@webiny/api-core 0.0.0-unstable.6844005670 → 0.0.0-unstable.7be00a75a9

package/features/security/IdentityContext/AnonymousIdentity.js

@@ -1,20 +1,16 @@
 import { Identity } from "./Identity.js";
-
-/**
- * Represents an anonymous (unauthenticated) user.
- * This identity has no permissions by default.
- */
-export class AnonymousIdentity extends Identity {
-  constructor() {
-    super({
-      id: "anonymous",
-      displayName: "Anonymous",
-      type: "anonymous"
-    });
-  }
-  isAnonymous() {
-    return true;
-  }
+class AnonymousIdentity extends Identity {
+    constructor(){
+        super({
+            id: "anonymous",
+            displayName: "Anonymous",
+            type: "anonymous"
+        });
+    }
+    isAnonymous() {
+        return true;
+    }
 }
+export { AnonymousIdentity };
 
 //# sourceMappingURL=AnonymousIdentity.js.map

package/features/security/IdentityContext/AnonymousIdentity.js.map

@@ -1 +1 @@
-{"version":3,"names":["Identity","AnonymousIdentity","constructor","id","displayName","type","isAnonymous"],"sources":["AnonymousIdentity.ts"],"sourcesContent":["import { Identity } from \"./Identity.js\";\n\n/**\n * Represents an anonymous (unauthenticated) user.\n * This identity has no permissions by default.\n */\nexport class AnonymousIdentity extends Identity {\n    constructor() {\n        super({\n            id: \"anonymous\",\n            displayName: \"Anonymous\",\n            type: \"anonymous\"\n        });\n    }\n\n    isAnonymous(): boolean {\n        return true;\n    }\n}\n"],"mappings":"AAAA,SAASA,QAAQ;;AAEjB;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,SAASD,QAAQ,CAAC;EAC5CE,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFC,EAAE,EAAE,WAAW;MACfC,WAAW,EAAE,WAAW;MACxBC,IAAI,EAAE;IACV,CAAC,CAAC;EACN;EAEAC,WAAWA,CAAA,EAAY;IACnB,OAAO,IAAI;EACf;AACJ","ignoreList":[]}
+{"version":3,"file":"features/security/IdentityContext/AnonymousIdentity.js","sources":["../../../../src/features/security/IdentityContext/AnonymousIdentity.ts"],"sourcesContent":["import { Identity } from \"./Identity.js\";\n\n/**\n * Represents an anonymous (unauthenticated) user.\n * This identity has no permissions by default.\n */\nexport class AnonymousIdentity extends Identity {\n    constructor() {\n        super({\n            id: \"anonymous\",\n            displayName: \"Anonymous\",\n            type: \"anonymous\"\n        });\n    }\n\n    isAnonymous(): boolean {\n        return true;\n    }\n}\n"],"names":["AnonymousIdentity","Identity"],"mappings":";AAMO,MAAMA,0BAA0BC;IACnC,aAAc;QACV,KAAK,CAAC;YACF,IAAI;YACJ,aAAa;YACb,MAAM;QACV;IACJ;IAEA,cAAuB;QACnB,OAAO;IACX;AACJ"}

package/features/security/IdentityContext/AuthenticatedIdentity.js

@@ -1,12 +1,9 @@
 import { Identity } from "./Identity.js";
-
-/**
- * Represents an authenticated user identity.
- */
-export class AuthenticatedIdentity extends Identity {
-  isAnonymous() {
-    return false;
-  }
+class AuthenticatedIdentity extends Identity {
+    isAnonymous() {
+        return false;
+    }
 }
+export { AuthenticatedIdentity };
 
 //# sourceMappingURL=AuthenticatedIdentity.js.map

package/features/security/IdentityContext/AuthenticatedIdentity.js.map

@@ -1 +1 @@
-{"version":3,"names":["Identity","AuthenticatedIdentity","isAnonymous"],"sources":["AuthenticatedIdentity.ts"],"sourcesContent":["import { Identity } from \"./Identity.js\";\n\n/**\n * Represents an authenticated user identity.\n */\nexport class AuthenticatedIdentity extends Identity {\n    isAnonymous(): boolean {\n        return false;\n    }\n}\n"],"mappings":"AAAA,SAASA,QAAQ;;AAEjB;AACA;AACA;AACA,OAAO,MAAMC,qBAAqB,SAASD,QAAQ,CAAC;EAChDE,WAAWA,CAAA,EAAY;IACnB,OAAO,KAAK;EAChB;AACJ","ignoreList":[]}
+{"version":3,"file":"features/security/IdentityContext/AuthenticatedIdentity.js","sources":["../../../../src/features/security/IdentityContext/AuthenticatedIdentity.ts"],"sourcesContent":["import { Identity } from \"./Identity.js\";\n\n/**\n * Represents an authenticated user identity.\n */\nexport class AuthenticatedIdentity extends Identity {\n    isAnonymous(): boolean {\n        return false;\n    }\n}\n"],"names":["AuthenticatedIdentity","Identity"],"mappings":";AAKO,MAAMA,8BAA8BC;IACvC,cAAuB;QACnB,OAAO;IACX;AACJ"}

package/features/security/IdentityContext/Identity.js

@@ -1,76 +1,68 @@
-/**
- * Abstract base class for all identity types.
- * Provides a common interface for identity checks across the codebase.
- */
-export class Identity {
-  constructor(identityData) {
-    this.data = identityData;
-    this.profile = new IdentityProfile(this.id, identityData.profile || {});
-    this.context = identityData.context ?? {};
-  }
-  get id() {
-    return this.data.id;
-  }
-  get displayName() {
-    return this.data.displayName;
-  }
-  get type() {
-    return this.data.type;
-  }
-  get permissions() {
-    return this.data.permissions ?? [];
-  }
-  get roles() {
-    return this.data.roles ?? [];
-  }
-  get teams() {
-    return this.data.teams ?? [];
-  }
-
-  /**
-   * Check if this identity represents an anonymous (unauthenticated) user.
-   */
-
-  isAdmin() {
-    return this.type === "admin";
-  }
-  toJson() {
-    return {
-      id: this.id,
-      displayName: this.displayName,
-      type: this.type,
-      roles: this.roles,
-      teams: this.teams,
-      permissions: this.permissions,
-      profile: this.profile.toJson()
-    };
-  }
+class Identity {
+    constructor(identityData){
+        this.data = identityData;
+        this.profile = new IdentityProfile(this.id, identityData.profile || {});
+        this.context = identityData.context ?? {};
+    }
+    get id() {
+        return this.data.id;
+    }
+    get displayName() {
+        return this.data.displayName;
+    }
+    get type() {
+        return this.data.type;
+    }
+    get permissions() {
+        return this.data.permissions ?? [];
+    }
+    get roles() {
+        return this.data.roles ?? [];
+    }
+    get teams() {
+        return this.data.teams ?? [];
+    }
+    isAdmin() {
+        return "admin" === this.type;
+    }
+    toJson() {
+        return {
+            id: this.id,
+            displayName: this.displayName,
+            type: this.type,
+            roles: this.roles,
+            teams: this.teams,
+            permissions: this.permissions,
+            profile: this.profile.toJson()
+        };
+    }
 }
 class IdentityProfile {
-  constructor(id, data) {
-    this.id = id;
-    this.data = data;
-  }
-  get firstName() {
-    return this.data.firstName ?? "";
-  }
-  get lastName() {
-    return this.data.lastName ?? "";
-  }
-  get email() {
-    return this.data.email ?? `id:${this.id}`;
-  }
-  get external() {
-    return this.data.external ?? false;
-  }
-  toJson() {
-    return {
-      firstName: this.firstName,
-      lastName: this.lastName,
-      email: this.email,
-      external: this.external
-    };
-  }
+    constructor(id, data){
+        this.id = id;
+        this.data = data;
+    }
+    get firstName() {
+        return this.data.firstName ?? "";
+    }
+    get lastName() {
+        return this.data.lastName ?? "";
+    }
+    get email() {
+        return this.data.email ?? `id:${this.id}`;
+    }
+    get external() {
+        return this.data.external ?? false;
+    }
+    toJson() {
+        return {
+            firstName: this.firstName,
+            lastName: this.lastName,
+            email: this.email,
+            external: this.external
+        };
+    }
 }
+export { Identity };
 
 //# sourceMappingURL=Identity.js.map

package/features/security/IdentityContext/Identity.js.map

@@ -1 +1 @@
-{"version":3,"names":["Identity","constructor","identityData","data","profile","IdentityProfile","id","context","displayName","type","permissions","roles","teams","isAdmin","toJson","firstName","lastName","email","external"],"sources":["Identity.ts"],"sourcesContent":["import type { SecurityPermission } from \"~/types/security.js\";\n\nexport namespace Identity {\n    export type Profile = IdentityProfile;\n}\n\nexport interface IdentityContext {\n    /**\n     * Which tenant is the home tenant for this identity?\n     * If omitted, it will default to `root`.\n     */\n    defaultTenantId?: string;\n    /**\n     * Can this identity access the current tenant?\n     * If omitted, it will default to `true`.\n     */\n    canAccessTenant?: boolean;\n    /**\n     * Any other custom context data.\n     */\n    [key: string]: any;\n}\n\ninterface IdentityProfileContext {\n    canAccessTenant?: boolean;\n    defaultTenantId?: string;\n    [key: string]: any;\n}\n\nexport type IdentityData = {\n    id: string;\n    displayName: string;\n    type: string;\n    roles?: string[];\n    teams?: string[];\n    permissions?: SecurityPermission[];\n    profile?: IdentityProfileData;\n    context?: IdentityProfileContext;\n};\n\n/**\n * Abstract base class for all identity types.\n * Provides a common interface for identity checks across the codebase.\n */\nexport abstract class Identity {\n    private readonly data: IdentityData;\n    public readonly profile: IdentityProfile;\n    public readonly context: IdentityContext;\n\n    constructor(identityData: IdentityData) {\n        this.data = identityData;\n        this.profile = new IdentityProfile(this.id, identityData.profile || {});\n        this.context = identityData.context ?? {};\n    }\n\n    get id() {\n        return this.data.id;\n    }\n\n    get displayName() {\n        return this.data.displayName;\n    }\n    get type() {\n        return this.data.type;\n    }\n\n    get permissions(): SecurityPermission[] {\n        return this.data.permissions ?? [];\n    }\n\n    get roles(): string[] {\n        return this.data.roles ?? [];\n    }\n\n    get teams(): string[] {\n        return this.data.teams ?? [];\n    }\n\n    /**\n     * Check if this identity represents an anonymous (unauthenticated) user.\n     */\n    abstract isAnonymous(): boolean;\n\n    isAdmin(): boolean {\n        return this.type === \"admin\";\n    }\n\n    toJson(): Required<Omit<IdentityData, \"context\">> {\n        return {\n            id: this.id,\n            displayName: this.displayName,\n            type: this.type,\n            roles: this.roles,\n            teams: this.teams,\n            permissions: this.permissions,\n            profile: this.profile.toJson()\n        };\n    }\n}\n\ninterface IdentityProfileData {\n    firstName?: string;\n    lastName?: string;\n    email?: string;\n    external?: boolean;\n}\n\nclass IdentityProfile {\n    constructor(\n        private id: string,\n        private data: Partial<IdentityProfileData>\n    ) {}\n\n    get firstName(): string {\n        return this.data.firstName ?? \"\";\n    }\n\n    get lastName(): string {\n        return this.data.lastName ?? \"\";\n    }\n\n    get email(): string {\n        return this.data.email ?? `id:${this.id}`;\n    }\n\n    get external(): boolean {\n        return this.data.external ?? false;\n    }\n\n    toJson() {\n        return {\n            firstName: this.firstName,\n            lastName: this.lastName,\n            email: this.email,\n            external: this.external\n        };\n    }\n}\n"],"mappings":"AAwCA;AACA;AACA;AACA;AACA,OAAO,MAAeA,QAAQ,CAAC;EAK3BC,WAAWA,CAACC,YAA0B,EAAE;IACpC,IAAI,CAACC,IAAI,GAAGD,YAAY;IACxB,IAAI,CAACE,OAAO,GAAG,IAAIC,eAAe,CAAC,IAAI,CAACC,EAAE,EAAEJ,YAAY,CAACE,OAAO,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,CAACG,OAAO,GAAGL,YAAY,CAACK,OAAO,IAAI,CAAC,CAAC;EAC7C;EAEA,IAAID,EAAEA,CAAA,EAAG;IACL,OAAO,IAAI,CAACH,IAAI,CAACG,EAAE;EACvB;EAEA,IAAIE,WAAWA,CAAA,EAAG;IACd,OAAO,IAAI,CAACL,IAAI,CAACK,WAAW;EAChC;EACA,IAAIC,IAAIA,CAAA,EAAG;IACP,OAAO,IAAI,CAACN,IAAI,CAACM,IAAI;EACzB;EAEA,IAAIC,WAAWA,CAAA,EAAyB;IACpC,OAAO,IAAI,CAACP,IAAI,CAACO,WAAW,IAAI,EAAE;EACtC;EAEA,IAAIC,KAAKA,CAAA,EAAa;IAClB,OAAO,IAAI,CAACR,IAAI,CAACQ,KAAK,IAAI,EAAE;EAChC;EAEA,IAAIC,KAAKA,CAAA,EAAa;IAClB,OAAO,IAAI,CAACT,IAAI,CAACS,KAAK,IAAI,EAAE;EAChC;;EAEA;AACJ;AACA;;EAGIC,OAAOA,CAAA,EAAY;IACf,OAAO,IAAI,CAACJ,IAAI,KAAK,OAAO;EAChC;EAEAK,MAAMA,CAAA,EAA4C;IAC9C,OAAO;MACHR,EAAE,EAAE,IAAI,CAACA,EAAE;MACXE,WAAW,EAAE,IAAI,CAACA,WAAW;MAC7BC,IAAI,EAAE,IAAI,CAACA,IAAI;MACfE,KAAK,EAAE,IAAI,CAACA,KAAK;MACjBC,KAAK,EAAE,IAAI,CAACA,KAAK;MACjBF,WAAW,EAAE,IAAI,CAACA,WAAW;MAC7BN,OAAO,EAAE,IAAI,CAACA,OAAO,CAACU,MAAM,CAAC;IACjC,CAAC;EACL;AACJ;AASA,MAAMT,eAAe,CAAC;EAClBJ,WAAWA,CACCK,EAAU,EACVH,IAAkC,EAC5C;IAAA,KAFUG,EAAU,GAAVA,EAAU;IAAA,KACVH,IAAkC,GAAlCA,IAAkC;EAC3C;EAEH,IAAIY,SAASA,CAAA,EAAW;IACpB,OAAO,IAAI,CAACZ,IAAI,CAACY,SAAS,IAAI,EAAE;EACpC;EAEA,IAAIC,QAAQA,CAAA,EAAW;IACnB,OAAO,IAAI,CAACb,IAAI,CAACa,QAAQ,IAAI,EAAE;EACnC;EAEA,IAAIC,KAAKA,CAAA,EAAW;IAChB,OAAO,IAAI,CAACd,IAAI,CAACc,KAAK,IAAI,MAAM,IAAI,CAACX,EAAE,EAAE;EAC7C;EAEA,IAAIY,QAAQA,CAAA,EAAY;IACpB,OAAO,IAAI,CAACf,IAAI,CAACe,QAAQ,IAAI,KAAK;EACtC;EAEAJ,MAAMA,CAAA,EAAG;IACL,OAAO;MACHC,SAAS,EAAE,IAAI,CAACA,SAAS;MACzBC,QAAQ,EAAE,IAAI,CAACA,QAAQ;MACvBC,KAAK,EAAE,IAAI,CAACA,KAAK;MACjBC,QAAQ,EAAE,IAAI,CAACA;IACnB,CAAC;EACL;AACJ","ignoreList":[]}
+{"version":3,"file":"features/security/IdentityContext/Identity.js","sources":["../../../../src/features/security/IdentityContext/Identity.ts"],"sourcesContent":["import type { SecurityPermission } from \"~/types/security.js\";\n\nexport namespace Identity {\n    export type Profile = IdentityProfile;\n}\n\nexport interface IdentityContext {\n    /**\n     * Which tenant is the home tenant for this identity?\n     * If omitted, it will default to `root`.\n     */\n    defaultTenantId?: string;\n    /**\n     * Can this identity access the current tenant?\n     * If omitted, it will default to `true`.\n     */\n    canAccessTenant?: boolean;\n    /**\n     * Any other custom context data.\n     */\n    [key: string]: any;\n}\n\ninterface IdentityProfileContext {\n    canAccessTenant?: boolean;\n    defaultTenantId?: string;\n    [key: string]: any;\n}\n\nexport type IdentityData = {\n    id: string;\n    displayName: string;\n    type: string;\n    roles?: string[];\n    teams?: string[];\n    permissions?: SecurityPermission[];\n    profile?: IdentityProfileData;\n    context?: IdentityProfileContext;\n};\n\n/**\n * Abstract base class for all identity types.\n * Provides a common interface for identity checks across the codebase.\n */\nexport abstract class Identity {\n    private readonly data: IdentityData;\n    public readonly profile: IdentityProfile;\n    public readonly context: IdentityContext;\n\n    constructor(identityData: IdentityData) {\n        this.data = identityData;\n        this.profile = new IdentityProfile(this.id, identityData.profile || {});\n        this.context = identityData.context ?? {};\n    }\n\n    get id() {\n        return this.data.id;\n    }\n\n    get displayName() {\n        return this.data.displayName;\n    }\n    get type() {\n        return this.data.type;\n    }\n\n    get permissions(): SecurityPermission[] {\n        return this.data.permissions ?? [];\n    }\n\n    get roles(): string[] {\n        return this.data.roles ?? [];\n    }\n\n    get teams(): string[] {\n        return this.data.teams ?? [];\n    }\n\n    /**\n     * Check if this identity represents an anonymous (unauthenticated) user.\n     */\n    abstract isAnonymous(): boolean;\n\n    isAdmin(): boolean {\n        return this.type === \"admin\";\n    }\n\n    toJson(): Required<Omit<IdentityData, \"context\">> {\n        return {\n            id: this.id,\n            displayName: this.displayName,\n            type: this.type,\n            roles: this.roles,\n            teams: this.teams,\n            permissions: this.permissions,\n            profile: this.profile.toJson()\n        };\n    }\n}\n\ninterface IdentityProfileData {\n    firstName?: string;\n    lastName?: string;\n    email?: string;\n    external?: boolean;\n}\n\nclass IdentityProfile {\n    constructor(\n        private id: string,\n        private data: Partial<IdentityProfileData>\n    ) {}\n\n    get firstName(): string {\n        return this.data.firstName ?? \"\";\n    }\n\n    get lastName(): string {\n        return this.data.lastName ?? \"\";\n    }\n\n    get email(): string {\n        return this.data.email ?? `id:${this.id}`;\n    }\n\n    get external(): boolean {\n        return this.data.external ?? false;\n    }\n\n    toJson() {\n        return {\n            firstName: this.firstName,\n            lastName: this.lastName,\n            email: this.email,\n            external: this.external\n        };\n    }\n}\n"],"names":["Identity","identityData","IdentityProfile","id","data"],"mappings":"AA4CO,MAAeA;IAKlB,YAAYC,YAA0B,CAAE;QACpC,IAAI,CAAC,IAAI,GAAGA;QACZ,IAAI,CAAC,OAAO,GAAG,IAAIC,gBAAgB,IAAI,CAAC,EAAE,EAAED,aAAa,OAAO,IAAI,CAAC;QACrE,IAAI,CAAC,OAAO,GAAGA,aAAa,OAAO,IAAI,CAAC;IAC5C;IAEA,IAAI,KAAK;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE;IACvB;IAEA,IAAI,cAAc;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW;IAChC;IACA,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI;IACzB;IAEA,IAAI,cAAoC;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE;IACtC;IAEA,IAAI,QAAkB;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;IAChC;IAEA,IAAI,QAAkB;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;IAChC;IAOA,UAAmB;QACf,OAAO,AAAc,YAAd,IAAI,CAAC,IAAI;IACpB;IAEA,SAAkD;QAC9C,OAAO;YACH,IAAI,IAAI,CAAC,EAAE;YACX,aAAa,IAAI,CAAC,WAAW;YAC7B,MAAM,IAAI,CAAC,IAAI;YACf,OAAO,IAAI,CAAC,KAAK;YACjB,OAAO,IAAI,CAAC,KAAK;YACjB,aAAa,IAAI,CAAC,WAAW;YAC7B,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM;QAChC;IACJ;AACJ;AASA,MAAMC;IACF,YACYC,EAAU,EACVC,IAAkC,CAC5C;aAFUD,EAAE,GAAFA;aACAC,IAAI,GAAJA;IACT;IAEH,IAAI,YAAoB;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI;IAClC;IAEA,IAAI,WAAmB;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI;IACjC;IAEA,IAAI,QAAgB;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;IAC7C;IAEA,IAAI,WAAoB;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI;IACjC;IAEA,SAAS;QACL,OAAO;YACH,WAAW,IAAI,CAAC,SAAS;YACzB,UAAU,IAAI,CAAC,QAAQ;YACvB,OAAO,IAAI,CAAC,KAAK;YACjB,UAAU,IAAI,CAAC,QAAQ;QAC3B;IACJ;AACJ"}

