updated to v0.6

Author: zender

.travis.yml

@@ -1,6 +1,7 @@
 language: node_js
 node_js:
   - "12"
+  - "13"
 cache:
   directories:
     - "node_modules"
@@ -15,7 +16,7 @@ before_install:
   - ./cc-test-reporter before-build
 install:
   - npm install
-  - npm install @rxstack/core@^0.5 @rxstack/async-event-dispatcher@^0.5 @rxstack/platform@^0.5 @rxstack/exceptions@^0.5 @rxstack/query-filter@^0.5 @rxstack/security@^0.5 @rxstack/utils@^0.5 @rxstack/service-registry@^0.5 winston@^3.2.1
+  - npm install @rxstack/core@^0.6 @rxstack/async-event-dispatcher@^0.5 @rxstack/platform@^0.6 @rxstack/exceptions@^0.5 @rxstack/query-filter@^0.5 @rxstack/security@^0.6 @rxstack/utils@^0.5 @rxstack/service-registry@^0.5 winston@^3.2.1
 script:
   - npm test
 after_script:

README.md

@@ -15,6 +15,7 @@
     - [associateWithCurrentUser](#callbacks-associate-with-current-user)
     - [queryWithCurrentUser](#callbacks-query-with-current-user)
     - [restrictToAuthenticatedUser](#callbacks-restrict-to-authenticated-user)
+    - [restrictToAnonymousUser](#callbacks-restrict-to-anonymous-user)
     - [restrictToOwner](#callbacks-restrict-to-owner)
     - [restrictToRole](#callbacks-restrict-to-role)
     - [objectExists](#callbacks-object-exists)
@@ -33,7 +34,7 @@
 npm install @rxstack/platform-callbacks --save
 
 // peer depencencies
-npm install @rxstack/core@^0.5 @rxstack/async-event-dispatcher@^0.5 @rxstack/platform@^0.5 @rxstack/exceptions@^0.5 @rxstack/query-filter@^0.5 @rxstack/security@^0.5 @rxstack/utils@^0.5 @rxstack/service-registry@^0.5 winston@^3.2.1
+npm install @rxstack/core@^0.6 @rxstack/async-event-dispatcher@^0.5 @rxstack/platform@^0.6 @rxstack/exceptions@^0.5 @rxstack/query-filter@^0.5 @rxstack/security@^0.6 @rxstack/utils@^0.5 @rxstack/service-registry@^0.5 winston@^3.2.1
 ```
 
 ## <a name="callbacks"></a> Callbacks
@@ -193,6 +194,29 @@ import {restrictToAuthenticatedUser} from '@rxstack/platform-callbacks';
 })
 ```
 
+### <a name="callbacks-restrict-to-anonymous-user"></a> restrictToAnonymousUser
+
+Restricts resource to anonymous user `request.token`.
+
+Available on:
+
+- `preExecute`
+
+Example: 
+
+```typescript
+// ...
+import {restrictToAnonymousUser} from '@rxstack/platform-callbacks';
+
+@Operation<ResourceOperationMetadata<Task>>({
+  // ...
+  onPreExecute: [
+    // ...
+    restrictToAnonymousUser()
+  ]
+})
+```
+
 ### <a name="callbacks-restrict-to-owner"></a> restrictToOwner
 
 Restricts resource to current user `request.token.getUser()`.
@@ -594,9 +618,9 @@ import {validateUnique} from '@rxstack/platform-callbacks';
     validateUnique({
       service: TaskService,
       properties: ['name'],
-      propertyPath: 'name',
+      errorPath: 'name',
       method: 'findMany',
-      mesage: 'Property name should be unique'
+      message: 'Property name should be unique'
     })
   ]
 })

