miolo 0.0.20 → 0.0.23

package/lib/config/defaults.js

@@ -86,13 +86,17 @@ module.exports = {
     //      }
     //    ],  
     //  },
-    //  queries: [
-    //    {
-    //      path: '/crud/fo/bar',
-    //      method: 'GET',
-    //      callback: method_receiving_params_ctx_conn
-    //    }
-    //  ]
+    //  queries: {
+    //    options: {...},
+    //    routes: [    
+    //      {
+    //        path: '/crud/fo/bar',
+    //        auth: {...},
+    //        method: 'GET',
+    //        callback: method_receiving_params_ctx_conn
+    //      }
+    //    ]
+    //  }
   },
   cacher: {
     redis: {

package/lib/server/routes/queries.js

@@ -9,16 +9,54 @@ var _router = _interopRequireDefault(require("@koa/router"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
+function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? ownKeys(Object(source), !0).forEach(function (key) { _defineProperty(target, key, source[key]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } return target; }
+
+function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
+
 function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try { var info = gen[key](arg); var value = info.value; } catch (error) { reject(error); return; } if (info.done) { resolve(value); } else { Promise.resolve(value).then(_next, _throw); } }
 
 function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
 
+function _check_auth(ctx, auth, method) {
+  var check = auth.require === true || auth.require === 'read-only' && method === 'POST';
+
+  if (check) {
+    var uid = undefined;
+
+    try {
+      uid = ctx.state.user.id;
+    } catch (e) {}
+
+    if (uid === undefined) {
+      if (auth.action == 'error') {
+        ctx.miolo.logger.error("Unauthorized access. Throwing error ".concat(auth.error_code || 401));
+        return ctx.throw(auth.error_code || 401, null, {});
+      } else {
+        ctx.miolo.logger.error("Unauthorized access. Redirecting to ".concat(auth.redirect_path || '/'));
+        ctx.redirect(auth.redirect_path || '/');
+      }
+    }
+  }
+}
+
 function init_queries_router(_x, _x2, _x3) {
   return _init_queries_router.apply(this, arguments);
 }
 
 function _init_queries_router() {
-  _init_queries_router = _asyncToGenerator(function* (app, conn, routes) {
+  _init_queries_router = _asyncToGenerator(function* (app, conn, queries) {
+    var routes = (queries === null || queries === void 0 ? void 0 : queries.routes) || [];
+
+    if (routes.length == 0) {
+      return;
+    }
+
+    var options = (queries === null || queries === void 0 ? void 0 : queries.options) || {};
+    var global_auth = (options === null || options === void 0 ? void 0 : options.auth) || {
+      require: false
+    };
     var router = new _router.default();
     routes.map(route => {
       function route_callback(_x4) {
@@ -27,6 +65,17 @@ function _init_queries_router() {
 
       function _route_callback() {
         _route_callback = _asyncToGenerator(function* (ctx) {
+          ctx.miolo.logger.debug("[queries] ".concat(route.path));
+
+          try {
+            var auth = _objectSpread(_objectSpread({}, global_auth), route.auth || {});
+
+            _check_auth(ctx, auth, route.method);
+          } catch (e) {
+            ctx.miolo.logger.error("[queries] error on ".concat(route.path));
+            ctx.miolo.logger.error(e);
+          }
+
           var result = yield route.callback(ctx, conn);
           return result;
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "miolo",
-  "version": "0.0.20",
+  "version": "0.0.23",
   "description": "miolo",
   "main": "lib/index.js",
   "author": "Afialapis <info@afialapis.com>",

package/src/config/defaults.js

@@ -81,13 +81,17 @@ module.exports= {
     //      }
     //    ],  
     //  },
-    //  queries: [
-    //    {
-    //      path: '/crud/fo/bar',
-    //      method: 'GET',
-    //      callback: method_receiving_params_ctx_conn
-    //    }
-    //  ]
+    //  queries: {
+    //    options: {...},
+    //    routes: [    
+    //      {
+    //        path: '/crud/fo/bar',
+    //        auth: {...},
+    //        method: 'GET',
+    //        callback: method_receiving_params_ctx_conn
+    //      }
+    //    ]
+    //  }
   },
   cacher: {
     redis: {

package/src/server/routes/queries.js

@@ -1,12 +1,63 @@
 import Router    from '@koa/router'
 
 
-async function init_queries_router (app, conn, routes) {
+function _check_auth(ctx, auth, method) {
+  const check= (auth.require===true) || (auth.require==='read-only' && method==='POST')
+
+  if (check) {
+    let uid= undefined
+    try {
+      uid= ctx.state.user.id
+    } catch(e) {}
+
+    if (uid===undefined) {
+
+      if (auth.action=='error') {
+        
+       ctx.miolo.logger.error(`Unauthorized access. Throwing error ${auth.error_code || 401}`)
+        return ctx.throw(
+          auth.error_code || 401,
+          null,
+          {}
+        )
+
+      } else {
+       ctx.miolo.logger.error(`Unauthorized access. Redirecting to ${auth.redirect_path || '/'}`)
+        ctx.redirect(auth.redirect_path || '/')
+      }
+    }
+  }
+}
+
+
+async function init_queries_router (app, conn, queries) {
+
+  const routes= queries?.routes || []
+  if (routes.length==0) {
+    return
+  }
+
+  const options= queries?.options || {}
+  const global_auth = options?.auth || {require: false}
+
   const router = new Router()
 
   routes.map(route => {
     
     async function route_callback(ctx) {
+      
+      ctx.miolo.logger.debug(`[queries] ${route.path}`)
+      try {
+        const auth= {
+          ...global_auth,
+          ...route.auth || {}
+        }
+        _check_auth(ctx, auth, route.method)
+      } catch(e) {
+        ctx.miolo.logger.error(`[queries] error on ${route.path}`)
+        ctx.miolo.logger.error(e)
+      }
+
       const result= await route.callback(ctx, conn)
       return result
     }