@flusys/nestjs-auth 1.1.0-beta → 1.1.0

package/cjs/controllers/email-verification.controller.js

@@ -0,0 +1,220 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "EmailVerificationController", {
+    enumerable: true,
+    get: function() {
+        return EmailVerificationController;
+    }
+});
+const _dtos = require("@flusys/nestjs-shared/dtos");
+const _common = require("@nestjs/common");
+const _swagger = require("@nestjs/swagger");
+const _throttler = require("@nestjs/throttler");
+const _express = require("express");
+const _authenticationdto = require("../dtos/authentication.dto");
+const _settokeninterceptor = require("../interceptors/set-token.interceptor");
+const _authconfigservice = require("../services/auth-config.service");
+const _authdatasourceprovider = require("../services/auth-datasource.provider");
+const _authemailservice = require("../services/auth-email.service");
+const _authenticationservice = require("../services/authentication.service");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+let EmailVerificationController = class EmailVerificationController {
+    ensureEmailVerificationEnabled() {
+        if (!this.dataSourceProvider.isEmailVerificationEnabled()) {
+            throw new _common.BadRequestException('Email verification is not enabled for this tenant');
+        }
+    }
+    buildAuthUrl(req, path) {
+        const frontendUrl = this.authConfig.getFrontendUrl();
+        return frontendUrl ? `${frontendUrl}${path}` : `${req.protocol}://${req.get('host')}${path}`;
+    }
+    async forgotPassword(req, dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.forgotPassword(dto.email, this.buildAuthUrl(req, '/auth/reset-password'));
+    }
+    async resetPassword(dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.resetPassword(dto.token, dto.newPassword);
+    }
+    async resendVerification(req, dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.resendVerificationEmail(dto.email, this.buildAuthUrl(req, '/auth/verify-email'));
+    }
+    async verifyEmail(dto) {
+        this.ensureEmailVerificationEnabled();
+        const result = await this.authEmailService.verifyEmail(dto.token);
+        if (result.type === 'pending') {
+            return this.authService.createUserFromPendingRegistration(result.pending);
+        }
+        return {
+            success: true,
+            message: result.message
+        };
+    }
+    constructor(authService, authEmailService, authConfig, dataSourceProvider){
+        _define_property(this, "authService", void 0);
+        _define_property(this, "authEmailService", void 0);
+        _define_property(this, "authConfig", void 0);
+        _define_property(this, "dataSourceProvider", void 0);
+        this.authService = authService;
+        this.authEmailService = authEmailService;
+        this.authConfig = authConfig;
+        this.dataSourceProvider = dataSourceProvider;
+    }
+};
+_ts_decorate([
+    (0, _common.Post)('forgot-password'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    (0, _swagger.ApiOperation)({
+        summary: 'Request password reset email'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _authenticationdto.ForgotPasswordDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _dtos.MessageResponseDto
+    }),
+    _ts_param(0, (0, _common.Req)()),
+    _ts_param(1, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _express.Request === "undefined" ? Object : _express.Request,
+        typeof _authenticationdto.ForgotPasswordDto === "undefined" ? Object : _authenticationdto.ForgotPasswordDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "forgotPassword", null);
+_ts_decorate([
+    (0, _common.Post)('reset-password'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 5,
+            ttl: 900000
+        }
+    }),
+    (0, _swagger.ApiOperation)({
+        summary: 'Reset password using token'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _authenticationdto.ResetPasswordDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _dtos.MessageResponseDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authenticationdto.ResetPasswordDto === "undefined" ? Object : _authenticationdto.ResetPasswordDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "resetPassword", null);
+_ts_decorate([
+    (0, _common.Post)('resend-verification'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    (0, _swagger.ApiOperation)({
+        summary: 'Resend email verification link'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _authenticationdto.ResendVerificationDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _dtos.MessageResponseDto
+    }),
+    _ts_param(0, (0, _common.Req)()),
+    _ts_param(1, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _express.Request === "undefined" ? Object : _express.Request,
+        typeof _authenticationdto.ResendVerificationDto === "undefined" ? Object : _authenticationdto.ResendVerificationDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "resendVerification", null);
