vona-module-a-permission 5.1.13 → 5.1.14

package/dist/.metadata/index.d.ts

@@ -49,27 +49,38 @@ declare module 'vona-module-a-event' {
 }
 /** event: end */
 /** summerCache: begin */
-export * from '../bean/summerCache.permission.ts';
+export * from '../bean/summerCache.permissionActionByRoles.ts';
+export * from '../bean/summerCache.permissionUser.ts';
 import { type IDecoratorSummerCacheOptions } from 'vona-module-a-summer';
 declare module 'vona-module-a-summer' {
     interface ISummerCacheRecord {
-        'a-permission:permission': IDecoratorSummerCacheOptions;
+        'a-permission:permissionActionByRoles': IDecoratorSummerCacheOptions;
+        'a-permission:permissionUser': IDecoratorSummerCacheOptions;
     }
 }
 declare module 'vona-module-a-permission' {
-    interface SummerCachePermission {
+    interface SummerCachePermissionActionByRoles {
     }
-    interface SummerCachePermission {
-        get $beanFullName(): 'a-permission.summerCache.permission';
-        get $onionName(): 'a-permission:permission';
+    interface SummerCachePermissionActionByRoles {
+        get $beanFullName(): 'a-permission.summerCache.permissionActionByRoles';
+        get $onionName(): 'a-permission:permissionActionByRoles';
+        get $onionOptions(): IDecoratorSummerCacheOptions;
+    }
+    interface SummerCachePermissionUser {
+    }
+    interface SummerCachePermissionUser {
+        get $beanFullName(): 'a-permission.summerCache.permissionUser';
+        get $onionName(): 'a-permission:permissionUser';
         get $onionOptions(): IDecoratorSummerCacheOptions;
     }
 }
 /** summerCache: end */
 /** summerCache: begin */
-import type { SummerCachePermission } from '../bean/summerCache.permission.ts';
+import type { SummerCachePermissionActionByRoles } from '../bean/summerCache.permissionActionByRoles.ts';
+import type { SummerCachePermissionUser } from '../bean/summerCache.permissionUser.ts';
 export interface IModuleSummerCache {
-    'permission': SummerCachePermission;
+    'permissionActionByRoles': SummerCachePermissionActionByRoles;
+    'permissionUser': SummerCachePermissionUser;
 }
 /** summerCache: end */
 /** dto: begin */

package/dist/.metadata/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/.metadata/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACrE,kBAAkB;AAClB,cAAc,4BAA4B,CAAC;AAE3C,OAAO,MAAM,CAAC;AACd,OAAO,QAAQ,MAAM,CAAC;CAGrB;AACD,OAAO,QAAQ,0BAA0B,CAAC;IAElC,UAAiB,cAAc;KAG9B;CACR;AACD,gBAAgB;AAChB,kBAAkB;AAClB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,MAAM,CAAC;AACd,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAiB,iBAAiB;QAChC,YAAY,EAAE,cAAc,CAAC;KAC9B;CACF;AACD,gBAAgB;AAChB,mBAAmB;AACnB,cAAc,sCAAsC,CAAC;AAErD,OAAO,MAAM,CAAC;AACd,OAAO,QAAQ,MAAM,CAAC;CAGrB;AACD,OAAO,QAAQ,0BAA0B,CAAC;IAElC,UAAiB,wBAAwB;KAGxC;IAEC,UAAiB,wBAAwB;QACvC,IAAI,aAAa,IAAI,wCAAwC,CAAC;QAC9D,IAAI,UAAU,IAAI,kCAAkC,CAAC;KAEtD;CACV;AACD,iBAAiB;AACjB,mBAAmB;AACnB,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AACrF,MAAM,WAAW,YAAY;IAC3B,qBAAqB,EAAE,wBAAwB,CAAC;CACjD;AACD,iBAAiB;AACjB,mBAAmB;AACnB,OAAO,KAAK,EAAE,gCAAgC,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AACjI,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAiB,YAAY;QAC3B,kCAAkC,EAAE,OAAO,CAAC,gCAAgC,EAAE,kCAAkC,CAAC,CAAC;KACnH;CACF;AACD,iBAAiB;AACjB,yBAAyB;AACzB,cAAc,mCAAmC,CAAC;AAElD,OAAO,EAAE,KAAK,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,QAAQ,sBAAsB,CAAC;IAElC,UAAiB,kBAAkB;QACjC,yBAAyB,EAAE,4BAA4B,CAAC;KACzD;CAGJ;AACD,OAAO,QAAQ,0BAA0B,CAAC;IAElC,UAAiB,qBAAqB;KAGrC;IAEC,UAAiB,qBAAqB;QACpC,IAAI,aAAa,IAAI,qCAAqC,CAAC;QAC3D,IAAI,UAAU,IAAI,yBAAyB,CAAC;QAC5C,IAAI,aAAa,IAAI,4BAA4B,CAAC;KACnD;CACV;AACD,uBAAuB;AACvB,yBAAyB;AACzB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,qBAAqB,CAAC;CACrC;AACD,uBAAuB;AACvB,iBAAiB;AACjB,cAAc,wBAAwB,CAAC;AACvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,mBAAmB,CAAC;AAC3B,OAAO,QAAQ,mBAAmB,CAAC;IAE/B,UAAiB,UAAU;QACzB,0BAA0B,EAAE,sBAAsB,CAAC;KACpD;CAGJ;AACD,OAAO,QAAQ,0BAA0B,CAAC;CAEzC;AACD,eAAe;AACf,iBAAiB;AACjB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,QAAQ,0BAA0B,CAAC;IAEtC,UAAiB,sBAAsB;QACrC,MAAM,CAAC,EAAE,uBAAuB,CAAC,cAAc,EAAE,sBAAsB,CAAC,uBAAuB,CAAC,CAAC,CAAC;KACnG;CACJ;AACD,eAAe;AACf,oBAAoB;AACpB,cAAc,qBAAqB,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,kBAAkB;AAClB,mBAAmB;AACnB,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,MAAM,CAAC;AAGhF,qBACa,sBAAuB,SAAQ,aAAa;CAAG;AAE5D,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC,OAAO,MAAM,CAAC,CAAC;IACxC,KAAK,EAAE,YAAY,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;CAC/B;AAED,OAAO,MAAM,CAAC;AACd,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAiB,gBAAgB;QAC/B,cAAc,EAAE,sBAAsB,CAAC;KACxC;IAED,UAAiB,mBAAmB;QAClC,UAAU,EAAE,sBAAsB,CAAC;KACpC;IAED,UAAiB,gBAAgB;QAC/B,cAAc,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,CAAC;KAC3C;CAKF;AACD,iBAAiB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/.metadata/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACrE,kBAAkB;AAClB,cAAc,4BAA4B,CAAC;AAE3C,OAAO,MAAM,CAAC;AACd,OAAO,QAAQ,MAAM,CAAC;CAGrB;AACD,OAAO,QAAQ,0BAA0B,CAAC;IAElC,UAAiB,cAAc;KAG9B;CACR;AACD,gBAAgB;AAChB,kBAAkB;AAClB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,MAAM,CAAC;AACd,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAiB,iBAAiB;QAChC,YAAY,EAAE,cAAc,CAAC;KAC9B;CACF;AACD,gBAAgB;AAChB,mBAAmB;AACnB,cAAc,sCAAsC,CAAC;AAErD,OAAO,MAAM,CAAC;AACd,OAAO,QAAQ,MAAM,CAAC;CAGrB;AACD,OAAO,QAAQ,0BAA0B,CAAC;IAElC,UAAiB,wBAAwB;KAGxC;IAEC,UAAiB,wBAAwB;QACvC,IAAI,aAAa,IAAI,wCAAwC,CAAC;QAC9D,IAAI,UAAU,IAAI,kCAAkC,CAAC;KAEtD;CACV;AACD,iBAAiB;AACjB,mBAAmB;AACnB,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AACrF,MAAM,WAAW,YAAY;IAC3B,qBAAqB,EAAE,wBAAwB,CAAC;CACjD;AACD,iBAAiB;AACjB,mBAAmB;AACnB,OAAO,KAAK,EAAE,gCAAgC,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AACjI,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAiB,YAAY;QAC3B,kCAAkC,EAAE,OAAO,CAAC,gCAAgC,EAAE,kCAAkC,CAAC,CAAC;KACnH;CACF;AACD,iBAAiB;AACjB,yBAAyB;AACzB,cAAc,gDAAgD,CAAC;AAC/D,cAAc,uCAAuC,CAAC;AAEtD,OAAO,EAAE,KAAK,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,QAAQ,sBAAsB,CAAC;IAElC,UAAiB,kBAAkB;QACjC,sCAAsC,EAAE,4BAA4B,CAAC;QAC3E,6BAA6B,EAAE,4BAA4B,CAAC;KACvD;CAGJ;AACD,OAAO,QAAQ,0BAA0B,CAAC;IAElC,UAAiB,kCAAkC;KAGlD;IAEC,UAAiB,kCAAkC;QACjD,IAAI,aAAa,IAAI,kDAAkD,CAAC;QACxE,IAAI,UAAU,IAAI,sCAAsC,CAAC;QACzD,IAAI,aAAa,IAAI,4BAA4B,CAAC;KACnD;IAEH,UAAiB,yBAAyB;KAGzC;IAEC,UAAiB,yBAAyB;QACxC,IAAI,aAAa,IAAI,yCAAyC,CAAC;QAC/D,IAAI,UAAU,IAAI,6BAA6B,CAAC;QAChD,IAAI,aAAa,IAAI,4BAA4B,CAAC;KACnD;CACV;AACD,uBAAuB;AACvB,yBAAyB;AACzB,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACzG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AACvF,MAAM,WAAW,kBAAkB;IACjC,yBAAyB,EAAE,kCAAkC,CAAC;IAChE,gBAAgB,EAAE,yBAAyB,CAAC;CAC3C;AACD,uBAAuB;AACvB,iBAAiB;AACjB,cAAc,wBAAwB,CAAC;AACvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,mBAAmB,CAAC;AAC3B,OAAO,QAAQ,mBAAmB,CAAC;IAE/B,UAAiB,UAAU;QACzB,0BAA0B,EAAE,sBAAsB,CAAC;KACpD;CAGJ;AACD,OAAO,QAAQ,0BAA0B,CAAC;CAEzC;AACD,eAAe;AACf,iBAAiB;AACjB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,QAAQ,0BAA0B,CAAC;IAEtC,UAAiB,sBAAsB;QACrC,MAAM,CAAC,EAAE,uBAAuB,CAAC,cAAc,EAAE,sBAAsB,CAAC,uBAAuB,CAAC,CAAC,CAAC;KACnG;CACJ;AACD,eAAe;AACf,oBAAoB;AACpB,cAAc,qBAAqB,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,kBAAkB;AAClB,mBAAmB;AACnB,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,MAAM,CAAC;AAGhF,qBACa,sBAAuB,SAAQ,aAAa;CAAG;AAE5D,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC,OAAO,MAAM,CAAC,CAAC;IACxC,KAAK,EAAE,YAAY,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;CAC/B;AAED,OAAO,MAAM,CAAC;AACd,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAiB,gBAAgB;QAC/B,cAAc,EAAE,sBAAsB,CAAC;KACxC;IAED,UAAiB,mBAAmB;QAClC,UAAU,EAAE,sBAAsB,CAAC;KACpC;IAED,UAAiB,gBAAgB;QAC/B,cAAc,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,CAAC;KAC3C;CAKF;AACD,iBAAiB"}

