@eang/core/lib/src/authorizer.d.ts

eang - model driven enterprise event processing

import { Cnx, Obj, EangEventTypes } from './entity.js';
import { PersonObj } from './objects.js';
import { Prettify } from './types.js';
export interface AuthzRequest {
    subject: PersonObj;
    action: AuthzAction;
    entity: Obj | Cnx;
    environment?: Environment;
}
export type RuleEffects = (typeof RuleEffect)[keyof typeof RuleEffect] | undefined;
export declare const RuleEffect: {
    readonly allow: "allow";
    readonly deny: "deny";
};
export interface AuthzResult {
    effect: RuleEffects;
    matchedRule?: PolicyRule;
    entity: Obj | Cnx;
}
export interface PolicyRule {
    effect: RuleEffects;
    filter?: (resourceType: string, actionType: string) => boolean;
    matcher?: (accessRequest: AuthzRequest, authz?: Authorizer) => boolean;
    mapper?: (resource: Obj | Cnx) => Obj | Cnx;
}
export declare class Authorizer {
    defaultPolicyChain: PolicyRule[];
    constructor(defaultPolicyChain?: PolicyRule[]);
    authorize(authzRequest: AuthzRequest, policyRuleChain: PolicyRule[]): AuthzResult;
    contains(obj: Record<string, unknown>, objPath: string | string[], match: unknown): boolean;
    private applyChain;
}
export declare class Environment {
    name: string;
    description?: string | undefined;
    timeOfDay?: string;
    timeRange?: {
        start: string;
        end: string;
    };
    dayOfWeek?: string;
    date?: Date;
    isHoliday?: boolean;
    ipAddress?: string;
    geographicLocation?: {
        country?: string;
        region?: string;
        city?: string;
    };
    networkZone?: 'internal' | 'DMZ' | 'external';
    connectionType?: 'VPN' | 'direct' | 'wireless' | string;
    deviceType?: 'company-managed' | 'BYOD' | 'mobile' | 'desktop' | string;
    securityPosture?: {
        patchLevel?: string;
        antivirusStatus?: 'active' | 'inactive' | string;
        encryptionStatus?: 'enabled' | 'disabled' | string;
    };
    operatingSystem?: string;
    osVersion?: string;
    browserType?: string;
    browserVersion?: string;
    certificateStatus?: 'valid' | 'expired' | 'missing' | string;
    threatLevel?: 'low' | 'medium' | 'high' | 'critical' | string;
    anomalyScore?: number;
    previousAuthFailures?: number;
    sessionCharacteristics?: {
        duration?: number;
        idleTime?: number;
    };
    businessProcess?: string;
    emergencyStatus?: boolean;
    systemLoad?: number;
    systemHealth?: 'normal' | 'degraded' | 'critical' | string;
    maintenanceWindow?: boolean;
    dataClassificationLevel?: 'public' | 'internal' | 'confidential' | 'restricted' | string;
    regulatoryJurisdiction?: string[];
    underAudit?: boolean;
    constructor(name: string, description?: string | undefined, attributes?: Partial<Omit<Environment, 'name' | 'description'>>);
}
export type AuthzActionType = Prettify<EangEventTypes | 'read'>;
export declare class AuthzAction {
    type: AuthzActionType;
    data: Record<string, unknown>;
    private constructor();
    static create(data: Record<string, unknown>): AuthzAction;
    static update(data: Record<string, unknown>): AuthzAction;
    static delete(): AuthzAction;
    static start(): AuthzAction;
    static stop(): AuthzAction;
    static read(): AuthzAction;
}