdentity: typeof GetPermissionsFromGroupsAndTeamsImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").IPermissionsProcessor>;
+};
+export {};

package/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.js

@@ -0,0 +1,76 @@
+import { WcpContext } from "../../../wcp/WcpContext/index.js";
+import { PermissionsProcessor } from "./abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
+import { TeamsRepository } from "../../teams/shared/abstractions.js";
+import { getPermissionsFromRoles } from "../../utils/getPermissionsFromRoles.js";
+import { AdminUsersRepository } from "../../../users/shared/abstractions.js";
+class GetPermissionsFromGroupsAndTeamsImpl {
+    constructor(wcpContext, usersRepository, rolesRepository, teamsRepository){
+        this.wcpContext = wcpContext;
+        this.usersRepository = usersRepository;
+        this.rolesRepository = rolesRepository;
+        this.teamsRepository = teamsRepository;
+    }
+    async getPermissions(identity) {
+        const userResult = await this.usersRepository.get({
+            id: identity.id
+        });
+        if (userResult.isFail()) return null;
+        const user = userResult.value;
+        const roleIds = [];
+        const teamIds = [];
+        roleIds.push(...user.roles ?? []);
+        const filteredRoleIds = roleIds.filter(Boolean);
+        const dedupedRoleIds = Array.from(new Set(filteredRoleIds));
+        const loadedRoles = [];
+        if (dedupedRoleIds.length > 0) {
+            const rolesResult = await this.rolesRepository.list({
+                where: {
+                    id_in: dedupedRoleIds
+                }
+            });
+            const loadedRolesByIds = rolesResult.isOk() ? rolesResult.value : [];
+            loadedRoles.push(...loadedRolesByIds);
+        }
+        if (this.wcpContext.canUseTeams()) {
+            teamIds.push(...user.teams ?? []);
+            const filteredTeamIds = teamIds.filter(Boolean);
+            const dedupedTeamIds = Array.from(new Set(filteredTeamIds));
+            if (dedupedTeamIds.length > 0) {
+                const teamsResult = await this.teamsRepository.list({
+                    where: {
+                        id_in: dedupedTeamIds
+                    }
+                });
+                const loadedTeams = teamsResult.isOk() ? teamsResult.value : [];
+                const roleIdsFromTeams = loadedTeams.flatMap((team)=>team.roles).filter((roleId)=>{
+                    const alreadyLoaded = loadedRoles.find((role)=>role.id === roleId);
+                    return !alreadyLoaded;
+                });
+                if (roleIdsFromTeams.length > 0) {
+                    const moreRolesResult = await this.rolesRepository.list({
+                        where: {
+                            id_in: roleIdsFromTeams
+                        }
+                    });
+                    const rolesFromTeams = moreRolesResult.isOk() ? moreRolesResult.value : [];
+                    loadedRoles.push(...rolesFromTeams);
+                }
+            }
+        }
+        if (loadedRoles.length > 0) return getPermissionsFromRoles(loadedRoles);
+        return null;
+    }
+}
+const GetPermissionsFromIdentity = PermissionsProcessor.createImplementation({
+    implementation: GetPermissionsFromGroupsAndTeamsImpl,
+    dependencies: [
+        WcpContext,
+        AdminUsersRepository,
+        RolesRepository,
+        TeamsRepository
+    ]
+});
+export { GetPermissionsFromIdentity };
+
+//# sourceMappingURL=GetPermissionsFromIdentity.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.js","sources":["../../../../../src/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.ts"],"sourcesContent":["import { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\nimport type { SecurityRole } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\nimport { PermissionsProcessor } from \"./abstractions.js\";\nimport { RolesRepository } from \"~/features/security/roles/shared/abstractions.js\";\nimport { TeamsRepository } from \"~/features/security/teams/shared/abstractions.js\";\nimport { getPermissionsFromRoles } from \"~/features/security/utils/getPermissionsFromRoles.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\n\nexport type RoleId = string | undefined;\nexport type TeamId = string | undefined;\n\nclass GetPermissionsFromGroupsAndTeamsImpl implements PermissionsProcessor.Interface {\n    constructor(\n        private wcpContext: WcpContext.Interface,\n        private usersRepository: AdminUsersRepository.Interface,\n        private rolesRepository: RolesRepository.Interface,\n        private teamsRepository: TeamsRepository.Interface\n    ) {}\n\n    async getPermissions(identity: Identity) {\n        const userResult = await this.usersRepository.get({ id: identity.id });\n        if (userResult.isFail()) {\n            return null;\n        }\n\n        const user = userResult.value;\n\n        // Load roles that are associated with the current identity. Also load roles\n        // that are assigned via one or more teams (if the Teams feature is enabled).