@janiscommerce/api-session

api-session

A session manager for APIs

Installation

npm install @janiscommerce/api-session

API

The package exports two classes ApiSession and ApiSessionError.

• validateStore(storeId) Validate if the store given is valid for the session. Returns Boolean.

ApiSession

• constructor(authorizationData) Receives an object with the following (optional) properties: { userId, clientId, clientCode, profileId, permissions }

ApiSession has the following getters:

• userId {string} The ID of the user or undefined in case there is no user
• userIsDev {boolean} If user is dev
• serviceName {string} The name of the service or undefined in case there is no service
• isService {boolean} If session is associated to a service
• clientId {string} The ID of the client or undefined in case there is no client
• clientCode {string} The code of the client or undefined in case there is no client
• profileId {string} The ID of the profile or undefined in case there is no profile
• stores {array} The List of stores
• hasAccessToAllStores {boolean} If has access to all stores
• permissions {array} The permission keys or undefined in case there are no permissions associated
• async client {object} Resolves to the client object with the getInstance() method injected. The properties depend on your client internal structure. The client is injected with a getInstance() method to propagate the session to other instances.

Settings

The package has some configurable parameters, which are loaded using @janiscommerce/settings

Setting	Description	Default value
clients.databaseKey	Indicates the DB key to use to fetch a session's client	'core'
clients.table	Indicates the table to use to fetch a session's client	'clients'
clients.identifierField	Indicates the field to use as a filter to fetch a session's client	'code'

Usage

const { ApiSession, ApiSessionError } = require('@janiscommerce/api-session');

Examples

const { ApiSession } = require('@janiscommerce/api-session');

const SomeModel = require('../models/some-model');

const session = new ApiSession({
	userId: 1,
	userIsDev: false,
	clientId: 2,
	clientCode: 'janis',
	profileId: 5,
	permissions: [
		'catalog:product:read',
		'catalog:product:write'
	],
	stores: ['store-1'],
	hasAccessToAllStores: false
});

console.log(`Session created for user ${session.userId} on client ${session.clientCode}.`);

const sessionInjectedModel = session.getSessionInstance(SomeModel);

console.log(`Session is propagated for user ${sessionInjectedModel.session.userId} on client ${sessionInjectedModel.session.clientCode}.`);

const client = await sessionInjectedModel.session.client;

console.log(client);
// Outputs your client object

const hasAccess = session.validateStore('store-1');

console.log(`Session has access to store 1: ${hasAccess}`);
// Outputs 'Session has access to store 1: true'

Changelog

[1.4.0] - 2020-05-19

Removed

• package-lock.json file