nestjs-iacry 0.0.10 → 0.2.0

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [0.2.0](https://github.com/AlexanderC/nestjs-iacry/compare/v0.0.12...v0.2.0) (2023-07-10)
+
+### [0.0.12](https://github.com/AlexanderC/nestjs-iacry/compare/v0.0.10...v0.0.12) (2022-12-07)
+
+
+### Bug Fixes
+
+* Dependencies issues ([1d4d56e](https://github.com/AlexanderC/nestjs-iacry/commit/1d4d56ef2e69894c955a07d7710f59dc66191a38))
+
 ### [0.0.10](https://github.com/AlexanderC/nestjs-iacry/compare/v0.0.9...v0.0.10) (2020-09-02)
 
 

package/README.md

@@ -5,7 +5,7 @@
 </p>
 
 <p align="center">
-  **[WIP]** An Identity and Access Control (Management) module for Nest framework (node.js) highly inspired by the <a href="https://aws.amazon.com/iam/">AWS IAM</a>.
+  An Identity and Access Control (Management) module for Nest framework (node.js) highly inspired by the <a href="https://aws.amazon.com/iam/">AWS IAM</a>.
 </p>
 
 <p align="center">
@@ -266,4 +266,4 @@ npm run deploy
 
 ### License
 
-MIT
+MIT

package/dist/decorators/action.js

@@ -4,7 +4,7 @@ exports.Action = exports.extractDynamicIdentifier = void 0;
 const policy_1 = require("../interfaces/policy");
 const constants_1 = require("./constants");
 const helper_1 = require("./helper");
-exports.extractDynamicIdentifier = helper_1.dynamicIdentifierExtractor(constants_1.ACTION_META_FIELD, {
+exports.extractDynamicIdentifier = (0, helper_1.dynamicIdentifierExtractor)(constants_1.ACTION_META_FIELD, {
     preHook(value, ctx) {
         if (!ctx || value !== constants_1.CTRL_ACTION_PLACEHOLDER) {
             return value;

package/dist/decorators/firewall.guard.js

@@ -8,24 +8,21 @@ const iacry_service_1 = require("../iacry.service");
 const action_1 = require("./action");
 const resource_1 = require("./resource");
 const principal_1 = require("./principal");
-let FirewallGuard = class FirewallGuard {
+let FirewallGuard = exports.FirewallGuard = class FirewallGuard {
     constructor(service) {
         this.service = service;
     }
-    canActivate(context) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const action = action_1.extractDynamicIdentifier(context.getHandler(), context);
-            const principal = principal_1.extractDynamicIdentifier(context.getHandler(), context);
-            const resource = resource_1.extractDynamicIdentifier(context.getHandler(), context);
-            if (!action || !principal) {
-                throw new decorator_error_1.DecoratorError('You must decorate your controller with @IACryFirewall or at least @IACryAction and @IACryPrincipal decorators');
-            }
-            return this.service.isGranted(action, principal, resource || iacry_service_1.IACryService.ANY);
-        });
+    async canActivate(context) {
+        const action = (0, action_1.extractDynamicIdentifier)(context.getHandler(), context);
+        const principal = (0, principal_1.extractDynamicIdentifier)(context.getHandler(), context);
+        const resource = (0, resource_1.extractDynamicIdentifier)(context.getHandler(), context);
+        if (!action || !principal) {
+            throw new decorator_error_1.DecoratorError('You must decorate your controller with @IACryFirewall or at least @IACryAction and @IACryPrincipal decorators');
+        }
+        return this.service.isGranted(action, principal, resource || iacry_service_1.IACryService.ANY);
     }
 };
-FirewallGuard = tslib_1.__decorate([
-    common_1.Injectable(),
+exports.FirewallGuard = FirewallGuard = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
     tslib_1.__metadata("design:paramtypes", [iacry_service_1.IACryService])
 ], FirewallGuard);
-exports.FirewallGuard = FirewallGuard;

package/dist/decorators/firewall.js

@@ -6,6 +6,6 @@ const action_1 = require("./action");
 const resource_1 = require("./resource");
 const principal_1 = require("./principal");
 function Firewall(options = {}) {
-    return common_1.applyDecorators(action_1.Action(options.action), principal_1.Principal(options.principal), ...(options.resource ? [resource_1.Resource(options.resource)] : []));
+    return (0, common_1.applyDecorators)((0, action_1.Action)(options.action), (0, principal_1.Principal)(options.principal), ...(options.resource ? [(0, resource_1.Resource)(options.resource)] : []));
 }
 exports.Firewall = Firewall;

