fiscalia_bo-nest-helpers 1.6.16 → 1.6.17

package/dist/index.d.ts

@@ -7,6 +7,7 @@ export * as ExcelJS from './modules/excel-js';
 export * as MsAgetic from './modules/ms-agetic';
 export * as MsNotificaciones from './modules/ms-app-notificaciones';
 export * as MsCorrespondencia from './modules/ms-correspondencia';
+export * as Authorization from './modules/ms-authorization';
 export * as MsFiles from './modules/ms-files';
 export * as MsGeoJson from './modules/ms-geojson';
 export * as MsLogs from './modules/ms-logs';

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RequestRestrict = exports.MsWhatsApp = exports.MsTelegram = exports.MsShortLink = exports.SeguridadConvenio = exports.MsSeguridad = exports.RrhhLite = exports.MsRedis = exports.MsRabbit = exports.MsPersonas = exports.MsPdf = exports.MsMarcaAgua = exports.MsMailer = exports.MsLogs = exports.MsGeoJson = exports.MsFiles = exports.MsCorrespondencia = exports.MsNotificaciones = exports.MsAgetic = exports.ExcelJS = exports.RequestHelper = exports.Helpers = exports.Dtos = exports.Decorators = exports.CustomValidators = void 0;
+exports.RequestRestrict = exports.MsWhatsApp = exports.MsTelegram = exports.MsShortLink = exports.SeguridadConvenio = exports.MsSeguridad = exports.RrhhLite = exports.MsRedis = exports.MsRabbit = exports.MsPersonas = exports.MsPdf = exports.MsMarcaAgua = exports.MsMailer = exports.MsLogs = exports.MsGeoJson = exports.MsFiles = exports.Authorization = exports.MsCorrespondencia = exports.MsNotificaciones = exports.MsAgetic = exports.ExcelJS = exports.RequestHelper = exports.Helpers = exports.Dtos = exports.Decorators = exports.CustomValidators = void 0;
 exports.CustomValidators = require("./custom-validators");
 exports.Decorators = require("./decorators");
 exports.Dtos = require("./dto");
@@ -10,6 +10,7 @@ exports.ExcelJS = require("./modules/excel-js");
 exports.MsAgetic = require("./modules/ms-agetic");
 exports.MsNotificaciones = require("./modules/ms-app-notificaciones");
 exports.MsCorrespondencia = require("./modules/ms-correspondencia");
+exports.Authorization = require("./modules/ms-authorization");
 exports.MsFiles = require("./modules/ms-files");
 exports.MsGeoJson = require("./modules/ms-geojson");
 exports.MsLogs = require("./modules/ms-logs");

package/dist/modules/ms-authorization/authorization.decorator.d.ts

@@ -0,0 +1,36 @@
+interface ValidateTokenOptions {
+    permisos?: number[];
+    soloFuncionario?: boolean;
+    validateToken?: boolean;
+    requireAllPermissions?: boolean;
+}
+interface BearerAuthOptions {
+    apps: {
+        [appId: string]: {
+            permissions: number[];
+        };
+    };
+    validateToken?: boolean;
+    esFuncionario?: boolean;
+}
+interface ApplicationConfig {
+    [appId: string]: {
+        permissions: number[];
+    };
+}
+interface TokenValidationOptions {
+    permisos?: number[];
+    apps?: ApplicationConfig;
+    validateToken?: boolean;
+    soloFuncionario?: boolean;
+    requireAllPermissions?: boolean;
+}
+export declare const PERMISSIONS_KEY = "headers_permissions_key";
+export declare const RequiredPermissions: (...permissions: number[]) => import("@nestjs/common").CustomDecorator<string>;
+export declare const VALIDATE_TOKEN_METADATA = "validate_token_extra_values";
+export declare const validateAppToken: (options?: TokenValidationOptions) => import("@nestjs/common").CustomDecorator<string>;
+export declare const IS_PUBLIC_KEY = "isRoutePublic";
+export declare const PublicRoute: () => import("@nestjs/common").CustomDecorator<string>;
+export declare const UserLogged: (...dataOrPipes: unknown[]) => ParameterDecorator;
+export declare const BearerAuthToken: (options?: BearerAuthOptions | ValidateTokenOptions) => (target: any, propertyKey?: string, descriptor?: TypedPropertyDescriptor<any>) => void;
+export {};

