json-rest-api 1.0.14 → 1.0.16

package/plugins/core/rest-api-access.js

@@ -4,7 +4,7 @@ export const AccessPlugin = {
   name: 'rest-api-access',
   dependencies: ['rest-api'],
 
-  async install({ addHook, helpers, log, pluginOptions = {}, scopes }) {
+  async install ({ addHook, helpers, log, pluginOptions = {}, scopes }) {
     const ownershipOptions = pluginOptions.ownership || pluginOptions.autoOwnership || {}
 
     const config = {
@@ -27,7 +27,6 @@ export const AccessPlugin = {
     const evaluateOwnership = ({ record, field, schemaInfo, userId }) => {
       if (!record) return 'unknown'
 
-      debugger
       const idProperty = schemaInfo?.idProperty || 'id'
       const schemaStructure = schemaInfo?.schemaStructure || {}
       const schemaRelationships = schemaInfo?.schemaRelationships || {}
@@ -105,7 +104,7 @@ export const AccessPlugin = {
       return storageAdapter.translateFilterValue(field, value)
     }
 
-    function registerBuiltinCheckers() {
+    function registerBuiltinCheckers () {
       state.authCheckers.set('public', () => true)
 
       state.authCheckers.set('authenticated', (context) => {
@@ -146,7 +145,6 @@ export const AccessPlugin = {
       const auth = context.scopeOptions?.auth
       if (!auth) return
 
-      debugger
       scope.vars.authRules = auth
       scope.vars.ownershipField = context.scopeOptions?.ownershipField
 
@@ -159,11 +157,11 @@ export const AccessPlugin = {
       })
     })
 
-    addHook('schema:enrich', 'rest-auth-auto-ownership-field', {}, ({ context, scopeOptions }) => {
+    addHook('schema:enrich', 'rest-auth-auto-ownership-field', {}, ({ context }) => {
       if (!config.ownership.enabled) return
-      const { fields, scopeName } = context
+      const { fields, scopeName, scopeOptions = {} } = context
       if (config.ownership.excludeResources.includes(scopeName)) return
-      if (scopeOptions?.ownership === false) return
+      if (scopeOptions.ownership === false) return
 
       const field = ownershipField()
       const relationshipName = fields[field]?.as || fields[field]?.belongsTo || field
@@ -188,7 +186,7 @@ export const AccessPlugin = {
       }
     })
 
-    function setOwnerOnInput({ context, scopeName, scopes, scopeOptions }) {
+    function setOwnerOnInput ({ context, scopeName, scopes, scopeOptions }) {
       if (!config.ownership.enabled) return
       if (config.ownership.excludeResources.includes(scopeName)) return
       if (!context.auth?.userId) {
@@ -285,7 +283,6 @@ export const AccessPlugin = {
 
     addHook('checkPermissions', 'rest-auth-enforce', { sequence: -100 }, async ({ context, scope, scopeName }) => {
       const operation = context.method
-      debugger
       const scopeVars = scope?.vars
       const authRules = scopeVars?.authRules
       const minimalRecord = context.originalContext?.minimalRecord
@@ -300,7 +297,6 @@ export const AccessPlugin = {
       const failures = []
 
       for (const rule of rules) {
-        // if (rule === 'owns') debugger
         try {
           const [checkerName, ...paramParts] = rule.split(':')
           const checker = state.authCheckers.get(checkerName)
@@ -384,7 +380,7 @@ export const AccessPlugin = {
       helpers.auth = {}
     }
 
-    helpers.auth.requireAuth = function requireAuth(context) {
+    helpers.auth.requireAuth = function requireAuth (context) {
       if (!context.auth?.userId) {
         const error = new Error('Authentication required')
         error.statusCode = 401
@@ -393,7 +389,7 @@ export const AccessPlugin = {
       return context.auth
     }
 
-    helpers.auth.requireOwnership = function requireOwnership(context, resourceOrUserId) {
+    helpers.auth.requireOwnership = function requireOwnership (context, resourceOrUserId) {
       const auth = helpers.auth.requireAuth(context)
       const field = ownershipField()
 
@@ -424,11 +420,11 @@ export const AccessPlugin = {
       return auth
     }
 
-    helpers.auth.registerChecker = function registerChecker(name, checkerFn) {
+    helpers.auth.registerChecker = function registerChecker (name, checkerFn) {
       state.authCheckers.set(name, checkerFn)
     }
 
-    helpers.auth.checkPermission = async function checkPermission(context, rules, options = {}) {
+    helpers.auth.checkPermission = async function checkPermission (context, rules, options = {}) {
       if (!rules || rules.length === 0) return true
 
       const { existingRecord, scopeVars } = options
@@ -447,7 +443,7 @@ export const AccessPlugin = {
       return false
     }
 
-    helpers.auth.cleanup = function cleanup() {
+    helpers.auth.cleanup = function cleanup () {
       state.authCheckers.clear()
     }
   }