alado 2.5.1 → 2.5.3

package/README.md

@@ -965,22 +965,56 @@ export const optionalAuth: RequestAuthentication = {
 
 ## Access Control
 
-The `@accessControl` decorator enables fine-grained permission checking on route handlers by comparing values from the request against expected values.
+The `@accessControl` decorator provides a flexible and intuitive way to implement permission checking on your route handlers. It allows you to validate that requests meet specific authorization requirements by comparing values from the incoming request against expected values.
 
 ### Configuration
 
 ```typescript
 export type AccessControlConfig<T> = {
-  inputProperty: string; // Property path to extract from request (e.g., 'auth.user.id')
-  transformInputProperty?: (inputPropertyValue: unknown) => T | Promise<T>; // Optional transform
-  compareWithProperty?: string; // Property path to compare against
-  expectedValue?: T; // Expected value (if not using compareWithProperty)
-  statusCode: number; // HTTP status on access denial
-  message: string; // Error message on denial
+  /**
+   * The property path to extract from the request.
+   * Examples: 'auth.user.id'
+   */
+  inputProperty: string;
+
+  /**
+   * Optional transformation function to process the extracted value.
+   * Useful for normalizing or converting data types before comparison.
+   */
+  transformInputProperty?: (inputPropertyValue: unknown) => T | Promise<T>;
+
+  /**
+   * Property path to compare against in the request.
+   * Examples: 'path.id' (URL parameter), 'body.user.id' (request body)
+   */
+  compareWithProperty?: string;
+
+  /**
+   * The expected value to compare against.
+   * Use this if you have a fixed value rather than a dynamic property path.
+   */
+  expectedValue?: T;
+
+  /**
+   * Custom access control handler for complex permission logic.
+   * Receives the extracted input value and should return true if access is granted.
+   */
+  accessControlHandler?: (inputPropertyValue: unknown) => Promise<boolean>;
+
+  /**
+   * HTTP status code to return when access is denied.
+   * Commonly 403 (Forbidden) or 401 (Unauthorized).
+   */
+  statusCode: number;
+
+  /**
+   * User-friendly error message displayed when access is denied.
+   */
+  message: string;
 };
 ```
 
-Either provide `compareWithProperty` to compare two request values, or `expectedValue` to check against a fixed value.
+Either provide `compareWithProperty` to compare two request values, or `expectedValue` to check against a fixed value or `accessControlHandler` to implement complex logic.
 
 ### Usage Example
 

package/dist/dto/access-control-config.d.ts

@@ -4,4 +4,5 @@ export type AccessControlConfig<T> = {
     transformInputProperty?: (inputPropertyValue: unknown) => T | Promise<T>;
     compareWithProperty?: string;
     expectedValue?: T;
+    accessControlHandler: (inputPropertyValue: unknown) => Promise<boolean>;
 } & AladoServerError;

package/dist/helpers/parser/access-control-checker.js

@@ -6,7 +6,7 @@ async function accessControlChecker(context, request) {
     const { accessControl } = context;
     let success = true;
     for (const item of accessControl) {
-        const { inputProperty, transformInputProperty, statusCode, message, compareWithProperty, expectedValue } = item;
+        const { inputProperty, transformInputProperty, statusCode, message, compareWithProperty, expectedValue, accessControlHandler, } = item;
         let providedValue = (0, accessor_1.getProperty)(request, inputProperty);
         if (typeof transformInputProperty === 'function') {
             providedValue = await transformInputProperty(providedValue);
@@ -24,6 +24,12 @@ async function accessControlChecker(context, request) {
         if (!success) {
             return { statusCode, message };
         }
+        if (typeof accessControlHandler === 'function') {
+            success = await accessControlHandler(providedValue);
+        }
+        if (!success) {
+            return { statusCode, message };
+        }
     }
 }
 //# sourceMappingURL=access-control-checker.js.map

package/dist/helpers/parser/access-control-checker.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-control-checker.js","sourceRoot":"","sources":["../../../src/helpers/parser/access-control-checker.ts"],"names":[],"mappings":";;AAGA,oDA6BC;AA/BD,0CAA0C;AAEnC,KAAK,UAAU,oBAAoB,CAAC,OAAqB,EAAE,OAAY;IAC5E,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAClC,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,EAAE,aAAa,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAEhH,IAAI,aAAa,GAAY,IAAA,sBAAW,EAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEjE,IAAI,OAAO,sBAAsB,KAAK,UAAU,EAAE,CAAC;YACjD,aAAa,GAAG,MAAM,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,GAAG,aAAa,KAAK,aAAa,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,eAAe,GAAG,IAAA,sBAAW,EAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAClE,OAAO,GAAG,eAAe,KAAK,aAAa,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"access-control-checker.js","sourceRoot":"","sources":["../../../src/helpers/parser/access-control-checker.ts"],"names":[],"mappings":";;AAGA,oDA6CC;AA/CD,0CAA0C;AAEnC,KAAK,UAAU,oBAAoB,CAAC,OAAqB,EAAE,OAAY;IAC5E,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAClC,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,EACJ,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,OAAO,EACP,mBAAmB,EACnB,aAAa,EACb,oBAAoB,GACrB,GAAG,IAAI,CAAC;QAET,IAAI,aAAa,GAAY,IAAA,sBAAW,EAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEjE,IAAI,OAAO,sBAAsB,KAAK,UAAU,EAAE,CAAC;YACjD,aAAa,GAAG,MAAM,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,GAAG,aAAa,KAAK,aAAa,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,eAAe,GAAG,IAAA,sBAAW,EAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAClE,OAAO,GAAG,eAAe,KAAK,aAAa,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,oBAAoB,KAAK,UAAU,EAAE,CAAC;YAC/C,OAAO,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alado",
-  "version": "2.5.1",
+  "version": "2.5.3",
   "description": "Extremely fast, lightweight, robust framework for HTTP applications written in Node.js",
   "keywords": [
     "HTTP",
@@ -19,26 +19,26 @@
     "postinstall": "node postinstall.js",
     "eslint": "eslint src --ext .ts",
     "test": "echo \"Error: no test specified\" && exit 0",
-    "prettier-check": "prettier . --check",
-    "prettier-write": "prettier . --write",
+    "check-format": "prettier . --check",
+    "format": "prettier . --write",
     "prepare": "husky"
   },
   "dependencies": {
-    "swagger-ui-dist": "5.32.6"
+    "swagger-ui-dist": "5.32.8"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@types/node": "24.13.1",
     "@types/prettier": "3.0.0",
-    "@typescript-eslint/eslint-plugin": "8.62.0",
-    "@typescript-eslint/parser": "8.62.0",
-    "eslint": "10.5.0",
+    "@typescript-eslint/eslint-plugin": "8.62.1",
+    "@typescript-eslint/parser": "8.62.1",
+    "eslint": "10.6.0",
     "husky": "9.1.7",
-    "prettier": "3.8.4",
+    "prettier": "3.9.4",
     "prettier-plugin-multiline-arrays": "4.1.9",
     "tsc-alias": "1.8.17",
     "typescript": "5.9.3",
-    "typescript-eslint": "^8.62.0"
+    "typescript-eslint": "^8.62.1"
   },
   "repository": {
     "type": "git",