package/dist/modules/ms-authorization/authorization.decorator.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BearerAuthToken = exports.UserLogged = exports.PublicRoute = exports.IS_PUBLIC_KEY = exports.validateAppToken = exports.VALIDATE_TOKEN_METADATA = exports.RequiredPermissions = exports.PERMISSIONS_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const auth_permission_guard_1 = require("./guards/auth-permission.guard");
+const auth_token_guard_1 = require("./guards/auth-token.guard");
+exports.PERMISSIONS_KEY = 'headers_permissions_key';
+const RequiredPermissions = (...permissions) => (0, common_1.SetMetadata)(exports.PERMISSIONS_KEY, permissions);
+exports.RequiredPermissions = RequiredPermissions;
+exports.VALIDATE_TOKEN_METADATA = 'validate_token_extra_values';
+const validateAppToken = (options) => {
+    const defaultOptions = {
+        validateToken: true,
+    };
+    return (0, common_1.SetMetadata)(exports.VALIDATE_TOKEN_METADATA, Object.assign(Object.assign({}, defaultOptions), options));
+};
+exports.validateAppToken = validateAppToken;
+const extractPermissions = (options) => {
+    if (options.permisos && options.permisos.length > 0) {
+        return options.permisos;
+    }
+    if (options.apps) {
+        return Object.values(options.apps)
+            .flatMap((app) => app.permissions)
+            .filter((value, index, self) => self.indexOf(value) === index);
+    }
+    return [];
+};
+exports.IS_PUBLIC_KEY = 'isRoutePublic';
+const PublicRoute = () => (0, common_1.SetMetadata)(exports.IS_PUBLIC_KEY, true);
+exports.PublicRoute = PublicRoute;
+exports.UserLogged = (0, common_1.createParamDecorator)((data, context) => {
+    const request = context.switchToHttp().getRequest();
+    return request.userHeader;
+});
+const BearerAuthToken = (options) => {
+    const defaultOptions = {
+        validateToken: true,
+        soloFuncionario: false,
+        requireAllPermissions: false,
+    };
+    const mergedOptions = Object.assign(Object.assign({}, defaultOptions), options);
+    return function (target, propertyKey, descriptor) {
+        const applyAuthDecorators = () => {
+            const decorators = [(0, swagger_1.ApiBearerAuth)(), (0, common_1.UseGuards)(auth_token_guard_1.JwtAuthGuard, auth_permission_guard_1.PermissionsGuard)];
+            const permissions = extractPermissions(mergedOptions);
+            console.log('permissions', permissions);
+            if (permissions.length > 0) {
+                decorators.push((0, exports.RequiredPermissions)(...permissions));
+            }
+            decorators.push((0, exports.validateAppToken)(mergedOptions));
+            return decorators;
+        };
+        if (propertyKey && descriptor) {
+            return (0, common_1.applyDecorators)(...applyAuthDecorators())(target, propertyKey, descriptor);
+        }
+        return (0, common_1.applyDecorators)(...applyAuthDecorators())(target);
+    };
+};
+exports.BearerAuthToken = BearerAuthToken;
+//# sourceMappingURL=authorization.decorator.js.map

