node-casbin / nest-authz Goto Github PK

The AuthZGuard before v2.5.0 expected 3 arguments, but now only expected 1.

Hi, NestJS was updated some days ago to v10, is posible update this package to @nestjs/common@"^10.0.0 ?

In the documentation there is the following code:

import { TypeOrmModule } from '@nestjs/typeorm';

@Module({
  imports: [
    AuthZModule.register({
      model: 'model.conf',
      policy: TypeORMAdapter.newAdapter({
        name: 'casbin',
        type: 'mysql',
        host: 'localhost',
        port: 3306,
        username: 'root',
        password: 'password',
        database: 'nestdb'
      }),
      usernameFromContext: (ctx) => {
        const request = ctx.switchToHttp().getRequest();
        return request.user && request.user.username;
      }
    }),
  ],
})

What does the name field do in TypeORMAdapter?

Hey folks, this package does not work with nestjs v9 due to out-of-date dependencies.

This PR #154 contains a fix for it, but it might require another upgrade

自定义了一个policy adapter,它依赖一个service服务，但目前这个动态模块无法注入依赖，因此就硬编码了一个，所以能否改进一下authzmodule?

@Module({
  providers: [],
  exports: [],
})
export class CasbinModule {
  static register(options: AuthZModuleOptions): DynamicModule {
    const moduleOptionsProvider = {
      provide: AUTHZ_MODULE_OPTIONS,
      useValue: options || {},
    };

    const enforcerProvider = {
      provide: AUTHZ_ENFORCER,
      useFactory: async (service: CustomService) => {
        const policy = new CustomAdapter(service);
        return casbin.newEnforcer('model.conf', policy);
      },
      inject: [CustomService],
    };
    return {
      module: CasbinModule,
      imports: [CustomModule],
      providers: [
        moduleOptionsProvider,
        enforcerProvider,
        AuthZGuard,
        AuthZRBACService,
        AuthZManagementService,
      ],
      exports: [
        moduleOptionsProvider,
        enforcerProvider,
        AuthZGuard,
        AuthZRBACService,
        AuthZManagementService,
      ],
    };
  }
}

能否将AuthActionVerb中的READ精分为查询列表和查询详情。如BROWSE/READ、 LIST/GET或者QUERY/GET 等类似的，否则要单独写一个列表资源字符串

使用以下代码增加用户或角色后无法自动更新或手动更新权限列表，
await this.authZRBACService.addRoleForUser('menu_list', 'menu');
现只能通过修改authz-management.service.ts 文件中增加一个更新方法来临时解决，
loadPolicy(): Promise<void> { return this.enforcer.loadPolicy(); }
在项目中调用
await this.authZManagementService.loadPolicy();

不过不知道是否有更好的方式，如有请回复我下，十分感谢。

Error: Classes annotated with @Injectable(), @catch(), and @controller() decorators must not appear in the "imports" array of a module.

https://github.com/node-casbin/nest-authz/actions/runs/1124113925

will nest-authz work with mongoose , typegoose and prisma ?
casl v5 works only with typeorm in nestjs currently, i'm considering switching to casbin