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rxstack/platform-callbacks",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "RxStack platform specific middleware",
   "private": false,
   "author": "Nikolay Georgiev <symfonist@gmail.com>",
@@ -28,32 +28,32 @@
     "test": "npm run lint && npm run coverage"
   },
   "peerDependencies": {
-    "@rxstack/core": "^0.5",
-    "@rxstack/platform": "^0.5",
-    "@rxstack/security": "^0.5",
+    "@rxstack/core": "^0.6",
+    "@rxstack/platform": "^0.6",
+    "@rxstack/security": "^0.6",
     "@rxstack/utils": "^0.5"
   },
   "dependencies": {
     "class-transformer": "^0.1.10",
     "class-validator": "^0.9.1",
-    "injection-js": "^2.2.2",
+    "injection-js": "^2.3.0",
     "lodash": "^4.17.11",
     "reflect-metadata": "^0.1.13"
   },
   "devDependencies": {
-    "@types/chai": "^4.2.6",
+    "@types/chai": "^4.2.7",
     "@types/lodash": "^4.14.149",
     "@types/mocha": "^2.2.48",
-    "@types/node": "^12.12.14",
+    "@types/node": "^12.12.25",
     "chai": "3.5.0",
     "mocha": "^5.2.0",
     "nyc": "^14.1.1",
     "should": "^13.2.3",
     "sinon": "^6.3.4",
     "source-map-support": "^0.4.15",
-    "ts-node": "^8.5.4",
+    "ts-node": "^8.6.2",
     "tslint": "^5.20.1",
-    "typescript": "^3.7.3"
+    "typescript": "^3.7.5"
   },
   "bugs": {
     "url": "https://github.com/rxstack/platform-callbacks/issues"

src/index.ts

@@ -12,6 +12,7 @@ export * from './soft-delete';
 export * from './restrict-to-role';
 export * from './query-with-current-user';
 export * from './restrict-to-owner';
+export * from './restrict-to-anonymous-user';
 export * from './associate-with-current-user';
 export * from './restrict-to-authenticated-user';
 export * from './query-filter';

src/restrict-to-anonymous-user.ts

@@ -0,0 +1,14 @@
+import {OperationCallback, OperationEvent, OperationEventsEnum} from '@rxstack/platform';
+import {UnauthorizedException} from '@rxstack/exceptions';
+import {AnonymousToken} from '@rxstack/security';
+import {restrictToOperations} from './utils';
+
+export const restrictToAnonymousUser = (): OperationCallback => {
+  return async (event: OperationEvent): Promise<void> => {
+    restrictToOperations(event.eventType, [OperationEventsEnum.PRE_EXECUTE]);
+    const token = event.request.token;
+    if (false === (!token || token instanceof AnonymousToken)) {
+      throw new UnauthorizedException();
+    }
+  };
+};

test/restrict-to-anonymous-user.spec.ts

@@ -0,0 +1,38 @@
+import 'reflect-metadata';
+import {Injector} from 'injection-js';
+import {Request} from '@rxstack/core';
+import {OperationEvent, OperationEventsEnum} from '@rxstack/platform';
+import {app_get_metadata} from './mocks/shared/app.metadata';
+import {restrictToAnonymousUser} from '../src';
+import {AnonymousToken} from '@rxstack/security';
+import {Token} from './mocks/shared/token';
+import {UnauthorizedException} from '@rxstack/exceptions';
+
+const sinon = require('sinon');
+const injector = sinon.createStubInstance(Injector);
+
+describe('PlatformCallbacks:restrict-to-anonymous-user', () => {
+
+  it('should pass anonymous user', async () => {
+    const request = new Request('HTTP');
+    request.token = new AnonymousToken();
+    const apiEvent = new OperationEvent(request, injector, app_get_metadata);
+    apiEvent.eventType = OperationEventsEnum.PRE_EXECUTE;
+    await restrictToAnonymousUser()(apiEvent); // do nothing
+  });
+
+  it('should throw an exception', async () => {
+    const request = new Request('HTTP');
+    request.token = new Token();
+    const apiEvent = new OperationEvent(request, injector, app_get_metadata);
+    apiEvent.eventType = OperationEventsEnum.PRE_EXECUTE;
+    let exception: UnauthorizedException;
+    try {
+      await restrictToAnonymousUser()(apiEvent);
+    } catch (e) {
+      exception = e;
+    }
+    exception.should.be.instanceOf(UnauthorizedException);
+  });
+
+});