\n        const roleIds: RoleId[] = [];\n        const teamIds: TeamId[] = [];\n\n        roleIds.push(...(user.roles ?? []));\n\n        const filteredRoleIds = roleIds.filter(Boolean) as string[];\n        const dedupedRoleIds = Array.from(new Set(filteredRoleIds));\n\n        const loadedRoles: SecurityRole[] = [];\n\n        if (dedupedRoleIds.length > 0) {\n            const rolesResult = await this.rolesRepository.list({\n                where: { id_in: dedupedRoleIds }\n            });\n\n            const loadedRolesByIds = rolesResult.isOk() ? rolesResult.value : [];\n            loadedRoles.push(...loadedRolesByIds);\n        }\n\n        if (this.wcpContext.canUseTeams()) {\n            teamIds.push(...(user.teams ?? []));\n\n            const filteredTeamIds = teamIds.filter(Boolean) as string[];\n            const dedupedTeamIds = Array.from(new Set(filteredTeamIds));\n\n            if (dedupedTeamIds.length > 0) {\n                const teamsResult = await this.teamsRepository.list({\n                    where: { id_in: dedupedTeamIds }\n                });\n\n                const loadedTeams = teamsResult.isOk() ? teamsResult.value : [];\n\n                // Upon returning teams, we're filtering out team roles that were already loaded.\n                // Also note that `team.roles` contains role IDs, not slugs.\n                const roleIdsFromTeams = loadedTeams\n                    .flatMap(team => team.roles)\n                    .filter(roleId => {\n                        const alreadyLoaded = loadedRoles.find(role => role.id === roleId);\n                        return !alreadyLoaded;\n                    });\n\n                if (roleIdsFromTeams.length > 0) {\n                    const moreRolesResult = await this.rolesRepository.list({\n                        where: { id_in: roleIdsFromTeams }\n                    });\n\n                    const rolesFromTeams = moreRolesResult.isOk() ? moreRolesResult.value : [];\n                    loadedRoles.push(...rolesFromTeams);\n                }\n            }\n        }\n\n        if (loadedRoles.length > 0) {\n            return getPermissionsFromRoles(loadedRoles);\n        }\n\n        return null;\n    }\n}\n\nexport const GetPermissionsFromIdentity = PermissionsProcessor.createImplementation({\n    implementation: GetPermissionsFromGroupsAndTeamsImpl,\n    dependencies: [WcpContext, AdminUsersRepository, RolesRepository, TeamsRepository]\n});\n"],"names":["GetPermissionsFromGroupsAndTeamsImpl","wcpContext","usersRepository","rolesRepository","teamsRepository","identity","userResult","user","roleIds","teamIds","filteredRoleIds","Boolean","dedupedRoleIds","Array","Set","loadedRoles","rolesResult","loadedRolesByIds","filteredTeamIds","dedupedTeamIds","teamsResult","loadedTeams","roleIdsFromTeams","team","roleId","alreadyLoaded","role","moreRolesResult","rolesFromTeams","getPermissionsFromRoles","GetPermissionsFromIdentity","PermissionsProcessor","WcpContext","AdminUsersRepository","RolesRepository","TeamsRepository"],"mappings":";;;;;;AAYA,MAAMA;IACF,YACYC,UAAgC,EAChCC,eAA+C,EAC/CC,eAA0C,EAC1CC,eAA0C,CACpD;aAJUH,UAAU,GAAVA;aACAC,eAAe,GAAfA;aACAC,eAAe,GAAfA;aACAC,eAAe,GAAfA;IACT;IAEH,MAAM,eAAeC,QAAkB,EAAE;QACrC,MAAMC,aAAa,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,IAAID,SAAS,EAAE;QAAC;QACpE,IAAIC,WAAW,MAAM,IACjB,OAAO;QAGX,MAAMC,OAAOD,WAAW,KAAK;QAI7B,MAAME,UAAoB,EAAE;QAC5B,MAAMC,UAAoB,EAAE;QAE5BD,QAAQ,IAAI,IAAKD,KAAK,KAAK,IAAI,EAAE;QAEjC,MAAMG,kBAAkBF,QAAQ,MAAM,CAACG;QACvC,MAAMC,iBAAiBC,MAAM,IAAI,CAAC,IAAIC,IAAIJ;QAE1C,MAAMK,cAA8B,EAAE;QAEtC,IAAIH,eAAe,MAAM,GAAG,GAAG;YAC3B,MAAMI,cAAc,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;gBAChD,OAAO;oBAAE,OAAOJ;gBAAe;YACnC;YAEA,MAAMK,mBAAmBD,YAAY,IAAI,KAAKA,YAAY,KAAK,GAAG,EAAE;YACpED,YAAY,IAAI,IAAIE;QACxB;QAEA,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI;YAC/BR,QAAQ,IAAI,IAAKF,KAAK,KAAK,IAAI,EAAE;YAEjC,MAAMW,kBAAkBT,QAAQ,MAAM,CAACE;YACvC,MAAMQ,iBAAiBN,MAAM,IAAI,CAAC,IAAIC,IAAII;YAE1C,IAAIC,eAAe,MAAM,GAAG,GAAG;gBAC3B,MAAMC,cAAc,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;oBAChD,OAAO;wBAAE,OAAOD;oBAAe;gBACnC;gBAEA,MAAME,cAAcD,YAAY,IAAI,KAAKA,YAAY,KAAK,GAAG,EAAE;gBAI/D,MAAME,mBAAmBD,YACpB,OAAO,CAACE,CAAAA,OAAQA,KAAK,KAAK,EAC1B,MAAM,CAACC,CAAAA;oBACJ,MAAMC,gBAAgBV,YAAY,IAAI,CAACW,CAAAA,OAAQA,KAAK,EAAE,KAAKF;oBAC3D,OAAO,CAACC;gBACZ;gBAEJ,IAAIH,iBAAiB,MAAM,GAAG,GAAG;oBAC7B,MAAMK,kBAAkB,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;wBACpD,OAAO;4BAAE,OAAOL;wBAAiB;oBACrC;oBAEA,MAAMM,iBAAiBD,gBAAgB,IAAI,KAAKA,gBAAgB,KAAK,GAAG,EAAE;oBAC1EZ,YAAY,IAAI,IAAIa;gBACxB;YACJ;QACJ;QAEA,IAAIb,YAAY,MAAM,GAAG,GACrB,OAAOc,wBAAwBd;QAGnC,OAAO;IACX;AACJ;AAEO,MAAMe,6BAA6BC,qBAAqB,oBAAoB,CAAC;IAChF,gBAAgB/B;IAChB,cAAc;QAACgC;QAAYC;QAAsBC;QAAiBC;KAAgB;AACtF"}

