@webiny/app-security 0.0.0-mt-2 → 0.0.0-unstable.06b2ede40f

package/README.md

@@ -51,7 +51,7 @@ A simple `Authenticator` React component (uses Amazon Cognito and AWS Amplify's
 
 ```tsx
 import React, { useEffect } from "react";
-import Auth from "@aws-amplify/auth";
+import { Auth } from "@aws-amplify/auth";
 import { useSecurity, SecurityIdentity } from "@webiny/app-security";
 
 // Apart from the React component, we also configure the Auth class here.
@@ -67,8 +67,11 @@ Auth.configure({
     }
 });
 
+interface AuthenticatorProps {
+    children: React.ReactNode;
+}
 // The `Authenticator` component.
-const Authenticator: React.FC = props => {
+const Authenticator = (props: AuthenticatorProps) => {
     const { setIdentity } = useSecurity();
 
     useEffect(() => {
@@ -101,7 +104,7 @@ Finally, use the `useSecurity` React hook in any of your components:
 import React from "react";
 import { useSecurity } from "@webiny/app-security";
 
-const MyComponent: React.FC = () => {
+const MyComponent = () => {
   const { identity } = useSecurity();
 
   if (identity) {

package/Security.d.ts

@@ -0,0 +1,2 @@
+import React from "react";
+export declare const Security: () => React.JSX.Element;

package/Security.js

@@ -0,0 +1,20 @@
+// Importing from `app-core` and NOT from `app-admin`, to avoid circular dependency.
+// This can be resolved in a different way, by changing the location of `AppInstaller` component (currently in `app-admin`).
+// But this is a faster solution, as I'm really short on time :)
+import React from "react";
+import { Provider } from "@webiny/app";
+import { SecurityProvider as ContextProvider } from "./contexts/Security";
+const SecurityProviderHOC = Component => {
+  return function SecurityProvider({
+    children
+  }) {
+    return /*#__PURE__*/React.createElement(ContextProvider, null, /*#__PURE__*/React.createElement(Component, null, children));
+  };
+};
+export const Security = () => {
+  return /*#__PURE__*/React.createElement(Provider, {
+    hoc: SecurityProviderHOC
+  });
+};
+
+//# sourceMappingURL=Security.js.map

package/Security.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["React","Provider","SecurityProvider","ContextProvider","SecurityProviderHOC","Component","children","createElement","Security","hoc"],"sources":["Security.tsx"],"sourcesContent":["// Importing from `app-core` and NOT from `app-admin`, to avoid circular dependency.\n// This can be resolved in a different way, by changing the location of `AppInstaller` component (currently in `app-admin`).\n// But this is a faster solution, as I'm really short on time :)\nimport React from \"react\";\nimport { Provider } from \"@webiny/app\";\nimport { SecurityProvider as ContextProvider } from \"./contexts/Security\";\n\ninterface SecurityProviderProps {\n    children: React.ReactNode;\n}\n\nconst SecurityProviderHOC = (Component: React.ComponentType<SecurityProviderProps>) => {\n    return function SecurityProvider({ children }: SecurityProviderProps) {\n        return (\n            <ContextProvider>\n                <Component>{children}</Component>\n            </ContextProvider>\n        );\n    };\n};\n\nexport const Security = () => {\n    return <Provider hoc={SecurityProviderHOC} />;\n};\n"],"mappings":"AAAA;AACA;AACA;AACA,OAAOA,KAAK,MAAM,OAAO;AACzB,SAASC,QAAQ,QAAQ,aAAa;AACtC,SAASC,gBAAgB,IAAIC,eAAe;AAM5C,MAAMC,mBAAmB,GAAIC,SAAqD,IAAK;EACnF,OAAO,SAASH,gBAAgBA,CAAC;IAAEI;EAAgC,CAAC,EAAE;IAClE,oBACIN,KAAA,CAAAO,aAAA,CAACJ,eAAe,qBACZH,KAAA,CAAAO,aAAA,CAACF,SAAS,QAAEC,QAAoB,CACnB,CAAC;EAE1B,CAAC;AACL,CAAC;AAED,OAAO,MAAME,QAAQ,GAAGA,CAAA,KAAM;EAC1B,oBAAOR,KAAA,CAAAO,aAAA,CAACN,QAAQ;IAACQ,GAAG,EAAEL;EAAoB,CAAE,CAAC;AACjD,CAAC","ignoreList":[]}

package/components/HasPermission.d.ts

@@ -0,0 +1,9 @@
+import React from "react";
+interface HasPermissionProps {
+    any?: string[];
+    all?: string[];
+    name?: string;
+    children: React.ReactNode;
+}
+export declare const HasPermission: ({ children, ...props }: HasPermissionProps) => React.JSX.Element | null;
+export {};

package/components/HasPermission.js

@@ -0,0 +1,30 @@
+import React, { Fragment } from "react";
+import { useSecurity } from "../hooks/useSecurity";
+export const HasPermission = ({
+  children,
+  ...props
+}) => {
+  const {
+    getPermissions
+  } = useSecurity();
+  if (props.name) {
