ddd-ts-kit 0.17.0 → 0.18.0

package/templates/query/handler.spec.buses.ts.tpl

@@ -1,6 +1,11 @@
 import { describe, expect, it } from '{{tests.module}}';
 {{#if access.protected}}
+{{#if access.policy}}
+import { AuthorizationMap, PolicyAccess, RoleBasedAuthorizer, authorizationMiddleware, requires } from '@ddd-ts-kit/auth';
+{{/if}}
+{{#unless access.policy}}
 import { AuthorizationMap, RoleBasedAuthorizer, authorizationMiddleware, requires } from '@ddd-ts-kit/auth';
+{{/unless}}
 import { anActor } from '@ddd-ts-kit/auth/testing';
 {{/if}}
 import { createTestBuses } from '@ddd-ts-kit/testing';
@@ -13,12 +18,22 @@ import type { {{name.pascal}}Result } from '{{alias.context}}/application/querie
 import { Fake{{name.pascal}}Reader } from '{{alias.context}}/test/fakes/{{name.kebab}}-reader.fake{{alias.ext}}';
 {{#if access.protected}}
 
+{{#if access.policy}}
+const authorizer = new RoleBasedAuthorizer({ roles: { holder: [{{context.camel}}Permissions['{{access.permission}}']] } });
+
+const holders = authorizationMiddleware({
+  authorizer,
+  map: AuthorizationMap.of(requires({{name.pascal}}Query, {{context.camel}}Permissions['{{access.permission}}'])),
+});
+{{/if}}
+{{#unless access.policy}}
 const holders = authorizationMiddleware({
   authorizer: new RoleBasedAuthorizer({
     roles: { holder: [{{context.camel}}Permissions['{{access.permission}}']] },
   }),
   map: AuthorizationMap.of(requires({{name.pascal}}Query, {{context.camel}}Permissions['{{access.permission}}'])),
 });
+{{/unless}}
 
 const holder = anActor().withRole('holder').build();
 {{/if}}
@@ -47,8 +62,14 @@ describe('{{name.title}}', () => {
 });
 
 function arrange(answer: {{name.pascal}}Result) {
+{{#if access.policy}}
+  const { queryBus, clock } = createTestBuses();
+  const handler = new {{name.pascal}}Handler(new Fake{{name.pascal}}Reader(answer), new PolicyAccess({ authorizer, clock }));
+{{/if}}
+{{#unless access.policy}}
   const { queryBus } = createTestBuses();
   const handler = new {{name.pascal}}Handler(new Fake{{name.pascal}}Reader(answer));
+{{/unless}}
 
   return queryBus{{spec.guard}}.register({{name.pascal}}Query, handler);
 }

package/templates/query/handler.ts.tpl

@@ -1,12 +1,31 @@
+{{#if access.policy}}
+import type { Access } from '@ddd-ts-kit/auth';
+{{/if}}
 import type { QueryHandler } from '@ddd-ts-kit/kernel';
+{{#if access.policy}}
+{{access.useCasePermissionsImport}}
+{{/if}}
 import type { {{name.pascal}}Reader } from '{{alias.context}}/application/ports/{{name.kebab}}-reader.port{{alias.ext}}';
 import type { {{name.pascal}}Query } from '{{alias.context}}/application/queries/{{name.kebab}}/{{name.kebab}}.query{{alias.ext}}';
 import type { {{name.pascal}}Result } from '{{alias.context}}/application/queries/{{name.kebab}}/{{name.kebab}}.result{{alias.ext}}';
 
 export class {{name.pascal}}Handler implements QueryHandler<{{name.pascal}}Query> {
+{{#if access.policy}}
+  constructor(
+    private readonly reader: {{name.pascal}}Reader,
+    private readonly access: Access,
+  ) {}
+{{/if}}
+{{#unless access.policy}}
   constructor(private readonly reader: {{name.pascal}}Reader) {}
+{{/unless}}
 
   async execute(query: {{name.pascal}}Query): Promise<{{name.pascal}}Result> {
+{{#if access.policy}}
+    // TODO(domain): a policy refines {{access.reference}}: ask it about the element "{{name.words}}" reads once it is read, in place of `query`.
+    await this.access.authorize(query.actor, {{access.reference}}, query);
+
+{{/if}}
     // TODO(domain): narrow what is read to what the asker may see: ask `Access.scope(query.actor, permission, '<type>')` for the scope and hand it to the reader, never filter in memory after loading; a query never changes state.
     return this.reader.read(query);
   }

package/templates/query/wiring.manual.tpl

@@ -7,6 +7,6 @@ import { InMemory{{name.pascal}}Reader } from '{{alias.context}}/infrastructure/
 @@registrations
 const {{name.camel}}Reader = platform.adapter(new InMemory{{name.pascal}}Reader(), { kind: 'repository', context: '{{context.kebab}}' });
 
-platform.queries.register({{name.pascal}}Query, new {{name.pascal}}Handler({{name.camel}}Reader), { context: '{{context.kebab}}' });
+platform.queries.register({{name.pascal}}Query, new {{name.pascal}}Handler({{name.camel}}Reader{{#if access.policy}}, platform.access{{/if}}), { context: '{{context.kebab}}' });
 @@authorization
 {{access.manualDeclaration}}

package/templates/query/wiring.tsyringe.tpl

@@ -1,4 +1,7 @@
 @@imports
+{{#if access.policy}}
+import { Access } from '@ddd-ts-kit/auth';
+{{/if}}
 {{access.permissionsImport}}
 import { {{name.pascal}}Reader } from '{{alias.context}}/application/ports/{{name.kebab}}-reader.port{{alias.ext}}';
 import { {{name.pascal}}Handler } from '{{alias.context}}/application/queries/{{name.kebab}}/{{name.kebab}}.handler{{alias.ext}}';
@@ -6,4 +9,4 @@ import { {{name.pascal}}Query } from '{{alias.context}}/application/queries/{{na
 import { InMemory{{name.pascal}}Reader } from '{{alias.context}}/infrastructure/persistence/{{reader.file}}{{alias.ext}}';
 @@registrations
 builder.bind({{name.pascal}}Reader).toClass(InMemory{{name.pascal}}Reader).as('repository');
-builder.query({{name.pascal}}Query){{access.declaration}}.handledBy({{name.pascal}}Handler, [{{name.pascal}}Reader]);
+builder.query({{name.pascal}}Query){{access.declaration}}.handledBy({{name.pascal}}Handler, [{{name.pascal}}Reader{{#if access.policy}}, Access{{/if}}]);