Class: AuthorizationService

AuthorizationService()

new AuthorizationService()

Service for DataONE MNAuthorization.isAuthorized checks.
Since:
  • 2.39.0
Source:

Extends

Methods

canChangePermission(pid, optionsopt) → {Promise.<boolean>}

Check changePermission access for a PID.
Parameters:
Name Type Attributes Description
pid string DataONE PID or SID
options object <optional>
Request options
Source:
Returns:
Authorization result
Type
Promise.<boolean>

canView(pid, optionsopt) → {Promise.<boolean>}

Check read permission for a PID.
Parameters:
Name Type Attributes Description
pid string DataONE PID or SID
options object <optional>
Request options
Source:
Returns:
Authorization result
Type
Promise.<boolean>

check(pid, actionopt, optionsopt) → {Promise.<boolean>}

Check whether the current user can perform an action on a PID.
Parameters:
Name Type Attributes Default Description
pid string DataONE PID or SID
action string <optional>
write Permission action
options object <optional>
Request options
Source:
Throws:
When the PID or action is invalid, or the request fails
Type
Error
Returns:
Authorization result
Type
Promise.<boolean>

checkAll(pids, actionopt, optionsopt) → {Promise.<object>}

Check one action for multiple PIDs.
Parameters:
Name Type Attributes Default Description
pids Array.<string> DataONE PIDs or SIDs
action string <optional>
write Permission action
options object <optional>
Request options
Properties
Name Type Attributes Description
onProgress function <optional>
Progress callback
Source:
Throws:
When concurrency is invalid or a permission check fails
Type
Error
Returns:
Object keyed by PID
Type
Promise.<object>

checkWrite(pid, optionsopt) → {Promise.<boolean>}

Check write permission for a PID.
Parameters:
Name Type Attributes Description
pid string DataONE PID or SID
options object <optional>
Request options
Source:
Returns:
Authorization result
Type
Promise.<boolean>

clearCache() → {Promise.<void>}

Clear the cache for the current user scope.
Inherited From:
Source:
Returns:
Promise resolving when the cache is cleared
Type
Promise.<void>

download(path, optionsopt) → {Promise.<*>}

Download data from a path with optional caching.
Parameters:
Name Type Attributes Description
path string Path relative to baseUrl
options object <optional>
Options passed to DataONEHttpClient#request (except `path`), plus cache controls.
Properties
Name Type Attributes Description
auth boolean <optional>
Whether to resolve a token automatically
useCache boolean <optional>
Whether to cache responses, default true.
cacheKey string <optional>
Cache key override
cacheTtlMs number | null <optional>
Cache TTL override
Inherited From:
Source:
Returns:
Promise resolving to response data
Type
Promise.<*>

getCached(key) → {Promise.<*>}

Get a cached value scoped by the current user.
Parameters:
Name Type Description
key string Cache key
Inherited From:
Source:
Returns:
Promise resolving to the cached value
Type
Promise.<*>

getStore() → {PersistentStorage}

Get a PersistentStorage instance automatically scoped by the logged in user, using the configuration options provided to the constructor.
Inherited From:
Source:
Returns:
Storage instance
Type
PersistentStorage

getToken() → {Promise.<string>}

Resolve an auth token from MetacatUI when available.
Inherited From:
Source:
Returns:
Promise resolving to an auth token
Type
Promise.<string>

getUserKey() → {Promise.<string>}

Resolve the current permission cache key.
Source:
Returns:
Current user subject, or "public"
Type
Promise.<string>

getUserName() → {Promise.<(string|null)>}

Resolve the current username from the MetacatUI app user model.
Inherited From:
Source:
Returns:
Promise resolving to the username, or null if unavailable.
Type
Promise.<(string|null)>

isCached(key) → {Promise.<boolean>}

Check whether a value exists in the cache for the current user scope.
Parameters:
Name Type Description
key string Cache key
Inherited From:
Source:
Returns:
Promise resolving to whether the value is cached.
Type
Promise.<boolean>

