@webiny/api-core 0.0.0-unstable.81ae05e56b → 0.0.0-unstable.a4f3e4ea8b

package/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.js

@@ -5,76 +5,72 @@ import { TeamsRepository } from "../../teams/shared/abstractions.js";
 import { getPermissionsFromRoles } from "../../utils/getPermissionsFromRoles.js";
 import { AdminUsersRepository } from "../../../users/shared/abstractions.js";
 class GetPermissionsFromGroupsAndTeamsImpl {
-  constructor(wcpContext, usersRepository, rolesRepository, teamsRepository) {
-    this.wcpContext = wcpContext;
-    this.usersRepository = usersRepository;
-    this.rolesRepository = rolesRepository;
-    this.teamsRepository = teamsRepository;
-  }
-  async getPermissions(identity) {
-    const userResult = await this.usersRepository.get({
-      id: identity.id
-    });
-    if (userResult.isFail()) {
-      return null;
+    constructor(wcpContext, usersRepository, rolesRepository, teamsRepository){
+        this.wcpContext = wcpContext;
+        this.usersRepository = usersRepository;
+        this.rolesRepository = rolesRepository;
+        this.teamsRepository = teamsRepository;
     }
-    const user = userResult.value;
-
-    // Load roles that are associated with the current identity. Also load roles
-    // that are assigned via one or more teams (if the Teams feature is enabled).
-    const roleIds = [];
-    const teamIds = [];
-    roleIds.push(...(user.roles ?? []));
-    const filteredRoleIds = roleIds.filter(Boolean);
-    const dedupedRoleIds = Array.from(new Set(filteredRoleIds));
-    const loadedRoles = [];
-    if (dedupedRoleIds.length > 0) {
-      const rolesResult = await this.rolesRepository.list({
-        where: {
-          id_in: dedupedRoleIds
-        }
-      });
-      const loadedRolesByIds = rolesResult.isOk() ? rolesResult.value : [];
-      loadedRoles.push(...loadedRolesByIds);
-    }
-    if (this.wcpContext.canUseTeams()) {
-      teamIds.push(...(user.teams ?? []));
-      const filteredTeamIds = teamIds.filter(Boolean);
-      const dedupedTeamIds = Array.from(new Set(filteredTeamIds));
-      if (dedupedTeamIds.length > 0) {
-        const teamsResult = await this.teamsRepository.list({
-          where: {
-            id_in: dedupedTeamIds
-          }
+    async getPermissions(identity) {
+        const userResult = await this.usersRepository.get({
+            id: identity.id
         });
-        const loadedTeams = teamsResult.isOk() ? teamsResult.value : [];
-
-        // Upon returning teams, we're filtering out team roles that were already loaded.
-        // Also note that `team.roles` contains role IDs, not slugs.
-        const roleIdsFromTeams = loadedTeams.flatMap(team => team.roles).filter(roleId => {
-          const alreadyLoaded = loadedRoles.find(role => role.id === roleId);
-          return !alreadyLoaded;
-        });
-        if (roleIdsFromTeams.length > 0) {
-          const moreRolesResult = await this.rolesRepository.list({
-            where: {
-              id_in: roleIdsFromTeams
+        if (userResult.isFail()) return null;
+        const user = userResult.value;
+        const roleIds = [];
+        const teamIds = [];
+        roleIds.push(...user.roles ?? []);
+        const filteredRoleIds = roleIds.filter(Boolean);
+        const dedupedRoleIds = Array.from(new Set(filteredRoleIds));
+        const loadedRoles = [];
+        if (dedupedRoleIds.length > 0) {
+            const rolesResult = await this.rolesRepository.list({
+                where: {
+                    id_in: dedupedRoleIds
+                }
+            });
+            const loadedRolesByIds = rolesResult.isOk() ? rolesResult.value : [];
+            loadedRoles.push(...loadedRolesByIds);
+        }
+        if (this.wcpContext.canUseTeams()) {
+            teamIds.push(...user.teams ?? []);
+            const filteredTeamIds = teamIds.filter(Boolean);
+            const dedupedTeamIds = Array.from(new Set(filteredTeamIds));
+            if (dedupedTeamIds.length > 0) {
+                const teamsResult = await this.teamsRepository.list({
+                    where: {
+                        id_in: dedupedTeamIds
+                    }
+                });
+                const loadedTeams = teamsResult.isOk() ? teamsResult.value : [];
+                const roleIdsFromTeams = loadedTeams.flatMap((team)=>team.roles).filter((roleId)=>{
+                    const alreadyLoaded = loadedRoles.find((role)=>role.id === roleId);
+                    return !alreadyLoaded;
+                });
+                if (roleIdsFromTeams.length > 0) {
+                    const moreRolesResult = await this.rolesRepository.list({
+                        where: {
+                            id_in: roleIdsFromTeams
+                        }
+                    });
+                    const rolesFromTeams = moreRolesResult.isOk() ? moreRolesResult.value : [];
+                    loadedRoles.push(...rolesFromTeams);
+                }
             }
-          });
-          const rolesFromTeams = moreRolesResult.isOk() ? moreRolesResult.value : [];
-          loadedRoles.push(...rolesFromTeams);
         }
-      }
-    }
-    if (loadedRoles.length > 0) {
-      return getPermissionsFromRoles(loadedRoles);
+        if (loadedRoles.length > 0) return getPermissionsFromRoles(loadedRoles);
+        return null;
     }
-    return null;
-  }
 }
-export const GetPermissionsFromIdentity = PermissionsProcessor.createImplementation({
-  implementation: GetPermissionsFromGroupsAndTeamsImpl,
-  dependencies: [WcpContext, AdminUsersRepository, RolesRepository, TeamsRepository]
+const GetPermissionsFromIdentity = PermissionsProcessor.createImplementation({
+    implementation: GetPermissionsFromGroupsAndTeamsImpl,
+    dependencies: [
+        WcpContext,
+        AdminUsersRepository,
+        RolesRepository,
+        TeamsRepository
+    ]
 });
+export { GetPermissionsFromIdentity };
 
 //# sourceMappingURL=GetPermissionsFromIdentity.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.js.map

