@webiny/api-core 0.0.0-unstable.61c048f412

package/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.d.ts

@@ -0,0 +1,23 @@
+import { WcpContext } from "../../../../features/wcp/WcpContext/index.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+import { PermissionsProcessor } from "./abstractions.js";
+import { RolesRepository } from "../../../../features/security/roles/shared/abstractions.js";
+import { TeamsRepository } from "../../../../features/security/teams/shared/abstractions.js";
+import { AdminUsersRepository } from "../../../../features/users/shared/abstractions.js";
+export type RoleId = string | undefined;
+export type TeamId = string | undefined;
+declare class GetPermissionsFromGroupsAndTeamsImpl implements PermissionsProcessor.Interface {
+    private wcpContext;
+    private usersRepository;
+    private rolesRepository;
+    private teamsRepository;
+    constructor(wcpContext: WcpContext.Interface, usersRepository: AdminUsersRepository.Interface, rolesRepository: RolesRepository.Interface, teamsRepository: TeamsRepository.Interface);
+    getPermissions(identity: Identity): Promise<{
+        _src: string;
+        name: string;
+    }[] | null>;
+}
+export declare const GetPermissionsFromIdentity: typeof GetPermissionsFromGroupsAndTeamsImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").IPermissionsProcessor>;
+};
+export {};

