hapi-authorization-feature/lib/acl.js

ACL support for hapijs apps

// External modules
const Boom = require('@hapi/boom');
const _ = require('underscore');

// Declare of internals
const internals = {};


/**
 * Checks if the user has the wanted roles
 *
 * @param user	- The user to check if they have a role
 * @param role	- The role to check if the user has
 * @returns {*}
 */
exports.checkRoles = function(user, params) {
    if ((!user) || (!internals.isGranted(user, params))) {
        return Boom.forbidden('Unauthorized');
    }

    return null;
};

/**
 * Checks if the provided user role/function and feature/subfeature is included is the required role/function and feature/subfeature respectively
 *
 * @param userRole			- The role(s) that the user has
 * @param requiredRole	- The role(s) that is required
 * @returns {boolean}		- True/False whether the user has access
 */
internals.isGranted = function(user, params) {
    let userRoles = user.roles;
    let userFunctions = user.functions;
    let userFeatures = user.features;
    let userSubfeatures = user.sub_features;
    let accessGranted = false;
    let isUserRole = false;
    if(params.roles)
    {
        let matchingRole = userRoles.filter(role =>params.roles.includes(role));
        isUserRole = matchingRole.length > 0;
    }
    if (!params.validateFeature || userFeatures && userFeatures.indexOf(params.feature) !== -1 || userSubfeatures && userSubfeatures.indexOf(params.subfeature) !== -1) {
        if (userRoles && isUserRole || userFunctions && userFunctions.indexOf(params.function) !== -1) {
            accessGranted = true;
        }
    }
    return accessGranted;
};