add client security rule

src/Directory.Packages.props

@@ -55,6 +55,7 @@
     <PackageVersion Include="NUnit3TestAdapter" Version="4.6.0" />
     <PackageVersion Include="nuSpec.Abstraction" Version="1.3.0" />
     <PackageVersion Include="nuSpec.NHibernate" Version="1.3.0" />
+    <PackageVersion Include="Swashbuckle.AspNetCore.SwaggerGen" Version="6.6.2" />
     <PackageVersion Include="System.CodeDom" Version="8.0.0" />
     <PackageVersion Include="System.Reflection.Emit" Version="4.7.0" />
     <PackageVersion Include="System.Runtime.Loader" Version="4.3.0" />

src/Framework.SecuritySystem.Abstract/AvailableSecurity/IAvailableClientSecurityRuleSource.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.AvailableSecurity;
+
+public interface IAvailableClientSecurityRuleSource
+{
+    Task<List<ClientSecurityRuleHeader>> GetAvailableSecurityRules(CancellationToken cancellationToken = default);
+}

src/Framework.SecuritySystem.Abstract/AvailableSecurityOperationSource/IAvailableSecurityOperationSource.cs → src/Framework.SecuritySystem.Abstract/AvailableSecurity/IAvailableSecurityOperationSource.cs

@@ -1,4 +1,4 @@
-namespace Framework.SecuritySystem;
+namespace Framework.SecuritySystem.AvailableSecurity;
 
 public interface IAvailableSecurityOperationSource
 {

src/Framework.SecuritySystem.Abstract/AvailableSecurityRoleSource/IAvailableSecurityRoleSource.cs → src/Framework.SecuritySystem.Abstract/AvailableSecurity/IAvailableSecurityRoleSource.cs

@@ -1,4 +1,4 @@
-namespace Framework.SecuritySystem;
+namespace Framework.SecuritySystem.AvailableSecurity;
 
 public interface IAvailableSecurityRoleSource
 {

src/Framework.SecuritySystem.Abstract/Expanders/IRoleFactorySecurityRuleExpander.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.Expanders;
+
+public interface IRoleFactorySecurityRuleExpander
+{
+    DomainSecurityRule.RoleBaseSecurityRule Expand(DomainSecurityRule.RoleFactorySecurityRule securityRule);
+}

src/Framework.SecuritySystem.Abstract/Expanders/ISecurityModeExpander.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.Expanders;
+
+public interface ISecurityModeExpander
+{
+    DomainSecurityRule? TryExpand(DomainSecurityRule.DomainModeSecurityRule securityRule);
+}

src/Framework.SecuritySystem.Abstract/Expanders/ISecurityOperationExpander.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.Expanders;
+
+public interface ISecurityOperationExpander
+{
+    DomainSecurityRule.NonExpandedRolesSecurityRule Expand(DomainSecurityRule.OperationSecurityRule securityRule);
+}

src/Framework.SecuritySystem.Abstract/Expanders/ISecurityRoleExpander.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.Expanders;
+
+public interface ISecurityRoleExpander
+{
+    DomainSecurityRule.ExpandedRolesSecurityRule Expand(DomainSecurityRule.NonExpandedRolesSecurityRule securityRule);
+}

src/Framework.SecuritySystem.Abstract/Expanders/ISecurityRuleExpander.cs

@@ -1,14 +1,6 @@
 namespace Framework.SecuritySystem.Expanders;
 
-public interface ISecurityRuleExpander
+public interface ISecurityRuleExpander : ISecurityModeExpander, ISecurityOperationExpander, ISecurityRoleExpander, IRoleFactorySecurityRuleExpander
 {
-    DomainSecurityRule? TryExpand<TDomainObject>(SecurityRule.ModeSecurityRule securityRule);
-
-    DomainSecurityRule.NonExpandedRolesSecurityRule Expand(DomainSecurityRule.OperationSecurityRule securityRule);
-
-    DomainSecurityRule.ExpandedRolesSecurityRule Expand(DomainSecurityRule.NonExpandedRolesSecurityRule securityRule);
-
-    DomainSecurityRule.RoleBaseSecurityRule Expand(DomainSecurityRule.RoleFactorySecurityRule securityRule);
-
     DomainSecurityRule.ExpandedRolesSecurityRule FullExpand(DomainSecurityRule.RoleBaseSecurityRule securityRule);
 }

src/Framework.SecuritySystem.Abstract/Expanders/SecurityModeExpanderExtensions.cs