package/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.js

@@ -0,0 +1,80 @@
+import { WcpContext } from "../../../wcp/WcpContext/index.js";
+import { PermissionsProcessor } from "./abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
+import { TeamsRepository } from "../../teams/shared/abstractions.js";
+import { getPermissionsFromRoles } from "../../utils/getPermissionsFromRoles.js";
+import { AdminUsersRepository } from "../../../users/shared/abstractions.js";
+class GetPermissionsFromGroupsAndTeamsImpl {
+  constructor(wcpContext, usersRepository, rolesRepository, teamsRepository) {
+    this.wcpContext = wcpContext;
+    this.usersRepository = usersRepository;
+    this.rolesRepository = rolesRepository;
+    this.teamsRepository = teamsRepository;
+  }
+  async getPermissions(identity) {
+    const userResult = await this.usersRepository.get({
+      id: identity.id
+    });
+    if (userResult.isFail()) {
+      return null;
+    }
+    const user = userResult.value;
+
+    // Load roles that are associated with the current identity. Also load roles
+    // that are assigned via one or more teams (if the Teams feature is enabled).
+    const roleIds = [];
+    const teamIds = [];
+    roleIds.push(...(user.roles ?? []));
+    const filteredRoleIds = roleIds.filter(Boolean);
+    const dedupedRoleIds = Array.from(new Set(filteredRoleIds));
+    const loadedRoles = [];
+    if (dedupedRoleIds.length > 0) {
+      const rolesResult = await this.rolesRepository.list({
+        where: {
+          id_in: dedupedRoleIds
+        }
+      });
+      const loadedRolesByIds = rolesResult.isOk() ? rolesResult.value : [];
+      loadedRoles.push(...loadedRolesByIds);
+    }
+    if (this.wcpContext.canUseTeams()) {
+      teamIds.push(...(user.teams ?? []));
+      const filteredTeamIds = teamIds.filter(Boolean);
+      const dedupedTeamIds = Array.from(new Set(filteredTeamIds));
+      if (dedupedTeamIds.length > 0) {
+        const teamsResult = await this.teamsRepository.list({
+          where: {
+            id_in: dedupedTeamIds
+          }
+        });
+        const loadedTeams = teamsResult.isOk() ? teamsResult.value : [];
+
+        // Upon returning teams, we're filtering out team roles that were already loaded.
+        // Also note that `team.roles` contains role IDs, not slugs.
+        const roleIdsFromTeams = loadedTeams.flatMap(team => team.roles).filter(roleId => {
+          const alreadyLoaded = loadedRoles.find(role => role.id === roleId);
+          return !alreadyLoaded;
+        });
+        if (roleIdsFromTeams.length > 0) {
+          const moreRolesResult = await this.rolesRepository.list({
+            where: {
+              id_in: roleIdsFromTeams
+            }
+          });
+          const rolesFromTeams = moreRolesResult.isOk() ? moreRolesResult.value : [];
+          loadedRoles.push(...rolesFromTeams);
+        }
+      }
+    }
+    if (loadedRoles.length > 0) {
+      return getPermissionsFromRoles(loadedRoles);
+    }
+    return null;
+  }
+}
+export const GetPermissionsFromIdentity = PermissionsProcessor.createImplementation({
+  implementation: GetPermissionsFromGroupsAndTeamsImpl,
+  dependencies: [WcpContext, AdminUsersRepository, RolesRepository, TeamsRepository]
+});
+
+//# sourceMappingURL=GetPermissionsFromIdentity.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WcpContext","PermissionsProcessor","RolesRepository","TeamsRepository","getPermissionsFromRoles","AdminUsersRepository","GetPermissionsFromGroupsAndTeamsImpl","constructor","wcpContext","usersRepository","rolesRepository","teamsRepository","getPermissions","identity","userResult","get","id","isFail","user","value","roleIds","teamIds","push","roles","filteredRoleIds","filter","Boolean","dedupedRoleIds","Array","from","Set","loadedRoles","length","rolesResult","list","where","id_in","loadedRolesByIds","isOk","canUseTeams","teams","filteredTeamIds","dedupedTeamIds","teamsResult","loadedTeams","roleIdsFromTeams","flatMap","team","roleId","alreadyLoaded","find","role","moreRolesResult","rolesFromTeams","GetPermissionsFromIdentity","createImplementation","implementation","dependencies"],"sources":["GetPermissionsFromIdentity.ts"],"sourcesContent":["import { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\nimport type { SecurityRole } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\nimport { PermissionsProcessor } from \"./abstractions.js\";\nimport { RolesRepository } from \"~/features/security/roles/shared/abstractions.js\";\nimport { TeamsRepository } from \"~/features/security/teams/shared/abstractions.js\";\nimport { getPermissionsFromRoles } from \"~/features/security/utils/getPermissionsFromRoles.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\n\nexport type RoleId = string | undefined;\nexport type TeamId = string | undefined;\n\nclass GetPermissionsFromGroupsAndTeamsImpl implements PermissionsProcessor.Interface {\n    constructor(\n        private wcpContext: WcpContext.Interface,\n        private usersRepository: AdminUsersRepository.Interface,\n        private rolesRepository: RolesRepository.Interface,\n        private teamsRepository: TeamsRepository.Interface\n    ) {}\n\n    async getPermissions(identity: Identity) {\n        const userResult = await this.usersRepository.get({ id: identity.id });\n        if (userResult.isFail()) {\n            return null;\n        }\n\n        const user = userResult.value;\n\n        // Load roles that are associated with the current identity. Also load roles\n        // that are assigned via one or more teams (if the Teams feature is enabled).