package/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.d.ts

@@ -0,0 +1,17 @@
+import { Authorizer } from "../../../../features/security/authorization/Authorizer/index.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+import type { SecurityPermission } from "../../../../types/security.js";
+import { TenantContext } from "../../../../features/tenancy/TenantContext/index.js";
+import { GetTenantByIdUseCase } from "../../../../features/tenancy/GetTenantById/index.js";
+import { PermissionsProcessor } from "./abstractions.js";
+declare class GroupsTeamsAuthorizerImpl implements Authorizer.Interface {
+    private readonly tenantContext;
+    private readonly getTenantByIdUseCase;
+    private readonly permissionsProcessor;
+    constructor(tenantContext: TenantContext.Interface, getTenantByIdUseCase: GetTenantByIdUseCase.Interface, permissionsProcessor: PermissionsProcessor.Interface);
+    authorize(identity: Identity): Promise<SecurityPermission[] | null>;
+}
+export declare const RolesTeamsAuthorizer: typeof GroupsTeamsAuthorizerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("~/features/security/authorization/Authorizer/index.js").IAuthorizer>;
+};
+export {};

package/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.js

@@ -0,0 +1,37 @@
+import { Authorizer } from "../Authorizer/index.js";
+import { TenantContext } from "../../../tenancy/TenantContext/index.js";
+import { GetTenantByIdUseCase } from "../../../tenancy/GetTenantById/index.js";
+import { PermissionsProcessor } from "./abstractions.js";
+class GroupsTeamsAuthorizerImpl {
+    constructor(tenantContext, getTenantByIdUseCase, permissionsProcessor){
+        this.tenantContext = tenantContext;
+        this.getTenantByIdUseCase = getTenantByIdUseCase;
+        this.permissionsProcessor = permissionsProcessor;
+    }
+    async authorize(identity) {
+        const tenant = this.tenantContext.getTenant();
+        if (identity.isAnonymous() || "admin" !== identity.type) return null;
+        if (!identity.context.canAccessTenant) return null;
+        const currentTenantPermissions = await this.permissionsProcessor.getPermissions(identity);
+        if (Array.isArray(currentTenantPermissions)) return currentTenantPermissions;
+        const parentTenantId = tenant.parent;
+        if (!parentTenantId) return null;
+        const result = await this.getTenantByIdUseCase.execute(parentTenantId);
+        if (result.isFail()) return null;
+        const parentTenant = result.value;
+        const parentTenantPermissions = await this.tenantContext.withTenant(parentTenant, ()=>this.permissionsProcessor.getPermissions(identity));
+        if (Array.isArray(parentTenantPermissions)) return parentTenantPermissions;
+        return null;
+    }
+}
+const RolesTeamsAuthorizer = Authorizer.createImplementation({
+    implementation: GroupsTeamsAuthorizerImpl,
+    dependencies: [
+        TenantContext,
+        GetTenantByIdUseCase,
+        PermissionsProcessor
+    ]
+});
+export { RolesTeamsAuthorizer };
+
