rbac 5.0.3 → 6.0.0

package/HISTORY.md

@@ -1,4 +1,22 @@
-# Change/History Log
+# v6.0.0
 
-This project adheres to [Semantic Versioning](http://semver.org/).
-Every release, along with the migration instructions, is documented on the Github [Releases](https://github.com/seeden/rbac/releases) page.
+- Zero production dependencies (removed lodash, keymirror)
+- Minimum Node.js version: 18.0.0
+- Updated build toolchain (Babel 7.26, Jest 29)
+- Cleaned up development dependencies (48 to 7)
+- Fixed LICENSE copyright
+- Removed deprecated API usage (String.prototype.substr)
+- Removed dead references to Mongoose, DynamoDB, Express middleware
+
+# v5.0.3
+
+- Added DynamoDB support via dynamoose
+
+# v5.0.2
+
+- Bug fix
+
+# v5.0.1
+
+- Async RBAC
+- Updated tests

package/LICENSE

@@ -0,0 +1,21 @@
+The MIT License
+
+Copyright (c) 2014-2026 Zlatko Fedor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/README.md

@@ -1,39 +1,9 @@
 # RBAC
-(Hierarchical Role Based Access Control)
 
-[![NPM version][npm-image]][npm-url]
-[![build status][travis-image]][travis-url]
-[![Test coverage][coveralls-image]][coveralls-url]
-[![Gitter chat](https://badges.gitter.im/seeden/rbac.png)](https://gitter.im/seeden/rbac)
+Hierarchical Role Based Access Control for Node.js
 
-[npm-image]: https://img.shields.io/npm/v/rbac.svg?style=flat-square
-[npm-url]: https://www.npmjs.com/rbac
-[travis-image]: https://img.shields.io/travis/seeden/rbac/master.svg?style=flat-square
-[travis-url]: https://travis-ci.org/seeden/rbac
-[coveralls-image]: https://img.shields.io/coveralls/seeden/rbac/master.svg?style=flat-square
-[coveralls-url]: https://coveralls.io/r/seeden/rbac?branch=master
-[github-url]: https://github.com/seeden/rbac
-
-RBAC is the authorization library for NodeJS.
-
-:tada: We have supported DynamoDB storage now by implementation of [dynamoose](https://github.com/automategreen/dynamoose).
-
-## Motivation
-
-I needed hierarchical role based access control for my projects based on ExpressJS.
-I had one requirement. This structure must be permanently stored in various storages.
-For example in memory or Mongoose.
-Because there is a lot of options for storing of data and many of them are asynchronous.
-I created asynchronous API.
-Please, if you found any bug or you need custom API, create an issue or pull request.
-
-## Documentation
-
-[Read more about API in documentation](http://seeden.github.io/rbac/RBAC.html)
-
-# Support us
-
-Star this project on [GitHub][github-url].
+[![NPM version](https://img.shields.io/npm/v/rbac.svg)](https://www.npmjs.com/package/rbac)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
 ## Install
 
@@ -44,7 +14,8 @@ npm install rbac
 ## Usage
 
 ```js
-import { RBAC } from 'rbac'; // ES5 var RBAC = require('rbac').default;
+import { RBAC } from 'rbac';
+
 const rbac = new RBAC({
   roles: ['superadmin', 'admin', 'user', 'guest'],
   permissions: {
@@ -64,77 +35,60 @@ const rbac = new RBAC({
 await rbac.init();
 ```
 
-## Usage with express
-
-```js
-import express from 'express';
-import { RBAC } from 'rbac';
-import secure from 'rbac/controllers/express';
-
-// your custom controller for express
-function adminController(req, res, next) {
-  res.send('Hello admin');
-}
-
-const app = express();
-const rbac = new RBAC({
-  roles: ['admin', 'user'],
-});
-
-await rbac.init();
-
-// setup express routes
-app.use('/admin', secure.hasRole(rbac, 'admin'), adminController);
-```    
-
 ## Check permissions
 
 ```js
 const can = await rbac.can('admin', 'create', 'article');
 if (can) {
-  console.log('Admin is able create article');
+  console.log('Admin is able to create article');
 }
+```
+
+Or use a role instance:
 
-// or you can use instance of admin role
+```js
 const admin = await rbac.getRole('admin');
 if (!admin) {
-  return console.log('Role does not exists');
-}
-
-const can = await admin.can('create', 'article');
-if (can) {
-  console.log('Admin is able create article');    
+  console.log('Role does not exist');
+} else {
+  const can = await admin.can('create', 'article');
+  if (can) {
+    console.log('Admin is able to create article');
+  }
 }
 ```
 
-## Mongoose user model
+## Custom storage
 
-Please take a look on plugin [mongoose-hrbac](http://github.com/seeden/mongoose-hrbac)
+RBAC uses in-memory storage by default. You can implement custom storage by extending the `Storage` class:
 
-## Build documentation
-
-```sh
-npm run doc
-```  
-
-## Running Tests
+```js
+import { Storage } from 'rbac';
+
+class MyStorage extends Storage {
+  async add(item) { /* ... */ }
+  async remove(item) { /* ... */ }
+  async grant(role, child) { /* ... */ }
+  async revoke(role, child) { /* ... */ }
+  async get(name) { /* ... */ }
+  async getRoles() { /* ... */ }
+  async getPermissions() { /* ... */ }
+  async getGrants(role) { /* ... */ }
+}
 
-```sh
-npm run test
+const rbac = new RBAC({ storage: new MyStorage() });
 ```
 
-## Build
+## Running Tests
 