package/dist/decorators/helper.d.ts

@@ -1,6 +1,6 @@
 import { ExecutionContext } from '@nestjs/common';
 export declare function processTemplate(template: string, context: object): string;
-declare type DIEHook = (value: any, ctx?: ExecutionContext) => any;
+type DIEHook = (value: any, ctx?: ExecutionContext) => any;
 export declare function dynamicIdentifierExtractor<T>(metadataField: string, hooks?: {
     preHook?: DIEHook;
     postHook?: DIEHook;

package/dist/decorators/helper.js

@@ -17,8 +17,8 @@ function processTemplate(template, context) {
             throw new decorator_error_1.DecoratorError(`Unable to find ${varPath} property in Request from metadata field`);
         }
         let varValue = dotProp.get(context, varPath);
-        if (entity_1.isEntity(varValue)) {
-            varValue = entity_1.toPlainDynamicIdentifier(varValue);
+        if ((0, entity_1.isEntity)(varValue)) {
+            varValue = (0, entity_1.toPlainDynamicIdentifier)(varValue);
         }
         template = template.replace(definition, varValue.toString());
     }

package/dist/decorators/principal.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Principal = exports.extractDynamicIdentifier = void 0;
 const constants_1 = require("./constants");
 const helper_1 = require("./helper");
-exports.extractDynamicIdentifier = helper_1.dynamicIdentifierExtractor(constants_1.PRINCIPAL_META_FIELD);
+exports.extractDynamicIdentifier = (0, helper_1.dynamicIdentifierExtractor)(constants_1.PRINCIPAL_META_FIELD);
 function Principal(principal) {
     return (target, key, descriptor) => {
         Reflect.defineMetadata(constants_1.PRINCIPAL_META_FIELD, principal || constants_1.REQUEST_USER, descriptor.value);

package/dist/decorators/resource.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Resource = exports.extractDynamicIdentifier = void 0;
 const constants_1 = require("./constants");
 const helper_1 = require("./helper");
-exports.extractDynamicIdentifier = helper_1.dynamicIdentifierExtractor(constants_1.RESOURCE_META_FIELD);
+exports.extractDynamicIdentifier = (0, helper_1.dynamicIdentifierExtractor)(constants_1.RESOURCE_META_FIELD);
 function Resource(resource) {
     return (target, key, descriptor) => {
         Reflect.defineMetadata(constants_1.RESOURCE_META_FIELD, resource, descriptor.value);

package/dist/firewall.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Firewall = void 0;
-const tslib_1 = require("tslib");
 const policy_1 = require("./interfaces/policy");
 const matcher_1 = require("./matcher");
 const global_storage_1 = require("./storages/global.storage");
@@ -16,31 +15,23 @@ class Firewall extends core_1.CoreHelper {
     static create(storage, matcher) {
         return new this(storage || new global_storage_1.GlobalStorage(), matcher || new matcher_1.Matcher());
     }
-    isAllowed(rawResource, rawAction, rawPrincipal) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const resolution = yield this.resolve(rawResource, rawAction, rawPrincipal);
-            return resolution.allow.length > 0 && resolution.deny.length <= 0;
-        });
+    async isAllowed(rawResource, rawAction, rawPrincipal) {
+        const resolution = await this.resolve(rawResource, rawAction, rawPrincipal);
+        return resolution.allow.length > 0 && resolution.deny.length <= 0;
     }
-    isAllowedAny(rawResource, rawAction, rawPrincipal) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const resolution = yield this.resolve(rawResource, rawAction, rawPrincipal);
-            return resolution.allow.length > 0;
-        });
+    async isAllowedAny(rawResource, rawAction, rawPrincipal) {
+        const resolution = await this.resolve(rawResource, rawAction, rawPrincipal);
+        return resolution.allow.length > 0;
     }
-    isAllowedImplicit(rawResource, rawAction, rawPrincipal) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const resolution = yield this.resolve(rawResource, rawAction, rawPrincipal);
-            return resolution.deny.length <= 0;
-        });
+    async isAllowedImplicit(rawResource, rawAction, rawPrincipal) {
+        const resolution = await this.resolve(rawResource, rawAction, rawPrincipal);
+        return resolution.deny.length <= 0;
     }
-    resolve(rawResource, rawAction, rawPrincipal) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const principal = (this.normalizeDynamicIdentifier(rawPrincipal, policy_1.PRINCIPAL));
-            const rawPolicies = yield this.storage.fetch(principal);
-            const policies = policy_vector_1.PolicyVector.create(...rawPolicies);
-            return this.matcher.match(rawResource, rawAction, principal, policies);
-        });
+    async resolve(rawResource, rawAction, rawPrincipal) {
+        const principal = (this.normalizeDynamicIdentifier(rawPrincipal, policy_1.PRINCIPAL));
+        const rawPolicies = await this.storage.fetch(principal);
+        const policies = policy_vector_1.PolicyVector.create(...rawPolicies);
+        return this.matcher.match(rawResource, rawAction, principal, policies);
     }
 }
 exports.Firewall = Firewall;

