authula 0.3.1 → 0.3.3

package/dist/plugins/index.d.cts

@@ -250,6 +250,215 @@ declare class AdminPlugin implements Plugin {
   };
 }
 //#endregion
+//#region src/plugins/access-control/types.d.ts
+declare const roleSchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  weight: z.ZodNumber;
+  isSystem: z.ZodBoolean;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type Role = z.infer<typeof roleSchema>;
+declare const permissionSchema: z.ZodObject<{
+  id: z.ZodString;
+  key: z.ZodString;
+  description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  isSystem: z.ZodBoolean;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type Permission = z.infer<typeof permissionSchema>;
+declare const permissionGrantSourceSchema: z.ZodObject<{
+  roleId: z.ZodString;
+  roleName: z.ZodString;
+  grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+}, z.core.$strip>;
+type PermissionGrantSource = z.infer<typeof permissionGrantSourceSchema>;
+declare const userPermissionInfoSchema: z.ZodObject<{
+  permissionId: z.ZodString;
+  permissionKey: z.ZodString;
+  permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    roleId: z.ZodString;
+    roleName: z.ZodString;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  }, z.core.$strip>>>;
+}, z.core.$strip>;
+type UserPermissionInfo = z.infer<typeof userPermissionInfoSchema>;
+declare const userRoleInfoSchema: z.ZodObject<{
+  roleId: z.ZodString;
+  roleName: z.ZodString;
+  roleDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  assignedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  assignedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+}, z.core.$strip>;
+type UserRoleInfo = z.infer<typeof userRoleInfoSchema>;
+declare const roleDetailsSchema: z.ZodObject<{
+  role: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    weight: z.ZodNumber;
+    isSystem: z.ZodBoolean;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+  }, z.core.$strip>;
+  permissions: z.ZodArray<z.ZodObject<{
+    permissionId: z.ZodString;
+    permissionKey: z.ZodString;
+    permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      roleId: z.ZodString;
+      roleName: z.ZodString;
+      grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type RoleDetails = z.infer<typeof roleDetailsSchema>;
+declare const getUserPermissionsResponseSchema: z.ZodObject<{
+  permissions: z.ZodArray<z.ZodObject<{
+    permissionId: z.ZodString;
+    permissionKey: z.ZodString;
+    permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      roleId: z.ZodString;
+      roleName: z.ZodString;
+      grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type GetUserPermissionsResponse = z.infer<typeof getUserPermissionsResponseSchema>;
+declare const checkUserPermissionsResponseSchema: z.ZodObject<{
+  hasPermissions: z.ZodBoolean;
+}, z.core.$strip>;
+type CheckUserPermissionsResponse = z.infer<typeof checkUserPermissionsResponseSchema>;
+type CreateRoleRequest = {
+  name: string;
+  description?: string | null;
+  weight?: number;
+  isSystem: boolean;
+};
+type CreateRoleResponse = {
+  role: Role;
+};
+type UpdateRoleRequest = {
+  name?: string | null;
+  description?: string | null;
+  weight?: number;
+};
+type UpdateRoleResponse = {
+  role: Role;
+};
+type DeleteRoleResponse = {
+  message: string;
+};
+type CreatePermissionRequest = {
+  key: string;
+  description?: string | null;
+  isSystem: boolean;
+};
+type CreatePermissionResponse = {
+  permission: Permission;
+};
+type UpdatePermissionRequest = {
+  description?: string | null;
+};
+type UpdatePermissionResponse = {
+  permission: Permission;
+};
+type DeletePermissionResponse = {
