feat: allow permissions read_attach on token (#21)

* feat: allow permissions read_attach on token

* docs(readme): attach read_attach example

Author: notrab

README.md

@@ -48,6 +48,13 @@ const token = await turso.groups.createToken("default", {
   expiration: "1w2d6h3m",
   authorization: "full-access",
 });
+const token = await turso.groups.createToken("default", {
+  permissions: {
+    read_attach: {
+      databases: ["db1", "db2"]
+    }
+  }
+});
 const token = await turso.groups.rotateTokens("default");
 ```
 
@@ -102,6 +109,13 @@ const token = await turso.databases.createToken("my-db", {
   expiration: "1w2d6h3n",
   authorization: "full-access",
 });
+const token = await turso.databases.createToken("my-db", {
+  permissions: {
+    read_attach: {
+      databases: ["db1", "db2"]
+    }
+  }
+});
 const token = await turso.databases.rotateTokens("my-db");
 
 const usageStatsWithDate = await turso.databases.usage("my-db");

src/database.ts

@@ -212,6 +212,9 @@ export class DatabaseClient {
     options?: {
       expiration: string;
       authorization: "read-only" | "full-access";
+      permissions?: {
+        read_attach: { databases: Database["name"][] };
+      };
     }
   ): Promise<DatabaseToken> {
     const queryParams = new URLSearchParams();
@@ -229,6 +232,13 @@ export class DatabaseClient {
       this.config,
       {
         method: "POST",
+        body: JSON.stringify({
+          permissions: {
+            read_attach: {
+              databases: options?.permissions?.read_attach?.databases ?? [],
+            },
+          },
+        }),
       }
     );
 

src/group.ts

@@ -1,6 +1,7 @@
 import { TursoConfig } from "./config";
 import { LocationKeys } from "./location";
 import { TursoClient } from "./client";
+import type { Database } from "./database";
 
 export interface Group {
   locations: Array<keyof LocationKeys>;
@@ -116,6 +117,9 @@ export class GroupClient {
     options?: {
       expiration: string;
       authorization: "read-only" | "full-access";
+      permissions?: {
+        read_attach: { databases: Database["name"][] };
+      };
     }
   ): Promise<GroupToken> {
     const queryParams = new URLSearchParams();
@@ -133,6 +137,13 @@ export class GroupClient {
       this.config,
       {
         method: "POST",
+        body: JSON.stringify({
+          permissions: {
+            read_attach: {
+              databases: options?.permissions?.read_attach?.databases ?? [],
+            },
+          },
+        }),
       }
     );