@fdm-monster/server 2.0.10 → 2.0.11

package/dist/services/orm/user.service.js

@@ -1,191 +1,144 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "UserService", {
-    enumerable: true,
-    get: function() {
-        return UserService;
-    }
-});
-const _baseservice = require("./base.service");
-const _userdto = require("../interfaces/user.dto");
-const _entities = require("../../entities");
-const _typeorm = require("typeorm");
-const _runtimeexceptions = require("../../exceptions/runtime.exceptions");
-const _validators = require("../../handlers/validators");
-const _userservicevalidation = require("../validators/user-service.validation");
-const _cryptoutils = require("../../utils/crypto.utils");
-const _authorizationconstants = require("../../constants/authorization.constants");
-class UserService extends (0, _baseservice.BaseService)(_entities.User, _userdto.UserDto) {
-    userRoleService;
-    roleService;
-    constructor(typeormService, userRoleService, roleService){
-        super(typeormService), this.userRoleService = userRoleService, this.roleService = roleService;
-    }
-    toDto(user) {
-        const roleIds = (user.roles ?? []).map((r)=>r.roleId);
-        return {
-            id: user.id,
-            createdAt: user.createdAt,
-            isVerified: user.isVerified,
-            isDemoUser: user.isDemoUser,
-            isRootUser: user.isRootUser,
-            username: user.username,
-            needsPasswordChange: user.needsPasswordChange,
-            roles: this.roleService.roleIdsToRoleNames(roleIds)
-        };
-    }
-    listUsers(limit) {
-        return this.list({
-            take: limit
-        });
-    }
-    async getUser(userId) {
-        return this.get(userId);
-    }
-    async getUserRoles(userId) {
-        const userRoles = await this.userRoleService.listUserRoles(userId);
-        const roleIds = userRoles.map((ur)=>ur.roleId);
-        return this.roleService.roleIdsToRoleNames(roleIds);
-    }
-    findRootUsers() {
-        return this.repository.findBy({
-            isRootUser: true
-        });
-    }
-    findVerifiedUsers() {
-        return this.repository.findBy({
-            isVerified: true
-        });
-    }
-    async isUserRootUser(userId) {
-        const entity = await this.get(userId);
-        return entity.isRootUser;
-    }
-    async deleteUser(userId) {
-        const user = await this.getUser(userId);
-        if (user.isRootUser) {
-            throw new _runtimeexceptions.InternalServerException("Cannot delete a root user");
-        }
-        if (!user.roles?.length) {
-            throw new _runtimeexceptions.InternalServerException("User:roles relation not loaded, cannot perform deletion role check");
-        }
-        const role = this.roleService.getRoleByName(_authorizationconstants.ROLES.ADMIN);
-        if (user.roles.find((r)=>r.roleId == role.id)) {
-            const administrators = await this.findUsersByRoleId(role.id);
-            if (administrators?.length === 1 && administrators[0].id === userId) {
-                throw new _runtimeexceptions.InternalServerException("Cannot delete the last user with ADMIN role");
-            }
-        }
-        await this.delete(userId);
-    }
-    findRawByUsername(username) {
-        return this.repository.findOneBy({
-            username
-        });
-    }
-    async getDemoUserId() {
-        return (await this.repository.findOneBy({
-            isDemoUser: true
-        }))?.id;
-    }
-    async setIsRootUserById(userId, isRootUser) {
-        const user = await this.getUser(userId);
-        if (!user) throw new _runtimeexceptions.NotFoundException("User not found");
-        if (!isRootUser) {
-            const rootUsers = await this.findRootUsers();
-            if (rootUsers.length === 1 && rootUsers[0].id === userId) {