+//# sourceMappingURL=RolesTeamsAuthorizer.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.js","sources":["../../../../../src/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.ts"],"sourcesContent":["import { Authorizer } from \"~/features/security/authorization/Authorizer/index.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { GetTenantByIdUseCase } from \"~/features/tenancy/GetTenantById/index.js\";\nimport { PermissionsProcessor } from \"./abstractions.js\";\n\nclass GroupsTeamsAuthorizerImpl implements Authorizer.Interface {\n    constructor(\n        private readonly tenantContext: TenantContext.Interface,\n        private readonly getTenantByIdUseCase: GetTenantByIdUseCase.Interface,\n        private readonly permissionsProcessor: PermissionsProcessor.Interface\n    ) {}\n\n    async authorize(identity: Identity): Promise<SecurityPermission[] | null> {\n        const tenant = this.tenantContext.getTenant();\n\n        if (identity.isAnonymous() || identity.type !== \"admin\") {\n            return null;\n        }\n\n        if (!identity.context.canAccessTenant) {\n            return null;\n        }\n\n        const currentTenantPermissions = await this.permissionsProcessor.getPermissions(identity);\n\n        if (Array.isArray(currentTenantPermissions)) {\n            return currentTenantPermissions;\n        }\n\n        // If no security roles were found, it could be due to an identity accessing a sub-tenant. In this case,\n        // let's try loading permissions from the parent tenant. Note that this will work well for flat tenant\n        // hierarchy where there's a `root` tenant and 1 level of sibling sub-tenants. For multi-level hierarchy,\n        // the best approach is to code a plugin with the desired permissions-fetching logic.\n        const parentTenantId = tenant.parent;\n        if (!parentTenantId) {\n            return null;\n        }\n\n        const result = await this.getTenantByIdUseCase.execute(parentTenantId);\n        if (result.isFail()) {\n            return null;\n        }\n\n        const parentTenant = result.value;\n\n        const parentTenantPermissions = await this.tenantContext.withTenant(parentTenant, () => {\n            return this.permissionsProcessor.getPermissions(identity);\n        });\n\n        if (Array.isArray(parentTenantPermissions)) {\n            return parentTenantPermissions;\n        }\n\n        return null;\n    }\n}\n\nexport const RolesTeamsAuthorizer = Authorizer.createImplementation({\n    implementation: GroupsTeamsAuthorizerImpl,\n    dependencies: [TenantContext, GetTenantByIdUseCase, PermissionsProcessor]\n});\n"],"names":["GroupsTeamsAuthorizerImpl","tenantContext","getTenantByIdUseCase","permissionsProcessor","identity","tenant","currentTenantPermissions","Array","parentTenantId","result","parentTenant","parentTenantPermissions","RolesTeamsAuthorizer","Authorizer","TenantContext","GetTenantByIdUseCase","PermissionsProcessor"],"mappings":";;;;AAOA,MAAMA;IACF,YACqBC,aAAsC,EACtCC,oBAAoD,EACpDC,oBAAoD,CACvE;aAHmBF,aAAa,GAAbA;aACAC,oBAAoB,GAApBA;aACAC,oBAAoB,GAApBA;IAClB;IAEH,MAAM,UAAUC,QAAkB,EAAwC;QACtE,MAAMC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;QAE3C,IAAID,SAAS,WAAW,MAAMA,AAAkB,YAAlBA,SAAS,IAAI,EACvC,OAAO;QAGX,IAAI,CAACA,SAAS,OAAO,CAAC,eAAe,EACjC,OAAO;QAGX,MAAME,2BAA2B,MAAM,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAACF;QAEhF,IAAIG,MAAM,OAAO,CAACD,2BACd,OAAOA;QAOX,MAAME,iBAAiBH,OAAO,MAAM;QACpC,IAAI,CAACG,gBACD,OAAO;QAGX,MAAMC,SAAS,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAACD;QACvD,IAAIC,OAAO,MAAM,IACb,OAAO;QAGX,MAAMC,eAAeD,OAAO,KAAK;QAEjC,MAAME,0BAA0B,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAACD,cAAc,IACvE,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAACN;QAGpD,IAAIG,MAAM,OAAO,CAACI,0BACd,OAAOA;QAGX,OAAO;IACX;AACJ;AAEO,MAAMC,uBAAuBC,WAAW,oBAAoB,CAAC;IAChE,gBAAgBb;IAChB,cAAc;QAACc;QAAeC;QAAsBC;KAAqB;AAC7E"}