 ```sh
-npm run build
+npm test
 ```
 
 ## Credits
 
-  - [Zlatko Fedor](http://github.com/seeden)
+[Zlatko Fedor](https://github.com/seeden)
 
 ## License
 
-The MIT License (MIT)
-
-Copyright (c) 2016-2018 Zlatko Fedor zfedor@goodmodule.com
+MIT

package/dist/Base.js

@@ -1,12 +1,9 @@
 "use strict";
 
-exports.__esModule = true;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
 exports.default = void 0;
-
-function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try { var info = gen[key](arg); var value = info.value; } catch (error) { reject(error); return; } if (info.done) { resolve(value); } else { Promise.resolve(value).then(_next, _throw); } }
-
-function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
-
 class Base {
   /**
    * Base constructor
@@ -19,46 +16,33 @@ class Base {
     if (!rbac || !name) {
       throw new Error('One of parameters is undefined');
     }
-
     this.name = name;
     this.rbac = rbac;
   }
+
   /**
    * Add this to RBAC (storage)
    * @method Base#remove
    * @return {boolean}
    */
-
-
-  add() {
-    var _this = this;
-
-    return _asyncToGenerator(function* () {
-      const {
-        rbac
-      } = _this;
-      return rbac.add(_this);
-    })();
+  async add() {
+    const {
+      rbac
+    } = this;
+    return rbac.add(this);
   }
+
   /**
    * Remove this from RBAC (storage)
    * @method Base#remove
    * @return {boolean}
    */
-
-
-  remove() {
-    var _this2 = this;
-
-    return _asyncToGenerator(function* () {
-      const {
-        rbac
-      } = _this2;
-      return rbac.remove(_this2);
-    })();
+  async remove() {
+    const {
+      rbac
+    } = this;
+    return rbac.remove(this);
   }
-
 }
-
 exports.default = Base;
 //# sourceMappingURL=Base.js.map

package/dist/Base.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/Base.js"],"names":["Base","constructor","rbac","name","Error","add","remove"],"mappings":";;;;;;;;;AAGe,MAAMA,IAAN,CAAW;AACxB;;;;;;;AAOAC,EAAAA,WAAW,CAACC,IAAD,EAAaC,IAAb,EAA2B;AACpC,QAAI,CAACD,IAAD,IAAS,CAACC,IAAd,EAAoB;AAClB,YAAM,IAAIC,KAAJ,CAAU,gCAAV,CAAN;AACD;;AAED,SAAKD,IAAL,GAAYA,IAAZ;AACA,SAAKD,IAAL,GAAYA,IAAZ;AACD;AAED;;;;;;;AAKMG,EAAAA,GAAN,GAAqB;AAAA;;AAAA;AACnB,YAAM;AAAEH,QAAAA;AAAF,UAAW,KAAjB;AACA,aAAOA,IAAI,CAACG,GAAL,CAAS,KAAT,CAAP;AAFmB;AAGpB;AAED;;;;;;;AAKMC,EAAAA,MAAN,GAAwB;AAAA;;AAAA;AACtB,YAAM;AAAEJ,QAAAA;AAAF,UAAW,MAAjB;AACA,aAAOA,IAAI,CAACI,MAAL,CAAY,MAAZ,CAAP;AAFsB;AAGvB;;AAnCuB","sourcesContent":["// @flow\nimport type RBAC from './RBAC';\n\nexport default class Base {\n  /**\n   * Base constructor\n   * @constructor Base\n   * @param  {RBAC}     rbac     Instance of the RBAC\n   * @param  {String}   name     Name of the grant\n   * @param  {Function} cb       Callback function after add\n   */\n  constructor(rbac: RBAC, name: string) {\n    if (!rbac || !name) {\n      throw new Error('One of parameters is undefined');\n    }\n\n    this.name = name;\n    this.rbac = rbac;\n  }\n\n  /**\n   * Add this to RBAC (storage)\n   * @method Base#remove\n   * @return {boolean}\n   */\n  async add(): boolean {\n    const { rbac } = this;\n    return rbac.add(this);\n  }\n\n  /**\n   * Remove this from RBAC (storage)\n   * @method Base#remove\n   * @return {boolean}\n   */\n  async remove(): boolean {\n    const { rbac } = this;\n    return rbac.remove(this);\n  }\n}\n"],"file":"Base.js"}