-                throw new _runtimeexceptions.InternalServerException("Cannot set the last root user to non-root user");
-            }
-        }
-        await this.update(userId, {
-            isRootUser
-        });
-    }
-    async setUserRoles(userId, roles) {
-        const roleIds = roles.map((roleName)=>this.roleService.getRoleByName(roleName).id);
-        await this.userRoleService.setUserRoles(userId, roleIds);
-        return await this.get(userId);
-    }
-    async setVerifiedById(userId, isVerified) {
-        const user = await this.getUser(userId);
-        if (!user) throw new _runtimeexceptions.NotFoundException("User not found");
-        if (!isVerified) {
-            if (user.isRootUser) {
-                throw new _runtimeexceptions.InternalServerException("Cannot set a owner (root user) to unverified");
-            }
-            const verifiedUsers = await this.findVerifiedUsers();
-            if (verifiedUsers.length === 1) {
-                throw new _runtimeexceptions.InternalServerException("Cannot set the last user to unverified");
-            }
-        }
-        await this.update(userId, {
-            isVerified
-        });
-    }
-    async updatePasswordById(userId, oldPassword, newPassword) {
-        const user = await this.getUser(userId);
-        if (!user) throw new _runtimeexceptions.NotFoundException("User not found");
-        if (!(0, _cryptoutils.comparePasswordHash)(oldPassword, user.passwordHash)) {
-            throw new _runtimeexceptions.NotFoundException("User old password incorrect");
-        }
-        const { password } = await (0, _validators.validateInput)({
-            password: newPassword
-        }, _userservicevalidation.newPasswordSchema);
-        const passwordHash = (0, _cryptoutils.hashPassword)(password);
-        return await this.update(userId, {
-            passwordHash,
-            needsPasswordChange: false
-        });
-    }
-    async updatePasswordUnsafeByUsername(username, newPassword) {
-        const { password } = await (0, _validators.validateInput)({
-            password: newPassword
-        }, _userservicevalidation.newPasswordSchema);
-        const passwordHash = (0, _cryptoutils.hashPassword)(password);
-        const user = await this.findRawByUsername(username);
-        if (!user) throw new _runtimeexceptions.NotFoundException("User not found");
-        return await this.update(user.id, {
-            passwordHash,
-            needsPasswordChange: false
-        });
-    }
-    async updatePasswordHashUnsafeByUsername(username, passwordHash) {
-        const user = await this.findRawByUsername(username);
-        if (!user) throw new _runtimeexceptions.NotFoundException("User not found");
-        return await this.update(user.id, {
-            passwordHash,
-            needsPasswordChange: false
-        });
-    }
-    updateUsernameById(userId, newUsername) {
-        return this.update(userId, {
-            username: newUsername
-        });
-    }
-    async register(input) {
-        const { username, password, roles, isDemoUser, isRootUser, needsPasswordChange, isVerified } = await (0, _validators.validateInput)(input, _userservicevalidation.registerUserSchema);
-        const passwordHash = (0, _cryptoutils.hashPassword)(password);
-        const result = await this.create({
-            username,
-            passwordHash,
-            isVerified: isVerified ?? false,
-            isDemoUser: isDemoUser ?? false,
-            isRootUser: isRootUser ?? false,
-            needsPasswordChange: needsPasswordChange ?? true
-        });
-        const roleIds = roles.map((roleName)=>this.roleService.getRoleByName(roleName).id);
-        await this.userRoleService.setUserRoles(result.id, roleIds);
-        return this.get(result.id);
-    }
-    async findUsersByRoleId(roleId) {
-        const userRoles = await this.userRoleService.listByRoleId(roleId);