package/dist/bean/bean.permission.d.ts

@@ -4,18 +4,19 @@ import { BeanBase } from 'vona';
 export declare class BeanPermission extends BeanBase {
     clearAllCaches(): Promise<void>;
     protected retrievePermissionsCacheKey(info: ICachingActionKeyInfo): string;
-    protected retrievePermissionsDefaultCacheKey(info: ICachingActionKeyInfo): string;
+    protected retrievePermissionActionCacheKey(info: ICachingActionKeyInfo): string;
     retrievePermissions(resource: keyof IResourceRecord): Promise<IOpenapiPermissions>;
     protected retrievePermissionsDefault(resource: keyof IResourceRecord): Promise<IOpenapiPermissions>;
     getPermissionsDefault(resource: keyof IResourceRecord): Promise<IOpenapiPermissions>;
-    private _buildPermissionProfileKey;
-    private _extractCurrentRoleNames;
-    private _getPermissionOfActionByMetadata;
-    private _evaluatePassportGuardsStatically;
-    private _hasUnknownGuard;
-    private _hasDynamicUserNameGuard;
+    retrievePermissionAction(resource: keyof IResourceRecord, actionKey: string): Promise<boolean>;
+    protected retrievePermissionActionByRoles(resource: keyof IResourceRecord, actionKey: string): Promise<boolean>;
+    private _getRoutePathInfo;
+    private _getControllerRoutes;
+    private _getControllerActionRoute;
+    private _extractCurrentRoleIdsSorted;
+    private _matchPassportMeta;
     private _getPassportOptions;
     private _matchPassportOptions;
-    private _matchRoleNameOptions;
+    private _evaluatePermissionAction;
 }
 //# sourceMappingURL=bean.permission.d.ts.map

package/dist/bean/bean.permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bean.permission.d.ts","sourceRoot":"","sources":["../../src/bean/bean.permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAEV,mBAAmB,EACnB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAA4B,QAAQ,EAA6B,MAAM,MAAM,CAAC;AAsBrF,qBACa,cAAe,SAAQ,QAAQ;IAC7B,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5C,SAAS,CAAC,2BAA2B,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM;IAM1E,SAAS,CAAC,kCAAkC,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM;IAK3E,mBAAmB,CAAC,QAAQ,EAAE,MAAM,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;cAUxE,0BAA0B,CACxC,QAAQ,EAAE,MAAM,eAAe,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAIzB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAyB1F,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,gCAAgC;IAKxC,OAAO,CAAC,iCAAiC;IAYzC,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,wBAAwB;IAIhC,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,qBAAqB;CAS9B"}
+{"version":3,"file":"bean.permission.d.ts","sourceRoot":"","sources":["../../src/bean/bean.permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAEV,mBAAmB,EACnB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAAe,QAAQ,EAA6B,MAAM,MAAM,CAAC;AAkBxE,qBACa,cAAe,SAAQ,QAAQ;IAC7B,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5C,SAAS,CAAC,2BAA2B,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM;IAM1E,SAAS,CAAC,gCAAgC,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM;IAUzE,mBAAmB,CAAC,QAAQ,EAAE,MAAM,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;cAMxE,0BAA0B,CACxC,QAAQ,EAAE,MAAM,eAAe,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAIzB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAe7E,wBAAwB,CACnC,QAAQ,EAAE,MAAM,eAAe,EAC/B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC;cAWH,+BAA+B,CAC7C,QAAQ,EAAE,MAAM,eAAe,EAC/B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC;IAMnB,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,4BAA4B;IAKpC,OAAO,CAAC,kBAAkB;IAK1B,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,qBAAqB;YAWf,yBAAyB;CAiBxC"}

package/dist/bean/summerCache.permissionActionByRoles.d.ts

@@ -0,0 +1,8 @@
+import type { ISummerCacheGet, TSummerCacheActionOptions } from 'vona-module-a-summer';
+import { ServiceSummerCacheBase } from 'vona-module-a-summer';
+export type TSummerCachePermissionActionByRolesKey = any;
+export type TSummerCachePermissionActionByRolesData = any;
+export declare class SummerCachePermissionActionByRoles extends ServiceSummerCacheBase<TSummerCachePermissionActionByRolesKey, TSummerCachePermissionActionByRolesData> implements ISummerCacheGet<TSummerCachePermissionActionByRolesKey, TSummerCachePermissionActionByRolesData> {
+    getNative(_key?: TSummerCachePermissionActionByRolesKey, _options?: TSummerCacheActionOptions<TSummerCachePermissionActionByRolesKey, TSummerCachePermissionActionByRolesData>): Promise<TSummerCachePermissionActionByRolesData | undefined>;
+}
+//# sourceMappingURL=summerCache.permissionActionByRoles.d.ts.map

package/dist/bean/summerCache.permissionActionByRoles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summerCache.permissionActionByRoles.d.ts","sourceRoot":"","sources":["../../src/bean/summerCache.permissionActionByRoles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,EAAE,sBAAsB,EAAe,MAAM,sBAAsB,CAAC;AAE3E,MAAM,MAAM,sCAAsC,GAAG,GAAG,CAAC;AACzD,MAAM,MAAM,uCAAuC,GAAG,GAAG,CAAC;AAE1D,qBACa,kCACX,SAAQ,sBAAsB,CAC5B,sCAAsC,EACtC,uCAAuC,CAEzC,YACE,eAAe,CACb,sCAAsC,EACtC,uCAAuC,CACxC;IAEG,SAAS,CACb,IAAI,CAAC,EAAE,sCAAsC,EAC7C,QAAQ,CAAC,EAAE,yBAAyB,CAClC,sCAAsC,EACtC,uCAAuC,CACxC,GACA,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC;CAChE"}

package/dist/bean/summerCache.permissionUser.d.ts

@@ -0,0 +1,8 @@
+import type { ISummerCacheGet, TSummerCacheActionOptions } from 'vona-module-a-summer';
+import { ServiceSummerCacheBase } from 'vona-module-a-summer';
+export type TSummerCachePermissionUserKey = any;
+export type TSummerCachePermissionUserData = any;
+export declare class SummerCachePermissionUser extends ServiceSummerCacheBase<TSummerCachePermissionUserKey, TSummerCachePermissionUserData> implements ISummerCacheGet<TSummerCachePermissionUserKey, TSummerCachePermissionUserData> {
+    getNative(_key?: TSummerCachePermissionUserKey, _options?: TSummerCacheActionOptions<TSummerCachePermissionUserKey, TSummerCachePermissionUserData>): Promise<TSummerCachePermissionUserData | undefined>;
+}
+//# sourceMappingURL=summerCache.permissionUser.d.ts.map

package/dist/bean/summerCache.permissionUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summerCache.permissionUser.d.ts","sourceRoot":"","sources":["../../src/bean/summerCache.permissionUser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,EAAE,sBAAsB,EAAe,MAAM,sBAAsB,CAAC;AAE3E,MAAM,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAChD,MAAM,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAEjD,qBACa,yBACX,SAAQ,sBAAsB,CAAC,6BAA6B,EAAE,8BAA8B,CAC5F,YAAW,eAAe,CAAC,6BAA6B,EAAE,8BAA8B,CAAC;IAEnF,SAAS,CACb,IAAI,CAAC,EAAE,6BAA6B,EACpC,QAAQ,CAAC,EAAE,yBAAyB,CAClC,6BAA6B,EAC7B,8BAA8B,CAC/B,GACA,OAAO,CAAC,8BAA8B,GAAG,SAAS,CAAC;CACvD"}

package/dist/index.js

@@ -1,18 +1,14 @@
-import { beanFullNameFromOnionName, BeanInfo, BeanBase, appResource, appMetadata, BeanScopeBase } from 'vona';
+import { beanFullNameFromOnionName, BeanInfo, BeanBase, appResource, BeanScopeBase } from 'vona';
 import { __decorate, __metadata } from 'tslib';
 import { Bean, Scope } from 'vona-module-a-bean';
 import { Caching } from 'vona-module-a-caching';
-import { SymbolUseOnionOptionsRouteReal } from 'vona-module-a-onion';
-import { recordResourceNameToRoutePath, Dto } from 'vona-module-a-web';
+import { recordResourceNameToRoutePath, getCacheControllerRoutes, composeGuards, Dto } from 'vona-module-a-web';
 import { Event, BeanEventBase } from 'vona-module-a-event';
 import { SummerCache, ServiceSummerCacheBase } from 'vona-module-a-summer';
 import { Api, v } from 'vona-module-a-openapiutils';
 import z from 'zod';
 