package/dist/modules/ms-authorization/authorization.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.decorator.js","sourceRoot":"","sources":["../../../src/modules/ms-authorization/authorization.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAMwB;AACxB,6CAAgD;AAChD,0EAAkE;AAClE,gEAAyD;AAoC5C,QAAA,eAAe,GAAG,yBAAyB,CAAC;AAClD,MAAM,mBAAmB,GAAG,CAAC,GAAG,WAAqB,EAAE,EAAE,CAC9D,IAAA,oBAAW,EAAC,uBAAe,EAAE,WAAW,CAAC,CAAC;AAD/B,QAAA,mBAAmB,uBACY;AAE/B,QAAA,uBAAuB,GAAG,6BAA6B,CAAC;AAE9D,MAAM,gBAAgB,GAAG,CAAC,OAAgC,EAAE,EAAE;IACnE,MAAM,cAAc,GAA2B;QAC7C,aAAa,EAAE,IAAI;KACpB,CAAC;IAEF,OAAO,IAAA,oBAAW,EAAC,+BAAuB,kCAAO,cAAc,GAAK,OAAO,EAAG,CAAC;AACjF,CAAC,CAAC;AANW,QAAA,gBAAgB,oBAM3B;AAGF,MAAM,kBAAkB,GAAG,CAAC,OAA+B,EAAY,EAAE;IAEvE,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,QAAQ,CAAC;IAC1B,CAAC;IAGD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;aAC/B,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC;aACjC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAMW,QAAA,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,qBAAa,EAAE,IAAI,CAAC,CAAC;AAArD,QAAA,WAAW,eAA0C;AAErD,QAAA,UAAU,GAAG,IAAA,6BAAoB,EAAC,CAAC,IAAa,EAAE,OAAyB,EAAE,EAAE;IAC1F,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IACpD,OAAO,OAAO,CAAC,UAAU,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEI,MAAM,eAAe,GAAG,CAAC,OAAkD,EAAE,EAAE;IACpF,MAAM,cAAc,GAA2B;QAC7C,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,KAAK;QACtB,qBAAqB,EAAE,KAAK;KAC7B,CAAC;IAEF,MAAM,aAAa,mCAAQ,cAAc,GAAK,OAAO,CAAE,CAAC;IAGxD,OAAO,UAAU,MAAW,EAAE,WAAoB,EAAE,UAAyC;QAE3F,MAAM,mBAAmB,GAAG,GAAG,EAAE;YAE/B,MAAM,UAAU,GAAG,CAAC,IAAA,uBAAa,GAAE,EAAE,IAAA,kBAAS,EAAC,+BAAY,EAAE,wCAAgB,CAAC,CAAC,CAAC;YAGhF,MAAM,WAAW,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YAGxC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,IAAA,2BAAmB,EAAC,GAAG,WAAW,CAAC,CAAC,CAAC;YACvD,CAAC;YAGD,UAAU,CAAC,IAAI,CAAC,IAAA,wBAAgB,EAAC,aAAa,CAAC,CAAC,CAAC;YAEjD,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC;QAGF,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;YAC9B,OAAO,IAAA,wBAAe,EAAC,GAAG,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QACpF,CAAC;QAGD,OAAO,IAAA,wBAAe,EAAC,GAAG,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC,CAAC;AACJ,CAAC,CAAC;AAvCW,QAAA,eAAe,mBAuC1B"}

package/dist/modules/ms-authorization/authorization.module.d.ts

@@ -0,0 +1,12 @@
+import { DynamicModule } from '@nestjs/common';
+interface AuthModuleOptions {
+    urlAuth: string;
+    appTag?: string;
+    maxBodyLength?: number;
+    timeout?: number;
+    maxContentLength?: number;
+}
+export declare class AuthorizationModule {
+    static register(options?: AuthModuleOptions): DynamicModule;
+}
+export {};