\n        const roleIds: RoleId[] = [];\n        const teamIds: TeamId[] = [];\n\n        roleIds.push(...(user.roles ?? []));\n\n        const filteredRoleIds = roleIds.filter(Boolean) as string[];\n        const dedupedRoleIds = Array.from(new Set(filteredRoleIds));\n\n        const loadedRoles: SecurityRole[] = [];\n\n        if (dedupedRoleIds.length > 0) {\n            const rolesResult = await this.rolesRepository.list({\n                where: { id_in: dedupedRoleIds }\n            });\n\n            const loadedRolesByIds = rolesResult.isOk() ? rolesResult.value : [];\n            loadedRoles.push(...loadedRolesByIds);\n        }\n\n        if (this.wcpContext.canUseTeams()) {\n            teamIds.push(...(user.teams ?? []));\n\n            const filteredTeamIds = teamIds.filter(Boolean) as string[];\n            const dedupedTeamIds = Array.from(new Set(filteredTeamIds));\n\n            if (dedupedTeamIds.length > 0) {\n                const teamsResult = await this.teamsRepository.list({\n                    where: { id_in: dedupedTeamIds }\n                });\n\n                const loadedTeams = teamsResult.isOk() ? teamsResult.value : [];\n\n                // Upon returning teams, we're filtering out team roles that were already loaded.\n                // Also note that `team.roles` contains role IDs, not slugs.\n                const roleIdsFromTeams = loadedTeams\n                    .flatMap(team => team.roles)\n                    .filter(roleId => {\n                        const alreadyLoaded = loadedRoles.find(role => role.id === roleId);\n                        return !alreadyLoaded;\n                    });\n\n                if (roleIdsFromTeams.length > 0) {\n                    const moreRolesResult = await this.rolesRepository.list({\n                        where: { id_in: roleIdsFromTeams }\n                    });\n\n                    const rolesFromTeams = moreRolesResult.isOk() ? moreRolesResult.value : [];\n                    loadedRoles.push(...rolesFromTeams);\n                }\n            }\n        }\n\n        if (loadedRoles.length > 0) {\n            return getPermissionsFromRoles(loadedRoles);\n        }\n\n        return null;\n    }\n}\n\nexport const GetPermissionsFromIdentity = PermissionsProcessor.createImplementation({\n    implementation: GetPermissionsFromGroupsAndTeamsImpl,\n    dependencies: [WcpContext, AdminUsersRepository, RolesRepository, TeamsRepository]\n});\n"],"mappings":"AAAA,SAASA,UAAU;AAGnB,SAASC,oBAAoB;AAC7B,SAASC,eAAe;AACxB,SAASC,eAAe;AACxB,SAASC,uBAAuB;AAChC,SAASC,oBAAoB;AAK7B,MAAMC,oCAAoC,CAA2C;EACjFC,WAAWA,CACCC,UAAgC,EAChCC,eAA+C,EAC/CC,eAA0C,EAC1CC,eAA0C,EACpD;IAAA,KAJUH,UAAgC,GAAhCA,UAAgC;IAAA,KAChCC,eAA+C,GAA/CA,eAA+C;IAAA,KAC/CC,eAA0C,GAA1CA,eAA0C;IAAA,KAC1CC,eAA0C,GAA1CA,eAA0C;EACnD;EAEH,MAAMC,cAAcA,CAACC,QAAkB,EAAE;IACrC,MAAMC,UAAU,GAAG,MAAM,IAAI,CAACL,eAAe,CAACM,GAAG,CAAC;MAAEC,EAAE,EAAEH,QAAQ,CAACG;IAAG,CAAC,CAAC;IACtE,IAAIF,UAAU,CAACG,MAAM,CAAC,CAAC,EAAE;MACrB,OAAO,IAAI;IACf;IAEA,MAAMC,IAAI,GAAGJ,UAAU,CAACK,KAAK;;IAE7B;IACA;IACA,MAAMC,OAAiB,GAAG,EAAE;IAC5B,MAAMC,OAAiB,GAAG,EAAE;IAE5BD,OAAO,CAACE,IAAI,CAAC,IAAIJ,IAAI,CAACK,KAAK,IAAI,EAAE,CAAC,CAAC;IAEnC,MAAMC,eAAe,GAAGJ,OAAO,CAACK,MAAM,CAACC,OAAO,CAAa;IAC3D,MAAMC,cAAc,GAAGC,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAACN,eAAe,CAAC,CAAC;IAE3D,MAAMO,WAA2B,GAAG,EAAE;IAEtC,IAAIJ,cAAc,CAACK,MAAM,GAAG,CAAC,EAAE;MAC3B,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACvB,eAAe,CAACwB,IAAI,CAAC;QAChDC,KAAK,EAAE;UAAEC,KAAK,EAAET;QAAe;MACnC,CAAC,CAAC;MAEF,MAAMU,gBAAgB,GAAGJ,WAAW,CAACK,IAAI,CAAC,CAAC,GAAGL,WAAW,CAACd,KAAK,GAAG,EAAE;MACpEY,WAAW,CAACT,IAAI,CAAC,GAAGe,gBAAgB,CAAC;IACzC;IAEA,IAAI,IAAI,CAAC7B,UAAU,CAAC+B,WAAW,CAAC,CAAC,EAAE;MAC/BlB,OAAO,CAACC,IAAI,CAAC,IAAIJ,IAAI,CAACsB,KAAK,IAAI,EAAE,CAAC,CAAC;MAEnC,MAAMC,eAAe,GAAGpB,OAAO,CAACI,MAAM,CAACC,OAAO,CAAa;MAC3D,MAAMgB,cAAc,GAAGd,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAACW,eAAe,CAAC,CAAC;MAE3D,IAAIC,cAAc,CAACV,MAAM,GAAG,CAAC,EAAE;QAC3B,MAAMW,WAAW,GAAG,MAAM,IAAI,CAAChC,eAAe,CAACuB,IAAI,CAAC;UAChDC,KAAK,EAAE;YAAEC,KAAK,EAAEM;UAAe;QACnC,CAAC,CAAC;QAEF,MAAME,WAAW,GAAGD,WAAW,CAACL,IAAI,CAAC,CAAC,GAAGK,WAAW,CAACxB,KAAK,GAAG,EAAE;;QAE/D;QACA;QACA,MAAM0B,gBAAgB,GAAGD,WAAW,CAC/BE,OAAO,CAACC,IAAI,IAAIA,IAAI,CAACxB,KAAK,CAAC,CAC3BE,MAAM,CAACuB,MAAM,IAAI;UACd,MAAMC,aAAa,GAAGlB,WAAW,CAACmB,IAAI,CAACC,IAAI,IAAIA,IAAI,CAACnC,EAAE,KAAKgC,MAAM,CAAC;UAClE,OAAO,CAACC,aAAa;QACzB,CAAC,CAAC;QAEN,IAAIJ,gBAAgB,CAACb,MAAM,GAAG,CAAC,EAAE;UAC7B,MAAMoB,eAAe,GAAG,MAAM,IAAI,CAAC1C,eAAe,CAACwB,IAAI,CAAC;YACpDC,KAAK,EAAE;cAAEC,KAAK,EAAES;YAAiB;UACrC,CAAC,CAAC;UAEF,MAAMQ,cAAc,GAAGD,eAAe,CAACd,IAAI,CAAC,CAAC,GAAGc,eAAe,CAACjC,KAAK,GAAG,EAAE;UAC1EY,WAAW,CAACT,IAAI,CAAC,GAAG+B,cAAc,CAAC;QACvC;MACJ;IACJ;IAEA,IAAItB,WAAW,CAACC,MAAM,GAAG,CAAC,EAAE;MACxB,OAAO5B,uBAAuB,CAAC2B,WAAW,CAAC;IAC/C;IAEA,OAAO,IAAI;EACf;AACJ;AAEA,OAAO,MAAMuB,0BAA0B,GAAGrD,oBAAoB,CAACsD,oBAAoB,CAAC;EAChFC,cAAc,EAAElD,oCAAoC;EACpDmD,YAAY,EAAE,CAACzD,UAAU,EAAEK,oBAAoB,EAAEH,eAAe,EAAEC,eAAe;AACrF,CAAC,CAAC","ignoreList":[]}

