Skip to content
EuroDMS Dev Guide

Identity & Access Management

Identity & Access Management

Section titled “Identity & Access Management”

Quellverzeichnis: modules/iam/

Tenants, Benutzer, Rollen (RBAC), API-Keys, Sessions und Audit-Log (Keycloak).

Services

Section titled “Services”

Geschäftslogik des Moduls (src/services/):

  • AmbiguousTenantError
  • ApiKeyExpiredError
  • ApiKeyNotFoundError
  • ApiKeyNotRevocableError
  • ApiKeyService
  • AssigneeResolverService
  • AuthService
  • CustomRoleNameConflictError
  • CustomRoleNotFoundError
  • CustomRoleService
  • CustomRoleValidationError
  • IdpAlreadyConfiguredError
  • IdpNotFoundError
  • ImpersonationAlreadyRevokedError
  • ImpersonationInvalidMfaCodeError
  • ImpersonationMfaRequiredError
  • ImpersonationNotActiveError
  • ImpersonationNotFoundError
  • ImpersonationService
  • ImpersonationValidationError
  • InvalidCredentialsError
  • InvalidMfaCodeError
  • InvalidRefreshTokenError
  • MembershipNotFoundError
  • MfaNotEnabledError
  • MfaRequiredError
  • PermissionNotFoundError
  • PlainPasswordHasher
  • PolicyNameConflictError
  • PolicyNotFoundError
  • PolicyService
  • RecipientResolverService
  • RegexTotpVerifier
  • ResolverTenantInactiveError
  • RoleNameConflictError
  • RoleNotFoundError
  • RoleService
  • ScimGroupAlreadyExistsError
  • ScimGroupNotFoundError
  • ScimService
  • … und 23 weitere

Repositories

Section titled “Repositories”

Datenzugriffs-Ports (src/repositories/):

  • ApiKeyRecord
  • ApiKeyRepository
  • CustomRoleRepository
  • ImpersonationRepository
  • InMemoryApiKeyRepository
  • InMemoryCustomRoleRepository
  • InMemoryImpersonationRepository
  • InMemoryPolicyRepository
  • InMemoryRoleRepository
  • InMemoryScimGroupRepository
  • InMemorySessionRepository
  • InMemorySodConflictRepository
  • InMemorySodExceptionRepository
  • InMemorySodRuleRepository
  • InMemoryTenantRepository
  • InMemoryUserPermissionOverrideRepository
  • InMemoryUserRepository
  • PolicyRepository
  • RoleRepository
  • ScimGroupRepository
  • SessionRepository
  • SodConflictRepository
  • SodExceptionRepository
  • SodRuleRepository
  • TenantRepository
  • UserPermissionOverrideRepository
  • UserRepository

Domain Events

Section titled “Domain Events”

Vom Modul emittierte Ereignisse (src/events.ts):

  • EventHandler
  • apiKeyCreated
  • apiKeyRevoked
  • apiKeyRotated
  • customRoleCreated
  • customRoleDeleted
  • customRoleUpdated
  • defaultRolesInitialized
  • impersonationEnded
  • impersonationRevoked
  • impersonationStarted
  • policyUpdated
  • scimGroupCreated
  • scimGroupDeleted
  • scimGroupMembersSynced
  • scimGroupUpdated
  • scimUserDeprovisioned
  • scimUserProvisioned
  • scimUserUpdated
  • sodConflictDetected
  • sodConflictResolved
  • sodExceptionGranted
  • sodExceptionRevoked
  • sodRuleCreated
  • sodRuleDeleted
  • tenantBrandingUpdated
  • tenantCreated
  • userCreated
  • userDeactivated
  • userLogin
  • userLogout
  • userMfaEnabled
  • userPermissionOverrideGranted
  • userPermissionOverrideRevoked
  • userRoleChanged
  • userSsoLinked
  • userStatusChanged

API-Endpunkte

Section titled “API-Endpunkte”

HTTP-Endpunkte unter api/routes/iam/ — Details in der API-Referenz.

