Julien Gautier
540d9dc28a
CI / check (pull_request) Failing after 28s
CI / commits (pull_request) Failing after 25s
CI / scan (pull_request) Failing after 56s
CI / a11y (pull_request) Failing after 33s
CI / perf (pull_request) Failing after 47s
Docs site / build (pull_request) Failing after 26s
Per ADR-0025's implementation phasing, lands the closed-set catalogues + the OIDC-callback hook that composes the session-resident Principal. No new guards yet. - libs/shared/auth: framework-agnostic lib hosting authorization.types.ts (4 privileges + 24 functional roles + 6 scope kinds + Principal type) and entra-group-to-role.ts (validated GUID -> slug resolver). 17 unit tests against the catalogues + resolver contracts. - BFF: PrincipalBuilder composes the three axes once at sign-in; ScopeResolver seam (StubScopeResolver returns unrestricted in v1, replaced by a Prisma-backed implementation when ADR-0026's user_scopes table lands). 19 persona-driven tests covering the test tenant's full provisioning + edge cases (unknown privilege drift, unknown group GUID, empty permissions). - AuthService extracts the Entra "groups" claim; AuthenticatedUser grows the groups: readonly string[] field. - SessionEstablisher builds + persists the principal alongside the legacy user shape (additive — guards consuming user.oid unchanged). - ENTRA_GROUP_MAP_PATH env var + load-entra-group-map.ts read the tenant-private map from infra/<env>-tenant.entra.json (gitignored; .example.json committed with the schema). - ADR-0025 path references updated from libs/feature/auth (Angular-scoped, scope:portal-shell) to libs/shared/auth (consumable by both BFF and SPA). - notes/entra-groups-claim-activation.md: operator runbook for the "Token configuration -> Add groups claim" step in the Entra admin centre. Test plan: - pnpm nx affected -t lint test build : 13 projects green (497 BFF tests + 17 shared-auth tests + 1 shared-util test + full lint + full build).
36 lines
1.1 KiB
JSON
36 lines
1.1 KiB
JSON
{
|
|
"compilerOptions": {
|
|
"rootDir": ".",
|
|
"paths": {
|
|
"shared-auth": ["./libs/shared/auth/src/index.ts"],
|
|
"shared-tokens": ["./libs/shared/tokens/src/index.ts"],
|
|
"shared-util": ["./libs/shared/util/src/index.ts"],
|
|
"shared-ui": ["./libs/shared/ui/src/index.ts"],
|
|
"feature-auth": ["./libs/feature/auth/src/index.ts"],
|
|
"shared-state": ["./libs/shared/state/src/index.ts"],
|
|
"shared-charts": ["./libs/shared/charts/src/index.ts"]
|
|
},
|
|
"sourceMap": true,
|
|
"declaration": false,
|
|
"importHelpers": true,
|
|
"isolatedModules": true,
|
|
"lib": ["es2022", "dom"],
|
|
"module": "esnext",
|
|
"moduleResolution": "bundler",
|
|
"target": "es2022",
|
|
"experimentalDecorators": true,
|
|
"emitDecoratorMetadata": true,
|
|
"useDefineForClassFields": false,
|
|
"noFallthroughCasesInSwitch": true,
|
|
"noImplicitOverride": true,
|
|
"noImplicitReturns": true,
|
|
"noUnusedLocals": true,
|
|
"skipLibCheck": true,
|
|
"skipDefaultLibCheck": true,
|
|
"strict": true,
|
|
"noUncheckedIndexedAccess": true,
|
|
"exactOptionalPropertyTypes": true,
|
|
"noPropertyAccessFromIndexSignature": true
|
|
}
|
|
}
|