@acorex-platform/module-security-management-server 0.0.18 → 2.0.0-next.42

package/server/src/lib/user-invitation/user-invitation.service.d.ts

@@ -0,0 +1,162 @@
+import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
+import { ServerCommandExecutorService } from '@acorex-platform/framework-server/domain/providers';
+import { type AXMAcceptInvitationInput, type AXMAcceptInvitationPreviewResult, type AXMAcceptMyInvitationInput, type AXMCancelInvitationInput, type AXMCreateUserInTenantInput, type AXMCreateUserInTenantResult, type AXMDeclineInvitationInput, type AXMInviteUserInput, type AXMInviteUserResult, type AXMListMyPendingInvitationsResult, type AXMListInviteAssignableRolesResult, type AXMListTenantEntitledApplicationsResult, type AXMApproveJoinRequestInput, type AXMCancelMyJoinRequestInput, type AXMListMyJoinRequestsResult, type AXMLookupTenantByUniqueNameInput, type AXMLookupTenantByUniqueNameResult, type AXMRejectJoinRequestInput, type AXMRequestTenantMembershipInput, type AXMRequestTenantMembershipResult, type AXMResendInvitationInput } from '@acorex-platform/module-security-management-client/contracts';
+export declare class UserInvitationService {
+    private readonly entityStorage;
+    private readonly commandExecutor;
+    private readonly logger;
+    constructor(entityStorage: EntityStorageMiddlewareService, commandExecutor: ServerCommandExecutorService);
+    inviteUser(input: AXMInviteUserInput): Promise<{
+        success: boolean;
+        message?: string;
+        data?: AXMInviteUserResult;
+    }>;
+    resendInvitation(input: AXMResendInvitationInput): Promise<{
+        success: boolean;
+        message?: string;
+        sent?: boolean;
+    }>;
+    cancelInvitation(input: AXMCancelInvitationInput): Promise<{
+        success: boolean;
+        message?: string;
+    }>;
+    approveJoinRequest(input: AXMApproveJoinRequestInput): Promise<{
+        success: boolean;
+        message?: string;
+        code?: string;
+    }>;
+    rejectJoinRequest(input: AXMRejectJoinRequestInput): Promise<{
+        success: boolean;
+        message?: string;
+        code?: string;
+    }>;
+    createUserInTenant(input: AXMCreateUserInTenantInput): Promise<{
+        success: boolean;
+        message?: string;
+        data?: AXMCreateUserInTenantResult;
+    }>;
+    /**
+     * Create-in-tenant only: authorize apps + roles (does not call inviteUser).
+     */
+    private resolveCreateInTenantRoleAssignments;
+    /** Create-in-tenant only: write UserRole grants after identity + AppAccess. */
+    private assignCreateInTenantUserRoles;
+    private upsertCreateInTenantUserRoles;
+    /**
+     * Public page load. Does not write a password, clear the token, or change status.
+     * Unknown tokens (already accepted, resent, or never issued) are `invalid`.
+     */
+    previewInvitation(token: string | undefined): Promise<AXMAcceptInvitationPreviewResult>;
+    acceptInvitation(input: AXMAcceptInvitationInput): Promise<{
+        success: boolean;
+        message?: string;
+        code?: string;
+    }>;
+    listMyPendingInvitations(): Promise<{
+        success: boolean;
+        message?: string;
+        data?: AXMListMyPendingInvitationsResult;
+    }>;
+    acceptMyInvitation(input: AXMAcceptMyInvitationInput): Promise<{
+        success: boolean;
+        message?: string;
+    }>;
+    declineInvitation(input: AXMDeclineInvitationInput): Promise<{
+        success: boolean;
+        message?: string;
+    }>;
+    lookupTenantByUniqueName(input: AXMLookupTenantByUniqueNameInput): Promise<{
+        success: boolean;
+        message?: string;
+        code?: string;
+        data?: AXMLookupTenantByUniqueNameResult;
+    }>;
+    requestTenantMembership(input: AXMRequestTenantMembershipInput): Promise<{
+        success: boolean;
+        message?: string;
+        code?: string;
+        data?: AXMRequestTenantMembershipResult;
+    }>;
+    listMyJoinRequests(): Promise<{
+        success: boolean;
+        message?: string;
+        code?: string;
+        data?: AXMListMyJoinRequestsResult;
+    }>;
+    cancelMyJoinRequest(input: AXMCancelMyJoinRequestInput): Promise<{
+        success: boolean;
+        message?: string;
+        code?: string;
+    }>;
+    private activateMembership;
+    private isPendingJoinRequest;
+    private isJoinableTenant;
+    /** Exact case-insensitive match on unique `name` or any locale value of display `title`. */
+    private tenantNameOrTitleMatches;
+    private findActiveTenantByUniqueName;
+    private getJoinableTenantById;
+    private extractTenantTitle;
+    private extractTenantLogo;
+    private requireSession;
+    /**
+     * Product / app-scoped invite: force session application only.
+     * Tenant Users multi-app: `tenantMembershipInvite` + session edition feature,
+     * intersected with tenant subscription entitlement (ADR-TEN-001 D-05).
+     */
+    private resolveAuthorizedApplicationIds;
+    listTenantEntitledApplications(): Promise<{
+        success: boolean;
+        message?: string;
+        data?: AXMListTenantEntitledApplicationsResult;
+    }>;
+    /**
+     * TM Tenant Users invite repeater only — overlay roles for the current tenant.
+     * Does not change Role list isolation or Security → Users invite.
+     */
+    listInviteAssignableRoles(applicationId?: string): Promise<{
+        success: boolean;
+        message?: string;
+        data?: AXMListInviteAssignableRolesResult;
+    }>;
+    private revalidateApplicationIds;
+    /**
+     * TM Tenant Users repeater: keep role ids that are overlays for tenant + that row's application.
+     * Does not change {@link resolveAuthorizedRoleIds} (Security → Users / tenant-wide invite).
+     */
+    private resolveAuthorizedTenantUserInviteRoleIds;
+    /**
+     * Intersect client roleIds with Role rows the inviter may assign for this invite mode.
+     * Unknown / out-of-scope ids are dropped (not rejected) so invite still succeeds.
+     */
+    private resolveAuthorizedRoleIds;
+    private upsertInviteUserRoles;
+    private findUserRoleGrant;
+    private resolveApplicationIds;
+    private listUsers;
+    private findUserByEmail;
+    private findUserByUsername;
+    private listTenantUsers;
+    private listTenantUsersForUser;
+    private findTenantUser;
+    private getTenantUserById;
+    /** Waiting-room callers have no tenant on the session; do not use request-scoped getOne. */
+    private findOwnMembershipById;
+    private resolveMembership;
+    private findMembershipByTokenHash;
+    private upsertPendingTenantUser;
+    private upsertPendingAppAccess;
+    private listAppAccess;
+    /**
+     * Terminal invite outcomes keep invitation audit metadata (no tokenHash).
+     * Does not change User.accountState.
+     */
+    private resolveMembershipStatus;
+    private resolveTenantTitle;
+    private maybeDeliverInvitationInApp;
+    /**
+     * Unscoped in-app row (empty scopeInfo) for existing active users — visible in any
+     * tenant via catalog-read; inbox still filters by recipientUserId.
+     */
+    private deliverInvitationInApp;
+    private deliverInvitationEmail;
+}