feat(api): Add ADMIN authority for API keys (keyshade-xyz#609)

Kiranchaudhary537 · Jan 9, 2025 · fb6aba7 · fb6aba7
1 parent 0ddfa59
commit fb6aba7
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 0 deletions.
diff --git a/.github/workflows/validate-api.yaml b/.github/workflows/validate-api.yaml
@@ -50,6 +50,11 @@ jobs:
         run: |
           pnpm run lint:api
 
+      - name: Build deps
+        run: |
+          pnpm run db:generate-types
+          pnpm run build:schema
+
       - name: Unit tests
         run: |
           pnpm run db:generate-types

diff --git a/apps/api/src/auth/guard/api-key/api-key.guard.ts b/apps/api/src/auth/guard/api-key/api-key.guard.ts
@@ -77,6 +77,10 @@ export class ApiKeyGuard implements CanActivate {
       throw new UnauthorizedException('The API key has no authorities.')
     }
 
+    if (user.apiKeyAuthorities.has(Authority.ADMIN)) {
+      return true
+    }
+
     for (const requiredAuthority of requiredAuthorities) {
       if (!user.apiKeyAuthorities.has(requiredAuthority)) {
         throw new UnauthorizedException(

diff --git a/apps/api/src/prisma/migrations/20250109110640_add_admin_api_key_authority/migration.sql b/apps/api/src/prisma/migrations/20250109110640_add_admin_api_key_authority/migration.sql
@@ -0,0 +1,2 @@
+-- AlterEnum
+ALTER TYPE "Authority" ADD VALUE 'ADMIN';
diff --git a/apps/api/src/prisma/schema.prisma b/apps/api/src/prisma/schema.prisma
@@ -106,6 +106,9 @@ enum Authority {
   READ_SELF
   UPDATE_SELF
   READ_EVENT
+
+  // Master authority
+  ADMIN
 }
 
 enum NotificationType {
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		-- AlterEnum
		ALTER TYPE "Authority" ADD VALUE 'ADMIN';