-        const ids = userRoles.map((u)=>u.id);
-        return this.repository.findBy({
-            id: (0, _typeorm.In)(ids)
-        });
-    }
-}
+import { InternalServerException, NotFoundException } from "../../exceptions/runtime.exceptions.js";
+import { BaseService } from "./base.service.js";
+import { validateInput } from "../../handlers/validators.js";
+import { User } from "../../entities/user.entity.js";
+import { ROLES } from "../../constants/authorization.constants.js";
+import { UserDto } from "../interfaces/user.dto.js";
+import "../../entities/index.js";
+import { newPasswordSchema, registerUserSchema } from "../validators/user-service.validation.js";
+import { comparePasswordHash, hashPassword } from "../../utils/crypto.utils.js";
+import { In } from "typeorm";
+//#region src/services/orm/user.service.ts
+var UserService = class extends BaseService(User, UserDto) {
+	constructor(typeormService, userRoleService, roleService) {
+		super(typeormService);
+		this.userRoleService = userRoleService;
+		this.roleService = roleService;
+	}
+	toDto(user) {
+		const roleIds = (user.roles ?? []).map((r) => r.roleId);
+		return {
+			id: user.id,
+			createdAt: user.createdAt,
+			isVerified: user.isVerified,
+			isDemoUser: user.isDemoUser,
+			isRootUser: user.isRootUser,
+			username: user.username,
+			needsPasswordChange: user.needsPasswordChange,
+			roles: this.roleService.roleIdsToRoleNames(roleIds)
+		};
+	}
+	listUsers(limit) {
+		return this.list({ take: limit });
+	}
+	async getUser(userId) {
+		return this.get(userId);
+	}
+	async getUserRoles(userId) {
+		const roleIds = (await this.userRoleService.listUserRoles(userId)).map((ur) => ur.roleId);
+		return this.roleService.roleIdsToRoleNames(roleIds);
+	}
+	findRootUsers() {
+		return this.repository.findBy({ isRootUser: true });
+	}
+	findVerifiedUsers() {
+		return this.repository.findBy({ isVerified: true });
+	}
+	async isUserRootUser(userId) {
+		return (await this.get(userId)).isRootUser;
+	}
+	async deleteUser(userId) {
+		const user = await this.getUser(userId);
+		if (user.isRootUser) throw new InternalServerException("Cannot delete a root user");
+		if (!user.roles?.length) throw new InternalServerException("User:roles relation not loaded, cannot perform deletion role check");
+		const role = this.roleService.getRoleByName(ROLES.ADMIN);
+		if (user.roles.find((r) => r.roleId == role.id)) {
+			const administrators = await this.findUsersByRoleId(role.id);
+			if (administrators?.length === 1 && administrators[0].id === userId) throw new InternalServerException("Cannot delete the last user with ADMIN role");
+		}
+		await this.delete(userId);
+	}
+	findRawByUsername(username) {
+		return this.repository.findOneBy({ username });
+	}
+	async getDemoUserId() {
+		return (await this.repository.findOneBy({ isDemoUser: true }))?.id;
+	}
+	async setIsRootUserById(userId, isRootUser) {
+		if (!await this.getUser(userId)) throw new NotFoundException("User not found");
+		if (!isRootUser) {
+			const rootUsers = await this.findRootUsers();
+			if (rootUsers.length === 1 && rootUsers[0].id === userId) throw new InternalServerException("Cannot set the last root user to non-root user");
+		}
+		await this.update(userId, { isRootUser });
+	}
+	async setUserRoles(userId, roles) {
+		const roleIds = roles.map((roleName) => this.roleService.getRoleByName(roleName).id);
+		await this.userRoleService.setUserRoles(userId, roleIds);
+		return await this.get(userId);
+	}
+	async setVerifiedById(userId, isVerified) {
+		const user = await this.getUser(userId);
+		if (!user) throw new NotFoundException("User not found");
+		if (!isVerified) {
+			if (user.isRootUser) throw new InternalServerException("Cannot set a owner (root user) to unverified");
+			if ((await this.findVerifiedUsers()).length === 1) throw new InternalServerException("Cannot set the last user to unverified");
+		}