+{"version":3,"file":"Base.js","names":["Base","constructor","rbac","name","Error","add","remove","exports","default"],"sources":["../src/Base.js"],"sourcesContent":["// @flow\nimport type RBAC from './RBAC';\n\nexport default class Base {\n  /**\n   * Base constructor\n   * @constructor Base\n   * @param  {RBAC}     rbac     Instance of the RBAC\n   * @param  {String}   name     Name of the grant\n   * @param  {Function} cb       Callback function after add\n   */\n  constructor(rbac: RBAC, name: string) {\n    if (!rbac || !name) {\n      throw new Error('One of parameters is undefined');\n    }\n\n    this.name = name;\n    this.rbac = rbac;\n  }\n\n  /**\n   * Add this to RBAC (storage)\n   * @method Base#remove\n   * @return {boolean}\n   */\n  async add(): boolean {\n    const { rbac } = this;\n    return rbac.add(this);\n  }\n\n  /**\n   * Remove this from RBAC (storage)\n   * @method Base#remove\n   * @return {boolean}\n   */\n  async remove(): boolean {\n    const { rbac } = this;\n    return rbac.remove(this);\n  }\n}\n"],"mappings":";;;;;;AAGe,MAAMA,IAAI,CAAC;EACxB;AACF;AACA;AACA;AACA;AACA;AACA;EACEC,WAAWA,CAACC,IAAU,EAAEC,IAAY,EAAE;IACpC,IAAI,CAACD,IAAI,IAAI,CAACC,IAAI,EAAE;MAClB,MAAM,IAAIC,KAAK,CAAC,gCAAgC,CAAC;IACnD;IAEA,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACD,IAAI,GAAGA,IAAI;EAClB;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAMG,GAAGA,CAAA,EAAY;IACnB,MAAM;MAAEH;IAAK,CAAC,GAAG,IAAI;IACrB,OAAOA,IAAI,CAACG,GAAG,CAAC,IAAI,CAAC;EACvB;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAMC,MAAMA,CAAA,EAAY;IACtB,MAAM;MAAEJ;IAAK,CAAC,GAAG,IAAI;IACrB,OAAOA,IAAI,CAACI,MAAM,CAAC,IAAI,CAAC;EAC1B;AACF;AAACC,OAAA,CAAAC,OAAA,GAAAR,IAAA","ignoreList":[]}

package/dist/Memory.js

@@ -1,216 +1,139 @@
 "use strict";
 
-exports.__esModule = true;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
 exports.default = void 0;
-
 var _Storage = _interopRequireDefault(require("./Storage"));
-
 var _Permission = _interopRequireDefault(require("./Permission"));
-
 var _Role = _interopRequireDefault(require("./Role"));
-
 var _Base = _interopRequireDefault(require("./Base"));
-
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
-function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try { var info = gen[key](arg); var value = info.value; } catch (error) { reject(error); return; } if (info.done) { resolve(value); } else { Promise.resolve(value).then(_next, _throw); } }
-
-function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 class Memory extends _Storage.default {
-  constructor(...args) {
-    super(...args);
-
-    _defineProperty(this, "items", {});
+  items = {};
+  async add(item) {
+    const {
+      name
+    } = item;
+    if (this.items[name]) {
+      throw new Error(`Item ${name} already exists`);
+    }
+    this.items[name] = {
+      instance: item,
+      grants: []
+    };
+    return true;
   }
-
-  add(item) {
-    var _this = this;
-
-    return _asyncToGenerator(function* () {
+  async remove(item) {
+    const {
+      items
+    } = this;
+    const {
+      name
+    } = item;
+    if (!items[name]) {
+      throw new Error(`Item ${name} is not presented in storage`);
+    }
+
+    // revoke from all instances
+    Object.keys(items).forEach(itemName => {
       const {
-        name
-      } = item;
-
-      if (_this.items[name]) {
-        throw new Error(`Item ${name} already exists`);
-      }
+        grants
+      } = items[itemName];
+      items[itemName].grants = grants.filter(grant => grant !== name);
+    });
 
-      _this.items[name] = {
-        instance: item,
-        grants: []
-      };
-      return true;
-    })();
+    // delete from items
+    delete this.items[name];
+    return true;
   }
-
-  remove(item) {
-    var _this2 = this;
-
-    return _asyncToGenerator(function* () {
-      const {
-        items
-      } = _this2;
-      const {
-        name
-      } = item;
-
-      if (!items[name]) {
-        throw new Error(`Item ${name} is not presented in storage`);
-      } // revoke from all instances
-
-
-      Object.keys(items).forEach(itemName => {
-        const {
-          grants
-        } = items[itemName];
-        items[itemName].grants = grants.filter(grant => grant !== name);
-      }); // delete from items
-
-      delete _this2.items[name];
-      return true;
-    })();
+  async grant(role, child) {
+    const {
+      name
+    } = role;
+    const {
+      name: childName
