@inrupt/solid-client
Version:
Make your web apps work with Solid Pods.
76 lines (73 loc) • 3.84 kB
JavaScript
import { getResourceInfo } from '../resource/resource.mjs';
import { setPublicAccess as setPublicAccess$1 } from '../acp/util/setPublicAccess.mjs';
import { setPublicResourceAccess, getPublicAccess } from '../access/wac.mjs';
import { getResourceAcr } from '../acp/util/getResourceAcr.mjs';
import { saveAcrFor } from '../acp/acp.mjs';
import { getPublicAccess as getPublicAccess$1 } from './getPublicAccess.mjs';
// Copyright Inrupt Inc.
//
// Permission is hereby granted, free of charge, to any person obtaining a copy
// of this software and associated documentation files (the "Software"), to deal in
// the Software without restriction, including without limitation the rights to use,
// copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
// Software, and to permit persons to whom the Software is furnished to do so,
// subject to the following conditions:
//
// The above copyright notice and this permission notice shall be included in
// all copies or substantial portions of the Software.
//
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
// INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
// PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
// HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
// OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
// SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
//
/**
* Set access to a resource for the public.
*
* This function works with Solid Pods that implement either the Web Access
* Control spec or the Access Control Policies proposal, with some caveats:
*
* - If access to the given Resource has been set using anything other than the
* functions in this module, it is possible that it has been set in a way that
* prevents this function from reliably setting access.
* - It will only set access explicitly for the given Agent. In other words,
* additional restrictions could be present that further restrict or loosen
* what access the given Agent has in particular circumstances.
* - The provided access will only apply to the given Resource. In other words,
* if the Resource is a Container, the configured Access will not apply to
* contained Resources.
* - If the current user does not have permission to view or change access for
* the given Resource, this function will resolve to `null`.
*
* Additionally, two caveats apply to users with a Pod server that uses WAC:
* - If the Resource did not have an ACL yet, a new one will be initialised.
* This means that changes to the ACL of a parent Container can no longer
* affect access people have to this Resource, although existing access will
* be preserved.
* - Setting different values for `controlRead` and `controlWrite` is not
* supported, and **will throw an error**. If you expect (some of) your users
* to have Pods implementing WAC, be sure to pass the same value for both.
*
* @param resourceUrl URL of the Resource you want to set access for.
* @param access The Access Modes to add (true) or remove (false).
* @param options Default Options such as a fetch function.
* @since 1.19.0
*/
async function setPublicAccess(resourceUrl, access, options) {
const resourceInfo = await getResourceInfo(resourceUrl, options);
const acr = await getResourceAcr(resourceInfo, options);
if (acr === null) {
await setPublicResourceAccess(resourceInfo, access, options);
return getPublicAccess(resourceInfo, options);
}
try {
await saveAcrFor(await setPublicAccess$1(acr, access), options);
return await getPublicAccess$1(resourceUrl, options);
}
catch (_a) {
return null;
}
}
export { setPublicAccess };