-
-
Notifications
You must be signed in to change notification settings - Fork 57
Expand file tree
/
Copy pathindex.tst.ts
More file actions
119 lines (106 loc) · 2.97 KB
/
Copy pathindex.tst.ts
File metadata and controls
119 lines (106 loc) · 2.97 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
import fastify, { FastifyInstance, FastifyReply, FastifyRequest, preHandlerHookHandler } from 'fastify'
import fastifyAuth from '..'
import { expect } from 'tstyche'
import { TypeBoxTypeProvider } from '@fastify/type-provider-typebox'
import { JsonSchemaToTsProvider } from '@fastify/type-provider-json-schema-to-ts'
const app = fastify()
type Done = (error?: Error) => void
app.register(fastifyAuth).after((_err) => {
app.auth([
(request, reply, done) => {
expect(request).type.toBe<FastifyRequest>()
expect(reply).type.toBe<FastifyReply>()
expect(done).type.toBe<Done>()
},
], { relation: 'or' })
app.auth([
(request, reply, done) => {
expect(request).type.toBe<FastifyRequest>()
expect(reply).type.toBe<FastifyReply>()
expect(done).type.toBe<Done>()
},
], { run: 'all' })
app.auth([
(request, reply, done) => {
expect(request).type.toBe<FastifyRequest>()
expect(reply).type.toBe<FastifyReply>()
expect(done).type.toBe<Done>()
},
])
app.auth([
function () {
expect(this).type.toBe<FastifyInstance>()
},
])
const auth = app.auth([() => {}])
expect(auth).type.toBe<preHandlerHookHandler>()
app.get('/secret', { preHandler: auth }, () => { })
app.get('/private', { preHandler: [auth] }, () => {})
})
const typebox = fastify().withTypeProvider<TypeBoxTypeProvider>()
typebox.register(fastifyAuth)
typebox.route({
method: 'GET',
url: '/',
preHandler: typebox.auth([]),
handler: () => {}
})
const jsonSchemaToTS = fastify().withTypeProvider<JsonSchemaToTsProvider>()
jsonSchemaToTS.register(fastifyAuth)
jsonSchemaToTS.route({
method: 'GET',
url: '/',
preHandler: jsonSchemaToTS.auth([]),
handler: () => {}
})
declare module 'fastify' {
interface FastifyRequest {
identity: { actorId: string };
}
interface FastifyInstance {
authenticate: (request: FastifyRequest) => Promise<void>;
}
}
export const usersMutationAccessPolicy =
(fastify: FastifyInstance) =>
async (
request: FastifyRequest<{
Params: { userId: string }
}>
): Promise<void> => {
const { actorId } = request.identity
const isOwner = actorId === request.params.userId
if (isOwner) {
return
}
fastify.log.warn('Actor should not be able to see this route')
throw new Error(request.params.userId)
}
async function usersController (fastify: FastifyInstance): Promise<void> {
fastify.patch<{
Params: { userId: string };
Body: { name: string };
}>(
'/:userId',
{
onRequest: fastify.auth([
usersMutationAccessPolicy(fastify),
]),
},
async () => ({ success: true })
)
}
usersController(app)
async function usersControllerV2 (fastify: FastifyInstance): Promise<void> {
fastify.patch<{
Params: { userId: string };
Body: { name: string };
}>(
'/:userId',
{
onRequest: usersMutationAccessPolicy(fastify),
},
async () => ({ success: true })
)
}
usersControllerV2(app)