node-jet/lib/3_jet/daemon/UserManager.js

Jet Realtime Message Bus for the Web. Daemon and Peer implementation.

import { NotAuthorized, invalidRequest } from '../errors.js';
export class UserManager {
    users;
    groups;
    enabled;
    constructor(adminUser, password) {
        if (adminUser && password) {
            this.enabled = true;
            this.users = { [adminUser]: password };
            this.groups = { admin: [adminUser], all: [adminUser] };
        }
        else {
            this.users = {};
            this.groups = {};
            this.enabled = false;
        }
    }
    addUser = (requestUser, newUser, password, groups) => {
        if (!this.groups.admin.includes(requestUser)) {
            throw new NotAuthorized('Only admin users can create User');
        }
        if (Object.keys(this.users).includes(newUser)) {
            throw new NotAuthorized('User already exists');
        }
        this.users[newUser] = password;
        groups.forEach((group) => {
            if (!(group in Object.keys(this.groups))) {
                this.groups[group] = [];
            }
            this.groups[group].push(newUser);
        });
        this.groups.all.push(newUser);
    };
    login = (user, password) => Object.keys(this.users).includes(user) && password === this.users[user];
    isAllowed = (method, user, access) => {
        if (!access)
            return true;
        const group = method === 'get' ? access.read : access.write;
        if (group && !(group in this.groups)) {
            throw new invalidRequest('Invalid group', 'Requested group does not exist');
        }
        return (group === '' ||
            typeof group === 'undefined' ||
            this.groups[group].includes(user));
    };
}