@@ -1 +1 @@
-{"version":3,"names":["WcpContext","PermissionsProcessor","RolesRepository","TeamsRepository","getPermissionsFromRoles","AdminUsersRepository","GetPermissionsFromGroupsAndTeamsImpl","constructor","wcpContext","usersRepository","rolesRepository","teamsRepository","getPermissions","identity","userResult","get","id","isFail","user","value","roleIds","teamIds","push","roles","filteredRoleIds","filter","Boolean","dedupedRoleIds","Array","from","Set","loadedRoles","length","rolesResult","list","where","id_in","loadedRolesByIds","isOk","canUseTeams","teams","filteredTeamIds","dedupedTeamIds","teamsResult","loadedTeams","roleIdsFromTeams","flatMap","team","roleId","alreadyLoaded","find","role","moreRolesResult","rolesFromTeams","GetPermissionsFromIdentity","createImplementation","implementation","dependencies"],"sources":["GetPermissionsFromIdentity.ts"],"sourcesContent":["import { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\nimport type { SecurityRole } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\nimport { PermissionsProcessor } from \"./abstractions.js\";\nimport { RolesRepository } from \"~/features/security/roles/shared/abstractions.js\";\nimport { TeamsRepository } from \"~/features/security/teams/shared/abstractions.js\";\nimport { getPermissionsFromRoles } from \"~/features/security/utils/getPermissionsFromRoles.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\n\nexport type RoleId = string | undefined;\nexport type TeamId = string | undefined;\n\nclass GetPermissionsFromGroupsAndTeamsImpl implements PermissionsProcessor.Interface {\n    constructor(\n        private wcpContext: WcpContext.Interface,\n        private usersRepository: AdminUsersRepository.Interface,\n        private rolesRepository: RolesRepository.Interface,\n        private teamsRepository: TeamsRepository.Interface\n    ) {}\n\n    async getPermissions(identity: Identity) {\n        const userResult = await this.usersRepository.get({ id: identity.id });\n        if (userResult.isFail()) {\n            return null;\n        }\n\n        const user = userResult.value;\n\n        // Load roles that are associated with the current identity. Also load roles\n        // that are assigned via one or more teams (if the Teams feature is enabled).\n        const roleIds: RoleId[] = [];\n        const teamIds: TeamId[] = [];\n\n        roleIds.push(...(user.roles ?? []));\n\n        const filteredRoleIds = roleIds.filter(Boolean) as string[];\n        const dedupedRoleIds = Array.from(new Set(filteredRoleIds));\n\n        const loadedRoles: SecurityRole[] = [];\n\n        if (dedupedRoleIds.length > 0) {\n            const rolesResult = await this.rolesRepository.list({\n                where: { id_in: dedupedRoleIds }\n            });\n\n            const loadedRolesByIds = rolesResult.isOk() ? rolesResult.value : [];\n            loadedRoles.push(...loadedRolesByIds);\n        }\n\n        if (this.wcpContext.canUseTeams()) {\n            teamIds.push(...(user.teams ?? []));\n\n            const filteredTeamIds = teamIds.filter(Boolean) as string[];\n            const dedupedTeamIds = Array.from(new Set(filteredTeamIds));\n\n            if (dedupedTeamIds.length > 0) {\n                const teamsResult = await this.teamsRepository.list({\n                    where: { id_in: dedupedTeamIds }\n                });\n\n                const loadedTeams = teamsResult.isOk() ? teamsResult.value : [];\n\n                // Upon returning teams, we're filtering out team roles that were already loaded.\n                // Also note that `team.roles` contains role IDs, not slugs.\n                const roleIdsFromTeams = loadedTeams\n                    .flatMap(team => team.roles)\n                    .filter(roleId => {\n                        const alreadyLoaded = loadedRoles.find(role => role.id === roleId);\n                        return !alreadyLoaded;\n                    });\n\n                if (roleIdsFromTeams.length > 0) {\n                    const moreRolesResult = await this.rolesRepository.list({\n                        where: { id_in: roleIdsFromTeams }\n                    });\n\n                    const rolesFromTeams = moreRolesResult.isOk() ? moreRolesResult.value : [];\n                    loadedRoles.push(...rolesFromTeams);\n                }\n            }\n        }\n\n        if (loadedRoles.length > 0) {\n            return getPermissionsFromRoles(loadedRoles);\n        }\n\n        return null;\n    }\n}\n\nexport const GetPermissionsFromIdentity = PermissionsProcessor.createImplementation({\n    implementation: GetPermissionsFromGroupsAndTeamsImpl,\n    dependencies: [WcpContext, AdminUsersRepository, RolesRepository, TeamsRepository]\n});\n"],"mappings":"AAAA,SAASA,UAAU;AAGnB,SAASC,oBAAoB;AAC7B,SAASC,eAAe;AACxB,SAASC,eAAe;AACxB,SAASC,uBAAuB;AAChC,SAASC,oBAAoB;AAK7B,MAAMC,oCAAoC,CAA2C;EACjFC,WAAWA,CACCC,UAAgC,EAChCC,eAA+C,EAC/CC,eAA0C,EAC1CC,eAA0C,EACpD;IAAA,KAJUH,UAAgC,GAAhCA,UAAgC;IAAA,KAChCC,eAA+C,GAA/CA,eAA+C;IAAA,KAC/CC,eAA0C,GAA1CA,eAA0C;IAAA,KAC1CC,eAA0C,GAA1CA,eAA0C;EACnD;EAEH,MAAMC,cAAcA,CAACC,QAAkB,EAAE;IACrC,MAAMC,UAAU,GAAG,MAAM,IAAI,CAACL,eAAe,CAACM,GAAG,CAAC;MAAEC,EAAE,EAAEH,QAAQ,CAACG;IAAG,CAAC,CAAC;IACtE,IAAIF,UAAU,CAACG,MAAM,CAAC,CAAC,EAAE;MACrB,OAAO,IAAI;IACf;IAEA,MAAMC,IAAI,GAAGJ,UAAU,CAACK,KAAK;;IAE7B;IACA;IACA,MAAMC,OAAiB,GAAG,EAAE;IAC5B,MAAMC,OAAiB,GAAG,EAAE;IAE5BD,OAAO,CAACE,IAAI,CAAC,IAAIJ,IAAI,CAACK,KAAK,IAAI,EAAE,CAAC,CAAC;IAEnC,MAAMC,eAAe,GAAGJ,OAAO,CAACK,MAAM,CAACC,OAAO,CAAa;IAC3D,MAAMC,cAAc,GAAGC,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAACN,eAAe,CAAC,CAAC;IAE3D,MAAMO,WAA2B,GAAG,EAAE;IAEtC,IAAIJ,cAAc,CAACK,MAAM,GAAG,CAAC,EAAE;MAC3B,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACvB,eAAe,CAACwB,IAAI,CAAC;QAChDC,KAAK,EAAE;UAAEC,KAAK,EAAET;QAAe;MACnC,CAAC,CAAC;MAEF,MAAMU,gBAAgB,GAAGJ,WAAW,CAACK,IAAI,CAAC,CAAC,GAAGL,WAAW,CAACd,KAAK,GAAG,EAAE;MACpEY,WAAW,CAACT,IAAI,CAAC,GAAGe,gBAAgB,CAAC;IACzC;IAEA,IAAI,IAAI,CAAC7B,UAAU,CAAC+B,WAAW,CAAC,CAAC,EAAE;MAC/BlB,OAAO,CAACC,IAAI,CAAC,IAAIJ,IAAI,CAACsB,KAAK,IAAI,EAAE,CAAC,CAAC;MAEnC,MAAMC,eAAe,GAAGpB,OAAO,CAACI,MAAM,CAACC,OAAO,CAAa;MAC3D,MAAMgB,cAAc,GAAGd,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAACW,eAAe,CAAC,CAAC;MAE3D,IAAIC,cAAc,CAACV,MAAM,GAAG,CAAC,EAAE;QAC3B,MAAMW,WAAW,GAAG,MAAM,IAAI,CAAChC,eAAe,CAACuB,IAAI,CAAC;UAChDC,KAAK,EAAE;YAAEC,KAAK,EAAEM;UAAe;QACnC,CAAC,CAAC;QAEF,MAAME,WAAW,GAAGD,WAAW,CAACL,IAAI,CAAC,CAAC,GAAGK,WAAW,CAACxB,KAAK,GAAG,EAAE;;QAE/D;QACA;QACA,MAAM0B,gBAAgB,GAAGD,WAAW,CAC/BE,OAAO,CAACC,IAAI,IAAIA,IAAI,CAACxB,KAAK,CAAC,CAC3BE,MAAM,CAACuB,MAAM,IAAI;UACd,MAAMC,aAAa,GAAGlB,WAAW,CAACmB,IAAI,CAACC,IAAI,IAAIA,IAAI,CAACnC,EAAE,KAAKgC,MAAM,CAAC;UAClE,OAAO,CAACC,aAAa;QACzB,CAAC,CAAC;QAEN,IAAIJ,gBAAgB,CAACb,MAAM,GAAG,CAAC,EAAE;UAC7B,MAAMoB,eAAe,GAAG,MAAM,IAAI,CAAC1C,eAAe,CAACwB,IAAI,CAAC;YACpDC,KAAK,EAAE;cAAEC,KAAK,EAAES;YAAiB;UACrC,CAAC,CAAC;UAEF,MAAMQ,cAAc,GAAGD,eAAe,CAACd,IAAI,CAAC,CAAC,GAAGc,eAAe,CAACjC,KAAK,GAAG,EAAE;UAC1EY,WAAW,CAACT,IAAI,CAAC,GAAG+B,cAAc,CAAC;QACvC;MACJ;IACJ;IAEA,IAAItB,WAAW,CAACC,MAAM,GAAG,CAAC,EAAE;MACxB,OAAO5B,uBAAuB,CAAC2B,WAAW,CAAC;IAC/C;IAEA,OAAO,IAAI;EACf;AACJ;AAEA,OAAO,MAAMuB,0BAA0B,GAAGrD,oBAAoB,CAACsD,oBAAoB,CAAC;EAChFC,cAAc,EAAElD,oCAAoC;EACpDmD,YAAY,EAAE,CAACzD,UAAU,EAAEK,oBAAoB,EAAEH,eAAe,EAAEC,eAAe;AACrF,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.js","sources":["../../../../../src/features/security/authorization/GroupsTeamsAuthorizer/GetPermissionsFromIdentity.ts"],"sourcesContent":["import { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\nimport type { SecurityRole } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\nimport { PermissionsProcessor } from \"./abstractions.js\";\nimport { RolesRepository } from \"~/features/security/roles/shared/abstractions.js\";\nimport { TeamsRepository } from \"~/features/security/teams/shared/abstractions.js\";\nimport { getPermissionsFromRoles } from \"~/features/security/utils/getPermissionsFromRoles.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\n\nexport type RoleId = string | undefined;\nexport type TeamId = string | undefined;\n\nclass GetPermissionsFromGroupsAndTeamsImpl implements PermissionsProcessor.Interface {\n    constructor(\n        private wcpContext: WcpContext.Interface,\n        private usersRepository: AdminUsersRepository.Interface,\n        private rolesRepository: RolesRepository.Interface,\n        private teamsRepository: TeamsRepository.Interface\n    ) {}\n\n    async getPermissions(identity: Identity) {\n        const userResult = await this.usersRepository.get({ id: identity.id });\n        if (userResult.isFail()) {\n            return null;\n        }\n\n        const user = userResult.value;\n\n        // Load roles that are associated with the current identity. Also load roles\n        // that are assigned via one or more teams (if the Teams feature is enabled).\n        const roleIds: RoleId[] = [];\n        const teamIds: TeamId[] = [];\n\n        roleIds.push(...