+_ts_decorate([
+    (0, _common.Post)('verify-email'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    (0, _common.UseInterceptors)(_settokeninterceptor.SetToken),
+    (0, _swagger.ApiOperation)({
+        summary: 'Verify email using token'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _authenticationdto.VerifyEmailDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _dtos.MessageResponseDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _authenticationdto.RegistrationResponseDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authenticationdto.VerifyEmailDto === "undefined" ? Object : _authenticationdto.VerifyEmailDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "verifyEmail", null);
+EmailVerificationController = _ts_decorate([
+    (0, _swagger.ApiTags)('Authentication'),
+    (0, _common.Controller)('auth'),
+    _ts_param(0, (0, _common.Inject)(_authenticationservice.AuthenticationService)),
+    _ts_param(1, (0, _common.Inject)(_authemailservice.AuthEmailService)),
+    _ts_param(2, (0, _common.Inject)(_authconfigservice.AuthConfigService)),
+    _ts_param(3, (0, _common.Inject)(_authdatasourceprovider.AuthDataSourceProvider)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authenticationservice.AuthenticationService === "undefined" ? Object : _authenticationservice.AuthenticationService,
+        typeof _authemailservice.AuthEmailService === "undefined" ? Object : _authemailservice.AuthEmailService,
+        typeof _authconfigservice.AuthConfigService === "undefined" ? Object : _authconfigservice.AuthConfigService,
+        typeof _authdatasourceprovider.AuthDataSourceProvider === "undefined" ? Object : _authdatasourceprovider.AuthDataSourceProvider
+    ])
+], EmailVerificationController);

package/cjs/controllers/index.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 _export_star(require("./authentication.controller"), exports);
 _export_star(require("./company-selection.controller"), exports);
+_export_star(require("./email-verification.controller"), exports);
 _export_star(require("./user.controller"), exports);
 _export_star(require("./company.controller"), exports);
 _export_star(require("./branch.controller"), exports);

package/cjs/controllers/user-permission.controller.js

@@ -8,10 +8,11 @@ Object.defineProperty(exports, "UserPermissionController", {
         return UserPermissionController;
     }
 });
+const _nestjsshared = require("@flusys/nestjs-shared");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
-const _guards = require("@flusys/nestjs-shared/guards");
 const _userpermissiondto = require("../dtos/user-permission.dto");
+const _usercompanypermissionentity = require("../entities/user-company-permission.entity");
 const _userpermissionservice = require("../services/user-permission.service");
 function _define_property(obj, key, value) {
     if (key in obj) {
@@ -41,123 +42,67 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let UserPermissionController = class UserPermissionController {
-    // User-Company Permissions
-    /** Batch assign/revoke user-company permissions */ async assignUserCompany(dto) {
-        let addedCount = 0;
-        let removedCount = 0;
-        for (const item of dto.items){
-            if (item.isAdd) {
-                await this.userPermissionService.assignUserToCompany({
-                    userId: dto.userId,
-                    companyId: item.targetId
-                });
-                addedCount++;
-            } else {
-                await this.userPermissionService.revokeCompanyAccess(dto.userId, item.targetId);
-                removedCount++;
-            }
-        }
+    async assignUserCompany(dto) {
+        return this.processBatchPermissions(dto.userId, dto.items, _usercompanypermissionentity.PermissionType.COMPANY);
+    }
+    async getUserCompanies(userId) {
+        const permissions = await this.permissionService.findUserCompanies(userId);
         return {
             success: true,
-            message: `Processed ${addedCount} additions and ${removedCount} removals`
+            message: 'User companies retrieved successfully',
+            data: permissions.map((p)=>({
+                    id: p.id,
+                    userId: p.userId,
+                    companyId: p.company?.id || p.targetId,
+                    companyName: p.company?.name || '',
+                    companySlug: p.company?.slug || ''
+                }))
         };
     }
-    /** Get user's companies */ async getUserCompanies(userId) {
-        const permissions = await this.userPermissionService.findUserCompanies(userId);
-        // Map to DTO format with populated company details
-        const data = permissions.map((permission)=>({
-                id: permission.id,
-                userId: permission.userId,
-                companyId: permission.company?.id || permission.targetId,