@@ -0,0 +1,12 @@
+namespace Framework.SecuritySystem.Expanders;
+
+public static class SecurityModeExpanderExtensions
+{
+    public static DomainSecurityRule Expand(this ISecurityModeExpander expander, DomainSecurityRule.DomainModeSecurityRule securityRule)
+    {
+        return expander.TryExpand(securityRule)
+               ?? throw new ArgumentOutOfRangeException(
+                   nameof(securityRule),
+                   $"{nameof(SecurityRule)} with mode '{securityRule}' not found for type '{securityRule.DomainType.Name}'");
+    }
+}

src/Framework.SecuritySystem.Abstract/SecurityRule/ClientSecurityRuleHeader.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem;
+
+public record ClientSecurityRuleHeader(string Name)
+{
+    public override string ToString() => this.Name;
+}

src/Framework.SecuritySystem.Abstract/SecurityRule/DomainSecurityRule.cs

@@ -27,6 +27,11 @@ public abstract record DomainSecurityRule : SecurityRule
 
     public static implicit operator DomainSecurityRule(SecurityRole[] securityRoles) => securityRoles.ToSecurityRule();
 
+    public record DomainModeSecurityRule(Type DomainType, ModeSecurityRule Mode) : DomainSecurityRule
+    {
+        public override string ToString() => $"{this.Mode} ({this.DomainType.Name})";
+    }
+
     public record CurrentUserSecurityRule(string? RelativePathKey = null) : DomainSecurityRule
     {
         public override string ToString() => this.RelativePathKey ?? nameof(CurrentUser);

src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/ClientSecurityRuleInfo.cs

@@ -0,0 +1,9 @@
+namespace Framework.SecuritySystem.SecurityRuleInfo;
+
+public record ClientSecurityRuleInfo(ClientSecurityRuleHeader Header, DomainSecurityRule Implementation)
+{
+    public ClientSecurityRuleInfo(string name, DomainSecurityRule implementation)
+        : this(new ClientSecurityRuleHeader(name), implementation)
+    {
+    }
+}

src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/DomainModeSecurityRuleInfo.cs

@@ -0,0 +1,3 @@
+namespace Framework.SecuritySystem.SecurityRuleInfo;
+
+public record DomainModeSecurityRuleInfo(DomainSecurityRule.DomainModeSecurityRule SecurityRule, DomainSecurityRule Implementation);

src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/IClientDomainModeSecurityRuleSource.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.SecurityRuleInfo;
+
+public interface IClientDomainModeSecurityRuleSource
+{
+    IEnumerable<DomainSecurityRule.DomainModeSecurityRule> GetRules();
+}

src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/IClientSecurityRuleInfoSource.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.SecurityRuleInfo;
+
+public interface IClientSecurityRuleInfoSource
+{
+    IEnumerable<ClientSecurityRuleInfo> GetInfos();
+}

src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/IClientSecurityRuleNameExtractor.cs

@@ -0,0 +1,10 @@
+using System.Reflection;
+
+namespace Framework.SecuritySystem.SecurityRuleInfo;
+
+public interface IClientSecurityRuleNameExtractor
+{
+    string ExtractName(PropertyInfo propertyInfo);
+
+    string ExtractName(DomainSecurityRule.DomainModeSecurityRule securityRule);
+}

src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/IClientSecurityRuleResolver.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.SecurityRuleInfo;
+
+public interface IClientSecurityRuleResolver
+{
+    IEnumerable<ClientSecurityRuleHeader> Resolve(SecurityRole securityRole);
+}

src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/IDomainModeSecurityRuleResolver.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.SecurityRuleInfo;
+
+public interface IDomainModeSecurityRuleResolver
+{
+    IEnumerable<DomainSecurityRule.DomainModeSecurityRule> Resolve(SecurityRole securityRole);
+}

src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/IDomainSecurityRoleExtractor.cs

@@ -0,0 +1,6 @@
+namespace Framework.SecuritySystem.SecurityRuleInfo;
+
+public interface IDomainSecurityRoleExtractor
+{
+    IEnumerable<SecurityRole> Extract(DomainSecurityRule securityRule);
+}

src/_DomainDriven/Framework.DomainDriven.Core.LegacyContext/ISecurityRuleParser.cs → src/Framework.SecuritySystem.Abstract/SecurityRuleInfo/ISecurityRuleParser.cs