+    } = child;
+    if (!this.items[name]) {
+      throw new Error(`Role ${name} is not exist`);
+    }
+    if (!this.items[childName]) {
+      throw new Error(`Base ${childName} is not exist`);
+    }
+    if (!(role instanceof _Role.default)) {
+      throw new Error('Role is not instance of Role');
+    }
+    if (name === childName) {
+      throw new Error(`You can grant yourself ${name}`);
+    }
+    const {
+      grants
+    } = this.items[name];
+    if (!grants.includes(childName)) {
+      grants.push(childName);
+    }
+    return true;
   }
-
-  grant(role, child) {
-    var _this3 = this;
-
-    return _asyncToGenerator(function* () {
-      const {
-        name
-      } = role;
-      const {
-        name: childName
-      } = child;
-
-      if (!_this3.items[name]) {
-        throw new Error(`Role ${name} is not exist`);
-      }
-
-      if (!_this3.items[childName]) {
-        throw new Error(`Base ${childName} is not exist`);
-      }
-
-      if (!(role instanceof _Role.default)) {
-        throw new Error('Role is not instance of Role');
-      }
-
-      if (name === childName) {
-        throw new Error(`You can grant yourself ${name}`);
-      }
-
-      const {
-        grants
-      } = _this3.items[name];
-
-      if (!grants.includes(childName)) {
-        grants.push(childName);
-      }
-
-      return true;
-    })();
+  async revoke(role, child) {
+    const {
+      name
+    } = role;
+    const {
+      name: childName
+    } = child;
+    if (!this.items[name] || !this.items[childName]) {
+      throw new Error('Role is not exist');
+    }
+    const {
+      grants
+    } = this.items[name];
+    if (!grants.includes(childName)) {
+      throw new Error('Item is not associated to this item');
+    }
+    this.items[name].grants = grants.filter(grant => grant !== childName);
+    return true;
   }
-
-  revoke(role, child) {
-    var _this4 = this;
-
-    return _asyncToGenerator(function* () {
-      const {
-        name
-      } = role;
-      const {
-        name: childName
-      } = child;
-
-      if (!_this4.items[name] || !_this4.items[childName]) {
-        throw new Error('Role is not exist');
-      }
-
+  async get(name) {
+    if (name && this.items[name]) {
+      return this.items[name].instance;
+    }
+    return undefined;
+  }
+  async getRoles() {
+    return this.items.reduce((filtered, item) => {
       const {
-        grants
-      } = _this4.items[name];
-
-      if (!grants.includes(childName)) {
-        throw new Error('Item is not associated to this item');
+        instance
+      } = item;
+      if (instance instanceof _Role.default) {
+        filtered.push(instance);
       }
-
-      _this4.items[name].grants = grants.filter(grant => grant !== childName);
-      return true;
-    })();
+      return filtered;
+    }, []);
   }
-
-  get(name) {
-    var _this5 = this;
-
-    return _asyncToGenerator(function* () {
-      if (name && _this5.items[name]) {
-        return _this5.items[name].instance;
+  async getPermissions() {
+    return this.items.reduce((filtered, item) => {
+      const {
+        instance
+      } = item;
+      if (instance instanceof _Permission.default) {
+        filtered.push(instance);
       }
-
-      return undefined;
-    })();
-  }
-
-  getRoles() {
-    var _this6 = this;
-
-    return _asyncToGenerator(function* () {
-      return _this6.items.reduce((filtered, item) => {
-        const {
-          instance
-        } = item;
-
-        if (instance instanceof _Role.default) {
-          filtered.push(instance);
-        }
-
-        return filtered;
-      }, []);
-    })();
+      return filtered;
+    }, []);
   }
-
-  getPermissions() {
-    var _this7 = this;
-
-    return _asyncToGenerator(function* () {
-      return _this7.items.reduce((filtered, item) => {
-        const {
-          instance
-        } = item;
-