package/dist/modules/ms-authorization/authorization.module.js

@@ -0,0 +1,50 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var AuthorizationModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationModule = void 0;
+const axios_1 = require("@nestjs/axios");
+const common_1 = require("@nestjs/common");
+const chalk_1 = require("chalk");
+const authorization_service_1 = require("./authorization.service");
+let AuthorizationModule = AuthorizationModule_1 = class AuthorizationModule {
+    static register(options) {
+        var _a, _b;
+        const url = options === null || options === void 0 ? void 0 : options.urlAuth;
+        if (!url) {
+            console.warn(chalk_1.bold.red(`ENV_SERVICE_AUTHORIZATION_URL no definido en variables de entorno`));
+            return { module: AuthorizationModule_1 };
+        }
+        return {
+            global: true,
+            module: AuthorizationModule_1,
+            imports: [
+                axios_1.HttpModule.register({
+                    baseURL: url,
+                    timeout: options.timeout || 5000,
+                    maxRedirects: 5,
+                    maxBodyLength: options.maxBodyLength,
+                    maxContentLength: options.maxContentLength,
+                }),
+            ],
+            providers: [
+                authorization_service_1.AuthorizationService,
+                { provide: 'MP_AUTHORIZATION_APP_TAG', useValue: (_a = options === null || options === void 0 ? void 0 : options.appTag) !== null && _a !== void 0 ? _a : null },
+            ],
+            exports: [
+                authorization_service_1.AuthorizationService,
+                { provide: 'MP_AUTHORIZATION_APP_TAG', useValue: (_b = options === null || options === void 0 ? void 0 : options.appTag) !== null && _b !== void 0 ? _b : null },
+            ],
+        };
+    }
+};
+exports.AuthorizationModule = AuthorizationModule;
+exports.AuthorizationModule = AuthorizationModule = AuthorizationModule_1 = __decorate([
+    (0, common_1.Module)({})
+], AuthorizationModule);
+//# sourceMappingURL=authorization.module.js.map

package/dist/modules/ms-authorization/authorization.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.module.js","sourceRoot":"","sources":["../../../src/modules/ms-authorization/authorization.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,yCAA2C;AAC3C,2CAAuD;AACvD,iCAA6B;AAC7B,mEAA+D;AAWxD,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAI9B,MAAM,CAAC,QAAQ,CAAC,OAA2B;;QACzC,MAAM,GAAG,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,YAAI,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC,CAAC;YAC5F,OAAO,EAAE,MAAM,EAAE,qBAAmB,EAAE,CAAC;QACzC,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,qBAAmB;YAC3B,OAAO,EAAE;gBACP,kBAAU,CAAC,QAAQ,CAAC;oBAClB,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;oBAChC,YAAY,EAAE,CAAC;oBACf,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;iBAC3C,CAAC;aACH;YACD,SAAS,EAAE;gBACT,4CAAoB;gBACpB,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,mCAAI,IAAI,EAAE;aAC3E;YACD,OAAO,EAAE;gBACP,4CAAoB;gBACpB,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,mCAAI,IAAI,EAAE;aAC3E;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAjCY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,mBAAmB,CAiC/B"}

package/dist/modules/ms-authorization/authorization.service.d.ts

@@ -0,0 +1,14 @@
+import { HttpService } from '@nestjs/axios';
+import { ResponseDTO } from '../../dto';
+import { UserLoggedInfo } from './authorization.types';
+export declare class AuthorizationService {
+    private readonly httpService;
+    private readonly requestHttpService;
+    private readonly applicationTag;
+    constructor(httpService: HttpService, appTag: string);
+    validateToken(inputDto: {
+        token: string;
+        application?: string;
+    }): Promise<ResponseDTO<UserLoggedInfo>>;
+    userListPermissions(token: string): Promise<any>;
+}

