privilege-access-control

Reusable NestJS access-control primitives for microservices.

Includes

• PrivilegesGuard
• RequirePrivilege() decorator
• CurrentUserId() decorator
• Header privilege utilities
• Enums: PrivilegeGroup, PrivilegeName, ErrorMessage

Install

npm install privilege-access-control

Publish to npm

1. Login to npm (once per machine)

npm login

2. Build and verify package contents

If your global npm cache has permission issues, use a local cache for this project:

npm_config_cache=.npm-cache npm run build
npm_config_cache=.npm-cache npm run packcheck

3. Bump version

npm version patch
# or: npm version minor
# or: npm version major

4. Publish

npm publish --access public

For this unscoped package, --access public is optional.

Use in another microservice

npm install privilege-access-control

Then import from your module/controller/resolver:

import {
  PrivilegesGuard,
  RequirePrivilege,
  CurrentUserId,
  PrivilegeGroup,
  PrivilegeName,
} from 'privilege-access-control';

Usage

import {
  PrivilegesGuard,
  RequirePrivilege,
  CurrentUserId,
  PrivilegeGroup,
  PrivilegeName,
} from 'privilege-access-control';

@UseGuards(PrivilegesGuard)
@RequirePrivilege(PrivilegeGroup.USER, PrivilegeName.READ)

If your service is GraphQL, ensure the request context includes incoming headers used by this package.

Headers expected

• x-user-id
• x-user-privileges (or privileges / x-privileges)