+		await this.update(userId, { isVerified });
+	}
+	async updatePasswordById(userId, oldPassword, newPassword) {
+		const user = await this.getUser(userId);
+		if (!user) throw new NotFoundException("User not found");
+		if (!comparePasswordHash(oldPassword, user.passwordHash)) throw new NotFoundException("User old password incorrect");
+		const { password } = await validateInput({ password: newPassword }, newPasswordSchema);
+		const passwordHash = hashPassword(password);
+		return await this.update(userId, {
+			passwordHash,
+			needsPasswordChange: false
+		});
+	}
+	async updatePasswordUnsafeByUsername(username, newPassword) {
+		const { password } = await validateInput({ password: newPassword }, newPasswordSchema);
+		const passwordHash = hashPassword(password);
+		const user = await this.findRawByUsername(username);
+		if (!user) throw new NotFoundException("User not found");
+		return await this.update(user.id, {
+			passwordHash,
+			needsPasswordChange: false
+		});
+	}
+	async updatePasswordHashUnsafeByUsername(username, passwordHash) {
+		const user = await this.findRawByUsername(username);
+		if (!user) throw new NotFoundException("User not found");
+		return await this.update(user.id, {
+			passwordHash,
+			needsPasswordChange: false
+		});
+	}
+	updateUsernameById(userId, newUsername) {
+		return this.update(userId, { username: newUsername });
+	}
+	async register(input) {
+		const { username, password, roles, isDemoUser, isRootUser, needsPasswordChange, isVerified } = await validateInput(input, registerUserSchema);
+		const passwordHash = hashPassword(password);
+		const result = await this.create({
+			username,
+			passwordHash,
+			isVerified: isVerified ?? false,
+			isDemoUser: isDemoUser ?? false,
+			isRootUser: isRootUser ?? false,
+			needsPasswordChange: needsPasswordChange ?? true
+		});
+		const roleIds = roles.map((roleName) => this.roleService.getRoleByName(roleName).id);
+		await this.userRoleService.setUserRoles(result.id, roleIds);
+		return this.get(result.id);
+	}
+	async findUsersByRoleId(roleId) {
+		const ids = (await this.userRoleService.listByRoleId(roleId)).map((u) => u.id);
+		return this.repository.findBy({ id: In(ids) });
+	}
+};
+//#endregion
+export { UserService };
 
 //# sourceMappingURL=user.service.js.map

package/dist/services/orm/user.service.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/services/orm/user.service.ts"],"names":["UserService","BaseService","User","UserDto","typeormService","userRoleService","roleService","toDto","user","roleIds","roles","map","r","roleId","id","createdAt","isVerified","isDemoUser","isRootUser","username","needsPasswordChange","roleIdsToRoleNames","listUsers","limit","list","take","getUser","userId","get","getUserRoles","userRoles","listUserRoles","ur","findRootUsers","repository","findBy","findVerifiedUsers","isUserRootUser","entity","deleteUser","InternalServerException","length","role","getRoleByName","ROLES","ADMIN","find","administrators","findUsersByRoleId","delete","findRawByUsername","findOneBy","getDemoUserId","setIsRootUserById","NotFoundException","rootUsers","update","setUserRoles","roleName","setVerifiedById","verifiedUsers","updatePasswordById","oldPassword","newPassword","comparePasswordHash","passwordHash","password","validateInput","newPasswordSchema","hashPassword","updatePasswordUnsafeByUsername","updatePasswordHashUnsafeByUsername","updateUsernameById","newUsername","register","input","registerUserSchema","result","create","listByRoleId","ids","u","In"],"mappings":";;;;+BAcaA;;;eAAAA;;;6BAde;yBACa;0BACpB;yBAEF;mCACwC;4BAC7B;uCACwB;6BACJ;wCAGlB;AAGzB,MAAMA,oBAAoBC,IAAAA,wBAAW,EAACC,cAAI,EAAEC,gBAAO;;;IACxD,YACEC,cAA8B,EAC9B,AAAiBC,eAAgC,EACjD,AAAiBC,WAAwB,CACzC;QACA,KAAK,CAACF,sBAHWC,kBAAAA,sBACAC,cAAAA;IAGnB;IAEAC,MAAMC,IAAU,EAAW;QACzB,MAAMC,UAAU,AAACD,CAAAA,KAAKE,KAAK,IAAI,EAAE,AAAD,EAAGC,GAAG,CAAC,CAACC,IAAMA,EAAEC,MAAM;QACtD,OAAO;YACLC,IAAIN,