access-control

access-control copied to clipboard

Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix...

dependabot[bot]

Better way to accept null values

3

We currently use the AWS way of handling null values in permission conditions (see https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_Null). While this provides the expected functionality, it forces the consumers to duplicate their permissions in...

SylvainEstevez

See the `ok2` condition below. Please let me know if you agree. ``` const condition = { stringEquals: { forAnyValueIfExists: { foo: ['bar', 'baz', 'boo'] } } }; const ok...

broom9

Keys.filter() will not filter out an object property that equals an empty object.

4

I'm working with a codebase that is using Objection.js to create database models from a Postgres DB. The model in question has a property represented in the DB as a...

bjamba

When calling addPermissionToRole, if one of the resources is `undefined`, it would lead to an error ``` TypeError: Cannot read property 'split' of undefined at AccessAuthorizer.filterRelevantPermissions (node_modules/@bluejay/access-control/src/classes/access-authorizer.js:60:62) at AccessAuthorizer.authorize (node_modules/@bluejay/access-control/src/classes/access-authorizer.js:21:42)...

broom9

Bumps [send](https://github.com/pillarjs/send) to 0.19.0 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `send` from 0.18.0 to 0.19.0 Release notes Sourced from send's releases. 0.19.0 What's...

dependabot[bot]

Bumps [serve-static](https://github.com/expressjs/serve-static) to 1.16.2 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `serve-static` from 1.15.0 to 1.16.2 Release notes Sourced from serve-static's releases. 1.16.0 What's...

dependabot[bot]

Bumps [body-parser](https://github.com/expressjs/body-parser) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together. Updates `body-parser` from 1.20.2 to 1.20.3 Release notes Sourced from body-parser's releases. 1.20.3 What's Changed Important deps: [email protected] add...

dependabot[bot]

Bumps [cookie](https://github.com/jshttp/cookie) to 0.7.1 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `cookie` from 0.6.0 to 0.7.1 Release notes Sourced from cookie's releases. 0.7.1 Fixed...

dependabot[bot]