Andreas/LibreChat
1
0
Fork 0
mirror of https://github.com/danny-avila/LibreChat.git synced 2026-02-22 10:24:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

🔐 feat: Granular Role-based Permissions + Entra ID Group Discovery (#7804)

Browse source
This commit is contained in:
Danny Avila 2025-06-23 10:54:25 -04:00
parent d471209ced
commit c6d4629fd1
No known key found for this signature in database
GPG key ID: BF31EEB2C5CA0956
99 changed files with 11318 additions and 621 deletions
Download patch file Download diff file Expand all files Collapse all files

104
packages/data-provider/src/react-query/react-query-service.ts
View file

@ -8,9 +8,13 @@ import { Constants, initialModelsConfig } from '../config';
import { defaultOrderQuery } from '../types/assistants';
import * as dataService from '../data-service';
import * as m from '../types/mutations';
import * as q from '../types/queries';
import { QueryKeys } from '../keys';
import * as s from '../schemas';
import * as t from '../types';
import * as permissions from '../accessPermissions';
export { hasPermissions } from '../accessPermissions';
export const useGetSharedMessages = (
shareId: string,
@ -346,3 +350,103 @@ export const useUpdateFeedbackMutation = (
},
);
};
export const useSearchPrincipalsQuery = (
params: q.PrincipalSearchParams,
config?: UseQueryOptions<q.PrincipalSearchResponse>,
): QueryObserverResult<q.PrincipalSearchResponse> => {
return useQuery<q.PrincipalSearchResponse>(
[QueryKeys.principalSearch, params],
() => dataService.searchPrincipals(params),
{
enabled: !!params.q && params.q.length >= 2,
refetchOnWindowFocus: false,
refetchOnReconnect: false,
refetchOnMount: false,
staleTime: 30000,
...config,
},
);
};
export const useGetAccessRolesQuery = (
resourceType: string,
config?: UseQueryOptions<q.AccessRolesResponse>,
): QueryObserverResult<q.AccessRolesResponse> => {
return useQuery<q.AccessRolesResponse>(
[QueryKeys.accessRoles, resourceType],
() => dataService.getAccessRoles(resourceType),
{
enabled: !!resourceType,
refetchOnWindowFocus: false,
refetchOnReconnect: false,
refetchOnMount: false,
staleTime: 5 * 60 * 1000, // Cache for 5 minutes
...config,
},
);
};
export const useGetResourcePermissionsQuery = (
resourceType: string,
resourceId: string,
config?: UseQueryOptions<permissions.TGetResourcePermissionsResponse>,
): QueryObserverResult<permissions.TGetResourcePermissionsResponse> => {
return useQuery<permissions.TGetResourcePermissionsResponse>(
[QueryKeys.resourcePermissions, resourceType, resourceId],
() => dataService.getResourcePermissions(resourceType, resourceId),
{
enabled: !!resourceType && !!resourceId,
refetchOnWindowFocus: false,
refetchOnReconnect: false,
refetchOnMount: false,
staleTime: 2 * 60 * 1000, // Cache for 2 minutes
...config,
},
);
};
export const useUpdateResourcePermissionsMutation = (): UseMutationResult<
permissions.TUpdateResourcePermissionsResponse,
Error,
{
resourceType: string;
resourceId: string;
data: permissions.TUpdateResourcePermissionsRequest;
}
> => {
const queryClient = useQueryClient();
return useMutation({
mutationFn: ({ resourceType, resourceId, data }) =>
dataService.updateResourcePermissions(resourceType, resourceId, data),
onSuccess: (_, variables) => {
queryClient.invalidateQueries({
queryKey: [QueryKeys.accessRoles, variables.resourceType],
});
queryClient.invalidateQueries({
queryKey: [QueryKeys.resourcePermissions, variables.resourceType, variables.resourceId],
});
queryClient.invalidateQueries({
queryKey: [QueryKeys.effectivePermissions, variables.resourceType, variables.resourceId],
});
},
});
};
export const useGetEffectivePermissionsQuery = (
resourceType: string,
resourceId: string,
config?: UseQueryOptions<permissions.TEffectivePermissionsResponse>,
): QueryObserverResult<permissions.TEffectivePermissionsResponse> => {
return useQuery<permissions.TEffectivePermissionsResponse>({
queryKey: [QueryKeys.effectivePermissions, resourceType, resourceId],
queryFn: () => dataService.getEffectivePermissions(resourceType, resourceId),
enabled: !!resourceType && !!resourceId,
refetchOnWindowFocus: false,
staleTime: 30000,
...config,
});
};