KAAKM,EAAE;YACXC,WAAWP,KAAKO,SAAS;YACzBC,YAAYR,KAAKQ,UAAU;YAC3BC,YAAYT,KAAKS,UAAU;YAC3BC,YAAYV,KAAKU,UAAU;YAC3BC,UAAUX,KAAKW,QAAQ;YACvBC,qBAAqBZ,KAAKY,mBAAmB;YAC7CV,OAAO,IAAI,CAACJ,WAAW,CAACe,kBAAkB,CAACZ;QAC7C;IACF;IAEAa,UAAUC,KAAc,EAAmB;QACzC,OAAO,IAAI,CAACC,IAAI,CAAC;YAAEC,MAAMF;QAAM;IACjC;IAEA,MAAMG,QAAQC,MAAc,EAAE;QAC5B,OAAO,IAAI,CAACC,GAAG,CAACD;IAClB;IAEA,MAAME,aAAaF,MAAc,EAAuB;QACtD,MAAMG,YAAY,MAAM,IAAI,CAACzB,eAAe,CAAC0B,aAAa,CAACJ;QAC3D,MAAMlB,UAAUqB,UAAUnB,GAAG,CAAC,CAACqB,KAAOA,GAAGnB,MAAM;QAC/C,OAAO,IAAI,CAACP,WAAW,CAACe,kBAAkB,CAACZ;IAC7C;IAEAwB,gBAAiC;QAC/B,OAAO,IAAI,CAACC,UAAU,CAACC,MAAM,CAAC;YAAEjB,YAAY;QAAK;IACnD;IAEAkB,oBAAqC;QACnC,OAAO,IAAI,CAACF,UAAU,CAACC,MAAM,CAAC;YAAEnB,YAAY;QAAK;IACnD;IAEA,MAAMqB,eAAeV,MAAc,EAAoB;QACrD,MAAMW,SAAS,MAAM,IAAI,CAACV,GAAG,CAACD;QAC9B,OAAOW,OAAOpB,UAAU;IAC1B;IAEA,MAAMqB,WAAWZ,MAAc,EAAE;QAE/B,MAAMnB,OAAO,MAAM,IAAI,CAACkB,OAAO,CAACC;QAEhC,IAAInB,KAAKU,UAAU,EAAE;YACnB,MAAM,IAAIsB,0CAAuB,CAAC;QACpC;QAEA,IAAI,CAAChC,KAAKE,KAAK,EAAE+B,QAAQ;YACvB,MAAM,IAAID,0CAAuB,CAAC;QACpC;QAGA,MAAME,OAAO,IAAI,CAACpC,WAAW,CAACqC,aAAa,CAACC,6BAAK,CAACC,KAAK;QACvD,IAAIrC,KAAKE,KAAK,CAACoC,IAAI,CAAC,CAAClC,IAAMA,EAAEC,MAAM,IAAI6B,KAAK5B,EAAE,GAAG;YAC/C,MAAMiC,iBAAiB,MAAM,IAAI,CAACC,iBAAiB,CAACN,KAAK5B,EAAE;YAC3D,IAAIiC,gBAAgBN,WAAW,KAAKM,cAAc,CAAC,EAAE,CAACjC,EAAE,KAAKa,QAAQ;gBACnE,MAAM,IAAIa,0CAAuB,CAAC;YACpC;QACF;QAEA,MAAM,IAAI,CAACS,MAAM,CAACtB;IACpB;IAEAuB,kBAAkB/B,QAAgB,EAAwB;QACxD,OAAO,IAAI,CAACe,UAAU,CAACiB,SAAS,CAAC;YAAEhC;QAAS;IAC9C;IAEA,MAAMiC,gBAA6C;QACjD,OAAQ,CAAA,MAAM,IAAI,CAAClB,UAAU,CAACiB,SAAS,CAAC;YAAElC,YAAY;QAAK,EAAC,GAAIH;IAClE;IAEA,MAAMuC,kBAAkB1B,MAAc,EAAET,UAAmB,EAAiB;QAC1E,MAAMV,OAAO,MAAM,IAAI,CAACkB,OAAO,CAACC;QAChC,IAAI,CAACnB,MAAM,MAAM,IAAI8C,oCAAiB,CAAC;QAEvC,IAAI,CAACpC,YAAY;YAEf,MAAMqC,YAAY,MAAM,IAAI,CAACtB,aAAa;YAC1C,IAAIsB,UAAUd,MAAM,KAAK,KAAKc,SAAS,CAAC,EAAE,CAACzC,EAAE,KAAKa,QAAQ;gBACxD,MAAM,IAAIa,0CAAuB,CAAC;YACpC;QACF;QAEA,MAAM,IAAI,CAACgB,MAAM,CAAC7B,QAAQ;YAAET;QAAW;IACzC;IAEA,MAAMuC,aAAa9B,MAAc,EAAEjB,KAAiB,EAAiB;QACnE,MAAMD,UAAUC,MAAMC,GAAG,CAAC,CAAC+C,WAAa,IAAI,CAACpD,WAAW,CAACqC,aAAa,CAACe,UAAU5C,EAAE;QACnF,MAAM,IAAI,CAACT,eAAe,CAACoD,YAAY,CAAC9B,QAAQlB;QAChD,OAAO,MAAM,IAAI,CAACmB,GAAG,CAACD;IACxB;IAEA,MAAMgC,gBAAgBhC,MAAc,EAAEX,UAAmB,EAAiB;QACxE,MAAMR,OAAO,MAAM,IAAI,CAACkB,OAAO,CAACC;QAChC,IAAI,CAACnB,MAAM,MAAM,IAAI8C,oCAAiB,CAAC;QAEvC,IAAI,CAACtC,YAAY;YACf,IAAIR,KAAKU,UAAU,EAAE;gBACnB,MAAM,IAAIsB,0CAAuB,CAAC;YACpC;YAGA,MAAMoB,gBAAgB,MAAM,IAAI,CAACxB,iBAAiB;YAClD,IAAIwB,cAAcnB,MAAM,KAAK,GAAG;gBAC9B,MAAM,IAAID,0CAAuB,CAAC;YACpC;QACF;QAEA,MAAM,IAAI,CAACgB,MAAM,CAAC7B,QAAQ;YAAEX;QAAW;IACzC;IAEA,MAAM6C,mBAAmBlC,MAAc,EAAEmC,WAAmB,EAAEC,WAAmB,EAAiB;QAChG,MAAMvD,OAAO,MAAM,IAAI,CAACkB,OAAO,CAACC;QAChC,IAAI,CAACnB,MAAM,MAAM,IAAI8C,oCAAiB,CAAC;QAEvC,IAAI,CAACU,IAAAA,gCAAmB,EAACF,aAAatD,KAAKyD,YAAY,GAAG;YACxD,MAAM,IAAIX,oCAAiB,CAAC;QAC9B;QAEA,MAAM,EAAEY,QAAQ,EAAE,GAAG,MAAMC,IAAAA,yBAAa,EAAC;YAAED,UAAUH;QAAY,GAAGK,wCAAiB;QACrF,MAAMH,eAAeI,IAAAA,yBAAY,EAACH;QAClC,OAAO,MAAM,IAAI,CAACV,MAAM,CAAC7B,QAAQ;YAAEsC;YAAc7C,qBAAqB;QAAM;IAC9E;IAEA,MAAMkD,+BAA+BnD,QAAgB,EAAE4C,WAAmB,EAAiB;QACzF,MAAM,EAAEG,QAAQ,EAAE,GAAG,MAAMC,IAAAA,yBAAa,EAAC;YAAED,UAAUH;QAAY,GAAGK,wCAAiB;QACrF,MAAMH,eAAeI,IAAAA,yBAAY,EAACH;QAClC,MAAM1D,OAAO,MAAM,IAAI,CAAC0C,iBAAiB,CAAC/B;QAC1C,IAAI,CAACX,MAAM,MAAM,IAAI8C,oCAAiB,CAAC;QAEvC,OAAO,MAAM,IAAI,CAACE,MAAM,CAAChD,KAAKM,EAAE,EAAE;YAAEmD;YAAc7C,qBAAqB;QAAM;IAC/E;IAEA,MAAMmD,mCAAmCpD,QAAgB,EAAE8C,YAAoB,EAAiB;QAC9F,MAAMzD,OAAO,MAAM,IAAI,CAAC0C,iBAAiB,CAAC/B;QAC1C,IAAI,CAACX,MAAM,MAAM,IAAI8C,oCAAiB,CAAC;QAEvC,OAAO,MAAM,IAAI,CAACE,MAAM,CAAChD,KAAKM,EAAE,EAAE;YAAEmD;YAAc7C,qBAAqB;QAAM;IAC/E;IAEAoD,mBAAmB7C,MAAc,EAAE8C,WAAmB,EAAiB;QACrE,OAAO,IAAI,CAACjB,MAAM,CAAC7B,QAAQ;YAAER,UAAUsD;QAAY;IACrD;IAEA,MAAMC,SAASC,KAAsB,EAAiB;QACpD,MAAM,EAAExD,QAAQ,EAAE+C,QAAQ,EAAExD,KAAK,EAAEO,UAAU,EAAEC,UAAU,EAAEE,mBAAmB,EAAEJ,UAAU,EAAE,GAAG,MAAMmD,IAAAA,yBAAa,EAChHQ,OACAC,yCAAkB;QAGpB,MAAMX