refactor: identity -> iam

modules/iam/routes/identities/update/handle.ts

@@ -0,0 +1,43 @@
+import { ForbiddenError, NotFoundError } from "@platform/relay";
+
+import { getPrincipalById, setPrincipalAttributesById } from "../../../services/database.ts";
+import route from "./spec.ts";
+
+export default route.access("session").handle(async ({ params: { id }, body: ops }, { access }) => {
+  const principal = await getPrincipalById(id);
+  if (principal === undefined) {
+    return new NotFoundError();
+  }
+  const decision = await access.isAllowed({ kind: "identity", id: principal.id, attr: principal.attr }, "update");
+  if (decision === false) {
+    return new ForbiddenError("You do not have permission to update this identity.");
+  }
+  const attr = principal.attr;
+  for (const op of ops) {
+    switch (op.type) {
+      case "add": {
+        attr[op.key] = op.value;
+        break;
+      }
+      case "push": {
+        if (attr[op.key] === undefined) {
+          attr[op.key] = op.values;
+        } else {
+          attr[op.key] = [...attr[op.key], ...op.values];
+        }
+        break;
+      }
+      case "pop": {
+        if (Array.isArray(attr[op.key])) {
+          attr[op.key] = attr[op.key].filter((value: any) => op.values.includes(value) === false);
+        }
+        break;
+      }
+      case "remove": {
+        delete attr[op.key];
+        break;
+      }
+    }
+  }
+  await setPrincipalAttributesById(id, attr);
+});

modules/iam/routes/identities/update/spec.ts

@@ -0,0 +1,29 @@
+import { ForbiddenError, NotFoundError, route, UnauthorizedError } from "@platform/relay";
+import z from "zod";
+
+export default route
+  .put("/api/v1/identity/:id")
+  .params({
+    id: z.string(),
+  })
+  .body(
+    z.array(
+      z.union([
+        z.strictObject({
+          type: z.union([z.literal("add")]),
+          key: z.string(),
+          value: z.any(),
+        }),
+        z.strictObject({
+          type: z.union([z.literal("push"), z.literal("pop")]),
+          key: z.string(),
+          values: z.array(z.any()),
+        }),
+        z.strictObject({
+          type: z.union([z.literal("remove")]),
+          key: z.string(),
+        }),
+      ]),
+    ),
+  )
+  .errors([UnauthorizedError, ForbiddenError, NotFoundError]);