package/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.d.ts

@@ -0,0 +1,17 @@
+import { Authorizer } from "../../../../features/security/authorization/Authorizer/index.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+import type { SecurityPermission } from "../../../../types/security.js";
+import { TenantContext } from "../../../../features/tenancy/TenantContext/index.js";
+import { GetTenantByIdUseCase } from "../../../../features/tenancy/GetTenantById/index.js";
+import { PermissionsProcessor } from "./abstractions.js";
+declare class GroupsTeamsAuthorizerImpl implements Authorizer.Interface {
+    private readonly tenantContext;
+    private readonly getTenantByIdUseCase;
+    private readonly permissionsProcessor;
+    constructor(tenantContext: TenantContext.Interface, getTenantByIdUseCase: GetTenantByIdUseCase.Interface, permissionsProcessor: PermissionsProcessor.Interface);
+    authorize(identity: Identity): Promise<SecurityPermission[] | null>;
+}
+export declare const RolesTeamsAuthorizer: typeof GroupsTeamsAuthorizerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("~/features/security/authorization/Authorizer/index.js").IAuthorizer>;
+};
+export {};

package/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.js

@@ -0,0 +1,51 @@
+import { Authorizer } from "../Authorizer/index.js";
+import { TenantContext } from "../../../tenancy/TenantContext/index.js";
+import { GetTenantByIdUseCase } from "../../../tenancy/GetTenantById/index.js";
+import { PermissionsProcessor } from "./abstractions.js";
+class GroupsTeamsAuthorizerImpl {
+  constructor(tenantContext, getTenantByIdUseCase, permissionsProcessor) {
+    this.tenantContext = tenantContext;
+    this.getTenantByIdUseCase = getTenantByIdUseCase;
+    this.permissionsProcessor = permissionsProcessor;
+  }
+  async authorize(identity) {
+    const tenant = this.tenantContext.getTenant();
+    if (identity.isAnonymous() || identity.type !== "admin") {
+      return null;
+    }
+    if (!identity.context.canAccessTenant) {
+      return null;
+    }
+    const currentTenantPermissions = await this.permissionsProcessor.getPermissions(identity);
+    if (Array.isArray(currentTenantPermissions)) {
+      return currentTenantPermissions;
+    }
+
+    // If no security roles were found, it could be due to an identity accessing a sub-tenant. In this case,
+    // let's try loading permissions from the parent tenant. Note that this will work well for flat tenant
+    // hierarchy where there's a `root` tenant and 1 level of sibling sub-tenants. For multi-level hierarchy,
+    // the best approach is to code a plugin with the desired permissions-fetching logic.
+    const parentTenantId = tenant.parent;
+    if (!parentTenantId) {
+      return null;
+    }
+    const result = await this.getTenantByIdUseCase.execute(parentTenantId);
+    if (result.isFail()) {
+      return null;
+    }
+    const parentTenant = result.value;
+    const parentTenantPermissions = await this.tenantContext.withTenant(parentTenant, () => {
+      return this.permissionsProcessor.getPermissions(identity);
+    });
+    if (Array.isArray(parentTenantPermissions)) {
+      return parentTenantPermissions;
+    }
+    return null;
+  }
+}
+export const RolesTeamsAuthorizer = Authorizer.createImplementation({
+  implementation: GroupsTeamsAuthorizerImpl,
+  dependencies: [TenantContext, GetTenantByIdUseCase, PermissionsProcessor]
+});
+
+//# sourceMappingURL=RolesTeamsAuthorizer.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Authorizer","TenantContext","GetTenantByIdUseCase","PermissionsProcessor","GroupsTeamsAuthorizerImpl","constructor","tenantContext","getTenantByIdUseCase","permissionsProcessor","authorize","identity","tenant","getTenant","isAnonymous","type","context","canAccessTenant","currentTenantPermissions","getPermissions","Array","isArray","parentTenantId","parent","result","execute","isFail","parentTenant","value","parentTenantPermissions","withTenant","RolesTeamsAuthorizer","createImplementation","implementation","dependencies"],"sources":["RolesTeamsAuthorizer.ts"],"sourcesContent":["import { Authorizer } from \"~/features/security/authorization/Authorizer/index.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { GetTenantByIdUseCase } from \"~/features/tenancy/GetTenantById/index.js\";\nimport { PermissionsProcessor } from \"./abstractions.js\";\n\nclass GroupsTeamsAuthorizerImpl implements Authorizer.Interface {\n    constructor(\n        private readonly tenantContext: TenantContext.Interface,\n        private readonly getTenantByIdUseCase: GetTenantByIdUseCase.Interface,\n        private readonly permissionsProcessor: PermissionsProcessor.Interface\n    ) {}\n\n    async authorize(identity: Identity): Promise<SecurityPermission[] | null> {\n        const tenant = this.tenantContext.getTenant();\n\n        if (identity.isAnonymous() || identity.type !== \"admin\") {\n            return null;\n        }\n\n        if (!identity.context.canAccessTenant) {\n            return null;\n        }\n\n        const currentTenantPermissions = await this.permissionsProcessor.getPermissions(identity);\n\n        if (Array.isArray(currentTenantPermissions)) {\n            return currentTenantPermissions;\n        }\n\n        // If no security roles were found, it could be due to an identity accessing a sub-tenant. In this case,\n        // let's try loading permissions from the parent tenant. Note that this will work well for flat tenant\n        // hierarchy where there's a `root` tenant and 1 level of sibling sub-tenants. For multi-level hierarchy,\n        // the best approach is to code a plugin with the desired permissions-fetching logic.\n        const parentTenantId = tenant.parent;\n        if (!parentTenantId) {\n            return null;\n        }\n\n        const result = await this.getTenantByIdUseCase.execute(parentTenantId);\n        if (result.isFail()) {\n            return null;\n        }\n\n        const parentTenant = result.value;\n\n        const parentTenantPermissions = await this.tenantContext.withTenant(parentTenant, () => {\n            return this.permissionsProcessor.getPermissions(identity);\n        });\n\n        if (Array.isArray(parentTenantPermissions)) {\n            return parentTenantPermissions;\n        }\n\n        return null;\n    }\n}\n\nexport const RolesTeamsAuthorizer = Authorizer.createImplementation({\n    implementation: GroupsTeamsAuthorizerImpl,\n    dependencies: [TenantContext, GetTenantByIdUseCase, PermissionsProcessor]\n});\n"],"mappings":"AAAA,SAASA,UAAU;AAGnB,SAASC,aAAa;AACtB,SAASC,oBAAoB;AAC7B,SAASC,oBAAoB;AAE7B,MAAMC,yBAAyB,CAAiC;EAC5DC,WAAWA,CACUC,aAAsC,EACtCC,oBAAoD,EACpDC,oBAAoD,EACvE;IAAA,KAHmBF,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,oBAAoD,GAApDA,oBAAoD;IAAA,KACpDC,oBAAoD,GAApDA,oBAAoD;EACtE;EAEH,MAAMC,SAASA,CAACC,QAAkB,EAAwC;IACtE,MAAMC,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;IAE7C,IAAIF,QAAQ,CAACG,WAAW,CAAC,CAAC,IAAIH,QAAQ,CAACI,IAAI,KAAK,OAAO,EAAE;MACrD,OAAO,IAAI;IACf;IAEA,IAAI,CAACJ,QAAQ,CAACK,OAAO,CAACC,eAAe,EAAE;MACnC,OAAO,IAAI;IACf;IAEA,MAAMC,wBAAwB,GAAG,MAAM,IAAI,CAACT,oBAAoB,CAACU,cAAc,CAACR,QAAQ,CAAC;IAEzF,IAAIS,KAAK,CAACC,OAAO,CAACH,wBAAwB,CAAC,EAAE;MACzC,OAAOA,wBAAwB;IACnC;;IAEA;IACA;IACA;IACA;IACA,MAAMI,cAAc,GAAGV,MAAM,CAACW,MAAM;IACpC,IAAI,CAACD,cAAc,EAAE;MACjB,OAAO,IAAI;IACf;IAEA,MAAME,MAAM,GAAG,MAAM,IAAI,CAAChB,oBAAoB,CAACiB,OAAO,CAACH,cAAc,CAAC;IACtE,IAAIE,MAAM,CAACE,MAAM,CAAC,CAAC,EAAE;MACjB,OAAO,IAAI;IACf;IAEA,MAAMC,YAAY,GAAGH,MAAM,CAACI,KAAK;IAEjC,MAAMC,uBAAuB,GAAG,MAAM,IAAI,CAACtB,aAAa,CAACuB,UAAU,CAACH,YAAY,EAAE,MAAM;MACpF,OAAO,IAAI,CAAClB,oBAAoB,CAACU,cAAc,CAACR,QAAQ,CAAC;IAC7D,CAAC,CAAC;IAEF,IAAIS,KAAK,CAACC,OAAO,CAACQ,uBAAuB,CAAC,EAAE;MACxC,OAAOA,uBAAuB;IAClC;IAEA,OAAO,IAAI;EACf;AACJ;AAEA,OAAO,MAAME,oBAAoB,GAAG9B,UAAU,CAAC+B,oBAAoB,CAAC;EAChEC,cAAc,EAAE5B,yBAAyB;EACzC6B,YAAY,EAAE,CAAChC,aAAa,EAAEC,oBAAoB,EAAEC,oBAAoB;AAC5E,CAAC,CAAC","ignoreList":[]}

package/features/security/authorization/GroupsTeamsAuthorizer/abstractions.d.ts

@@ -0,0 +1,13 @@
+import type { SecurityPermission } from "../../../../types/security.js";
+import { Identity } from "../../../../features/security/IdentityContext/index.js";
+export interface ITenantPermission extends SecurityPermission {
+    _src: string;
+}
+export interface IPermissionsProcessor {
+    getPermissions(identity: Identity): Promise<ITenantPermission[] | null>;
+}
+export declare const PermissionsProcessor: import("@webiny/di").Abstraction<IPermissionsProcessor>;
+export declare namespace PermissionsProcessor {
+    type Interface = IPermissionsProcessor;
+    type Permissions = ITenantPermission[];
+}

package/features/security/authorization/GroupsTeamsAuthorizer/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const PermissionsProcessor = createAbstraction("PermissionsProcessor");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","PermissionsProcessor"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface ITenantPermission extends SecurityPermission {\n    _src: string;\n}\n\nexport interface IPermissionsProcessor {\n    getPermissions(identity: Identity): Promise<ITenantPermission[] | null>;\n}\n\nexport const PermissionsProcessor =\n    createAbstraction<IPermissionsProcessor>(\"PermissionsProcessor\");\n\nexport namespace PermissionsProcessor {\n    export type Interface = IPermissionsProcessor;\n    export type Permissions = ITenantPermission[];\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAYvD,OAAO,MAAMC,oBAAoB,GAC7BD,iBAAiB,CAAwB,sBAAsB,CAAC","ignoreList":[]}

package/features/security/authorization/GroupsTeamsAuthorizer/feature.d.ts

@@ -0,0 +1 @@
+export declare const GroupsTeamsAuthorizerFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/security/authorization/GroupsTeamsAuthorizer/feature.js