 const BeanFullNameGuardPassport = beanFullNameFromOnionName('a-user:passport', 'guard');
-const BeanFullNameGuardRoleName = beanFullNameFromOnionName('a-user:roleName', 'guard');
-const BeanFullNameGuardUserName = beanFullNameFromOnionName('a-user:userName', 'guard');
-const BeanFullNamesGuardSupported = new Set([BeanFullNameGuardPassport, BeanFullNameGuardRoleName, BeanFullNameGuardUserName]);
 const GuardOptionsPassportDefault = {
   public: false,
   activated: true,
@@ -20,16 +16,20 @@ const GuardOptionsPassportDefault = {
 };
 let BeanPermission = class BeanPermission extends BeanBase {
   async clearAllCaches() {
-    const cachePermission = this.bean.summer.cache(beanFullNameFromOnionName('a-permission:permission', 'summerCache'));
-    await cachePermission.clear();
+    const cachePermissionUser = this.bean.summer.cache(beanFullNameFromOnionName('a-permission:permissionUser', 'summerCache'));
+    const cachePermissionActionByRoles = this.bean.summer.cache(beanFullNameFromOnionName('a-permission:permissionActionByRoles', 'summerCache'));
+    await cachePermissionUser.clear();
+    await cachePermissionActionByRoles.clear();
   }
   retrievePermissionsCacheKey(info) {
     const resource = info.args[0];
     const userId = this.ctx.passport.user?.id;
     return `user:${resource}_${userId}`;
   }
-  retrievePermissionsDefaultCacheKey(info) {
-    return `default:${this._buildPermissionProfileKey(info.args[0])}`;
+  retrievePermissionActionCacheKey(info) {
+    const [resource, actionKey] = info.args;
+    const roleIdsKey = this._extractCurrentRoleIdsSorted().join(',') || 'none';
+    return `action:${resource}:${actionKey}:roles:${roleIdsKey}`;
   }
   async retrievePermissions(resource) {
     return await this.scope.event.retrievePermissions.emit({
@@ -42,52 +42,49 @@ let BeanPermission = class BeanPermission extends BeanBase {
     return await this.getPermissionsDefault(resource);
   }
   async getPermissionsDefault(resource) {
-    const routePathInfo = recordResourceNameToRoutePath[resource];
-    if (!routePathInfo) throw new Error(`not found routePath of resource: ${resource}`);
-    const controller = routePathInfo.controller;
-    if (!appResource.getBean(controller)) throw new Error('invalid controller');
-    const descs = Object.getOwnPropertyDescriptors(controller.prototype);
     const actionsIgnore = this.scope.config.permission.actionsIgnore;
-    const actionKeys = Object.keys(descs).filter(actionKey => actionKey !== 'constructor' && !actionsIgnore.includes(actionKey));
+    const actionRoutes = this._getControllerRoutes(resource).filter(route => !actionsIgnore.includes(route.action));
     const permissionsActions = {};
-    for (const actionKey of actionKeys) {
-      const desc = descs[actionKey];
-      if (!desc.value || typeof desc.value !== 'function') continue;
-      const routeReal = appMetadata.getMetadata(SymbolUseOnionOptionsRouteReal, controller.prototype, actionKey);
-      permissionsActions[actionKey] = this._getPermissionOfActionByMetadata(routeReal);
+    for (const route of actionRoutes) {
+      permissionsActions[route.action] = await this.retrievePermissionAction(resource, route.action);
     }
     return {
       actions: permissionsActions
     };
   }
-  _buildPermissionProfileKey(resource) {
-    if (!this.bean.passport.isAuthenticated) return `${resource}__anon`;
-    const activated = this.bean.passport.isActivated ? 1 : 0;
-    const roleNames = this._extractCurrentRoleNames();
-    return `${resource}__auth__act:${activated}__roles:${roleNames.join(',')}`;
+  async retrievePermissionAction(resource, actionKey) {
+    const route = this._getControllerActionRoute(resource, actionKey);
+    if (!route?.route?.meta) return false;
+    if (!this._matchPassportMeta(route.route.meta)) return false;
+    return await this.retrievePermissionActionByRoles(resource, actionKey);
   }
-  _extractCurrentRoleNames() {
-    const roleNames = this.bean.passport.currentRoles?.map(item => item.name) ?? [];
-    return Array.from(new Set(roleNames)).sort();
+  async retrievePermissionActionByRoles(resource, actionKey) {
+    const route = this._getControllerActionRoute(resource, actionKey);
+    if (!route?.route?.meta) return false;
+    return await this._evaluatePermissionAction(route);
   }
-  _getPermissionOfActionByMetadata(routeReal) {
-    if (!routeReal?.meta) return false;
-    return this._evaluatePassportGuardsStatically(routeReal.meta);
+  _getRoutePathInfo(resource) {
+    const routePathInfo = recordResourceNameToRoutePath[resource];
+    if (!routePathInfo) throw new Error(`not found routePath of resource: ${resource}`);
+    return routePathInfo;
   }
-  _evaluatePassportGuardsStatically(meta) {
-    if (this._hasUnknownGuard(meta)) return false;
-    if (this._hasDynamicUserNameGuard(meta)) return false;
-    const passportOptions = this._getPassportOptions(meta);
-    if (!this._matchPassportOptions(passportOptions)) return false;
-    const roleNameOptions = meta[BeanFullNameGuardRoleName];
-    if (!this._matchRoleNameOptions(roleNameOptions)) return false;
-    return true;
+  _getControllerRoutes(resource) {
+    const routePathInfo = this._getRoutePathInfo(resource);
+    const controller = routePathInfo.controller;
+    const beanOptions = appResource.getBean(controller);
+    if (!beanOptions) throw new Error('invalid controller');
+    return getCacheControllerRoutes(this.app)[beanOptions.beanFullName] ?? [];
   }
-  _hasUnknownGuard(meta) {
-    return Object.keys(meta).some(key => key.includes('.guard.') && !BeanFullNamesGuardSupported.has(key));
+  _getControllerActionRoute(resource, actionKey) {
+    return this._getControllerRoutes(resource).find(route => route.action === actionKey);
   }
-  _hasDynamicUserNameGuard(meta) {
-    return BeanFullNameGuardUserName in meta;
+  _extractCurrentRoleIdsSorted() {
+    const roleIds = this.bean.passport.currentRoles?.map(item => String(item.id)) ?? [];
+    return Array.from(new Set(roleIds)).sort();
+  }
+  _matchPassportMeta(meta) {
+    const passportOptions = this._getPassportOptions(meta);
+    return this._matchPassportOptions(passportOptions);
   }
   _getPassportOptions(meta) {
     return {
@@ -103,24 +100,32 @@ let BeanPermission = class BeanPermission extends BeanBase {
     if (options.activated === false && this.bean.passport.isActivated) return false;
     return true;
   }
-  _matchRoleNameOptions(options) {
-    if (!options) return true;
-    if (!options.name) return false;
-    if (options.passWhenMatched === false) return false;
-    if (options.rejectWhenDismatched === false) return false;
-    const roleNamesCurrent = this._extractCurrentRoleNames();
-    const roleNamesRequired = Array.isArray(options.name) ? options.name : [options.name];
-    return roleNamesCurrent.some(roleName => roleNamesRequired.includes(roleName));
+  async _evaluatePermissionAction(route) {
+    const ctx = this.ctx;
+    const routePrevious = ctx.route;
+    const innerAccessPrevious = ctx.innerAccess;
+    try {
+      ctx.route = route;
+      ctx.innerAccess = false;
+      const result = await composeGuards(this.app, route)(this.ctx);
+      return result !== false;
+    } catch (err) {
+      if ([401, 403].includes(err?.code)) return false;
+      throw err;
+    } finally {
+      ctx.route = routePrevious;
+      ctx.innerAccess = innerAccessPrevious;
+    }
   }
 };
 __decorate([Caching.get({
-  cacheName: 'a-permission:permission',
+  cacheName: 'a-permission:permissionUser',
   cacheKeyFn: 'retrievePermissionsCacheKey'
 }), __metadata("design:type", Function), __metadata("design:paramtypes", [Object]), __metadata("design:returntype", Promise)], BeanPermission.prototype, "retrievePermissions", null);
 __decorate([Caching.get({
-  cacheName: 'a-permission:permission',
-  cacheKeyFn: 'retrievePermissionsDefaultCacheKey'
-}), __metadata("design:type", Function), __metadata("design:paramtypes", [Object]), __metadata("design:returntype", Promise)], BeanPermission.prototype, "retrievePermissionsDefault", null);
+  cacheName: 'a-permission:permissionActionByRoles',
+  cacheKeyFn: 'retrievePermissionActionCacheKey'
+}), __metadata("design:type", Function), __metadata("design:paramtypes", [Object, String]), __metadata("design:returntype", Promise)], BeanPermission.prototype, "retrievePermissionActionByRoles", null);
 BeanPermission = __decorate([Bean(), BeanInfo({
   module: "a-permission"
 })], BeanPermission);
@@ -130,14 +135,19 @@ EventRetrievePermissions = __decorate([Event(), BeanInfo({
   module: "a-permission"
 })], EventRetrievePermissions);
 
-let SummerCachePermission = class SummerCachePermission extends ServiceSummerCacheBase {
+let SummerCachePermissionActionByRoles = class SummerCachePermissionActionByRoles extends ServiceSummerCacheBase {
+  async getNative(_key, _options) {}
+};
+SummerCachePermissionActionByRoles = __decorate([SummerCache(), BeanInfo({
+  module: "a-permission"
+})], SummerCachePermissionActionByRoles);
+
+let SummerCachePermissionUser = class SummerCachePermissionUser extends ServiceSummerCacheBase {
   async getNative(_key, _options) {}
 };
-SummerCachePermission = __decorate([SummerCache({
-  preset: 'mem'
-}), BeanInfo({
+SummerCachePermissionUser = __decorate([SummerCache(), BeanInfo({
   module: "a-permission"
-})], SummerCachePermission);
+})], SummerCachePermissionUser);
 
 let DtoPermissions = class DtoPermissions {
   constructor() {
@@ -167,5 +177,5 @@ ScopeModuleAPermission = __decorate([Scope(), BeanInfo({
 })], ScopeModuleAPermission);
 /** scope: end */
 