+    const permissionsCollections = getPermissions(props.name);
+    const hasPermission = permissionsCollections.length > 0;
+    if (hasPermission) {
+      return /*#__PURE__*/React.createElement(Fragment, null, children);
+    }
+    return null;
+  }
+  if (props.any && props.all) {
+    throw new Error(`You can use either "any" or "all", but not both at the same time.`);
+  }
+  const anyAllPermissions = props.any || props.all || [];
+  const permissionsCollections = anyAllPermissions.map(name => getPermissions(name));
+  const hasPermission = props.any ? permissionsCollections.some(collection => collection.length > 0) : permissionsCollections.every(collection => collection.length > 0);
+  if (hasPermission) {
+    return /*#__PURE__*/React.createElement(Fragment, null, children);
+  }
+  return null;
+};
+
+//# sourceMappingURL=HasPermission.js.map

package/components/HasPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["React","Fragment","useSecurity","HasPermission","children","props","getPermissions","name","permissionsCollections","hasPermission","length","createElement","any","all","Error","anyAllPermissions","map","some","collection","every"],"sources":["HasPermission.tsx"],"sourcesContent":["import React, { Fragment } from \"react\";\nimport { useSecurity } from \"~/hooks/useSecurity\";\n\ninterface HasPermissionProps {\n    any?: string[];\n    all?: string[];\n    name?: string;\n    children: React.ReactNode;\n}\n\nexport const HasPermission = ({ children, ...props }: HasPermissionProps) => {\n    const { getPermissions } = useSecurity();\n\n    if (props.name) {\n        const permissionsCollections = getPermissions(props.name);\n        const hasPermission = permissionsCollections.length > 0;\n        if (hasPermission) {\n            return <Fragment>{children}</Fragment>;\n        }\n\n        return null;\n    }\n\n    if (props.any && props.all) {\n        throw new Error(`You can use either \"any\" or \"all\", but not both at the same time.`);\n    }\n\n    const anyAllPermissions = props.any || props.all || [];\n\n    const permissionsCollections = anyAllPermissions.map(name => getPermissions(name));\n\n    const hasPermission = props.any\n        ? permissionsCollections.some(collection => collection.length > 0)\n        : permissionsCollections.every(collection => collection.length > 0);\n\n    if (hasPermission) {\n        return <Fragment>{children}</Fragment>;\n    }\n\n    return null;\n};\n"],"mappings":"AAAA,OAAOA,KAAK,IAAIC,QAAQ,QAAQ,OAAO;AACvC,SAASC,WAAW;AASpB,OAAO,MAAMC,aAAa,GAAGA,CAAC;EAAEC,QAAQ;EAAE,GAAGC;AAA0B,CAAC,KAAK;EACzE,MAAM;IAAEC;EAAe,CAAC,GAAGJ,WAAW,CAAC,CAAC;EAExC,IAAIG,KAAK,CAACE,IAAI,EAAE;IACZ,MAAMC,sBAAsB,GAAGF,cAAc,CAACD,KAAK,CAACE,IAAI,CAAC;IACzD,MAAME,aAAa,GAAGD,sBAAsB,CAACE,MAAM,GAAG,CAAC;IACvD,IAAID,aAAa,EAAE;MACf,oBAAOT,KAAA,CAAAW,aAAA,CAACV,QAAQ,QAAEG,QAAmB,CAAC;IAC1C;IAEA,OAAO,IAAI;EACf;EAEA,IAAIC,KAAK,CAACO,GAAG,IAAIP,KAAK,CAACQ,GAAG,EAAE;IACxB,MAAM,IAAIC,KAAK,CAAC,mEAAmE,CAAC;EACxF;EAEA,MAAMC,iBAAiB,GAAGV,KAAK,CAACO,GAAG,IAAIP,KAAK,CAACQ,GAAG,IAAI,EAAE;EAEtD,MAAML,sBAAsB,GAAGO,iBAAiB,CAACC,GAAG,CAACT,IAAI,IAAID,cAAc,CAACC,IAAI,CAAC,CAAC;EAElF,MAAME,aAAa,GAAGJ,KAAK,CAACO,GAAG,GACzBJ,sBAAsB,CAACS,IAAI,CAACC,UAAU,IAAIA,UAAU,CAACR,MAAM,GAAG,CAAC,CAAC,GAChEF,sBAAsB,CAACW,KAAK,CAACD,UAAU,IAAIA,UAAU,CAACR,MAAM,GAAG,CAAC,CAAC;EAEvE,IAAID,aAAa,EAAE;IACf,oBAAOT,KAAA,CAAAW,aAAA,CAACV,QAAQ,QAAEG,QAAmB,CAAC;EAC1C;EAEA,OAAO,IAAI;AACf,CAAC","ignoreList":[]}

package/components/SecureRoute.d.ts

@@ -1,6 +1,7 @@
-import * as React from "react";
-declare const _default: ({ children, permission }: {
-    children: any;
+import type React from "react";
+interface SecureRouteProps {
+    children: React.ReactNode;
     permission?: string;
-}) => React.ReactElement;
+}
+declare const _default: ({ children, permission }: SecureRouteProps) => React.ReactElement | null;
 export default _default;

package/components/SecureRoute.js

@@ -1,27 +1,32 @@
-import { useSecurity } from "..";
+import { useSecurity } from "../hooks/useSecurity";
 import { plugins } from "@webiny/plugins";
-export default (function (_ref) {
-  var children = _ref.children,
-      permission = _ref.permission;
-
-  var _useSecurity = useSecurity(),
-      identity = _useSecurity.identity;
-
-  var hasPermission = false;
-
+export default ({
+  children,