-        if (instance instanceof _Permission.default) {
-          filtered.push(instance);
+  async getGrants(role) {
+    if (role && this.items[role]) {
+      const currentGrants = this.items[role].grants;
+      return currentGrants.reduce((filtered, grantName) => {
+        const grant = this.items[grantName];
+        if (grant) {
+          filtered.push(grant.instance);
         }
-
         return filtered;
       }, []);
-    })();
-  }
-
-  getGrants(role) {
-    var _this8 = this;
-
-    return _asyncToGenerator(function* () {
-      if (role && _this8.items[role]) {
-        const currentGrants = _this8.items[role].grants;
-        return currentGrants.reduce((filtered, grantName) => {
-          const grant = _this8.items[grantName];
-
-          if (grant) {
-            filtered.push(grant.instance);
-          }
-
-          return filtered;
-        }, []);
-      }
-
-      return [];
-    })();
+    }
+    return [];
   }
-
 }
-
 exports.default = Memory;
 //# sourceMappingURL=Memory.js.map

package/dist/Memory.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/Memory.js"],"names":["Memory","Storage","add","item","name","items","Error","instance","grants","remove","Object","keys","forEach","itemName","filter","grant","role","child","childName","Role","includes","push","revoke","get","undefined","getRoles","reduce","filtered","getPermissions","Permission","getGrants","currentGrants","grantName"],"mappings":";;;;;AACA;;AACA;;AACA;;AACA;;;;;;;;;;AAEe,MAAMA,MAAN,SAAqBC,gBAArB,CAA6B;AAAA;AAAA;;AAAA,mCACxB,EADwB;AAAA;;AAGpCC,EAAAA,GAAN,CAAUC,IAAV,EAA+B;AAAA;;AAAA;AAC7B,YAAM;AAAEC,QAAAA;AAAF,UAAWD,IAAjB;;AACA,UAAI,KAAI,CAACE,KAAL,CAAWD,IAAX,CAAJ,EAAsB;AACpB,cAAM,IAAIE,KAAJ,CAAW,QAAOF,IAAK,iBAAvB,CAAN;AACD;;AAED,MAAA,KAAI,CAACC,KAAL,CAAWD,IAAX,IAAmB;AACjBG,QAAAA,QAAQ,EAAEJ,IADO;AAEjBK,QAAAA,MAAM,EAAE;AAFS,OAAnB;AAKA,aAAO,IAAP;AAX6B;AAY9B;;AAEKC,EAAAA,MAAN,CAAaN,IAAb,EAAkC;AAAA;;AAAA;AAChC,YAAM;AAAEE,QAAAA;AAAF,UAAY,MAAlB;AACA,YAAM;AAAED,QAAAA;AAAF,UAAWD,IAAjB;;AACA,UAAI,CAACE,KAAK,CAACD,IAAD,CAAV,EAAkB;AAChB,cAAM,IAAIE,KAAJ,CAAW,QAAOF,IAAK,8BAAvB,CAAN;AACD,OAL+B,CAOhC;;;AACAM,MAAAA,MAAM,CAACC,IAAP,CAAYN,KAAZ,EAAmBO,OAAnB,CAA4BC,QAAD,IAAsB;AAC/C,cAAM;AAAEL,UAAAA;AAAF,YAAaH,KAAK,CAACQ,QAAD,CAAxB;AACAR,QAAAA,KAAK,CAACQ,QAAD,CAAL,CAAgBL,MAAhB,GAAyBA,MAAM,CAACM,MAAP,CAAcC,KAAK,IAAIA,KAAK,KAAKX,IAAjC,CAAzB;AACD,OAHD,EARgC,CAahC;;AACA,aAAO,MAAI,CAACC,KAAL,CAAWD,IAAX,CAAP;AACA,aAAO,IAAP;AAfgC;AAgBjC;;AAEKW,EAAAA,KAAN,CAAYC,IAAZ,EAAwBC,KAAxB,EAA8C;AAAA;;AAAA;AAC5C,YAAM;AAAEb,QAAAA;AAAF,UAAWY,IAAjB;AACA,YAAM;AAAEZ,QAAAA,IAAI,EAAEc;AAAR,UAAsBD,KAA5B;;AAEA,UAAI,CAAC,MAAI,CAACZ,KAAL,CAAWD,IAAX,CAAL,EAAuB;AACrB,cAAM,IAAIE,KAAJ,CAAW,QAAOF,IAAK,eAAvB,CAAN;AACD;;AAED,UAAI,CAAC,MAAI,CAACC,KAAL,CAAWa,SAAX,CAAL,EAA4B;AAC1B,cAAM,IAAIZ,KAAJ,CAAW,QAAOY,SAAU,eAA5B,CAAN;AACD;;AAED,UAAI,EAAEF,IAAI,YAAYG,aAAlB,CAAJ,EAA6B;AAC3B,cAAM,IAAIb,KAAJ,CAAU,8BAAV,CAAN;AACD;;AAED,UAAIF,IAAI,KAAKc,SAAb,EAAwB;AACtB,cAAM,IAAIZ,KAAJ,CAAW,0BAAyBF,IAAK,EAAzC,CAAN;AACD;;AAED,YAAM;AAAEI,QAAAA;AAAF,UAAa,MAAI,CAACH,KAAL,CAAWD,IAAX,CAAnB;;AACA,UAAI,CAACI,MAAM,CAACY,QAAP,CAAgBF,SAAhB,CAAL,EAAiC;AAC/BV,QAAAA,MAAM,CAACa,IAAP,CAAYH,SAAZ;AACD;;AAED,aAAO,IAAP;AAzB4C;AA0B7C;;AAEKI,EAAAA,MAAN,CAAaN,IAAb,EAAyBC,KAAzB,EAA+C;AAAA;;AAAA;AAC7C,YAAM;AAAEb,QAAAA;AAAF,UAAWY,IAAjB;AACA,YAAM;AAAEZ,QAAAA,IAAI,EAAEc;AAAR,UAAsBD,KAA5B;;AAEA,UAAI,CAAC,MAAI,CAACZ,KAAL,CAAWD,IAAX,CAAD,IAAqB,CAAC,MAAI,CAACC,KAAL,CAAWa,SAAX,CAA1B,EAAiD;AAC/C,cAAM,IAAIZ,KAAJ,CAAU,mBAAV,CAAN;AACD;;AAED,YAAM;AAAEE,QAAAA;AAAF,UAAa,MAAI,CAACH,KAAL,CAAWD,IAAX,CAAnB;;AACA,UAAI,CAACI,MAAM,CAACY,QAAP,CAAgBF,SAAhB,CAAL,EAAiC;AAC/B,cAAM,IAAIZ,KAAJ,CAAU,qCAAV,CAAN;AACD;;AAED,MAAA,MAAI,CAACD,KAAL,CAAWD,IAAX,EAAiBI,MAAjB,GAA0BA,MAAM,CAACM,MAAP,CAAcC,KAAK,IAAIA,KAAK,KAAKG,SAAjC,CAA1B;AAEA,aAAO,IAAP;AAf6C;AAgB9C;;AAEKK,EAAAA,GAAN,CAAUnB,IAAV,EAA+B;AAAA;;AAAA;AAC7B,UAAIA,IAAI,IAAI,MAAI,CAACC,KAAL,CAAWD,IAAX,CAAZ,EAA8B;AAC5B,eAAO,MAAI,CAACC,KAAL,CAAWD