removeCached(key) → {Promise.<void>}

Remove a cached value for the current user scope.
Parameters:
Name Type Description
key string Cache key
Inherited From:
Source:
Returns:
Promise resolving when removal completes
Type
Promise.<void>

request(optionsopt) → {Promise.<DataONEHttpResponse>}

Send a request via the DataONEHttpClient.
Parameters:
Name Type Attributes Description
options object <optional>
Request options passed to DataONEHttpClient#request, plus auth controls.
Properties
Name Type Attributes Description
path string Path relative to baseUrl
auth boolean <optional>
Whether to resolve a token automatically
Inherited From:
Source:
Returns:
Promise resolving to the response.
Type
Promise.<DataONEHttpResponse>

requestWithClient(client, optionsopt) → {Promise.<DataONEHttpResponse>}

Send a request through a specific DataONEHttpClient instance.
Parameters:
Name Type Attributes Description
client DataONEHttpClient Client instance to use
options object <optional>
Request options
Inherited From:
Source:
Throws:
When client is invalid or the request fails
Type
Error
Returns:
Promise resolving to the response.
Type
Promise.<DataONEHttpResponse>

resolveToken(authopt) → {Promise.<(string|null)>}

Determine the token to use, if any, for a request.
Parameters:
Name Type Attributes Description
auth boolean <optional>
Whether to use authentication for this request If set to false, no token will be used. If true, getToken() will be called. When undefined, defaultAuth is used.
Inherited From:
Source:
Returns:
Promise resolving to the token, or null if no auth.
Type
Promise.<(string|null)>

scopeKey() → {Promise.<string>}

If user is logged in, get a key based on their username; otherwise, return a "public" scope key.
Inherited From:
Source:
Returns:
Promise resolving to the scope key
Type
Promise.<string>

sendParsedIdentifierRequest(params) → {Promise.<DataONEHttpResponse>}

Send a request whose body is a DataONE identifier response and parse the returned XML. Shared by services that POST/PUT and read back an identifier (e.g. IdentifierService, ObjectService).
Parameters:
Name Type Description
params object Request params
Properties
Name Type Attributes Description
client DataONEHttpClient <optional>
Client to use. Defaults to the service's primary client when omitted.
requestOptions object Options from DataONEService.buildRequestOptions.
context string Error/parse context label
Inherited From:
Source:
Throws:
When the request or identifier parsing fails
Type
Error
Returns:
Response with parsed identifier data.
Type
Promise.<DataONEHttpResponse>

setCached(key, value, optionsopt) → {Promise.<*>}

Store a value in the cache for the current user scope.
Parameters:
Name Type Attributes Description
key string Cache key
value * Value to store
options object <optional>
Cache scope options
Properties
Name Type Attributes Description
ttlMs number | null <optional>
Override cache TTL in ms
Inherited From:
Source:
Returns:
Promise resolving to the stored value
Type
Promise.<*>

shouldUseCache() → {Promise.<boolean>}

Determine whether caching is allowed for the current user scope.
Inherited From:
Source:
Returns:
Promise resolving to whether caching is allowed.
Type
Promise.<boolean>

upload(path, optionsopt) → {Promise.<DataONEHttpResponse>}

Upload data to a path.
Parameters:
Name Type Attributes Description
path string Path relative to baseUrl
options object <optional>
Options passed to DataONEHttpClient#request (except `path`), plus cache controls.
Properties
Name Type Attributes Description
auth boolean <optional>
Whether to resolve a token automatically
cacheKey string <optional>
Cache key override
Inherited From:
Source:
Returns:
Promise resolving to the response.
Type
Promise.<DataONEHttpResponse>

normalizeAction(action) → {string}

Normalize and validate a permission action.
Parameters:
Name Type Default Description
action * write Candidate action
Source:
Returns:
Canonical action
Type
string

parseAuthorizationResponse(value) → {boolean}

Parse DataONE authorization response bodies.
Parameters:
Name Type Description
value * Response body
Source:
Returns:
Authorization result
Type
boolean

AuthorizationService(optionsopt)

new AuthorizationService(optionsopt)