package/features/security/authorization/GroupsTeamsAuthorizer/abstractions.d.ts

@@ -0,0 +1,13 @@
+import type { SecurityPermission } from "../../../../types/security.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+export interface ITenantPermission extends SecurityPermission {
+    _src: string;
+}
+export interface IPermissionsProcessor {
+    getPermissions(identity: Identity): Promise<ITenantPermission[] | null>;
+}
+export declare const PermissionsProcessor: import("@webiny/di").Abstraction<IPermissionsProcessor>;
+export declare namespace PermissionsProcessor {
+    type Interface = IPermissionsProcessor;
+    type Permissions = ITenantPermission[];
+}

package/features/security/authorization/GroupsTeamsAuthorizer/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const PermissionsProcessor = createAbstraction("PermissionsProcessor");
+export { PermissionsProcessor };
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authorization/GroupsTeamsAuthorizer/abstractions.js","sources":["../../../../../src/features/security/authorization/GroupsTeamsAuthorizer/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface ITenantPermission extends SecurityPermission {\n    _src: string;\n}\n\nexport interface IPermissionsProcessor {\n    getPermissions(identity: Identity): Promise<ITenantPermission[] | null>;\n}\n\nexport const PermissionsProcessor =\n    createAbstraction<IPermissionsProcessor>(\"PermissionsProcessor\");\n\nexport namespace PermissionsProcessor {\n    export type Interface = IPermissionsProcessor;\n    export type Permissions = ITenantPermission[];\n}\n"],"names":["PermissionsProcessor","createAbstraction"],"mappings":";AAYO,MAAMA,uBACTC,kBAAyC"}

package/features/security/authorization/GroupsTeamsAuthorizer/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const GroupsTeamsAuthorizerFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/security/authorization/GroupsTeamsAuthorizer/feature.js

