itrm-tools 1.3.55 → 1.3.56

package/dist/api/check/role/RoleServicePermissionsChecker.d.ts

@@ -0,0 +1,21 @@
+import { APICheck, APICheckConfig, APICheckResult } from "../APIChecker";
+import { Request } from "express";
+export interface RoleCheckConfig {
+    checkResultDuration: number;
+    cleaningDuration: number;
+}
+export declare class RoleServicePermissionsChecker implements APICheck {
+    private service;
+    private sessionServiceUrl;
+    private roleManager;
+    private config;
+    private lastCleaningTime;
+    private memory;
+    constructor(service: string, sessionServiceUrl: string, sessionServiceCrud: string, config?: RoleCheckConfig);
+    getConfig(): APICheckConfig;
+    apply(config: APICheckConfig, req: Request): Promise<APICheckResult>;
+    private cleanMemory;
+    private checkServicePermissions;
+    private isMethodAndPathAllowed;
+    private unexpectedErrorRejection;
+}

package/dist/api/check/role/RoleServicePermissionsChecker.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoleServicePermissionsChecker = void 0;
+const RoleManager_1 = require("../../request/crud/common/RoleManager");
+const RequestAxiosCall_1 = require("../../request/RequestAxiosCall");
+class RoleServicePermissionsChecker {
+    service;
+    sessionServiceUrl;
+    roleManager;
+    config;
+    lastCleaningTime = 0;
+    memory = {};
+    constructor(service, sessionServiceUrl, sessionServiceCrud, config) {
+        this.config = config ?? { checkResultDuration: 30 * 1000, cleaningDuration: 15 * 60 * 1000 };
+        this.roleManager = new RoleManager_1.RoleManager(`${sessionServiceCrud}/v1`);
+        this.sessionServiceUrl = sessionServiceUrl;
+        this.service = service;
+    }
+    getConfig() {
+        return {
+            check: "rolePermissionService",
+        };
+    }
+    async apply(config, req) {
+        try {
+            const { platform, authorization, application, service } = req.headers;
+            const headers = {
+                headers: {
+                    Authorization: authorization,
+                    Platform: platform,
+                    Application: application,
+                    Service: service
+                }
+            };
+            this.cleanMemory();
+            let key = `${authorization}:${platform}:${req.method}:${req.baseUrl + req.path.replace(/\/(\d+|[0-9a-fA-F-]{36})$/, "")}`;
+            if (!this.memory[key] || this.memory[key].expirationTime < Date.now()) {
+                const verification = await RequestAxiosCall_1.RequestAxiosCall.get(`${this.sessionServiceUrl}/v1/verify`, headers);
+                const role = await this.roleManager.find({ name: verification.payload.rolesByPlatform[platform], config: headers });
+                this.memory[key] = {
+                    checkResult: this.checkServicePermissions(role?.permissions?.services ?? {}, req, verification),
+                    expirationTime: Date.now() + this.config.checkResultDuration
+                };
+            }
+            return this.memory[key].checkResult;
+        }
+        catch (error) {
+            return this.unexpectedErrorRejection(error);
+        }
+    }
+    cleanMemory() {
+        let now = Date.now();
+        if (this.lastCleaningTime + this.config.cleaningDuration < now) {
+            this.lastCleaningTime = now;
+            for (let key of Object.keys(this.memory))
+                if (this.memory[key].expirationTime < now)
+                    delete this.memory[key];
+        }
+    }
+    checkServicePermissions(permissions, req, verification) {
+        if (permissions[this.service]) {
+            if (this.isMethodAndPathAllowed(permissions[this.service], req))
+                return { approved: true, payload: verification };
+            return { approved: false, rejection: { code: 401, payload: { status: "Error", message: `Method or Path are not allowed: ${req.method} ${req.baseUrl + req.path.replace(/\/\d+$/, "")}` } } };
+        }
+        return { approved: false, rejection: { code: 401, payload: { status: "Error", message: `Service is not allowed: ${this.service}` } } };
+    }
+    isMethodAndPathAllowed(permissions, req) {
+        return permissions[req.method] && permissions[req.method][req.baseUrl + req.path.replace(/\/\d+$/, "")];
+    }
+    unexpectedErrorRejection(error) {
+        return {
+            approved: false,
+            rejection: {
+                code: error?.response?.status ?? 500,
+                payload: { status: "Error", message: error?.response?.data ?? error, }
+            },
+        };
+    }
+}
+exports.RoleServicePermissionsChecker = RoleServicePermissionsChecker;
+//# sourceMappingURL=RoleServicePermissionsChecker.js.map