@@ -0,0 +1,12 @@
+import { createFeature } from "@webiny/feature/api";
+import { RolesTeamsAuthorizer } from "./RolesTeamsAuthorizer.js";
+import { GetPermissionsFromIdentity } from "./GetPermissionsFromIdentity.js";
+export const GroupsTeamsAuthorizerFeature = createFeature({
+  name: "GroupsTeamsAuthorizer",
+  register(container) {
+    container.register(RolesTeamsAuthorizer).inSingletonScope();
+    container.register(GetPermissionsFromIdentity);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","RolesTeamsAuthorizer","GetPermissionsFromIdentity","GroupsTeamsAuthorizerFeature","name","register","container","inSingletonScope"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { RolesTeamsAuthorizer } from \"./RolesTeamsAuthorizer.js\";\nimport { GetPermissionsFromIdentity } from \"./GetPermissionsFromIdentity.js\";\n\nexport const GroupsTeamsAuthorizerFeature = createFeature({\n    name: \"GroupsTeamsAuthorizer\",\n    register(container) {\n        container.register(RolesTeamsAuthorizer).inSingletonScope();\n        container.register(GetPermissionsFromIdentity);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,oBAAoB;AAC7B,SAASC,0BAA0B;AAEnC,OAAO,MAAMC,4BAA4B,GAAGH,aAAa,CAAC;EACtDI,IAAI,EAAE,uBAAuB;EAC7BC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACJ,oBAAoB,CAAC,CAACM,gBAAgB,CAAC,CAAC;IAC3DD,SAAS,CAACD,QAAQ,CAACH,0BAA0B,CAAC;EAClD;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/login/abstractions.d.ts

@@ -0,0 +1,15 @@
+import { DomainEvent } from "../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../features/eventPublisher/index.js";
+import { Identity } from "../../../features/security/IdentityContext/index.js";
+export interface AfterLoginPayload {
+    identity: Identity;
+}
+export declare class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {
+    eventType: "login.afterLogin";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<AfterLoginEvent>>;
+}
+export declare const AfterLoginHandler: import("@webiny/di").Abstraction<IEventHandler<AfterLoginEvent>>;
+export declare namespace AfterLoginHandler {
+    type Interface = IEventHandler<AfterLoginEvent>;
+    type Event = AfterLoginEvent;
+}

package/features/security/login/abstractions.js

@@ -0,0 +1,11 @@
+import { DomainEvent } from "../../eventPublisher/index.js";
+import { createAbstraction } from "@webiny/feature/api";
+export class AfterLoginEvent extends DomainEvent {
+  eventType = "login.afterLogin";
+  getHandlerAbstraction() {
+    return AfterLoginHandler;
+  }
+}
+export const AfterLoginHandler = createAbstraction("AfterLoginHandler");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/login/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DomainEvent","createAbstraction","AfterLoginEvent","eventType","getHandlerAbstraction","AfterLoginHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface AfterLoginPayload {\n    identity: Identity;\n}\n\nexport class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {\n    eventType = \"login.afterLogin\" as const;\n\n    getHandlerAbstraction() {\n        return AfterLoginHandler;\n    }\n}\n\nexport const AfterLoginHandler =\n    createAbstraction<IEventHandler<AfterLoginEvent>>(\"AfterLoginHandler\");\n\nexport namespace AfterLoginHandler {\n    export type Interface = IEventHandler<AfterLoginEvent>;\n    export type Event = AfterLoginEvent;\n}\n"],"mappings":"AAAA,SAASA,WAAW;AAEpB,SAASC,iBAAiB,QAAQ,qBAAqB;AAOvD,OAAO,MAAMC,eAAe,SAASF,WAAW,CAAoB;EAChEG,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,iBAAiB;EAC5B;AACJ;AAEA,OAAO,MAAMA,iBAAiB,GAC1BJ,iBAAiB,CAAiC,mBAAmB,CAAC","ignoreList":[]}

package/features/security/login/index.d.ts

@@ -0,0 +1 @@
+export * from "./abstractions.js";

package/features/security/login/index.js

@@ -0,0 +1,3 @@
+export * from "./abstractions.js";
+
+//# sourceMappingURL=index.js.map

package/features/security/login/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./abstractions.js\";\n"],"mappings":"AAAA","ignoreList":[]}

package/features/security/roles/CreateRole/CreateRoleUseCase.d.ts

@@ -0,0 +1,17 @@
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../../features/tenancy/TenantContext/index.js";
+import { EventPublisher } from "../../../../features/eventPublisher/index.js";
+import { CreateRoleUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { IdentityContext } from "../../IdentityContext/abstractions.js";
+import type { Role, CreateRoleInput } from "../shared/types.js";
+declare class CreateRoleUseCaseImpl implements UseCaseAbstraction.Interface {
+    private tenantContext;
+    private identityContext;
+    private eventPublisher;
+    private repository;
+    constructor(tenantContext: TenantContext.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, repository: RolesRepository.Interface);
+    execute(input: CreateRoleInput): Promise<Result<Role, UseCaseAbstraction.Error>>;
+}
+export declare const CreateRoleUseCase: import("@webiny/di").Implementation<typeof CreateRoleUseCaseImpl>;
+export {};

package/features/security/roles/CreateRole/CreateRoleUseCase.js

@@ -0,0 +1,76 @@
+import { mdbid } from "@webiny/utils";
+import { createImplementation } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../tenancy/TenantContext/index.js";
+import { EventPublisher } from "../../../eventPublisher/index.js";
+import { CreateRoleUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { IdentityContext } from "../../IdentityContext/abstractions.js";
+import { createRoleValidation } from "./schema.js";
+import { RoleBeforeCreateEvent, RoleAfterCreateEvent } from "./events.js";
+import { NotAuthorizedError, RoleExistsError, RoleValidationError } from "../shared/errors.js";
+class CreateRoleUseCaseImpl {
+  constructor(tenantContext, identityContext, eventPublisher, repository) {
+    this.tenantContext = tenantContext;
+    this.identityContext = identityContext;
+    this.eventPublisher = eventPublisher;
+    this.repository = repository;
+  }
+  async execute(input) {
+    const hasPermission = await this.identityContext.getPermission("security.role");
+    if (!hasPermission) {
+      return Result.fail(new NotAuthorizedError());
+    }
+    const validation = createRoleValidation.safeParse(input);
+    if (!validation.success) {
+      return Result.fail(new RoleValidationError(validation.error.errors[0].message));
+    }
+    const tenant = this.tenantContext.getTenant();
+    const identity = this.identityContext.getIdentity();
+    const data = validation.data;
+
+    // Check if role with same slug already exists
+    const existingRoleResult = await this.repository.get({
+      slug: data.slug
+    });
+    if (existingRoleResult.isOk()) {
+      return Result.fail(new RoleExistsError(data.slug));
+    }
+    const role = {
+      id: mdbid(),
+      name: data.name,
+      slug: data.slug,
+      description: data.description,
+      permissions: data.permissions,
+      system: input.system || false,
+      tenant: tenant.id,
+      createdOn: new Date().toISOString(),
+      createdBy: {
+        id: identity.id,
+        displayName: identity.displayName,
+        type: identity.type
+      },
+      plugin: false
+    };
+    await this.eventPublisher.publish(new RoleBeforeCreateEvent({
+      role,
+      input: validation.data
+    }));
+    const result = await this.repository.create(role);
+    if (result.isFail()) {
+      return Result.fail(result.error);
+    }
+    await this.eventPublisher.publish(new RoleAfterCreateEvent({
+      role,
+      input: validation.data
+    }));
+    return Result.ok(role);
+  }
+}
+export const CreateRoleUseCase = createImplementation({
+  abstraction: UseCaseAbstraction,
+  implementation: CreateRoleUseCaseImpl,
+  dependencies: [TenantContext, IdentityContext, EventPublisher, RolesRepository]
+});
+
+//# sourceMappingURL=CreateRoleUseCase.js.map

package/features/security/roles/CreateRole/CreateRoleUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["mdbid","createImplementation","Result","TenantContext","EventPublisher","CreateRoleUseCase","UseCaseAbstraction","RolesRepository","IdentityContext","createRoleValidation","RoleBeforeCreateEvent","RoleAfterCreateEvent","NotAuthorizedError","RoleExistsError","RoleValidationError","CreateRoleUseCaseImpl","constructor","tenantContext","identityContext","eventPublisher","repository","execute","input","hasPermission","getPermission","fail","validation","safeParse","success","error","errors","message","tenant","getTenant","identity","getIdentity","data","existingRoleResult","get","slug","isOk","role","id","name","description","permissions","system","createdOn","Date","toISOString","createdBy","displayName","type","plugin","publish","result","create","isFail","ok","abstraction","implementation","dependencies"],"sources":["CreateRoleUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateRoleUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { createRoleValidation } from \"./schema.js\";\nimport { RoleBeforeCreateEvent, RoleAfterCreateEvent } from \"./events.js\";\nimport type { Role, CreateRoleInput } from \"../shared/types.js\";\nimport { NotAuthorizedError, RoleExistsError, RoleValidationError } from \"../shared/errors.js\";\n\nclass CreateRoleUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: RolesRepository.Interface\n    ) {}\n\n    async execute(input: CreateRoleInput): Promise<Result<Role, UseCaseAbstraction.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.role\");\n\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = createRoleValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new RoleValidationError(validation.error.errors[0].message));\n        }\n\n        const tenant = this.tenantContext.getTenant();\n        const identity = this.identityContext.getIdentity();\n        const data = validation.data;\n\n        // Check if role with same slug already exists\n        const existingRoleResult = await this.repository.get({ slug: data.slug });\n        if (existingRoleResult.isOk()) {\n            return Result.fail(new RoleExistsError(data.slug));\n        }\n\n        const role: Role = {\n            id: mdbid(),\n            name: data.name,\n            slug: data.slug,\n            description: data.description,\n            permissions: data.permissions,\n            system: input.system || false,\n            tenant: tenant.id,\n            createdOn: new Date().toISOString(),\n            createdBy: {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            },\n            plugin: false\n        };\n\n        await this.eventPublisher.publish(\n            new RoleBeforeCreateEvent({ role, input: validation.data })\n        );\n\n        const result = await this.repository.create(role);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new RoleAfterCreateEvent({ role, input: validation.data })\n        );\n\n        return Result.ok(role);\n    }\n}\n\nexport const CreateRoleUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: CreateRoleUseCaseImpl,\n    dependencies: [TenantContext, IdentityContext, EventPublisher, RolesRepository]\n});\n"],"mappings":"AAAA,SAASA,KAAK,QAAQ,eAAe;AACrC,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,aAAa;AACtB,SAASC,cAAc;AACvB,SAASC,iBAAiB,IAAIC,kBAAkB;AAChD,SAASC,eAAe;AACxB,SAASC,eAAe;AACxB,SAASC,oBAAoB;AAC7B,SAASC,qBAAqB,EAAEC,oBAAoB;AAEpD,SAASC,kBAAkB,EAAEC,eAAe,EAAEC,mBAAmB;AAEjE,MAAMC,qBAAqB,CAAyC;EAChEC,WAAWA,CACCC,aAAsC,EACtCC,eAA0C,EAC1CC,cAAwC,EACxCC,UAAqC,EAC/C;IAAA,KAJUH,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,eAA0C,GAA1CA,eAA0C;IAAA,KAC1CC,cAAwC,GAAxCA,cAAwC;IAAA,KACxCC,UAAqC,GAArCA,UAAqC;EAC9C;EAEH,MAAMC,OAAOA,CAACC,KAAsB,EAAmD;IACnF,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACL,eAAe,CAACM,aAAa,CAAC,eAAe,CAAC;IAE/E,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOrB,MAAM,CAACuB,IAAI,CAAC,IAAIb,kBAAkB,CAAC,CAAC,CAAC;IAChD;IAEA,MAAMc,UAAU,GAAGjB,oBAAoB,CAACkB,SAAS,CAACL,KAAK,CAAC;IACxD,IAAI,CAACI,UAAU,CAACE,OAAO,EAAE;MACrB,OAAO1B,MAAM,CAACuB,IAAI,CAAC,IAAIX,mBAAmB,CAACY,UAAU,CAACG,KAAK,CAACC,MAAM,CAAC,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC;IACnF;IAEA,MAAMC,MAAM,GAAG,IAAI,CAACf,aAAa,CAACgB,SAAS,CAAC,CAAC;IAC7C,MAAMC,QAAQ,GAAG,IAAI,CAAChB,eAAe,CAACiB,WAAW,CAAC,CAAC;IACnD,MAAMC,IAAI,GAAGV,UAAU,CAACU,IAAI;;IAE5B;IACA,MAAMC,kBAAkB,GAAG,MAAM,IAAI,CAACjB,UAAU,CAACkB,GAAG,CAAC;MAAEC,IAAI,EAAEH,IAAI,CAACG;IAAK,CAAC,CAAC;IACzE,IAAIF,kBAAkB,CAACG,IAAI,CAAC,CAAC,EAAE;MAC3B,OAAOtC,MAAM,CAACuB,IAAI,CAAC,IAAIZ,eAAe,CAACuB,IAAI,CAACG,IAAI,CAAC,CAAC;IACtD;IAEA,MAAME,IAAU,GAAG;MACfC,EAAE,EAAE1C,KAAK,CAAC,CAAC;MACX2C,IAAI,EAAEP,IAAI,CAACO,IAAI;MACfJ,IAAI,EAAEH,IAAI,CAACG,IAAI;MACfK,WAAW,EAAER,IAAI,CAACQ,WAAW;MAC7BC,WAAW,EAAET,IAAI,CAACS,WAAW;MAC7BC,MAAM,EAAExB,KAAK,CAACwB,MAAM,IAAI,KAAK;MAC7Bd,MAAM,EAAEA,MAAM,CAACU,EAAE;MACjBK,SAAS,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MACnCC,SAAS,EAAE;QACPR,EAAE,EAAER,QAAQ,CAACQ,EAAE;QACfS,WAAW,EAAEjB,QAAQ,CAACiB,WAAW;QACjCC,IAAI,EAAElB,QAAQ,CAACkB;MACnB,CAAC;MACDC,MAAM,EAAE;IACZ,CAAC;IAED,MAAM,IAAI,CAAClC,cAAc,CAACmC,OAAO,CAC7B,IAAI5C,qBAAqB,CAAC;MAAE+B,IAAI;MAAEnB,KAAK,EAAEI,UAAU,CAACU;IAAK,CAAC,CAC9D,CAAC;IAED,MAAMmB,MAAM,GAAG,MAAM,IAAI,CAACnC,UAAU,CAACoC,MAAM,CAACf,IAAI,CAAC;IAEjD,IAAIc,MAAM,CAACE,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOvD,MAAM,CAACuB,IAAI,CAAC8B,MAAM,CAAC1B,KAAK,CAAC;IACpC;IAEA,MAAM,IAAI,CAACV,cAAc,CAACmC,OAAO,CAC7B,IAAI3C,oBAAoB,CAAC;MAAE8B,IAAI;MAAEnB,KAAK,EAAEI,UAAU,CAACU;IAAK,CAAC,CAC7D,CAAC;IAED,OAAOlC,MAAM,CAACwD,EAAE,CAACjB,IAAI,CAAC;EAC1B;AACJ;AAEA,OAAO,MAAMpC,iBAAiB,GAAGJ,oBAAoB,CAAC;EAClD0D,WAAW,EAAErD,kBAAkB;EAC/BsD,cAAc,EAAE7C,qBAAqB;EACrC8C,YAAY,EAAE,CAAC1D,aAAa,EAAEK,eAAe,EAAEJ,cAAc,EAAEG,eAAe;AAClF,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/CreateRole/abstractions.d.ts

