Adds Middleware API (#40)

* Adds test project

* Adds e2e for end-2-end tests

* Update gitignore

* Update loaders

* Creates test project

* v0.1.27

* Upgrade

* dependency fixes

* Load project plugins in the plugin loader

* Issue with instanceof

* Fixes versioning issues

* Adds medusa middleware api

* Adds documentation

* Fixes tests

packages/medusa-plugin-permissions/src/api/medusa-middleware.js

@@ -0,0 +1,16 @@
+// This middleware is injected to ensure authorization of requests
+// Since this middleware uses the user object on the request, this should be
+// injected after authentication in the core middleware, hence we name
+// the middleware postAuth.
+export default {
+  postAuthentication: () => {
+    return (err, req, res, next) => {
+      const permissionService = req.scope.resolve("permissionService")
+      if (permissionService.hasPermission(req.user, req.method, req.path)) {
+        next()
+      } else {
+        res.status(422)
+      }
+    }
+  }
+}

packages/medusa-plugin-permissions/src/api/middlewares.js

@@ -1,14 +0,0 @@
-// This middleware is injected to ensure authorization of requests
-// Since this middleware uses the user object on the request, this should be
-// injected after authentication in the core middleware, hence we name
-// the middleware postAuth.
-export default postAuth = () => {
-  return (err, req, res, next) => {
-    const permissionService = req.scope.resolve("permissionService")
-    if (permissionService.hasPermission(req.user, req.method, req.path)) {
-      next()
-    } else {
-      res.status(422)
-    }
-  }
-}

packages/medusa-plugin-permissions/src/services/permission.js

@@ -55,6 +55,7 @@ class PermissionService extends BaseService {
   }
 
   async hasPermission(user, method, endpoint) {
+    if (!user) return false
     for (let i = 0; i < user.metadata.roles.length; i++) {
       const role = user.metadata.roles[i]
       const permissions = await this.retrieveRole(role)