@@ -0,0 +1,13 @@
+import { createFeature } from "@webiny/feature/api";
+import { RolesTeamsAuthorizer } from "./RolesTeamsAuthorizer.js";
+import { GetPermissionsFromIdentity } from "./GetPermissionsFromIdentity.js";
+const GroupsTeamsAuthorizerFeature = createFeature({
+    name: "GroupsTeamsAuthorizer",
+    register (container) {
+        container.register(RolesTeamsAuthorizer).inSingletonScope();
+        container.register(GetPermissionsFromIdentity);
+    }
+});
+export { GroupsTeamsAuthorizerFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/authorization/GroupsTeamsAuthorizer/feature.js","sources":["../../../../../src/features/security/authorization/GroupsTeamsAuthorizer/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { RolesTeamsAuthorizer } from \"./RolesTeamsAuthorizer.js\";\nimport { GetPermissionsFromIdentity } from \"./GetPermissionsFromIdentity.js\";\n\nexport const GroupsTeamsAuthorizerFeature = createFeature({\n    name: \"GroupsTeamsAuthorizer\",\n    register(container) {\n        container.register(RolesTeamsAuthorizer).inSingletonScope();\n        container.register(GetPermissionsFromIdentity);\n    }\n});\n"],"names":["GroupsTeamsAuthorizerFeature","createFeature","container","RolesTeamsAuthorizer","GetPermissionsFromIdentity"],"mappings":";;;AAIO,MAAMA,+BAA+BC,cAAc;IACtD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC,sBAAsB,gBAAgB;QACzDD,UAAU,QAAQ,CAACE;IACvB;AACJ"}

package/features/security/login/abstractions.d.ts

@@ -0,0 +1,16 @@
+import { DomainEvent } from "../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../features/eventPublisher/index.js";
+import { Identity } from "../../../features/security/IdentityContext/index.js";
+export interface AfterLoginPayload {
+    identity: Identity;
+}
+export declare class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {
+    eventType: "login.afterLogin";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<AfterLoginEvent>>;
+}
+/** Hook into login lifecycle after a user logs in. */
+export declare const AfterLoginEventHandler: import("@webiny/di").Abstraction<IEventHandler<AfterLoginEvent>>;
+export declare namespace AfterLoginEventHandler {
+    type Interface = IEventHandler<AfterLoginEvent>;
+    type Event = AfterLoginEvent;
+}

package/features/security/login/abstractions.js

@@ -0,0 +1,14 @@
+import { DomainEvent } from "../../eventPublisher/index.js";
+import { createAbstraction } from "@webiny/feature/api";
+class AfterLoginEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return AfterLoginEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "login.afterLogin";
+    }
+}
+const AfterLoginEventHandler = createAbstraction("AfterLoginEventHandler");
+export { AfterLoginEvent, AfterLoginEventHandler };
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/login/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/login/abstractions.js","sources":["../../../../src/features/security/login/abstractions.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface AfterLoginPayload {\n    identity: Identity;\n}\n\nexport class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {\n    eventType = \"login.afterLogin\" as const;\n\n    getHandlerAbstraction() {\n        return AfterLoginEventHandler;\n    }\n}\n\n/** Hook into login lifecycle after a user logs in. */\nexport const AfterLoginEventHandler =\n    createAbstraction<IEventHandler<AfterLoginEvent>>(\"AfterLoginEventHandler\");\n\nexport namespace AfterLoginEventHandler {\n    export type Interface = IEventHandler<AfterLoginEvent>;\n    export type Event = AfterLoginEvent;\n}\n"],"names":["AfterLoginEvent","DomainEvent","AfterLoginEventHandler","createAbstraction"],"mappings":";;AASO,MAAMA,wBAAwBC;IAGjC,wBAAwB;QACpB,OAAOC;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,yBACTC,kBAAkD"}

package/features/security/login/index.d.ts

@@ -0,0 +1 @@
+export * from "./abstractions.js";