@@ -1,6 +1,4 @@
-using Framework.SecuritySystem;
-
-namespace Framework.DomainDriven;
+namespace Framework.SecuritySystem.SecurityRuleInfo;
 
 public interface ISecurityRuleParser
 {

src/Framework.SecuritySystem.DiTests/MainTests.SecurityRoleTests.cs

@@ -27,7 +27,7 @@ public void AdministratorRole_ShouldNotContains_SystemIntegrationRole()
     public void SecurityRoleExpander_ExpandDeepChild_AllRolesExpanded()
     {
         // Arrange
-        var expander = this.rootServiceProvider.GetRequiredService<SecurityRoleExpander>();
+        var expander = this.rootServiceProvider.GetRequiredService<ISecurityRoleExpander>();
 
         // Act
         var expandResult = expander.Expand(ExampleSecurityRole.TestRole3);
@@ -44,7 +44,7 @@ public void SecurityRoleExpander_ExpandDeepChild_AllRolesExpanded()
     public void SecurityRoleExpander_ExpandWithDefaultExpandType_RoleResolved()
     {
         // Arrange
-        var expander = this.rootServiceProvider.GetRequiredService<SecurityOperationExpander>();
+        var expander = this.rootServiceProvider.GetRequiredService<ISecurityOperationExpander>();
 
         // Act
         var expandResult = expander.Expand(new DomainSecurityRule.OperationSecurityRule(ExampleSecurityOperation.EmployeeView));
@@ -57,7 +57,7 @@ public void SecurityRoleExpander_ExpandWithDefaultExpandType_RoleResolved()
     public void SecurityRoleExpander_ExpandWithCustomExpandType_SecurityRuleCorrected()
     {
         // Arrange
-        var expander = this.rootServiceProvider.GetRequiredService<SecurityOperationExpander>();
+        var expander = this.rootServiceProvider.GetRequiredService<ISecurityOperationExpander>();
 
         // Act
         var expandResult = expander.Expand(ExampleSecurityOperation.EmployeeView.ToSecurityRule(HierarchicalExpandType.None));

src/Framework.SecuritySystem/AvailableSecurity/AvailableClientSecurityRuleSource.cs

@@ -0,0 +1,17 @@
+using Framework.SecuritySystem.SecurityRuleInfo;
+
+namespace Framework.SecuritySystem.AvailableSecurity;
+
+public class AvailableClientSecurityRuleSource(
+    IAvailableSecurityRoleSource availableSecurityRoleSource,
+    IClientSecurityRuleResolver clientSecurityRuleResolver) : IAvailableClientSecurityRuleSource
+{
+    public async Task<List<ClientSecurityRuleHeader>> GetAvailableSecurityRules(CancellationToken cancellationToken = default)
+    {
+        var roles = await availableSecurityRoleSource.GetAvailableSecurityRoles(true, cancellationToken);
+
+        return roles.SelectMany(clientSecurityRuleResolver.Resolve)
+                    .Distinct()
+                    .ToList();
+    }
+}

src/Framework.SecuritySystem/AvailableSecurityOperationSource/AvailableSecurityOperationSource.cs → src/Framework.SecuritySystem/AvailableSecurity/AvailableSecurityOperationSource.cs

@@ -1,4 +1,4 @@
-namespace Framework.SecuritySystem;
+namespace Framework.SecuritySystem.AvailableSecurity;
 
 public class AvailableSecurityOperationSource(IAvailableSecurityRoleSource availableSecurityRoleSource)
     : IAvailableSecurityOperationSource

src/Framework.SecuritySystem/AvailableSecurityRoleSource/AvailableSecurityRoleSource.cs → src/Framework.SecuritySystem/AvailableSecurity/AvailableSecurityRoleSource.cs

@@ -1,7 +1,7 @@
 using Framework.Core;
 using Framework.SecuritySystem.ExternalSystem;
 
-namespace Framework.SecuritySystem;
+namespace Framework.SecuritySystem.AvailableSecurity;
 
 public class AvailableSecurityRoleSource(IEnumerable<IPermissionSystem> permissionSystems, ISecurityRoleSource securityRoleSource)
     : IAvailableSecurityRoleSource

src/Framework.SecuritySystem/DependencyInjection/DomainSecurityServiceBuilder/DomainSecurityServiceBuilder.cs