package/features/security/IdentityContext/IdentityContext.js

@@ -1,125 +1,88 @@
 import { AsyncLocalStorage } from "async_hooks";
 import { minimatch } from "minimatch";
 import { createImplementation } from "@webiny/di";
-import { IdentityContext as Abstraction } from "./abstractions.js";
+import { IdentityContext } from "./abstractions.js";
 import { AnonymousIdentity } from "./AnonymousIdentity.js";
 import { AuthorizationContext } from "../authorization/AuthorizationContext/index.js";
 import { filterOutCustomWbyAppsPermissions } from "../utils/filterOutCustomWbyAppsPermissions.js";
 import { WcpContext } from "../../wcp/WcpContext/index.js";
 const identityStorage = new AsyncLocalStorage();
 class IdentityContextImpl {
-  identity = new AnonymousIdentity();
-  constructor(authorizationContext, wcpContext) {
-    this.authorizationContext = authorizationContext;
-    this.wcpContext = wcpContext;
-  }
-
-  // ========================================================================
-  // Identity Methods
-  // ========================================================================
-
-  getIdentity() {
-    // Check for identity override first (from withIdentity())
-    const override = identityStorage.getStore();
-    if (override !== undefined) {
-      return override;
+    constructor(authorizationContext, wcpContext){
+        this.authorizationContext = authorizationContext;
+        this.wcpContext = wcpContext;
+        this.identity = new AnonymousIdentity();
     }
-    return this.identity;
-  }
-  setIdentity(identity) {
-    // If undefined, set to anonymous identity
-    this.identity = identity ?? new AnonymousIdentity();
-
-    // Clear permissions cache when identity changes
-    this.authorizationContext.clearPermissionsCache();
-  }
-  withIdentity(identity, cb) {
-    return identityStorage.run(identity, cb);
-  }
-
-  // ========================================================================
-  // Authorization State Methods
-  // ========================================================================
-
-  withoutAuthorization(cb) {
-    return this.authorizationContext.withoutAuthorization(cb);
-  }
-  isAuthorizationEnabled() {
-    return this.authorizationContext.isAuthorizationEnabled();
-  }
-
-  // ========================================================================
-  // Permission Methods
-  // ========================================================================
-
-  async getPermission(name) {
-    if (!this.isAuthorizationEnabled()) {
-      return {
-        name: "*"
-      };
+    getIdentity() {
+        const override = identityStorage.getStore();
+        if (void 0 !== override) return override;
+        return this.identity;
     }
-    const permissions = await this.listPermissions();
-
-    // Try exact match first
-    const exactMatch = permissions.find(p => p.name === name);
-    if (exactMatch) {
-      return exactMatch;
+    setIdentity(identity) {
+        this.identity = identity ?? new AnonymousIdentity();
+        this.authorizationContext.clearPermissionsCache();
     }
-
-    // Try pattern matching
-    const patternMatch = permissions.find(p => minimatch(name, p.name));
-    if (patternMatch) {
-      return patternMatch;
+    withIdentity(identity, cb) {
+        return identityStorage.run(identity, cb);
     }
-    return null;
-  }
-  async getPermissions(name) {
-    if (!this.isAuthorizationEnabled()) {
-      return [{
-        name: "*"
-      }];
+    withoutAuthorization(cb) {
+        return this.authorizationContext.withoutAuthorization(cb);
     }
-    const permissions = await this.listPermissions();
-    return permissions.filter(p => {
-      if (p.name === name) {
-        return true;
-      }
-      return minimatch(name, p.name);
-    });
-  }
-  async listPermissions() {
-    const permissions = await this.authorizationContext.loadPermissions(this.getIdentity());
-    // TODO: extract this into a decorator
-    return this.applyAaclLogic(permissions);
-  }
-  async hasFullAccess() {
-    const permissions = await this.listPermissions();
-    return permissions.some(p => p.name === "*");
-  }
-
-  // ========================================================================
-  // Private Helper Methods
-  // ========================================================================
-
-  applyAaclLogic(permissions) {
-    const aaclEnabled = this.wcpContext.canUseAacl();
-    const teamsEnabled = this.wcpContext.canUseTeams();
-    if (aaclEnabled) {
-      // Add AACL metadata permission
-      return [...permissions, {
-        name: "aacl",
-        teams: teamsEnabled
-      }];
+    isAuthorizationEnabled() {
+        return this.authorizationContext.isAuthorizationEnabled();
+    }
+    async getPermission(name) {
+        if (!this.isAuthorizationEnabled()) return {
+            name: "*"
+        };
+        const permissions = await this.listPermissions();
+        const exactMatch = permissions.find((p)=>p.name === name);
+        if (exactMatch) return exactMatch;
+        const patternMatch = permissions.find((p)=>minimatch(name, p.name));
+        if (patternMatch) return patternMatch;
+        return null;
+    }
+    async getPermissions(name) {
+        if (!this.isAuthorizationEnabled()) return [
+            {
+                name: "*"
+            }
+        ];
+        const permissions = await this.listPermissions();
+        return permissions.filter((p)=>{
+            if (p.name === name) return true;
+            return minimatch(name, p.name);
+        });
+    }
+    async listPermissions() {
+        const permissions = await this.authorizationContext.loadPermissions(this.getIdentity());
+        return this.applyAaclLogic(permissions);
+    }
+    async hasFullAccess() {
+        const permissions = await this.listPermissions();
+        return permissions.some((p)=>"*" === p.name);
+    }
+    applyAaclLogic(permissions) {
+        const aaclEnabled = this.wcpContext.canUseAacl();
+        const teamsEnabled = this.wcpContext.canUseTeams();
+        if (aaclEnabled) return [
+            ...permissions,
+            {
+                name: "aacl",
+                teams: teamsEnabled
+            }
+        ];
+        return filterOutCustomWbyAppsPermissions(permissions);
     }
-
-    // If AACL is not enabled, filter out custom Webiny apps permissions
-    return filterOutCustomWbyAppsPermissions(permissions);
-  }
 }
-export const IdentityContext = createImplementation({
-  abstraction: Abstraction,
-  implementation: IdentityContextImpl,
-  dependencies: [AuthorizationContext, WcpContext]
+const IdentityContext_IdentityContext = createImplementation({
+    abstraction: IdentityContext,
+    implementation: IdentityContextImpl,
+    dependencies: [
+        AuthorizationContext,
+        WcpContext
+    ]
 });
+export { IdentityContext_IdentityContext as IdentityContext };
 