,eAAeI,IAAAA,yBAAY,EAACH;QAClC,MAAMW,SAAS,MAAM,IAAI,CAACC,MAAM,CAAC;YAC/B3D;YACA8C;YACAjD,YAAYA,cAAc;YAC1BC,YAAYA,cAAc;YAC1BC,YAAYA,cAAc;YAC1BE,qBAAqBA,uBAAuB;QAC9C;QAGA,MAAMX,UAAUC,MAAMC,GAAG,CAAC,CAAC+C,WAAa,IAAI,CAACpD,WAAW,CAACqC,aAAa,CAACe,UAAU5C,EAAE;QACnF,MAAM,IAAI,CAACT,eAAe,CAACoD,YAAY,CAACoB,OAAO/D,EAAE,EAAEL;QAEnD,OAAO,IAAI,CAACmB,GAAG,CAACiD,OAAO/D,EAAE;IAC3B;IAEA,MAAckC,kBAAkBnC,MAAc,EAAmB;QAC/D,MAAMiB,YAAY,MAAM,IAAI,CAACzB,eAAe,CAAC0E,YAAY,CAAClE;QAC1D,MAAMmE,MAAMlD,UAAUnB,GAAG,CAAC,CAACsE,IAAMA,EAAEnE,EAAE;QACrC,OAAO,IAAI,CAACoB,UAAU,CAACC,MAAM,CAAC;YAAErB,IAAIoE,IAAAA,WAAE,EAACF;QAAK;IAC9C;AACF"}
+{"version":3,"file":"user.service.js","names":[],"sources":["../../../src/services/orm/user.service.ts"],"sourcesContent":["import { BaseService } from \"@/services/orm/base.service\";\nimport { RegisterUserDto, UserDto } from \"@/services/interfaces/user.dto\";\nimport { User } from \"@/entities\";\nimport type { IUserService } from \"@/services/interfaces/user-service.interface\";\nimport { In } from \"typeorm\";\nimport { InternalServerException, NotFoundException } from \"@/exceptions/runtime.exceptions\";\nimport { validateInput } from \"@/handlers/validators\";\nimport { newPasswordSchema, registerUserSchema } from \"@/services/validators/user-service.validation\";\nimport { comparePasswordHash, hashPassword } from \"@/utils/crypto.utils\";\nimport { TypeormService } from \"@/services/typeorm/typeorm.service\";\nimport { UserRoleService } from \"@/services/orm/user-role.service\";\nimport { ROLES, type RoleName } from \"@/constants/authorization.constants\";\nimport { RoleService } from \"@/services/orm/role.service\";\n\nexport class UserService extends BaseService(User, UserDto) implements IUserService {\n  constructor(\n    typeormService: TypeormService,\n    private readonly userRoleService: UserRoleService,\n    private readonly roleService: RoleService,\n  ) {\n    super(typeormService);\n  }\n\n  toDto(user: User): UserDto {\n    const roleIds = (user.roles ?? []).map((r) => r.roleId);\n    return {\n      id: user.id,\n      createdAt: user.createdAt,\n      isVerified: user.isVerified,\n      isDemoUser: user.isDemoUser,\n      isRootUser: user.isRootUser,\n      username: user.username,\n      needsPasswordChange: user.needsPasswordChange,\n      roles: this.roleService.roleIdsToRoleNames(roleIds),\n    };\n  }\n\n  listUsers(limit?: number): Promise<User[]> {\n    return this.list({ take: limit });\n  }\n\n  async getUser(userId: number) {\n    return this.get(userId);\n  }\n\n  async getUserRoles(userId: number): Promise<RoleName[]> {\n    const userRoles = await this.userRoleService.listUserRoles(userId);\n    const roleIds = userRoles.map((ur) => ur.roleId);\n    return this.roleService.roleIdsToRoleNames(roleIds);\n  }\n\n  findRootUsers(): Promise<User[]> {\n    return this.repository.findBy({ isRootUser: true });\n  }\n\n  findVerifiedUsers(): Promise<User[]> {\n    return this.repository.findBy({ isVerified: true });\n  }\n\n  async isUserRootUser(userId: number): Promise<boolean> {\n    const entity = await this.get(userId);\n    return entity.isRootUser;\n  }\n\n  async deleteUser(userId: number) {\n    // Validate\n    const user = await this.getUser(userId);\n\n    if (user.isRootUser) {\n      throw new InternalServerException(\"Cannot delete a root user\");\n    }\n\n    if (!user.roles?.length) {\n      throw new InternalServerException(\"User:roles relation not loaded, cannot perform deletion role check\");\n    }\n\n    // Check if the user is the last admin\n    const role = this.roleService.getRoleByName(ROLES.ADMIN);\n    if (user.roles.find((r) => r.roleId == role.id)) {\n      const administrators = await this.findUsersByRoleId(role.id);\n      if (administrators?.length === 1 && administrators[0].id === userId) {\n        throw new InternalServerException(\"Cannot delete the last user