-export { BeanPermission, DtoPermissions, EventRetrievePermissions, ScopeModuleAPermission, SummerCachePermission, config };
+export { BeanPermission, DtoPermissions, EventRetrievePermissions, ScopeModuleAPermission, SummerCachePermissionActionByRoles, SummerCachePermissionUser, config };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/bean/bean.permission.ts","../src/bean/event.retrievePermissions.ts","../src/bean/summerCache.permission.ts","../src/dto/permissions.tsx","../src/config/config.ts","../src/.metadata/index.ts"],"sourcesContent":[null,null,null,null,null,null],"names":["BeanFullNameGuardPassport","beanFullNameFromOnionName","BeanFullNameGuardRoleName","BeanFullNameGuardUserName","BeanFullNamesGuardSupported","Set","GuardOptionsPassportDefault","public","activated","checkAuthToken","BeanPermission","BeanBase","clearAllCaches","cachePermission","bean","summer","cache","clear","retrievePermissionsCacheKey","info","resource","args","userId","ctx","passport","user","id","retrievePermissionsDefaultCacheKey","_buildPermissionProfileKey","retrievePermissions","scope","event","emit","retrievePermissionsDefault","getPermissionsDefault","routePathInfo","recordResourceNameToRoutePath","Error","controller","appResource","getBean","descs","Object","getOwnPropertyDescriptors","prototype","actionsIgnore","config","permission","actionKeys","keys","filter","actionKey","includes","permissionsActions","desc","value","routeReal","appMetadata","getMetadata","SymbolUseOnionOptionsRouteReal","_getPermissionOfActionByMetadata","actions","isAuthenticated","isActivated","roleNames","_extractCurrentRoleNames","join","currentRoles","map","item","name","Array","from","sort","meta","_evaluatePassportGuardsStatically","_hasUnknownGuard","_hasDynamicUserNameGuard","passportOptions","_getPassportOptions","_matchPassportOptions","roleNameOptions","_matchRoleNameOptions","some","key","has","options","passWhenMatched","rejectWhenDismatched","roleNamesCurrent","roleNamesRequired","isArray","roleName","__decorate","Caching","get","cacheName","cacheKeyFn","Bean","__z_BeanInfo","module","EventRetrievePermissions","BeanEventBase","Event","SummerCachePermission","ServiceSummerCacheBase","getNative","_key","_options","SummerCache","preset","DtoPermissions","constructor","roleIds","Api","field","v","optional","array","tableIdentity","z","string","Dto","_app","ScopeModuleAPermission","BeanScopeBase","Scope"],"mappings":";;;;;;;;;;;AAeA,MAAMA,yBAAyB,GAAGC,yBAAyB,CAAC,iBAAiB,EAAE,OAAO,CAAC;AACvF,MAAMC,yBAAyB,GAAGD,yBAAyB,CAAC,iBAAiB,EAAE,OAAO,CAAC;AACvF,MAAME,yBAAyB,GAAGF,yBAAyB,CAAC,iBAAiB,EAAE,OAAO,CAAC;AACvF,MAAMG,2BAA2B,GAAG,IAAIC,GAAG,CAAS,CAClDL,yBAAyB,EACzBE,yBAAyB,EACzBC,yBAAyB,CAC1B,CAAC;AACF,MAAMG,2BAA2B,GAA0B;AACzDC,EAAAA,MAAM,EAAE,KAAK;AACbC,EAAAA,SAAS,EAAE,IAAI;AACfC,EAAAA,cAAc,EAAE;CACjB;AAKM,IAAMC,cAAc,GAApB,MAAMA,cAAe,SAAQC,QAAQ,CAAA;EACnC,MAAMC,cAAcA,GAAA;AACzB,IAAA,MAAMC,eAAe,GAAG,IAAI,CAACC,IAAI,CAACC,MAAM,CAACC,KAAK,CAC5Cf,yBAAyB,CAAC,yBAAyB,EAAE,aAAa,CAAC,CACpE;AACD,IAAA,MAAMY,eAAe,CAACI,KAAK,EAAE;AAC/B,EAAA;EAEUC,2BAA2BA,CAACC,IAA2B,EAAA;AAC/D,IAAA,MAAMC,QAAQ,GAAGD,IAAI,CAACE,IAAI,CAAC,CAAC,CAAC;IAC7B,MAAMC,MAAM,GAAG,IAAI,CAACC,GAAG,CAACC,QAAQ,CAACC,IAAI,EAAEC,EAAE;AACzC,IAAA,OAAO,CAAA,KAAA,EAAQN,QAAQ,CAAA,CAAA,EAAIE,MAAM,CAAA,CAAE;AACrC,EAAA;EAEUK,kCAAkCA,CAACR,IAA2B,EAAA;AACtE,IAAA,OAAO,CAAA,QAAA,EAAW,IAAI,CAACS,0BAA0B,CAACT,IAAI,CAACE,IAAI,CAAC,CAAC,CAAU,CAAC,CAAA,CAAE;AAC5E,EAAA;EAGA,MAAMQ,mBAAmBA,CAACT,QAA+B,EAAA;IACvD,OAAO,MAAM,IAAI,CAACU,KAAK,CAACC,KAAK,CAACF,mBAAmB,CAACG,IAAI,CAAC;AAAEZ,MAAAA;KAAU,EAAE,YAAW;AAC9E,MAAA,OAAO,MAAM,IAAI,CAACa,0BAA0B,CAACb,QAAQ,CAAC;AACxD,IAAA,CAAC,CAAC;AACJ,EAAA;EAMU,MAAMa,0BAA0BA,CACxCb,QAA+B,EAAA;AAE/B,IAAA,OAAO,MAAM,IAAI,CAACc,qBAAqB,CAACd,QAAQ,CAAC;AACnD,EAAA;EAEA,MAAMc,qBAAqBA,CAACd,QAA+B,EAAA;AACzD,IAAA,MAAMe,aAAa,GACjBC,6BAA6B,CAAChB,QAAQ,CAAC;IACzC,IAAI,CAACe,aAAa,EAAE,MAAM,IAAIE,KAAK,CAAC,CAAA,iCAAA,EAAoCjB,QAAQ,CAAA,CAAE,CAAC;AACnF,IAAA,MAAMkB,UAAU,GAAGH,aAAa,CAACG,UAAU;AAC3C,IAAA,IAAI,CAACC,WAAW,CAACC,OAAO,CAACF,UAAU,CAAC,EAAE,MAAM,IAAID,KAAK,CAAC,oBAAoB,CAAC;IAC3E,MAAMI,KAAK,GAAGC,MAAM,CAACC,yBAAyB,CAACL,UAAU,CAACM,SAAS,CAAC;IACpE,MAAMC,aAAa,GAAG,IAAI,CAACf,KAAK,CAACgB,MAAM,CAACC,UAAU,CAACF,aAAa;IAChE,MAAMG,UAAU,GAAGN,MAAM,CAACO,IAAI,CAACR,KAAK,CAAC,CAACS,MAAM,CAC1CC,SAAS,IAAIA,SAAS,KAAK,aAAa,IAAI,CAACN,aAAa,CAACO,QAAQ,CAACD,SAAS,CAAC,CAC/E;IACD,MAAME,kBAAkB,GAAwC,EAAE;AAClE,IAAA,KAAK,MAAMF,SAAS,IAAIH,UAAU,EAAE;AAClC,MAAA,MAAMM,IAAI,GAAGb,KAAK,CAACU,SAAS,CAAC;MAC7B,IAAI,CAACG,IAAI,CAACC,KAAK,IAAI,OAAOD,IAAI,CAACC,KAAK,KAAK,UAAU,EAAE;AACrD,MAAA,MAAMC,SAAS,GAAqCC,WAAW,CAACC,WAAW,CACzEC,8BAA8B,EAC9BrB,UAAU,CAACM,SAAS,EACpBO,SAAS,CACV;MACDE,kBAAkB,CAACF,SAAS,CAAC,GAAG,IAAI,CAACS,gCAAgC,CAACJ,SAAS,CAAC;AAClF,IAAA;IACA,OAAO;AAAEK,MAAAA,OAAO,EAAER;KAAoB;AACxC,EAAA;EAEQzB,0BAA0BA,CAACR,QAA+B,EAAA;AAChE,IAAA,IAAI,CAAC,IAAI,CAACN,IAAI,CAACU,QAAQ,CAACsC,eAAe,EAAE,OAAO,CAAA,EAAG1C,QAAQ,CAAA,MAAA,CAAQ;AACnE,IAAA,MAAMZ,SAAS,GAAG,IAAI,CAACM,IAAI,CAACU,QAAQ,CAACuC,WAAW,GAAG,CAAC,GAAG,CAAC;AACxD,IAAA,MAAMC,SAAS,GAAG,IAAI,CAACC,wBAAwB,EAAE;IACjD,OAAO,CAAA,EAAG7C,QAAQ,CAAA,YAAA,EAAeZ,SAAS,CAAA,QAAA,EAAWwD,SAAS,CAACE,IAAI,CAAC,GAAG,CAAC,CAAA,CAAE;AAC5E,EAAA;AAEQD,EAAAA,wBAAwBA,GAAA;AAC9B,IAAA,MAAMD,SAAS,GAAG,IAAI,CAAClD,IAAI,CAACU,QAAQ,CAAC2C,YAAY,EAAEC,GAAG,CAACC,IAAI,IAAIA,IAAI,CAACC,IAAI,CAAC,IAAI,EAAE;AAC/E,IAAA,OAAOC,KAAK,CAACC,IAAI,CAAC,IAAInE,GAAG,CAAC2D,SAAS,CAAC,CAAC,CAACS,IAAI,EAAE;AAC9C,EAAA;EAEQb,gCAAgCA,CAACJ,SAA2C,EAAA;AAClF,IAAA,IAAI,CAACA,SAAS,EAAEkB,IAAI,EAAE,OAAO,KAAK;AAClC,IAAA,OAAO,IAAI,CAACC,iCAAiC,CAACnB,SAAS,CAACkB,IAAI,CAAC;AAC/D,EAAA;EAEQC,iCAAiCA,CAACD,IAAgB,EAAA;IACxD,IAAI,IAAI,CAACE,gBAAgB,CAACF,IAAI,CAAC,EAAE,OAAO,KAAK;IAC7C,IAAI,IAAI,CAACG,wBAAwB,CAACH,IAAI,CAAC,EAAE,OAAO,KAAK;AACrD,IAAA,MAAMI,eAAe,GAAG,IAAI,CAACC,mBAAmB,CAACL,IAAI,CAAC;IACtD,IAAI,CAAC,IAAI,CAACM,qBAAqB,CAACF,eAAe,CAAC,EAAE,OAAO,KAAK;AAC9D,IAAA,MAAMG,eAAe,GAAGP,IAAI,CAACxE,yBAAyB,CAEzC;IACb,IAAI,CAAC,IAAI,CAACgF,qBAAqB,CAACD,eAAe,CAAC,EAAE,OAAO,KAAK;AAC9D,IAAA,OAAO,IAAI;AACb,EAAA;EAEQL,gBAAgBA,CAACF,IAAgB,EAAA;IACvC,OAAOhC,MAAM,CAACO,IAAI,CAACyB,IAAI,CAAC,CAACS,IAAI,CAC3BC,GAAG,IAAIA,GAAG,CAAChC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAChD,2BAA2B,CAACiF,GAAG,CAACD,GAAG,CAAC,CACxE;AACH,EAAA;EAEQP,wBAAwBA,CAACH,IAAgB,EAAA;IAC/C,OAAOvE,yBAAyB,IAAIuE,IAAI;AAC1C,EAAA;EAEQK,mBAAmBA,CAACL,IAAgB,EAAA;IAC1C,OAAO;AACL,MAAA,GAAGpE,2BAA2B;MAC9B,GAAIoE,IAAI,CAAC1E,yBAAyB;KACnC;AACH,EAAA;EAEQgF,qBAAqBA,CAC3BM,OAA4D,EAAA;IAE5D,MAAMxB,eAAe,GAAG,IAAI,CAAChD,IAAI,CAACU,QAAQ,CAACsC,eAAe;IAC1D,IAAI,CAACwB,OAAO,CAAC/E,MAAM,IAAI,CAACuD,eAAe,EAAE,OAAO,KAAK;AACrD,IAAA,IAAI,CAACA,eAAe,EAAE,OAAO,IAAI;AACjC,IAAA,IAAIwB,OAAO,CAAC9E,SAAS,KAAK,IAAI,IAAI,CAAC,IAAI,CAACM,IAAI,CAACU,QAAQ,CAACuC,WAAW,EAAE,OAAO,KAAK;AAC/E,IAAA,IAAIuB,OAAO,CAAC9E,SAAS,KAAK,KAAK,IAAI,IAAI,CAACM,IAAI,CAACU,QAAQ,CAACuC,WAAW,EAAE,OAAO,KAAK;AAC/E,IAAA,OAAO,IAAI;AACb,EAAA;EAEQmB,qBAAqBA,CAACI,OAAmD,EAAA;AAC/E,IAAA,IAAI,CAACA,OAAO,EAAE,OAAO,IAAI;AACzB,IAAA,IAAI,CAACA,OAAO,CAAChB,IAAI,EAAE,OAAO,KAAK;AAC/B,IAAA,IAAIgB,OAAO,CAACC,eAAe,KAAK,KAAK,EAAE,OAAO,KAAK;AACnD,IAAA,IAAID,OAAO,CAACE,oBAAoB,KAAK,KAAK,EAAE,OAAO,KAAK;AACxD,IAAA,MAAMC,gBAAgB,GAAG,IAAI,CAACxB,wBAAwB,EAAE;AACxD,IAAA,MAAMyB,iBAAiB,GAAGnB,KAAK,CAACoB,OAAO,CAACL,OAAO,CAAChB,IAAI,CAAC,GAAGgB,OAAO,CAAChB,IAAI,GAAG,CAACgB,OAAO,CAAChB,IAAI,CAAC;AACrF,IAAA,OAAOmB,gBAAgB,CAACN,IAAI,CAACS,QAAQ,IAAIF,iBAAiB,CAACtC,QAAQ,CAACwC,QAAe,CAAC,CAAC;AACvF,EAAA;;AA1GMC,UAAA,CAAA,CADLC,OAAO,CAACC,GAAG,CAAC;AAAEC,EAAAA,SAAS,EAAE,yBAAyB;AAAEC,EAAAA,UAAU,EAAE;AAA6B,CAAE,CAAC,2HAKhG,EAAAvF,cAAA,CAAAkC,SAAA,EAAA,qBAAA,EAAA,IAAA,CAAA;AAMeiD,UAAA,CAAA,CAJfC,OAAO,CAACC,GAAG,CAAC;AACXC,EAAAA,SAAS,EAAE,yBAAyB;AACpCC,EAAAA,UAAU,EAAE;CACb,CAAC,2HAKD,EAAAvF,cAAA,CAAAkC,SAAA,EAAA,4BAAA,EAAA,IAAA,CAAA;AAjCUlC,cAAc,GAAAmF,UAAA,CAAA,CAD1BK,IAAI,EAAE,EAAAC,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACM,EAAA1F,cAAc,CA8H1B;;ACnJM,IAAM2F,wBAAwB,GAA9B,MAAMA,wBAAyB,SAAQC,aAG7C,CAAA;AAHYD,wBAAwB,GAAAR,UAAA,CAAA,CADpCU,KAAK,EAAE,EAAAJ,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACK,EAAAC,wBAAwB,CAGjC;;ACNG,IAAMG,qBAAqB,GAA3B,MAAMA,qBACX,SAAQC,sBAA6E,CAAA;AAGrF,EAAA,MAAMC,SAASA,CACbC,IAAgC,EAChCC,QAA2F,GACzC;;AAPzCJ,qBAAqB,GAAAX,UAAA,CAAA,CADjCgB,WAAW,CAAC;AAAEC,EAAAA,MAAM,EAAE;CAAO,CAAC,EAAAX,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CAClB,EAAAI,qBAAqB,CAQjC;;ACFM,IAAMO,cAAc,GAApB,MAAMA,cAAc,CAAA;EAAAC,WAAAA,GAAA;AAAA,IAAA,IAAA,CAEzBC,OAAO,GAAA,MAAA;AAAA,IAAA,IAAA,CAGPjD,SAAS,GAAA,MAAA;AAAA,IAAA,IAAA,CAGTH,OAAO,GAAA,MAAA;AAAA,EAAA;;AANPgC,UAAA,CAAA,CADCqB,GAAG,CAACC,KAAK,CAACC,CAAC,CAACC,QAAQ,EAAE,EAAED,CAAC,CAACE,KAAK,CAACF,CAAC,CAACG,aAAa,EAAE,CAAC,CAAC,mCAClB,EAAAR,cAAA,CAAAnE,SAAA,EAAA,SAAA,EAAA,MAAA,CAAA;AAGlCiD,UAAA,CAAA,CADCqB,GAAG,CAACC,KAAK,CAACC,CAAC,CAACC,QAAQ,EAAE,EAAED,CAAC,CAACE,KAAK,CAACE,CAAC,CAACC,MAAM,EAAE,CAAC,CAAC,mCACP,EAAAV,cAAA,CAAAnE,SAAA,EAAA,WAAA,EAAA,MAAA,CAAA;AAGtCiD,UAAA,CAAA,CADCqB,GAAG,CAACC,KAAK,CAACC,CAAC,CAACC,QAAQ,EAAE,CAAC,oCACsB,EAAAN,cAAA,CAAAnE,SAAA,EAAA,SAAA,EAAA,MAAA,CAAA;AARnCmE,cAAc,GAAAlB,UAAA,CAAA,CAD1B6B,GAAG,EAA0B,EAAAvB,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACjB,EAAAW,cAAc,CAS1B;;ACrBK,SAAUjE,MAAMA,CAAC6E,IAAqB,EAAA;EAC1C,OAAO;AACL5E,IAAAA,UAAU,EAAE;MACVF,aAAa,EAAE,CAAC,QAAQ;AACzB;GACF;AACH;;AC2HO,IAAM+E,sBAAsB,GAA5B,MAAMA,sBAAuB,SAAQC,aAAa,CAAA;AAA5CD,sBAAsB,GAAA/B,UAAA,CAAA,CADlCiC,KAAK,EAAE,EAAA3B,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACK,EAAAwB,sBAAsB,CAAyB;AA2B5D;;;;"}
+{"version":3,"file":"index.js","sources":["../src/bean/bean.permission.ts","../src/bean/event.retrievePermissions.ts","../src/bean/summerCache.permissionActionByRoles.ts","../src/bean/summerCache.permissionUser.ts","../src/dto/permissions.tsx","../src/config/config.ts","../src/.metadata/index.ts"],"sourcesContent":[null,null,null,null,null,null,null],"names":["BeanFullNameGuardPassport","beanFullNameFromOnionName","GuardOptionsPassportDefault","public","activated","checkAuthToken","BeanPermission","BeanBase","clearAllCaches","cachePermissionUser","bean","summer","cache","cachePermissionActionByRoles","clear","retrievePermissionsCacheKey","info","resource","args","userId","ctx","passport","user","id","retrievePermissionActionCacheKey","actionKey","roleIdsKey","_extractCurrentRoleIdsSorted","join","retrievePermissions","scope","event","emit","retrievePermissionsDefault","getPermissionsDefault","actionsIgnore","config","permission","actionRoutes","_getControllerRoutes","filter","route","includes","action","permissionsActions","retrievePermissionAction","actions","_getControllerActionRoute","meta","_matchPassportMeta","retrievePermissionActionByRoles","_evaluatePermissionAction","_getRoutePathInfo","routePathInfo","recordResourceNameToRoutePath","Error","controller","beanOptions","appResource","getBean","getCacheControllerRoutes","app","beanFullName","find","roleIds","currentRoles","map","item","String","Array","from","Set","sort","passportOptions","_getPassportOptions","_matchPassportOptions","options","isAuthenticated","isActivated","routePrevious","innerAccessPrevious","innerAccess","result","composeGuards","err","code","__decorate","Caching","get","cacheName","cacheKeyFn","prototype","Bean","__z_BeanInfo","module","EventRetrievePermissions","BeanEventBase","Event","SummerCachePermissionActionByRoles","ServiceSummerCacheBase","getNative","_key","_options","SummerCache","SummerCachePermissionUser","DtoPermissions","constructor","roleNames","Api","field","v","optional","array","tableIdentity","z","string","Dto","_app","ScopeModuleAPermission","BeanScopeBase","Scope"],"mappings":";;;;;;;;;;AAkBA,MAAMA,yBAAyB,GAAGC,yBAAyB,CAAC,iBAAiB,EAAE,OAAO,CAAC;AACvF,MAAMC,2BAA2B,GAA0B;AACzDC,EAAAA,MAAM,EAAE,KAAK;AACbC,EAAAA,SAAS,EAAE,IAAI;AACfC,EAAAA,cAAc,EAAE;CACjB;AAKM,IAAMC,cAAc,GAApB,MAAMA,cAAe,SAAQC,QAAQ,CAAA;EACnC,MAAMC,cAAcA,GAAA;AACzB,IAAA,MAAMC,mBAAmB,GAAG,IAAI,CAACC,IAAI,CAACC,MAAM,CAACC,KAAK,CAChDX,yBAAyB,CAAC,6BAA6B,EAAE,aAAa,CAAC,CACxE;AACD,IAAA,MAAMY,4BAA4B,GAAG,IAAI,CAACH,IAAI,CAACC,MAAM,CAACC,KAAK,CACzDX,yBAAyB,CAAC,sCAAsC,EAAE,aAAa,CAAC,CACjF;AACD,IAAA,MAAMQ,mBAAmB,CAACK,KAAK,EAAE;AACjC,IAAA,MAAMD,4BAA4B,CAACC,KAAK,EAAE;AAC5C,EAAA;EAEUC,2BAA2BA,CAACC,IAA2B,EAAA;AAC/D,IAAA,MAAMC,QAAQ,GAAGD,IAAI,CAACE,IAAI,CAAC,CAAC,CAAC;IAC7B,MAAMC,MAAM,GAAG,IAAI,CAACC,GAAG,CAACC,QAAQ,CAACC,IAAI,EAAEC,EAAE;AACzC,IAAA,OAAO,CAAA,KAAA,EAAQN,QAAQ,CAAA,CAAA,EAAIE,MAAM,CAAA,CAAE;AACrC,EAAA;EAEUK,gCAAgCA,CAACR,IAA2B,EAAA;IACpE,MAAM,CAACC,QAAQ,EAAEQ,SAAS,CAAC,GAAGT,IAAI,CAACE,IAAuC;AAC1E,IAAA,MAAMQ,UAAU,GAAG,IAAI,CAACC,4BAA4B,EAAE,CAACC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM;AAC1E,IAAA,OAAO,UAAUX,QAAQ,CAAA,CAAA,EAAIQ,SAAS,CAAA,OAAA,EAAUC,UAAU,CAAA,CAAE;AAC9D,EAAA;EAMA,MAAMG,mBAAmBA,CAACZ,