@drax/identity-back 0.11.5 → 0.12.2

package/dist/controllers/RoleController.js

@@ -1,5 +1,5 @@
 import { AbstractFastifyController } from "@drax/crud-back";
-import { ValidationError, UnauthorizedError } from "@drax/common-back";
+import { NotFoundError } from "@drax/common-back";
 import RoleServiceFactory from "../factory/RoleServiceFactory.js";
 import RolePermissions from "../permissions/RolePermissions.js";
 import PermissionService from "../services/PermissionService.js";
@@ -13,22 +13,13 @@ class RoleController extends AbstractFastifyController {
             const name = request.params.name;
             const roleService = RoleServiceFactory();
             let role = await roleService.findByName(name);
+            if (!role) {
+                throw new NotFoundError();
+            }
             return role;
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'INTERNAL_SERVER_ERROR' });
-            }
+            this.handleError(e, reply);
         }
     }
     async all(request, reply) {
@@ -37,26 +28,14 @@ class RoleController extends AbstractFastifyController {
             const roleService = RoleServiceFactory();
             let roles = await roleService.fetchAll();
             if (request.rbac.getRole?.childRoles?.length > 0) {
-                return roles.filter(role => request.rbac.getRole.childRoles.some(childRole => childRole.id === role.id));
+                return roles.filter(role => request.rbac.getRole.childRoles.some(childRole => childRole._id === role._id));
             }
             else {
                 return roles;
             }
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'INTERNAL_SERVER_ERROR' });
-            }
+            this.handleError(e, reply);
         }
     }
     async permissions(request, reply) {
@@ -66,19 +45,9 @@ class RoleController extends AbstractFastifyController {
             return permissions;
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'INTERNAL_SERVER_ERROR' });
-            }
+            this.handleError(e, reply);
         }
     }
-    async xxxx(request, reply) {
-    }
 }
 export default RoleController;
 export { RoleController };

package/dist/controllers/TenantController.js

@@ -6,39 +6,12 @@ class TenantController extends AbstractFastifyController {
     constructor() {
         super(TenantServiceFactory(), TenantPermissions);
     }
-    async findByName(request, reply) {
-        try {
-            request.rbac.assertPermission(this.permission.View);
-            if (!request.params.id) {
-                reply.statusCode = 400;
-                reply.send({ error: 'BAD REQUEST' });
-            }
-            const name = request.params.name;
-            let item = await this.service.findByName(name);
-            return item;
-        }
-        catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'INTERNAL_SERVER_ERROR' });
-            }
-        }
-    }
     async all(request, reply) {
         try {
             request.rbac.assertPermission(this.permission.View);
             let tenants = await this.service.fetchAll();
             if (request.rbac.getAuthUser.tenantId) {
-                return tenants.filter(t => t.id === request.rbac.getAuthUser.tenantId);
+                return tenants.filter(t => t._id === request.rbac.getAuthUser.tenantId);
             }
             else {
                 return tenants;

package/dist/controllers/UserApiKeyController.js

@@ -15,7 +15,7 @@ class UserApiKeyController extends AbstractFastifyController {
             ]);
             const filters = [];
             if (!request.rbac.hasPermission(UserApiKeyPermissions.View)) {
-                filters.push({ field: "user", operator: "eq", value: request.rbac.authUser.id });
+                filters.push({ field: "user", operator: "eq", value: request.rbac.userId });
             }
             const page = request.query.page;
             const limit = request.query.limit;
@@ -47,9 +47,9 @@ class UserApiKeyController extends AbstractFastifyController {
             request.rbac.assertOrPermissions([UserApiKeyPermissions.Create, UserApiKeyPermissions.CreateMy]);
             const payload = request.body;
             if (!request.rbac.hasPermission(UserApiKeyPermissions.Create) || !payload.user) {
-                payload.user = request.rbac.authUser.id;
+                payload.user = request.rbac.userId;
             }
-            payload.createdBy = request.rbac.authUser.id;
+            payload.createdBy = request.rbac.userId;
             const userApiKeyService = UserApiKeyServiceFactory();
             let userApiKey = await userApiKeyService.create(payload);
             return userApiKey;

