detleph/server
1
0
Fork 0
mirror of https://github.com/detleph/server.git synced 2026-09-04 16:46:04 +02:00
Code Issues 9 Packages Projects Releases Wiki Activity

added STANDARD admin responsibility

Browse Source
This commit is contained in:
Laurin
2022-06-06 18:34:59 +02:00
parent 339ecff938
commit 60100273fb
10 changed files with 92 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Middleware/auth/auth.ts
+13 -3
View File
@@ -173,12 +173,22 @@ export const requireConfiguredAuthentication =
next();
};
export function requireResponsibleForGroup(auth: AuthJWTPayload | undefined, groupPid: string) {
export function requireResponsibleForGroups(auth: AuthJWTPayload | undefined, groupPids: string[] | string) {
if (auth?.permission_level === "ELEVATED") {
return;
}
if (!auth?.groups.includes(groupPid)) {
throw new AuthError("The provided authorization is not valid for the requested operation!");
if (Array.isArray(groupPids)) {
groupPids.forEach(gr => {
if (auth?.groups.includes(gr)) {
return;
}
throw new AuthError("The provided authorization is not valid for the requested operation!");
});
} else {
if (auth?.groups.includes(groupPids)) {
throw new AuthError("The provided authorization is not valid for the requested operation!");
}
}
}
src/Middleware/auth/teamleaderAuth.ts
+2 -1
View File
@@ -85,7 +85,8 @@ export const _requireTeamleaderAuthentication =
export const requireTeamleaderAuthentication = _requireTeamleaderAuthentication({ optional: false, controlled: false });
export function requireLeaderOfTeam(auth: TeamleaderJWTPayload | undefined, teamPid: string) {
export async function requireLeaderOfTeam(auth: TeamleaderJWTPayload | undefined, teamPid: string) {
await checkTeamExistence(teamPid);
if (auth?.team !== teamPid) {
throw new AuthError("The provided authorization is not valid for the requested team");
}