IT4Change/gradido
3
0
Fork 0
mirror of https://github.com/IT4Change/gradido.git synced 2025-12-13 07:45:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

right check for searchUsers & verifyLogin

Browse Source
This commit is contained in:
Ulf Gebhardt 2021-11-25 09:01:23 +01:00
parent 754bd89723
commit 31a3837fa5
Signed by: ulfgebhardt
GPG Key ID: DA6B843E748679C9
4 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
backend/src/auth/RIGHTS.ts
View File

@ -1,5 +1,6 @@
export enum RIGHTS { export enum RIGHTS {
LOGIN = 'LOGIN', LOGIN = 'LOGIN',
VERIFY_LOGIN = 'VERIFY_LOGIN',
BALANCE = 'BALANCE', BALANCE = 'BALANCE',
GET_COMMUNITY_INFO = 'GET_COMMUNITY_INFO', GET_COMMUNITY_INFO = 'GET_COMMUNITY_INFO',
COMMUNITIES = 'COMMUNITIES', COMMUNITIES = 'COMMUNITIES',
@ -20,4 +21,6 @@ export enum RIGHTS {
CHECK_USERNAME = 'CHECK_USERNAME', CHECK_USERNAME = 'CHECK_USERNAME',
CHECK_EMAIL = 'CHECK_EMAIL', CHECK_EMAIL = 'CHECK_EMAIL',
HAS_ELOPAGE = 'HAS_ELOPAGE', HAS_ELOPAGE = 'HAS_ELOPAGE',
// Admin
SEARCH_USERS = 'SEARCH_USERS',
} }

1
backend/src/auth/ROLES.ts
View File

@ -5,6 +5,7 @@ import { Role } from './Role'
export const ROLE_UNAUTHORIZED = new Role('unauthorized', INALIENABLE_RIGHTS) export const ROLE_UNAUTHORIZED = new Role('unauthorized', INALIENABLE_RIGHTS)
export const ROLE_USER = new Role('user', [ export const ROLE_USER = new Role('user', [
...INALIENABLE_RIGHTS, ...INALIENABLE_RIGHTS,
RIGHTS.VERIFY_LOGIN,
RIGHTS.BALANCE, RIGHTS.BALANCE,
RIGHTS.LIST_GDT_ENTRIES, RIGHTS.LIST_GDT_ENTRIES,
RIGHTS.EXIST_PID, RIGHTS.EXIST_PID,

4
backend/src/graphql/resolver/AdminResolver.ts
View File

@ -1,10 +1,12 @@
import { Resolver, Query, Arg } from 'type-graphql' import { Resolver, Query, Arg, Authorized } from 'type-graphql'
import { getCustomRepository } from 'typeorm' import { getCustomRepository } from 'typeorm'
import { UserAdmin } from '../model/UserAdmin' import { UserAdmin } from '../model/UserAdmin'
import { LoginUserRepository } from '../../typeorm/repository/LoginUser' import { LoginUserRepository } from '../../typeorm/repository/LoginUser'
import { RIGHTS } from '../../auth/RIGHTS'
@Resolver() @Resolver()
export class AdminResolver { export class AdminResolver {
@Authorized([RIGHTS.SEARCH_USERS])
@Query(() => [UserAdmin]) @Query(() => [UserAdmin])
async searchUsers(@Arg('searchText') searchText: string): Promise<UserAdmin[]> { async searchUsers(@Arg('searchText') searchText: string): Promise<UserAdmin[]> {
const loginUserRepository = getCustomRepository(LoginUserRepository) const loginUserRepository = getCustomRepository(LoginUserRepository)

2
backend/src/graphql/resolver/UserResolver.ts
View File

@ -195,7 +195,7 @@ const SecretKeyCryptographyDecrypt = (encryptedMessage: Buffer, encryptionKey: B
@Resolver() @Resolver()
export class UserResolver { export class UserResolver {
@Authorized() @Authorized([RIGHTS.VERIFY_LOGIN])
@Query(() => User) @Query(() => User)
@UseMiddleware(klicktippNewsletterStateMiddleware) @UseMiddleware(klicktippNewsletterStateMiddleware)
async verifyLogin(@Ctx() context: any): Promise<User> { async verifyLogin(@Ctx() context: any): Promise<User> {