+  message: string;
+};
+type AddRolePermissionRequest = {
+  permissionId: string;
+};
+type AddRolePermissionResponse = {
+  message: string;
+};
+type ReplaceRolePermissionsRequest = {
+  permissionIds: string[];
+};
+type ReplaceRolePermissionResponse = {
+  message: string;
+};
+type RemoveRolePermissionResponse = {
+  message: string;
+};
+type AssignUserRoleRequest = {
+  roleId: string;
+  expiresAt?: string | null;
+};
+type ReplaceUserRolesRequest = {
+  roleIds: string[];
+};
+type ReplaceUserRolesResponse = {
+  message: string;
+};
+type AssignUserRoleResponse = {
+  message: string;
+};
+type RemoveUserRoleResponse = {
+  message: string;
+};
+type CheckUserPermissionsRequest = {
+  permissionKeys: string[];
+};
+type UserWithPermissions = {
+  user: User;
+  permissions: UserPermissionInfo[];
+};
+type UserAuthorizationProfile = {
+  user: User;
+  roles: UserRoleInfo[];
+  permissions: UserPermissionInfo[];
+};
+type UserWithRoles = {
+  user: User;
+  roles: UserRoleInfo[];
+};
+//#endregion
+//#region src/plugins/access-control/plugin.d.ts
+declare class AccessControlPlugin implements Plugin {
+  readonly id = "accessControl";
+  constructor();
+  init(client: AuthulaClient): {
+    createRole: (data: CreateRoleRequest) => Promise<CreateRoleResponse>;
+    getAllRoles: () => Promise<Role[]>;
+    getRoleByName: (roleName: string) => Promise<Role>;
+    getRoleById: (roleId: string) => Promise<RoleDetails>;
+    updateRole: (roleId: string, data: UpdateRoleRequest) => Promise<UpdateRoleResponse>;
+    deleteRole: (roleId: string) => Promise<DeleteRoleResponse>;
+    createPermission: (data: CreatePermissionRequest) => Promise<CreatePermissionResponse>;
+    getAllPermissions: () => Promise<Permission[]>;
+    getPermissionById: (permissionId: string) => Promise<Permission>;
+    updatePermission: (permissionId: string, data: UpdatePermissionRequest) => Promise<UpdatePermissionResponse>;
+    deletePermission: (permissionId: string) => Promise<DeletePermissionResponse>;
+    addRolePermission: (roleId: string, data: AddRolePermissionRequest) => Promise<AddRolePermissionResponse>;
+    getRolePermissions: (roleId: string) => Promise<UserPermissionInfo[]>;
+    replaceRolePermissions: (roleId: string, data: ReplaceRolePermissionsRequest) => Promise<ReplaceRolePermissionResponse>;
+    removeRolePermission: (roleId: string, permissionId: string) => Promise<RemoveRolePermissionResponse>;
+    getUserRoles: (userId: string) => Promise<UserRoleInfo[]>;
+    assignUserRole: (userId: string, data: AssignUserRoleRequest) => Promise<AssignUserRoleResponse>;
+    replaceUserRoles: (userId: string, data: ReplaceUserRolesRequest) => Promise<ReplaceUserRolesResponse>;
+    removeUserRole: (userId: string, roleId: string) => Promise<RemoveUserRoleResponse>;
+    getUserPermissions: (userId: string) => Promise<GetUserPermissionsResponse>;
+    checkUserPermissions: (userId: string, data: CheckUserPermissionsRequest) => Promise<CheckUserPermissionsResponse>;
+  };
+}
+//#endregion
 //#region src/plugins/bearer/types.d.ts
 type BearerPluginOptions = {
   headerName?: string;
@@ -457,5 +666,5 @@ declare class TOTPPlugin implements Plugin {
   };
 }
 //#endregion