QAA+B,EAAA;IACvD,OAAO,MAAM,IAAI,CAACa,KAAK,CAACC,KAAK,CAACF,mBAAmB,CAACG,IAAI,CAAC;AAAEf,MAAAA;KAAU,EAAE,YAAW;AAC9E,MAAA,OAAO,MAAM,IAAI,CAACgB,0BAA0B,CAAChB,QAAQ,CAAC;AACxD,IAAA,CAAC,CAAC;AACJ,EAAA;EAEU,MAAMgB,0BAA0BA,CACxChB,QAA+B,EAAA;AAE/B,IAAA,OAAO,MAAM,IAAI,CAACiB,qBAAqB,CAACjB,QAAQ,CAAC;AACnD,EAAA;EAEA,MAAMiB,qBAAqBA,CAACjB,QAA+B,EAAA;IACzD,MAAMkB,aAAa,GAAG,IAAI,CAACL,KAAK,CAACM,MAAM,CAACC,UAAU,CAACF,aAAa;IAChE,MAAMG,YAAY,GAAG,IAAI,CAACC,oBAAoB,CAACtB,QAAQ,CAAC,CAACuB,MAAM,CAC7DC,KAAK,IAAI,CAACN,aAAa,CAACO,QAAQ,CAACD,KAAK,CAACE,MAAM,CAAC,CAC/C;IACD,MAAMC,kBAAkB,GAAwC,EAAE;AAClE,IAAA,KAAK,MAAMH,KAAK,IAAIH,YAAY,EAAE;AAChCM,MAAAA,kBAAkB,CAACH,KAAK,CAACE,MAAM,CAAC,GAAG,MAAM,IAAI,CAACE,wBAAwB,CACpE5B,QAAQ,EACRwB,KAAK,CAACE,MAAM,CACb;AACH,IAAA;IACA,OAAO;AAAEG,MAAAA,OAAO,EAAEF;KAAoB;AACxC,EAAA;AAEO,EAAA,MAAMC,wBAAwBA,CACnC5B,QAA+B,EAC/BQ,SAAiB,EAAA;IAEjB,MAAMgB,KAAK,GAAG,IAAI,CAACM,yBAAyB,CAAC9B,QAAQ,EAAEQ,SAAS,CAAC;IACjE,IAAI,CAACgB,KAAK,EAAEA,KAAK,EAAEO,IAAI,EAAE,OAAO,KAAK;AACrC,IAAA,IAAI,CAAC,IAAI,CAACC,kBAAkB,CAACR,KAAK,CAACA,KAAK,CAACO,IAAI,CAAC,EAAE,OAAO,KAAK;IAC5D,OAAO,MAAM,IAAI,CAACE,+BAA+B,CAACjC,QAAQ,EAAEQ,SAAS,CAAC;AACxE,EAAA;AAMU,EAAA,MAAMyB,+BAA+BA,CAC7CjC,QAA+B,EAC/BQ,SAAiB,EAAA;IAEjB,MAAMgB,KAAK,GAAG,IAAI,CAACM,yBAAyB,CAAC9B,QAAQ,EAAEQ,SAAS,CAAC;IACjE,IAAI,CAACgB,KAAK,EAAEA,KAAK,EAAEO,IAAI,EAAE,OAAO,KAAK;AACrC,IAAA,OAAO,MAAM,IAAI,CAACG,yBAAyB,CAACV,KAAK,CAAC;AACpD,EAAA;EAEQW,iBAAiBA,CAACnC,QAA+B,EAAA;AACvD,IAAA,MAAMoC,aAAa,GAAGC,6BAA6B,CAACrC,QAAQ,CAAC;IAC7D,IAAI,CAACoC,aAAa,EAAE,MAAM,IAAIE,KAAK,CAAC,CAAA,iCAAA,EAAoCtC,QAAQ,CAAA,CAAE,CAAC;AACnF,IAAA,OAAOoC,aAAa;AACtB,EAAA;EAEQd,oBAAoBA,CAACtB,QAA+B,EAAA;AAC1D,IAAA,MAAMoC,aAAa,GAAG,IAAI,CAACD,iBAAiB,CAACnC,QAAQ,CAAC;AACtD,IAAA,MAAMuC,UAAU,GAAGH,aAAa,CAACG,UAAU;AAC3C,IAAA,MAAMC,WAAW,GAAGC,WAAW,CAACC,OAAO,CAACH,UAAU,CAAC;IACnD,IAAI,CAACC,WAAW,EAAE,MAAM,IAAIF,KAAK,CAAC,oBAAoB,CAAC;AACvD,IAAA,OAAOK,wBAAwB,CAAC,IAAI,CAACC,GAAG,CAAC,CAACJ,WAAW,CAACK,YAAY,CAAC,IAAI,EAAE;AAC3E,EAAA;AAEQf,EAAAA,yBAAyBA,CAC/B9B,QAA+B,EAC/BQ,SAAiB,EAAA;AAEjB,IAAA,OAAO,IAAI,CAACc,oBAAoB,CAACtB,QAAQ,CAAC,CAAC8C,IAAI,CAACtB,KAAK,IAAIA,KAAK,CAACE,MAAM,KAAKlB,SAAS,CAAC;AACtF,EAAA;AAEQE,EAAAA,4BAA4BA,GAAA;IAClC,MAAMqC,OAAO,GAAG,IAAI,CAACtD,IAAI,CAACW,QAAQ,CAAC4C,YAAY,EAAEC,GAAG,CAACC,IAAI,IAAIC,MAAM,CAACD,IAAI,CAAC5C,EAAE,CAAC,CAAC,IAAI,EAAE;AACnF,IAAA,OAAO8C,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAACP,OAAO,CAAC,CAAC,CAACQ,IAAI,EAAE;AAC5C,EAAA;EAEQvB,kBAAkBA,CAACD,IAAgB,EAAA;AACzC,IAAA,MAAMyB,eAAe,GAAG,IAAI,CAACC,mBAAmB,CAAC1B,IAAI,CAAC;AACtD,IAAA,OAAO,IAAI,CAAC2B,qBAAqB,CAACF,eAAe,CAAC;AACpD,EAAA;EAEQC,mBAAmBA,CAAC1B,IAAgB,EAAA;IAC1C,OAAO;AACL,MAAA,GAAG9C,2BAA2B;MAC9B,GAAI8C,IAAI,CAAChD,yBAAyB;KACnC;AACH,EAAA;EAEQ2E,qBAAqBA,CAC3BC,OAA4D,EAAA;IAE5D,MAAMC,eAAe,GAAG,IAAI,CAACnE,IAAI,CAACW,QAAQ,CAACwD,eAAe;IAC1D,IAAI,CAACD,OAAO,CAACzE,MAAM,IAAI,CAAC0E,eAAe,EAAE,OAAO,KAAK;AACrD,IAAA,IAAI,CAACA,eAAe,EAAE,OAAO,IAAI;AACjC,IAAA,IAAID,OAAO,CAACxE,SAAS,KAAK,IAAI,IAAI,CAAC,IAAI,CAACM,IAAI,CAACW,QAAQ,CAACyD,WAAW,EAAE,OAAO,KAAK;AAC/E,IAAA,IAAIF,OAAO,CAACxE,SAAS,KAAK,KAAK,IAAI,IAAI,CAACM,IAAI,CAACW,QAAQ,CAACyD,WAAW,EAAE,OAAO,KAAK;AAC/E,IAAA,OAAO,IAAI;AACb,EAAA;EAEQ,MAAM3B,yBAAyBA,CAACV,KAAmB,EAAA;AACzD,IAAA,MAAMrB,GAAG,GAAG,IAAI,CAACA,GAAU;AAC3B,IAAA,MAAM2D,aAAa,GAAG3D,GAAG,CAACqB,KAAK;AAC/B,IAAA,MAAMuC,mBAAmB,GAAG5D,GAAG,CAAC6D,WAAW;IAC3C,IAAI;MACF7D,GAAG,CAACqB,KAAK,GAAGA,KAAK;MACjBrB,GAAG,CAAC6D,WAAW,GAAG,KAAK;AACvB,MAAA,MAAMC,MAAM,GAAG,MAAMC,aAAa,CAAC,IAAI,CAACtB,GAAG,EAAEpB,KAAK,CAAC,CAAC,IAAI,CAACrB,GAAG,CAAC;MAC7D,OAAO8D,MAAM,KAAK,KAAK;IACzB,CAAC,CAAC,OAAOE,GAAQ,EAAE;AACjB,MAAA,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC1C,QAAQ,CAAC0C,GAAG,EAAEC,IAAI,CAAC,EAAE,OAAO,KAAK;AAChD,MAAA,MAAMD,GAAG;AACX,IAAA,CAAC,SAAS;MACRhE,GAAG,CAACqB,KAAK,GAAGsC,aAAa;MACzB3D,GAAG,CAAC6D,WAAW,GAAGD,mBAAmB;AACvC,IAAA;AACF,EAAA;;AAnHMM,UAAA,CAAA,CAJLC,OAAO,CAACC,GAAG,CAAC;AACXC,EAAAA,SAAS,EAAE,6BAA6B;AACxCC,EAAAA,UAAU,EAAE;CACb,CAAC,2HAKD,EAAApF,cAAA,CAAAqF,SAAA,EAAA,qBAAA,EAAA,IAAA,CAAA;AAqCeL,UAAA,CAAA,CAJfC,OAAO,CAACC,GAAG,CAAC;AACXC,EAAAA,SAAS,EAAE,sCAAsC;AACjDC,EAAAA,UAAU,EAAE;CACb,CAAC,mIAQD,EAAApF,cAAA,CAAAqF,SAAA,EAAA,iCAAA,EAAA,IAAA,CAAA;AA5EUrF,cAAc,GAAAgF,UAAA,CAAA,CAD1BM,IAAI,EAAE,EAAAC,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACM,EAAAxF,cAAc,CAgJ1B;;ACjKM,IAAMyF,wBAAwB,GAA9B,MAAMA,wBAAyB,SAAQC,aAG7C,CAAA;AAHYD,wBAAwB,GAAAT,UAAA,CAAA,CADpCW,KAAK,EAAE,EAAAJ,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACK,EAAAC,wBAAwB,CAGjC;;ACNG,IAAMG,kCAAkC,GAAxC,MAAMA,kCACX,SAAQC,sBAGP,CAAA;AAOD,EAAA,MAAMC,SAASA,CACbC,IAA6C,EAC7CC,QAGC,GAC8D;;AAjBtDJ,kCAAkC,GAAAZ,UAAA,CAAA,CAD9CiB,WAAW,EAAE,EAAAV,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACD,EAAAI,kCAAkC,CAkB9C;;AClBM,IAAMM,yBAAyB,GAA/B,MAAMA,yBACX,SAAQL,sBAAqF,CAAA;AAG7F,EAAA,MAAMC,SAASA,CACbC,IAAoC,EACpCC,QAGC,GACqD;;AAV7CE,yBAAyB,GAAAlB,UAAA,CAAA,CADrCiB,WAAW,EAAE,EAAAV,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACD,EAAAU,yBAAyB,CAWrC;;ACLM,IAAMC,cAAc,GAApB,MAAMA,cAAc,CAAA;EAAAC,WAAAA,GAAA;AAAA,IAAA,IAAA,CAEzB1C,OAAO,GAAA,MAAA;AAAA,IAAA,IAAA,CAGP2C,SAAS,GAAA,MAAA;AAAA,IAAA,IAAA,CAGT7D,OAAO,GAAA,MAAA;AAAA,EAAA;;AANPwC,UAAA,CAAA,CADCsB,GAAG,CAACC,KAAK,CAACC,CAAC,CAACC,QAAQ,EAAE,EAAED,CAAC,CAACE,KAAK,CAACF,CAAC,CAACG,aAAa,EAAE,CAAC,CAAC,mCAClB,EAAAR,cAAA,CAAAd,SAAA,EAAA,SAAA,EAAA,MAAA,CAAA;AAGlCL,UAAA,CAAA,CADCsB,GAAG,CAACC,KAAK,CAACC,CAAC,CAACC,QAAQ,EAAE,EAAED,CAAC,CAACE,KAAK,CAACE,CAAC,CAACC,MAAM,EAAE,CAAC,CAAC,mCACP,EAAAV,cAAA,CAAAd,SAAA,EAAA,WAAA,EAAA,MAAA,CAAA;AAGtCL,UAAA,CAAA,CADCsB,GAAG,CAACC,KAAK,CAACC,CAAC,CAACC,QAAQ,EAAE,CAAC,oCACsB,EAAAN,cAAA,CAAAd,SAAA,EAAA,SAAA,EAAA,MAAA,CAAA;AARnCc,cAAc,GAAAnB,UAAA,CAAA,CAD1B8B,GAAG,EAA0B,EAAAvB,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACjB,EAAAW,cAAc,CAS1B;;ACrBK,SAAUrE,MAAMA,CAACiF,IAAqB,EAAA;EAC1C,OAAO;AACLhF,IAAAA,UAAU,EAAE;MACVF,aAAa,EAAE,CAAC,QAAQ;AACzB;GACF;AACH;;AC0IO,IAAMmF,sBAAsB,GAA5B,MAAMA,sBAAuB,SAAQC,aAAa,CAAA;AAA5CD,sBAAsB,GAAAhC,UAAA,CAAA,CADlCkC,KAAK,EAAE,EAAA3B,QAAA,CAAA;EAAAC,MAAA,EAAA;AAAA,CAAA,CAAA,CACK,EAAAwB,sBAAsB,CAAyB;AA2B5D;;;;"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "vona-module-a-permission",
-  "version": "5.1.13",
-  "gitHead": "1a39e8008e1b48001cfeff475ddd53a2a0d867c4",
+  "version": "5.1.14",
+  "gitHead": "f7296d0004da7e5c173bc9149d209c2e57cab1b8",
   "description": "",
   "keywords": [
     "Vona Module"

