@brandazm/dynamic-permissions
Version:
A flexible and powerful permissions management system for NestJS applications with built-in security features
131 lines • 7.29 kB
JavaScript
;
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
var desc = Object.getOwnPropertyDescriptor(m, k);
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
desc = { enumerable: true, get: function() { return m[k]; } };
}
Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __importStar = (this && this.__importStar) || (function () {
var ownKeys = function(o) {
ownKeys = Object.getOwnPropertyNames || function (o) {
var ar = [];
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
return ar;
};
return ownKeys(o);
};
return function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
__setModuleDefault(result, mod);
return result;
};
})();
var __metadata = (this && this.__metadata) || function (k, v) {
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.ConfigService = void 0;
const common_1 = require("@nestjs/common");
const default_config_1 = require("../config/default-config");
const path = __importStar(require("path"));
const fs = __importStar(require("fs"));
const default_security_config_1 = require("../config/default-security.config");
const configuration_exception_1 = require("../exceptions/configuration.exception");
let ConfigService = class ConfigService {
constructor() {
this.config = Object.assign({}, default_config_1.defaultConfig);
this.securityConfig = default_security_config_1.defaultSecurityConfig;
}
async loadConfig(projectPath) {
if (!projectPath) {
return this.config;
}
try {
const configPath = path.join(projectPath, 'permission.config.js');
if (fs.existsSync(configPath)) {
const userConfig = await Promise.resolve(`${configPath}`).then(s => __importStar(require(s)));
this.config = this.mergeWithDefaults(userConfig);
this.validateConfig(this.config);
}
}
catch (error) {
throw new Error(`Failed to load configuration: ${error.message}`);
}
return this.config;
}
validateConfig(config) {
var _a, _b;
if (!config.database || !config.permissions || !config.security) {
throw new Error('Invalid configuration: missing required sections');
}
if (!['mysql', 'postgres', 'sqlite', 'mongodb'].includes(config.database.type)) {
throw new Error('Invalid database type');
}
const requiredEntities = ['permissions', 'routerPermissions', 'userPermissions'];
for (const entity of requiredEntities) {
if (!((_a = config.database.entities[entity]) === null || _a === void 0 ? void 0 : _a.tableName) ||
!((_b = config.database.entities[entity]) === null || _b === void 0 ? void 0 : _b.fields)) {
throw new Error(`Invalid configuration: missing ${entity} configuration`);
}
}
if (!['whitelist', 'blacklist'].includes(config.permissions.permissionStrategy)) {
throw new Error('Invalid permission strategy');
}
return true;
}
mergeWithDefaults(userConfig) {
var _a, _b, _c, _d, _e, _f, _g;
return {
database: Object.assign(Object.assign(Object.assign({}, default_config_1.defaultConfig.database), userConfig.database), { entities: {
permissions: Object.assign(Object.assign({}, default_config_1.defaultConfig.database.entities.permissions), (_b = (_a = userConfig.database) === null || _a === void 0 ? void 0 : _a.entities) === null || _b === void 0 ? void 0 : _b.permissions),
routerPermissions: Object.assign(Object.assign({}, default_config_1.defaultConfig.database.entities.routerPermissions), (_d = (_c = userConfig.database) === null || _c === void 0 ? void 0 : _c.entities) === null || _d === void 0 ? void 0 : _d.routerPermissions),
userPermissions: Object.assign(Object.assign({}, default_config_1.defaultConfig.database.entities.userPermissions), (_f = (_e = userConfig.database) === null || _e === void 0 ? void 0 : _e.entities) === null || _f === void 0 ? void 0 : _f.userPermissions),
} }),
permissions: Object.assign(Object.assign(Object.assign({}, default_config_1.defaultConfig.permissions), userConfig.permissions), { publicRoutes: [
...default_config_1.defaultConfig.permissions.publicRoutes,
...(((_g = userConfig.permissions) === null || _g === void 0 ? void 0 : _g.publicRoutes) || []),
] }),
security: Object.assign(Object.assign({}, default_config_1.defaultConfig.security), userConfig.security),
};
}
getConfig() {
return this.config;
}
getSecurityConfig() {
return this.securityConfig;
}
updateSecurityConfig(config) {
this.securityConfig = Object.assign(Object.assign(Object.assign({}, this.securityConfig), config), { rateLimit: Object.assign(Object.assign({}, this.securityConfig.rateLimit), (config.rateLimit || {})), cors: Object.assign(Object.assign({}, this.securityConfig.cors), (config.cors || {})), helmet: Object.assign(Object.assign({}, this.securityConfig.helmet), (config.helmet || {})), requestValidation: Object.assign(Object.assign({}, this.securityConfig.requestValidation), (config.requestValidation || {})) });
}
loadConfigFromFile(filePath) {
if (!fs.existsSync(filePath)) {
throw new configuration_exception_1.ConfigurationException(`Configuration file not found at ${filePath}`);
}
const configContent = fs.readFileSync(filePath, 'utf8');
return JSON.parse(configContent);
}
};
exports.ConfigService = ConfigService;
exports.ConfigService = ConfigService = __decorate([
(0, common_1.Injectable)(),
__metadata("design:paramtypes", [])
], ConfigService);
//# sourceMappingURL=config.service.js.map