@flusys/nestjs-auth 6.2.2 → 6.3.0

package/cjs/config/message-keys.js

@@ -84,7 +84,8 @@ const USER_MESSAGES = {
     PROFILE_COMPLETION_SUCCESS: 'user.profile.completion.success',
     EMAIL_VERIFY_SUCCESS: 'user.email.verify.success',
     PHONE_VERIFY_SUCCESS: 'user.phone.verify.success',
-    STATUS_UPDATE_SUCCESS: 'user.status.update.success'
+    STATUS_UPDATE_SUCCESS: 'user.status.update.success',
+    LOOKUP_SUCCESS: 'user.lookup.success'
 };
 const USER_PERMISSION_MESSAGES = {
     COMPANY_LIST_SUCCESS: 'user.permission.company.list.success',

package/cjs/controllers/user.controller.js

@@ -10,10 +10,12 @@ Object.defineProperty(exports, "UserController", {
 });
 const _classes = require("@flusys/nestjs-shared/classes");
 const _decorators = require("@flusys/nestjs-shared/decorators");
+const _dtos = require("@flusys/nestjs-shared/dtos");
 const _guards = require("@flusys/nestjs-shared/guards");
 const _interfaces = require("@flusys/nestjs-shared/interfaces");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
+const _classtransformer = require("class-transformer");
 const _config = require("../config");
 const _userdto = require("../dtos/user.dto");
 const _userservice = require("../services/user.service");
@@ -91,6 +93,29 @@ let UserController = class UserController extends (0, _classes.createApiControll
         }
     }
 }) {
+    async lookup(filterAndPaginationDto, user, search) {
+        const result = await this.service.getAll(search ?? '', filterAndPaginationDto, user);
+        const data = result.data.map((item)=>(0, _classtransformer.plainToInstance)(_userdto.UserLookupResponseDto, item, {
+                excludeExtraneousValues: true
+            }));
+        const page = filterAndPaginationDto.pagination?.currentPage ?? 0;
+        const pageSize = filterAndPaginationDto.pagination?.pageSize ?? data.length;
+        const totalPages = pageSize > 0 ? Math.ceil(result.total / pageSize) : 1;
+        return {
+            success: true,
+            message: 'Users retrieved successfully',
+            messageKey: _config.USER_MESSAGES.LOOKUP_SUCCESS,
+            data,
+            meta: {
+                total: result.total,
+                page,
+                pageSize,
+                count: data.length,
+                hasMore: page < totalPages - 1,
+                totalPages
+            }
+        };
+    }
     async getProfileWithExtras(id, user) {
         const data = await this.service.getProfileWithExtras(id, user);
         return {
@@ -174,6 +199,34 @@ let UserController = class UserController extends (0, _classes.createApiControll
         super(service), _define_property(this, "service", void 0), this.service = service;
     }
 };
+_ts_decorate([
+    (0, _common.Post)('lookup'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard, _guards.PermissionGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _decorators.RequireAnyPermission)(_classes.USER_PERMISSIONS.READ, _classes.USER_PERMISSIONS.LOOKUP),
+    (0, _swagger.ApiOperation)({
+        summary: 'Lookup users for pickers/directory',
+        description: 'Lightweight user directory search for selection widgets (event participants, assignees, etc.). ' + 'Returns only id/name/email. Accessible with USER_PERMISSIONS.READ or the narrower USER_PERMISSIONS.LOOKUP, ' + 'so panels that only need to pick a user do not require full user-management access.'
+    }),
+    (0, _swagger.ApiQuery)({
+        name: 'q',
+        required: false,
+        description: 'Global text search across searchable fields'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _dtos.FilterAndPaginationDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _decorators.CurrentUser)()),
+    _ts_param(2, (0, _common.Query)('q')),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _dtos.FilterAndPaginationDto === "undefined" ? Object : _dtos.FilterAndPaginationDto,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo,
+        String
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "lookup", null);
 _ts_decorate([
     (0, _common.Post)(':id/profile-extras'),
     (0, _common.UseGuards)(_guards.JwtAuthGuard, _guards.PermissionGuard),

package/cjs/dtos/user.dto.js

@@ -15,6 +15,9 @@ _export(exports, {
     get UpdateUserDto () {
         return UpdateUserDto;
     },
+    get UserLookupResponseDto () {
+        return UserLookupResponseDto;
+    },
     get UserResponseDto () {
         return UserResponseDto;
     }
@@ -380,3 +383,31 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], UserResponseDto.prototype, "deletedAt", void 0);
+let UserLookupResponseDto = class UserLookupResponseDto {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "name", void 0);
+        _define_property(this, "email", void 0);
+    }
+};
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiProperty)({
+        example: '550e8400-e29b-41d4-a716-446655440000'
+    }),
+    _ts_metadata("design:type", String)
+], UserLookupResponseDto.prototype, "id", void 0);
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiProperty)({
+        example: 'John Doe'
+    }),
+    _ts_metadata("design:type", String)
+], UserLookupResponseDto.prototype, "name", void 0);
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiProperty)({
+        example: 'john@example.com'
+    }),
+    _ts_metadata("design:type", String)
+], UserLookupResponseDto.prototype, "email", void 0);