+  permission
+}) => {
+  const security = useSecurity();
+  if (!security) {
+    return null;
+  }
+  const {
+    identity,
+    getPermission
+  } = security;
+  if (!identity) {
+    return null;
+  }
+  let hasPermission = false;
   if (identity) {
-    hasPermission = permission ? Boolean(identity.getPermission(permission)) : true;
+    hasPermission = permission ? Boolean(getPermission(permission)) : true;
   }
-
   if (hasPermission) {
     return children;
   }
-
-  var plugin = plugins.byName("secure-route-error");
-
+  const plugin = plugins.byName("secure-route-error");
   if (!plugin) {
     return null;
   }
-
   return plugin.render();
-});
+};
+
+//# sourceMappingURL=SecureRoute.js.map

package/components/SecureRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useSecurity","plugins","children","permission","security","identity","getPermission","hasPermission","Boolean","plugin","byName","render"],"sources":["SecureRoute.tsx"],"sourcesContent":["import type React from \"react\";\nimport { useSecurity } from \"~/hooks/useSecurity\";\nimport type { SecureRouteErrorPlugin } from \"~/types\";\nimport { plugins } from \"@webiny/plugins\";\n\ninterface SecureRouteProps {\n    children: React.ReactNode;\n    permission?: string;\n}\nexport default ({ children, permission }: SecureRouteProps): React.ReactElement | null => {\n    const security = useSecurity();\n\n    if (!security) {\n        return null;\n    }\n\n    const { identity, getPermission } = security;\n\n    if (!identity) {\n        return null;\n    }\n\n    let hasPermission = false;\n    if (identity) {\n        hasPermission = permission ? Boolean(getPermission(permission)) : true;\n    }\n\n    if (hasPermission) {\n        return children as unknown as React.ReactElement;\n    }\n\n    const plugin = plugins.byName<SecureRouteErrorPlugin>(\"secure-route-error\");\n    if (!plugin) {\n        return null;\n    }\n\n    return plugin.render();\n};\n"],"mappings":"AACA,SAASA,WAAW;AAEpB,SAASC,OAAO,QAAQ,iBAAiB;AAMzC,eAAe,CAAC;EAAEC,QAAQ;EAAEC;AAA6B,CAAC,KAAgC;EACtF,MAAMC,QAAQ,GAAGJ,WAAW,CAAC,CAAC;EAE9B,IAAI,CAACI,QAAQ,EAAE;IACX,OAAO,IAAI;EACf;EAEA,MAAM;IAAEC,QAAQ;IAAEC;EAAc,CAAC,GAAGF,QAAQ;EAE5C,IAAI,CAACC,QAAQ,EAAE;IACX,OAAO,IAAI;EACf;EAEA,IAAIE,aAAa,GAAG,KAAK;EACzB,IAAIF,QAAQ,EAAE;IACVE,aAAa,GAAGJ,UAAU,GAAGK,OAAO,CAACF,aAAa,CAACH,UAAU,CAAC,CAAC,GAAG,IAAI;EAC1E;EAEA,IAAII,aAAa,EAAE;IACf,OAAOL,QAAQ;EACnB;EAEA,MAAMO,MAAM,GAAGR,OAAO,CAACS,MAAM,CAAyB,oBAAoB,CAAC;EAC3E,IAAI,CAACD,MAAM,EAAE;IACT,OAAO,IAAI;EACf;EAEA,OAAOA,MAAM,CAACE,MAAM,CAAC,CAAC;AAC1B,CAAC","ignoreList":[]}

package/components/SecureView.d.ts

@@ -1,12 +1,12 @@
-import * as React from "react";
-import { SecurityPermission } from "../types";
+import type * as React from "react";
+import type { SecurityPermission } from "../types";
 interface ChildrenRenderFunctionArgs<T extends SecurityPermission> {
     hasPermission: boolean;
-    permission: T;
+    permission: T | null;
 }
 interface Props<T extends SecurityPermission> {
     children: ((args: ChildrenRenderFunctionArgs<T>) => React.ReactElement) | React.ReactElement;
     permission?: string;
 }
-declare function SecureView<T extends SecurityPermission>({ children, permission }: Props<T>): React.ReactElement;
+declare function SecureView<T extends SecurityPermission>({ children, permission }: Props<T>): React.ReactElement | null;
 export default SecureView;

package/components/SecureView.js

@@ -1,28 +1,25 @@
-import { useSecurity } from "..";
-
-function SecureView(_ref) {
-  var children = _ref.children,
-      permission = _ref.permission;
-
-  var _useSecurity = useSecurity(),
-      identity = _useSecurity.identity;
-
-  var hasPermission = false;
-  var matchedPermission = null;
-
-  if (identity) {
-    matchedPermission = identity.getPermission(permission);
+import { useSecurity } from "../hooks/useSecurity";
+function SecureView({
+  children,
+  permission
+}) {
+  const {
+    getPermission
+  } = useSecurity();
+  let hasPermission = false;
+  let matchedPermission = null;
+  if (permission) {
+    matchedPermission = getPermission(permission);
     hasPermission = Boolean(matchedPermission);
   }
-
   if (typeof children === "function") {
     return children({
-      hasPermission: hasPermission,
+      hasPermission,
       permission: matchedPermission