@@ -0,0 +1,27 @@
+import { Result } from "@webiny/feature/api";
+import type { Role, CreateRoleInput } from "../shared/types.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { NotAuthorizedError, RoleExistsError, RoleValidationError } from "../shared/errors.js";
+export interface ICreateRoleErrors {
+    notAuthorized: NotAuthorizedError;
+    roleExists: RoleExistsError;
+    validation: RoleValidationError;
+}
+type CreateRoleError = ICreateRoleErrors[keyof ICreateRoleErrors] | RolesRepository.Error;
+export interface ICreateRole {
+    execute(input: CreateRoleInput): Promise<Result<Role, CreateRoleError>>;
+}
+export declare const CreateRoleUseCase: import("@webiny/di").Abstraction<ICreateRole>;
+export declare namespace CreateRoleUseCase {
+    type Interface = ICreateRole;
+    type Error = CreateRoleError;
+}
+export interface RoleBeforeCreatePayload {
+    role: Role;
+    input: CreateRoleInput;
+}
+export interface RoleAfterCreatePayload {
+    role: Role;
+    input: CreateRoleInput;
+}
+export {};

package/features/security/roles/CreateRole/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const CreateRoleUseCase = createAbstraction("CreateRoleUseCase");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/roles/CreateRole/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","CreateRoleUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { Role, CreateRoleInput } from \"../shared/types.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport { NotAuthorizedError, RoleExistsError, RoleValidationError } from \"../shared/errors.js\";\n\nexport interface ICreateRoleErrors {\n    notAuthorized: NotAuthorizedError;\n    roleExists: RoleExistsError;\n    validation: RoleValidationError;\n}\n\ntype CreateRoleError = ICreateRoleErrors[keyof ICreateRoleErrors] | RolesRepository.Error;\n\nexport interface ICreateRole {\n    execute(input: CreateRoleInput): Promise<Result<Role, CreateRoleError>>;\n}\n\nexport const CreateRoleUseCase = createAbstraction<ICreateRole>(\"CreateRoleUseCase\");\n\nexport namespace CreateRoleUseCase {\n    export type Interface = ICreateRole;\n    export type Error = CreateRoleError;\n}\n\nexport interface RoleBeforeCreatePayload {\n    role: Role;\n    input: CreateRoleInput;\n}\n\nexport interface RoleAfterCreatePayload {\n    role: Role;\n    input: CreateRoleInput;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAkBvD,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAc,mBAAmB,CAAC","ignoreList":[]}

package/features/security/roles/CreateRole/events.d.ts

@@ -0,0 +1,21 @@
+import { DomainEvent } from "../../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../../features/eventPublisher/index.js";
+import type { RoleBeforeCreatePayload, RoleAfterCreatePayload } from "./abstractions.js";
+export declare class RoleBeforeCreateEvent extends DomainEvent<RoleBeforeCreatePayload> {
+    eventType: "role.beforeCreate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<RoleBeforeCreateEvent>>;
+}
+export declare const RoleBeforeCreateHandler: import("@webiny/di").Abstraction<IEventHandler<RoleBeforeCreateEvent>>;
+export declare namespace RoleBeforeCreateHandler {
+    type Interface = IEventHandler<RoleBeforeCreateEvent>;
+    type Event = RoleBeforeCreateEvent;
+}
+export declare class RoleAfterCreateEvent extends DomainEvent<RoleAfterCreatePayload> {
+    eventType: "role.afterCreate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<RoleAfterCreateEvent>>;
+}
+export declare const RoleAfterCreateHandler: import("@webiny/di").Abstraction<IEventHandler<RoleAfterCreateEvent>>;
+export declare namespace RoleAfterCreateHandler {
+    type Interface = IEventHandler<RoleAfterCreateEvent>;
+    type Event = RoleAfterCreateEvent;
+}

