Sathira Sri Sathara
9d3d431416
- Added account types and privileged account types constants. - Created admin user controller for updating user security fields. - Developed role assignment controller for managing user roles. - Implemented validation middleware for request schemas. - Defined user role and auth session models for database interactions. - Created services for authentication, email notifications, and OTP handling. - Developed OAuth service for Google and Apple authentication. - Added JWT utility functions for token generation and verification. - Implemented comprehensive tests for authentication, session management, and password policies. - Created migration for updating user schema and adding new tables for auth sessions and user identities.
74 lines
1.8 KiB
JavaScript
74 lines
1.8 KiB
JavaScript
/**
|
|
* Copyright (c) 2026 Niolla
|
|
* All rights reserved.
|
|
*
|
|
* This source code is proprietary and confidential.
|
|
* Unauthorized copying, modification, distribution, or use
|
|
* of this file, via any medium, is strictly prohibited.
|
|
*/
|
|
|
|
// app/services/permission.service.js
|
|
|
|
const db = require("../models");
|
|
const User = db.User;
|
|
const RolePermission = db.rolePermission;
|
|
const UserRole = db.UserRole;
|
|
const UserPermission = db.userPermission;
|
|
|
|
const {
|
|
getCachedPermissions,
|
|
setCachedPermissions
|
|
} = require("../utils/cache.util");
|
|
|
|
const getEffectivePermissions = async (userId) => {
|
|
try {
|
|
const cached = await getCachedPermissions(userId);
|
|
if (cached) {
|
|
console.log("⚡ PERMISSION CACHE HIT");
|
|
return cached;
|
|
}
|
|
|
|
console.log("🐢 PERMISSION CACHE MISS");
|
|
|
|
const user = await User.findByPk(userId);
|
|
if (!user) return [];
|
|
|
|
const roles = await UserRole.findAll({ where: { user_id: userId }, attributes: ["role_id"] });
|
|
const rolePermissions = roles.length ? await RolePermission.findAll({
|
|
where: { role_id: roles.map((role) => role.role_id) },
|
|
attributes: ["permission_id"]
|
|
}) : [];
|
|
|
|
const userPermissions = await UserPermission.findAll({
|
|
where: { user_id: userId },
|
|
attributes: ["permission_id"]
|
|
});
|
|
|
|
const map = {};
|
|
|
|
// role permissions
|
|
rolePermissions.forEach((rp) => {
|
|
map[rp.permission_id] = true;
|
|
});
|
|
|
|
// user overrides (just add)
|
|
userPermissions.forEach((up) => {
|
|
map[up.permission_id] = true;
|
|
});
|
|
|
|
const finalPermissions = Object.keys(map);
|
|
|
|
console.log("FINAL PERMS:", finalPermissions);
|
|
|
|
await setCachedPermissions(userId, finalPermissions);
|
|
|
|
return finalPermissions;
|
|
|
|
} catch (err) {
|
|
console.error("PERMISSION SERVICE ERROR:", err);
|
|
return [];
|
|
}
|
|
};
|
|
|
|
module.exports = { getEffectivePermissions };
|