     });
   }
-
   return hasPermission ? children : null;
 }
+export default SecureView;
 
-export default SecureView;
+//# sourceMappingURL=SecureView.js.map

package/components/SecureView.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useSecurity","SecureView","children","permission","getPermission","hasPermission","matchedPermission","Boolean"],"sources":["SecureView.tsx"],"sourcesContent":["import type * as React from \"react\";\nimport { useSecurity } from \"~/hooks/useSecurity\";\nimport type { SecurityPermission } from \"~/types\";\n\ninterface ChildrenRenderFunctionArgs<T extends SecurityPermission> {\n    hasPermission: boolean;\n    permission: T | null;\n}\n\ninterface Props<T extends SecurityPermission> {\n    children: ((args: ChildrenRenderFunctionArgs<T>) => React.ReactElement) | React.ReactElement;\n    permission?: string;\n}\n\nfunction SecureView<T extends SecurityPermission>({\n    children,\n    permission\n}: Props<T>): React.ReactElement | null {\n    const { getPermission } = useSecurity();\n\n    let hasPermission = false;\n    let matchedPermission: T | null = null;\n    if (permission) {\n        matchedPermission = getPermission<T>(permission);\n        hasPermission = Boolean(matchedPermission);\n    }\n\n    if (typeof children === \"function\") {\n        return children({\n            hasPermission,\n            permission: matchedPermission\n        });\n    }\n\n    return hasPermission ? children : null;\n}\n\nexport default SecureView;\n"],"mappings":"AACA,SAASA,WAAW;AAapB,SAASC,UAAUA,CAA+B;EAC9CC,QAAQ;EACRC;AACM,CAAC,EAA6B;EACpC,MAAM;IAAEC;EAAc,CAAC,GAAGJ,WAAW,CAAC,CAAC;EAEvC,IAAIK,aAAa,GAAG,KAAK;EACzB,IAAIC,iBAA2B,GAAG,IAAI;EACtC,IAAIH,UAAU,EAAE;IACZG,iBAAiB,GAAGF,aAAa,CAAID,UAAU,CAAC;IAChDE,aAAa,GAAGE,OAAO,CAACD,iBAAiB,CAAC;EAC9C;EAEA,IAAI,OAAOJ,QAAQ,KAAK,UAAU,EAAE;IAChC,OAAOA,QAAQ,CAAC;MACZG,aAAa;MACbF,UAAU,EAAEG;IAChB,CAAC,CAAC;EACN;EAEA,OAAOD,aAAa,GAAGH,QAAQ,GAAG,IAAI;AAC1C;AAEA,eAAeD,UAAU","ignoreList":[]}

package/components/index.d.ts

@@ -1,2 +1,3 @@
 export { default as SecureView } from "./SecureView";
 export { default as SecureRoute } from "./SecureRoute";
+export { HasPermission } from "./HasPermission";

package/components/index.js

@@ -1,2 +1,5 @@
 export { default as SecureView } from "./SecureView";
-export { default as SecureRoute } from "./SecureRoute";
+export { default as SecureRoute } from "./SecureRoute";
+export { HasPermission } from "./HasPermission";
+
+//# sourceMappingURL=index.js.map

package/components/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["default","SecureView","SecureRoute","HasPermission"],"sources":["index.ts"],"sourcesContent":["export { default as SecureView } from \"./SecureView\";\nexport { default as SecureRoute } from \"./SecureRoute\";\nexport { HasPermission } from \"./HasPermission\";\n"],"mappings":"AAAA,SAASA,OAAO,IAAIC,UAAU;AAC9B,SAASD,OAAO,IAAIE,WAAW;AAC/B,SAASC,aAAa","ignoreList":[]}

package/contexts/Security.d.ts

@@ -1,9 +1,18 @@
-import React, { Dispatch, SetStateAction } from "react";
-import { SecurityIdentity, SecurityPermission } from "../types";
-export declare const SecurityContext: React.Context<SecurityContextValue>;
-export interface SecurityContextValue {
+import type { Dispatch, SetStateAction } from "react";
+import React from "react";
+import type { IdTokenProvider, SecurityIdentity, SecurityPermission } from "../types";
+export interface SecurityContext {
     identity: SecurityIdentity | null;
-    setIdentity: Dispatch<SetStateAction<SecurityIdentity>>;
-    getPermission<T extends SecurityPermission = SecurityPermission>(name: string): T;
+    getIdentityId: () => string | null;
+    setIdentity: Dispatch<SetStateAction<SecurityIdentity | null>>;
+    getPermission<T extends SecurityPermission = SecurityPermission>(name: string, exact?: boolean): T | null;
+    getPermissions<T extends SecurityPermission = SecurityPermission>(name: string): T[];
+    setIdTokenProvider: (provider: IdTokenProvider) => void;
+    getIdToken: IdTokenProvider;
 }
-export declare const SecurityProvider: (props: any) => JSX.Element;
+interface SecurityProviderProps {
+    children: React.ReactNode;
+}
+export declare const SecurityContext: React.Context<SecurityContext | undefined>;
+export declare const SecurityProvider: (props: SecurityProviderProps) => React.JSX.Element;