package/dist/controllers/UserController.js

@@ -1,6 +1,6 @@
 import { AbstractFastifyController } from "@drax/crud-back";
 import RegistrationCompleteHtml from "../html/RegistrationCompleteHtml.js";
-import { CommonConfig, DraxConfig, StoreManager, UploadFileError, ValidationError, UnauthorizedError, SecuritySensitiveError } from "@drax/common-back";
+import { CommonConfig, DraxConfig, StoreManager, ValidationError, UnauthorizedError, } from "@drax/common-back";
 import UserServiceFactory from "../factory/UserServiceFactory.js";
 import RoleServiceFactory from "../factory/RoleServiceFactory.js";
 import UserPermissions from "../permissions/UserPermissions.js";
@@ -25,8 +25,8 @@ class UserController extends AbstractFastifyController {
         catch (e) {
             console.error('/api/auth error', e);
             if (e instanceof BadCredentialsError) {
-                reply.code(401);
-                reply.send({ error: e.message });
+                reply.code(e.statusCode);
+                reply.send(e.body);
             }
             reply.code(500);
             reply.send({ error: 'error.server' });
@@ -36,7 +36,7 @@ class UserController extends AbstractFastifyController {
         try {
             if (request.authUser) {
                 const userService = UserServiceFactory();
-                let user = await userService.findById(request.authUser.id);
+                let user = await userService.findById(request.rbac.userId);
                 user.password = undefined;
                 delete user.password;
                 return user;
@@ -46,18 +46,7 @@ class UserController extends AbstractFastifyController {
             }
         }
         catch (e) {
-            if (e instanceof UnauthorizedError) {
-                reply.code(401);
-                reply.send({ error: "Unauthorized" });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async paginate(request, reply) {
@@ -69,7 +58,7 @@ class UserController extends AbstractFastifyController {
             const order = request.query.order;
             const search = request.query.search;
             const userService = UserServiceFactory();
-            const filters = [];
+            const filters = this.parseFilters(request.query.filters);
             if (request.rbac.getAuthUser.tenantId) {
                 filters.push({ field: 'tenant', operator: 'eq', value: request.rbac.getAuthUser.tenantId });
             }
@@ -81,18 +70,7 @@ class UserController extends AbstractFastifyController {
             return paginateResult;
         }
         catch (e) {
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async search(request, reply) {
@@ -107,19 +85,7 @@ class UserController extends AbstractFastifyController {
             return item;
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'INTERNAL_SERVER_ERROR' });
-            }
+            this.handleError(e, reply);
         }
     }
     async register(request, reply) {
@@ -140,28 +106,21 @@ class UserController extends AbstractFastifyController {
             else if (role.name === 'Admin') {
                 payload.tenant = null;
             }
-            payload.role = role.id;
+            payload.role = role._id.toString();
             payload.origin ?? (payload.origin = 'Registry');
             const userService = UserServiceFactory();
             let user = await userService.register(payload);
-            //SEND EMAIL FOR EMAIL VERIFICATION
-            await UserEmailService.emailVerifyCode(user.emailCode, user.email);
-            return user;
+            if (user) {
+                //SEND EMAIL FOR EMAIL VERIFICATION
+                await UserEmailService.emailVerifyCode(user.emailCode, user.email);
+                return {
+                    success: true,
+                    message: 'User registered successfully.'
+                };
+            }
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async verifyEmail(request, reply) {
@@ -175,13 +134,7 @@ class UserController extends AbstractFastifyController {
             }
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            reply.code(500);
-            reply.send({ error: 'error.server' });
+            this.handleError(e, reply);
         }
     }
     async verifyPhone(request, reply) {
@@ -191,28 +144,14 @@ class UserController extends AbstractFastifyController {
             return await userService.verifyPhone(phoneCode);
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            reply.code(500);
-            reply.send({ error: 'error.server' });
+            this.handleError(e, reply);
         }
     }
     async create(request, reply) {
         try {
             request.rbac.assertPermission(UserPermissions.Create);
             const payload = request.body;
-            const roleService = RoleServiceFactory();
-            const role = await roleService.findById(payload.role);
-            if (!role) {
-                throw new ValidationError([{ field: 'role', reason: 'Role not found' }]);
-            }
-            else if (role.name === 'Admin') {
-                payload.tenant = null;
-            }
-            else if (request.rbac.getAuthUser.tenantId) {
+            if (request.rbac.getAuthUser.tenantId) {
                 payload.tenant = request.rbac.getAuthUser.tenantId;
             }
             payload.origin ?? (payload.origin = 'Admin');
@@ -221,19 +160,7 @@ class UserController extends AbstractFastifyController {
