vivocha / arrest / 68 / 1

100%

master: 100%

push

travis-ci

feat: add support for @casl/ability in security validation

If present, req.ability must be an Ability instance and it's used to check if a user can perform the
requested operation, to constraint mongo queries (via CASL conditions), to filter fields in the
responses (via CASL fields)

BREAKING CHANGE: API.securityValidator renamed to API.initSecurity. The old method is still present
but will warn it's deprecated.

462 of 462 branches covered (100.0%)

Branch coverage included in aggregate %.

878 of 878 relevant lines covered (100.0%)

93.92 hits per line