Implement OAuth2 server, link oauth:Client and auth::Oauth2Client, implement permission checks

2020-05-16 23:55:08 -05:00
parent 6f621f5891
commit d558f21375
51 changed files with 2808 additions and 159 deletions
--- a/app/routing/routers/api/v1/iam.routes.js
+++ b/app/routing/routers/api/v1/iam.routes.js
@@ -0,0 +1,49 @@
+const iam_routes = {
+    prefix: '/api/v1/iam',
+
+    middleware: [
+        'auth:APIRoute'
+    ],
+
+    get: {
+        '/policy': [
+            ['middleware::api:Permission', { check: 'v1:iam:policy:list' }],
+            'controller::api:v1:IAM.get_policies',
+        ],
+        '/policy/:id': [
+            ['middleware::api:Permission', { check: 'v1:iam:policy:get' }],
+            'controller::api:v1:IAM.get_policy',
+        ],
+    },
+
+    post: {
+        '/policy': [
+            ['middleware::api:Permission', { check: 'v1:iam:policy:create' }],
+            'controller::api:v1:IAM.create_policy',
+        ],
+        '/check_entity_access': [
+            ['middleware::api:Permission', { check: 'v1:iam:check_entity_access' }],
+            'controller::api:v1:IAM.check_entity_access',
+        ],
+        '/check_user_access': [
+            ['middleware::api:Permission', { check: 'v1:iam:check_user_access' }],
+            'controller::api:v1:IAM.check_user_access',
+        ],
+    },
+
+    patch: {
+        '/policy/:id': [
+            ['middleware::api:Permission', { check: 'v1:iam:policy:update' }],
+            'controller::api:v1:IAM.update_policy',
+        ],
+    },
+
+    delete: {
+        '/policy/:id': [
+            ['middleware::api:Permission', { check: 'v1:iam:policy:delete' }],
+            'controller::api:v1:IAM.delete_policy',
+        ],
+    },
+}
+
+module.exports = exports = iam_routes