+export {};

package/contexts/Security.js

@@ -1,44 +1,66 @@
-import _objectSpread from "@babel/runtime/helpers/objectSpread2";
-import _slicedToArray from "@babel/runtime/helpers/slicedToArray";
 import minimatch from "minimatch";
-import React, { useState, useMemo, useCallback } from "react";
-export var SecurityContext = /*#__PURE__*/React.createContext(null);
-export var SecurityProvider = function SecurityProvider(props) {
-  var _useState = useState(null),
-      _useState2 = _slicedToArray(_useState, 2),
-      identity = _useState2[0],
-      setIdentity = _useState2[1];
-
-  var getPermission = useCallback(function (name) {
+import React, { useCallback, useMemo, useState } from "react";
+const defaultIdTokenProvider = () => undefined;
+export const SecurityContext = /*#__PURE__*/React.createContext(undefined);
+export const SecurityProvider = props => {
+  const [identity, setIdentity] = useState(null);
+  const [idTokenProvider, setIdTokenProvider] = useState(() => defaultIdTokenProvider);
+  const getPermission = useCallback((name, exact) => {
     if (!identity) {
       return null;
     }
-
-    var perms = identity.permissions || [];
-    var exactMatch = perms.find(function (p) {
-      return p.name === name;
-    });
-
+    const perms = identity.permissions || [];
+    const exactMatch = perms.find(p => p.name === name);
     if (exactMatch) {
       return exactMatch;
-    } // Try matching using patterns
+    } else if (exact) {
+      return null;
+    }
 
+    // Try matching using patterns
+    return perms.find(p => minimatch(name, p.name)) || null;
+  }, [identity]);
+  const getPermissions = useCallback(name => {
+    if (!identity) {
+      return [];
+    }
+    const permissions = identity.permissions || [];
+    return permissions.filter(current => {
+      const exactMatch = current.name === name;
+      if (exactMatch) {
+        return true;
+      }
 
-    return perms.find(function (p) {
-      return minimatch(name, p.name);
+      // Try matching using patterns.
+      return minimatch(name, current.name);
     });
   }, [identity]);
-  var value = useMemo(function () {
+  const getIdentityId = useCallback(() => {
+    if (!identity) {
+      return null;
+    }
+    return identity.id || identity.login || null;
+  }, [identity]);
+  const value = useMemo(() => {
     return {
-      identity: identity ? _objectSpread(_objectSpread({}, identity), {}, {
+      identity: identity ? {
+        ...identity,
         // For backwards compatibility, expose the `getPermission` method on the `identity` object.
-        getPermission: getPermission
-      }) : null,
-      setIdentity: setIdentity,
-      getPermission: getPermission
+        getPermission
+      } : null,
+      getIdentityId,
+      setIdentity,
+      getPermission,
+      getPermissions,
+      getIdToken: idTokenProvider,
+      setIdTokenProvider: provider => {
+        setIdTokenProvider(() => provider);
+      }
     };
-  }, [identity]);
+  }, [idTokenProvider, identity]);
   return /*#__PURE__*/React.createElement(SecurityContext.Provider, {
     value: value
   }, props.children);
-};
+};
+
+//# sourceMappingURL=Security.js.map

package/contexts/Security.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["minimatch","React","useCallback","useMemo","useState","defaultIdTokenProvider","undefined","SecurityContext","createContext","SecurityProvider","props","identity","setIdentity","idTokenProvider","setIdTokenProvider","getPermission","name","exact","perms","permissions","exactMatch","find","p","getPermissions","filter","current","getIdentityId","id","login","value","getIdToken","provider","createElement","Provider","children"],"sources":["Security.tsx"],"sourcesContent":["import minimatch from \"minimatch\";\nimport type { Dispatch, SetStateAction } from \"react\";\nimport React, { useCallback, useMemo, useState } from \"react\";\nimport type { IdTokenProvider, SecurityIdentity, SecurityPermission } from \"~/types\";\n\nexport interface SecurityContext {\n    identity: SecurityIdentity | null;\n    getIdentityId: () => string | null;\n    setIdentity: Dispatch<SetStateAction<SecurityIdentity | null>>;\n    getPermission<T extends SecurityPermission = SecurityPermission>(\n        name: string,\n        exact?: boolean\n    ): T | null;\n    