plac-micro-common 1.2.0 → 1.2.2

package/dist/http/constants/index.d.ts

@@ -0,0 +1 @@
+export declare const REQUIRE_PERMISSIONS_KEY = "require_permissions";

package/dist/http/constants/index.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REQUIRE_PERMISSIONS_KEY = void 0;
+exports.REQUIRE_PERMISSIONS_KEY = "require_permissions";

package/dist/http/decorators/index.d.ts

@@ -1,3 +1,4 @@
 export * from "./client_ctx.decorator";
 export * from "./current_app.decorator";
 export * from "./current_app_client.decorator";
+export * from "./require_permission.decorator";

package/dist/http/decorators/index.js

@@ -17,3 +17,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./client_ctx.decorator"), exports);
 __exportStar(require("./current_app.decorator"), exports);
 __exportStar(require("./current_app_client.decorator"), exports);
+__exportStar(require("./require_permission.decorator"), exports);

package/dist/http/decorators/require_permission.decorator.d.ts

@@ -0,0 +1 @@
+export declare const RequirePermissions: (...permissions: string[]) => import("@nestjs/common").CustomDecorator<string>;

package/dist/http/decorators/require_permission.decorator.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequirePermissions = void 0;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("../constants");
+const RequirePermissions = (...permissions) => (0, common_1.SetMetadata)(constants_1.REQUIRE_PERMISSIONS_KEY, permissions);
+exports.RequirePermissions = RequirePermissions;

package/dist/http/guards/index.d.ts

@@ -1 +1,2 @@
 export * from "./jwt_auth.guard";
+export * from "./permission.guard";

package/dist/http/guards/index.js

@@ -15,3 +15,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./jwt_auth.guard"), exports);
+__exportStar(require("./permission.guard"), exports);

package/dist/http/guards/jwt_auth.guard.js

@@ -33,6 +33,8 @@ let JwtAuthGuard = class JwtAuthGuard {
         req.current_user = authPayload.user;
         req.current_app = authPayload.app;
         req.current_app_client = authPayload.app_client;
+        req.current_roles = authPayload.roles ?? [];
+        req.current_permissions = authPayload.permissions ?? [];
         return true;
     }
 };

package/dist/http/guards/permission.guard.d.ts

@@ -0,0 +1,7 @@
+import { CanActivate, ExecutionContext } from "@nestjs/common";
+import { Reflector } from "@nestjs/core";
+export declare class PermissionsGuard implements CanActivate {
+    private readonly reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): boolean;
+}

package/dist/http/guards/permission.guard.js

@@ -0,0 +1,46 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionsGuard = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const constants_1 = require("../constants");
+let PermissionsGuard = class PermissionsGuard {
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    canActivate(context) {
+        const required = this.reflector.getAllAndOverride(constants_1.REQUIRE_PERMISSIONS_KEY, [context.getHandler(), context.getClass()]);
+        // No permissions required => allow
+        if (!required || required.length === 0)
+            return true;
+        const req = context.switchToHttp().getRequest();
+        // ✅ Your convention: permissions live on req.current_permissions
+        const perms = Array.isArray(req?.current_permissions)
+            ? req.current_permissions
+            : [];
+        if (!perms.length) {
+            // If JWT guard didn't run, or token had no permissions
+            throw new common_1.UnauthorizedException("Missing permissions in request");
+        }
+        // require ALL permissions by default
+        const hasAll = required.every((p) => perms.includes(p));
+        if (!hasAll) {
+            throw new common_1.ForbiddenException("Insufficient permissions");
+        }
+        return true;
+    }
+};
+exports.PermissionsGuard = PermissionsGuard;
+exports.PermissionsGuard = PermissionsGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector])
+], PermissionsGuard);

package/dist/types/auth.type.d.ts

@@ -37,4 +37,6 @@ export type AuthPayload = {
     user: CurrentUserInfo;
     app: CurrentAppInfo;
     app_client: CurrentAppClientInfo;
+    roles?: string[];
+    permissions?: string[];
 };

package/dist/types/permission.type.d.ts

@@ -1,11 +1,19 @@
 export declare enum PermissionAction {
+    Approve = "approve",
     Create = "create",
+    Delete = "delete",
+    Export = "export",
     Read = "read",
-    Update = "update",
-    Delete = "delete"
+    Update = "update"
 }
-export declare enum PermissionResource {
-    Permission = "permission",
-    Quotation = "quotation",
-    User = "user"
+export declare const PermissionResource: {
+    readonly Permission: "permission";
+    readonly Quotation: "quotation";
+    readonly User: "user";
+};
+export type PermissionResource = (typeof PermissionResource)[keyof typeof PermissionResource];
+export declare enum PermissionModule {
+    Admin = "admin",
+    Claim = "claim",
+    Policy = "policy"
 }

package/dist/types/permission.type.js

@@ -1,16 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PermissionResource = exports.PermissionAction = void 0;
+exports.PermissionModule = exports.PermissionResource = exports.PermissionAction = void 0;
 var PermissionAction;
 (function (PermissionAction) {
+    PermissionAction["Approve"] = "approve";
     PermissionAction["Create"] = "create";
+    PermissionAction["Delete"] = "delete";
+    PermissionAction["Export"] = "export";
     PermissionAction["Read"] = "read";
     PermissionAction["Update"] = "update";
-    PermissionAction["Delete"] = "delete";
 })(PermissionAction || (exports.PermissionAction = PermissionAction = {}));
-var PermissionResource;
-(function (PermissionResource) {
-    PermissionResource["Permission"] = "permission";
-    PermissionResource["Quotation"] = "quotation";
-    PermissionResource["User"] = "user";
-})(PermissionResource || (exports.PermissionResource = PermissionResource = {}));
+exports.PermissionResource = {
+    Permission: "permission",
+    Quotation: "quotation",
+    User: "user",
+};
+var PermissionModule;
+(function (PermissionModule) {
+    PermissionModule["Admin"] = "admin";
+    PermissionModule["Claim"] = "claim";
+    PermissionModule["Policy"] = "policy";
+})(PermissionModule || (exports.PermissionModule = PermissionModule = {}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "plac-micro-common",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "types": "dist/index.d.ts",
   "main": "dist/index.js",
   "scripts": {