(user.roles ?? []));\n\n        const filteredRoleIds = roleIds.filter(Boolean) as string[];\n        const dedupedRoleIds = Array.from(new Set(filteredRoleIds));\n\n        const loadedRoles: SecurityRole[] = [];\n\n        if (dedupedRoleIds.length > 0) {\n            const rolesResult = await this.rolesRepository.list({\n                where: { id_in: dedupedRoleIds }\n            });\n\n            const loadedRolesByIds = rolesResult.isOk() ? rolesResult.value : [];\n            loadedRoles.push(...loadedRolesByIds);\n        }\n\n        if (this.wcpContext.canUseTeams()) {\n            teamIds.push(...(user.teams ?? []));\n\n            const filteredTeamIds = teamIds.filter(Boolean) as string[];\n            const dedupedTeamIds = Array.from(new Set(filteredTeamIds));\n\n            if (dedupedTeamIds.length > 0) {\n                const teamsResult = await this.teamsRepository.list({\n                    where: { id_in: dedupedTeamIds }\n                });\n\n                const loadedTeams = teamsResult.isOk() ? teamsResult.value : [];\n\n                // Upon returning teams, we're filtering out team roles that were already loaded.\n                // Also note that `team.roles` contains role IDs, not slugs.\n                const roleIdsFromTeams = loadedTeams\n                    .flatMap(team => team.roles)\n                    .filter(roleId => {\n                        const alreadyLoaded = loadedRoles.find(role => role.id === roleId);\n                        return !alreadyLoaded;\n                    });\n\n                if (roleIdsFromTeams.length > 0) {\n                    const moreRolesResult = await this.rolesRepository.list({\n                        where: { id_in: roleIdsFromTeams }\n                    });\n\n                    const rolesFromTeams = moreRolesResult.isOk() ? moreRolesResult.value : [];\n                    loadedRoles.push(...rolesFromTeams);\n                }\n            }\n        }\n\n        if (loadedRoles.length > 0) {\n            return getPermissionsFromRoles(loadedRoles);\n        }\n\n        return null;\n    }\n}\n\nexport const GetPermissionsFromIdentity = PermissionsProcessor.createImplementation({\n    implementation: GetPermissionsFromGroupsAndTeamsImpl,\n    dependencies: [WcpContext, AdminUsersRepository, RolesRepository, TeamsRepository]\n});\n"],"names":["GetPermissionsFromGroupsAndTeamsImpl","wcpContext","usersRepository","rolesRepository","teamsRepository","identity","userResult","user","roleIds","teamIds","filteredRoleIds","Boolean","dedupedRoleIds","Array","Set","loadedRoles","rolesResult","loadedRolesByIds","filteredTeamIds","dedupedTeamIds","teamsResult","loadedTeams","roleIdsFromTeams","team","roleId","alreadyLoaded","role","moreRolesResult","rolesFromTeams","getPermissionsFromRoles","GetPermissionsFromIdentity","PermissionsProcessor","WcpContext","AdminUsersRepository","RolesRepository","TeamsRepository"],"mappings":";;;;;;AAYA,MAAMA;IACF,YACYC,UAAgC,EAChCC,eAA+C,EAC/CC,eAA0C,EAC1CC,eAA0C,CACpD;aAJUH,UAAU,GAAVA;aACAC,eAAe,GAAfA;aACAC,eAAe,GAAfA;aACAC,eAAe,GAAfA;IACT;IAEH,MAAM,eAAeC,QAAkB,EAAE;QACrC,MAAMC,aAAa,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,IAAID,SAAS,EAAE;QAAC;QACpE,IAAIC,WAAW,MAAM,IACjB,OAAO;QAGX,MAAMC,OAAOD,WAAW,KAAK;QAI7B,MAAME,UAAoB,EAAE;QAC5B,MAAMC,UAAoB,EAAE;QAE5BD,QAAQ,IAAI,IAAKD,KAAK,KAAK,IAAI,EAAE;QAEjC,MAAMG,kBAAkBF,QAAQ,MAAM,CAACG;QACvC,MAAMC,iBAAiBC,MAAM,IAAI,CAAC,IAAIC,IAAIJ;QAE1C,MAAMK,cAA8B,EAAE;QAEtC,IAAIH,eAAe,MAAM,GAAG,GAAG;YAC3B,MAAMI,cAAc,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;gBAChD,OAAO;oBAAE,OAAOJ;gBAAe;YACnC;YAEA,MAAMK,mBAAmBD,YAAY,IAAI,KAAKA,YAAY,KAAK,GAAG,EAAE;YACpED,YAAY,IAAI,IAAIE;QACxB;QAEA,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI;YAC/BR,QAAQ,IAAI,IAAKF,KAAK,KAAK,IAAI,EAAE;YAEjC,MAAMW,kBAAkBT,QAAQ,MAAM,CAACE;YACvC,MAAMQ,iBAAiBN,MAAM,IAAI,CAAC,IAAIC,IAAII;YAE1C,IAAIC,eAAe,MAAM,GAAG,GAAG;gBAC3B,MAAMC,cAAc,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;oBAChD,OAAO;wBAAE,OAAOD;oBAAe;gBACnC;gBAEA,MAAME,cAAcD,YAAY,IAAI,KAAKA,YAAY,KAAK,GAAG,EAAE;gBAI/D,MAAME,mBAAmBD,YACpB,OAAO,CAACE,CAAAA,OAAQA,KAAK,KAAK,EAC1B,MAAM,CAACC,CAAAA;oBACJ,MAAMC,gBAAgBV,YAAY,IAAI,CAACW,CAAAA,OAAQA,KAAK,EAAE,KAAKF;oBAC3D,OAAO,CAACC;gBACZ;gBAEJ,IAAIH,iBAAiB,MAAM,GAAG,GAAG;oBAC7B,MAAMK,kBAAkB,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;wBACpD,OAAO;4BAAE,OAAOL;wBAAiB;oBACrC;oBAEA,MAAMM,iBAAiBD,gBAAgB,IAAI,KAAKA,gBAAgB,KAAK,GAAG,EAAE;oBAC1EZ,YAAY,IAAI,IAAIa;gBACxB;YACJ;QACJ;QAEA,IAAIb,YAAY,MAAM,GAAG,GACrB,OAAOc,wBAAwBd;QAGnC,OAAO;IACX;AACJ;AAEO,MAAMe,6BAA6BC,qBAAqB,oBAAoB,CAAC;IAChF,gBAAgB/B;IAChB,cAAc;QAACgC;QAAYC;QAAsBC;QAAiBC;KAAgB;AACtF"}

