## Installation
npm install @casava/bridgeInstall using npm
```
npm install @casva/bridge
To Decrypt the middleware using the class TokenManager from the crypto folder. It adavisable to decrypt the token in yuor auth middleware.
`ts
import { TokenManager } from "@casava/bridge/build/crypto"
//...
const tokenData = TokenManager.decrypt(req);
`
> To decrypt a bearer token the TOKEN_SECRET in the environment must be the same
as the TOKEN_SECRET used on the service that encrypt the token.
These two annotation provide the request to check for a user permission or role before performing an operation. The combination oof both annotations is an OR condition, if any of the annotation is satisfied then the reqquest will procced to the controller.
The annotatations check the res.locals for the roles and permissions object.
- hasRole expects the expressjs req.local to have an array of roles i.e. res.locals.roles must be array of strings.
- hasAnyPermission expects the expressjs req.local to have an array of permissions i.e. res.locals.permissions must be array of strings.
`ts
import { hasAnyRole, hasAnyPermission } from '@casava/bridge/build/decorators';
class PermissionController {
static PermissionCreationSchema = Joi.object({
permissions: Joi.array().items(Joi.object().keys({
name: Joi.string().required(),
value: Joi.string().required(),
})),
}).options({ abortEarly: false });
@hasAnyRole(["SUPER_ADMINISTRATOR"])
@hasAnyPermission(["CREATE_PERMISSION"])
async store(req: Request, res: Response): Promise
// logic
}
}
`
You can set the value of the express request objects res.locals.roles and res.locals.permissions at the controller middleware.
This package provides the annotation expectedRequestSchema that allows you to validate a request payload before continuing to the controller method.
This works together with the [joi]() package. SO you need to install joi before using the annotation.
`ts
import { expectedRequestSchema } from "@casava/bridge/build/decorators";
class PermissionController {
static PermissionCreationSchema = Joi.object({
permissions: Joi.array().items(Joi.object().keys({
name: Joi.string().required(),
value: Joi.string().required(),
})),
}).options({ abortEarly: false });
@expectedRequestSchema(PermissionController.PermissionCreationSchema)
async store(req: Request, res: Response): Promise
// logic
}
}
`
If the schema check fails the exception CasavaApiBadRequestException` is thrown. The exception is locted at "@casava/bridge/build/exceptions".