             return user;
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async update(request, reply) {
@@ -241,15 +168,7 @@ class UserController extends AbstractFastifyController {
             request.rbac.assertPermission(UserPermissions.Update);
             const id = request.params.id;
             const payload = request.body;
-            const roleService = RoleServiceFactory();
-            const role = await roleService.findById(payload.role);
-            if (!role) {
-                throw new ValidationError([{ field: 'role', reason: 'Role not found' }]);
-            }
-            else if (role.name === 'Admin') {
-                payload.tenant = null;
-            }
-            else if (request.rbac.getAuthUser.tenantId) {
+            if (request.rbac.getAuthUser.tenantId) {
                 payload.tenant = request.rbac.getAuthUser.tenantId;
             }
             const userService = UserServiceFactory();
@@ -257,23 +176,7 @@ class UserController extends AbstractFastifyController {
             return user;
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async delete(request, reply) {
@@ -283,26 +186,24 @@ class UserController extends AbstractFastifyController {
             const userService = UserServiceFactory();
             let r = await userService.delete(id);
             if (r) {
-                reply.send({ message: 'Deleted successfully' });
+                reply.send({
+                    id: id,
+                    message: 'Item deleted successfully',
+                    deleted: true,
+                    deletedAt: new Date(),
+                });
             }
             else {
-                reply.statusCode(400).send({ message: 'Not deleted' });
+                reply.send({
+                    id: id,
+                    message: 'Item not deleted',
+                    deleted: false,
+                    deletedAt: new Date(),
+                });
             }
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async passwordRecoveryRequest(request, reply) {
@@ -322,19 +223,7 @@ class UserController extends AbstractFastifyController {
             reply.send({ message });
         }
         catch (e) {
-            console.error('recoveryPassword error', e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof SecuritySensitiveError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async recoveryPasswordComplete(request, reply) {
@@ -358,15 +247,7 @@ class UserController extends AbstractFastifyController {
             }
         }
         catch (e) {
-            console.error('recoveryPassword error', e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async changeMyPassword(request, reply) {
@@ -378,22 +259,11 @@ class UserController extends AbstractFastifyController {
             const currentPassword = request.body.currentPassword;
             const newPassword = request.body.newPassword;
             const userService = UserServiceFactory();
-            return await userService.changeOwnPassword(userId, currentPassword, newPassword);
+            await userService.changeOwnPassword(userId, currentPassword, newPassword);
+            return { message: 'Password updated successfully' };
         }
         catch (e) {
-            console.error('changeMyPassword error', e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async changePassword(request, reply) {
@@ -405,28 +275,17 @@ class UserController extends AbstractFastifyController {
             }
             const newPassword = request.body.newPassword;
             const userService = UserServiceFactory();
-            return await userService.changeUserPassword(userId, newPassword);
+            await userService.changeUserPassword(userId, newPassword);
+            return { message: 'Password updated successfully' };
         }
         catch (e) {
-            console.error('/api/password error', e);
-            if (e instanceof ValidationError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message, inputErrors: e.errors });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'error.server' });
-            }
+            this.handleError(e, reply);
         }
     }
     async updateAvatar(request, reply) {
         try {
             request.rbac.assertAuthenticated();
-            const userId = request.rbac.getAuthUser.id;
+            const userId = request.rbac.userId;
             const data = await request.file();
             const file = {
                 filename: data.filename,
@@ -447,19 +306,7 @@ class UserController extends AbstractFastifyController {
             };
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof UploadFileError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'INTERNAL_SERVER_ERROR' });
-            }
+            this.handleError(e, reply);
         }
     }
     async getAvatar(request, reply) {
@@ -471,15 +318,7 @@ class UserController extends AbstractFastifyController {
             return reply.sendFile(filename, fileDir);
         }
         catch (e) {
-            console.error(e);
-            if (e instanceof UnauthorizedError) {
-                reply.statusCode = e.statusCode;
-                reply.send({ error: e.message });
-            }
-            else {
-                reply.statusCode = 500;
-                reply.send({ error: 'INTERNAL_SERVER_ERROR' });
-            }
+            this.handleError(e, reply);
         }
     }
 }