package/dist/helpers/core.js

@@ -52,8 +52,8 @@ class CoreHelper {
         return thing;
     }
     normalizeDynamicObject(thing, prop) {
-        return entity_1.isEntity(thing)
-            ? entity_1.toDynamicIdentifier(thing)
+        return (0, entity_1.isEntity)(thing)
+            ? (0, entity_1.toDynamicIdentifier)(thing)
             : prop
                 ? (this.normalizeDynamicIdentifier(thing, prop))
                 : thing;

package/dist/iacry.module.js

@@ -6,7 +6,7 @@ const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const iacry_service_1 = require("./iacry.service");
 const constants_1 = require("./constants");
-let IACryModule = IACryModule_1 = class IACryModule {
+let IACryModule = exports.IACryModule = IACryModule_1 = class IACryModule {
     static forRoot(options) {
         const OptionsProvider = {
             provide: constants_1.IACRY_OPTIONS,
@@ -49,15 +49,14 @@ let IACryModule = IACryModule_1 = class IACryModule {
         return {
             name: constants_1.IACRY_OPTIONS,
             provide: constants_1.IACRY_OPTIONS,
-            useFactory: (optionsFactory) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+            useFactory: async (optionsFactory) => {
                 return optionsFactory.createOptions();
-            }),
+            },
             inject: [options.useExisting || options.useClass],
         };
     }
 };
-IACryModule = IACryModule_1 = tslib_1.__decorate([
-    common_1.Global(),
-    common_1.Module({})
+exports.IACryModule = IACryModule = IACryModule_1 = tslib_1.__decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({})
 ], IACryModule);
-exports.IACryModule = IACryModule;

package/dist/iacry.service.js

@@ -14,26 +14,24 @@ const core_1 = require("./helpers/core");
 const ioredis_1 = require("./storages/cache/ioredis");
 const cached_storage_1 = require("./storages/cached.storage");
 const policy_manager_1 = require("./policy.manager");
-let IACryService = class IACryService extends policy_manager_1.PolicyManager {
+let IACryService = exports.IACryService = class IACryService extends policy_manager_1.PolicyManager {
     constructor(options) {
         super(new multiple_storage_1.MultipleStorage());
         this.options = options;
         this.setup(options);
     }
-    isGranted(rawAction, rawPrincipal, rawResource = core_1.CoreHelper.ANY, rule = constants_1.IS_ALLOWED) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            switch (rule) {
-                case constants_1.IS_ALLOWED:
-                case constants_1.IS_ALLOWED_ANY:
-                case constants_1.IS_ALLOWED_IMPLICIT:
-                    break;
-                default:
-                    throw new iacry_error_1.BaseError(`Unrecognized firewall rule: ${rule}`);
-            }
-            const resource = (this.normalizeDynamicObject(rawResource));
-            const principal = (this.normalizeDynamicObject(rawPrincipal));
-            return this.firewall[rule](resource, rawAction, principal);
-        });
+    async isGranted(rawAction, rawPrincipal, rawResource = core_1.CoreHelper.ANY, rule = constants_1.IS_ALLOWED) {
+        switch (rule) {
+            case constants_1.IS_ALLOWED:
+            case constants_1.IS_ALLOWED_ANY:
+            case constants_1.IS_ALLOWED_IMPLICIT:
+                break;
+            default:
+                throw new iacry_error_1.BaseError(`Unrecognized firewall rule: ${rule}`);
+        }
+        const resource = (this.normalizeDynamicObject(rawResource));
+        const principal = (this.normalizeDynamicObject(rawPrincipal));
+        return this.firewall[rule](resource, rawAction, principal);
     }
     setup(options) {
         if (options.storage) {
@@ -74,9 +72,8 @@ let IACryService = class IACryService extends policy_manager_1.PolicyManager {
         this.firewall = firewall_1.Firewall.create(this.storage, new matcher_1.Matcher(options.strict));
     }
 };
-IACryService = tslib_1.__decorate([
-    common_1.Injectable(),
-    tslib_1.__param(0, common_1.Inject(constants_1.IACRY_OPTIONS)),
+exports.IACryService = IACryService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(constants_1.IACRY_OPTIONS)),
     tslib_1.__metadata("design:paramtypes", [Object])
 ], IACryService);
-exports.IACryService = IACryService;