@@ -2,7 +2,7 @@
 
 using Framework.Core;
 using Framework.Persistent;
-using Framework.SecuritySystem.Expanders;
+using Framework.SecuritySystem.SecurityRuleInfo;
 
 using Microsoft.Extensions.DependencyInjection;
 
@@ -18,36 +18,33 @@ public abstract class DomainSecurityServiceBuilder : IDomainSecurityServiceBuild
 internal class DomainSecurityServiceBuilder<TDomainObject> : DomainSecurityServiceBuilder, IDomainSecurityServiceBuilder<TDomainObject>
     where TDomainObject : IIdentityObject<Guid>
 {
-    private readonly List<Type> functorTypes = new();
+    private readonly List<Type> functorTypes = [];
 
-    public DomainSecurityRule? ViewRule { get; private set; }
+    private readonly Dictionary<SecurityRule.ModeSecurityRule, DomainSecurityRule> domainObjectSecurityDict = [];
 
-    public DomainSecurityRule? EditRule { get; private set; }
+    private SecurityPath<TDomainObject>? securityPath;
 
-    public SecurityPath<TDomainObject>? SecurityPath { get; private set; }
+    private (Type Type, object Instance)? relativePathData;
 
-    public (Type Type, object Instance)? RelativePathData { get; private set; }
+    private Type? customServiceType;
 
-    public Type? CustomServiceType { get; private set; }
-
-    public Type? DependencyServiceType { get; private set; }
+    private Type? dependencyServiceType;
 
     public override Type DomainType { get; } = typeof(TDomainObject);
 
     public override void Register(IServiceCollection services)
     {
-        if (this.ViewRule != null || this.EditRule != null)
+        foreach (var domainObjectSecurityPair in this.domainObjectSecurityDict)
         {
-            services.AddSingleton(
-                new DomainObjectSecurityModeInfo(typeof(TDomainObject), this.ViewRule, this.EditRule));
+            services.AddSingleton(new DomainModeSecurityRuleInfo(new DomainSecurityRule.DomainModeSecurityRule(this.DomainType, domainObjectSecurityPair.Key), domainObjectSecurityPair.Value));
         }
 
-        if (this.SecurityPath != null)
+        if (this.securityPath != null)
         {
-            services.AddSingleton(this.SecurityPath);
+            services.AddSingleton(this.securityPath);
         }
 
-        if (this.RelativePathData is { } pair)
+        if (this.relativePathData is { } pair)
         {
             services.AddSingleton(pair.Type, pair.Instance);
         }
@@ -69,7 +66,7 @@ public override void Register(IServiceCollection services)
     {
         var baseServiceType = typeof(IDomainSecurityService<TDomainObject>);
 
-        var actualCustomServiceType = this.CustomServiceType ?? this.DependencyServiceType;
+        var actualCustomServiceType = this.customServiceType ?? this.dependencyServiceType;
 
         var functorTypeDecl = typeof(IOverrideSecurityProviderFunctor<TDomainObject>);
 
@@ -100,28 +97,28 @@ public override void Register(IServiceCollection services)
 
     public IDomainSecurityServiceBuilder<TDomainObject> SetView(DomainSecurityRule securityRule)
     {
-        this.ViewRule = securityRule;
+        this.domainObjectSecurityDict[SecurityRule.View] = securityRule;
 
         return this;
     }
 
     public IDomainSecurityServiceBuilder<TDomainObject> SetEdit(DomainSecurityRule securityRule)
     {
-        this.EditRule = securityRule;
+        this.domainObjectSecurityDict[SecurityRule.Edit] = securityRule;
 
         return this;
     }
 
-    public IDomainSecurityServiceBuilder<TDomainObject> SetPath(SecurityPath<TDomainObject> securityPath)
+    public IDomainSecurityServiceBuilder<TDomainObject> SetPath(SecurityPath<TDomainObject> newSecurityPath)
     {
-        this.SecurityPath = securityPath;
+        this.securityPath = newSecurityPath;
 
         return this;
     }
 
     public IDomainSecurityServiceBuilder<TDomainObject> SetDependency<TSource>()
     {
-        this.DependencyServiceType = typeof(DependencyDomainSecurityService<TDomainObject, TSource>);
+        this.dependencyServiceType = typeof(DependencyDomainSecurityService<TDomainObject, TSource>);
 
         return this;
     }
@@ -130,7 +127,7 @@ public IDomainSecurityServiceBuilder<TDomainObject> SetDependency<TSource>(Expre
     {
         this.SetDependency<TSource>();
 