package/config/message-keys.d.ts

@@ -60,6 +60,7 @@ export declare const USER_MESSAGES: {
     readonly EMAIL_VERIFY_SUCCESS: "user.email.verify.success";
     readonly PHONE_VERIFY_SUCCESS: "user.phone.verify.success";
     readonly STATUS_UPDATE_SUCCESS: "user.status.update.success";
+    readonly LOOKUP_SUCCESS: "user.lookup.success";
 };
 export declare const USER_PERMISSION_MESSAGES: {
     readonly COMPANY_LIST_SUCCESS: "user.permission.company.list.success";

package/controllers/user.controller.d.ts

@@ -1,5 +1,6 @@
+import { FilterAndPaginationDto, ListResponseDto } from '@flusys/nestjs-shared/dtos';
 import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
-import { CreateUserDto, UpdateUserDto, UserResponseDto } from '../dtos/user.dto';
+import { CreateUserDto, UpdateUserDto, UserLookupResponseDto, UserResponseDto } from '../dtos/user.dto';
 import { IUser } from '../interfaces/user.interface';
 import { UserService } from '../services/user.service';
 declare const UserController_base: abstract new (service: UserService) => {
@@ -9,17 +10,18 @@ declare const UserController_base: abstract new (service: UserService) => {
     insert(addDto: CreateUserDto, user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").SingleResponseDto<UserResponseDto>>;
     insertMany(addDto: CreateUserDto[], user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").BulkResponseDto<UserResponseDto>>;
     getById(id: string, body: import("@flusys/nestjs-shared").GetByIdBodyDto, user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").SingleResponseDto<UserResponseDto>>;
-    getByIds(body: import("@flusys/nestjs-shared").GetByIdsDto, user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").ListResponseDto<UserResponseDto>>;
+    getByIds(body: import("@flusys/nestjs-shared").GetByIdsDto, user: ILoggedUserInfo | null): Promise<ListResponseDto<UserResponseDto>>;
     update(updateDto: UpdateUserDto, user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").SingleResponseDto<UserResponseDto>>;
     updateMany(updateDtos: UpdateUserDto[], user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").BulkResponseDto<UserResponseDto>>;
     bulkUpsert(dtos: (CreateUserDto | UpdateUserDto)[], user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").BulkResponseDto<UserResponseDto>>;
     getByFilter(filter: Record<string, any>, user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").SingleResponseDto<UserResponseDto>>;
-    getAll(filterAndPaginationDto: import("@flusys/nestjs-shared").FilterAndPaginationDto, user: ILoggedUserInfo | null, search?: string): Promise<import("@flusys/nestjs-shared").ListResponseDto<UserResponseDto>>;
+    getAll(filterAndPaginationDto: FilterAndPaginationDto, user: ILoggedUserInfo | null, search?: string): Promise<ListResponseDto<UserResponseDto>>;
     delete(deleteDto: import("@flusys/nestjs-shared").DeleteDto, user: ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").MessageResponseDto>;
 };
 export declare class UserController extends UserController_base {
     service: UserService;
     constructor(service: UserService);
+    lookup(filterAndPaginationDto: FilterAndPaginationDto, user: ILoggedUserInfo, search?: string): Promise<ListResponseDto<UserLookupResponseDto>>;
     getProfileWithExtras(id: string, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;

package/dtos/user.dto.d.ts

@@ -37,3 +37,8 @@ export declare class UserResponseDto {
     updatedAt: Date;
     deletedAt?: Date | null;
 }
+export declare class UserLookupResponseDto {
+    id: string;
+    name: string;
+    email: string;
+}

package/fesm/config/message-keys.js

@@ -60,7 +60,8 @@ export const USER_MESSAGES = {
     PROFILE_COMPLETION_SUCCESS: 'user.profile.completion.success',
     EMAIL_VERIFY_SUCCESS: 'user.email.verify.success',
     PHONE_VERIFY_SUCCESS: 'user.phone.verify.success',
-    STATUS_UPDATE_SUCCESS: 'user.status.update.success'
+    STATUS_UPDATE_SUCCESS: 'user.status.update.success',
+    LOOKUP_SUCCESS: 'user.lookup.success'
 };
 export const USER_PERMISSION_MESSAGES = {
     COMPANY_LIST_SUCCESS: 'user.permission.company.list.success',