package/dist/api/check/role/RoleServicePermissionsChecker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleServicePermissionsChecker.js","sourceRoot":"","sources":["../../../../src/api/check/role/RoleServicePermissionsChecker.ts"],"names":[],"mappings":";;;AAEA,uEAAoE;AACpE,qEAAkE;AASlE,MAAa,6BAA6B;IAChC,OAAO,CAAS;IAChB,iBAAiB,CAAS;IAC1B,WAAW,CAAc;IACzB,MAAM,CAAkB;IAExB,gBAAgB,GAAW,CAAC,CAAC;IAC7B,MAAM,GAA+E,EAAE,CAAC;IAEhG,YAAY,OAAe,EAAE,iBAAyB,EAAE,kBAA0B,EAAE,MAAwB;QAC1G,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,mBAAmB,EAAE,EAAE,GAAG,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC7F,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAW,CAAC,GAAG,kBAAkB,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAEM,SAAS;QACd,OAAO;YACL,KAAK,EAAE,uBAAuB;SAC/B,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,GAAY;QACrD,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;YACtE,MAAM,OAAO,GAAG;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,aAAa;oBAC5B,QAAQ,EAAE,QAAQ;oBAClB,WAAW,EAAE,WAAW;oBACxB,OAAO,EAAE,OAAO;iBACjB;aACF,CAAC;YACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,GAAG,GAAG,GAAG,aAAa,IAAI,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1H,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACtE,MAAM,YAAY,GAAG,MAAM,mCAAgB,CAAC,GAAG,CAAgC,GAAG,IAAI,CAAC,iBAAiB,YAAY,EAAE,OAAO,CAAC,CAAC;gBAC/H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,QAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC9H,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;oBACjB,WAAW,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC;oBAC/F,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB;iBAC7D,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,GAAG,GAAG,EAAE,CAAC;YAC/D,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;YAC5B,KAAK,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,GAAG,GAAG;oBACvC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,uBAAuB,CAAC,WAAgB,EAAE,GAAY,EAAE,YAAiB;QAC/E,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;gBAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;YACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mCAAmC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;QAC/L,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;IACzI,CAAC;IAEO,sBAAsB,CAAC,WAAgB,EAAE,GAAY;QAC3D,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAEO,wBAAwB,CAAC,KAAU;QACzC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE;gBACT,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG;gBACpC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,KAAK,GAAG;aACvE;SACF,CAAC;IACJ,CAAC;CACF;AAjFD,sEAiFC"}

package/dist/api/utils/Response.d.ts

@@ -21,5 +21,6 @@ export declare enum HttpCode {
     NOT_FOUND = 404,
     CONFLICT = 409,
     INTERNAL_SERVER_ERROR = 500,
-    SERVICE_UNAVAILABLE = 503
+    SERVICE_UNAVAILABLE = 503,
+    GONE = 410
 }

package/dist/api/utils/Response.js

@@ -82,5 +82,6 @@ var HttpCode;
     HttpCode[HttpCode["CONFLICT"] = 409] = "CONFLICT";
     HttpCode[HttpCode["INTERNAL_SERVER_ERROR"] = 500] = "INTERNAL_SERVER_ERROR";
     HttpCode[HttpCode["SERVICE_UNAVAILABLE"] = 503] = "SERVICE_UNAVAILABLE";
+    HttpCode[HttpCode["GONE"] = 410] = "GONE";
 })(HttpCode || (exports.HttpCode = HttpCode = {}));
 //# sourceMappingURL=Response.js.map

