@wizeline/access-decision-manager-express
Version:
An implementation of the Voter pattern for determining access rights for express
42 lines • 1.83 kB
JavaScript
;
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : new P(function (resolve) { resolve(result.value); }).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
var __importStar = (this && this.__importStar) || function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
result["default"] = mod;
return result;
};
Object.defineProperty(exports, "__esModule", { value: true });
const HTTPStatus = __importStar(require("http-status-codes"));
const isGrantedMiddleware = (attribute, subjectGetter) => (req, res, next) => __awaiter(this, void 0, void 0, function* () {
try {
let subject;
if (subjectGetter) {
subject = yield subjectGetter(req);
}
const isGranted = yield req.accessDecisionManager.isGranted(attribute, subject);
if (!isGranted) {
res.status(HTTPStatus.FORBIDDEN).end();
next(HTTPStatus.FORBIDDEN);
return;
}
}
catch (e) {
res.status(HTTPStatus.INTERNAL_SERVER_ERROR).end();
// eslint-disable-next-line no-console
console.error(e);
next(HTTPStatus.INTERNAL_SERVER_ERROR);
return;
}
next();
});
exports.default = isGrantedMiddleware;
//# sourceMappingURL=is-granted-middleware.js.map