FEAT: squash - auth guard

nestjs access controll mock

swagger implementation

middleware changes and lib

permissions file back to maestro

FEAT: sending permissions to duc on startup


FEAT: new permissions.enum format


FEAT: permissions injection (maestro -> duc)


FIX: changing method invocation order


FEAT: refactored permission enum + duc permission injector + grpcHandler


FEAT: auth guards


FEAT: seq ids updated

src/modules/inputs/inputs.controller.ts

@@ -10,6 +10,9 @@ import {
 import { InputsService } from './inputs.service';
 import { InputsClientService } from 'src/clients/inputs/client.service';
 import { UpdateInputRequest } from 'src/clients/inputs/interfaces';
+import { InputNewCreateRequest } from '@victorradael/protospack';
+import { Permissions } from '../../authentication/permissions.enum';
+import { AuthenticateCondition } from 'src/authentication/authentication.decorator';
 import { ApiOkResponse, ApiTags } from '@nestjs/swagger';
 import {
   CreateInputReq,
@@ -24,6 +27,35 @@ import {
 
 @ApiTags('inputs')
 @Controller('inputs')
+@AuthenticateCondition((req, user) => {
+  let action;
+
+  switch (req.method) {
+    case 'POST':
+      action = 'CREATE';
+      break;
+
+    case 'PUT':
+      action = 'UPDATE';
+      break;
+
+    case 'PATCH':
+      action = 'UPDATE_PARTIAL';
+      break;
+
+    default:
+      action = req.method;
+  }
+
+  if (
+    `${req.method} ${req.route.path}` ===
+    'GET /inputs/available-entities/:plugin'
+  ) {
+    action = 'GET_ENTITIES';
+  }
+
+  return user.permissions.includes(Permissions.INPUT[action].seqid);
+})
 export class InputsController {
   inputService: InputsService;
   constructor(private inputsClientService: InputsClientService) {