package/dist/index.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.WrongPolicyPropFormat = exports.MissingPolicyProps = exports.IACryDecoratorError = exports.IACryError = exports.Firewall = exports.Matcher = exports.PolicyVector = exports.Policy = exports.IACryFirewallGuard = exports.IACryFirewall = exports.IACryPrincipal = exports.IACryResource = exports.IACryAction = exports.IACryEntity = exports.PoliciesStorageSequelizeModel = exports.IACryService = exports.Effect = exports.REQUEST_USER = exports.IS_ALLOWED_IMPLICIT = exports.IS_ALLOWED_ANY = exports.IS_ALLOWED = exports.IOREDIS_CACHE = exports.SEQUELIZE_STORAGE = exports.IACryModule = void 0;
 var iacry_module_1 = require("./iacry.module");
 Object.defineProperty(exports, "IACryModule", { enumerable: true, get: function () { return iacry_module_1.IACryModule; } });
 var constants_1 = require("./constants");

package/dist/interfaces/policy.d.ts

@@ -17,28 +17,28 @@ export declare enum Effect {
     ALLOW = "Allow",
     DENY = "Deny"
 }
-export declare type ANY = '*';
+export type ANY = '*';
 export interface ActionObject {
     readonly service: string | ANY;
     readonly action: string | ANY;
 }
-export declare type Action = string | ActionObject;
+export type Action = string | ActionObject;
 export interface ResourceObject {
     readonly entity: string | ANY;
     readonly id: number | string | ANY;
 }
-export declare type Resource = string | ResourceObject;
+export type Resource = string | ResourceObject;
 export interface PrincipalObject {
     readonly entity: string | ANY;
     readonly id: number | string | ANY;
 }
-export declare type Principal = string | PrincipalObject;
-export declare type DynamicIdentifierItem<T> = {
+export type Principal = string | PrincipalObject;
+export type DynamicIdentifierItem<T> = {
     value: T;
     parse(thing: T): Array<string | ANY>;
 };
-export declare type DynamicIdentifier<T> = T | DynamicIdentifierItem<T>;
-export declare type DynamicIdentifierVector<T> = Array<DynamicIdentifier<T>>;
+export type DynamicIdentifier<T> = T | DynamicIdentifierItem<T>;
+export type DynamicIdentifierVector<T> = Array<DynamicIdentifier<T>>;
 export interface PolicyInterface {
     Sid?: string;
     Effect: Effect;

package/dist/interfaces/policy.js

@@ -20,4 +20,4 @@ var Effect;
 (function (Effect) {
     Effect["ALLOW"] = "Allow";
     Effect["DENY"] = "Deny";
-})(Effect = exports.Effect || (exports.Effect = {}));
+})(Effect || (exports.Effect = Effect = {}));

