@flusys/nestjs-auth 7.0.2 → 8.0.0-beta.1

package/fesm/controllers/user-permission.controller.spec.js

@@ -1,134 +0,0 @@
-import { UserPermissionController } from './user-permission.controller';
-import { PermissionType } from '../entities/user-company-permission.entity';
-describe('UserPermissionController', ()=>{
-    let controller;
-    let mockPermissionService;
-    beforeEach(()=>{
-        mockPermissionService = {
-            findUserCompanies: jest.fn(),
-            findUserBranches: jest.fn(),
-            assignPermission: jest.fn(),
-            revokePermission: jest.fn()
-        };
-        controller = new UserPermissionController(mockPermissionService);
-    });
-    describe('assignUserCompany', ()=>{
-        it('assigns and revokes company permissions in a single batch', async ()=>{
-            const result = await controller.assignUserCompany({
-                userId: 'user-1',
-                items: [
-                    {
-                        targetId: 'company-1',
-                        isAdd: true
-                    },
-                    {
-                        targetId: 'company-2',
-                        isAdd: false
-                    }
-                ]
-            });
-            expect(mockPermissionService.assignPermission).toHaveBeenCalledWith('user-1', 'company-1', PermissionType.COMPANY);
-            expect(mockPermissionService.revokePermission).toHaveBeenCalledWith('user-1', 'company-2', PermissionType.COMPANY);
-            expect(result.messageVariables).toEqual({
-                added: 1,
-                removed: 1
-            });
-        });
-    });
-    describe('getUserCompanies', ()=>{
-        it('maps permission entities to the response DTO shape', async ()=>{
-            mockPermissionService.findUserCompanies.mockResolvedValue([
-                {
-                    id: 'perm-1',
-                    userId: 'user-1',
-                    targetId: 'company-1',
-                    company: {
-                        id: 'company-1',
-                        name: 'Acme',
-                        slug: 'acme'
-                    }
-                }
-            ]);
-            const result = await controller.getUserCompanies('user-1');
-            expect(result.data).toEqual([
-                {
-                    id: 'perm-1',
-                    userId: 'user-1',
-                    companyId: 'company-1',
-                    companyName: 'Acme',
-                    companySlug: 'acme'
-                }
-            ]);
-        });
-        it('falls back to targetId and empty strings when the company relation is missing', async ()=>{
-            mockPermissionService.findUserCompanies.mockResolvedValue([
-                {
-                    id: 'perm-1',
-                    userId: 'user-1',
-                    targetId: 'company-1',
-                    company: undefined
-                }
-            ]);
-            const result = await controller.getUserCompanies('user-1');
-            expect(result.data[0]).toEqual({
-                id: 'perm-1',
-                userId: 'user-1',
-                companyId: 'company-1',
-                companyName: '',
-                companySlug: ''
-            });
-        });
-    });
-    describe('assignUserBranch', ()=>{
-        it('assigns and revokes branch permissions in a single batch', async ()=>{
-            const result = await controller.assignUserBranch({
-                userId: 'user-1',
-                items: [
-                    {
-                        targetId: 'branch-1',
-                        isAdd: true
-                    }
-                ]
-            });
-            expect(mockPermissionService.assignPermission).toHaveBeenCalledWith('user-1', 'branch-1', PermissionType.BRANCH);
-            expect(result.messageVariables).toEqual({
-                added: 1,
-                removed: 0
-            });
-        });
-    });
-    describe('getUserBranches', ()=>{
-        it('maps permission entities to the response DTO shape', async ()=>{
-            mockPermissionService.findUserBranches.mockResolvedValue([
-                {
-                    id: 'perm-1',
-                    userId: 'user-1',
-                    targetId: 'branch-1',
-                    branch: {
-                        id: 'branch-1',
-                        name: 'Main',
-                        slug: 'main',
-                        companyId: 'company-1'
-                    }
-                }
-            ]);
-            const result = await controller.getUserBranches('user-1', 'company-1');
-            expect(mockPermissionService.findUserBranches).toHaveBeenCalledWith('user-1', 'company-1');
-            expect(result.data).toEqual([
-                {
-                    id: 'perm-1',
-                    userId: 'user-1',
-                    branchId: 'branch-1',
-                    branchName: 'Main',
-                    branchSlug: 'main',
-                    companyId: 'company-1'
-                }
-            ]);
-        });
-        it('supports an optional companyId filter', async ()=>{
-            mockPermissionService.findUserBranches.mockResolvedValue([]);
-            await controller.getUserBranches('user-1');
-            expect(mockPermissionService.findUserBranches).toHaveBeenCalledWith('user-1', undefined);
-        });
-    });
-});

package/fesm/controllers/user.controller.js