package/dist/modules/ms-authorization/authorization.service.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationService = void 0;
+const axios_1 = require("@nestjs/axios");
+const common_1 = require("@nestjs/common");
+const request_helper_1 = require("../../http-service/request.helper");
+const rxjs_1 = require("rxjs");
+const dto_1 = require("../../dto");
+let AuthorizationService = class AuthorizationService {
+    constructor(httpService, appTag) {
+        this.httpService = httpService;
+        this.requestHttpService = (0, request_helper_1.newHttpServiceRequest)(httpService);
+        this.applicationTag = appTag;
+    }
+    async validateToken(inputDto) {
+        var _a;
+        if (!inputDto.token) {
+            return (0, dto_1.dataResponseError)('Debe enviar el token en el header de la solicitud', {
+                status: 401,
+            });
+        }
+        inputDto.application = (_a = inputDto === null || inputDto === void 0 ? void 0 : inputDto.application) !== null && _a !== void 0 ? _a : this.applicationTag;
+        const result = await (0, rxjs_1.firstValueFrom)(this.httpService.post('auth/validate/token', inputDto, {
+            headers: { Authorization: `Bearer ${inputDto.token}` },
+        }));
+        return result.data;
+    }
+    async userListPermissions(token) {
+        console.log('execute, userListPermissions');
+        const result = await this.requestHttpService({ url: 'v1/user/permissions', method: 'get' }, { Authorization: `Bearer ${token}` });
+        return result;
+    }
+};
+exports.AuthorizationService = AuthorizationService;
+exports.AuthorizationService = AuthorizationService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)('MP_AUTHORIZATION_APP_TAG')),
+    __metadata("design:paramtypes", [axios_1.HttpService, String])
+], AuthorizationService);
+//# sourceMappingURL=authorization.service.js.map

package/dist/modules/ms-authorization/authorization.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.service.js","sourceRoot":"","sources":["../../../src/modules/ms-authorization/authorization.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,yCAA4C;AAC5C,2CAAoD;AACpD,sEAAyE;AACzE,+BAAsC;AACtC,mCAA0D;AAInD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAI/B,YACmB,WAAwB,EACL,MAAc;QADjC,gBAAW,GAAX,WAAW,CAAa;QAGzC,IAAI,CAAC,kBAAkB,GAAG,IAAA,sCAAqB,EAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAGnB;;QACC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,OAAO,IAAA,uBAAiB,EAAC,mDAAmD,EAAE;gBAC5E,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,QAAQ,CAAC,WAAW,GAAG,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,WAAW,mCAAI,IAAI,CAAC,cAAc,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAc,EACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,qBAAqB,EAAE,QAAQ,EAAE;YACrD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,CAAC,KAAK,EAAE,EAAE;SACvD,CAAC,CACH,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAa;QACrC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC1C,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,EAC7C,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CACrC,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAzCY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAOR,WAAA,IAAA,eAAM,EAAC,0BAA0B,CAAC,CAAA;qCADL,mBAAW;GALhC,oBAAoB,CAyChC"}

package/dist/modules/ms-authorization/authorization.types.d.ts

@@ -0,0 +1,36 @@
+export type JwtSubPayload = {
+    usuarioAplicacionId: number;
+    usuarioId: number;
+    aplicacionId: number;
+    appTime: number;
+    appTimeRefresh: number;
+    aplicacionTag: string;
+    deviceId: string;
+};
+export type QueryResultAuthUsuario = {
+    id: number;
+    nombreCompleto: string;
+    funcionario: {
+        id: number;
+    };
+    perfilPersona: {
+        id: number;
+        ci: string;
+        nombre: string;
+        paterno?: string;
+        materno?: string;
+        msFileFoto: string;
+        msPersonaId: number;
+        telegramValidado: number;
+        whatsAppValidado: number;
+        emailValidado: number;
+    };
+};
+export type UserLoggedInfo = {
+    user: JwtSubPayload & QueryResultAuthUsuario;
+    isTempToken?: boolean;
+    token: string;
+    authorization: string;
+    expireIn: number;
+    type: string;
+};

package/dist/modules/ms-authorization/authorization.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=authorization.types.js.map

package/dist/modules/ms-authorization/authorization.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.types.js","sourceRoot":"","sources":["../../../src/modules/ms-authorization/authorization.types.ts"],"names":[],"mappings":""}

package/dist/modules/ms-authorization/guards/auth-permission.guard.d.ts

@@ -0,0 +1,12 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { AuthorizationService } from '../authorization.service';
+export declare const PERMISSIONS_KEY = "headers_permissions_key";
+export declare class PermissionsGuard implements CanActivate {
+    private readonly authService;
+    private readonly reflector;
+    constructor(authService: AuthorizationService, reflector: Reflector);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    private getRequiredPermissions;
+    private hasPermission;
+}