-        this.RelativePathData =
+        this.relativePathData =
             (typeof(IRelativeDomainPathInfo<TDomainObject, TSource>),
                 new RelativeDomainPathInfo<TDomainObject, TSource>(relativeDomainPath));
 
@@ -139,15 +136,15 @@ public IDomainSecurityServiceBuilder<TDomainObject> SetDependency<TSource>(Expre
 
     public IDomainSecurityServiceBuilder<TDomainObject> SetUntypedDependency<TSource>()
     {
-        this.DependencyServiceType = typeof(UntypedDependencyDomainSecurityService<,>).MakeGenericType(typeof(TDomainObject), typeof(TSource));
+        this.dependencyServiceType = typeof(UntypedDependencyDomainSecurityService<,>).MakeGenericType(typeof(TDomainObject), typeof(TSource));
 
         return this;
     }
 
     public IDomainSecurityServiceBuilder<TDomainObject> SetCustomService<TDomainSecurityService>()
         where TDomainSecurityService : IDomainSecurityService<TDomainObject>
     {
-        this.CustomServiceType = typeof(TDomainSecurityService);
+        this.customServiceType = typeof(TDomainSecurityService);
 
         return this;
     }

src/Framework.SecuritySystem/DependencyInjection/DomainSecurityServiceBuilder/DomainSecurityServiceRootBuilder.cs

@@ -9,7 +9,7 @@ namespace Framework.SecuritySystem.DependencyInjection.DomainSecurityServiceBuil
 
 internal class DomainSecurityServiceRootBuilder : IDomainSecurityServiceRootBuilder
 {
-    private readonly List<DomainSecurityServiceBuilder> domainBuilders = new();
+    private readonly List<DomainSecurityServiceBuilder> domainBuilders = [];
 
     public bool AutoAddSelfRelativePath { get; set; } = true;
 

src/Framework.SecuritySystem/DependencyInjection/DomainSecurityServiceBuilder/DomainSecurityServiceWithFunctor.cs

@@ -11,7 +11,7 @@ public class DomainSecurityServiceWithFunctor<TOriginalDomainSecurityService, TD
 {
     protected override ISecurityProvider<TDomainObject> CreateSecurityProvider(SecurityRule.ModeSecurityRule securityRule)
     {
-        var actualSecurityRule = (SecurityRule?)securityRuleExpander.TryExpand<TDomainObject>(securityRule) ?? securityRule;
+        var actualSecurityRule = (SecurityRule?)securityRuleExpander.TryExpand(new DomainSecurityRule.DomainModeSecurityRule(typeof(TDomainObject), securityRule)) ?? securityRule;
 
         var originalSecurityProvider = originalDomainSecurityService.GetSecurityProvider(actualSecurityRule);
 

src/Framework.SecuritySystem/DependencyInjection/ISecuritySystemSettings.cs

@@ -3,6 +3,7 @@
 using Framework.SecuritySystem.DependencyInjection.DomainSecurityServiceBuilder;
 using Framework.SecuritySystem.ExternalSystem;
 using Framework.SecuritySystem.SecurityAccessor;
+using Framework.SecuritySystem.SecurityRuleInfo;
 using Framework.SecuritySystem.Services;
 using Microsoft.Extensions.DependencyInjection;
 
@@ -53,4 +54,11 @@ ISecuritySystemSettings SetSecurityAccessorInfinityStorage<TStorage>()
 
     ISecuritySystemSettings SetDefaultSecurityRuleCredential(SecurityRuleCredential securityRuleCredential);
 
+    ISecuritySystemSettings AddClientSecurityRuleInfoSource<TClientSecurityRuleInfoSource>()
+        where TClientSecurityRuleInfoSource : class, IClientSecurityRuleInfoSource;
+
+    ISecuritySystemSettings AddClientSecurityRuleInfoSource(Type sourceType);
+
+    ISecuritySystemSettings SetSecurityRuleParser<TSecurityRuleParser>()
+        where TSecurityRuleParser : class, ISecurityRuleParser;
 }