package/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.js

@@ -3,49 +3,35 @@ import { TenantContext } from "../../../tenancy/TenantContext/index.js";
 import { GetTenantByIdUseCase } from "../../../tenancy/GetTenantById/index.js";
 import { PermissionsProcessor } from "./abstractions.js";
 class GroupsTeamsAuthorizerImpl {
-  constructor(tenantContext, getTenantByIdUseCase, permissionsProcessor) {
-    this.tenantContext = tenantContext;
-    this.getTenantByIdUseCase = getTenantByIdUseCase;
-    this.permissionsProcessor = permissionsProcessor;
-  }
-  async authorize(identity) {
-    const tenant = this.tenantContext.getTenant();
-    if (identity.isAnonymous() || identity.type !== "admin") {
-      return null;
+    constructor(tenantContext, getTenantByIdUseCase, permissionsProcessor){
+        this.tenantContext = tenantContext;
+        this.getTenantByIdUseCase = getTenantByIdUseCase;
+        this.permissionsProcessor = permissionsProcessor;
     }
-    if (!identity.context.canAccessTenant) {
-      return null;
+    async authorize(identity) {
+        const tenant = this.tenantContext.getTenant();
+        if (identity.isAnonymous() || "admin" !== identity.type) return null;
+        if (!identity.context.canAccessTenant) return null;
+        const currentTenantPermissions = await this.permissionsProcessor.getPermissions(identity);
+        if (Array.isArray(currentTenantPermissions)) return currentTenantPermissions;
+        const parentTenantId = tenant.parent;
+        if (!parentTenantId) return null;
+        const result = await this.getTenantByIdUseCase.execute(parentTenantId);
+        if (result.isFail()) return null;
+        const parentTenant = result.value;
+        const parentTenantPermissions = await this.tenantContext.withTenant(parentTenant, ()=>this.permissionsProcessor.getPermissions(identity));
+        if (Array.isArray(parentTenantPermissions)) return parentTenantPermissions;
+        return null;
     }
-    const currentTenantPermissions = await this.permissionsProcessor.getPermissions(identity);
-    if (Array.isArray(currentTenantPermissions)) {
-      return currentTenantPermissions;
-    }
-
-    // If no security roles were found, it could be due to an identity accessing a sub-tenant. In this case,
-    // let's try loading permissions from the parent tenant. Note that this will work well for flat tenant
-    // hierarchy where there's a `root` tenant and 1 level of sibling sub-tenants. For multi-level hierarchy,
-    // the best approach is to code a plugin with the desired permissions-fetching logic.
-    const parentTenantId = tenant.parent;
-    if (!parentTenantId) {
-      return null;
-    }
-    const result = await this.getTenantByIdUseCase.execute(parentTenantId);
-    if (result.isFail()) {
-      return null;
-    }
-    const parentTenant = result.value;
-    const parentTenantPermissions = await this.tenantContext.withTenant(parentTenant, () => {
-      return this.permissionsProcessor.getPermissions(identity);
-    });
-    if (Array.isArray(parentTenantPermissions)) {
-      return parentTenantPermissions;
-    }
-    return null;
-  }
 }
-export const RolesTeamsAuthorizer = Authorizer.createImplementation({
-  implementation: GroupsTeamsAuthorizerImpl,
-  dependencies: [TenantContext, GetTenantByIdUseCase, PermissionsProcessor]
+const RolesTeamsAuthorizer = Authorizer.createImplementation({
+    implementation: GroupsTeamsAuthorizerImpl,
+    dependencies: [
+        TenantContext,
+        GetTenantByIdUseCase,
+        PermissionsProcessor
+    ]
 });
+export { RolesTeamsAuthorizer };
 
 //# sourceMappingURL=RolesTeamsAuthorizer.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.js.map