-                companyName: permission.company?.name || '',
-                companySlug: permission.company?.slug || ''
-            }));
+    async assignUserBranch(dto) {
+        return this.processBatchPermissions(dto.userId, dto.items, _usercompanypermissionentity.PermissionType.BRANCH);
+    }
+    async getUserBranches(userId, companyId) {
+        const permissions = await this.permissionService.findUserBranches(userId, companyId);
         return {
-            data
+            success: true,
+            message: 'User branches retrieved successfully',
+            data: permissions.map((p)=>({
+                    id: p.id,
+                    userId: p.userId,
+                    branchId: p.branch?.id || p.targetId,
+                    branchName: p.branch?.name || '',
+                    branchSlug: p.branch?.slug || '',
+                    companyId: p.branch?.companyId || ''
+                }))
         };
     }
-    // User-Branch Permissions
-    /** Batch assign/revoke user-branch permissions */ async assignUserBranch(dto) {
-        let addedCount = 0;
-        let removedCount = 0;
-        for (const item of dto.items){
+    /** Process batch permission assignments/revocations */ async processBatchPermissions(userId, items, type) {
+        let added = 0, removed = 0;
+        for (const item of items){
             if (item.isAdd) {
-                await this.userPermissionService.assignUserToBranch({
-                    userId: dto.userId,
-                    branchId: item.targetId
-                });
-                addedCount++;
+                await this.permissionService.assignPermission(userId, item.targetId, type);
+                added++;
             } else {
-                await this.userPermissionService.revokeBranchAccess(dto.userId, item.targetId);
-                removedCount++;
+                await this.permissionService.revokePermission(userId, item.targetId, type);
+                removed++;
             }
         }
         return {
             success: true,
-            message: `Processed ${addedCount} additions and ${removedCount} removals`
-        };
-    }
-    /** Get user's branches */ async getUserBranches(userId) {
-        const permissions = await this.userPermissionService.findUserBranches(userId);
-        // Map to DTO format with populated branch details
-        const data = permissions.map((permission)=>({
-                id: permission.id,
-                userId: permission.userId,
-                branchId: permission.branch?.id || permission.targetId,
-                branchName: permission.branch?.name || '',
-                branchSlug: permission.branch?.slug || '',
-                companyId: permission.branch?.companyId || ''
-            }));
-        return {
-            data
+            message: `Processed ${added} additions and ${removed} removals`
         };
     }
-    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
-    constructor(userPermissionService){
-        _define_property(this, "userPermissionService", void 0);
-        this.userPermissionService = userPermissionService;
+    constructor(permissionService){
+        _define_property(this, "permissionService", void 0);
+        this.permissionService = permissionService;
     }
 };
 _ts_decorate([
     (0, _common.Post)('user-company/assign'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_PERMISSIONS.UPDATE),
     (0, _swagger.ApiOperation)({
-        summary: 'Batch assign/revoke user-company permissions',
-        description: `
-Batch operation to assign or revoke user permissions to companies.
-
-**Example: Add company permissions**
-\`\`\`json
-{
-  "userId": "user-id",
-  "items": [
-    { "targetId": "company-id-1", "isAdd": true },
-    { "targetId": "company-id-2", "isAdd": true }
-  ]
-}
-\`\`\`
-
-**Example: Remove company permissions**
-\`\`\`json
-{
-  "userId": "user-id",
-  "items": [
-    { "targetId": "company-id-1", "isAdd": false },
-    { "targetId": "company-id-2", "isAdd": false }
-  ]
-}
-\`\`\`
-
-**Example: Mix add and remove**
-\`\`\`json
-{
-  "userId": "user-id",
-  "items": [
-    { "targetId": "company-id-1", "isAdd": true },
-    { "targetId": "company-id-2", "isAdd": false }
-  ]
-}
-\`\`\`
-    `
+        summary: 'Batch assign/revoke user-company permissions'
     }),
     (0, _swagger.ApiResponse)({
         status: 200,
@@ -174,22 +119,28 @@ Batch operation to assign or revoke user permissions to companies.
     _ts_metadata("design:returntype", Promise)
 ], UserPermissionController.prototype, "assignUserCompany", null);
 _ts_decorate([
-    (0, _common.Get)('user-company'),
+    (0, _common.Post)('get-user-company'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_PERMISSIONS.READ),
     (0, _swagger.ApiOperation)({
-        summary: 'Get user companies',
-        description: 'Returns all companies the user has access to.'