package/dist/errors/BadCredentialsError.js

@@ -2,9 +2,21 @@ class BadCredentialsError extends Error {
     constructor() {
         super('error.badCredentials');
         this.name = 'BadCredentialsError';
+        this.message = 'error.badCredentials';
     }
     get statusCode() {
         return 401;
     }
+    get i18nMessage() {
+        return 'error.badCredentials';
+    }
+    get body() {
+        return {
+            statusCode: this.statusCode,
+            error: this.name,
+            message: this.message,
+            i18nMessage: this.i18nMessage,
+        };
+    }
 }
 export default BadCredentialsError;

package/dist/factory/RoleServiceFactory.js

@@ -13,6 +13,7 @@ const RoleServiceFactory = (verbose = false) => {
             case COMMON.DB_ENGINES.SQLITE:
                 const dbFile = DraxConfig.getOrLoad(CommonConfig.SqliteDbFile);
                 roleRepository = new RoleSqliteRepository(dbFile, verbose);
+                roleRepository.build();
                 break;
             default:
                 throw new Error("DraxConfig.DB_ENGINE must be one of " + Object.values(COMMON.DB_ENGINES).join(", "));

package/dist/factory/TenantServiceFactory.js

@@ -13,6 +13,7 @@ const TenantServiceFactory = (verbose = false) => {
             case COMMON.DB_ENGINES.SQLITE:
                 const dbFile = DraxConfig.getOrLoad(CommonConfig.SqliteDbFile);
                 tenantRepository = new TenantSqliteRepository(dbFile, verbose);
+                tenantRepository.build();
                 break;
             default:
                 throw new Error("DraxConfig.DB_ENGINE must be one of " + Object.values(COMMON.DB_ENGINES).join(", "));

package/dist/factory/UserApiKeyServiceFactory.js

@@ -5,19 +5,20 @@ import { COMMON, CommonConfig, DraxConfig } from "@drax/common-back";
 let userService;
 const UserApiKeyServiceFactory = (verbose = false) => {
     if (!userService) {
-        let userRepository;
+        let userApiKeyRepository;
         switch (DraxConfig.getOrLoad(CommonConfig.DbEngine)) {
             case COMMON.DB_ENGINES.MONGODB:
-                userRepository = new UserApiKeyMongoRepository();
+                userApiKeyRepository = new UserApiKeyMongoRepository();
                 break;
             case COMMON.DB_ENGINES.SQLITE:
                 const dbFile = DraxConfig.getOrLoad(CommonConfig.SqliteDbFile);
-                userRepository = new UserApiKeySqliteRepository(dbFile, verbose);
+                userApiKeyRepository = new UserApiKeySqliteRepository(dbFile, verbose);
+                userApiKeyRepository.build();
                 break;
             default:
                 throw new Error("DraxConfig.DB_ENGINE must be one of " + Object.values(COMMON.DB_ENGINES).join(", "));
         }
-        userService = new UserApiKeyService(userRepository);
+        userService = new UserApiKeyService(userApiKeyRepository);
     }
     return userService;
 };

package/dist/factory/UserServiceFactory.js

@@ -13,6 +13,7 @@ const UserServiceFactory = (verbose = false) => {
             case COMMON.DB_ENGINES.SQLITE:
                 const dbFile = DraxConfig.getOrLoad(CommonConfig.SqliteDbFile);
                 userRepository = new UserSqliteRepository(dbFile, verbose);
+                userRepository.build();
                 break;
             default:
                 throw new Error("DraxConfig.DB_ENGINE must be one of " + Object.values(COMMON.DB_ENGINES).join(", "));

package/dist/graphql/resolvers/role.resolvers.js

@@ -37,7 +37,7 @@ export default {
                 const roleService = RoleServiceFactory();
                 const roles = await roleService.fetchAll();
                 if (rbac.getRole?.childRoles?.length > 0) {
-                    return roles.filter(role => rbac.getRole.childRoles.some(childRole => childRole.id === role.id));
+                    return roles.filter(role => rbac.getRole.childRoles.some(childRole => childRole._id === role._id));
                 }
                 else {
                     return roles;
@@ -63,7 +63,7 @@ export default {
                 throw new GraphQLError('error.server');
             }
         },
-        paginateRole: async (_, { options = { page: 1, limit: 5, orderBy: "", order: false, search: "", filters: [] } }, { rbac }) => {
+        paginateRole: async (_, { options = { page: 1, limit: 5, orderBy: "", order: "asc", search: "", filters: [] } }, { rbac }) => {
             try {
                 rbac.assertPermission(IdentityPermissions.ViewRole);
                 const roleService = RoleServiceFactory();

package/dist/graphql/resolvers/tenant.resolvers.js

@@ -36,7 +36,7 @@ export default {
                 const tenantService = TenantServiceFactory();
                 const tenants = await tenantService.fetchAll();
                 if (rbac.getAuthUser.tenantId) {
-                    return tenants.filter(t => t.id === rbac.getAuthUser.tenantId);
+                    return tenants.filter(t => t._id === rbac.getAuthUser.tenantId);
                 }
                 else {
                     return tenants;
@@ -49,7 +49,7 @@ export default {
                 throw new GraphQLError('error.server');
             }
         },
-        paginateTenant: async (_, { options = { page: 1, limit: 5, orderBy: "", order: false, search: "", filters: [] } }, { rbac }) => {
+        paginateTenant: async (_, { options = { page: 1, limit: 5, orderBy: "", order: "asc", search: "", filters: [] } }, { rbac }) => {
             try {
                 rbac.assertPermission(IdentityPermissions.ViewTenant);
                 const tenantService = TenantServiceFactory();