Parameters:
Name Type Attributes Description
options object <optional>
Options for the AuthorizationService. See DataONEService.optionsFromDescriptor for the shared option shape
Properties
Name Type Attributes Description
baseUrl string <optional>
Endpoint-qualified isAuthorized URL
Source:

Methods

canChangePermission(pid, optionsopt) → {Promise.<boolean>}

Check changePermission access for a PID.
Parameters:
Name Type Attributes Description
pid string DataONE PID or SID
options object <optional>
Request options
Source:
Returns:
Authorization result
Type
Promise.<boolean>

canView(pid, optionsopt) → {Promise.<boolean>}

Check read permission for a PID.
Parameters:
Name Type Attributes Description
pid string DataONE PID or SID
options object <optional>
Request options
Source:
Returns:
Authorization result
Type
Promise.<boolean>

check(pid, actionopt, optionsopt) → {Promise.<boolean>}

Check whether the current user can perform an action on a PID.
Parameters:
Name Type Attributes Default Description
pid string DataONE PID or SID
action string <optional>
write Permission action
options object <optional>
Request options
Source:
Throws:
When the PID or action is invalid, or the request fails
Type
Error
Returns:
Authorization result
Type
Promise.<boolean>

checkAll(pids, actionopt, optionsopt) → {Promise.<object>}

Check one action for multiple PIDs.
Parameters:
Name Type Attributes Default Description
pids Array.<string> DataONE PIDs or SIDs
action string <optional>
write Permission action
options object <optional>
Request options
Properties
Name Type Attributes Description
onProgress function <optional>
Progress callback
Source:
Throws:
When concurrency is invalid or a permission check fails
Type
Error
Returns:
Object keyed by PID
Type
Promise.<object>

checkWrite(pid, optionsopt) → {Promise.<boolean>}

Check write permission for a PID.
Parameters:
Name Type Attributes Description
pid string DataONE PID or SID
options object <optional>
Request options
Source:
Returns:
Authorization result
Type
Promise.<boolean>

clearCache() → {Promise.<void>}

Clear the cache for the current user scope.
Inherited From:
Source:
Returns:
Promise resolving when the cache is cleared
Type
Promise.<void>

download(path, optionsopt) → {Promise.<*>}

Download data from a path with optional caching.
Parameters:
Name Type Attributes Description
path string Path relative to baseUrl
options object <optional>
Options passed to DataONEHttpClient#request (except `path`), plus cache controls.
Properties
Name Type Attributes Description
auth boolean <optional>
Whether to resolve a token automatically
useCache boolean <optional>
Whether to cache responses, default true.
cacheKey string <optional>
Cache key override
cacheTtlMs number | null <optional>
Cache TTL override
Inherited From:
Source:
Returns:
Promise resolving to response data
Type
Promise.<*>

getCached(key) → {Promise.<*>}

Get a cached value scoped by the current user.
Parameters:
Name Type Description
key string Cache key
Inherited From:
Source:
Returns:
Promise resolving to the cached value
Type
Promise.<*>

getStore() → {PersistentStorage}

Get a PersistentStorage instance automatically scoped by the logged in user, using the configuration options provided to the constructor.
Inherited From:
Source:
Returns:
Storage instance
Type
PersistentStorage

getToken() → {Promise.<string>}

Resolve an auth token from MetacatUI when available.
Inherited From:
Source:
Returns:
Promise resolving to an auth token
Type
Promise.<string>

getUserKey() → {Promise.<string>}

Resolve the current permission cache key.
Source:
Returns:
Current user subject, or "public"
Type
Promise.<string>

getUserName() → {Promise.<(string|null)>}

Resolve the current username from the MetacatUI app user model.
Inherited From:
Source:
Returns:
Promise resolving to the username, or null if unavailable.
Type
Promise.<(string|null)>

isCached(key) → {Promise.<boolean>}

Check whether a value exists in the cache for the current user scope.
Parameters:
Name Type Description
key string Cache key
Inherited From:
Source:
Returns:
Promise resolving to whether the value is cached.
Type
Promise.<boolean>