package/dist/modules/ms-authorization/guards/auth-permission.guard.js

@@ -0,0 +1,61 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionsGuard = exports.PERMISSIONS_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const authorization_service_1 = require("../authorization.service");
+const helpers_1 = require("../../../helpers");
+exports.PERMISSIONS_KEY = 'headers_permissions_key';
+let PermissionsGuard = class PermissionsGuard {
+    constructor(authService, reflector) {
+        this.authService = authService;
+        this.reflector = reflector;
+    }
+    async canActivate(context) {
+        var _a;
+        const request = context.switchToHttp().getRequest();
+        const requiredPermissions = this.getRequiredPermissions(context);
+        if (requiredPermissions.length === 0)
+            return true;
+        const userPermissions = await this.authService.userListPermissions(request.userHeader);
+        request.permissions = userPermissions;
+        if (!requiredPermissions || requiredPermissions.length === 0) {
+            return true;
+        }
+        const result = this.hasPermission(userPermissions, requiredPermissions);
+        if (!result) {
+            const { method, url, query } = request;
+            const response = process.env.ENV_DEBUG_SERVER === 'true' || process.env.ENV_DEBUG_FRONT === 'true'
+                ? { ci: (_a = request === null || request === void 0 ? void 0 : request.userHeader) === null || _a === void 0 ? void 0 : _a.ci, method, url, query }
+                : null;
+            throw new helpers_1.MsSeguridadHttpError('No tiene los permisos necesarios', 403, response, true);
+        }
+        return true;
+    }
+    getRequiredPermissions(context) {
+        const methodPermissions = this.reflector.get(exports.PERMISSIONS_KEY, context.getHandler());
+        if (!methodPermissions || methodPermissions.length === 0) {
+            return this.reflector.get(exports.PERMISSIONS_KEY, context.getClass()) || [];
+        }
+        return methodPermissions;
+    }
+    hasPermission(userPermissions, requiredPermissions) {
+        return requiredPermissions.some((permission) => userPermissions.includes(permission));
+    }
+};
+exports.PermissionsGuard = PermissionsGuard;
+exports.PermissionsGuard = PermissionsGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [authorization_service_1.AuthorizationService,
+        core_1.Reflector])
+], PermissionsGuard);
+//# sourceMappingURL=auth-permission.guard.js.map

package/dist/modules/ms-authorization/guards/auth-permission.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-permission.guard.js","sourceRoot":"","sources":["../../../../src/modules/ms-authorization/guards/auth-permission.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2E;AAC3E,uCAAyC;AACzC,oEAAgE;AAChE,8CAAoD;AAEvC,QAAA,eAAe,GAAG,yBAAyB,CAAC;AAGlD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,YACmB,WAAiC,EACjC,SAAoB;QADpB,gBAAW,GAAX,WAAW,CAAsB;QACjC,cAAS,GAAT,SAAS,CAAW;IACpC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,mBAAmB,GAAa,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAElD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAKvF,OAAO,CAAC,WAAW,GAAG,eAAe,CAAC;QAEtC,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QAGxE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;YAEvC,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM;gBAC/E,CAAC,CAAC,EAAE,EAAE,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,0CAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE;gBACrD,CAAC,CAAC,IAAI,CAAC;YAEX,MAAM,IAAI,8BAAoB,CAAC,kCAAkC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAGO,sBAAsB,CAAC,OAAyB;QAEtD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAW,uBAAe,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAG9F,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAW,uBAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACjF,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAGO,aAAa,CAAC,eAAyB,EAAE,mBAA6B;QAC5E,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACxF,CAAC;CACF,CAAA;AAxDY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAGqB,4CAAoB;QACtB,gBAAS;GAH5B,gBAAgB,CAwD5B"}

