aip-master-node-sumit 1.0.3 → 1.0.6

package/index.js

@@ -11,7 +11,7 @@ const getSafeMasterUrl = (url) => {
 };
 
 const AIP_MASTER_API = getSafeMasterUrl(process.env.AIP_MASTER_URL); 
-const API_KEY = process.env.AIP_MASTER_API_KEY; 
+const API_KEY = process.env.AIP_MASTER_API_KEY;
 
 if (API_KEY) {
     const sendHeartbeat = async () => {
@@ -24,6 +24,7 @@ if (API_KEY) {
             // Silently fail so the client's app doesn't crash if Master API is updating
         }
     };
+
     sendHeartbeat(); 
     setInterval(sendHeartbeat, 5 * 60 * 1000);
 }
@@ -48,6 +49,7 @@ const aipGuard = (options = { requireLogin: true }) => {
         res.setHeader('Access-Control-Allow-Origin', process.env.AIP_ALLOWED_ORIGIN || '*');
 
         let token = req.query.token || (req.cookies && req.cookies.aip_session);
+
         if (!token && req.headers.authorization && req.headers.authorization.startsWith('Bearer ')) {
             token = req.headers.authorization.split(' ')[1];
         } else if (!token && req.headers['x-aip-token']) {
@@ -60,11 +62,12 @@ const aipGuard = (options = { requireLogin: true }) => {
 
             try {
                 const currentAction = req.method + " " + (req.baseUrl + req.path);
+
                 const authRes = await axios.post(`${AIP_MASTER_API}/iam/verify-session`, 
                     { session_token: token, action: currentAction }, 
                     { headers: { 'Authorization': `Bearer ${API_KEY}` } }
                 );
-                
+
                 req.user = authRes.data.user; 
 
                 const isProd = process.env.NODE_ENV === 'production';
@@ -73,7 +76,7 @@ const aipGuard = (options = { requireLogin: true }) => {
             } catch (error) {
                 const status = error.response?.status || 500;
                 const errMsg = error.response?.data?.error || "AIP Identity Blocked: Invalid Token.";
-                
+
                 if (status === 401 && res.clearCookie) {
                     res.clearCookie('aip_session');
                 }
@@ -88,9 +91,10 @@ const aipGuard = (options = { requireLogin: true }) => {
                 body: req.body || {}, 
                 query: req.query || {}
             });
+
             const forwardedFor = req.headers['x-forwarded-for'];
             let clientIp = req.ip || (req.connection && req.connection.remoteAddress) || "0.0.0.0";
-            
+
             if (forwardedFor) {
                 clientIp = Array.isArray(forwardedFor) 
                     ? forwardedFor[0].trim() 
@@ -121,4 +125,60 @@ const aipGuard = (options = { requireLogin: true }) => {
     };
 };
 
+// ==========================================
+// 🛡️ NEW: IaaS Admin Client SDK
+// ==========================================
+class AipAdminClient {
+    constructor(apiKey = process.env.AIP_MASTER_API_KEY, masterUrl = process.env.AIP_MASTER_URL) {
+        if (!apiKey) throw new Error("AIP Admin Client requires an API Key");
+        this.apiKey = apiKey;
+        this.baseUrl = getSafeMasterUrl(masterUrl);
+        
+        this.client = axios.create({
+            baseURL: this.baseUrl,
+            headers: { 'Authorization': `Bearer ${this.apiKey}` }
+        });
+    }
+
+    // --- User Management ---
+    async getUsers() {
+        const res = await this.client.get('/sdk/admin/users');
+        return res.data;
+    }
+
+    async createUser({ name, email, password, role_id, send_email = false }) {
+        const res = await this.client.post('/sdk/admin/users', { name, email, password, role_id, send_email });
+        return res.data;
+    }
+
+    async updateUser(userId, { name, role_id }) {
+        const res = await this.client.put(`/sdk/admin/users/${userId}`, { name, role_id });
+        return res.data;
+    }
+
+    async updateRBAC(userId, permissions) {
+        const res = await this.client.put(`/sdk/admin/users/${userId}/rbac`, { permissions });
+        return res.data;
+    }
+
+    async deleteUser(userId) {
+        const res = await this.client.delete(`/sdk/admin/users/${userId}`);
+        return res.data;
+    }
+
+    // --- Role Management ---
+    async getRoles() {
+        const res = await this.client.get('/sdk/admin/roles');
+        return res.data;
+    }
+
+    async createRole({ name, slug, permissions }) {
+        const res = await this.client.post('/sdk/admin/roles', { name, slug, permissions });
+        return res.data;
+    }
+}
+
+// 🛡️ Attach the Admin Client directly to the Guard export for backward compatibility
+aipGuard.AipAdminClient = AipAdminClient;
+
 module.exports = aipGuard;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aip-master-node-sumit",
-  "version": "1.0.3",
+  "version": "1.0.6",
   "description": "Enterprise-grade WAF and IAM security middleware for Node.js.",
   "main": "index.js",
   "scripts": {