cetus-tools 1.0.9 → 1.0.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import { APICheck, APICheckConfig, APICheckResult } from "itrm-tools";
|
|
2
|
+
import { Request } from "express";
|
|
3
|
+
export declare class RoleServicePermissionsChecker implements APICheck {
|
|
4
|
+
private service;
|
|
5
|
+
private sessionServiceUrl;
|
|
6
|
+
private roleManager;
|
|
7
|
+
constructor(service: string, sessionServiceUrl: string, sessionServiceCrud: string);
|
|
8
|
+
getConfig(): APICheckConfig;
|
|
9
|
+
apply(config: APICheckConfig, req: Request): Promise<APICheckResult>;
|
|
10
|
+
private checkServicePermissions;
|
|
11
|
+
private isMethodAndPathAllowed;
|
|
12
|
+
private unexpectedErrorRejection;
|
|
13
|
+
}
|
|
@@ -0,0 +1,63 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.RoleServicePermissionsChecker = void 0;
|
|
13
|
+
const itrm_tools_1 = require("itrm-tools");
|
|
14
|
+
const RoleManager_1 = require("../../crud/RoleManager");
|
|
15
|
+
class RoleServicePermissionsChecker {
|
|
16
|
+
constructor(service, sessionServiceUrl, sessionServiceCrud) {
|
|
17
|
+
this.service = service;
|
|
18
|
+
this.sessionServiceUrl = sessionServiceUrl;
|
|
19
|
+
this.roleManager = new RoleManager_1.RoleManager(`${sessionServiceCrud}/v1`);
|
|
20
|
+
}
|
|
21
|
+
getConfig() {
|
|
22
|
+
return {
|
|
23
|
+
check: "rolePermissionService",
|
|
24
|
+
};
|
|
25
|
+
}
|
|
26
|
+
apply(config, req) {
|
|
27
|
+
return __awaiter(this, void 0, void 0, function* () {
|
|
28
|
+
var _a, _b;
|
|
29
|
+
try {
|
|
30
|
+
let headers = { headers: { "Authorization": req.headers.authorization } };
|
|
31
|
+
let verification = yield itrm_tools_1.RequestAxiosCall.post(`${this.sessionServiceUrl}/v1/verify`, { jwt: ((_a = req.headers.authorization) !== null && _a !== void 0 ? _a : 'NoToken').replace("Bearer ", "") }, headers);
|
|
32
|
+
let role = yield this.roleManager.find({ name: verification.role, permissions: {}, config: headers });
|
|
33
|
+
return this.checkServicePermissions((_b = role === null || role === void 0 ? void 0 : role.permissions.services) !== null && _b !== void 0 ? _b : {}, req, verification);
|
|
34
|
+
}
|
|
35
|
+
catch (error) {
|
|
36
|
+
return this.unexpectedErrorRejection(error);
|
|
37
|
+
}
|
|
38
|
+
});
|
|
39
|
+
}
|
|
40
|
+
checkServicePermissions(permissions, req, verification) {
|
|
41
|
+
if (permissions[this.service]) {
|
|
42
|
+
if (this.isMethodAndPathAllowed(permissions[this.service], req))
|
|
43
|
+
return { approved: true, payload: verification };
|
|
44
|
+
return { approved: false, rejection: { code: 401, payload: { status: "Error", message: `Method or Path are not allowed: ${req.method} ${req.baseUrl + req.path.replace(/\/\d+$/, "")}` } } };
|
|
45
|
+
}
|
|
46
|
+
return { approved: false, rejection: { code: 401, payload: { status: "Error", message: "Service is not allowed" } } };
|
|
47
|
+
}
|
|
48
|
+
isMethodAndPathAllowed(permissions, req) {
|
|
49
|
+
return permissions[req.method] && permissions[req.method][req.baseUrl + req.path.replace(/\/\d+$/, "")];
|
|
50
|
+
}
|
|
51
|
+
unexpectedErrorRejection(error) {
|
|
52
|
+
var _a, _b, _c, _d;
|
|
53
|
+
return {
|
|
54
|
+
approved: false,
|
|
55
|
+
rejection: {
|
|
56
|
+
code: (_b = (_a = error === null || error === void 0 ? void 0 : error.response) === null || _a === void 0 ? void 0 : _a.status) !== null && _b !== void 0 ? _b : 500,
|
|
57
|
+
payload: { status: "Error", message: (_d = (_c = error === null || error === void 0 ? void 0 : error.response) === null || _c === void 0 ? void 0 : _c.data) !== null && _d !== void 0 ? _d : error, }
|
|
58
|
+
},
|
|
59
|
+
};
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
exports.RoleServicePermissionsChecker = RoleServicePermissionsChecker;
|
|
63
|
+
//# sourceMappingURL=RoleServicePermissionsChecker.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"RoleServicePermissionsChecker.js","sourceRoot":"","sources":["../../../src/api/checkers/RoleServicePermissionsChecker.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAwF;AACxF,wDAAqD;AAGrD,MAAa,6BAA6B;IAKxC,YAAY,OAAe,EAAE,iBAAyB,EAAE,kBAA0B;QAChF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAW,CAAC,GAAG,kBAAkB,KAAK,CAAC,CAAC;IACjE,CAAC;IAEM,SAAS;QACd,OAAO;YACL,KAAK,EAAE,uBAAuB;SAC/B,CAAC;IACJ,CAAC;IAEY,KAAK,CAAC,MAAsB,EAAE,GAAY;;;YACrD,IAAI,CAAC;gBACH,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAA;gBACzE,IAAI,YAAY,GAAQ,MAAM,6BAAgB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,MAAA,GAAG,CAAC,OAAO,CAAC,aAAa,mCAAI,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC9K,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACtG,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW,CAAC,QAAQ,mCAAI,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YAC3F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAEO,uBAAuB,CAAC,WAAgB,EAAE,GAAY,EAAE,YAAiB;QAC/E,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;gBAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;YACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mCAAmC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;QAC/L,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,EAAE,CAAC;IACxH,CAAC;IAEO,sBAAsB,CAAC,WAAgB,EAAE,GAAY;QAC3D,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAEO,wBAAwB,CAAC,KAAU;;QACzC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE;gBACT,IAAI,EAAE,MAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,0CAAE,MAAM,mCAAI,GAAG;gBACpC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,0CAAE,IAAI,mCAAI,KAAK,GAAG;aACvE;SACF,CAAC;IACJ,CAAC;CACF;AAlDD,sEAkDC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "cetus-tools",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.11",
|
|
4
4
|
"description": "Librería para elementos comunes de CETUS",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -35,7 +35,7 @@
|
|
|
35
35
|
"@types/morgan": "^1.9.7",
|
|
36
36
|
"@types/node": "^20.8.7",
|
|
37
37
|
"jest": "^29.7.0",
|
|
38
|
-
"rimraf": "^
|
|
38
|
+
"rimraf": "^6.0.1",
|
|
39
39
|
"ts-jest": "^29.1.1",
|
|
40
40
|
"typescript": "^5.2.2"
|
|
41
41
|
},
|
|
@@ -43,7 +43,7 @@
|
|
|
43
43
|
"axios": "^1.5.1",
|
|
44
44
|
"crypto-js": "^4.2.0",
|
|
45
45
|
"dotenv": "^16.3.1",
|
|
46
|
-
"itrm-tools": "^1.
|
|
46
|
+
"itrm-tools": "^1.1.8",
|
|
47
47
|
"morgan": "^1.10.0"
|
|
48
48
|
},
|
|
49
49
|
"optionalDependencies": {
|