package/dist/modules/ms-authorization/guards/auth-token.guard.d.ts

@@ -0,0 +1,10 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { AuthorizationService } from '../authorization.service';
+export declare class JwtAuthGuard implements CanActivate {
+    private readonly reflector;
+    private readonly authService;
+    constructor(reflector: Reflector, authService: AuthorizationService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    private getDecoratorParams;
+}

package/dist/modules/ms-authorization/guards/auth-token.guard.js

@@ -0,0 +1,75 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtAuthGuard = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const authorization_service_1 = require("../authorization.service");
+const helpers_1 = require("../../../helpers");
+const authorization_decorator_1 = require("../authorization.decorator");
+let JwtAuthGuard = class JwtAuthGuard {
+    constructor(reflector, authService) {
+        this.reflector = reflector;
+        this.authService = authService;
+    }
+    async canActivate(context) {
+        var _a, _b;
+        const isPublic = this.reflector.getAllAndOverride(authorization_decorator_1.IS_PUBLIC_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (isPublic)
+            return true;
+        const request = context.switchToHttp().getRequest();
+        const authorization = request.headers.authorization;
+        if (!authorization) {
+            throw new helpers_1.ApiUnauthorizedError('Solicitud realizada sin token');
+        }
+        const [bearer, token] = authorization.split(' ');
+        if (bearer.toLowerCase() !== 'bearer' || !token) {
+            throw new helpers_1.ApiUnauthorizedError('debe enviar el token con el header `Authorization: bearer {{token}}`.');
+        }
+        const validateTokenResult = await this.authService.validateToken({ token });
+        if (validateTokenResult.error) {
+            throw new helpers_1.ApiUnauthorizedError(validateTokenResult.message, validateTokenResult.response);
+        }
+        const tokenDecoded = validateTokenResult.response.data;
+        if (!tokenDecoded)
+            throw new helpers_1.ApiUnauthorizedError('Usuario no autenticado y/o token no válido');
+        if (tokenDecoded.expireIn < Date.now() / 1000) {
+            throw new helpers_1.ApiUnauthorizedError('Token ha expirado');
+        }
+        const isChangePasswordRoute = context.getHandler().name === 'changePassword';
+        if ((tokenDecoded === null || tokenDecoded === void 0 ? void 0 : tokenDecoded.isTempToken) && !isChangePasswordRoute) {
+            throw new helpers_1.ApiUnauthorizedError('Acceso restringido: Cambie su contraseña primero');
+        }
+        const decoratorParams = this.getDecoratorParams(context);
+        if ((decoratorParams === null || decoratorParams === void 0 ? void 0 : decoratorParams.soloFuncionario) && !((_b = (_a = tokenDecoded.user) === null || _a === void 0 ? void 0 : _a.funcionario) === null || _b === void 0 ? void 0 : _b.id)) {
+            throw new helpers_1.ApiUnauthorizedError('Acceso restringido: usted no es un funcionario');
+        }
+        request.userHeader = tokenDecoded;
+        return true;
+    }
+    getDecoratorParams(context) {
+        const methodParams = this.reflector.get(authorization_decorator_1.VALIDATE_TOKEN_METADATA, context.getHandler());
+        if (!methodParams) {
+            return this.reflector.get(authorization_decorator_1.VALIDATE_TOKEN_METADATA, context.getClass());
+        }
+        return methodParams;
+    }
+};
+exports.JwtAuthGuard = JwtAuthGuard;
+exports.JwtAuthGuard = JwtAuthGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        authorization_service_1.AuthorizationService])
+], JwtAuthGuard);
+//# sourceMappingURL=auth-token.guard.js.map