package/fesm/controllers/user.controller.js

@@ -26,13 +26,15 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 import { createApiController, USER_PERMISSIONS } from '@flusys/nestjs-shared/classes';
-import { CurrentUser, RequirePermission } from '@flusys/nestjs-shared/decorators';
+import { CurrentUser, RequireAnyPermission, RequirePermission } from '@flusys/nestjs-shared/decorators';
+import { FilterAndPaginationDto } from '@flusys/nestjs-shared/dtos';
 import { JwtAuthGuard, PermissionGuard } from '@flusys/nestjs-shared/guards';
 import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
-import { Body, Controller, Inject, Param, Post, UseGuards } from '@nestjs/common';
-import { ApiBearerAuth, ApiBody, ApiOperation, ApiParam, ApiTags } from '@nestjs/swagger';
+import { Body, Controller, Inject, Param, Post, Query, UseGuards } from '@nestjs/common';
+import { ApiBearerAuth, ApiBody, ApiOperation, ApiParam, ApiQuery, ApiTags } from '@nestjs/swagger';
+import { plainToInstance } from 'class-transformer';
 import { USER_MESSAGES } from '../config';
-import { CreateUserDto, UpdateUserDto, UserResponseDto } from '../dtos/user.dto';
+import { CreateUserDto, UpdateUserDto, UserLookupResponseDto, UserResponseDto } from '../dtos/user.dto';
 import { UserService } from '../services/user.service';
 export class UserController extends createApiController(CreateUserDto, UpdateUserDto, UserResponseDto, {
     entityName: 'user',
@@ -81,6 +83,29 @@ export class UserController extends createApiController(CreateUserDto, UpdateUse
         }
     }
 }) {
+    async lookup(filterAndPaginationDto, user, search) {
+        const result = await this.service.getAll(search ?? '', filterAndPaginationDto, user);
+        const data = result.data.map((item)=>plainToInstance(UserLookupResponseDto, item, {
+                excludeExtraneousValues: true
+            }));
+        const page = filterAndPaginationDto.pagination?.currentPage ?? 0;
+        const pageSize = filterAndPaginationDto.pagination?.pageSize ?? data.length;
+        const totalPages = pageSize > 0 ? Math.ceil(result.total / pageSize) : 1;
+        return {
+            success: true,
+            message: 'Users retrieved successfully',
+            messageKey: USER_MESSAGES.LOOKUP_SUCCESS,
+            data,
+            meta: {
+                total: result.total,
+                page,
+                pageSize,
+                count: data.length,
+                hasMore: page < totalPages - 1,
+                totalPages
+            }
+        };
+    }
     async getProfileWithExtras(id, user) {
         const data = await this.service.getProfileWithExtras(id, user);
         return {
@@ -164,6 +189,34 @@ export class UserController extends createApiController(CreateUserDto, UpdateUse
         super(service), _define_property(this, "service", void 0), this.service = service;
     }
 }
+_ts_decorate([
+    Post('lookup'),
+    UseGuards(JwtAuthGuard, PermissionGuard),
+    ApiBearerAuth(),
+    RequireAnyPermission(USER_PERMISSIONS.READ, USER_PERMISSIONS.LOOKUP),
+    ApiOperation({
+        summary: 'Lookup users for pickers/directory',
+        description: 'Lightweight user directory search for selection widgets (event participants, assignees, etc.). ' + 'Returns only id/name/email. Accessible with USER_PERMISSIONS.READ or the narrower USER_PERMISSIONS.LOOKUP, ' + 'so panels that only need to pick a user do not require full user-management access.'
+    }),
+    ApiQuery({
+        name: 'q',
+        required: false,
+        description: 'Global text search across searchable fields'
+    }),
+    ApiBody({
+        type: FilterAndPaginationDto
+    }),
+    _ts_param(0, Body()),
+    _ts_param(1, CurrentUser()),
+    _ts_param(2, Query('q')),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof FilterAndPaginationDto === "undefined" ? Object : FilterAndPaginationDto,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo,
+        String
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "lookup", null);
 _ts_decorate([
     Post(':id/profile-extras'),
     UseGuards(JwtAuthGuard, PermissionGuard),

package/fesm/dtos/user.dto.js

@@ -361,3 +361,31 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], UserResponseDto.prototype, "deletedAt", void 0);
+export class UserLookupResponseDto {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "name", void 0);
+        _define_property(this, "email", void 0);
+    }
+}
+_ts_decorate([
+    Expose(),
+    ApiProperty({
+        example: '550e8400-e29b-41d4-a716-446655440000'
+    }),
+    _ts_metadata("design:type", String)
+], UserLookupResponseDto.prototype, "id", void 0);
+_ts_decorate([
+    Expose(),
+    ApiProperty({
+        example: 'John Doe'
+    }),
+    _ts_metadata("design:type", String)
+], UserLookupResponseDto.prototype, "name", void 0);
+_ts_decorate([
+    Expose(),
+    ApiProperty({
+        example: 'john@example.com'
+    }),
+    _ts_metadata("design:type", String)
+], UserLookupResponseDto.prototype, "email", void 0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/nestjs-auth",
-  "version": "6.2.2",
+  "version": "6.3.0",
   "description": "Authentication and authorization infrastructure for NestJS applications",
   "main": "cjs/index.js",
   "module": "fesm/index.js",
@@ -98,7 +98,7 @@
     "rxjs": "^7.8.0"
   },
   "dependencies": {
-    "@flusys/nestjs-core": "6.2.2",
-    "@flusys/nestjs-shared": "6.2.2"
+    "@flusys/nestjs-core": "6.3.0",
+    "@flusys/nestjs-shared": "6.3.0"
   }
 }