package/dist/policy.manager.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PolicyManager = void 0;
-const tslib_1 = require("tslib");
 const core_1 = require("./helpers/core");
 const policy_1 = require("./interfaces/policy");
 class PolicyManager extends core_1.CoreHelper {
@@ -13,53 +12,41 @@ class PolicyManager extends core_1.CoreHelper {
         this.storage = storage;
         return this;
     }
-    attach(rawPrincipal, rawPolicies) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
-            return this.storage.add(principal, rawPolicies);
-        });
-    }
-    reset(rawPrincipal, rawPolicies) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
-            return rawPolicies
-                ? this.storage.save(principal, rawPolicies)
-                : this.storage.purge(principal);
-        });
-    }
-    retrieve(rawPrincipal) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
-            const rawPolicies = yield this.storage.fetch(principal);
-            return rawPolicies.map((rawPolicy) => typeof rawPolicy === 'string' ? core_1.CoreHelper.decode(rawPolicy) : rawPolicy);
-        });
-    }
-    retrieveBySid(sid, rawPrincipal) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
-            const rawPolicies = yield this.storage.fetchBySid(sid, principal);
-            return rawPolicies.map((rawPolicy) => typeof rawPolicy === 'string' ? core_1.CoreHelper.decode(rawPolicy) : rawPolicy);
-        });
-    }
-    upsertBySid(sid, rawPrincipal, rawPolicies) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
-            return this.storage.saveBySid(sid, principal, rawPolicies);
-        });
-    }
-    grant(rawAction, rawPrincipal, rawResource = core_1.CoreHelper.ANY, effect = policy_1.Effect.ALLOW, sid) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            const resource = (this.normalizeDynamicObject(rawResource));
-            const principal = (this.normalizeDynamicObject(rawPrincipal));
-            const policy = {
-                [policy_1.SID]: sid,
-                [policy_1.EFFECT]: effect,
-                [policy_1.ACTION]: rawAction,
-                [policy_1.RESOURCE]: resource,
-                [policy_1.PRINCIPAL]: principal,
-            };
-            return this.attach(rawPrincipal, [policy]);
-        });
+    async attach(rawPrincipal, rawPolicies) {
+        const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
+        return this.storage.add(principal, rawPolicies);
+    }
+    async reset(rawPrincipal, rawPolicies) {
+        const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
+        return rawPolicies
+            ? this.storage.save(principal, rawPolicies)
+            : this.storage.purge(principal);
+    }
+    async retrieve(rawPrincipal) {
+        const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
+        const rawPolicies = await this.storage.fetch(principal);
+        return rawPolicies.map((rawPolicy) => typeof rawPolicy === 'string' ? core_1.CoreHelper.decode(rawPolicy) : rawPolicy);
+    }
+    async retrieveBySid(sid, rawPrincipal) {
+        const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
+        const rawPolicies = await this.storage.fetchBySid(sid, principal);
+        return rawPolicies.map((rawPolicy) => typeof rawPolicy === 'string' ? core_1.CoreHelper.decode(rawPolicy) : rawPolicy);
+    }
+    async upsertBySid(sid, rawPrincipal, rawPolicies) {
+        const principal = (this.normalizeDynamicObject(rawPrincipal, policy_1.PRINCIPAL));
+        return this.storage.saveBySid(sid, principal, rawPolicies);
+    }
+    async grant(rawAction, rawPrincipal, rawResource = core_1.CoreHelper.ANY, effect = policy_1.Effect.ALLOW, sid) {
+        const resource = (this.normalizeDynamicObject(rawResource));
+        const principal = (this.normalizeDynamicObject(rawPrincipal));
+        const policy = {
+            [policy_1.SID]: sid,
+            [policy_1.EFFECT]: effect,
+            [policy_1.ACTION]: rawAction,
+            [policy_1.RESOURCE]: resource,
+            [policy_1.PRINCIPAL]: principal,
+        };
+        return this.attach(rawPrincipal, [policy]);
     }
 }
 exports.PolicyManager = PolicyManager;

package/dist/storages/cache/ioredis.js

@@ -1,35 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IoRedis = void 0;
-const tslib_1 = require("tslib");
 class IoRedis {
     constructor(client) {
         this.client = client;
         this.SUCCESS = 'OK';
         this.EXPIRE = 'EX';
     }
-    set(key, value, expire) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            if (!expire) {
-                return (yield this.client.set(key, value)) === this.SUCCESS;
-            }
-            return ((yield this.client.set(key, value, this.EXPIRE, expire)) === this.SUCCESS);
-        });
+    async set(key, value, expire) {
+        if (!expire) {
+            return (await this.client.set(key, value)) === this.SUCCESS;
+        }
+        return ((await this.client.set(key, value, this.EXPIRE, expire)) === this.SUCCESS);
     }
-    has(key) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return (yield this.client.exists(key)) === 1;
-        });
+    async has(key) {
+        return (await this.client.exists(key)) === 1;
     }
-    get(key) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return this.client.get(key);
-        });
+    async get(key) {
+        return this.client.get(key);
     }
-    remove(key) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return (yield this.client.del(key)) === 1;
-        });
+    async remove(key) {
+        return (await this.client.del(key)) === 1;
     }
 }
 exports.IoRedis = IoRedis;