,IAAX,EAAiBG,QAAxB;AACD;;AAED,aAAOiB,SAAP;AAL6B;AAM9B;;AAEKC,EAAAA,QAAN,GAAyB;AAAA;;AAAA;AACvB,aAAO,MAAI,CAACpB,KAAL,CACJqB,MADI,CACG,CAACC,QAAD,EAAmBxB,IAAnB,KAAoC;AAC1C,cAAM;AAAEI,UAAAA;AAAF,YAAeJ,IAArB;;AAEA,YAAII,QAAQ,YAAYY,aAAxB,EAA8B;AAC5BQ,UAAAA,QAAQ,CAACN,IAAT,CAAcd,QAAd;AACD;;AAED,eAAOoB,QAAP;AACD,OATI,EASF,EATE,CAAP;AADuB;AAWxB;;AAEKC,EAAAA,cAAN,GAAqC;AAAA;;AAAA;AACnC,aAAO,MAAI,CAACvB,KAAL,CACJqB,MADI,CACG,CAACC,QAAD,EAAyBxB,IAAzB,KAA0C;AAChD,cAAM;AAAEI,UAAAA;AAAF,YAAeJ,IAArB;;AAEA,YAAII,QAAQ,YAAYsB,mBAAxB,EAAoC;AAClCF,UAAAA,QAAQ,CAACN,IAAT,CAAcd,QAAd;AACD;;AAED,eAAOoB,QAAP;AACD,OATI,EASF,EATE,CAAP;AADmC;AAWpC;;AAEKG,EAAAA,SAAN,CAAgBd,IAAhB,EAAsC;AAAA;;AAAA;AACpC,UAAIA,IAAI,IAAI,MAAI,CAACX,KAAL,CAAWW,IAAX,CAAZ,EAA8B;AAC5B,cAAMe,aAAa,GAAG,MAAI,CAAC1B,KAAL,CAAWW,IAAX,EAAiBR,MAAvC;AAEA,eAAOuB,aAAa,CAACL,MAAd,CAAqB,CAACC,QAAD,EAAqBK,SAArB,KAA2C;AACrE,gBAAMjB,KAAK,GAAG,MAAI,CAACV,KAAL,CAAW2B,SAAX,CAAd;;AACA,cAAIjB,KAAJ,EAAW;AACTY,YAAAA,QAAQ,CAACN,IAAT,CAAcN,KAAK,CAACR,QAApB;AACD;;AAED,iBAAOoB,QAAP;AACD,SAPM,EAOJ,EAPI,CAAP;AAQD;;AAED,aAAO,EAAP;AAdoC;AAerC;;AAlIyC","sourcesContent":["// @flow\nimport Storage from './Storage';\nimport Permission from './Permission';\nimport Role from './Role';\nimport Base from './Base';\n\nexport default class Memory extends Storage {\n  items: Object[] = {};\n\n  async add(item: Base): boolean {\n    const { name } = item;\n    if (this.items[name]) {\n      throw new Error(`Item ${name} already exists`);\n    }\n\n    this.items[name] = {\n      instance: item,\n      grants: [],\n    };\n\n    return true;\n  }\n\n  async remove(item: Base): boolean {\n    const { items } = this;\n    const { name } = item;\n    if (!items[name]) {\n      throw new Error(`Item ${name} is not presented in storage`);\n    }\n\n    // revoke from all instances\n    Object.keys(items).forEach((itemName: string) => {\n      const { grants } = items[itemName];\n      items[itemName].grants = grants.filter(grant => grant !== name);\n    });\n\n    // delete from items\n    delete this.items[name];\n    return true;\n  }\n\n  async grant(role: Role, child: Base): boolean {\n    const { name } = role;\n    const { name: childName } = child;\n\n    if (!this.items[name]) {\n      throw new Error(`Role ${name} is not exist`);\n    }\n\n    if (!this.items[childName]) {\n      throw new Error(`Base ${childName} is not exist`);\n    }\n\n    if (!(role instanceof Role)) {\n      throw new Error('Role is not instance of Role');\n    }\n\n    if (name === childName) {\n      throw new Error(`You can grant yourself ${name}`);\n    }\n\n    const { grants } = this.items[name];\n    if (!grants.includes(childName)) {\n      grants.push(childName);\n    }\n\n    return true;\n  }\n\n  async revoke(role: Role, child: Base): boolean {\n    const { name } = role;\n    const { name: childName } = child;\n\n    if (!this.items[name] || !this.items[childName]) {\n      throw new Error('Role is not exist');\n    }\n\n    const { grants } = this.items[name];\n    if (!grants.includes(childName)) {\n      throw new Error('Item is not associated to this item');\n    }\n\n    this.items[name].grants = grants.filter(grant => grant !== childName);\n\n    return true;\n  }\n\n  async get(name: string): ?Base {\n    if (name && this.items[name]) {\n      return this.items[name].instance;\n    }\n\n    return undefined;\n  }\n\n  async getRoles(): Role[] {\n    return this.items\n      .reduce((filtered: Role[], item: Object) => {\n        const { instance } = item;\n\n        if (instance instanceof Role) {\n          filtered.push(instance);\n        }\n\n        return filtered;\n      }, []);\n  }\n\n  async getPermissions(): Permission[] {\n    return this.items\n      .reduce((filtered: Permission[], item: Object) => {\n        const { instance } = item;\n\n        if (instance instanceof Permission) {\n          filtered.push(instance);\n        }\n\n        return filtered;\n      }, []);\n  }\n\n  async getGrants(role: string): Base[] {\n    if (role && this.items[role]) {\n      const currentGrants = this.items[role].grants;\n\n      return currentGrants.reduce((filtered: Object[], grantName: string) => {\n        const grant = this.items[grantName];\n        if (grant) {\n          filtered.push(grant.instance);\n        }\n\n        return filtered;\n      }, []);\n    }\n\n    return [];\n  }\n}\n"],"file":"Memory.js"}