-export { AdminPlugin, AdminSessionState, AdminUserSession, AdminUserState, BanUserRequest, BanUserResponse, BearerPlugin, BearerPluginOptions, CSRFPlugin, CSRFPluginOptions, ChangePasswordRequest, CreateAccountRequest, CreateAccountResponse, CreateSessionStateRequest, CreateSessionStateResponse, CreateUserRequest, CreateUserResponse, CreateUserStateRequest, CreateUserStateResponse, DeleteAccountResponse, DeleteSessionStateResponse, DeleteUserResponse, DeleteUserStateResponse, DisableResponse, EmailPasswordPlugin, EnableResponse, GenerateBackupCodesResponse, GetAccountByIdResponse, GetAllImpersonationsResponse, GetAllUsersResponse, GetBannedUserStatesResponse, GetImpersonationByIdResponse, GetRevokedSessionStatesResponse, GetSessionStateResponse, GetTOTPURIResponse, GetUserAccountsResponse, GetUserAdminSessionsResponse, GetUserByIdResponse, GetUserStateResponse, Impersonation, JWKSKey, JWTAlgorithm, JWTPlugin, JWTTokensResponse, MagicLinkExchangeRequest, MagicLinkPlugin, MagicLinkSignInRequest, MagicLinkSignInResponse, MagicLinkVerifyRequest, MagicLinkVerifyResponse, OAuth2Plugin, OAuth2ProviderType, RequestEmailChangeRequest, RequestPasswordResetRequest, RevokeSessionRequest, RevokeSessionResponse, SendEmailVerificationRequest, SignInRequest, SignInWithOAuth2Request, SignInWithOAuth2Response, SignUpRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationResponse, TOTPPlugin, TokenRefreshRequest, TokenRefreshResponse, UnbanUserResponse, UpdateAccountRequest, UpdateAccountResponse, UpdateSessionStateRequest, UpdateSessionStateResponse, UpdateUserRequest, UpdateUserResponse, UpdateUserStateRequest, UpdateUserStateResponse, VerifyBackupCodeRequest, VerifyBackupCodeResponse, VerifyEmailRequest, VerifyTOTPRequest, VerifyTOTPResponse, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, impersonationSchema };
+export { AccessControlPlugin, AddRolePermissionRequest, AddRolePermissionResponse, AdminPlugin, AdminSessionState, AdminUserSession, AdminUserState, AssignUserRoleRequest, AssignUserRoleResponse, BanUserRequest, BanUserResponse, BearerPlugin, BearerPluginOptions, CSRFPlugin, CSRFPluginOptions, ChangePasswordRequest, CheckUserPermissionsRequest, CheckUserPermissionsResponse, CreateAccountRequest, CreateAccountResponse, CreatePermissionRequest, CreatePermissionResponse, CreateRoleRequest, CreateRoleResponse, CreateSessionStateRequest, CreateSessionStateResponse, CreateUserRequest, CreateUserResponse, CreateUserStateRequest, CreateUserStateResponse, DeleteAccountResponse, DeletePermissionResponse, DeleteRoleResponse, DeleteSessionStateResponse, DeleteUserResponse, DeleteUserStateResponse, DisableResponse, EmailPasswordPlugin, EnableResponse, GenerateBackupCodesResponse, GetAccountByIdResponse, GetAllImpersonationsResponse, GetAllUsersResponse, GetBannedUserStatesResponse, GetImpersonationByIdResponse, GetRevokedSessionStatesResponse, GetSessionStateResponse, GetTOTPURIResponse, GetUserAccountsResponse, GetUserAdminSessionsResponse, GetUserByIdResponse, GetUserPermissionsResponse, GetUserStateResponse, Impersonation, JWKSKey, JWTAlgorithm, JWTPlugin, JWTTokensResponse, MagicLinkExchangeRequest, MagicLinkPlugin, MagicLinkSignInRequest, MagicLinkSignInResponse, MagicLinkVerifyRequest, MagicLinkVerifyResponse, OAuth2Plugin, OAuth2ProviderType, Permission, PermissionGrantSource, RemoveRolePermissionResponse, RemoveUserRoleResponse, ReplaceRolePermissionResponse, ReplaceRolePermissionsRequest, ReplaceUserRolesRequest, ReplaceUserRolesResponse, RequestEmailChangeRequest, RequestPasswordResetRequest, RevokeSessionRequest, RevokeSessionResponse, Role, RoleDetails, SendEmailVerificationRequest, SignInRequest, SignInWithOAuth2Request, SignInWithOAuth2Response, SignUpRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationResponse, TOTPPlugin, TokenRefreshRequest, TokenRefreshResponse, UnbanUserResponse, UpdateAccountRequest, UpdateAccountResponse, UpdatePermissionRequest, UpdatePermissionResponse, UpdateRoleRequest, UpdateRoleResponse, UpdateSessionStateRequest, UpdateSessionStateResponse, UpdateUserRequest, UpdateUserResponse, UpdateUserStateRequest, UpdateUserStateResponse, UserAuthorizationProfile, UserPermissionInfo, UserRoleInfo, UserWithPermissions, UserWithRoles, VerifyBackupCodeRequest, VerifyBackupCodeResponse, VerifyEmailRequest, VerifyTOTPRequest, VerifyTOTPResponse, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, checkUserPermissionsResponseSchema, getUserPermissionsResponseSchema, impersonationSchema, permissionGrantSourceSchema, permissionSchema, roleDetailsSchema, roleSchema, userPermissionInfoSchema, userRoleInfoSchema };
