index.js

'use strict'

const debug = require('debug')('loopback:component:access')
const AccessUtils = require('./utils')
const accessLogger = require('./middleware/access-logger')
const userContext = require('./middleware/user-context')

module.exports = function loopbackComponentAccess(app, options) {
  debug('initializing component')
  const { loopback } = app
  const loopbackMajor = (loopback && loopback.version && loopback.version.split('.')[0]) || 1

  if (loopbackMajor < 2) {
    throw new Error('loopback-component-access-groups requires loopback 2.0 or newer')
  }

  // Initialize middleware.
  app.middleware('auth:after', userContext())
  app.middleware('routes:before', accessLogger())

  // Initialise helper class.
  app.accessUtils = new AccessUtils(app, options)

  // Initialize remoting phase.
  app.accessUtils.setupRemotingPhase()

  // Set up role resolvers.
  app.accessUtils.setupRoleResolvers()

  // Set up model opertion hooks.
  if (options.applyToStatic) {
    app.accessUtils.setupFilters()
  }

// TODO: Create Group Access model automatically if one hasn't been specified
}