package/dist/modules/ms-authorization/guards/auth-token.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-token.guard.js","sourceRoot":"","sources":["../../../../src/modules/ms-authorization/guards/auth-token.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2E;AAC3E,uCAAyC;AACzC,oEAAgE;AAChE,8CAAoD;AACpD,wEAAoF;AAG7E,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,YACmB,SAAoB,EACpB,WAAiC;QADjC,cAAS,GAAT,SAAS,CAAW;QACpB,gBAAW,GAAX,WAAW,CAAsB;IACjD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,uCAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,8BAAoB,CAAC,+BAA+B,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAChD,MAAM,IAAI,8BAAoB,CAC5B,uEAAuE,CACxE,CAAC;QACJ,CAAC;QAGD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,IAAI,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,8BAAoB,CAAC,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEvD,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,8BAAoB,CAAC,4CAA4C,CAAC,CAAC;QAGhG,IAAI,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,8BAAoB,CAAC,mBAAmB,CAAC,CAAC;QACtD,CAAC;QAGD,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC;QAC7E,IAAI,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,WAAW,KAAI,CAAC,qBAAqB,EAAE,CAAC;YACxD,MAAM,IAAI,8BAAoB,CAAC,kDAAkD,CAAC,CAAC;QACrF,CAAC;QAGD,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAGzD,IAAI,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,eAAe,KAAI,CAAC,CAAA,MAAA,MAAA,YAAY,CAAC,IAAI,0CAAE,WAAW,0CAAE,EAAE,CAAA,EAAE,CAAC;YAC5E,MAAM,IAAI,8BAAoB,CAAC,gDAAgD,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,CAAC,UAAU,GAAG,YAAY,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAGO,kBAAkB,CAAC,OAAyB;QAElD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,iDAAuB,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAGvF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,iDAAuB,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;CACF,CAAA;AAxEY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAGmB,gBAAS;QACP,4CAAoB;GAHzC,YAAY,CAwExB"}

package/dist/modules/ms-authorization/index.d.ts

@@ -0,0 +1,4 @@
+export { AuthorizationService } from './authorization.service';
+export { AuthorizationModule } from './authorization.module';
+export { BearerAuthToken, UserLogged, PublicRoute } from './authorization.decorator';
+export * from './authorization.types';

package/dist/modules/ms-authorization/index.js

@@ -0,0 +1,27 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PublicRoute = exports.UserLogged = exports.BearerAuthToken = exports.AuthorizationModule = exports.AuthorizationService = void 0;
+var authorization_service_1 = require("./authorization.service");
+Object.defineProperty(exports, "AuthorizationService", { enumerable: true, get: function () { return authorization_service_1.AuthorizationService; } });
+var authorization_module_1 = require("./authorization.module");
+Object.defineProperty(exports, "AuthorizationModule", { enumerable: true, get: function () { return authorization_module_1.AuthorizationModule; } });
+var authorization_decorator_1 = require("./authorization.decorator");
+Object.defineProperty(exports, "BearerAuthToken", { enumerable: true, get: function () { return authorization_decorator_1.BearerAuthToken; } });
+Object.defineProperty(exports, "UserLogged", { enumerable: true, get: function () { return authorization_decorator_1.UserLogged; } });
+Object.defineProperty(exports, "PublicRoute", { enumerable: true, get: function () { return authorization_decorator_1.PublicRoute; } });
+__exportStar(require("./authorization.types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/modules/ms-authorization/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/ms-authorization/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,iEAA+D;AAAtD,6HAAA,oBAAoB,OAAA;AAC7B,+DAA6D;AAApD,2HAAA,mBAAmB,OAAA;AAC5B,qEAAqF;AAA5E,0HAAA,eAAe,OAAA;AAAE,qHAAA,UAAU,OAAA;AAAE,sHAAA,WAAW,OAAA;AACjD,wDAAsC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fiscalia_bo-nest-helpers",
-  "version": "1.6.16",
+  "version": "1.6.17",
   "description": "Helpers y servicios para NestJS",
   "author": "DNTIC - Ministerio Público",
   "contact": {
@@ -20,6 +20,7 @@
     "dist/modules/ms-agetic/*",
     "dist/modules/ms-app-notificaciones/*",
     "dist/modules/ms-correspondencia/*",
+    "dist/modules/ms-authorization/*",
     "dist/modules/ms-files/*",
     "dist/modules/ms-geojson/*",
     "dist/modules/ms-logs/*",