 //# sourceMappingURL=index.d.cts.map

package/dist/plugins/index.d.ts

@@ -250,6 +250,215 @@ declare class AdminPlugin implements Plugin {
   };
 }
 //#endregion
+//#region src/plugins/access-control/types.d.ts
+declare const roleSchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  weight: z.ZodNumber;
+  isSystem: z.ZodBoolean;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type Role = z.infer<typeof roleSchema>;
+declare const permissionSchema: z.ZodObject<{
+  id: z.ZodString;
+  key: z.ZodString;
+  description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  isSystem: z.ZodBoolean;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+type Permission = z.infer<typeof permissionSchema>;
+declare const permissionGrantSourceSchema: z.ZodObject<{
+  roleId: z.ZodString;
+  roleName: z.ZodString;
+  grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+}, z.core.$strip>;
+type PermissionGrantSource = z.infer<typeof permissionGrantSourceSchema>;
+declare const userPermissionInfoSchema: z.ZodObject<{
+  permissionId: z.ZodString;
+  permissionKey: z.ZodString;
+  permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    roleId: z.ZodString;
+    roleName: z.ZodString;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  }, z.core.$strip>>>;
+}, z.core.$strip>;
+type UserPermissionInfo = z.infer<typeof userPermissionInfoSchema>;
+declare const userRoleInfoSchema: z.ZodObject<{
+  roleId: z.ZodString;
+  roleName: z.ZodString;
+  roleDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  assignedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  assignedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+}, z.core.$strip>;
+type UserRoleInfo = z.infer<typeof userRoleInfoSchema>;
+declare const roleDetailsSchema: z.ZodObject<{
+  role: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    weight: z.ZodNumber;
+    isSystem: z.ZodBoolean;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+  }, z.core.$strip>;
+  permissions: z.ZodArray<z.ZodObject<{
+    permissionId: z.ZodString;
+    permissionKey: z.ZodString;
+    permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      roleId: z.ZodString;
+      roleName: z.ZodString;
+      grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type RoleDetails = z.infer<typeof roleDetailsSchema>;
+declare const getUserPermissionsResponseSchema: z.ZodObject<{
+  permissions: z.ZodArray<z.ZodObject<{
+    permissionId: z.ZodString;
+    permissionKey: z.ZodString;
+    permissionDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    sources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      roleId: z.ZodString;
+      roleName: z.ZodString;
+      grantedByUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      grantedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type GetUserPermissionsResponse = z.infer<typeof getUserPermissionsResponseSchema>;
+declare const checkUserPermissionsResponseSchema: z.ZodObject<{
+  hasPermissions: z.ZodBoolean;
+}, z.core.$strip>;
+type CheckUserPermissionsResponse = z.infer<typeof checkUserPermissionsResponseSchema>;
+type CreateRoleRequest = {
+  name: string;
+  description?: string | null;
+  weight?: number;
+  isSystem: boolean;
+};
+type CreateRoleResponse = {
+  role: Role;
+};
+type UpdateRoleRequest = {
+  name?: string | null;
+  description?: string | null;
+  weight?: number;
+};
+type UpdateRoleResponse = {
+  role: Role;
+};
+type DeleteRoleResponse = {
+  message: string;
+};
+type CreatePermissionRequest = {
+  key: string;
+  description?: string | null;
+  isSystem: boolean;
+};
+type CreatePermissionResponse = {
+  permission: Permission;
+};
+type UpdatePermissionRequest = {
+  description?: string | null;
+};
+type UpdatePermissionResponse = {
+  permission: Permission;
+};
+type DeletePermissionResponse = {
+  message: string;
+};
+type AddRolePermissionRequest = {
+  permissionId: string;
+};
+type AddRolePermissionResponse = {
+  message: string;
+};
+type ReplaceRolePermissionsRequest = {
+  permissionIds: string[];
+};
+type ReplaceRolePermissionResponse = {
+  message: string;
+};
+type RemoveRolePermissionResponse = {
+  message: string;
+};
+type AssignUserRoleRequest = {
+  roleId: string;
+  expiresAt?: string | null;
+};
+type ReplaceUserRolesRequest = {
+  roleIds: string[];
+};
+type ReplaceUserRolesResponse = {
+  message: string;
+};
+type AssignUserRoleResponse = {
+  message: string;
+};
+type RemoveUserRoleResponse = {
+  message: string;
+};
+type CheckUserPermissionsRequest = {
+  permissionKeys: string[];
+};
+type UserWithPermissions = {
+  user: User;
+  permissions: UserPermissionInfo[];
+};
+type UserAuthorizationProfile = {
+  user: User;
+  roles: UserRoleInfo[];
+  permissions: UserPermissionInfo[];
+};
+type UserWithRoles = {
+  user: User;
+  roles: UserRoleInfo[];
+};
+//#endregion
+//#region src/plugins/access-control/plugin.d.ts
+declare class AccessControlPlugin implements Plugin {
+  readonly id = "accessControl";
+  constructor();
+  init(client: AuthulaClient): {
+    createRole: (data: CreateRoleRequest) => Promise<CreateRoleResponse>;
+    getAllRoles: () => Promise<Role[]>;
+    getRoleByName: (roleName: string) => Promise<Role>;
+    getRoleById: (roleId: string) => Promise<RoleDetails>;
+    updateRole: (roleId: string, data: UpdateRoleRequest) => Promise<UpdateRoleResponse>;
+    deleteRole: (roleId: string) => Promise<DeleteRoleResponse>;
+    createPermission: (data: CreatePermissionRequest) => Promise<CreatePermissionResponse>;
+    getAllPermissions: () => Promise<Permission[]>;
+    getPermissionById: (permissionId: string) => Promise<Permission>;
+    updatePermission: (permissionId: string, data: UpdatePermissionRequest) => Promise<UpdatePermissionResponse>;
+    deletePermission: (permissionId: string) => Promise<DeletePermissionResponse>;
+    addRolePermission: (roleId: string, data: AddRolePermissionRequest) => Promise<AddRolePermissionResponse>;
+    getRolePermissions: (roleId: string) => Promise<UserPermissionInfo[]>;
+    replaceRolePermissions: (roleId: string, data: ReplaceRolePermissionsRequest) => Promise<ReplaceRolePermissionResponse>;
+    removeRolePermission: (roleId: string, permissionId: string) => Promise<RemoveRolePermissionResponse>;
+    getUserRoles: (userId: string) => Promise<UserRoleInfo[]>;
+    assignUserRole: (userId: string, data: AssignUserRoleRequest) => Promise<AssignUserRoleResponse>;
+    replaceUserRoles: (userId: string, data: ReplaceUserRolesRequest) => Promise<ReplaceUserRolesResponse>;
+    removeUserRole: (userId: string, roleId: string) => Promise<RemoveUserRoleResponse>;
+    getUserPermissions: (userId: string) => Promise<GetUserPermissionsResponse>;
+    checkUserPermissions: (userId: string, data: CheckUserPermissionsRequest) => Promise<CheckUserPermissionsResponse>;
+  };
+}
+//#endregion
 //#region src/plugins/bearer/types.d.ts
 type BearerPluginOptions = {
   headerName?: string;
@@ -457,5 +666,5 @@ declare class TOTPPlugin implements Plugin {
   };
 }
 //#endregion
-export { AdminPlugin, AdminSessionState, AdminUserSession, AdminUserState, BanUserRequest, BanUserResponse, BearerPlugin, BearerPluginOptions, CSRFPlugin, CSRFPluginOptions, ChangePasswordRequest, CreateAccountRequest, CreateAccountResponse, CreateSessionStateRequest, CreateSessionStateResponse, CreateUserRequest, CreateUserResponse, CreateUserStateRequest, CreateUserStateResponse, DeleteAccountResponse, DeleteSessionStateResponse, DeleteUserResponse, DeleteUserStateResponse, DisableResponse, EmailPasswordPlugin, EnableResponse, GenerateBackupCodesResponse, GetAccountByIdResponse, GetAllImpersonationsResponse, GetAllUsersResponse, GetBannedUserStatesResponse, GetImpersonationByIdResponse, GetRevokedSessionStatesResponse, GetSessionStateResponse, GetTOTPURIResponse, GetUserAccountsResponse, GetUserAdminSessionsResponse, GetUserByIdResponse, GetUserStateResponse, Impersonation, JWKSKey, JWTAlgorithm, JWTPlugin, JWTTokensResponse, MagicLinkExchangeRequest, MagicLinkPlugin, MagicLinkSignInRequest, MagicLinkSignInResponse, MagicLinkVerifyRequest, MagicLinkVerifyResponse, OAuth2Plugin, OAuth2ProviderType, RequestEmailChangeRequest, RequestPasswordResetRequest, RevokeSessionRequest, RevokeSessionResponse, SendEmailVerificationRequest, SignInRequest, SignInWithOAuth2Request, SignInWithOAuth2Response, SignUpRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationResponse, TOTPPlugin, TokenRefreshRequest, TokenRefreshResponse, UnbanUserResponse, UpdateAccountRequest, UpdateAccountResponse, UpdateSessionStateRequest, UpdateSessionStateResponse, UpdateUserRequest, UpdateUserResponse, UpdateUserStateRequest, UpdateUserStateResponse, VerifyBackupCodeRequest, VerifyBackupCodeResponse, VerifyEmailRequest, VerifyTOTPRequest, VerifyTOTPResponse, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, impersonationSchema };
+export { AccessControlPlugin, AddRolePermissionRequest, AddRolePermissionResponse, AdminPlugin, AdminSessionState, AdminUserSession, AdminUserState, AssignUserRoleRequest, AssignUserRoleResponse, BanUserRequest, BanUserResponse, BearerPlugin, BearerPluginOptions, CSRFPlugin, CSRFPluginOptions, ChangePasswordRequest, CheckUserPermissionsRequest, CheckUserPermissionsResponse, CreateAccountRequest, CreateAccountResponse, CreatePermissionRequest, CreatePermissionResponse, CreateRoleRequest, CreateRoleResponse, CreateSessionStateRequest, CreateSessionStateResponse, CreateUserRequest, CreateUserResponse, CreateUserStateRequest, CreateUserStateResponse, DeleteAccountResponse, DeletePermissionResponse, DeleteRoleResponse, DeleteSessionStateResponse, DeleteUserResponse, DeleteUserStateResponse, DisableResponse, EmailPasswordPlugin, EnableResponse, GenerateBackupCodesResponse, GetAccountByIdResponse, GetAllImpersonationsResponse, GetAllUsersResponse, GetBannedUserStatesResponse, GetImpersonationByIdResponse, GetRevokedSessionStatesResponse, GetSessionStateResponse, GetTOTPURIResponse, GetUserAccountsResponse, GetUserAdminSessionsResponse, GetUserByIdResponse, GetUserPermissionsResponse, GetUserStateResponse, Impersonation, JWKSKey, JWTAlgorithm, JWTPlugin, JWTTokensResponse, MagicLinkExchangeRequest, MagicLinkPlugin, MagicLinkSignInRequest, MagicLinkSignInResponse, MagicLinkVerifyRequest, MagicLinkVerifyResponse, OAuth2Plugin, OAuth2ProviderType, Permission, PermissionGrantSource, RemoveRolePermissionResponse, RemoveUserRoleResponse, ReplaceRolePermissionResponse, ReplaceRolePermissionsRequest, ReplaceUserRolesRequest, ReplaceUserRolesResponse, RequestEmailChangeRequest, RequestPasswordResetRequest, RevokeSessionRequest, RevokeSessionResponse, Role, RoleDetails, SendEmailVerificationRequest, SignInRequest, SignInWithOAuth2Request, SignInWithOAuth2Response, SignUpRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationResponse, TOTPPlugin, TokenRefreshRequest, TokenRefreshResponse, UnbanUserResponse, UpdateAccountRequest, UpdateAccountResponse, UpdatePermissionRequest, UpdatePermissionResponse, UpdateRoleRequest, UpdateRoleResponse, UpdateSessionStateRequest, UpdateSessionStateResponse, UpdateUserRequest, UpdateUserResponse, UpdateUserStateRequest, UpdateUserStateResponse, UserAuthorizationProfile, UserPermissionInfo, UserRoleInfo, UserWithPermissions, UserWithRoles, VerifyBackupCodeRequest, VerifyBackupCodeResponse, VerifyEmailRequest, VerifyTOTPRequest, VerifyTOTPResponse, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, checkUserPermissionsResponseSchema, getUserPermissionsResponseSchema, impersonationSchema, permissionGrantSourceSchema, permissionSchema, roleDetailsSchema, roleSchema, userPermissionInfoSchema, userRoleInfoSchema };
 //# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.js

@@ -173,6 +173,155 @@ const impersonationSchema = z.object({
 	updatedAt: z.iso.datetime()
 });
 
+//#endregion
+//#region src/plugins/access-control/plugin.ts
+var AccessControlPlugin = class {
+	id = "accessControl";
+	constructor() {}
+	init(client) {
+		return {
+			createRole: async (data) => {
+				return wrappedFetch(client, `/access-control/roles`, {
+					method: "POST",
+					body: data
+				});
+			},
+			getAllRoles: async () => {
+				return wrappedFetch(client, `/access-control/roles`, { method: "GET" });
+			},
+			getRoleByName: async (roleName) => {
+				return wrappedFetch(client, `/access-control/roles/by-name/${roleName}`, { method: "GET" });
+			},
+			getRoleById: async (roleId) => {
+				return wrappedFetch(client, `/access-control/roles/${roleId}`, { method: "GET" });
+			},
+			updateRole: async (roleId, data) => {
+				return wrappedFetch(client, `/access-control/roles/${roleId}`, {
+					method: "PATCH",
+					body: data
+				});
+			},
+			deleteRole: async (roleId) => {
+				return wrappedFetch(client, `/access-control/roles/${roleId}`, { method: "DELETE" });
+			},
+			createPermission: async (data) => {
+				return wrappedFetch(client, `/access-control/permissions`, {
+					method: "POST",
+					body: data
+				});
+			},
+			getAllPermissions: async () => {
+				return wrappedFetch(client, `/access-control/permissions`, { method: "GET" });
+			},
+			getPermissionById: async (permissionId) => {
+				return wrappedFetch(client, `/access-control/permissions/${permissionId}`, { method: "GET" });
+			},
+			updatePermission: async (permissionId, data) => {
+				return wrappedFetch(client, `/access-control/permissions/${permissionId}`, {
+					method: "PATCH",
+					body: data
+				});
+			},
+			deletePermission: async (permissionId) => {
+				return wrappedFetch(client, `/access-control/permissions/${permissionId}`, { method: "DELETE" });
+			},
+			addRolePermission: async (roleId, data) => {
+				return wrappedFetch(client, `/access-control/roles/${roleId}/permissions`, {
+					method: "POST",
+					body: data
+				});
+			},
+			getRolePermissions: async (roleId) => {
+				return wrappedFetch(client, `/access-control/roles/${roleId}/permissions`, { method: "GET" });
+			},
+			replaceRolePermissions: async (roleId, data) => {
+				return wrappedFetch(client, `/access-control/roles/${roleId}/permissions`, {
+					method: "PUT",
+					body: data
+				});
+			},
+			removeRolePermission: async (roleId, permissionId) => {
+				return wrappedFetch(client, `/access-control/roles/${roleId}/permissions/${permissionId}`, { method: "DELETE" });
+			},
+			getUserRoles: async (userId) => {
+				return wrappedFetch(client, `/access-control/users/${userId}/roles`, { method: "GET" });
+			},
+			assignUserRole: async (userId, data) => {
+				return wrappedFetch(client, `/access-control/users/${userId}/roles`, {
+					method: "POST",
+					body: data
+				});
+			},
+			replaceUserRoles: async (userId, data) => {
+				return wrappedFetch(client, `/access-control/users/${userId}/roles`, {
+					method: "PUT",
+					body: data
+				});
+			},
+			removeUserRole: async (userId, roleId) => {
+				return wrappedFetch(client, `/access-control/users/${userId}/roles/${roleId}`, { method: "DELETE" });
+			},
+			getUserPermissions: async (userId) => {
+				return wrappedFetch(client, `/access-control/users/${userId}/permissions`, { method: "GET" });
+			},
+			checkUserPermissions: async (userId, data) => {
+				return wrappedFetch(client, `/access-control/users/${userId}/permissions/check`, {
+					method: "POST",
+					body: data
+				});
+			}
+		};
+	}
+};
+
+//#endregion
+//#region src/plugins/access-control/types.ts
+const roleSchema = z.object({
+	id: z.string().nonempty(),
+	name: z.string().nonempty(),
+	description: z.string().nullish(),
+	weight: z.number(),
+	isSystem: z.boolean(),
+	createdAt: z.iso.datetime(),
+	updatedAt: z.iso.datetime()
+});
+const permissionSchema = z.object({
+	id: z.string().nonempty(),
+	key: z.string().nonempty(),
+	description: z.string().nullish(),
+	isSystem: z.boolean(),
+	createdAt: z.iso.datetime(),
+	updatedAt: z.iso.datetime()
+});
+const permissionGrantSourceSchema = z.object({
+	roleId: z.string().nonempty(),
+	roleName: z.string().nonempty(),
+	grantedByUserId: z.string().nullish(),
+	grantedAt: z.iso.datetime().nullish()
+});
+const userPermissionInfoSchema = z.object({
+	permissionId: z.string().nonempty(),
+	permissionKey: z.string().nonempty(),
+	permissionDescription: z.string().nullish(),
+	grantedByUserId: z.string().nullish(),
+	grantedAt: z.iso.datetime().nullish(),
+	sources: z.array(permissionGrantSourceSchema).optional()
+});
+const userRoleInfoSchema = z.object({
+	roleId: z.string().nonempty(),
+	roleName: z.string().nonempty(),
+	roleDescription: z.string().nullish(),
+	assignedByUserId: z.string().nullish(),
+	assignedAt: z.iso.datetime().nullish(),
+	expiresAt: z.iso.datetime().nullish()
+});
+const roleDetailsSchema = z.object({
+	role: roleSchema,
+	permissions: z.array(userPermissionInfoSchema)
+});
+const getUserPermissionsResponseSchema = z.object({ permissions: z.array(userPermissionInfoSchema) });
+const checkUserPermissionsResponseSchema = z.object({ hasPermissions: z.boolean() });
+
 //#endregion
 //#region src/plugins/bearer/plugin.ts
 var BearerPlugin = class {
@@ -407,5 +556,5 @@ var TOTPPlugin = class {
 };
 
 //#endregion
-export { AdminPlugin, BearerPlugin, CSRFPlugin, EmailPasswordPlugin, JWTPlugin, MagicLinkPlugin, OAuth2Plugin, TOTPPlugin, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, impersonationSchema };
+export { AccessControlPlugin, AdminPlugin, BearerPlugin, CSRFPlugin, EmailPasswordPlugin, JWTPlugin, MagicLinkPlugin, OAuth2Plugin, TOTPPlugin, adminSessionStateSchema, adminUserSessionSchema, adminUserStateSchema, checkUserPermissionsResponseSchema, getUserPermissionsResponseSchema, impersonationSchema, permissionGrantSourceSchema, permissionSchema, roleDetailsSchema, roleSchema, userPermissionInfoSchema, userRoleInfoSchema };
 //# sourceMappingURL=index.js.map