+{"version":3,"file":"Memory.js","names":["_Storage","_interopRequireDefault","require","_Permission","_Role","_Base","e","__esModule","default","Memory","Storage","items","add","item","name","Error","instance","grants","remove","Object","keys","forEach","itemName","filter","grant","role","child","childName","Role","includes","push","revoke","get","undefined","getRoles","reduce","filtered","getPermissions","Permission","getGrants","currentGrants","grantName","exports"],"sources":["../src/Memory.js"],"sourcesContent":["// @flow\nimport Storage from './Storage';\nimport Permission from './Permission';\nimport Role from './Role';\nimport Base from './Base';\n\nexport default class Memory extends Storage {\n  items: Object[] = {};\n\n  async add(item: Base): boolean {\n    const { name } = item;\n    if (this.items[name]) {\n      throw new Error(`Item ${name} already exists`);\n    }\n\n    this.items[name] = {\n      instance: item,\n      grants: [],\n    };\n\n    return true;\n  }\n\n  async remove(item: Base): boolean {\n    const { items } = this;\n    const { name } = item;\n    if (!items[name]) {\n      throw new Error(`Item ${name} is not presented in storage`);\n    }\n\n    // revoke from all instances\n    Object.keys(items).forEach((itemName: string) => {\n      const { grants } = items[itemName];\n      items[itemName].grants = grants.filter(grant => grant !== name);\n    });\n\n    // delete from items\n    delete this.items[name];\n    return true;\n  }\n\n  async grant(role: Role, child: Base): boolean {\n    const { name } = role;\n    const { name: childName } = child;\n\n    if (!this.items[name]) {\n      throw new Error(`Role ${name} is not exist`);\n    }\n\n    if (!this.items[childName]) {\n      throw new Error(`Base ${childName} is not exist`);\n    }\n\n    if (!(role instanceof Role)) {\n      throw new Error('Role is not instance of Role');\n    }\n\n    if (name === childName) {\n      throw new Error(`You can grant yourself ${name}`);\n    }\n\n    const { grants } = this.items[name];\n    if (!grants.includes(childName)) {\n      grants.push(childName);\n    }\n\n    return true;\n  }\n\n  async revoke(role: Role, child: Base): boolean {\n    const { name } = role;\n    const { name: childName } = child;\n\n    if (!this.items[name] || !this.items[childName]) {\n      throw new Error('Role is not exist');\n    }\n\n    const { grants } = this.items[name];\n    if (!grants.includes(childName)) {\n      throw new Error('Item is not associated to this item');\n    }\n\n    this.items[name].grants = grants.filter(grant => grant !== childName);\n\n    return true;\n  }\n\n  async get(name: string): ?Base {\n    if (name && this.items[name]) {\n      return this.items[name].instance;\n    }\n\n    return undefined;\n  }\n\n  async getRoles(): Role[] {\n    return this.items\n      .reduce((filtered: Role[], item: Object) => {\n        const { instance } = item;\n\n        if (instance instanceof Role) {\n          filtered.push(instance);\n        }\n\n        return filtered;\n      }, []);\n  }\n\n  async getPermissions(): Permission[] {\n    return this.items\n      .reduce((filtered: Permission[], item: Object) => {\n        const { instance } = item;\n\n        if (instance instanceof Permission) {\n          filtered.push(instance);\n        }\n\n        return filtered;\n      }, []);\n  }\n\n  async getGrants(role: string): Base[] {\n    