with ADMIN role\");\n      }\n    }\n\n    await this.delete(userId);\n  }\n\n  findRawByUsername(username: string): Promise<User | null> {\n    return this.repository.findOneBy({ username });\n  }\n\n  async getDemoUserId(): Promise<number | undefined> {\n    return (await this.repository.findOneBy({ isDemoUser: true }))?.id;\n  }\n\n  async setIsRootUserById(userId: number, isRootUser: boolean): Promise<void> {\n    const user = await this.getUser(userId);\n    if (!user) throw new NotFoundException(\"User not found\");\n\n    if (!isRootUser) {\n      // Ensure at least one user is root user\n      const rootUsers = await this.findRootUsers();\n      if (rootUsers.length === 1 && rootUsers[0].id === userId) {\n        throw new InternalServerException(\"Cannot set the last root user to non-root user\");\n      }\n    }\n\n    await this.update(userId, { isRootUser });\n  }\n\n  async setUserRoles(userId: number, roles: RoleName[]): Promise<User> {\n    const roleIds = roles.map((roleName) => this.roleService.getRoleByName(roleName).id);\n    await this.userRoleService.setUserRoles(userId, roleIds);\n    return await this.get(userId);\n  }\n\n  async setVerifiedById(userId: number, isVerified: boolean): Promise<void> {\n    const user = await this.getUser(userId);\n    if (!user) throw new NotFoundException(\"User not found\");\n\n    if (!isVerified) {\n      if (user.isRootUser) {\n        throw new InternalServerException(\"Cannot set a owner (root user) to unverified\");\n      }\n\n      // Ensure at least one user is verified\n      const verifiedUsers = await this.findVerifiedUsers();\n      if (verifiedUsers.length === 1) {\n        throw new InternalServerException(\"Cannot set the last user to unverified\");\n      }\n    }\n\n    await this.update(userId, { isVerified });\n  }\n\n  async updatePasswordById(userId: number, oldPassword: string, newPassword: string): Promise<User> {\n    const user = await this.getUser(userId);\n    if (!user) throw new NotFoundException(\"User not found\");\n\n    if (!comparePasswordHash(oldPassword, user.passwordHash)) {\n      throw new NotFoundException(\"User old password incorrect\");\n    }\n\n    const { password } = await validateInput({ password: newPassword }, newPasswordSchema);\n    const passwordHash = hashPassword(password);\n    return await this.update(userId, { passwordHash, needsPasswordChange: false });\n  }\n\n  async updatePasswordUnsafeByUsername(username: string, newPassword: string): Promise<User> {\n    const { password } = await validateInput({ password: newPassword }, newPasswordSchema);\n    const passwordHash = hashPassword(password);\n    const user = await this.findRawByUsername(username);\n    if (!user) throw new NotFoundException(\"User not found\");\n\n    return await this.update(user.id, { passwordHash, needsPasswordChange: false });\n  }\n\n  async updatePasswordHashUnsafeByUsername(username: string, passwordHash: string): Promise<User> {\n    const user = await this.findRawByUsername(username);\n    if (!user) throw new NotFoundException(\"User not found\");\n\n    return await this.update(user.id, { passwordHash, needsPasswordChange: false });\n  }\n\n  updateUsernameById(userId: number, newUsername: string): Promise<User> {\n    return this.update(userId, { username: newUsername });\n  }\n\n  async register(input: RegisterUserDto): Promise<User> {\n    const { username, password, roles, isDemoUser, isRootUser, needsPasswordChange, isVerified } = await validateInput(\n      input,\n      registerUserSchema,\n    );\n\n    const passwordHash = hashPassword(password);\n    const result = await this.create({\n      username,\n      passwordHash,\n      isVerified: isVerified ?? false,\n      isDemoUser: isDemoUser ?? false,\n      isRootUser: isRootUser ?? false,\n      needsPasswordChange: needsPasswordChange ?? true,\n    });\n\n    // Convert role