@@ -1 +1 @@
-{"version":3,"names":["Authorizer","TenantContext","GetTenantByIdUseCase","PermissionsProcessor","GroupsTeamsAuthorizerImpl","constructor","tenantContext","getTenantByIdUseCase","permissionsProcessor","authorize","identity","tenant","getTenant","isAnonymous","type","context","canAccessTenant","currentTenantPermissions","getPermissions","Array","isArray","parentTenantId","parent","result","execute","isFail","parentTenant","value","parentTenantPermissions","withTenant","RolesTeamsAuthorizer","createImplementation","implementation","dependencies"],"sources":["RolesTeamsAuthorizer.ts"],"sourcesContent":["import { Authorizer } from \"~/features/security/authorization/Authorizer/index.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { GetTenantByIdUseCase } from \"~/features/tenancy/GetTenantById/index.js\";\nimport { PermissionsProcessor } from \"./abstractions.js\";\n\nclass GroupsTeamsAuthorizerImpl implements Authorizer.Interface {\n    constructor(\n        private readonly tenantContext: TenantContext.Interface,\n        private readonly getTenantByIdUseCase: GetTenantByIdUseCase.Interface,\n        private readonly permissionsProcessor: PermissionsProcessor.Interface\n    ) {}\n\n    async authorize(identity: Identity): Promise<SecurityPermission[] | null> {\n        const tenant = this.tenantContext.getTenant();\n\n        if (identity.isAnonymous() || identity.type !== \"admin\") {\n            return null;\n        }\n\n        if (!identity.context.canAccessTenant) {\n            return null;\n        }\n\n        const currentTenantPermissions = await this.permissionsProcessor.getPermissions(identity);\n\n        if (Array.isArray(currentTenantPermissions)) {\n            return currentTenantPermissions;\n        }\n\n        // If no security roles were found, it could be due to an identity accessing a sub-tenant. In this case,\n        // let's try loading permissions from the parent tenant. Note that this will work well for flat tenant\n        // hierarchy where there's a `root` tenant and 1 level of sibling sub-tenants. For multi-level hierarchy,\n        // the best approach is to code a plugin with the desired permissions-fetching logic.\n        const parentTenantId = tenant.parent;\n        if (!parentTenantId) {\n            return null;\n        }\n\n        const result = await this.getTenantByIdUseCase.execute(parentTenantId);\n        if (result.isFail()) {\n            return null;\n        }\n\n        const parentTenant = result.value;\n\n        const parentTenantPermissions = await this.tenantContext.withTenant(parentTenant, () => {\n            return this.permissionsProcessor.getPermissions(identity);\n        });\n\n        if (Array.isArray(parentTenantPermissions)) {\n            return parentTenantPermissions;\n        }\n\n        return null;\n    }\n}\n\nexport const RolesTeamsAuthorizer = Authorizer.createImplementation({\n    implementation: GroupsTeamsAuthorizerImpl,\n    dependencies: [TenantContext, GetTenantByIdUseCase, PermissionsProcessor]\n});\n"],"mappings":"AAAA,SAASA,UAAU;AAGnB,SAASC,aAAa;AACtB,SAASC,oBAAoB;AAC7B,SAASC,oBAAoB;AAE7B,MAAMC,yBAAyB,CAAiC;EAC5DC,WAAWA,CACUC,aAAsC,EACtCC,oBAAoD,EACpDC,oBAAoD,EACvE;IAAA,KAHmBF,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,oBAAoD,GAApDA,oBAAoD;IAAA,KACpDC,oBAAoD,GAApDA,oBAAoD;EACtE;EAEH,MAAMC,SAASA,CAACC,QAAkB,EAAwC;IACtE,MAAMC,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;IAE7C,IAAIF,QAAQ,CAACG,WAAW,CAAC,CAAC,IAAIH,QAAQ,CAACI,IAAI,KAAK,OAAO,EAAE;MACrD,OAAO,IAAI;IACf;IAEA,IAAI,CAACJ,QAAQ,CAACK,OAAO,CAACC,eAAe,EAAE;MACnC,OAAO,IAAI;IACf;IAEA,MAAMC,wBAAwB,GAAG,MAAM,IAAI,CAACT,oBAAoB,CAACU,cAAc,CAACR,QAAQ,CAAC;IAEzF,IAAIS,KAAK,CAACC,OAAO,CAACH,wBAAwB,CAAC,EAAE;MACzC,OAAOA,wBAAwB;IACnC;;IAEA;IACA;IACA;IACA;IACA,MAAMI,cAAc,GAAGV,MAAM,CAACW,MAAM;IACpC,IAAI,CAACD,cAAc,EAAE;MACjB,OAAO,IAAI;IACf;IAEA,MAAME,MAAM,GAAG,MAAM,IAAI,CAAChB,oBAAoB,CAACiB,OAAO,CAACH,cAAc,CAAC;IACtE,IAAIE,MAAM,CAACE,MAAM,CAAC,CAAC,EAAE;MACjB,OAAO,IAAI;IACf;IAEA,MAAMC,YAAY,GAAGH,MAAM,CAACI,KAAK;IAEjC,MAAMC,uBAAuB,GAAG,MAAM,IAAI,CAACtB,aAAa,CAACuB,UAAU,CAACH,YAAY,EAAE,MAAM;MACpF,OAAO,IAAI,CAAClB,oBAAoB,CAACU,cAAc,CAACR,QAAQ,CAAC;IAC7D,CAAC,CAAC;IAEF,IAAIS,KAAK,CAACC,OAAO,CAACQ,uBAAuB,CAAC,EAAE;MACxC,OAAOA,uBAAuB;IAClC;IAEA,OAAO,IAAI;EACf;AACJ;AAEA,OAAO,MAAME,oBAAoB,GAAG9B,UAAU,CAAC+B,oBAAoB,CAAC;EAChEC,cAAc,EAAE5B,yBAAyB;EACzC6B,YAAY,EAAE,CAAChC,aAAa,EAAEC,oBAAoB,EAAEC,oBAAoB;AAC5E,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.js","sources":["../../../../../src/features/security/authorization/GroupsTeamsAuthorizer/RolesTeamsAuthorizer.ts"],"sourcesContent":["import { Authorizer } from \"~/features/security/authorization/Authorizer/index.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { GetTenantByIdUseCase } from \"~/features/tenancy/GetTenantById/index.js\";\nimport { PermissionsProcessor } from \"./abstractions.js\";\n\nclass GroupsTeamsAuthorizerImpl implements Authorizer.Interface {\n    constructor(\n        private readonly tenantContext: TenantContext.Interface,\n        private readonly getTenantByIdUseCase: GetTenantByIdUseCase.Interface,\n        private readonly permissionsProcessor: PermissionsProcessor.Interface\n    ) {}\n\n    async authorize(identity: Identity): Promise<SecurityPermission[] | null> {\n        const tenant = this.tenantContext.getTenant();\n\n        if (identity.isAnonymous() || identity.type !== \"admin\") {\n            return null;\n        }\n\n        if (!identity.context.canAccessTenant) {\n            return null;\n        }\n\n        const currentTenantPermissions = await this.permissionsProcessor.getPermissions(identity);\n\n        if (Array.isArray(currentTenantPermissions)) {\n            return currentTenantPermissions;\n        }\n\n        // If no security roles were found, it could be due to an identity accessing a sub-tenant. In this case,\n        // let's try loading permissions from the parent tenant. Note that this will work well for flat tenant\n        // hierarchy where there's a `root` tenant and 1 level of sibling sub-tenants. For multi-level hierarchy,\n        // the best approach is to code a plugin with the desired permissions-fetching logic.\n        const parentTenantId = tenant.parent;\n        if (!parentTenantId) {\n            return null;\n        }\n\n        const result = await this.getTenantByIdUseCase.execute(parentTenantId);\n        if (result.isFail()) {\n            return null;\n        }\n\n        const parentTenant = result.value;\n\n        const parentTenantPermissions = await this.tenantContext.withTenant(parentTenant, () => {\n            return this.permissionsProcessor.getPermissions(identity);\n        });\n\n        if (Array.isArray(parentTenantPermissions)) {\n            return parentTenantPermissions;\n        }\n\n        return null;\n    }\n}\n\nexport const RolesTeamsAuthorizer = Authorizer.createImplementation({\n    implementation: GroupsTeamsAuthorizerImpl,\n    dependencies: [TenantContext, GetTenantByIdUseCase, PermissionsProcessor]\n});\n"],"names":["GroupsTeamsAuthorizerImpl","tenantContext","getTenantByIdUseCase","permissionsProcessor","identity","tenant","currentTenantPermissions","Array","parentTenantId","result","parentTenant","parentTenantPermissions","RolesTeamsAuthorizer","Authorizer","TenantContext","GetTenantByIdUseCase","PermissionsProcessor"],"mappings":";;;;AAOA,MAAMA;IACF,YACqBC,aAAsC,EACtCC,oBAAoD,EACpDC,oBAAoD,CACvE;aAHmBF,aAAa,GAAbA;aACAC,oBAAoB,GAApBA;aACAC,oBAAoB,GAApBA;IAClB;IAEH,MAAM,UAAUC,QAAkB,EAAwC;QACtE,MAAMC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;QAE3C,IAAID,SAAS,WAAW,MAAMA,AAAkB,YAAlBA,SAAS,IAAI,EACvC,OAAO;QAGX,IAAI,CAACA,SAAS,OAAO,CAAC,eAAe,EACjC,OAAO;QAGX,MAAME,2BAA2B,MAAM,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAACF;QAEhF,IAAIG,MAAM,OAAO,CAACD,2BACd,OAAOA;QAOX,MAAME,iBAAiBH,OAAO,MAAM;QACpC,IAAI,CAACG,gBACD,OAAO;QAGX,MAAMC,SAAS,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAACD;QACvD,IAAIC,OAAO,MAAM,IACb,OAAO;QAGX,MAAMC,eAAeD,OAAO,KAAK;QAEjC,MAAME,0BAA0B,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAACD,cAAc,IACvE,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAACN;QAGpD,IAAIG,MAAM,OAAO,CAACI,0BACd,OAAOA;QAGX,OAAO;IACX;AACJ;AAEO,MAAMC,uBAAuBC,WAAW,oBAAoB,CAAC;IAChE,gBAAgBb;IAChB,cAAc;QAACc;QAAeC;QAAsBC;KAAqB;AAC7E"}