package/src/.metadata/index.ts

@@ -19,7 +19,7 @@ declare module 'vona-module-a-permission' {
 /** bean: end */
 /** bean: begin */
 import type { BeanPermission } from '../bean/bean.permission.ts';
-import 'vona';  
+import 'vona';
 declare module 'vona' {
   export interface IBeanRecordGlobal {
     'permission': BeanPermission;
@@ -64,35 +64,50 @@ declare module 'vona-module-a-event' {
 }
 /** event: end */
 /** summerCache: begin */
-export * from '../bean/summerCache.permission.ts';
+export * from '../bean/summerCache.permissionActionByRoles.ts';
+export * from '../bean/summerCache.permissionUser.ts';
 
 import { type IDecoratorSummerCacheOptions } from 'vona-module-a-summer';
 declare module 'vona-module-a-summer' {
   
     export interface ISummerCacheRecord {
-      'a-permission:permission': IDecoratorSummerCacheOptions;
+      'a-permission:permissionActionByRoles': IDecoratorSummerCacheOptions;
+'a-permission:permissionUser': IDecoratorSummerCacheOptions;
     }
 
   
 }
 declare module 'vona-module-a-permission' {
   
-        export interface SummerCachePermission {
+        export interface SummerCachePermissionActionByRoles {
+          /** @internal */
+          get scope(): ScopeModuleAPermission;
+        }
+
+          export interface SummerCachePermissionActionByRoles {
+            get $beanFullName(): 'a-permission.summerCache.permissionActionByRoles';
+            get $onionName(): 'a-permission:permissionActionByRoles';
+            get $onionOptions(): IDecoratorSummerCacheOptions;
+          }
+
+        export interface SummerCachePermissionUser {
           /** @internal */
           get scope(): ScopeModuleAPermission;
         }
 
-          export interface SummerCachePermission {
-            get $beanFullName(): 'a-permission.summerCache.permission';
-            get $onionName(): 'a-permission:permission';
+          export interface SummerCachePermissionUser {
+            get $beanFullName(): 'a-permission.summerCache.permissionUser';
+            get $onionName(): 'a-permission:permissionUser';
             get $onionOptions(): IDecoratorSummerCacheOptions;
           } 
 }
 /** summerCache: end */
 /** summerCache: begin */
-import type { SummerCachePermission } from '../bean/summerCache.permission.ts';
+import type { SummerCachePermissionActionByRoles } from '../bean/summerCache.permissionActionByRoles.ts';
+import type { SummerCachePermissionUser } from '../bean/summerCache.permissionUser.ts';
 export interface IModuleSummerCache {
-  'permission': SummerCachePermission;
+  'permissionActionByRoles': SummerCachePermissionActionByRoles;
+'permissionUser': SummerCachePermissionUser;
 }
 /** summerCache: end */
 /** dto: begin */

package/src/bean/bean.permission.ts

@@ -4,23 +4,19 @@ import type {
   IOpenapiPermissions,
   IResourceRecord,
 } from 'vona-module-a-openapi';
-import type { IGuardOptionsPassport, IGuardOptionsRoleName } from 'vona-module-a-user';
-import type { ContextRouteMetadata, IRecordResourceNameToRoutePathItem } from 'vona-module-a-web';
+import type { IGuardOptionsPassport } from 'vona-module-a-user';
+import type { ContextRoute, IRecordResourceNameToRoutePathItem } from 'vona-module-a-web';
 
-import { appMetadata, appResource, BeanBase, beanFullNameFromOnionName } from 'vona';
+import { appResource, BeanBase, beanFullNameFromOnionName } from 'vona';
 import { Bean } from 'vona-module-a-bean';
 import { Caching } from 'vona-module-a-caching';
-import { SymbolUseOnionOptionsRouteReal } from 'vona-module-a-onion';
-import { recordResourceNameToRoutePath } from 'vona-module-a-web';
+import {
+  composeGuards,
+  getCacheControllerRoutes,
+  recordResourceNameToRoutePath,
+} from 'vona-module-a-web';
 
 const BeanFullNameGuardPassport = beanFullNameFromOnionName('a-user:passport', 'guard');
-const BeanFullNameGuardRoleName = beanFullNameFromOnionName('a-user:roleName', 'guard');
-const BeanFullNameGuardUserName = beanFullNameFromOnionName('a-user:userName', 'guard');
-const BeanFullNamesGuardSupported = new Set<string>([
-  BeanFullNameGuardPassport,
-  BeanFullNameGuardRoleName,
-  BeanFullNameGuardUserName,
-]);
 const GuardOptionsPassportDefault: IGuardOptionsPassport = {
   public: false,
   activated: true,
@@ -32,10 +28,14 @@ type TGuardMeta = Record<string, unknown>;
 @Bean()
 export class BeanPermission extends BeanBase {
   public async clearAllCaches(): Promise<void> {
-    const cachePermission = this.bean.summer.cache(
-      beanFullNameFromOnionName('a-permission:permission', 'summerCache'),
+    const cachePermissionUser = this.bean.summer.cache(
+      beanFullNameFromOnionName('a-permission:permissionUser', 'summerCache'),
     );
-    await cachePermission.clear();
+    const cachePermissionActionByRoles = this.bean.summer.cache(
+      beanFullNameFromOnionName('a-permission:permissionActionByRoles', 'summerCache'),
+    );
+    await cachePermissionUser.clear();
+    await cachePermissionActionByRoles.clear();
   }
 
   protected retrievePermissionsCacheKey(info: ICachingActionKeyInfo): string {
@@ -44,21 +44,22 @@ export class BeanPermission extends BeanBase {
     return `user:${resource}_${userId}`;
   }
 
-  protected retrievePermissionsDefaultCacheKey(info: ICachingActionKeyInfo): string {
-    return `default:${this._buildPermissionProfileKey(info.args[0] as never)}`;
+  protected retrievePermissionActionCacheKey(info: ICachingActionKeyInfo): string {
+    const [resource, actionKey] = info.args as [keyof IResourceRecord, string];
+    const roleIdsKey = this._extractCurrentRoleIdsSorted().join(',') || 'none';
+    return `action:${resource}:${actionKey}:roles:${roleIdsKey}`;
   }
 
-  @Caching.get({ cacheName: 'a-permission:permission', cacheKeyFn: 'retrievePermissionsCacheKey' })
+  @Caching.get({
+    cacheName: 'a-permission:permissionUser',
+    cacheKeyFn: 'retrievePermissionsCacheKey',
+  })
   async retrievePermissions(resource: keyof IResourceRecord): Promise<IOpenapiPermissions> {
     return await this.scope.event.retrievePermissions.emit({ resource }, async () => {
       return await this.retrievePermissionsDefault(resource);
     });
   }
 
-  @Caching.get({
-    cacheName: 'a-permission:permission',
-    cacheKeyFn: 'retrievePermissionsDefaultCacheKey',
-  })
   protected async retrievePermissionsDefault(
     resource: keyof IResourceRecord,
   ): Promise<IOpenapiPermissions> {
@@ -66,67 +67,72 @@ export class BeanPermission extends BeanBase {
   }
 
   async getPermissionsDefault(resource: keyof IResourceRecord): Promise<IOpenapiPermissions> {
-    const routePathInfo: IRecordResourceNameToRoutePathItem =
-      recordResourceNameToRoutePath[resource];
-    if (!routePathInfo) throw new Error(`not found routePath of resource: ${resource}`);
-    const controller = routePathInfo.controller;
-    if (!appResource.getBean(controller)) throw new Error('invalid controller');
-    const descs = Object.getOwnPropertyDescriptors(controller.prototype);
     const actionsIgnore = this.scope.config.permission.actionsIgnore;
-    const actionKeys = Object.keys(descs).filter(
-      actionKey => actionKey !== 'constructor' && !actionsIgnore.includes(actionKey),
+    const actionRoutes = this._getControllerRoutes(resource).filter(
+      route => !actionsIgnore.includes(route.action),
     );
     const permissionsActions: IOpenapiPermissionModeActionActions = {};
-    for (const actionKey of actionKeys) {
-      const desc = descs[actionKey];
-      if (!desc.value || typeof desc.value !== 'function') continue;
-      const routeReal: ContextRouteMetadata | undefined = appMetadata.getMetadata(
-        SymbolUseOnionOptionsRouteReal,
-        controller.prototype,
-        actionKey,
+    for (const route of actionRoutes) {
+      permissionsActions[route.action] = await this.retrievePermissionAction(
+        resource,
+        route.action,
       );
-      permissionsActions[actionKey] = this._getPermissionOfActionByMetadata(routeReal);
     }
     return { actions: permissionsActions };
   }
 
