feat(rbac): implemented backend base apis for rbac permission system

2026-10-12 19:29:15 +00:00 · 2023-09-08 21:20:29 +05:30
parent 6bca7dcc58
commit 1bf9041ac9
19 changed files with 833 additions and 327 deletions
@@ -1,88 +1,82 @@
 import express from "express";
 const router = express.Router();
 import {
-    requireAuth,
-    requireMembershipOrgAuth,
-    requireOrganizationAuth,
-    validateRequest,
+  requireAuth,
+  requireMembershipOrgAuth,
+  requireOrganizationAuth,
+  validateRequest
 } from "../../middleware";
 import { body, param } from "express-validator";
-import { 
-    ACCEPTED, 
-    ADMIN, 
-    AuthMode,
-    MEMBER,
-    OWNER
-} from "../../variables";
+import { ACCEPTED, ADMIN, AuthMode, MEMBER, OWNER } from "../../variables";
 import { organizationsController } from "../../controllers/v2";

 // TODO: /POST to create membership

 router.get(
-    "/:organizationId/memberships",
-    param("organizationId").exists().trim(),
-    validateRequest,
-    requireAuth({
-        acceptedAuthModes: [AuthMode.JWT, AuthMode.API_KEY],
-    }),
-    requireOrganizationAuth({
-        acceptedRoles: [OWNER, ADMIN, MEMBER],
-        acceptedStatuses: [ACCEPTED],
-    }),
-    organizationsController.getOrganizationMemberships
+  "/:organizationId/memberships",
+  param("organizationId").exists().trim(),
+  validateRequest,
+  requireAuth({
+    acceptedAuthModes: [AuthMode.JWT, AuthMode.API_KEY]
+  }),
+  requireOrganizationAuth({
+    acceptedRoles: [OWNER, ADMIN, MEMBER],
+    acceptedStatuses: [ACCEPTED]
+  }),
+  organizationsController.getOrganizationMemberships
 );

 router.patch(
-    "/:organizationId/memberships/:membershipId",
-    param("organizationId").exists().trim(),
-    param("membershipId").exists().trim(),
-    body("role").exists().isString().trim().isIn([OWNER, ADMIN, MEMBER]),
-    validateRequest,
-    requireAuth({
-        acceptedAuthModes: [AuthMode.JWT, AuthMode.API_KEY],
-    }),
-    requireOrganizationAuth({
-        acceptedRoles: [OWNER, ADMIN],
-        acceptedStatuses: [ACCEPTED],
-    }),
-    requireMembershipOrgAuth({
-        acceptedRoles: [OWNER, ADMIN],
-        acceptedStatuses: [ACCEPTED],
-    }),
-    organizationsController.updateOrganizationMembership
+  "/:organizationId/memberships/:membershipId",
+  param("organizationId").exists().trim(),
+  param("membershipId").exists().trim(),
+  body("role").exists().isString().trim(),
+  validateRequest,
+  requireAuth({
+    acceptedAuthModes: [AuthMode.JWT, AuthMode.API_KEY]
+  }),
+  requireOrganizationAuth({
+    acceptedRoles: [OWNER, ADMIN],
+    acceptedStatuses: [ACCEPTED]
+  }),
+  requireMembershipOrgAuth({
+    acceptedRoles: [OWNER, ADMIN],
+    acceptedStatuses: [ACCEPTED]
+  }),
+  organizationsController.updateOrganizationMembership
 );

 router.delete(
-    "/:organizationId/memberships/:membershipId",
-    param("organizationId").exists().trim(),
-    param("membershipId").exists().trim(),
-    validateRequest,
-    requireAuth({
-        acceptedAuthModes: [AuthMode.JWT, AuthMode.API_KEY],
-    }),
-    requireOrganizationAuth({
-        acceptedRoles: [OWNER, ADMIN],
-        acceptedStatuses: [ACCEPTED],
-    }),
-    requireMembershipOrgAuth({
-        acceptedRoles: [OWNER, ADMIN],
-        acceptedStatuses: [ACCEPTED],
-    }),
-    organizationsController.deleteOrganizationMembership
+  "/:organizationId/memberships/:membershipId",
+  param("organizationId").exists().trim(),
+  param("membershipId").exists().trim(),
+  validateRequest,
+  requireAuth({
+    acceptedAuthModes: [AuthMode.JWT, AuthMode.API_KEY]
+  }),
+  requireOrganizationAuth({
+    acceptedRoles: [OWNER, ADMIN],
+    acceptedStatuses: [ACCEPTED]
+  }),
+  requireMembershipOrgAuth({
+    acceptedRoles: [OWNER, ADMIN],
+    acceptedStatuses: [ACCEPTED]
+  }),
+  organizationsController.deleteOrganizationMembership
 );

 router.get(
-    "/:organizationId/workspaces",
-    param("organizationId").exists().trim(),
-    validateRequest,
-    requireAuth({
-        acceptedAuthModes: [AuthMode.JWT, AuthMode.API_KEY],
-    }),
-    requireOrganizationAuth({
-        acceptedRoles: [OWNER, ADMIN],
-        acceptedStatuses: [ACCEPTED],
-    }),
-    organizationsController.getOrganizationWorkspaces
+  "/:organizationId/workspaces",
+  param("organizationId").exists().trim(),
+  validateRequest,
+  requireAuth({
+    acceptedAuthModes: [AuthMode.JWT, AuthMode.API_KEY]
+  }),
+  requireOrganizationAuth({
+    acceptedRoles: [OWNER, ADMIN],
+    acceptedStatuses: [ACCEPTED]
+  }),
+  organizationsController.getOrganizationWorkspaces
 );

 router.get( // TODO endpoint: deprecate service accounts
@@ -99,4 +93,4 @@ router.get( // TODO endpoint: deprecate service accounts
    organizationsController.getOrganizationServiceAccounts
 );

-export default router;
+export default router;