keycloak-lambda-authorizer
Version:
42 lines • 2.08 kB
JavaScript
;
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.DefaultEnforcer = void 0;
const RealmRoleEnforcer_1 = require("./RealmRoleEnforcer");
const ClientRoleEnforcer_1 = require("./ClientRoleEnforcer");
const ResourceEnforcer_1 = require("./ResourceEnforcer");
class DefaultEnforcer {
constructor(options) {
this.options = options;
this.realmEnforcer = new RealmRoleEnforcer_1.RealmRoleEnforcer(options);
this.clientEnforcer = new ClientRoleEnforcer_1.ClientRoleEnforcer(options);
this.resourceEnforcer = new ResourceEnforcer_1.ResourceEnforcer(options);
}
enforce(requestContent, enforcerFunc) {
return __awaiter(this, void 0, void 0, function* () {
const enforcer = yield enforcerFunc(this.options, requestContent);
if (!enforcer) {
throw new Error('enforcer does not provided');
}
if (enforcer.realmRole) {
yield this.realmEnforcer.enforce(requestContent, enforcerFunc);
}
else if (enforcer.clientRole) {
yield this.clientEnforcer.enforce(requestContent, enforcerFunc);
}
else {
yield this.resourceEnforcer.enforce(requestContent, enforcerFunc);
}
});
}
}
exports.DefaultEnforcer = DefaultEnforcer;
//# sourceMappingURL=Enforcer.js.map