package/features/security/authorization/GroupsTeamsAuthorizer/abstractions.js

@@ -1,4 +1,5 @@
 import { createAbstraction } from "@webiny/feature/api";
-export const PermissionsProcessor = createAbstraction("PermissionsProcessor");
+const PermissionsProcessor = createAbstraction("PermissionsProcessor");
+export { PermissionsProcessor };
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","PermissionsProcessor"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface ITenantPermission extends SecurityPermission {\n    _src: string;\n}\n\nexport interface IPermissionsProcessor {\n    getPermissions(identity: Identity): Promise<ITenantPermission[] | null>;\n}\n\nexport const PermissionsProcessor =\n    createAbstraction<IPermissionsProcessor>(\"PermissionsProcessor\");\n\nexport namespace PermissionsProcessor {\n    export type Interface = IPermissionsProcessor;\n    export type Permissions = ITenantPermission[];\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAYvD,OAAO,MAAMC,oBAAoB,GAC7BD,iBAAiB,CAAwB,sBAAsB,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/authorization/GroupsTeamsAuthorizer/abstractions.js","sources":["../../../../../src/features/security/authorization/GroupsTeamsAuthorizer/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface ITenantPermission extends SecurityPermission {\n    _src: string;\n}\n\nexport interface IPermissionsProcessor {\n    getPermissions(identity: Identity): Promise<ITenantPermission[] | null>;\n}\n\nexport const PermissionsProcessor =\n    createAbstraction<IPermissionsProcessor>(\"PermissionsProcessor\");\n\nexport namespace PermissionsProcessor {\n    export type Interface = IPermissionsProcessor;\n    export type Permissions = ITenantPermission[];\n}\n"],"names":["PermissionsProcessor","createAbstraction"],"mappings":";AAYO,MAAMA,uBACTC,kBAAyC"}

package/features/security/authorization/GroupsTeamsAuthorizer/feature.d.ts

@@ -1 +1,4 @@
-export declare const GroupsTeamsAuthorizerFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;
+export declare const GroupsTeamsAuthorizerFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/security/authorization/GroupsTeamsAuthorizer/feature.js

@@ -1,12 +1,13 @@
 import { createFeature } from "@webiny/feature/api";
 import { RolesTeamsAuthorizer } from "./RolesTeamsAuthorizer.js";
 import { GetPermissionsFromIdentity } from "./GetPermissionsFromIdentity.js";
-export const GroupsTeamsAuthorizerFeature = createFeature({
-  name: "GroupsTeamsAuthorizer",
-  register(container) {
-    container.register(RolesTeamsAuthorizer).inSingletonScope();
-    container.register(GetPermissionsFromIdentity);
-  }
+const GroupsTeamsAuthorizerFeature = createFeature({
+    name: "GroupsTeamsAuthorizer",
+    register (container) {
+        container.register(RolesTeamsAuthorizer).inSingletonScope();
+        container.register(GetPermissionsFromIdentity);
+    }
 });
+export { GroupsTeamsAuthorizerFeature };
 
 //# sourceMappingURL=feature.js.map

package/features/security/authorization/GroupsTeamsAuthorizer/feature.js.map

@@ -1 +1 @@
-{"version":3,"names":["createFeature","RolesTeamsAuthorizer","GetPermissionsFromIdentity","GroupsTeamsAuthorizerFeature","name","register","container","inSingletonScope"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { RolesTeamsAuthorizer } from \"./RolesTeamsAuthorizer.js\";\nimport { GetPermissionsFromIdentity } from \"./GetPermissionsFromIdentity.js\";\n\nexport const GroupsTeamsAuthorizerFeature = createFeature({\n    name: \"GroupsTeamsAuthorizer\",\n    register(container) {\n        container.register(RolesTeamsAuthorizer).inSingletonScope();\n        container.register(GetPermissionsFromIdentity);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,oBAAoB;AAC7B,SAASC,0BAA0B;AAEnC,OAAO,MAAMC,4BAA4B,GAAGH,aAAa,CAAC;EACtDI,IAAI,EAAE,uBAAuB;EAC7BC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACJ,oBAAoB,CAAC,CAACM,gBAAgB,CAAC,CAAC;IAC3DD,SAAS,CAACD,QAAQ,CAACH,0BAA0B,CAAC;EAClD;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/authorization/GroupsTeamsAuthorizer/feature.js","sources":["../../../../../src/features/security/authorization/GroupsTeamsAuthorizer/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { RolesTeamsAuthorizer } from \"./RolesTeamsAuthorizer.js\";\nimport { GetPermissionsFromIdentity } from \"./GetPermissionsFromIdentity.js\";\n\nexport const GroupsTeamsAuthorizerFeature = createFeature({\n    name: \"GroupsTeamsAuthorizer\",\n    register(container) {\n        container.register(RolesTeamsAuthorizer).inSingletonScope();\n        container.register(GetPermissionsFromIdentity);\n    }\n});\n"],"names":["GroupsTeamsAuthorizerFeature","createFeature","container","RolesTeamsAuthorizer","GetPermissionsFromIdentity"],"mappings":";;;AAIO,MAAMA,+BAA+BC,cAAc;IACtD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC,sBAAsB,gBAAgB;QACzDD,UAAU,QAAQ,CAACE;IACvB;AACJ"}