if (role && this.items[role]) {\n      const currentGrants = this.items[role].grants;\n\n      return currentGrants.reduce((filtered: Object[], grantName: string) => {\n        const grant = this.items[grantName];\n        if (grant) {\n          filtered.push(grant.instance);\n        }\n\n        return filtered;\n      }, []);\n    }\n\n    return [];\n  }\n}\n"],"mappings":";;;;;;AACA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,KAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,KAAA,GAAAJ,sBAAA,CAAAC,OAAA;AAA0B,SAAAD,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEX,MAAMG,MAAM,SAASC,gBAAO,CAAC;EAC1CC,KAAK,GAAa,CAAC,CAAC;EAEpB,MAAMC,GAAGA,CAACC,IAAU,EAAW;IAC7B,MAAM;MAAEC;IAAK,CAAC,GAAGD,IAAI;IACrB,IAAI,IAAI,CAACF,KAAK,CAACG,IAAI,CAAC,EAAE;MACpB,MAAM,IAAIC,KAAK,CAAC,QAAQD,IAAI,iBAAiB,CAAC;IAChD;IAEA,IAAI,CAACH,KAAK,CAACG,IAAI,CAAC,GAAG;MACjBE,QAAQ,EAAEH,IAAI;MACdI,MAAM,EAAE;IACV,CAAC;IAED,OAAO,IAAI;EACb;EAEA,MAAMC,MAAMA,CAACL,IAAU,EAAW;IAChC,MAAM;MAAEF;IAAM,CAAC,GAAG,IAAI;IACtB,MAAM;MAAEG;IAAK,CAAC,GAAGD,IAAI;IACrB,IAAI,CAACF,KAAK,CAACG,IAAI,CAAC,EAAE;MAChB,MAAM,IAAIC,KAAK,CAAC,QAAQD,IAAI,8BAA8B,CAAC;IAC7D;;IAEA;IACAK,MAAM,CAACC,IAAI,CAACT,KAAK,CAAC,CAACU,OAAO,CAAEC,QAAgB,IAAK;MAC/C,MAAM;QAAEL;MAAO,CAAC,GAAGN,KAAK,CAACW,QAAQ,CAAC;MAClCX,KAAK,CAACW,QAAQ,CAAC,CAACL,MAAM,GAAGA,MAAM,CAACM,MAAM,CAACC,KAAK,IAAIA,KAAK,KAAKV,IAAI,CAAC;IACjE,CAAC,CAAC;;IAEF;IACA,OAAO,IAAI,CAACH,KAAK,CAACG,IAAI,CAAC;IACvB,OAAO,IAAI;EACb;EAEA,MAAMU,KAAKA,CAACC,IAAU,EAAEC,KAAW,EAAW;IAC5C,MAAM;MAAEZ;IAAK,CAAC,GAAGW,IAAI;IACrB,MAAM;MAAEX,IAAI,EAAEa;IAAU,CAAC,GAAGD,KAAK;IAEjC,IAAI,CAAC,IAAI,CAACf,KAAK,CAACG,IAAI,CAAC,EAAE;MACrB,MAAM,IAAIC,KAAK,CAAC,QAAQD,IAAI,eAAe,CAAC;IAC9C;IAEA,IAAI,CAAC,IAAI,CAACH,KAAK,CAACgB,SAAS,CAAC,EAAE;MAC1B,MAAM,IAAIZ,KAAK,CAAC,QAAQY,SAAS,eAAe,CAAC;IACnD;IAEA,IAAI,EAAEF,IAAI,YAAYG,aAAI,CAAC,EAAE;MAC3B,MAAM,IAAIb,KAAK,CAAC,8BAA8B,CAAC;IACjD;IAEA,IAAID,IAAI,KAAKa,SAAS,EAAE;MACtB,MAAM,IAAIZ,KAAK,CAAC,0BAA0BD,IAAI,EAAE,CAAC;IACnD;IAEA,MAAM;MAAEG;IAAO,CAAC,GAAG,IAAI,CAACN,KAAK,CAACG,IAAI,CAAC;IACnC,IAAI,CAACG,MAAM,CAACY,QAAQ,CAACF,SAAS,CAAC,EAAE;MAC/BV,MAAM,CAACa,IAAI,CAACH,SAAS,CAAC;IACxB;IAEA,OAAO,IAAI;EACb;EAEA,MAAMI,MAAMA,CAACN,IAAU,EAAEC,KAAW,EAAW;IAC7C,MAAM;MAAEZ;IAAK,CAAC,GAAGW,IAAI;IACrB,MAAM;MAAEX,IAAI,EAAEa;IAAU,CAAC,GAAGD,KAAK;IAEjC,IAAI,CAAC,IAAI,CAACf,KAAK,CAACG,IAAI,CAAC,IAAI,CAAC,IAAI,CAACH,KAAK,CAACgB,SAAS,CAAC,EAAE;MAC/C,MAAM,IAAIZ,KAAK,CAAC,mBAAmB,CAAC;IACtC;IAEA,MAAM;MAAEE;IAAO,CAAC,GAAG,IAAI,CAACN,KAAK,CAACG,IAAI,CAAC;IACnC,IAAI,CAACG,MAAM,CAACY,QAAQ,CAACF,SAAS,CAAC,EAAE;MAC/B,MAAM,IAAIZ,KAAK,CAAC,qCAAqC,CAAC;IACxD;IAEA,IAAI,CAACJ,KAAK,CAACG,IAAI,CAAC,CAACG,MAAM,GAAGA,MAAM,CAACM,MAAM,CAACC,KAAK,IAAIA,KAAK,KAAKG,SAAS,CAAC;IAErE,OAAO,IAAI;EACb;EAEA,MAAMK,GAAGA,CAAClB,IAAY,EAAS;IAC7B,IAAIA,IAAI,IAAI,IAAI,CAACH,KAAK,CAACG,IAAI,CAAC,EAAE;MAC5B,OAAO,IAAI,CAACH,KAAK,CAACG,IAAI,CAAC,CAACE,QAAQ;IAClC;IAEA,OAAOiB,SAAS;EAClB;EAEA,MAAMC,QAAQA,CAAA,EAAW;IACvB,OAAO,IAAI,CAACvB,KAAK,CACdwB,MAAM,CAAC,CAACC,QAAgB,EAAEvB,IAAY,KAAK;MAC1C,MAAM;QAAEG;MAAS,CAAC,GAAGH,IAAI;MAEzB,IAAIG,QAAQ,YAAYY,aAAI,EAAE;QAC5BQ,QAAQ,CAACN,IAAI,CAACd,QAAQ,CAAC;MACzB;MAEA,OAAOoB,QAAQ;IACjB,CAAC,EAAE,EAAE,CAAC;EACV;EAEA,MAAMC,cAAcA,CAAA,EAAiB;IACnC,OAAO,IAAI,CAAC1B,KAAK,CACdwB,MAAM,CAAC,CAACC,QAAsB,EAAEvB,IAAY,KAAK;MAChD,MAAM;QAAEG;MAAS,CAAC,GAAGH,IAAI;MAEzB,IAAIG,QAAQ,YAAYsB,mBAAU,EAAE;QAClCF,QAAQ,CAACN,IAAI,CAACd,QAAQ,CAAC;MACzB;MAEA,OAAOoB,QAAQ;IACjB,CAAC,EAAE,EAAE,CAAC;EACV;EAEA,MAAMG,SAASA,CAACd,IAAY,EAAU;IACpC,IAAIA,IAAI,IAAI,IAAI,CAACd,KAAK,CAACc,IAAI,CAAC,EAAE;MAC5B,MAAMe,aAAa,GAAG,IAAI,CAAC7B,KAAK,CAACc,IAAI,CAAC,CAACR,MAAM;MAE7C,OAAOuB,aAAa,CAACL,MAAM,CAAC,CAACC,QAAkB,EAAEK,SAAiB,KAAK;QACrE,MAAMjB,KAAK,GAAG,IAAI,CAACb,KAAK,CAAC8B,SAAS,CAAC;QACnC,IAAIjB,KAAK,EAAE;UACTY,QAAQ,CAACN,IAAI,CAACN,KAAK,CAACR,QAAQ,CAAC;QAC/B;QAEA,OAAOoB,QAAQ;MACjB,CAAC,EAAE,EAAE,CAAC;IACR;IAEA,OAAO,EAAE;EACX;AACF;AAACM,OAAA,CAAAlC,OAAA,GAAAC,MAAA","ignoreList":[]}