Add onAllow callback support

README.md

@@ -62,6 +62,7 @@ The API exposed by this plugin is the configuration options:
 | `getObj` | `Request => string`                                        | Extracts `obj` from the request                   | `r => r.url`                    |
 | `getAct` | `Request => string`                                        | Extracts `act` from the request                   | `r => r.method`                 |
 | `onDeny` | `(Reply, { sub, obj, act, dom }) => any`                   | Invoked when Casbin's `enforce` resolves to false | Returns a `403 Forbidden` error |
+| `onAllow`| `(Reply, { sub, obj, act, dom }) => any`                   | Invoked when Casbin's `enforce` resolves to true  | noop                            |
 | `log`    | `(Fastify, Request, { sub, obj, act, dom }) => void`       | Invoked before invoking Casbin's `enforce`        | Logs using fastify.log.info     |
 | `hook`   | `'onRequest', 'preParsing', 'preValidation', 'preHandler'` | Which lifecycle to use for performing the check   | `'preHandler'`                  |
 

plugin.d.ts

@@ -43,6 +43,7 @@ export interface FastifyCasbinRestOptions {
   getObj?(request: FastifyRequest): string
   getAct?(request: FastifyRequest): string
   onDeny?(reply: FastifyReply, checkParams: Permission): void
+  onAllow?(reply: FastifyReply, checkParams: Permission): void
   log?(fastify: FastifyInstance, request: FastifyRequest, checkParams: Permission ): void
   hook?: Hook
 }

plugin.js

@@ -47,7 +47,11 @@ async function fastifyCasbinRest (fastify, options) {
         const isAuthorized = getDom ? await fastify.casbin.enforce(sub, dom, obj, act) : await fastify.casbin.enforce(sub, obj, act)
 
         if (!isAuthorized) {
-          await options.onDeny(reply, { sub, dom, obj, act })
+          return await options.onDeny(reply, { sub, dom, obj, act })
+        }
+
+        if (options.onAllow) {
+          await options.onAllow(reply, { sub, dom, obj, act })
         }
       })
     }

test/casbinRest.test.js

@@ -152,6 +152,44 @@ test('allows route where plugin is enabled and enforce resolves true with dom re
   })
 })
 
+test('invokes onAllow callback if defined', t => {
+  t.plan(9)
+
+  const fastify = Fastify()
+
+  fastify.register(makeStubCasbin())
+  fastify.register(plugin, {
+    onAllow: (reply, { sub, obj, act }) => {
+      t.equal(sub, undefined)
+      t.equal(obj, '/')
+      t.equal(act, 'GET')
+    }
+  })
+
+  fastify.get('/', {
+    casbin: {
+      rest: true
+    }
+  }, () => 'ok')
+
+  fastify.ready(async err => {
+    t.error(err)
+
+    fastify.casbin.enforce.callsFake((sub, obj, act) => {
+      t.equal(sub, undefined)
+      t.equal(obj, '/')
+      t.equal(act, 'GET')
+      return Promise.resolve(true)
+    })
+
+    t.equal((await fastify.inject('/')).body, 'ok')
+
+    t.ok(fastify.casbin.enforce.called)
+
+    fastify.close()
+  })
+})
+
 test('forbids route where plugin is enabled and enforce resolves false', t => {
   t.plan(6)
 

test/plugin.test-d.ts

@@ -9,6 +9,12 @@ server.register(casbinRest)
 
 server.register(casbinRest, {
   log: (fastify, request, { sub, obj, act }) => { fastify.log.info({ sub, obj, act }, 'Invoking casbin enforce') },
+  onAllow: (reply, { sub, obj, act }) => {
+    expectType<FastifyReply>(reply)
+    expectType<string>(sub)
+    expectType<string>(obj)
+    expectType<string>(act)
+  },
   onDeny: (reply, { sub, obj, act }) => {
     expectType<FastifyReply>(reply)
     expectType<string>(sub)