package/features/security/login/abstractions.js

@@ -1,13 +1,14 @@
 import { DomainEvent } from "../../eventPublisher/index.js";
 import { createAbstraction } from "@webiny/feature/api";
-export class AfterLoginEvent extends DomainEvent {
-  eventType = "login.afterLogin";
-  getHandlerAbstraction() {
-    return AfterLoginEventHandler;
-  }
+class AfterLoginEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return AfterLoginEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "login.afterLogin";
+    }
 }
-
-/** Hook into login lifecycle after a user logs in. */
-export const AfterLoginEventHandler = createAbstraction("AfterLoginEventHandler");
+const AfterLoginEventHandler = createAbstraction("AfterLoginEventHandler");
+export { AfterLoginEvent, AfterLoginEventHandler };
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/login/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["DomainEvent","createAbstraction","AfterLoginEvent","eventType","getHandlerAbstraction","AfterLoginEventHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface AfterLoginPayload {\n    identity: Identity;\n}\n\nexport class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {\n    eventType = \"login.afterLogin\" as const;\n\n    getHandlerAbstraction() {\n        return AfterLoginEventHandler;\n    }\n}\n\n/** Hook into login lifecycle after a user logs in. */\nexport const AfterLoginEventHandler =\n    createAbstraction<IEventHandler<AfterLoginEvent>>(\"AfterLoginEventHandler\");\n\nexport namespace AfterLoginEventHandler {\n    export type Interface = IEventHandler<AfterLoginEvent>;\n    export type Event = AfterLoginEvent;\n}\n"],"mappings":"AAAA,SAASA,WAAW;AAEpB,SAASC,iBAAiB,QAAQ,qBAAqB;AAOvD,OAAO,MAAMC,eAAe,SAASF,WAAW,CAAoB;EAChEG,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,sBAAsB;EACjC;AACJ;;AAEA;AACA,OAAO,MAAMA,sBAAsB,GAC/BJ,iBAAiB,CAAiC,wBAAwB,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/login/abstractions.js","sources":["../../../../src/features/security/login/abstractions.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface AfterLoginPayload {\n    identity: Identity;\n}\n\nexport class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {\n    eventType = \"login.afterLogin\" as const;\n\n    getHandlerAbstraction() {\n        return AfterLoginEventHandler;\n    }\n}\n\n/** Hook into login lifecycle after a user logs in. */\nexport const AfterLoginEventHandler =\n    createAbstraction<IEventHandler<AfterLoginEvent>>(\"AfterLoginEventHandler\");\n\nexport namespace AfterLoginEventHandler {\n    export type Interface = IEventHandler<AfterLoginEvent>;\n    export type Event = AfterLoginEvent;\n}\n"],"names":["AfterLoginEvent","DomainEvent","AfterLoginEventHandler","createAbstraction"],"mappings":";;AASO,MAAMA,wBAAwBC;IAGjC,wBAAwB;QACpB,OAAOC;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,yBACTC,kBAAkD"}

package/features/security/login/index.js

@@ -1,3 +1 @@
 export * from "./abstractions.js";
-
-//# sourceMappingURL=index.js.map

package/features/security/permissions/createPermissionSchema.d.ts

@@ -0,0 +1,2 @@
+import type { PermissionSchemaConfig } from "./types.js";
+export declare function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T;

package/features/security/permissions/createPermissionSchema.js

@@ -0,0 +1,9 @@
+function createPermissionSchema(config) {
+    return {
+        ...config,
+        entities: config.entities ?? []
+    };
+}
+export { createPermissionSchema };
+
+//# sourceMappingURL=createPermissionSchema.js.map

package/features/security/permissions/createPermissionSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/permissions/createPermissionSchema.js","sources":["../../../../src/features/security/permissions/createPermissionSchema.ts"],"sourcesContent":["import type { PermissionSchemaConfig } from \"./types.js\";\n\nexport function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T {\n    return {\n        ...config,\n        entities: config.entities ?? []\n    };\n}\n"],"names":["createPermissionSchema","config"],"mappings":"AAEO,SAASA,uBAA+DC,MAAS;IACpF,OAAO;QACH,GAAGA,MAAM;QACT,UAAUA,OAAO,QAAQ,IAAI,EAAE;IACnC;AACJ"}

package/features/security/permissions/createPermissions.d.ts

@@ -1,8 +1,8 @@
+import type { Abstraction } from "@webiny/di";
 import type { PermissionSchemaConfig } from "./types.js";
 import type { Permissions } from "./types.js";
-export declare function createPermissions<const S extends PermissionSchemaConfig>(schema: S): {
-    Abstraction: import("@webiny/di").Abstraction<Permissions<S>>;
-    Implementation: import("@webiny/di").Constructor<Permissions<S>> & {
-        __abstraction: import("@webiny/di").Abstraction<Permissions<S>>;
-    };
+export declare function createPermissionsAbstraction<const S extends PermissionSchemaConfig>(schema: S): Abstraction<Permissions<S>>;
+export declare function createPermissionsFeature<const S extends PermissionSchemaConfig>(schema: S, abstraction: Abstraction<Permissions<S>>): {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
 };