Skip to content
This repository has been archived by the owner on Jun 9, 2023. It is now read-only.

feat: authorization #814

Merged
merged 17 commits into from
Jun 13, 2022
Merged

feat: authorization #814

merged 17 commits into from
Jun 13, 2022

Commits on Jun 8, 2022

  1. feat: implement authorization model

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    6a2dd39 View commit details
    Browse the repository at this point in the history

  2. fix: handle new db structure

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    1608643 View commit details
    Browse the repository at this point in the history

  3. fix: use eventId for events 

    This gives consistency with other requests and allows auth to
differentiate between requests
    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    be0509e View commit details
    Browse the repository at this point in the history

  4. feat: use instance role to find permissions

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    d526500 View commit details
    Browse the repository at this point in the history

  5. DEBUG: add auth decorator

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    5fae47a View commit details
    Browse the repository at this point in the history

  6. Revert "DEBUG: add auth decorator" 

    This reverts commit 761238a.
    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    530222d View commit details
    Browse the repository at this point in the history

  7. test: update getEventUsers to use eventId

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    ae70957 View commit details
    Browse the repository at this point in the history

  8. test: add tests for three types of users 

    A user with an instance role, one with a chapter role and third with an
event role
    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    ea719d7 View commit details
    Browse the repository at this point in the history

  9. fix: fetch events' chapter_ids when getting user 

    Rather than requiring a second db request during authorization
    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    d229aa8 View commit details
    Browse the repository at this point in the history

  10. chore: include lodash as a dev dep

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    7b1286b View commit details
    Browse the repository at this point in the history

  11. chore: add @types/lodash

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    7c19101 View commit details
    Browse the repository at this point in the history

  12. test: improve test readability

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    fd3d989 View commit details
    Browse the repository at this point in the history

  13. refactor: update the comments

    @ojeytonwilliams
    ojeytonwilliams committed Jun 8, 2022
    Configuration menu
    Copy the full SHA
    fcd3d1f View commit details
    Browse the repository at this point in the history

Commits on Jun 9, 2022

  1. refactor: use clearer variable and function names 

    Co-authored-by: Krzysztof G. <60067306+gikf@users.noreply.github.com>
    @ojeytonwilliams @gikf
    ojeytonwilliams and gikf committed Jun 9, 2022
    Configuration menu
    Copy the full SHA
    a95b2fb View commit details
    Browse the repository at this point in the history

  2. refactor: rename allowingPermissions

    @ojeytonwilliams
    ojeytonwilliams committed Jun 9, 2022
    Configuration menu
    Copy the full SHA
    d7c0f92 View commit details
    Browse the repository at this point in the history

  3. fix: remove variable validation 

    It does not seem necessary, since invalid variables will be ignored and
so should never grant permission incorrectly.

Invalid requests will be denied without explanation, so we can revisit
this approach if that happens too often.
    @ojeytonwilliams
    ojeytonwilliams committed Jun 9, 2022
    Configuration menu
    Copy the full SHA
    e01a534 View commit details
    Browse the repository at this point in the history

Commits on Jun 10, 2022

  1. fix: reject request unless resolver has 1 perm

    @ojeytonwilliams
    ojeytonwilliams committed Jun 10, 2022
    Configuration menu
    Copy the full SHA
    55c3132 View commit details
    Browse the repository at this point in the history