-  private _buildPermissionProfileKey(resource: keyof IResourceRecord): string {
-    if (!this.bean.passport.isAuthenticated) return `${resource}__anon`;
-    const activated = this.bean.passport.isActivated ? 1 : 0;
-    const roleNames = this._extractCurrentRoleNames();
-    return `${resource}__auth__act:${activated}__roles:${roleNames.join(',')}`;
+  public async retrievePermissionAction(
+    resource: keyof IResourceRecord,
+    actionKey: string,
+  ): Promise<boolean> {
+    const route = this._getControllerActionRoute(resource, actionKey);
+    if (!route?.route?.meta) return false;
+    if (!this._matchPassportMeta(route.route.meta)) return false;
+    return await this.retrievePermissionActionByRoles(resource, actionKey);
   }
 
-  private _extractCurrentRoleNames(): string[] {
-    const roleNames = this.bean.passport.currentRoles?.map(item => item.name) ?? [];
-    return Array.from(new Set(roleNames)).sort();
+  @Caching.get({
+    cacheName: 'a-permission:permissionActionByRoles',
+    cacheKeyFn: 'retrievePermissionActionCacheKey',
+  })
+  protected async retrievePermissionActionByRoles(
+    resource: keyof IResourceRecord,
+    actionKey: string,
+  ): Promise<boolean> {
+    const route = this._getControllerActionRoute(resource, actionKey);
+    if (!route?.route?.meta) return false;
+    return await this._evaluatePermissionAction(route);
   }
 
-  private _getPermissionOfActionByMetadata(routeReal: ContextRouteMetadata | undefined): boolean {
-    if (!routeReal?.meta) return false;
-    return this._evaluatePassportGuardsStatically(routeReal.meta);
+  private _getRoutePathInfo(resource: keyof IResourceRecord): IRecordResourceNameToRoutePathItem {
+    const routePathInfo = recordResourceNameToRoutePath[resource];
+    if (!routePathInfo) throw new Error(`not found routePath of resource: ${resource}`);
+    return routePathInfo;
   }
 
-  private _evaluatePassportGuardsStatically(meta: TGuardMeta): boolean {
-    if (this._hasUnknownGuard(meta)) return false;
-    if (this._hasDynamicUserNameGuard(meta)) return false;
-    const passportOptions = this._getPassportOptions(meta);
-    if (!this._matchPassportOptions(passportOptions)) return false;
-    const roleNameOptions = meta[BeanFullNameGuardRoleName] as
-      | Partial<IGuardOptionsRoleName>
-      | undefined;
-    if (!this._matchRoleNameOptions(roleNameOptions)) return false;
-    return true;
+  private _getControllerRoutes(resource: keyof IResourceRecord): ContextRoute[] {
+    const routePathInfo = this._getRoutePathInfo(resource);
+    const controller = routePathInfo.controller;
+    const beanOptions = appResource.getBean(controller);
+    if (!beanOptions) throw new Error('invalid controller');
+    return getCacheControllerRoutes(this.app)[beanOptions.beanFullName] ?? [];
   }
 
-  private _hasUnknownGuard(meta: TGuardMeta): boolean {
-    return Object.keys(meta).some(
-      key => key.includes('.guard.') && !BeanFullNamesGuardSupported.has(key),
-    );
+  private _getControllerActionRoute(
+    resource: keyof IResourceRecord,
+    actionKey: string,
+  ): ContextRoute | undefined {
+    return this._getControllerRoutes(resource).find(route => route.action === actionKey);
   }
 
-  private _hasDynamicUserNameGuard(meta: TGuardMeta): boolean {
-    return BeanFullNameGuardUserName in meta;
+  private _extractCurrentRoleIdsSorted(): string[] {
+    const roleIds = this.bean.passport.currentRoles?.map(item => String(item.id)) ?? [];
+    return Array.from(new Set(roleIds)).sort();
+  }
+
+  private _matchPassportMeta(meta: TGuardMeta): boolean {
+    const passportOptions = this._getPassportOptions(meta);
+    return this._matchPassportOptions(passportOptions);
   }
 
   private _getPassportOptions(meta: TGuardMeta): IGuardOptionsPassport {
@@ -147,13 +153,21 @@ export class BeanPermission extends BeanBase {
     return true;
   }
 
-  private _matchRoleNameOptions(options: Partial<IGuardOptionsRoleName> | undefined): boolean {
-    if (!options) return true;
-    if (!options.name) return false;
-    if (options.passWhenMatched === false) return false;
-    if (options.rejectWhenDismatched === false) return false;
-    const roleNamesCurrent = this._extractCurrentRoleNames();
-    const roleNamesRequired = Array.isArray(options.name) ? options.name : [options.name];
-    return roleNamesCurrent.some(roleName => roleNamesRequired.includes(roleName as any));
+  private async _evaluatePermissionAction(route: ContextRoute): Promise<boolean> {
+    const ctx = this.ctx as any;
+    const routePrevious = ctx.route;
+    const innerAccessPrevious = ctx.innerAccess;
+    try {
+      ctx.route = route;
+      ctx.innerAccess = false;
+      const result = await composeGuards(this.app, route)(this.ctx);
+      return result !== false;
+    } catch (err: any) {
+      if ([401, 403].includes(err?.code)) return false;
+      throw err;
+    } finally {
+      ctx.route = routePrevious;
+      ctx.innerAccess = innerAccessPrevious;
+    }
   }
 }

package/src/bean/summerCache.permissionActionByRoles.ts

@@ -0,0 +1,27 @@
+import type { ISummerCacheGet, TSummerCacheActionOptions } from 'vona-module-a-summer';
+
+import { ServiceSummerCacheBase, SummerCache } from 'vona-module-a-summer';
+
+export type TSummerCachePermissionActionByRolesKey = any;
+export type TSummerCachePermissionActionByRolesData = any;
+
+@SummerCache()
+export class SummerCachePermissionActionByRoles
+  extends ServiceSummerCacheBase<
+    TSummerCachePermissionActionByRolesKey,
+    TSummerCachePermissionActionByRolesData
+  >
+  implements
+    ISummerCacheGet<
+      TSummerCachePermissionActionByRolesKey,
+      TSummerCachePermissionActionByRolesData
+    >
+{
+  async getNative(
+    _key?: TSummerCachePermissionActionByRolesKey,
+    _options?: TSummerCacheActionOptions<
+      TSummerCachePermissionActionByRolesKey,
+      TSummerCachePermissionActionByRolesData
+    >,
+  ): Promise<TSummerCachePermissionActionByRolesData | undefined> {}
+}

package/src/bean/summerCache.permissionUser.ts

@@ -0,0 +1,20 @@
+import type { ISummerCacheGet, TSummerCacheActionOptions } from 'vona-module-a-summer';
+
+import { ServiceSummerCacheBase, SummerCache } from 'vona-module-a-summer';
+
+export type TSummerCachePermissionUserKey = any;
+export type TSummerCachePermissionUserData = any;
+
+@SummerCache()
+export class SummerCachePermissionUser
+  extends ServiceSummerCacheBase<TSummerCachePermissionUserKey, TSummerCachePermissionUserData>
+  implements ISummerCacheGet<TSummerCachePermissionUserKey, TSummerCachePermissionUserData>
+{
+  async getNative(
+    _key?: TSummerCachePermissionUserKey,
+    _options?: TSummerCacheActionOptions<
+      TSummerCachePermissionUserKey,
+      TSummerCachePermissionUserData
+    >,
+  ): Promise<TSummerCachePermissionUserData | undefined> {}
+}

package/dist/bean/summerCache.permission.d.ts

@@ -1,8 +0,0 @@
-import type { ISummerCacheGet, TSummerCacheActionOptions } from 'vona-module-a-summer';
-import { ServiceSummerCacheBase } from 'vona-module-a-summer';
-export type TSummerCachePermissionKey = any;
-export type TSummerCachePermissionData = any;
-export declare class SummerCachePermission extends ServiceSummerCacheBase<TSummerCachePermissionKey, TSummerCachePermissionData> implements ISummerCacheGet<TSummerCachePermissionKey, TSummerCachePermissionData> {
-    getNative(_key?: TSummerCachePermissionKey, _options?: TSummerCacheActionOptions<TSummerCachePermissionKey, TSummerCachePermissionData>): Promise<TSummerCachePermissionData | undefined>;
-}
-//# sourceMappingURL=summerCache.permission.d.ts.map

package/dist/bean/summerCache.permission.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"summerCache.permission.d.ts","sourceRoot":"","sources":["../../src/bean/summerCache.permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,EAAE,sBAAsB,EAAe,MAAM,sBAAsB,CAAC;AAE3E,MAAM,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC5C,MAAM,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE7C,qBACa,qBACX,SAAQ,sBAAsB,CAAC,yBAAyB,EAAE,0BAA0B,CACpF,YAAW,eAAe,CAAC,yBAAyB,EAAE,0BAA0B,CAAC;IAE3E,SAAS,CACb,IAAI,CAAC,EAAE,yBAAyB,EAChC,QAAQ,CAAC,EAAE,yBAAyB,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,GAC1F,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;CACnD"}

package/src/bean/summerCache.permission.ts

@@ -1,17 +0,0 @@
-import type { ISummerCacheGet, TSummerCacheActionOptions } from 'vona-module-a-summer';
-
-import { ServiceSummerCacheBase, SummerCache } from 'vona-module-a-summer';
-
-export type TSummerCachePermissionKey = any;
-export type TSummerCachePermissionData = any;
-
-@SummerCache({ preset: 'mem' })
-export class SummerCachePermission
-  extends ServiceSummerCacheBase<TSummerCachePermissionKey, TSummerCachePermissionData>
-  implements ISummerCacheGet<TSummerCachePermissionKey, TSummerCachePermissionData>
-{
-  async getNative(
-    _key?: TSummerCachePermissionKey,
-    _options?: TSummerCacheActionOptions<TSummerCachePermissionKey, TSummerCachePermissionData>,
-  ): Promise<TSummerCachePermissionData | undefined> {}
-}