getPermissions<T extends SecurityPermission = SecurityPermission>(name: string): T[];\n    setIdTokenProvider: (provider: IdTokenProvider) => void;\n    getIdToken: IdTokenProvider;\n}\n\ninterface SecurityProviderProps {\n    children: React.ReactNode;\n}\n\nconst defaultIdTokenProvider: IdTokenProvider = () => undefined;\n\nexport const SecurityContext = React.createContext<SecurityContext | undefined>(undefined);\n\nexport const SecurityProvider = (props: SecurityProviderProps) => {\n    const [identity, setIdentity] = useState<SecurityIdentity | null>(null);\n    const [idTokenProvider, setIdTokenProvider] = useState<IdTokenProvider>(\n        () => defaultIdTokenProvider\n    );\n\n    const getPermission = useCallback(\n        <T extends SecurityPermission = SecurityPermission>(\n            name: string,\n            exact?: boolean\n        ): T | null => {\n            if (!identity) {\n                return null;\n            }\n\n            const perms = (identity.permissions || []) as T[];\n            const exactMatch = perms.find(p => p.name === name);\n            if (exactMatch) {\n                return exactMatch as T;\n            } else if (exact) {\n                return null;\n            }\n\n            // Try matching using patterns\n            return perms.find(p => minimatch(name, p.name)) || null;\n        },\n        [identity]\n    );\n\n    const getPermissions = useCallback(\n        <T extends SecurityPermission = SecurityPermission>(name: string): Array<T> => {\n            if (!identity) {\n                return [];\n            }\n\n            const permissions = identity.permissions || [];\n\n            return permissions.filter(current => {\n                const exactMatch = current.name === name;\n                if (exactMatch) {\n                    return true;\n                }\n\n                // Try matching using patterns.\n                return minimatch(name, current.name);\n            }) as T[];\n        },\n        [identity]\n    );\n\n    const getIdentityId = useCallback(() => {\n        if (!identity) {\n            return null;\n        }\n        return identity.id || identity.login || null;\n    }, [identity]);\n\n    const value: SecurityContext = useMemo(() => {\n        return {\n            identity: identity\n                ? {\n                      ...identity,\n                      // For backwards compatibility, expose the `getPermission` method on the `identity` object.\n                      getPermission\n                  }\n                : null,\n            getIdentityId,\n            setIdentity,\n            getPermission,\n            getPermissions,\n            getIdToken: idTokenProvider,\n            setIdTokenProvider: provider => {\n                setIdTokenProvider(() => provider);\n            }\n        };\n    }, [idTokenProvider, identity]);\n\n    return <SecurityContext.Provider value={value}>{props.children}</SecurityContext.Provider>;\n};\n"],"mappings":"AAAA,OAAOA,SAAS,MAAM,WAAW;AAEjC,OAAOC,KAAK,IAAIC,WAAW,EAAEC,OAAO,EAAEC,QAAQ,QAAQ,OAAO;AAoB7D,MAAMC,sBAAuC,GAAGA,CAAA,KAAMC,SAAS;AAE/D,OAAO,MAAMC,eAAe,gBAAGN,KAAK,CAACO,aAAa,CAA8BF,SAAS,CAAC;AAE1F,OAAO,MAAMG,gBAAgB,GAAIC,KAA4B,IAAK;EAC9D,MAAM,CAACC,QAAQ,EAAEC,WAAW,CAAC,GAAGR,QAAQ,CAA0B,IAAI,CAAC;EACvE,MAAM,CAACS,eAAe,EAAEC,kBAAkB,CAAC,GAAGV,QAAQ,CAClD,MAAMC,sBACV,CAAC;EAED,MAAMU,aAAa,GAAGb,WAAW,CAC7B,CACIc,IAAY,EACZC,KAAe,KACJ;IACX,IAAI,CAACN,QAAQ,EAAE;MACX,OAAO,IAAI;IACf;IAEA,MAAMO,KAAK,GAAIP,QAAQ,CAACQ,WAAW,IAAI,EAAU;IACjD,MAAMC,UAAU,GAAGF,KAAK,CAACG,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACN,IAAI,KAAKA,IAAI,CAAC;IACnD,IAAII,UAAU,EAAE;MACZ,OAAOA,UAAU;IACrB,CAAC,MAAM,IAAIH,KAAK,EAAE;MACd,OAAO,IAAI;IACf;;IAEA;IACA,OAAOC,KAAK,CAACG,IAAI,CAACC,CAAC,IAAItB,SAAS,CAACgB,IAAI,EAAEM,CAAC,CAACN,IAAI,CAAC,CAAC,IAAI,IAAI;EAC3D,CAAC,EACD,CAACL,QAAQ,CACb,CAAC;EAED,MAAMY,cAAc,GAAGrB,WAAW,CACsBc,IAAY,IAAe;IAC3E,IAAI,CAACL,QAAQ,EAAE;MACX,OAAO,EAAE;IACb;IAEA,MAAMQ,WAAW,GAAGR,QAAQ,CAACQ,WAAW,IAAI,EAAE;IAE9C,OAAOA,WAAW,CAACK,MAAM,CAACC,OAAO,IAAI;MACjC,MAAML,UAAU,GAAGK,OAAO,CAACT,IAAI,KAAKA,IAAI;MACxC,IAAII,UAAU,EAAE;QACZ,OAAO,IAAI;MACf;;MAEA;MACA,OAAOpB,SAAS,CAACgB,IAAI,EAAES,OAAO,CAACT,IAAI,CAAC;IACxC,CAAC,CAAC;EACN,CAAC,EACD,CAACL,QAAQ,CACb,CAAC;EAED,MAAMe,aAAa,GAAGxB,WAAW,CAAC,MAAM;IACpC,IAAI,CAACS,QAAQ,EAAE;MACX,OAAO,IAAI;IACf;IACA,OAAOA,QAAQ,CAACgB,EAAE,IAAIhB,QAAQ,CAACiB,KAAK,IAAI,IAAI;EAChD,CAAC,EAAE,CAACjB,QAAQ,CAAC,CAAC;EAEd,MAAMkB,KAAsB,GAAG1B,OAAO,CAAC,MAAM;IACzC,OAAO;MACHQ,QAAQ,EAAEA,QAAQ,GACZ;QACI,GAAGA,QAAQ;QACX;QACAI;MACJ,CAAC,GACD,IAAI;MACVW,aAAa;MACbd,WAAW;MACXG,aAAa;MACbQ,cAAc;MACdO,UAAU,EAAEjB,eAAe;MAC3BC,kBAAkB,EAAEiB,QAAQ,IAAI;QAC5BjB,kBAAkB,CAAC,MAAMiB,QAAQ,CAAC;MACtC;IACJ,CAAC;EACL,CAAC,EAAE,CAAClB,eAAe,EAAEF,QAAQ,CAAC,CAAC;EAE/B,oBAAOV,KAAA,CAAA+B,aAAA,CAACzB,eAAe,CAAC0B,QAAQ;IAACJ,KAAK,EAAEA;EAAM,GAAEnB,KAAK,CAACwB,QAAmC,CAAC;AAC9F,CAAC","ignoreList":[]}