package/features/security/roles/CreateRole/events.js

@@ -0,0 +1,18 @@
+import { createAbstraction } from "@webiny/feature/api";
+import { DomainEvent } from "../../../eventPublisher/index.js";
+export class RoleBeforeCreateEvent extends DomainEvent {
+  eventType = "role.beforeCreate";
+  getHandlerAbstraction() {
+    return RoleBeforeCreateHandler;
+  }
+}
+export const RoleBeforeCreateHandler = createAbstraction("RoleBeforeCreateHandler");
+export class RoleAfterCreateEvent extends DomainEvent {
+  eventType = "role.afterCreate";
+  getHandlerAbstraction() {
+    return RoleAfterCreateHandler;
+  }
+}
+export const RoleAfterCreateHandler = createAbstraction("RoleAfterCreateHandler");
+
+//# sourceMappingURL=events.js.map

package/features/security/roles/CreateRole/events.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","DomainEvent","RoleBeforeCreateEvent","eventType","getHandlerAbstraction","RoleBeforeCreateHandler","RoleAfterCreateEvent","RoleAfterCreateHandler"],"sources":["events.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { RoleBeforeCreatePayload, RoleAfterCreatePayload } from \"./abstractions.js\";\n\nexport class RoleBeforeCreateEvent extends DomainEvent<RoleBeforeCreatePayload> {\n    eventType = \"role.beforeCreate\" as const;\n\n    getHandlerAbstraction() {\n        return RoleBeforeCreateHandler;\n    }\n}\n\nexport const RoleBeforeCreateHandler =\n    createAbstraction<IEventHandler<RoleBeforeCreateEvent>>(\"RoleBeforeCreateHandler\");\n\nexport namespace RoleBeforeCreateHandler {\n    export type Interface = IEventHandler<RoleBeforeCreateEvent>;\n    export type Event = RoleBeforeCreateEvent;\n}\n\nexport class RoleAfterCreateEvent extends DomainEvent<RoleAfterCreatePayload> {\n    eventType = \"role.afterCreate\" as const;\n\n    getHandlerAbstraction() {\n        return RoleAfterCreateHandler;\n    }\n}\n\nexport const RoleAfterCreateHandler =\n    createAbstraction<IEventHandler<RoleAfterCreateEvent>>(\"RoleAfterCreateHandler\");\n\nexport namespace RoleAfterCreateHandler {\n    export type Interface = IEventHandler<RoleAfterCreateEvent>;\n    export type Event = RoleAfterCreateEvent;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AACvD,SAASC,WAAW;AAIpB,OAAO,MAAMC,qBAAqB,SAASD,WAAW,CAA0B;EAC5EE,SAAS,GAAG,mBAAmB;EAE/BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,uBAAuB;EAClC;AACJ;AAEA,OAAO,MAAMA,uBAAuB,GAChCL,iBAAiB,CAAuC,yBAAyB,CAAC;AAOtF,OAAO,MAAMM,oBAAoB,SAASL,WAAW,CAAyB;EAC1EE,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOG,sBAAsB;EACjC;AACJ;AAEA,OAAO,MAAMA,sBAAsB,GAC/BP,iBAAiB,CAAsC,wBAAwB,CAAC","ignoreList":[]}

package/features/security/roles/CreateRole/feature.d.ts

@@ -0,0 +1 @@
+export declare const CreateRoleFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/security/roles/CreateRole/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { CreateRoleUseCase } from "./CreateRoleUseCase.js";
+export const CreateRoleFeature = createFeature({
+  name: "CreateRole",
+  register(container) {
+    container.register(CreateRoleUseCase);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/security/roles/CreateRole/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","CreateRoleUseCase","CreateRoleFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { CreateRoleUseCase } from \"./CreateRoleUseCase.js\";\n\nexport const CreateRoleFeature = createFeature({\n    name: \"CreateRole\",\n    register(container) {\n        container.register(CreateRoleUseCase);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,iBAAiB;AAE1B,OAAO,MAAMC,iBAAiB,GAAGF,aAAa,CAAC;EAC3CG,IAAI,EAAE,YAAY;EAClBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,iBAAiB,CAAC;EACzC;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/CreateRole/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./abstractions.js";
+export * from "./events.js";

package/features/security/roles/CreateRole/index.js

@@ -0,0 +1,4 @@
+export * from "./abstractions.js";
+export * from "./events.js";
+
+//# sourceMappingURL=index.js.map

package/features/security/roles/CreateRole/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./abstractions.js\";\nexport * from \"./events.js\";\n"],"mappings":"AAAA;AACA","ignoreList":[]}

package/features/security/roles/CreateRole/schema.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export declare const createRoleValidation: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodString;
+    description: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    permissions: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+}, "strip", z.ZodTypeAny, {
+    permissions: z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[];
+    name: string;
+    description: string;
+    slug: string;
+}, {
+    permissions: z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[];
+    name: string;
+    slug: string;
+    description?: string | undefined;
+}>;

package/features/security/roles/CreateRole/schema.js

@@ -0,0 +1,11 @@
+import { z } from "zod";
+export const createRoleValidation = z.object({
+  name: z.string().min(3),
+  slug: z.string().min(3),
+  description: z.string().max(500).optional().default(""),
+  permissions: z.array(z.object({
+    name: z.string()
+  }).passthrough())
+});
+
+//# sourceMappingURL=schema.js.map

package/features/security/roles/CreateRole/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","createRoleValidation","object","name","string","min","slug","description","max","optional","default","permissions","array","passthrough"],"sources":["schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createRoleValidation = z.object({\n    name: z.string().min(3),\n    slug: z.string().min(3),\n    description: z.string().max(500).optional().default(\"\"),\n    permissions: z.array(z.object({ name: z.string() }).passthrough())\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,oBAAoB,GAAGD,CAAC,CAACE,MAAM,CAAC;EACzCC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBC,IAAI,EAAEN,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBE,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACI,GAAG,CAAC,GAAG,CAAC,CAACC,QAAQ,CAAC,CAAC,CAACC,OAAO,CAAC,EAAE,CAAC;EACvDC,WAAW,EAAEX,CAAC,CAACY,KAAK,CAACZ,CAAC,CAACE,MAAM,CAAC;IAAEC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAACS,WAAW,CAAC,CAAC;AACrE,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/DeleteRole/DeleteRoleUseCase.d.ts

@@ -0,0 +1,14 @@
+import { Result } from "@webiny/feature/api";
+import { DeleteRoleUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { IdentityContext } from "../../IdentityContext/abstractions.js";
+import { EventPublisher } from "../../../../features/eventPublisher/index.js";
+declare class DeleteRoleUseCaseImpl implements UseCaseAbstraction.Interface {
+    private repository;
+    private identityContext;
+    private eventPublisher;
+    constructor(repository: RolesRepository.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface);
+    execute(id: string): Promise<Result<void, UseCaseAbstraction.Error>>;
+}
+export declare const DeleteRoleUseCase: import("@webiny/di").Implementation<typeof DeleteRoleUseCaseImpl>;
+export {};