Class AbstractRbacMiddleware<TRequest, TResponse, TNext>Abstract

constructor

• new AbstractRbacMiddleware<TRequest = any, TResponse = any, TNext = any>(
      engine: RbacPolicyEngine,
  ): AbstractRbacMiddleware<TRequest, TResponse, TNext>

  Type Parameters

  • TRequest = any
  • TResponse = any
  • TNext = any

  Parameters

  • engine: RbacPolicyEngine

  Returns AbstractRbacMiddleware<TRequest, TResponse, TNext>

Readonlyengine

createRequestContext

• createRequestContext(user: RbacUserContext | null): RbacRequestContext

  Factory method building a scoped RbacRequestContext helper for controllers and templates.

  Parameters

  • user: RbacUserContext | null

    Current user context (or null for anonymous guest).

  Returns RbacRequestContext

  RbacRequestContext instance.

AbstractextractRoute

• extractRoute(request: TRequest): { method: HttpMethod; uri: string }

  Normalizes the target URI path and HTTP method from the incoming request.

  Parameters

  • request: TRequest

    Native request object.

  Returns { method: HttpMethod; uri: string }

  Object containing uri and method.

AbstractextractUser

• extractUser(
      request: TRequest,
  ): RbacUserContext | Promise<RbacUserContext | null> | null

  Extracts the authenticated user or M2M agent context from the incoming request.

  Parameters

  • request: TRequest

    Native request object.

  Returns RbacUserContext | Promise<RbacUserContext | null> | null

  RbacUserContext or null if unauthenticated.

AbstracthandleAccessDenied

• handleAccessDenied(
      request: TRequest,
      response: TResponse,
      reason: "unauthenticated" | "forbidden" | "tarpit_blocked",
  ): any

  Handles access denial according to request context (e.g. JSON error for API, redirect/403 for HTML pages).

  Parameters

  • request: TRequest

    Native request object.

  • response: TResponse

    Native response object.

  • reason: "unauthenticated" | "forbidden" | "tarpit_blocked"

    Denial rationale ('unauthenticated' | 'forbidden' | 'tarpit_blocked').

  Returns any