Methode Pfad Datei
GET /scim/v2/Groups scim.ts
POST /scim/v2/Groups scim.ts
GET /scim/v2/Groups/:groupId scim.ts
PATCH /scim/v2/Groups/:groupId scim.ts
PUT /scim/v2/Groups/:groupId scim.ts
DELETE /scim/v2/Groups/:groupId scim.ts
POST /scim/v2/Groups/:groupId/sync-roles scim.ts
GET /scim/v2/Users scim.ts
POST /scim/v2/Users scim.ts
GET /scim/v2/Users/:userId scim.ts
PATCH /scim/v2/Users/:userId scim.ts
PUT /scim/v2/Users/:userId scim.ts
DELETE /scim/v2/Users/:userId scim.ts
GET /v1/api-keys api-keys.ts
POST /v1/api-keys api-keys.ts
DELETE /v1/api-keys/:keyId api-keys.ts
POST /v1/api-keys/:keyId/rotate api-keys.ts
POST /v1/auth/login auth.ts
POST /v1/auth/logout auth.ts
GET /v1/auth/me auth.ts
POST /v1/auth/mfa/verify auth.ts
POST /v1/auth/refresh auth.ts
POST /v1/authorize roles.ts
GET /v1/custom-roles custom-roles.ts
POST /v1/custom-roles custom-roles.ts
GET /v1/custom-roles/:customRoleId custom-roles.ts
PATCH /v1/custom-roles/:customRoleId custom-roles.ts
DELETE /v1/custom-roles/:customRoleId custom-roles.ts
GET /v1/custom-roles/:customRoleId/permissions custom-roles.ts
GET /v1/effective-permissions/:userId custom-roles.ts
GET /v1/impersonations impersonation.ts
POST /v1/impersonations impersonation.ts
GET /v1/impersonations/:impersonationId impersonation.ts
POST /v1/impersonations/:impersonationId/end impersonation.ts
POST /v1/impersonations/:impersonationId/notify impersonation.ts
POST /v1/impersonations/:impersonationId/revoke impersonation.ts
POST /v1/impersonations/cleanup impersonation.ts
POST /v1/impersonations/verify impersonation.ts
GET /v1/permission-catalog custom-roles.ts
GET /v1/permission-catalog/modules custom-roles.ts
GET /v1/permission-catalog/modules/:module custom-roles.ts
GET /v1/policies policies.ts
POST /v1/policies policies.ts
GET /v1/policies/:policyId policies.ts
PATCH /v1/policies/:policyId policies.ts
DELETE /v1/policies/:policyId policies.ts
POST /v1/provisioning/tenants provisioning.ts
DELETE /v1/provisioning/tenants/:tenantId provisioning.ts
POST /v1/provisioning/tenants/:tenantId/deactivate provisioning.ts
GET /v1/roles roles.ts
POST /v1/roles roles.ts
GET /v1/roles/:roleId roles.ts
DELETE /v1/roles/:roleId roles.ts
POST /v1/roles/:roleId/permissions roles.ts
DELETE /v1/roles/:roleId/permissions/:resource roles.ts
POST /v1/sod/check sod.ts
GET /v1/sod/conflicts sod.ts
GET /v1/sod/exceptions sod.ts
POST /v1/sod/exceptions sod.ts
POST /v1/sod/exceptions/:exceptionId/revoke sod.ts
GET /v1/sod/rules sod.ts
POST /v1/sod/rules sod.ts
GET /v1/sod/rules/:ruleId sod.ts
DELETE /v1/sod/rules/:ruleId sod.ts
POST /v1/sod/rules/initialize-defaults sod.ts
GET /v1/tenants tenants.ts
POST /v1/tenants tenants.ts
GET /v1/tenants/:tenantId tenants.ts
PATCH /v1/tenants/:tenantId tenants.ts
DELETE /v1/tenants/:tenantId tenants.ts
POST /v1/tenants/:tenantId/idps tenants.ts
DELETE /v1/tenants/:tenantId/idps/:providerType tenants.ts
GET /v1/user-permission-overrides custom-roles.ts
POST /v1/user-permission-overrides custom-roles.ts
POST /v1/user-permission-overrides/:overrideId/revoke custom-roles.ts
GET /v1/users users.ts
POST /v1/users users.ts
GET /v1/users/:userId users.ts
PATCH /v1/users/:userId users.ts
DELETE /v1/users/:userId users.ts
POST /v1/users/:userId/mfa users.ts
POST /v1/users/:userId/roles users.ts
POST /v1/users/:userId/sso users.ts
POST /v1/users/:userId/status users.ts

Public API

Section titled “Public API”

Über den Modul-Index (src/index.ts) exportierte Symbole — die einzige erlaubte Zugriffsart von außen:

  • // Aggregate Roots User
  • // Authorization AuthorizationRequest
  • // DTOs - ApiKey CreateApiKeyInput
  • // DTOs - Auth LoginInput
  • // DTOs - Policy CreatePolicyInput
  • // DTOs - Role CreateRoleInput
  • // DTOs - Session ListSessionsQuery
  • // DTOs - Tenant CreateTenantInput
  • // DTOs - User CreateUserInput
  • // Enums - Role/Policy RoleScope
  • // Enums - Session/ApiKey SessionStatus
  • // Enums - Tenant TenantType
  • // Enums - User UserStatus
  • // H15 RBAC Events defaultRolesInitialized
  • // M14-IMP Events impersonationStarted
  • // M14-IMP: Impersonation ImpersonationStatus
  • // M14-SCIM Events scimUserProvisioned
  • // M14-SCIM: SCIM 2.0 Provisioning ScimUserStatus
  • // MOD-03 CustomRole Events customRoleCreated
  • // MOD-03 UserPermissionOverride Events userPermissionOverrideGranted
  • // MOD-03 Validations isValidRiskLevel
  • // MOD-03: CustomRole-Builder + UserPermissionOverride RiskLevel
  • // Resolver (P4.3 Erweiterung) ResolverChannel
  • // SOD (K7) SodSeverity
  • // SOD Events (K7) sodRuleCreated
  • // Value objects - User TenantMembership
  • ALL_ROLES
  • AbacCondition
  • AbacConditionValidationError
  • AddIdpInput
  • AddPermissionInput
  • AmbiguousTenantError
  • ApiKey
  • ApiKeyExpiredError
  • ApiKeyNotFoundError
  • ApiKeyNotRevocableError
  • ApiKeyRecord
  • ApiKeyRepository
  • ApiKeySecret
  • ApiKeyService
  • … und 316 weitere

Zurück zur Modul-Übersicht oder zur Startseite.