 //# sourceMappingURL=IdentityContext.js.map

package/features/security/IdentityContext/IdentityContext.js.map

@@ -1 +1 @@
-{"version":3,"names":["AsyncLocalStorage","minimatch","createImplementation","IdentityContext","Abstraction","AnonymousIdentity","AuthorizationContext","filterOutCustomWbyAppsPermissions","WcpContext","identityStorage","IdentityContextImpl","identity","constructor","authorizationContext","wcpContext","getIdentity","override","getStore","undefined","setIdentity","clearPermissionsCache","withIdentity","cb","run","withoutAuthorization","isAuthorizationEnabled","getPermission","name","permissions","listPermissions","exactMatch","find","p","patternMatch","getPermissions","filter","loadPermissions","applyAaclLogic","hasFullAccess","some","aaclEnabled","canUseAacl","teamsEnabled","canUseTeams","teams","abstraction","implementation","dependencies"],"sources":["IdentityContext.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\nimport { minimatch } from \"minimatch\";\nimport { createImplementation } from \"@webiny/di\";\nimport { IdentityContext as Abstraction } from \"./abstractions.js\";\nimport { Identity } from \"./Identity.js\";\nimport { AnonymousIdentity } from \"./AnonymousIdentity.js\";\nimport { AuthorizationContext } from \"../authorization/AuthorizationContext/index.js\";\nimport { filterOutCustomWbyAppsPermissions } from \"../utils/filterOutCustomWbyAppsPermissions.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport type { AaclPermission } from \"../../wcp/WcpContext/types.js\";\nimport { WcpContext } from \"../../wcp/WcpContext/index.js\";\n\nconst identityStorage = new AsyncLocalStorage<Identity | undefined>();\n\nclass IdentityContextImpl implements Abstraction.Interface {\n    private identity: Identity = new AnonymousIdentity();\n\n    constructor(\n        private authorizationContext: AuthorizationContext.Interface,\n        private wcpContext: WcpContext.Interface\n    ) {}\n\n    // ========================================================================\n    // Identity Methods\n    // ========================================================================\n\n    getIdentity(): Identity {\n        // Check for identity override first (from withIdentity())\n        const override = identityStorage.getStore();\n        if (override !== undefined) {\n            return override;\n        }\n        return this.identity;\n    }\n\n    setIdentity(identity: Identity | undefined): void {\n        // If undefined, set to anonymous identity\n        this.identity = identity ?? new AnonymousIdentity();\n\n        // Clear permissions cache when identity changes\n        this.authorizationContext.clearPermissionsCache();\n    }\n\n    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T> {\n        return identityStorage.run(identity, cb);\n    }\n\n    // ========================================================================\n    // Authorization State Methods\n    // ========================================================================\n\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T> {\n        return this.authorizationContext.withoutAuthorization(cb);\n    }\n\n    isAuthorizationEnabled(): boolean {\n        return this.authorizationContext.isAuthorizationEnabled();\n    }\n\n    // ========================================================================\n    // Permission Methods\n    // ========================================================================\n\n    async getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission | null> {\n        if (!this.isAuthorizationEnabled()) {\n            return { name: \"*\" } as TPermission;\n        }\n\n        const permissions = await this.listPermissions();\n\n        // Try exact match first\n        const exactMatch = permissions.find(p => p.name === name);\n        if (exactMatch) {\n            return exactMatch as TPermission;\n        }\n\n        // Try pattern matching\n        const patternMatch = permissions.find(p => minimatch(name, p.name));\n        if (patternMatch) {\n            return patternMatch as TPermission;\n        }\n\n        return null;\n    }\n\n    async getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission[]> {\n        if (!this.isAuthorizationEnabled()) {\n            return [{ name: \"*\" }] as TPermission[];\n        }\n\n        const permissions = await this.listPermissions();\n\n        return permissions.filter(p => {\n            if (p.name === name) {\n                return true;\n            }\n            return minimatch(name, p.name);\n        }) as TPermission[];\n    }\n\n    async listPermissions(): Promise<SecurityPermission[]> {\n        const permissions = await this.authorizationContext.loadPermissions(this.getIdentity());\n        // TODO: extract this into a decorator\n        return this.applyAaclLogic(permissions);\n    }\n\n    async hasFullAccess(): Promise<boolean> {\n        const permissions = await this.listPermissions();\n        return permissions.some(p => p.name === \"*\");\n    }\n\n    // ========================================================================\n    // Private Helper Methods\n    // ========================================================================\n\n    private applyAaclLogic(permissions: SecurityPermission[]): SecurityPermission[] {\n        const aaclEnabled = this.wcpContext.canUseAacl();\n        const teamsEnabled = this.wcpContext.canUseTeams();\n\n        if (aaclEnabled) {\n            // Add AACL metadata permission\n            return [\n                ...permissions,\n                {\n                    name: \"aacl\",\n                    teams: teamsEnabled\n                } as AaclPermission\n            ];\n        }\n\n        // If AACL is not enabled, filter out custom Webiny apps permissions\n        return filterOutCustomWbyAppsPermissions(permissions);\n    }\n}\n\nexport const IdentityContext = createImplementation({\n    abstraction: Abstraction,\n    implementation: IdentityContextImpl,\n    dependencies: [AuthorizationContext, WcpContext]\n});\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,aAAa;AAC/C,SAASC,SAAS,QAAQ,WAAW;AACrC,SAASC,oBAAoB,QAAQ,YAAY;AACjD,SAASC,eAAe,IAAIC,WAAW;AAEvC,SAASC,iBAAiB;AAC1B,SAASC,oBAAoB;AAC7B,SAASC,iCAAiC;AAG1C,SAASC,UAAU;AAEnB,MAAMC,eAAe,GAAG,IAAIT,iBAAiB,CAAuB,CAAC;AAErE,MAAMU,mBAAmB,CAAkC;EAC/CC,QAAQ,GAAa,IAAIN,iBAAiB,CAAC,CAAC;EAEpDO,WAAWA,CACCC,oBAAoD,EACpDC,UAAgC,EAC1C;IAAA,KAFUD,oBAAoD,GAApDA,oBAAoD;IAAA,KACpDC,UAAgC,GAAhCA,UAAgC;EACzC;;EAEH;EACA;EACA;;EAEAC,WAAWA,CAAA,EAAa;IACpB;IACA,MAAMC,QAAQ,GAAGP,eAAe,CAACQ,QAAQ,CAAC,CAAC;IAC3C,IAAID,QAAQ,KAAKE,SAAS,EAAE;MACxB,OAAOF,QAAQ;IACnB;IACA,OAAO,IAAI,CAACL,QAAQ;EACxB;EAEAQ,WAAWA,CAACR,QAA8B,EAAQ;IAC9C;IACA,IAAI,CAACA,QAAQ,GAAGA,QAAQ,IAAI,IAAIN,iBAAiB,CAAC,CAAC;;IAEnD;IACA,IAAI,CAACQ,oBAAoB,CAACO,qBAAqB,CAAC,CAAC;EACrD;EAEAC,YAAYA,CAAIV,QAA8B,EAAEW,EAAoB,EAAc;IAC9E,OAAOb,eAAe,CAACc,GAAG,CAACZ,QAAQ,EAAEW,EAAE,CAAC;EAC5C;;EAEA;EACA;EACA;;EAEAE,oBAAoBA,CAAIF,EAAoB,EAAc;IACtD,OAAO,IAAI,CAACT,oBAAoB,CAACW,oBAAoB,CAACF,EAAE,CAAC;EAC7D;EAEAG,sBAAsBA,CAAA,EAAY;IAC9B,OAAO,IAAI,CAACZ,oBAAoB,CAACY,sBAAsB,CAAC,CAAC;EAC7D;;EAEA;EACA;EACA;;EAEA,MAAMC,aAAaA,CACfC,IAAY,EACe;IAC3B,IAAI,CAAC,IAAI,CAACF,sBAAsB,CAAC,CAAC,EAAE;MAChC,OAAO;QAAEE,IAAI,EAAE;MAAI,CAAC;IACxB;IAEA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACC,eAAe,CAAC,CAAC;;IAEhD;IACA,MAAMC,UAAU,GAAGF,WAAW,CAACG,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACL,IAAI,KAAKA,IAAI,CAAC;IACzD,IAAIG,UAAU,EAAE;MACZ,OAAOA,UAAU;IACrB;;IAEA;IACA,MAAMG,YAAY,GAAGL,WAAW,CAACG,IAAI,CAACC,CAAC,IAAI/B,SAAS,CAAC0B,IAAI,EAAEK,CAAC,CAACL,IAAI,CAAC,CAAC;IACnE,IAAIM,YAAY,EAAE;MACd,OAAOA,YAAY;IACvB;IAEA,OAAO,IAAI;EACf;EAEA,MAAMC,cAAcA,CAChBP,IAAY,EACU;IACtB,IAAI,CAAC,IAAI,CAACF,sBAAsB,CAAC,CAAC,EAAE;MAChC,OAAO,CAAC;QAAEE,IAAI,EAAE;MAAI,CAAC,CAAC;IAC1B;IAEA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACC,eAAe,CAAC,CAAC;IAEhD,OAAOD,WAAW,CAACO,MAAM,CAACH,CAAC,IAAI;MAC3B,IAAIA,CAAC,CAACL,IAAI,KAAKA,IAAI,EAAE;QACjB,OAAO,IAAI;MACf;MACA,OAAO1B,SAAS,CAAC0B,IAAI,EAAEK,CAAC,CAACL,IAAI,CAAC;IAClC,CAAC,CAAC;EACN;EAEA,MAAME,eAAeA,CAAA,EAAkC;IACnD,MAAMD,WAAW,GAAG,MAAM,IAAI,CAACf,oBAAoB,CAACuB,eAAe,CAAC,IAAI,CAACrB,WAAW,CAAC,CAAC,CAAC;IACvF;IACA,OAAO,IAAI,CAACsB,cAAc,CAACT,WAAW,CAAC;EAC3C;EAEA,MAAMU,aAAaA,CAAA,EAAqB;IACpC,MAAMV,WAAW,GAAG,MAAM,IAAI,CAACC,eAAe,CAAC,CAAC;IAChD,OAAOD,WAAW,CAACW,IAAI,CAACP,CAAC,IAAIA,CAAC,CAACL,IAAI,KAAK,GAAG,CAAC;EAChD;;EAEA;EACA;EACA;;EAEQU,cAAcA,CAACT,WAAiC,EAAwB;IAC5E,MAAMY,WAAW,GAAG,IAAI,CAAC1B,UAAU,CAAC2B,UAAU,CAAC,CAAC;IAChD,MAAMC,YAAY,GAAG,IAAI,CAAC5B,UAAU,CAAC6B,WAAW,CAAC,CAAC;IAElD,IAAIH,WAAW,EAAE;MACb;MACA,OAAO,CACH,GAAGZ,WAAW,EACd;QACID,IAAI,EAAE,MAAM;QACZiB,KAAK,EAAEF;MACX,CAAC,CACJ;IACL;;IAEA;IACA,OAAOnC,iCAAiC,CAACqB,WAAW,CAAC;EACzD;AACJ;AAEA,OAAO,MAAMzB,eAAe,GAAGD,oBAAoB,CAAC;EAChD2C,WAAW,EAAEzC,WAAW;EACxB0C,cAAc,EAAEpC,mBAAmB;EACnCqC,YAAY,EAAE,CAACzC,oBAAoB,EAAEE,UAAU;AACnD,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/IdentityContext/IdentityContext.js","sources":["../../../../src/features/security/IdentityContext/IdentityContext.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\nimport { minimatch } from \"minimatch\";\nimport { createImplementation } from \"@webiny/di\";\nimport { IdentityContext as Abstraction } from \"./abstractions.js\";\nimport { Identity } from \"./Identity.js\";\nimport { AnonymousIdentity } from \"./AnonymousIdentity.js\";\nimport { AuthorizationContext } from \"../authorization/AuthorizationContext/index.js\";\nimport { filterOutCustomWbyAppsPermissions } from \"../utils/filterOutCustomWbyAppsPermissions.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport type { AaclPermission } from \"../../wcp/WcpContext/types.js\";\nimport { WcpContext } from \"../../wcp/WcpContext/index.js\";\n\nconst identityStorage = new AsyncLocalStorage<Identity | undefined>();\n\nclass IdentityContextImpl implements Abstraction.Interface {\n    private identity: Identity = new AnonymousIdentity();\n\n    constructor(\n        private authorizationContext: AuthorizationContext.Interface,\n        private wcpContext: WcpContext.Interface\n    ) {}\n\n    // ========================================================================\n    // Identity Methods\n    // ========================================================================\n\n    getIdentity(): Identity {\n        // Check for identity override first (from withIdentity())\n        const override = identityStorage.getStore();\n        if (override !== undefined) {\n            return override;\n        }\n        return this.identity;\n    }\n\n    setIdentity(identity: Identity | undefined): void {\n        // If undefined, set to anonymous identity\n        this.identity = identity ?? new AnonymousIdentity();\n\n        // Clear permissions cache when identity changes\n        this.authorizationContext.clearPermissionsCache();\n    }\n\n    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T> {\n        return identityStorage.run(identity, cb);\n    }\n\n    // ========================================================================\n    // Authorization State Methods\n    // ========================================================================\n\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T> {\n        return this.authorizationContext.withoutAuthorization(cb);\n    }\n\n    isAuthorizationEnabled(): boolean {\n        return this.authorizationContext.isAuthorizationEnabled();\n    }\n\n    // ========================================================================\n    // Permission Methods\n    // ========================================================================\n\n    async getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission | null> {\n        if (!this.isAuthorizationEnabled()) {\n            return { name: \"*\" } as TPermission;\n        }\n\n        const permissions = await this.listPermissions();\n\n        // Try exact match first\n        const exactMatch = permissions.find(p => p.name === name);\n        if (exactMatch) {\n            return exactMatch as TPermission;\n        }\n\n        // Try pattern matching\n        const patternMatch = permissions.find(p => minimatch(name, p.name));\n        if (patternMatch) {\n            return patternMatch as TPermission;\n        }\n\n        return null;\n    }\n\n    async getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission[]> {\n        if (!this.isAuthorizationEnabled()) {\n            return [{ name: \"*\" }] as TPermission[];\n        }\n\n        const permissions = await this.listPermissions();\n\n        return permissions.filter(p => {\n            if (p.name === name) {\n                return true;\n            }\n            return minimatch(name, p.name);\n        }) as TPermission[];\n    }\n\n    async listPermissions(): Promise<SecurityPermission[]> {\n        const permissions = await this.authorizationContext.loadPermissions(this.getIdentity());\n        // TODO: extract this into a decorator\n        return this.applyAaclLogic(permissions);\n    }\n\n    async hasFullAccess(): Promise<boolean> {\n        const permissions = await this.listPermissions();\n        return permissions.some(p => p.name === \"*\");\n    }\n\n    // ========================================================================\n    // Private Helper Methods\n    // ========================================================================\n\n    private applyAaclLogic(permissions: SecurityPermission[]): SecurityPermission[] {\n        const aaclEnabled = this.wcpContext.canUseAacl();\n        const teamsEnabled = this.wcpContext.canUseTeams();\n\n        if (aaclEnabled) {\n            // Add AACL metadata permission\n            return [\n                ...permissions,\n                {\n                    name: \"aacl\",\n                    teams: teamsEnabled\n                } as AaclPermission\n            ];\n        }\n\n        // If AACL is not enabled, filter out custom Webiny apps permissions\n        return filterOutCustomWbyAppsPermissions(permissions);\n    }\n}\n\nexport const IdentityContext = createImplementation({\n    abstraction: Abstraction,\n    implementation: IdentityContextImpl,\n    dependencies: [AuthorizationContext, WcpContext]\n});\n"],"names":["identityStorage","AsyncLocalStorage","IdentityContextImpl","authorizationContext","wcpContext","AnonymousIdentity","override","undefined","identity","cb","name","permissions","exactMatch","p","patternMatch","minimatch","aaclEnabled","teamsEnabled","filterOutCustomWbyAppsPermissions","IdentityContext","createImplementation","Abstraction","AuthorizationContext","WcpContext"],"mappings":";;;;;;;;AAYA,MAAMA,kBAAkB,IAAIC;AAE5B,MAAMC;IAGF,YACYC,oBAAoD,EACpDC,UAAgC,CAC1C;aAFUD,oBAAoB,GAApBA;aACAC,UAAU,GAAVA;aAJJ,QAAQ,GAAa,IAAIC;IAK9B;IAMH,cAAwB;QAEpB,MAAMC,WAAWN,gBAAgB,QAAQ;QACzC,IAAIM,AAAaC,WAAbD,UACA,OAAOA;QAEX,OAAO,IAAI,CAAC,QAAQ;IACxB;IAEA,YAAYE,QAA8B,EAAQ;QAE9C,IAAI,CAAC,QAAQ,GAAGA,YAAY,IAAIH;QAGhC,IAAI,CAAC,oBAAoB,CAAC,qBAAqB;IACnD;IAEA,aAAgBG,QAA8B,EAAEC,EAAoB,EAAc;QAC9E,OAAOT,gBAAgB,GAAG,CAACQ,UAAUC;IACzC;IAMA,qBAAwBA,EAAoB,EAAc;QACtD,OAAO,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAACA;IAC1D;IAEA,yBAAkC;QAC9B,OAAO,IAAI,CAAC,oBAAoB,CAAC,sBAAsB;IAC3D;IAMA,MAAM,cACFC,IAAY,EACe;QAC3B,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAC5B,OAAO;YAAE,MAAM;QAAI;QAGvB,MAAMC,cAAc,MAAM,IAAI,CAAC,eAAe;QAG9C,MAAMC,aAAaD,YAAY,IAAI,CAACE,CAAAA,IAAKA,EAAE,IAAI,KAAKH;QACpD,IAAIE,YACA,OAAOA;QAIX,MAAME,eAAeH,YAAY,IAAI,CAACE,CAAAA,IAAKE,UAAUL,MAAMG,EAAE,IAAI;QACjE,IAAIC,cACA,OAAOA;QAGX,OAAO;IACX;IAEA,MAAM,eACFJ,IAAY,EACU;QACtB,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAC5B,OAAO;YAAC;gBAAE,MAAM;YAAI;SAAE;QAG1B,MAAMC,cAAc,MAAM,IAAI,CAAC,eAAe;QAE9C,OAAOA,YAAY,MAAM,CAACE,CAAAA;YACtB,IAAIA,EAAE,IAAI,KAAKH,MACX,OAAO;YAEX,OAAOK,UAAUL,MAAMG,EAAE,IAAI;QACjC;IACJ;IAEA,MAAM,kBAAiD;QACnD,MAAMF,cAAc,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW;QAEpF,OAAO,IAAI,CAAC,cAAc,CAACA;IAC/B;IAEA,MAAM,gBAAkC;QACpC,MAAMA,cAAc,MAAM,IAAI,CAAC,eAAe;QAC9C,OAAOA,YAAY,IAAI,CAACE,CAAAA,IAAKA,AAAW,QAAXA,EAAE,IAAI;IACvC;IAMQ,eAAeF,WAAiC,EAAwB;QAC5E,MAAMK,cAAc,IAAI,CAAC,UAAU,CAAC,UAAU;QAC9C,MAAMC,eAAe,IAAI,CAAC,UAAU,CAAC,WAAW;QAEhD,IAAID,aAEA,OAAO;eACAL;YACH;gBACI,MAAM;gBACN,OAAOM;YACX;SACH;QAIL,OAAOC,kCAAkCP;IAC7C;AACJ;AAEO,MAAMQ,kCAAkBC,qBAAqB;IAChD,aAAaC;IACb,gBAAgBnB;IAChB,cAAc;QAACoB;QAAsBC;KAAW;AACpD"}