package/dist/api/utils/Response.js.map

@@ -1 +1 @@
-{"version":3,"file":"Response.js","sourceRoot":"","sources":["../../../src/api/utils/Response.ts"],"names":[],"mappings":";;;AAoEA,4DAaC;AA/ED,MAAa,eAAgB,SAAQ,KAAK;IAEtB;IACA;IAEA;IAJlB,YACkB,UAAkB,EAClB,IAAY,EAC5B,OAAe,EACC,OAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAAM;QAG7B,+BAA+B;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAXD,0CAWC;AAED,MAAa,aAAa;IACxB,MAAM,CAAC,OAAO,CACZ,OAAU,EACV,OAAgB,EAChB,IAAmC;QAEnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,OAAO;YACP,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,GAAG,IAAI;aACR;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CACV,QAAyB,EACzB,IAAmC;QAEnC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B;YACD,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,GAAG,IAAI;aACR;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAS,CACd,OAAY,EACZ,UAA0B,EAC1B,OAAgB;QAEhB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,OAAO;YACP,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,UAAU;aACX;SACF,CAAC;IACJ,CAAC;CACF;AAnDD,sCAmDC;AAED,SAAgB,wBAAwB,CAAC,IAAY;IACnD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,QAAQ,CAAC,SAAS,CAAC;QAC5B,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC,YAAY,CAAC;QAC/B,KAAK,uBAAuB;YAC1B,OAAO,QAAQ,CAAC,qBAAqB,CAAC;QACxC,KAAK,WAAW;YACd,OAAO,QAAQ,CAAC,SAAS,CAAC;QAC5B;YACE,OAAO,QAAQ,CAAC,WAAW,CAAC;IAChC,CAAC;AACH,CAAC;AAED,IAAY,QAWX;AAXD,WAAY,QAAQ;IAClB,qCAAQ,CAAA;IACR,+CAAa,CAAA;IACb,qDAAgB,CAAA;IAChB,uDAAiB,CAAA;IACjB,yDAAkB,CAAA;IAClB,mDAAe,CAAA;IACf,mDAAe,CAAA;IACf,iDAAc,CAAA;IACd,2EAA2B,CAAA;IAC3B,uEAAyB,CAAA;AAC3B,CAAC,EAXW,QAAQ,wBAAR,QAAQ,QAWnB"}
+{"version":3,"file":"Response.js","sourceRoot":"","sources":["../../../src/api/utils/Response.ts"],"names":[],"mappings":";;;AAoEA,4DAaC;AA/ED,MAAa,eAAgB,SAAQ,KAAK;IAEtB;IACA;IAEA;IAJlB,YACkB,UAAkB,EAClB,IAAY,EAC5B,OAAe,EACC,OAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAAM;QAG7B,+BAA+B;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAXD,0CAWC;AAED,MAAa,aAAa;IACxB,MAAM,CAAC,OAAO,CACZ,OAAU,EACV,OAAgB,EAChB,IAAmC;QAEnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,OAAO;YACP,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,GAAG,IAAI;aACR;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CACV,QAAyB,EACzB,IAAmC;QAEnC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B;YACD,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,GAAG,IAAI;aACR;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAS,CACd,OAAY,EACZ,UAA0B,EAC1B,OAAgB;QAEhB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,OAAO;YACP,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,UAAU;aACX;SACF,CAAC;IACJ,CAAC;CACF;AAnDD,sCAmDC;AAED,SAAgB,wBAAwB,CAAC,IAAY;IACnD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,QAAQ,CAAC,SAAS,CAAC;QAC5B,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC,YAAY,CAAC;QAC/B,KAAK,uBAAuB;YAC1B,OAAO,QAAQ,CAAC,qBAAqB,CAAC;QACxC,KAAK,WAAW;YACd,OAAO,QAAQ,CAAC,SAAS,CAAC;QAC5B;YACE,OAAO,QAAQ,CAAC,WAAW,CAAC;IAChC,CAAC;AACH,CAAC;AAED,IAAY,QAYX;AAZD,WAAY,QAAQ;IAClB,qCAAQ,CAAA;IACR,+CAAa,CAAA;IACb,qDAAgB,CAAA;IAChB,uDAAiB,CAAA;IACjB,yDAAkB,CAAA;IAClB,mDAAe,CAAA;IACf,mDAAe,CAAA;IACf,iDAAc,CAAA;IACd,2EAA2B,CAAA;IAC3B,uEAAyB,CAAA;IACzB,yCAAU,CAAA;AACZ,CAAC,EAZW,QAAQ,wBAAR,QAAQ,QAYnB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "itrm-tools",
-  "version": "1.3.55",
+  "version": "1.3.56",
   "description": "",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",