@@ -1,428 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { createApiController, USER_PERMISSIONS } from '@flusys/nestjs-shared/classes';
-import { CurrentUser, RequireAnyPermission, RequirePermission } from '@flusys/nestjs-shared/decorators';
-import { FilterAndPaginationDto } from '@flusys/nestjs-shared/dtos';
-import { JwtAuthGuard, PermissionGuard } from '@flusys/nestjs-shared/guards';
-import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
-import { Body, Controller, Inject, Param, Post, Query, UseGuards } from '@nestjs/common';
-import { ApiBearerAuth, ApiBody, ApiOperation, ApiParam, ApiQuery, ApiTags } from '@nestjs/swagger';
-import { plainToInstance } from 'class-transformer';
-import { USER_MESSAGES } from '../config';
-import { CreateUserDto, UpdateUserDto, UserLookupResponseDto, UserResponseDto } from '../dtos/user.dto';
-import { UserService } from '../services/user.service';
-export class UserController extends createApiController(CreateUserDto, UpdateUserDto, UserResponseDto, {
-    entityName: 'user',
-    security: {
-        insert: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.CREATE
-            ]
-        },
-        insertMany: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.CREATE
-            ]
-        },
-        getById: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.READ
-            ]
-        },
-        getAll: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.READ
-            ]
-        },
-        update: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.UPDATE
-            ]
-        },
-        updateMany: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.UPDATE
-            ]
-        },
-        delete: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.DELETE
-            ]
-        }
-    }
-}) {
-    async lookup(filterAndPaginationDto, user, search) {
-        const result = await this.service.getAll(search ?? '', filterAndPaginationDto, user);
-        const data = result.data.map((item)=>plainToInstance(UserLookupResponseDto, item, {
-                excludeExtraneousValues: true
-            }));
-        const page = filterAndPaginationDto.pagination?.currentPage ?? 0;
-        const pageSize = filterAndPaginationDto.pagination?.pageSize ?? data.length;
-        const totalPages = pageSize > 0 ? Math.ceil(result.total / pageSize) : 1;
-        return {
-            success: true,
-            message: 'Users retrieved successfully',
-            messageKey: USER_MESSAGES.LOOKUP_SUCCESS,
-            data,
-            meta: {
-                total: result.total,
-                page,
-                pageSize,
-                count: data.length,
-                hasMore: page < totalPages - 1,
-                totalPages
-            }
-        };
-    }
-    async getProfileWithExtras(id, user) {
-        const data = await this.service.getProfileWithExtras(id, user);
-        return {
-            success: true,
-            message: 'Profile extras retrieved successfully',
-            messageKey: USER_MESSAGES.PROFILE_EXTRAS_SUCCESS,
-            data
-        };
-    }
-    async verifyEmail(id) {
-        await this.service.verifyEmail(id);
-        return {
-            success: true,
-            message: 'Email verified successfully',
-            messageKey: USER_MESSAGES.EMAIL_VERIFY_SUCCESS
-        };
-    }
-    async verifyPhone(id) {
-        await this.service.verifyPhone(id);
-        return {
-            success: true,
-            message: 'Phone verified successfully',
-            messageKey: USER_MESSAGES.PHONE_VERIFY_SUCCESS
-        };
-    }
-    async updateStatus(id, isActive, user) {
-        await this.service.updateStatus(id, isActive, user);
-        return {
-            success: true,
-            message: 'Status updated successfully',
-            messageKey: USER_MESSAGES.STATUS_UPDATE_SUCCESS
-        };
-    }
-    async profile(dto, user) {
-        const data = await this.service.profile(dto, user);
-        return {
-            success: true,
-            message: 'Profile updated successfully',
-            messageKey: USER_MESSAGES.PROFILE_UPDATE_SUCCESS,
-            data
-        };
-    }
-    async getProfileSections() {
-        const sections = await this.service.getProfileSections();
-        return {
-            success: true,
-            message: 'Profile sections retrieved successfully',
-            messageKey: USER_MESSAGES.PROFILE_SECTIONS_SUCCESS,
-            data: sections
-        };
-    }
-    async getProfileSectionData(id, sectionId, user) {
-        const data = await this.service.getProfileSectionData(id, sectionId, user);
-        return {
-            success: true,
-            message: 'Profile section data retrieved successfully',
-            messageKey: USER_MESSAGES.PROFILE_SECTION_DATA_SUCCESS,
-            data
-        };
-    }
-    async updateProfileSection(id, sectionId, data, user) {
-        await this.service.updateProfileSection(id, sectionId, data, user);
-        return {
-            success: true,
-            message: 'Section updated successfully',
-            messageKey: USER_MESSAGES.PROFILE_SECTION_UPDATE_SUCCESS
-        };
-    }
-    async getProfileCompletion(id, user) {
-        const percentage = await this.service.getProfileCompletion(id, user);
-        return {
-            success: true,
-            message: 'Profile completion retrieved successfully',
-            messageKey: USER_MESSAGES.PROFILE_COMPLETION_SUCCESS,
-            data: {
-                completionPercentage: percentage
-            }
-        };
-    }
-    constructor(service){
-        super(service), _define_property(this, "service", void 0), this.service = service;
-    }
-}
-_ts_decorate([
-    Post('lookup'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequireAnyPermission(USER_PERMISSIONS.READ, USER_PERMISSIONS.LOOKUP),
-    ApiOperation({
-        summary: 'Lookup users for pickers/directory',
-        description: 'Lightweight user directory search for selection widgets (event participants, assignees, etc.). ' + 'Returns only id/name/email. Accessible with USER_PERMISSIONS.READ or the narrower USER_PERMISSIONS.LOOKUP, ' + 'so panels that only need to pick a user do not require full user-management access.'
-    }),
-    ApiQuery({
-        name: 'q',
-        required: false,
-        description: 'Global text search across searchable fields'
-    }),
-    ApiBody({
-        type: FilterAndPaginationDto
-    }),
-    _ts_param(0, Body()),
-    _ts_param(1, CurrentUser()),
-    _ts_param(2, Query('q')),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof FilterAndPaginationDto === "undefined" ? Object : FilterAndPaginationDto,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo,
-        String
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "lookup", null);
-_ts_decorate([
-    Post(':id/profile-extras'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.READ),
-    ApiOperation({
-        summary: 'Get user profile with extras',
-        description: 'Returns user profile along with extra data (roles, permissions, etc.) if UserEnricher is provided.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "getProfileWithExtras", null);
-_ts_decorate([
-    Post(':id/verify-email'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.UPDATE),
-    ApiOperation({
-        summary: 'Verify user email'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "verifyEmail", null);
-_ts_decorate([
-    Post(':id/verify-phone'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.UPDATE),
-    ApiOperation({
-        summary: 'Verify user phone'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "verifyPhone", null);
-_ts_decorate([
-    Post(':id/status'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.UPDATE),
-    ApiOperation({
-        summary: 'Update user active status',
-        description: 'Updates user active status. When company feature is enabled, updates the status for the current company context.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    ApiBody({
-        schema: {
-            example: {
-                isActive: true
-            }
-        }
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, Body('isActive')),
-    _ts_param(2, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        Boolean,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "updateStatus", null);
-_ts_decorate([
-    Post('profile'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Update user profile'
-    }),
-    ApiBody({
-        type: UpdateUserDto
-    }),
-    _ts_param(0, Body()),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof UpdateUserDto === "undefined" ? Object : UpdateUserDto,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "profile", null);
-_ts_decorate([
-    Post('profile-sections'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.READ),
-    ApiOperation({
-        summary: 'Get profile section definitions',
-        description: 'Returns available profile sections for multi-step profile (if enricher configured).'
-    }),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", []),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "getProfileSections", null);
-_ts_decorate([
-    Post(':id/profile-section/:sectionId'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Get profile section data',
-        description: 'Returns data for a specific profile section.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    ApiParam({
-        name: 'sectionId',
-        description: 'Section identifier'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, Param('sectionId')),
-    _ts_param(2, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        String,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "getProfileSectionData", null);
-_ts_decorate([
-    Post(':id/profile-section/:sectionId/update'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Update profile section',
-        description: 'Updates a specific profile section data.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    ApiParam({
-        name: 'sectionId',
-        description: 'Section identifier'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, Param('sectionId')),
-    _ts_param(2, Body()),
-    _ts_param(3, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        String,
-        typeof Record === "undefined" ? Object : Record,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "updateProfileSection", null);
-_ts_decorate([
-    Post(':id/profile-completion'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Get profile completion percentage',
-        description: 'Returns overall profile completion percentage.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "getProfileCompletion", null);
-UserController = _ts_decorate([
-    ApiTags('Users'),
-    Controller('administration/users'),
-    _ts_param(0, Inject(UserService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof UserService === "undefined" ? Object : UserService
-    ])
-], UserController);