package/features/security/IdentityContext/abstractions.d.ts

@@ -11,6 +11,7 @@ export interface IIdentityContext {
     withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;
     isAuthorizationEnabled(): boolean;
 }
+/** Provides access to the current identity and its permissions. */
 export declare const IdentityContext: import("@webiny/di").Abstraction<IIdentityContext>;
 export declare namespace IdentityContext {
     type Interface = IIdentityContext;

package/features/security/IdentityContext/abstractions.js

@@ -1,4 +1,5 @@
 import { createAbstraction } from "@webiny/feature/api";
-export const IdentityContext = createAbstraction("IdentityContext");
+const IdentityContext = createAbstraction("IdentityContext");
+export { IdentityContext };
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/IdentityContext/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","IdentityContext"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Identity } from \"./Identity.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\n\nexport interface IIdentityContext {\n    // Identity methods\n    getIdentity(): Identity;\n    setIdentity(identity: Identity | undefined): void;\n    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T>;\n\n    // Permission methods\n    getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission | null>;\n\n    getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission[]>;\n\n    listPermissions(): Promise<SecurityPermission[]>;\n\n    hasFullAccess(): Promise<boolean>;\n\n    // Authorization context methods\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;\n    isAuthorizationEnabled(): boolean;\n}\n\nexport const IdentityContext = createAbstraction<IIdentityContext>(\"IdentityContext\");\n\nexport namespace IdentityContext {\n    export type Interface = IIdentityContext;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AA4BvD,OAAO,MAAMC,eAAe,GAAGD,iBAAiB,CAAmB,iBAAiB,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/IdentityContext/abstractions.js","sources":["../../../../src/features/security/IdentityContext/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Identity } from \"./Identity.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\n\nexport interface IIdentityContext {\n    // Identity methods\n    getIdentity(): Identity;\n    setIdentity(identity: Identity | undefined): void;\n    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T>;\n\n    // Permission methods\n    getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission | null>;\n\n    getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission[]>;\n\n    listPermissions(): Promise<SecurityPermission[]>;\n\n    hasFullAccess(): Promise<boolean>;\n\n    // Authorization context methods\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;\n    isAuthorizationEnabled(): boolean;\n}\n\n/** Provides access to the current identity and its permissions. */\nexport const IdentityContext = createAbstraction<IIdentityContext>(\"IdentityContext\");\n\nexport namespace IdentityContext {\n    export type Interface = IIdentityContext;\n}\n"],"names":["IdentityContext","createAbstraction"],"mappings":";AA6BO,MAAMA,kBAAkBC,kBAAoC"}

package/features/security/IdentityContext/feature.d.ts

@@ -1 +1,4 @@
-export declare const IdentityContextFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;
+export declare const IdentityContextFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/security/IdentityContext/feature.js

@@ -1,10 +1,11 @@
 import { createFeature } from "@webiny/feature/api";
 import { IdentityContext } from "./IdentityContext.js";
-export const IdentityContextFeature = createFeature({
-  name: "IdentityContext",
-  register(container) {
-    container.register(IdentityContext).inSingletonScope();
-  }
+const IdentityContextFeature = createFeature({
+    name: "IdentityContext",
+    register (container) {
+        container.register(IdentityContext).inSingletonScope();
+    }
 });
+export { IdentityContextFeature };
 
 //# sourceMappingURL=feature.js.map

package/features/security/IdentityContext/feature.js.map

@@ -1 +1 @@
-{"version":3,"names":["createFeature","IdentityContext","IdentityContextFeature","name","register","container","inSingletonScope"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { IdentityContext } from \"./IdentityContext.js\";\n\nexport const IdentityContextFeature = createFeature({\n    name: \"IdentityContext\",\n    register(container) {\n        container.register(IdentityContext).inSingletonScope();\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,eAAe;AAExB,OAAO,MAAMC,sBAAsB,GAAGF,aAAa,CAAC;EAChDG,IAAI,EAAE,iBAAiB;EACvBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,eAAe,CAAC,CAACK,gBAAgB,CAAC,CAAC;EAC1D;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/IdentityContext/feature.js","sources":["../../../../src/features/security/IdentityContext/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { IdentityContext } from \"./IdentityContext.js\";\n\nexport const IdentityContextFeature = createFeature({\n    name: \"IdentityContext\",\n    register(container) {\n        container.register(IdentityContext).inSingletonScope();\n    }\n});\n"],"names":["IdentityContextFeature","createFeature","container","IdentityContext"],"mappings":";;AAGO,MAAMA,yBAAyBC,cAAc;IAChD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC,iBAAiB,gBAAgB;IACxD;AACJ"}

package/features/security/IdentityContext/index.js

@@ -1,8 +1,5 @@
 export { IdentityContextFeature } from "./feature.js";
 export { IdentityContext } from "./abstractions.js";
-// Export Identity classes
 export { Identity } from "./Identity.js";
 export { AuthenticatedIdentity } from "./AuthenticatedIdentity.js";
 export { AnonymousIdentity } from "./AnonymousIdentity.js";
-
-//# sourceMappingURL=index.js.map

package/features/security/SecurityFeature.d.ts

@@ -1,3 +1,4 @@
+import type { Container } from "@webiny/di";
 import type { SecurityStorageOperations as ISecurityStorageOperations } from "../../types/security.js";
 /**
  * Setup all security features in the DI container.
@@ -6,4 +7,7 @@ import type { SecurityStorageOperations as ISecurityStorageOperations } from "..
  * @param container - DI container instance
  * @param storageOperations - Storage operations implementation
  */
-export declare const SecurityFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<ISecurityStorageOperations>;
+export declare const SecurityFeature: {
+    name: string;
+    register(container: Container, context: ISecurityStorageOperations): void;
+};

package/features/security/SecurityFeature.js

@@ -7,27 +7,19 @@ import { IdentityContextFeature } from "./IdentityContext/index.js";
 import { ApiKeysFeature } from "./apiKeys/feature.js";
 import { TeamsFeature } from "./teams/feature.js";
 import { RolesFeature } from "./roles/feature.js";
-
-/**
- * Setup all security features in the DI container.
- * This is the main entry point for registering all security-related features.
- *
- * @param container - DI container instance
- * @param storageOperations - Storage operations implementation
- */
-export const SecurityFeature = createFeature({
-  name: "SecurityFeature",
-  register(container, storageOperations) {
-    // Register storage operations abstraction (singleton)
-    container.registerInstance(SecurityStorageOperations, storageOperations);
-    AuthorizationContextFeature.register(container);
-    AuthenticationContextFeature.register(container);
-    IdentityContextFeature.register(container);
-    ApiKeysFeature.register(container);
-    RolesFeature.register(container);
-    TeamsFeature.register(container);
-    GroupsTeamsAuthorizerFeature.register(container);
-  }
+const SecurityFeature = createFeature({
+    name: "SecurityFeature",
+    register (container, storageOperations) {
+        container.registerInstance(SecurityStorageOperations, storageOperations);
+        AuthorizationContextFeature.register(container);
+        AuthenticationContextFeature.register(container);
+        IdentityContextFeature.register(container);
+        ApiKeysFeature.register(container);
+        RolesFeature.register(container);
+        TeamsFeature.register(container);
+        GroupsTeamsAuthorizerFeature.register(container);
+    }
 });
+export { SecurityFeature };
 
 //# sourceMappingURL=SecurityFeature.js.map