package/hooks/usePermission.d.ts

@@ -0,0 +1,2 @@
+import type { SecurityPermission } from "../types";
+export declare function usePermission<T extends SecurityPermission = SecurityPermission>(name: string): T | null;

package/hooks/usePermission.js

@@ -0,0 +1,9 @@
+import { useSecurity } from "./useSecurity";
+export function usePermission(name) {
+  const {
+    getPermission
+  } = useSecurity();
+  return getPermission(name);
+}
+
+//# sourceMappingURL=usePermission.js.map

package/hooks/usePermission.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useSecurity","usePermission","name","getPermission"],"sources":["usePermission.ts"],"sourcesContent":["import { useSecurity } from \"~/hooks/useSecurity\";\nimport type { SecurityPermission } from \"~/types\";\n\nexport function usePermission<T extends SecurityPermission = SecurityPermission>(name: string) {\n    const { getPermission } = useSecurity();\n    return getPermission<T>(name);\n}\n"],"mappings":"AAAA,SAASA,WAAW;AAGpB,OAAO,SAASC,aAAaA,CAAoDC,IAAY,EAAE;EAC3F,MAAM;IAAEC;EAAc,CAAC,GAAGH,WAAW,CAAC,CAAC;EACvC,OAAOG,aAAa,CAAID,IAAI,CAAC;AACjC","ignoreList":[]}

package/hooks/useSecurity.d.ts

@@ -1,2 +1,2 @@
-export declare type UseSecurity = ReturnType<typeof useSecurity>;
-export declare function useSecurity(): import("../contexts/Security").SecurityContextValue;
+import { SecurityContext } from "../contexts/Security";
+export declare function useSecurity(): SecurityContext;

package/hooks/useSecurity.js

@@ -1,5 +1,11 @@
 import { useContext } from "react";
 import { SecurityContext } from "../contexts/Security";
 export function useSecurity() {
-  return useContext(SecurityContext);
-}
+  const context = useContext(SecurityContext);
+  if (!context) {
+    throw Error(`Missing <SecurityProvider> in the component hierarchy!`);
+  }
+  return context;
+}
+
+//# sourceMappingURL=useSecurity.js.map

package/hooks/useSecurity.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useContext","SecurityContext","useSecurity","context","Error"],"sources":["useSecurity.ts"],"sourcesContent":["import { useContext } from \"react\";\nimport { SecurityContext } from \"~/contexts/Security\";\n\nexport function useSecurity() {\n    const context = useContext(SecurityContext);\n\n    if (!context) {\n        throw Error(`Missing <SecurityProvider> in the component hierarchy!`);\n    }\n\n    return context;\n}\n"],"mappings":"AAAA,SAASA,UAAU,QAAQ,OAAO;AAClC,SAASC,eAAe;AAExB,OAAO,SAASC,WAAWA,CAAA,EAAG;EAC1B,MAAMC,OAAO,GAAGH,UAAU,CAACC,eAAe,CAAC;EAE3C,IAAI,CAACE,OAAO,EAAE;IACV,MAAMC,KAAK,CAAC,wDAAwD,CAAC;EACzE;EAEA,OAAOD,OAAO;AAClB","ignoreList":[]}

package/index.d.ts

@@ -1,3 +1,6 @@
 export * from "./components";
 export * from "./contexts/Security";
+export { SecurityContext } from "./contexts/Security";
 export * from "./hooks/useSecurity";
+export * from "./hooks/usePermission";
+export * from "./Security";

package/index.js

@@ -1,3 +1,8 @@
 export * from "./components";
 export * from "./contexts/Security";
-export * from "./hooks/useSecurity";
+export { SecurityContext } from "./contexts/Security";
+export * from "./hooks/useSecurity";
+export * from "./hooks/usePermission";
+export * from "./Security";
+
+//# sourceMappingURL=index.js.map

package/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["SecurityContext"],"sources":["index.ts"],"sourcesContent":["export * from \"./components\";\nexport * from \"./contexts/Security\";\nexport { SecurityContext } from \"./contexts/Security\";\nexport * from \"./hooks/useSecurity\";\nexport * from \"./hooks/usePermission\";\nexport * from \"./Security\";\n"],"mappings":"AAAA;AACA;AACA,SAASA,eAAe;AACxB;AACA;AACA","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@webiny/app-security",