+        summary: 'Get user companies'
     }),
-    (0, _swagger.ApiQuery)({
-        name: 'userId',
-        required: true,
-        description: 'User ID to get companies for',
-        example: '550e8400-e29b-41d4-a716-446655440000'
+    (0, _swagger.ApiBody)({
+        schema: {
+            properties: {
+                userId: {
+                    type: 'string'
+                }
+            },
+            required: [
+                'userId'
+            ]
+        }
     }),
     (0, _swagger.ApiResponse)({
         status: 200,
         type: _userpermissiondto.UserCompaniesResponseDto
     }),
-    _ts_param(0, (0, _common.Query)('userId')),
+    _ts_param(0, (0, _common.Body)('userId')),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
         String
@@ -198,44 +149,9 @@ _ts_decorate([
 ], UserPermissionController.prototype, "getUserCompanies", null);
 _ts_decorate([
     (0, _common.Post)('user-branch/assign'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_PERMISSIONS.UPDATE),
     (0, _swagger.ApiOperation)({
-        summary: 'Batch assign/revoke user-branch permissions',
-        description: `
-Batch operation to assign or revoke user permissions to branches.
-
-**Example: Add branch permissions**
-\`\`\`json
-{
-  "userId": "user-id",
-  "items": [
-    { "targetId": "branch-id-1", "isAdd": true },
-    { "targetId": "branch-id-2", "isAdd": true }
-  ]
-}
-\`\`\`
-
-**Example: Remove branch permissions**
-\`\`\`json
-{
-  "userId": "user-id",
-  "items": [
-    { "targetId": "branch-id-1", "isAdd": false },
-    { "targetId": "branch-id-2", "isAdd": false }
-  ]
-}
-\`\`\`
-
-**Example: Mix add and remove**
-\`\`\`json
-{
-  "userId": "user-id",
-  "items": [
-    { "targetId": "branch-id-1", "isAdd": true },
-    { "targetId": "branch-id-2", "isAdd": false }
-  ]
-}
-\`\`\`
-    `
+        summary: 'Batch assign/revoke user-branch permissions'
     }),
     (0, _swagger.ApiResponse)({
         status: 200,
@@ -252,24 +168,36 @@ Batch operation to assign or revoke user permissions to branches.
     _ts_metadata("design:returntype", Promise)
 ], UserPermissionController.prototype, "assignUserBranch", null);
 _ts_decorate([
-    (0, _common.Get)('user-branch'),
+    (0, _common.Post)('get-user-branch'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_PERMISSIONS.READ),
     (0, _swagger.ApiOperation)({
-        summary: 'Get user branches',
-        description: 'Returns all branches the user has access to.'
+        summary: 'Get user branches'
     }),
-    (0, _swagger.ApiQuery)({
-        name: 'userId',
-        required: true,
-        description: 'User ID to get branches for',
-        example: '550e8400-e29b-41d4-a716-446655440000'
+    (0, _swagger.ApiBody)({
+        schema: {
+            properties: {
+                userId: {
+                    type: 'string'
+                },
+                companyId: {
+                    type: 'string',
+                    description: 'Optional company ID to filter branches'
+                }
+            },
+            required: [
+                'userId'
+            ]
+        }
     }),
     (0, _swagger.ApiResponse)({
         status: 200,
         type: _userpermissiondto.UserBranchesResponseDto
     }),
-    _ts_param(0, (0, _common.Query)('userId')),
+    _ts_param(0, (0, _common.Body)('userId')),
+    _ts_param(1, (0, _common.Body)('companyId')),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
+        String,
         String
     ]),
     _ts_metadata("design:returntype", Promise)
@@ -278,7 +206,7 @@ UserPermissionController = _ts_decorate([
     (0, _swagger.ApiTags)('User Permissions'),
     (0, _swagger.ApiBearerAuth)(),
     (0, _common.Controller)('administration/permissions'),
-    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _common.UseGuards)(_nestjsshared.JwtAuthGuard),
     _ts_param(0, (0, _common.Inject)(_userpermissionservice.UserPermissionService)),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [