@flusys/nestjs-auth 7.0.2 → 8.0.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (237) hide show
  1. package/README.md +68 -1
  2. package/config/auth.constants.d.ts +2 -0
  3. package/config/event-actions.d.ts +2 -0
  4. package/config/index.d.ts +3 -3
  5. package/config/message-keys.d.ts +23 -0
  6. package/controllers/authentication.controller.d.ts +5 -5
  7. package/controllers/branch.controller.d.ts +2 -2
  8. package/controllers/company-selection.controller.d.ts +4 -4
  9. package/controllers/company.controller.d.ts +2 -2
  10. package/controllers/email-verification.controller.d.ts +6 -6
  11. package/controllers/index.d.ts +9 -7
  12. package/controllers/social-auth-config.controller.d.ts +22 -0
  13. package/controllers/social-auth.controller.d.ts +11 -0
  14. package/controllers/user-permission.controller.d.ts +5 -4
  15. package/controllers/user.controller.d.ts +7 -7
  16. package/docs/auth-swagger.config.d.ts +2 -2
  17. package/docs/index.d.ts +1 -1
  18. package/dtos/index.d.ts +6 -5
  19. package/dtos/social-auth.dto.d.ts +42 -0
  20. package/entities/company-branch.entity.d.ts +1 -1
  21. package/entities/company.entity.d.ts +1 -1
  22. package/entities/index.d.ts +15 -13
  23. package/entities/pending-registration.entity.d.ts +1 -1
  24. package/entities/social-auth-config.entity.d.ts +9 -0
  25. package/entities/user-company-permission.entity.d.ts +4 -4
  26. package/enums/index.d.ts +2 -1
  27. package/enums/social-provider-type.enum.d.ts +6 -0
  28. package/fesm/118.js +1230 -0
  29. package/fesm/120.js +2197 -0
  30. package/fesm/24.js +4389 -0
  31. package/fesm/370.js +1163 -0
  32. package/fesm/446.js +877 -0
  33. package/fesm/chunks/117.js +69 -0
  34. package/fesm/config/index.js +244 -3
  35. package/fesm/controllers/index.js +27 -7
  36. package/fesm/docs/index.js +479 -1
  37. package/fesm/dtos/index.js +123 -5
  38. package/fesm/entities/index.js +68 -19
  39. package/fesm/enums/index.js +53 -1
  40. package/fesm/helpers/index.js +115 -2
  41. package/fesm/index.js +1437 -12
  42. package/fesm/interceptors/index.js +508 -2
  43. package/fesm/interfaces/index.js +75 -7
  44. package/fesm/modules/index.js +546 -1
  45. package/fesm/runtime.js +134 -0
  46. package/fesm/services/index.js +67 -9
  47. package/helpers/auth-response.mapper.d.ts +3 -3
  48. package/helpers/index.d.ts +2 -2
  49. package/helpers/token.helper.d.ts +2 -2
  50. package/index.d.ts +13 -12
  51. package/interceptors/clear-token.interceptor.d.ts +2 -2
  52. package/interceptors/index.d.ts +2 -2
  53. package/interceptors/set-token.interceptor.d.ts +2 -2
  54. package/interfaces/auth-module-options.interface.d.ts +3 -3
  55. package/interfaces/authentication.interface.d.ts +3 -3
  56. package/interfaces/company-branch.interface.d.ts +2 -2
  57. package/interfaces/company.interface.d.ts +1 -1
  58. package/interfaces/index.d.ts +8 -7
  59. package/interfaces/social-auth.interface.d.ts +43 -0
  60. package/interfaces/user-enricher.interface.d.ts +3 -3
  61. package/modules/auth.module.d.ts +4 -4
  62. package/modules/index.d.ts +1 -1
  63. package/package.json +32 -39
  64. package/providers/facebook.social-provider.d.ts +10 -0
  65. package/providers/google.social-provider.d.ts +10 -0
  66. package/providers/index.d.ts +1 -0
  67. package/providers/linkedin.social-provider.d.ts +10 -0
  68. package/providers/microsoft.social-provider.d.ts +10 -0
  69. package/providers/oauth-http.util.d.ts +10 -0
  70. package/providers/social-provider.registry.d.ts +3 -0
  71. package/services/auth-config.service.d.ts +4 -3
  72. package/services/auth-datasource.provider.d.ts +4 -3
  73. package/services/auth-email.service.d.ts +3 -3
  74. package/services/authentication.service.d.ts +15 -11
  75. package/services/branch.service.d.ts +7 -7
  76. package/services/company.service.d.ts +6 -6
  77. package/services/index.d.ts +11 -9
  78. package/services/social-auth-config.service.d.ts +21 -0
  79. package/services/social-auth.service.d.ts +24 -0
  80. package/services/user-permission.service.d.ts +8 -4
  81. package/services/user.service.d.ts +7 -7
  82. package/strategies/jwt.strategy.d.ts +4 -4
  83. package/validators/password.validator.d.ts +1 -1
  84. package/cjs/config/auth.constants.js +0 -41
  85. package/cjs/config/event-actions.js +0 -45
  86. package/cjs/config/index.js +0 -20
  87. package/cjs/config/message-keys.js +0 -108
  88. package/cjs/controllers/authentication.controller.js +0 -427
  89. package/cjs/controllers/authentication.controller.spec.js +0 -219
  90. package/cjs/controllers/branch.controller.js +0 -102
  91. package/cjs/controllers/branch.controller.spec.js +0 -134
  92. package/cjs/controllers/company-selection.controller.js +0 -198
  93. package/cjs/controllers/company-selection.controller.spec.js +0 -84
  94. package/cjs/controllers/company.controller.js +0 -102
  95. package/cjs/controllers/company.controller.spec.js +0 -131
  96. package/cjs/controllers/email-verification.controller.js +0 -224
  97. package/cjs/controllers/email-verification.controller.spec.js +0 -142
  98. package/cjs/controllers/index.js +0 -24
  99. package/cjs/controllers/user-permission.controller.js +0 -223
  100. package/cjs/controllers/user-permission.controller.spec.js +0 -138
  101. package/cjs/controllers/user.controller.js +0 -438
  102. package/cjs/controllers/user.controller.spec.js +0 -204
  103. package/cjs/docs/auth-swagger.config.js +0 -453
  104. package/cjs/docs/auth-swagger.config.spec.js +0 -130
  105. package/cjs/docs/index.js +0 -18
  106. package/cjs/dtos/authentication.dto.js +0 -755
  107. package/cjs/dtos/company-branch.dto.js +0 -294
  108. package/cjs/dtos/company.dto.js +0 -298
  109. package/cjs/dtos/index.js +0 -22
  110. package/cjs/dtos/user-permission.dto.js +0 -358
  111. package/cjs/dtos/user.dto.js +0 -413
  112. package/cjs/entities/app-user.entity.js +0 -25
  113. package/cjs/entities/company-branch.entity.js +0 -163
  114. package/cjs/entities/company.entity.js +0 -146
  115. package/cjs/entities/index.js +0 -65
  116. package/cjs/entities/index.spec.js +0 -73
  117. package/cjs/entities/pending-registration.entity.js +0 -135
  118. package/cjs/entities/user-company-permission.entity.js +0 -153
  119. package/cjs/entities/user-token.entity.js +0 -120
  120. package/cjs/enums/index.js +0 -18
  121. package/cjs/enums/user-org-permission-type.enum.js +0 -15
  122. package/cjs/helpers/auth-response.mapper.js +0 -46
  123. package/cjs/helpers/auth-response.mapper.spec.js +0 -139
  124. package/cjs/helpers/index.js +0 -19
  125. package/cjs/helpers/token.helper.js +0 -58
  126. package/cjs/helpers/token.helper.spec.js +0 -86
  127. package/cjs/index.js +0 -29
  128. package/cjs/interceptors/clear-token.interceptor.js +0 -73
  129. package/cjs/interceptors/clear-token.interceptor.spec.js +0 -107
  130. package/cjs/interceptors/index.js +0 -19
  131. package/cjs/interceptors/set-token.interceptor.js +0 -107
  132. package/cjs/interceptors/set-token.interceptor.spec.js +0 -165
  133. package/cjs/interfaces/auth-email-provider.interface.js +0 -45
  134. package/cjs/interfaces/auth-module-options.interface.js +0 -4
  135. package/cjs/interfaces/authentication.interface.js +0 -4
  136. package/cjs/interfaces/company-branch.interface.js +0 -4
  137. package/cjs/interfaces/company.interface.js +0 -4
  138. package/cjs/interfaces/index.js +0 -24
  139. package/cjs/interfaces/user-enricher.interface.js +0 -4
  140. package/cjs/interfaces/user.interface.js +0 -4
  141. package/cjs/modules/auth.module.js +0 -202
  142. package/cjs/modules/auth.module.spec.js +0 -243
  143. package/cjs/modules/index.js +0 -18
  144. package/cjs/services/auth-config.service.js +0 -110
  145. package/cjs/services/auth-config.service.spec.js +0 -97
  146. package/cjs/services/auth-datasource.provider.js +0 -134
  147. package/cjs/services/auth-datasource.provider.spec.js +0 -161
  148. package/cjs/services/auth-email.service.js +0 -539
  149. package/cjs/services/auth-email.service.spec.js +0 -456
  150. package/cjs/services/authentication.service.js +0 -1173
  151. package/cjs/services/authentication.service.spec.js +0 -962
  152. package/cjs/services/branch.service.js +0 -153
  153. package/cjs/services/branch.service.spec.js +0 -169
  154. package/cjs/services/company-selection-session.service.js +0 -121
  155. package/cjs/services/company-selection-session.service.spec.js +0 -90
  156. package/cjs/services/company.service.js +0 -140
  157. package/cjs/services/company.service.spec.js +0 -127
  158. package/cjs/services/index.js +0 -26
  159. package/cjs/services/user-permission.service.js +0 -236
  160. package/cjs/services/user-permission.service.spec.js +0 -254
  161. package/cjs/services/user.service.js +0 -671
  162. package/cjs/services/user.service.spec.js +0 -718
  163. package/cjs/strategies/jwt.strategy.js +0 -140
  164. package/cjs/strategies/jwt.strategy.spec.js +0 -166
  165. package/cjs/validators/password.validator.js +0 -45
  166. package/cjs/validators/password.validator.spec.js +0 -161
  167. package/fesm/config/auth.constants.js +0 -11
  168. package/fesm/config/event-actions.js +0 -24
  169. package/fesm/config/message-keys.js +0 -78
  170. package/fesm/controllers/authentication.controller.js +0 -417
  171. package/fesm/controllers/authentication.controller.spec.js +0 -215
  172. package/fesm/controllers/branch.controller.js +0 -92
  173. package/fesm/controllers/branch.controller.spec.js +0 -130
  174. package/fesm/controllers/company-selection.controller.js +0 -188
  175. package/fesm/controllers/company-selection.controller.spec.js +0 -80
  176. package/fesm/controllers/company.controller.js +0 -92
  177. package/fesm/controllers/company.controller.spec.js +0 -127
  178. package/fesm/controllers/email-verification.controller.js +0 -214
  179. package/fesm/controllers/email-verification.controller.spec.js +0 -138
  180. package/fesm/controllers/user-permission.controller.js +0 -213
  181. package/fesm/controllers/user-permission.controller.spec.js +0 -134
  182. package/fesm/controllers/user.controller.js +0 -428
  183. package/fesm/controllers/user.controller.spec.js +0 -200
  184. package/fesm/docs/auth-swagger.config.js +0 -446
  185. package/fesm/docs/auth-swagger.config.spec.js +0 -126
  186. package/fesm/dtos/authentication.dto.js +0 -683
  187. package/fesm/dtos/company-branch.dto.js +0 -279
  188. package/fesm/dtos/company.dto.js +0 -283
  189. package/fesm/dtos/user-permission.dto.js +0 -339
  190. package/fesm/dtos/user.dto.js +0 -391
  191. package/fesm/entities/app-user.entity.js +0 -15
  192. package/fesm/entities/company-branch.entity.js +0 -153
  193. package/fesm/entities/company.entity.js +0 -136
  194. package/fesm/entities/index.spec.js +0 -69
  195. package/fesm/entities/pending-registration.entity.js +0 -125
  196. package/fesm/entities/user-company-permission.entity.js +0 -136
  197. package/fesm/entities/user-token.entity.js +0 -104
  198. package/fesm/enums/user-org-permission-type.enum.js +0 -5
  199. package/fesm/helpers/auth-response.mapper.js +0 -25
  200. package/fesm/helpers/auth-response.mapper.spec.js +0 -135
  201. package/fesm/helpers/token.helper.js +0 -40
  202. package/fesm/helpers/token.helper.spec.js +0 -82
  203. package/fesm/interceptors/clear-token.interceptor.js +0 -63
  204. package/fesm/interceptors/clear-token.interceptor.spec.js +0 -103
  205. package/fesm/interceptors/set-token.interceptor.js +0 -98
  206. package/fesm/interceptors/set-token.interceptor.spec.js +0 -161
  207. package/fesm/interfaces/auth-email-provider.interface.js +0 -38
  208. package/fesm/interfaces/auth-module-options.interface.js +0 -3
  209. package/fesm/interfaces/authentication.interface.js +0 -1
  210. package/fesm/interfaces/company-branch.interface.js +0 -1
  211. package/fesm/interfaces/company.interface.js +0 -1
  212. package/fesm/interfaces/user-enricher.interface.js +0 -4
  213. package/fesm/interfaces/user.interface.js +0 -1
  214. package/fesm/modules/auth.module.js +0 -192
  215. package/fesm/modules/auth.module.spec.js +0 -239
  216. package/fesm/services/auth-config.service.js +0 -100
  217. package/fesm/services/auth-config.service.spec.js +0 -93
  218. package/fesm/services/auth-datasource.provider.js +0 -83
  219. package/fesm/services/auth-datasource.provider.spec.js +0 -157
  220. package/fesm/services/auth-email.service.js +0 -488
  221. package/fesm/services/auth-email.service.spec.js +0 -411
  222. package/fesm/services/authentication.service.js +0 -1122
  223. package/fesm/services/authentication.service.spec.js +0 -917
  224. package/fesm/services/branch.service.js +0 -143
  225. package/fesm/services/branch.service.spec.js +0 -165
  226. package/fesm/services/company-selection-session.service.js +0 -111
  227. package/fesm/services/company-selection-session.service.spec.js +0 -86
  228. package/fesm/services/company.service.js +0 -130
  229. package/fesm/services/company.service.spec.js +0 -123
  230. package/fesm/services/user-permission.service.js +0 -226
  231. package/fesm/services/user-permission.service.spec.js +0 -250
  232. package/fesm/services/user.service.js +0 -620
  233. package/fesm/services/user.service.spec.js +0 -673
  234. package/fesm/strategies/jwt.strategy.js +0 -130
  235. package/fesm/strategies/jwt.strategy.spec.js +0 -162
  236. package/fesm/validators/password.validator.js +0 -48
  237. package/fesm/validators/password.validator.spec.js +0 -157
@@ -1,153 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- Object.defineProperty(exports, "BranchService", {
6
- enumerable: true,
7
- get: function() {
8
- return BranchService;
9
- }
10
- });
11
- const _classes = require("@flusys/nestjs-shared/classes");
12
- const _interfaces = require("@flusys/nestjs-shared/interfaces");
13
- const _modules = require("@flusys/nestjs-shared/modules");
14
- const _utils = require("@flusys/nestjs-shared/utils");
15
- const _common = require("@nestjs/common");
16
- const _typeorm = require("typeorm");
17
- const _config = require("../config");
18
- const _companybranchentity = require("../entities/company-branch.entity");
19
- const _usercompanypermissionentity = require("../entities/user-company-permission.entity");
20
- const _authconfigservice = require("./auth-config.service");
21
- const _authdatasourceprovider = require("./auth-datasource.provider");
22
- function _define_property(obj, key, value) {
23
- if (key in obj) {
24
- Object.defineProperty(obj, key, {
25
- value: value,
26
- enumerable: true,
27
- configurable: true,
28
- writable: true
29
- });
30
- } else {
31
- obj[key] = value;
32
- }
33
- return obj;
34
- }
35
- function _ts_decorate(decorators, target, key, desc) {
36
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
37
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
38
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
39
- return c > 3 && r && Object.defineProperty(target, key, r), r;
40
- }
41
- function _ts_metadata(k, v) {
42
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
43
- }
44
- function _ts_param(paramIndex, decorator) {
45
- return function(target, key) {
46
- decorator(target, key, paramIndex);
47
- };
48
- }
49
- let BranchService = class BranchService extends _classes.ApiService {
50
- async beforeDeleteOperation(dto, user, queryRunner) {
51
- const branchIds = Array.isArray(dto.id) ? dto.id : [
52
- dto.id
53
- ];
54
- await this.ensureDataSourceRepository();
55
- const readonlyBranches = await this.repository.find({
56
- where: {
57
- id: (0, _typeorm.In)(branchIds),
58
- readOnly: true,
59
- deletedAt: (0, _typeorm.IsNull)()
60
- }
61
- });
62
- if (readonlyBranches.length > 0) {
63
- const names = readonlyBranches.map((b)=>b.name).join(', ');
64
- throw new _common.ForbiddenException({
65
- message: `Cannot delete readonly branch(es): ${names}`,
66
- messageKey: _config.BRANCH_MESSAGES.READONLY_DELETE_FORBIDDEN,
67
- messageVariables: {
68
- names
69
- }
70
- });
71
- }
72
- await queryRunner.manager.getRepository(_usercompanypermissionentity.UserCompanyPermission).delete({
73
- targetId: (0, _typeorm.In)(branchIds)
74
- });
75
- if (!this.permissionSyncAdapter?.onBranchDeleted) {
76
- return;
77
- }
78
- const rows = await queryRunner.manager.getRepository(_companybranchentity.CompanyBranch).find({
79
- where: {
80
- id: (0, _typeorm.In)(branchIds)
81
- },
82
- select: [
83
- 'id',
84
- 'companyId'
85
- ]
86
- });
87
- await Promise.all(rows.map((row)=>this.permissionSyncAdapter.onBranchDeleted(row.id, row.companyId)));
88
- }
89
- // Query Customization
90
- async getSelectQuery(query, _user, select) {
91
- if (!select?.length) {
92
- select = [
93
- 'id',
94
- 'name',
95
- 'slug',
96
- 'email',
97
- 'phone',
98
- 'isActive',
99
- 'readOnly',
100
- 'createdAt'
101
- ];
102
- }
103
- query.select(select.map((f)=>`${this.entityName}.${f}`));
104
- return {
105
- query,
106
- isRaw: false
107
- };
108
- }
109
- async getGlobalSearchQuery(query, search) {
110
- query.andWhere('(company_branch.name LIKE :search OR company_branch.slug LIKE :search OR company_branch.email LIKE :search)', {
111
- search: `%${search}%`
112
- });
113
- return {
114
- query,
115
- isRaw: false
116
- };
117
- }
118
- async getExtraManipulateQuery(query, filterDto, user) {
119
- const result = await super.getExtraManipulateQuery(query, filterDto, user);
120
- // Only apply company filter if companyId is NOT explicitly provided in filter
121
- // This prevents dual filtering when user selects a specific company
122
- if (!filterDto?.filter?.companyId) {
123
- (0, _utils.applyCompanyFilter)(query, {
124
- isCompanyFeatureEnabled: this.authConfig.isCompanyFeatureEnabled(),
125
- entityAlias: 'company_branch',
126
- columnName: 'company_id'
127
- }, user);
128
- }
129
- return result;
130
- }
131
- constructor(cacheManager, utilsService, dataSourceProvider, authConfig, permissionSyncAdapter){
132
- super(_config.AUTH_EVENT_ENTITIES.COMPANY_BRANCH, cacheManager, utilsService, BranchService.name, true, _config.AUTH_EVENT_MODULE, dataSourceProvider, _companybranchentity.CompanyBranch), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "authConfig", void 0), _define_property(this, "permissionSyncAdapter", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.authConfig = authConfig, this.permissionSyncAdapter = permissionSyncAdapter;
133
- }
134
- };
135
- BranchService = _ts_decorate([
136
- (0, _common.Injectable)({
137
- scope: _common.Scope.REQUEST
138
- }),
139
- _ts_param(0, (0, _common.Inject)('CACHE_INSTANCE')),
140
- _ts_param(1, (0, _common.Inject)(_modules.UtilsService)),
141
- _ts_param(2, (0, _common.Inject)(_authdatasourceprovider.AuthDataSourceProvider)),
142
- _ts_param(3, (0, _common.Inject)(_authconfigservice.AuthConfigService)),
143
- _ts_param(4, (0, _common.Optional)()),
144
- _ts_param(4, (0, _common.Inject)(_interfaces.PERMISSION_SYNC_ADAPTER)),
145
- _ts_metadata("design:type", Function),
146
- _ts_metadata("design:paramtypes", [
147
- typeof _classes.HybridCache === "undefined" ? Object : _classes.HybridCache,
148
- typeof _modules.UtilsService === "undefined" ? Object : _modules.UtilsService,
149
- typeof _authdatasourceprovider.AuthDataSourceProvider === "undefined" ? Object : _authdatasourceprovider.AuthDataSourceProvider,
150
- typeof _authconfigservice.AuthConfigService === "undefined" ? Object : _authconfigservice.AuthConfigService,
151
- typeof _interfaces.IPermissionSyncAdapter === "undefined" ? Object : _interfaces.IPermissionSyncAdapter
152
- ])
153
- ], BranchService);
@@ -1,169 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- const _repositorymock = require("@test-utils/mocks/repository.mock");
6
- const _branchservice = require("./branch.service");
7
- const _companybranchentity = require("../entities/company-branch.entity");
8
- const _usercompanypermissionentity = require("../entities/user-company-permission.entity");
9
- describe('BranchService', ()=>{
10
- let service;
11
- let mockRepo;
12
- let mockAuthConfig;
13
- let mockPermissionSyncAdapter;
14
- let mockQueryRunner;
15
- beforeEach(()=>{
16
- mockRepo = (0, _repositorymock.createMockRepository)();
17
- mockRepo.find.mockResolvedValue([]);
18
- Object.assign(mockRepo.createQueryBuilder(), {
19
- leftJoinAndSelect: jest.fn().mockReturnThis(),
20
- addOrderBy: jest.fn().mockReturnThis()
21
- });
22
- const mockDataSourceProvider = (0, _repositorymock.createMockDataSourceProvider)(mockRepo);
23
- mockAuthConfig = {
24
- isCompanyFeatureEnabled: jest.fn().mockReturnValue(false)
25
- };
26
- mockPermissionSyncAdapter = {
27
- onBranchDeleted: jest.fn()
28
- };
29
- service = new _branchservice.BranchService({}, {}, mockDataSourceProvider, mockAuthConfig, mockPermissionSyncAdapter);
30
- const permissionRepo = (0, _repositorymock.createMockRepository)();
31
- const branchRepo = (0, _repositorymock.createMockRepository)();
32
- branchRepo.find.mockResolvedValue([]);
33
- mockQueryRunner = {
34
- manager: {
35
- getRepository: jest.fn().mockImplementation((entity)=>{
36
- if (entity === _usercompanypermissionentity.UserCompanyPermission) return permissionRepo;
37
- if (entity === _companybranchentity.CompanyBranch) return branchRepo;
38
- throw new Error('Unexpected entity');
39
- })
40
- }
41
- };
42
- });
43
- describe('beforeDeleteOperation', ()=>{
44
- it('deletes user permissions targeting the deleted branch ids', async ()=>{
45
- await service.beforeDeleteOperation({
46
- id: [
47
- 'branch-1',
48
- 'branch-2'
49
- ]
50
- }, null, mockQueryRunner);
51
- const permissionRepo = mockQueryRunner.manager.getRepository(_usercompanypermissionentity.UserCompanyPermission);
52
- expect(permissionRepo.delete).toHaveBeenCalledWith({
53
- targetId: expect.anything()
54
- });
55
- });
56
- it('handles a single (non-array) branch id', async ()=>{
57
- await service.beforeDeleteOperation({
58
- id: 'branch-1'
59
- }, null, mockQueryRunner);
60
- const permissionRepo = mockQueryRunner.manager.getRepository(_usercompanypermissionentity.UserCompanyPermission);
61
- expect(permissionRepo.delete).toHaveBeenCalled();
62
- });
63
- it('does nothing further when no permission sync adapter is configured', async ()=>{
64
- service = new _branchservice.BranchService({}, {}, (0, _repositorymock.createMockDataSourceProvider)(mockRepo), mockAuthConfig, undefined);
65
- await expect(service.beforeDeleteOperation({
66
- id: [
67
- 'branch-1'
68
- ]
69
- }, null, mockQueryRunner)).resolves.toBeUndefined();
70
- });
71
- it('notifies the permission sync adapter for each deleted branch', async ()=>{
72
- const branchRepo = mockQueryRunner.manager.getRepository(_companybranchentity.CompanyBranch);
73
- branchRepo.find.mockResolvedValue([
74
- {
75
- id: 'branch-1',
76
- companyId: 'company-1'
77
- }
78
- ]);
79
- await service.beforeDeleteOperation({
80
- id: [
81
- 'branch-1'
82
- ]
83
- }, null, mockQueryRunner);
84
- expect(mockPermissionSyncAdapter.onBranchDeleted).toHaveBeenCalledWith('branch-1', 'company-1');
85
- });
86
- it('rejects deleting a readonly branch', async ()=>{
87
- mockRepo.find.mockResolvedValue([
88
- {
89
- id: 'branch-1',
90
- name: 'Default Branch',
91
- readOnly: true
92
- }
93
- ]);
94
- const permissionRepo = mockQueryRunner.manager.getRepository(_usercompanypermissionentity.UserCompanyPermission);
95
- await expect(service.beforeDeleteOperation({
96
- id: 'branch-1'
97
- }, null, mockQueryRunner)).rejects.toThrow('Cannot delete readonly branch');
98
- expect(permissionRepo.delete).not.toHaveBeenCalled();
99
- });
100
- });
101
- describe('getSelectQuery', ()=>{
102
- it('applies the default selected fields when none are provided', async ()=>{
103
- const qb = mockRepo.createQueryBuilder();
104
- const { isRaw } = await service.getSelectQuery(qb, null);
105
- expect(qb.select).toHaveBeenCalledWith(expect.arrayContaining([
106
- 'company_branch.id',
107
- 'company_branch.name',
108
- 'company_branch.slug'
109
- ]));
110
- expect(isRaw).toBe(false);
111
- });
112
- it('honors an explicit select list', async ()=>{
113
- const qb = mockRepo.createQueryBuilder();
114
- await service.getSelectQuery(qb, null, [
115
- 'id',
116
- 'name'
117
- ]);
118
- expect(qb.select).toHaveBeenCalledWith([
119
- 'company_branch.id',
120
- 'company_branch.name'
121
- ]);
122
- });
123
- });
124
- describe('getGlobalSearchQuery', ()=>{
125
- it('adds a LIKE search clause across name/slug/email', async ()=>{
126
- const qb = mockRepo.createQueryBuilder();
127
- await service.getGlobalSearchQuery(qb, 'acme');
128
- expect(qb.andWhere).toHaveBeenCalledWith(expect.stringContaining('company_branch.name LIKE'), {
129
- search: '%acme%'
130
- });
131
- });
132
- });
133
- describe('getExtraManipulateQuery', ()=>{
134
- it('applies a company filter when company feature is enabled and no explicit companyId filter is present', async ()=>{
135
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(true);
136
- const qb = mockRepo.createQueryBuilder();
137
- await service.getExtraManipulateQuery(qb, {
138
- filter: {}
139
- }, {
140
- id: 'user-1',
141
- companyId: 'company-1'
142
- });
143
- expect(qb.andWhere).toHaveBeenCalledWith('company_branch.company_id = :companyId', {
144
- companyId: 'company-1'
145
- });
146
- });
147
- it('does not apply a company filter when companyId is explicitly provided in the filter', async ()=>{
148
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(true);
149
- const qb = mockRepo.createQueryBuilder();
150
- await service.getExtraManipulateQuery(qb, {
151
- filter: {
152
- companyId: 'explicit-company'
153
- }
154
- }, {
155
- id: 'user-1',
156
- companyId: 'company-1'
157
- });
158
- expect(qb.andWhere).not.toHaveBeenCalledWith('company_branch.company_id = :companyId', expect.anything());
159
- });
160
- it('does not apply a company filter when the company feature is disabled', async ()=>{
161
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(false);
162
- const qb = mockRepo.createQueryBuilder();
163
- await service.getExtraManipulateQuery(qb, {
164
- filter: {}
165
- }, null);
166
- expect(qb.andWhere).not.toHaveBeenCalledWith('company_branch.company_id = :companyId', expect.anything());
167
- });
168
- });
169
- });
@@ -1,121 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- Object.defineProperty(exports, "CompanySelectionSessionService", {
6
- enumerable: true,
7
- get: function() {
8
- return CompanySelectionSessionService;
9
- }
10
- });
11
- const _nestjsshared = require("@flusys/nestjs-shared");
12
- const _classes = require("@flusys/nestjs-shared/classes");
13
- const _common = require("@nestjs/common");
14
- const _crypto = require("crypto");
15
- const _authconstants = require("../config/auth.constants");
16
- function _define_property(obj, key, value) {
17
- if (key in obj) {
18
- Object.defineProperty(obj, key, {
19
- value: value,
20
- enumerable: true,
21
- configurable: true,
22
- writable: true
23
- });
24
- } else {
25
- obj[key] = value;
26
- }
27
- return obj;
28
- }
29
- function _ts_decorate(decorators, target, key, desc) {
30
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
31
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
32
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
33
- return c > 3 && r && Object.defineProperty(target, key, r), r;
34
- }
35
- function _ts_metadata(k, v) {
36
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
37
- }
38
- function _ts_param(paramIndex, decorator) {
39
- return function(target, key) {
40
- decorator(target, key, paramIndex);
41
- };
42
- }
43
- const SESSION_TTL_MS = 5 * 60 * 1000; // 5 minutes
44
- let CompanySelectionSessionService = class CompanySelectionSessionService {
45
- async createSession(userId) {
46
- const sessionId = (0, _crypto.randomUUID)();
47
- const now = new Date();
48
- const expiresAt = new Date(now.getTime() + SESSION_TTL_MS);
49
- const session = {
50
- sessionId,
51
- userId,
52
- createdAt: now,
53
- expiresAt
54
- };
55
- await this.cacheManager.set(this.getKey(sessionId), session, SESSION_TTL_MS);
56
- return sessionId;
57
- }
58
- /**
59
- * Get session by ID (does not consume/delete)
60
- */ async getSession(sessionId) {
61
- const session = await this.cacheManager.get(this.getKey(sessionId));
62
- if (!session) return null;
63
- // Check if expired (extra safety, cache should handle TTL)
64
- if (new Date() > new Date(session.expiresAt)) {
65
- await this.deleteSession(sessionId);
66
- return null;
67
- }
68
- return session;
69
- }
70
- async consumeSession(sessionId) {
71
- const session = await this.getSession(sessionId);
72
- if (session) {
73
- await this.deleteSession(sessionId);
74
- }
75
- return session;
76
- }
77
- /**
78
- * Delete session
79
- */ async deleteSession(sessionId) {
80
- await this.cacheManager.del(this.getKey(sessionId));
81
- }
82
- /**
83
- * Get cache key for session
84
- */ getKey(sessionId) {
85
- return `${_authconstants.SESSION_CACHE_PREFIX}:${sessionId}`;
86
- }
87
- constructor(cacheManager){
88
- _define_property(this, "cacheManager", void 0);
89
- this.cacheManager = cacheManager;
90
- }
91
- };
92
- _ts_decorate([
93
- (0, _nestjsshared.LogAction)({
94
- action: 'session.create',
95
- module: 'auth'
96
- }),
97
- _ts_metadata("design:type", Function),
98
- _ts_metadata("design:paramtypes", [
99
- String
100
- ]),
101
- _ts_metadata("design:returntype", Promise)
102
- ], CompanySelectionSessionService.prototype, "createSession", null);
103
- _ts_decorate([
104
- (0, _nestjsshared.LogAction)({
105
- action: 'session.consume',
106
- module: 'auth'
107
- }),
108
- _ts_metadata("design:type", Function),
109
- _ts_metadata("design:paramtypes", [
110
- String
111
- ]),
112
- _ts_metadata("design:returntype", Promise)
113
- ], CompanySelectionSessionService.prototype, "consumeSession", null);
114
- CompanySelectionSessionService = _ts_decorate([
115
- (0, _common.Injectable)(),
116
- _ts_param(0, (0, _common.Inject)('CACHE_INSTANCE')),
117
- _ts_metadata("design:type", Function),
118
- _ts_metadata("design:paramtypes", [
119
- typeof _classes.HybridCache === "undefined" ? Object : _classes.HybridCache
120
- ])
121
- ], CompanySelectionSessionService);
@@ -1,90 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- const _companyselectionsessionservice = require("./company-selection-session.service");
6
- describe('CompanySelectionSessionService', ()=>{
7
- let service;
8
- let mockCacheManager;
9
- beforeEach(()=>{
10
- mockCacheManager = {
11
- set: jest.fn(),
12
- get: jest.fn(),
13
- del: jest.fn()
14
- };
15
- service = new _companyselectionsessionservice.CompanySelectionSessionService(mockCacheManager);
16
- });
17
- describe('createSession', ()=>{
18
- it('stores a session in the cache and returns a session id', async ()=>{
19
- const sessionId = await service.createSession('user-1');
20
- expect(typeof sessionId).toBe('string');
21
- expect(sessionId.length).toBeGreaterThan(0);
22
- expect(mockCacheManager.set).toHaveBeenCalledWith(`auth:session:${sessionId}`, expect.objectContaining({
23
- sessionId,
24
- userId: 'user-1'
25
- }), 5 * 60 * 1000);
26
- });
27
- it('generates unique session ids on successive calls', async ()=>{
28
- const first = await service.createSession('user-1');
29
- const second = await service.createSession('user-1');
30
- expect(first).not.toBe(second);
31
- });
32
- });
33
- describe('getSession', ()=>{
34
- it('returns null when no session is cached', async ()=>{
35
- mockCacheManager.get.mockResolvedValue(undefined);
36
- const result = await service.getSession('missing-session');
37
- expect(result).toBeNull();
38
- });
39
- it('returns the session when present and not expired', async ()=>{
40
- const session = {
41
- sessionId: 'sess-1',
42
- userId: 'user-1',
43
- createdAt: new Date(),
44
- expiresAt: new Date(Date.now() + 60_000)
45
- };
46
- mockCacheManager.get.mockResolvedValue(session);
47
- const result = await service.getSession('sess-1');
48
- expect(result).toEqual(session);
49
- expect(mockCacheManager.get).toHaveBeenCalledWith('auth:session:sess-1');
50
- });
51
- it('deletes and returns null when the cached session has expired', async ()=>{
52
- const session = {
53
- sessionId: 'sess-1',
54
- userId: 'user-1',
55
- createdAt: new Date(Date.now() - 10 * 60_000),
56
- expiresAt: new Date(Date.now() - 60_000)
57
- };
58
- mockCacheManager.get.mockResolvedValue(session);
59
- const result = await service.getSession('sess-1');
60
- expect(result).toBeNull();
61
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
62
- });
63
- });
64
- describe('consumeSession', ()=>{
65
- it('returns and deletes the session when present', async ()=>{
66
- const session = {
67
- sessionId: 'sess-1',
68
- userId: 'user-1',
69
- createdAt: new Date(),
70
- expiresAt: new Date(Date.now() + 60_000)
71
- };
72
- mockCacheManager.get.mockResolvedValue(session);
73
- const result = await service.consumeSession('sess-1');
74
- expect(result).toEqual(session);
75
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
76
- });
77
- it('returns null and does not delete when session is missing', async ()=>{
78
- mockCacheManager.get.mockResolvedValue(undefined);
79
- const result = await service.consumeSession('missing');
80
- expect(result).toBeNull();
81
- expect(mockCacheManager.del).not.toHaveBeenCalled();
82
- });
83
- });
84
- describe('deleteSession', ()=>{
85
- it('deletes the session by key', async ()=>{
86
- await service.deleteSession('sess-1');
87
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
88
- });
89
- });
90
- });
@@ -1,140 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", {
3
- value: true
4
- });
5
- Object.defineProperty(exports, "CompanyService", {
6
- enumerable: true,
7
- get: function() {
8
- return CompanyService;
9
- }
10
- });
11
- const _classes = require("@flusys/nestjs-shared/classes");
12
- const _interfaces = require("@flusys/nestjs-shared/interfaces");
13
- const _modules = require("@flusys/nestjs-shared/modules");
14
- const _common = require("@nestjs/common");
15
- const _typeorm = require("typeorm");
16
- const _config = require("../config");
17
- const _companybranchentity = require("../entities/company-branch.entity");
18
- const _companyentity = require("../entities/company.entity");
19
- const _usercompanypermissionentity = require("../entities/user-company-permission.entity");
20
- const _authdatasourceprovider = require("./auth-datasource.provider");
21
- function _define_property(obj, key, value) {
22
- if (key in obj) {
23
- Object.defineProperty(obj, key, {
24
- value: value,
25
- enumerable: true,
26
- configurable: true,
27
- writable: true
28
- });
29
- } else {
30
- obj[key] = value;
31
- }
32
- return obj;
33
- }
34
- function _ts_decorate(decorators, target, key, desc) {
35
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
36
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
37
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
38
- return c > 3 && r && Object.defineProperty(target, key, r), r;
39
- }
40
- function _ts_metadata(k, v) {
41
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
42
- }
43
- function _ts_param(paramIndex, decorator) {
44
- return function(target, key) {
45
- decorator(target, key, paramIndex);
46
- };
47
- }
48
- let CompanyService = class CompanyService extends _classes.ApiService {
49
- async beforeDeleteOperation(dto, user, queryRunner) {
50
- const companyIds = Array.isArray(dto.id) ? dto.id : [
51
- dto.id
52
- ];
53
- await this.ensureDataSourceRepository();
54
- const readonlyCompanies = await this.repository.find({
55
- where: {
56
- id: (0, _typeorm.In)(companyIds),
57
- readOnly: true,
58
- deletedAt: (0, _typeorm.IsNull)()
59
- }
60
- });
61
- if (readonlyCompanies.length > 0) {
62
- const names = readonlyCompanies.map((c)=>c.name).join(', ');
63
- throw new _common.ForbiddenException({
64
- message: `Cannot delete readonly company(ies): ${names}`,
65
- messageKey: _config.COMPANY_MESSAGES.READONLY_DELETE_FORBIDDEN,
66
- messageVariables: {
67
- names
68
- }
69
- });
70
- }
71
- const branchRows = await queryRunner.manager.getRepository(_companybranchentity.CompanyBranch).find({
72
- where: {
73
- companyId: (0, _typeorm.In)(companyIds)
74
- },
75
- select: [
76
- 'id'
77
- ]
78
- });
79
- const targetIds = [
80
- ...companyIds,
81
- ...branchRows.map((row)=>row.id)
82
- ];
83
- await queryRunner.manager.getRepository(_usercompanypermissionentity.UserCompanyPermission).delete({
84
- targetId: (0, _typeorm.In)(targetIds)
85
- });
86
- if (!this.permissionSyncAdapter?.onCompanyDeleted) {
87
- return;
88
- }
89
- await Promise.all(companyIds.map((companyId)=>this.permissionSyncAdapter.onCompanyDeleted(companyId)));
90
- }
91
- // Query Customization
92
- async getSelectQuery(query, _user, select) {
93
- if (!select?.length) {
94
- select = [
95
- 'id',
96
- 'name',
97
- 'slug',
98
- 'email',
99
- 'phone',
100
- 'isActive',
101
- 'readOnly',
102
- 'createdAt'
103
- ];
104
- }
105
- query.select(select.map((f)=>`${this.entityName}.${f}`));
106
- return {
107
- query,
108
- isRaw: false
109
- };
110
- }
111
- async getGlobalSearchQuery(query, search) {
112
- query.andWhere('(company.name LIKE :search OR company.slug LIKE :search OR company.email LIKE :search)', {
113
- search: `%${search}%`
114
- });
115
- return {
116
- query,
117
- isRaw: false
118
- };
119
- }
120
- constructor(cacheManager, utilsService, dataSourceProvider, permissionSyncAdapter){
121
- super(_config.AUTH_EVENT_ENTITIES.COMPANY, cacheManager, utilsService, CompanyService.name, true, _config.AUTH_EVENT_MODULE, dataSourceProvider, _companyentity.Company), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "permissionSyncAdapter", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.permissionSyncAdapter = permissionSyncAdapter;
122
- }
123
- };
124
- CompanyService = _ts_decorate([
125
- (0, _common.Injectable)({
126
- scope: _common.Scope.REQUEST
127
- }),
128
- _ts_param(0, (0, _common.Inject)('CACHE_INSTANCE')),
129
- _ts_param(1, (0, _common.Inject)(_modules.UtilsService)),
130
- _ts_param(2, (0, _common.Inject)(_authdatasourceprovider.AuthDataSourceProvider)),
131
- _ts_param(3, (0, _common.Optional)()),
132
- _ts_param(3, (0, _common.Inject)(_interfaces.PERMISSION_SYNC_ADAPTER)),
133
- _ts_metadata("design:type", Function),
134
- _ts_metadata("design:paramtypes", [
135
- typeof _classes.HybridCache === "undefined" ? Object : _classes.HybridCache,
136
- typeof _modules.UtilsService === "undefined" ? Object : _modules.UtilsService,
137
- typeof _authdatasourceprovider.AuthDataSourceProvider === "undefined" ? Object : _authdatasourceprovider.AuthDataSourceProvider,
138
- typeof _interfaces.IPermissionSyncAdapter === "undefined" ? Object : _interfaces.IPermissionSyncAdapter
139
- ])
140
- ], CompanyService);