names to IDs for database storage\n    const roleIds = roles.map((roleName) => this.roleService.getRoleByName(roleName).id);\n    await this.userRoleService.setUserRoles(result.id, roleIds);\n\n    return this.get(result.id);\n  }\n\n  private async findUsersByRoleId(roleId: number): Promise<User[]> {\n    const userRoles = await this.userRoleService.listByRoleId(roleId);\n    const ids = userRoles.map((u) => u.id);\n    return this.repository.findBy({ id: In(ids) });\n  }\n}\n"],"mappings":";;;;;;;;;;;AAcA,IAAa,cAAb,cAAiC,YAAY,MAAM,QAAQ,CAAyB;CAClF,YACE,gBACA,iBACA,aACA;AACA,QAAM,eAAe;AAHJ,OAAA,kBAAA;AACA,OAAA,cAAA;;CAKnB,MAAM,MAAqB;EACzB,MAAM,WAAW,KAAK,SAAS,EAAE,EAAE,KAAK,MAAM,EAAE,OAAO;AACvD,SAAO;GACL,IAAI,KAAK;GACT,WAAW,KAAK;GAChB,YAAY,KAAK;GACjB,YAAY,KAAK;GACjB,YAAY,KAAK;GACjB,UAAU,KAAK;GACf,qBAAqB,KAAK;GAC1B,OAAO,KAAK,YAAY,mBAAmB,QAAQ;GACpD;;CAGH,UAAU,OAAiC;AACzC,SAAO,KAAK,KAAK,EAAE,MAAM,OAAO,CAAC;;CAGnC,MAAM,QAAQ,QAAgB;AAC5B,SAAO,KAAK,IAAI,OAAO;;CAGzB,MAAM,aAAa,QAAqC;EAEtD,MAAM,WAAU,MADQ,KAAK,gBAAgB,cAAc,OAAO,EACxC,KAAK,OAAO,GAAG,OAAO;AAChD,SAAO,KAAK,YAAY,mBAAmB,QAAQ;;CAGrD,gBAAiC;AAC/B,SAAO,KAAK,WAAW,OAAO,EAAE,YAAY,MAAM,CAAC;;CAGrD,oBAAqC;AACnC,SAAO,KAAK,WAAW,OAAO,EAAE,YAAY,MAAM,CAAC;;CAGrD,MAAM,eAAe,QAAkC;AAErD,UAAO,MADc,KAAK,IAAI,OAAO,EACvB;;CAGhB,MAAM,WAAW,QAAgB;EAE/B,MAAM,OAAO,MAAM,KAAK,QAAQ,OAAO;AAEvC,MAAI,KAAK,WACP,OAAM,IAAI,wBAAwB,4BAA4B;AAGhE,MAAI,CAAC,KAAK,OAAO,OACf,OAAM,IAAI,wBAAwB,qEAAqE;EAIzG,MAAM,OAAO,KAAK,YAAY,cAAc,MAAM,MAAM;AACxD,MAAI,KAAK,MAAM,MAAM,MAAM,EAAE,UAAU,KAAK,GAAG,EAAE;GAC/C,MAAM,iBAAiB,MAAM,KAAK,kBAAkB,KAAK,GAAG;AAC5D,OAAI,gBAAgB,WAAW,KAAK,eAAe,GAAG,OAAO,OAC3D,OAAM,IAAI,wBAAwB,8CAA8C;;AAIpF,QAAM,KAAK,OAAO,OAAO;;CAG3B,kBAAkB,UAAwC;AACxD,SAAO,KAAK,WAAW,UAAU,EAAE,UAAU,CAAC;;CAGhD,MAAM,gBAA6C;AACjD,UAAQ,MAAM,KAAK,WAAW,UAAU,EAAE,YAAY,MAAM,CAAC,GAAG;;CAGlE,MAAM,kBAAkB,QAAgB,YAAoC;AAE1E,MAAI,CAAC,MADc,KAAK,QAAQ,OAAO,CAC5B,OAAM,IAAI,kBAAkB,iBAAiB;AAExD,MAAI,CAAC,YAAY;GAEf,MAAM,YAAY,MAAM,KAAK,eAAe;AAC5C,OAAI,UAAU,WAAW,KAAK,UAAU,GAAG,OAAO,OAChD,OAAM,IAAI,wBAAwB,iDAAiD;;AAIvF,QAAM,KAAK,OAAO,QAAQ,EAAE,YAAY,CAAC;;CAG3C,MAAM,aAAa,QAAgB,OAAkC;EACnE,MAAM,UAAU,MAAM,KAAK,aAAa,KAAK,YAAY,cAAc,SAAS,CAAC,GAAG;AACpF,QAAM,KAAK,gBAAgB,aAAa,QAAQ,QAAQ;AACxD,SAAO,MAAM,KAAK,IAAI,OAAO;;CAG/B,MAAM,gBAAgB,QAAgB,YAAoC;EACxE,MAAM,OAAO,MAAM,KAAK,QAAQ,OAAO;AACvC,MAAI,CAAC,KAAM,OAAM,IAAI,kBAAkB,iBAAiB;AAExD,MAAI,CAAC,YAAY;AACf,OAAI,KAAK,WACP,OAAM,IAAI,wBAAwB,+CAA+C;AAKnF,QAAI,MADwB,KAAK,mBAAmB,EAClC,WAAW,EAC3B,OAAM,IAAI,wBAAwB,yCAAyC;;AAI/E,QAAM,KAAK,OAAO,QAAQ,EAAE,YAAY,CAAC;;CAG3C,MAAM,mBAAmB,QAAgB,aAAqB,aAAoC;EAChG,MAAM,OAAO,MAAM,KAAK,QAAQ,OAAO;AACvC,MAAI,CAAC,KAAM,OAAM,IAAI,kBAAkB,iBAAiB;AAExD,MAAI,CAAC,oBAAoB,aAAa,KAAK,aAAa,CACtD,OAAM,IAAI,kBAAkB,8BAA8B;EAG5D,MAAM,EAAE,aAAa,MAAM,cAAc,EAAE,UAAU,aAAa,EAAE,kBAAkB;EACtF,MAAM,eAAe,aAAa,SAAS;AAC3C,SAAO,MAAM,KAAK,OAAO,QAAQ;GAAE;GAAc,qBAAqB;GAAO,CAAC;;CAGhF,MAAM,+BAA+B,UAAkB,aAAoC;EACzF,MAAM,EAAE,aAAa,MAAM,cAAc,EAAE,UAAU,aAAa,EAAE,kBAAkB;EACtF,MAAM,eAAe,aAAa,SAAS;EAC3C,MAAM,OAAO,MAAM,KAAK,kBAAkB,SAAS;AACnD,MAAI,CAAC,KAAM,OAAM,IAAI,kBAAkB,iBAAiB;AAExD,SAAO,MAAM,KAAK,OAAO,KAAK,IAAI;GAAE;GAAc,qBAAqB;GAAO,CAAC;;CAGjF,MAAM,mCAAmC,UAAkB,cAAqC;EAC9F,MAAM,OAAO,MAAM,KAAK,kBAAkB,SAAS;AACnD,MAAI,CAAC,KAAM,OAAM,IAAI,kBAAkB,iBAAiB;AAExD,SAAO,MAAM,KAAK,OAAO,KAAK,IAAI;GAAE;GAAc,qBAAqB;GAAO,CAAC;;CAGjF,mBAAmB,QAAgB,aAAoC;AACrE,SAAO,KAAK,OAAO,QAAQ,EAAE,UAAU,aAAa,CAAC;;CAGvD,MAAM,SAAS,OAAuC;EACpD,MAAM,EAAE,UAAU,UAAU,OAAO,YAAY,YAAY,qBAAqB,eAAe,MAAM,cACnG,OACA,mBACD;EAED,MAAM,eAAe,aAAa,SAAS;EAC3C,MAAM,SAAS,MAAM,KAAK,OAAO;GAC/B;GACA;GACA,YAAY,cAAc;GAC1B,YAAY,cAAc;GAC1B,YAAY,cAAc;GAC1B,qBAAqB,uBAAuB;GAC7C,CAAC;EAGF,MAAM,UAAU,MAAM,KAAK,aAAa,KAAK,YAAY,cAAc,SAAS,CAAC,GAAG;AACpF,QAAM,KAAK,gBAAgB,aAAa,OAAO,IAAI,QAAQ;AAE3D,SAAO,KAAK,IAAI,OAAO,GAAG;;CAG5B,MAAc,kBAAkB,QAAiC;EAE/D,MAAM,OAAM,MADY,KAAK,gBAAgB,aAAa,OAAO,EAC3C,KAAK,MAAM,EAAE,GAAG;AACtC,SAAO,KAAK,WAAW,OAAO,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC"}