-	"version": "0.0.0-mt-2",
+	"version": "0.0.0-unstable.06b2ede40f",
 	"main": "index.js",
 	"repository": {
 		"type": "git",
@@ -13,40 +13,25 @@
 	],
 	"license": "MIT",
 	"dependencies": {
-		"@webiny/app": "0.0.0-mt-2",
-		"@webiny/plugins": "0.0.0-mt-2",
-		"minimatch": "3.0.4",
-		"react": "16.14.0",
-		"react-dom": "16.14.0"
+		"@webiny/app": "0.0.0-unstable.06b2ede40f",
+		"@webiny/plugins": "0.0.0-unstable.06b2ede40f",
+		"minimatch": "5.1.6",
+		"react": "18.2.0",
+		"react-dom": "18.2.0"
 	},
 	"devDependencies": {
-		"@babel/cli": "^7.5.5",
-		"@babel/core": "^7.5.5",
-		"@babel/plugin-proposal-class-properties": "^7.5.5",
-		"@babel/preset-env": "^7.5.5",
-		"@babel/preset-react": "^7.0.0",
-		"@babel/preset-typescript": "^7.8.3",
-		"@webiny/cli": "^0.0.0-mt-2",
-		"@webiny/project-utils": "^0.0.0-mt-2",
-		"babel-plugin-emotion": "^9.2.8",
-		"babel-plugin-lodash": "^3.3.4",
-		"babel-plugin-named-asset-import": "^1.0.0-next.3e165448",
-		"rimraf": "^3.0.2",
-		"ttypescript": "^1.5.12",
-		"typescript": "^4.1.3"
+		"@emotion/babel-plugin": "11.11.0",
+		"@webiny/project-utils": "0.0.0-unstable.06b2ede40f",
+		"rimraf": "6.0.1",
+		"typescript": "5.3.3"
 	},
 	"publishConfig": {
 		"access": "public",
 		"directory": "dist"
 	},
 	"scripts": {
-		"build": "yarn webiny run build",
-		"watch": "yarn webiny run watch"
-	},
-	"svgo": {
-		"plugins": {
-			"removeViewBox": false
-		}
+		"build": "node ../cli/bin.js run build",
+		"watch": "node ../cli/bin.js run watch"
 	},
 	"adio": {
 		"ignore": {
@@ -55,5 +40,5 @@
 			]
 		}
 	},
-	"gitHead": "3c0dcfb3c22c9f83107fdb97b25014cd03d9db7d"
+	"gitHead": "06b2ede40fc2212a70eeafd74afd50b56fb0ce82"
 }

package/types.d.ts

@@ -1,6 +1,6 @@
 /// <reference types="react" />
-import { Plugin } from "@webiny/app/types";
-export declare type SecureRouteErrorPlugin = Plugin & {
+import type { Plugin } from "@webiny/app/types";
+export type SecureRouteErrorPlugin = Plugin & {
     render(): React.ReactElement;
 };
 export interface FullAccessPermission {
@@ -15,7 +15,27 @@ export interface SecurityIdentity {
     type: string;
     displayName: string;
     permissions?: SecurityPermission[];
+    /**
+     * TODO @ts-refactor @pavel
+     * Verify that login can be present in here.
+     */
+    login?: string;
+    /**
+     * TODO @ts-refactor @pavel
+     * Verify that profile can be present in here.
+     */
+    profile?: {
+        email?: string;
+        firstName?: string;
+        lastName?: string;
+        avatar?: {
+            src?: string;
+        };
+        gravatar?: string;
+    };
     logout(): void;
-    getPermission?<T extends SecurityPermission = SecurityPermission>(name: string): T;
+    getPermission?<T extends SecurityPermission = SecurityPermission>(name: string): T | null;
     [key: string]: any;
 }
+export type IdToken = string;
+export type IdTokenProvider = () => Promise<IdToken | undefined> | IdToken | undefined;

package/types.js

@@ -1 +1,3 @@
-export {};
+export {};
+
+//# sourceMappingURL=types.js.map

package/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type { Plugin } from \"@webiny/app/types\";\n\nexport type SecureRouteErrorPlugin = Plugin & {\n    render(): React.ReactElement;\n};\n\nexport interface FullAccessPermission {\n    name: \"*\";\n}\n\nexport interface SecurityPermission {\n    name: string;\n    [key: string]: any;\n}\n\nexport interface SecurityIdentity {\n    id: string;\n    type: string;\n    displayName: string;\n    permissions?: SecurityPermission[];\n    /**\n     * TODO @ts-refactor @pavel\n     * Verify that login can be present in here.\n     */\n    login?: string;\n    /**\n     * TODO @ts-refactor @pavel\n     * Verify that profile can be present in here.\n     */\n    profile?: {\n        email?: string;\n        firstName?: string;\n        lastName?: string;\n        avatar?: {\n            src?: string;\n        };\n        gravatar?: string;\n    };\n    logout(): void;\n    // For backwards compatibility, expose the `getPermission` method on the `identity` object.\n    getPermission?<T extends SecurityPermission = SecurityPermission>(name: string): T | null;\n    [key: string]: any;\n}\n\nexport type IdToken = string;\n\nexport type IdTokenProvider = () => Promise<IdToken | undefined> | IdToken | undefined;\n"],"mappings":"","ignoreList":[]}