removeCached(key) → {Promise.<void>}

Remove a cached value for the current user scope.
Parameters:
Name Type Description
key string Cache key
Inherited From:
Source:
Returns:
Promise resolving when removal completes
Type
Promise.<void>

request(optionsopt) → {Promise.<DataONEHttpResponse>}

Send a request via the DataONEHttpClient.
Parameters:
Name Type Attributes Description
options object <optional>
Request options passed to DataONEHttpClient#request, plus auth controls.
Properties
Name Type Attributes Description
path string Path relative to baseUrl
auth boolean <optional>
Whether to resolve a token automatically
Inherited From:
Source:
Returns:
Promise resolving to the response.
Type
Promise.<DataONEHttpResponse>

requestWithClient(client, optionsopt) → {Promise.<DataONEHttpResponse>}

Send a request through a specific DataONEHttpClient instance.
Parameters:
Name Type Attributes Description
client DataONEHttpClient Client instance to use
options object <optional>
Request options
Inherited From:
Source:
Throws:
When client is invalid or the request fails
Type
Error
Returns:
Promise resolving to the response.
Type
Promise.<DataONEHttpResponse>

resolveToken(authopt) → {Promise.<(string|null)>}

Determine the token to use, if any, for a request.
Parameters:
Name Type Attributes Description
auth boolean <optional>
Whether to use authentication for this request If set to false, no token will be used. If true, getToken() will be called. When undefined, defaultAuth is used.
Inherited From:
Source:
Returns:
Promise resolving to the token, or null if no auth.
Type
Promise.<(string|null)>

scopeKey() → {Promise.<string>}

If user is logged in, get a key based on their username; otherwise, return a "public" scope key.
Inherited From:
Source:
Returns:
Promise resolving to the scope key
Type
Promise.<string>

sendParsedIdentifierRequest(params) → {Promise.<DataONEHttpResponse>}

Send a request whose body is a DataONE identifier response and parse the returned XML. Shared by services that POST/PUT and read back an identifier (e.g. IdentifierService, ObjectService).
Parameters:
Name Type Description
params object Request params
Properties
Name Type Attributes Description
client DataONEHttpClient <optional>
Client to use. Defaults to the service's primary client when omitted.
requestOptions object Options from DataONEService.buildRequestOptions.
context string Error/parse context label
Inherited From:
Source:
Throws:
When the request or identifier parsing fails
Type
Error
Returns:
Response with parsed identifier data.
Type
Promise.<DataONEHttpResponse>

setCached(key, value, optionsopt) → {Promise.<*>}

Store a value in the cache for the current user scope.
Parameters:
Name Type Attributes Description
key string Cache key
value * Value to store
options object <optional>
Cache scope options
Properties
Name Type Attributes Description
ttlMs number | null <optional>
Override cache TTL in ms
Inherited From:
Source:
Returns:
Promise resolving to the stored value
Type
Promise.<*>

shouldUseCache() → {Promise.<boolean>}

Determine whether caching is allowed for the current user scope.
Inherited From:
Source:
Returns:
Promise resolving to whether caching is allowed.
Type
Promise.<boolean>

upload(path, optionsopt) → {Promise.<DataONEHttpResponse>}

Upload data to a path.
Parameters:
Name Type Attributes Description
path string Path relative to baseUrl
options object <optional>
Options passed to DataONEHttpClient#request (except `path`), plus cache controls.
Properties
Name Type Attributes Description
auth boolean <optional>
Whether to resolve a token automatically
cacheKey string <optional>
Cache key override
Inherited From:
Source:
Returns:
Promise resolving to the response.
Type
Promise.<DataONEHttpResponse>

normalizeAction(action) → {string}

Normalize and validate a permission action.
Parameters:
Name Type Default Description
action * write Candidate action
Source:
Returns:
Canonical action
Type
string

parseAuthorizationResponse(value) → {boolean}

Parse DataONE authorization response bodies.
Parameters:
Name Type Description
value * Response body
Source:
Returns:
Authorization result
Type
boolean