feathersjs/feathers-hooks-common

import { MethodNotAllowed } from '@feathersjs/errors';
import type { HookContext } from '@feathersjs/feathers';
import type { TransportName } from '../types';

/**
 * Prevents access to a service method completely or for specific transports.
 * @see https://hooks-common.feathersjs.com/hooks.html#disallow
 */
export function disallow<H extends HookContext = HookContext>(...transports: TransportName[]) {
  return (context: H) => {
    const hookProvider = context.params?.provider;

    const anyProvider = transports.length === 0;
    const thisProvider = transports.some(
      provider =>
        provider === hookProvider ||
        (provider === 'server' && !hookProvider) ||
        (provider === 'external' && !!hookProvider),
    );

    if (anyProvider || thisProvider) {
      throw new MethodNotAllowed(
        `Provider '${context.params.provider}' can not call '${context.method}'. (disallow)`,
      );
    }
  };
}