@flusys/nestjs-auth 7.0.2 → 8.0.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (237) hide show
  1. package/README.md +68 -1
  2. package/config/auth.constants.d.ts +2 -0
  3. package/config/event-actions.d.ts +2 -0
  4. package/config/index.d.ts +3 -3
  5. package/config/message-keys.d.ts +23 -0
  6. package/controllers/authentication.controller.d.ts +5 -5
  7. package/controllers/branch.controller.d.ts +2 -2
  8. package/controllers/company-selection.controller.d.ts +4 -4
  9. package/controllers/company.controller.d.ts +2 -2
  10. package/controllers/email-verification.controller.d.ts +6 -6
  11. package/controllers/index.d.ts +9 -7
  12. package/controllers/social-auth-config.controller.d.ts +22 -0
  13. package/controllers/social-auth.controller.d.ts +11 -0
  14. package/controllers/user-permission.controller.d.ts +5 -4
  15. package/controllers/user.controller.d.ts +7 -7
  16. package/docs/auth-swagger.config.d.ts +2 -2
  17. package/docs/index.d.ts +1 -1
  18. package/dtos/index.d.ts +6 -5
  19. package/dtos/social-auth.dto.d.ts +42 -0
  20. package/entities/company-branch.entity.d.ts +1 -1
  21. package/entities/company.entity.d.ts +1 -1
  22. package/entities/index.d.ts +15 -13
  23. package/entities/pending-registration.entity.d.ts +1 -1
  24. package/entities/social-auth-config.entity.d.ts +9 -0
  25. package/entities/user-company-permission.entity.d.ts +4 -4
  26. package/enums/index.d.ts +2 -1
  27. package/enums/social-provider-type.enum.d.ts +6 -0
  28. package/fesm/118.js +1230 -0
  29. package/fesm/120.js +2197 -0
  30. package/fesm/24.js +4389 -0
  31. package/fesm/370.js +1163 -0
  32. package/fesm/446.js +877 -0
  33. package/fesm/chunks/117.js +69 -0
  34. package/fesm/config/index.js +244 -3
  35. package/fesm/controllers/index.js +27 -7
  36. package/fesm/docs/index.js +479 -1
  37. package/fesm/dtos/index.js +123 -5
  38. package/fesm/entities/index.js +68 -19
  39. package/fesm/enums/index.js +53 -1
  40. package/fesm/helpers/index.js +115 -2
  41. package/fesm/index.js +1437 -12
  42. package/fesm/interceptors/index.js +508 -2
  43. package/fesm/interfaces/index.js +75 -7
  44. package/fesm/modules/index.js +546 -1
  45. package/fesm/runtime.js +134 -0
  46. package/fesm/services/index.js +67 -9
  47. package/helpers/auth-response.mapper.d.ts +3 -3
  48. package/helpers/index.d.ts +2 -2
  49. package/helpers/token.helper.d.ts +2 -2
  50. package/index.d.ts +13 -12
  51. package/interceptors/clear-token.interceptor.d.ts +2 -2
  52. package/interceptors/index.d.ts +2 -2
  53. package/interceptors/set-token.interceptor.d.ts +2 -2
  54. package/interfaces/auth-module-options.interface.d.ts +3 -3
  55. package/interfaces/authentication.interface.d.ts +3 -3
  56. package/interfaces/company-branch.interface.d.ts +2 -2
  57. package/interfaces/company.interface.d.ts +1 -1
  58. package/interfaces/index.d.ts +8 -7
  59. package/interfaces/social-auth.interface.d.ts +43 -0
  60. package/interfaces/user-enricher.interface.d.ts +3 -3
  61. package/modules/auth.module.d.ts +4 -4
  62. package/modules/index.d.ts +1 -1
  63. package/package.json +32 -39
  64. package/providers/facebook.social-provider.d.ts +10 -0
  65. package/providers/google.social-provider.d.ts +10 -0
  66. package/providers/index.d.ts +1 -0
  67. package/providers/linkedin.social-provider.d.ts +10 -0
  68. package/providers/microsoft.social-provider.d.ts +10 -0
  69. package/providers/oauth-http.util.d.ts +10 -0
  70. package/providers/social-provider.registry.d.ts +3 -0
  71. package/services/auth-config.service.d.ts +4 -3
  72. package/services/auth-datasource.provider.d.ts +4 -3
  73. package/services/auth-email.service.d.ts +3 -3
  74. package/services/authentication.service.d.ts +15 -11
  75. package/services/branch.service.d.ts +7 -7
  76. package/services/company.service.d.ts +6 -6
  77. package/services/index.d.ts +11 -9
  78. package/services/social-auth-config.service.d.ts +21 -0
  79. package/services/social-auth.service.d.ts +24 -0
  80. package/services/user-permission.service.d.ts +8 -4
  81. package/services/user.service.d.ts +7 -7
  82. package/strategies/jwt.strategy.d.ts +4 -4
  83. package/validators/password.validator.d.ts +1 -1
  84. package/cjs/config/auth.constants.js +0 -41
  85. package/cjs/config/event-actions.js +0 -45
  86. package/cjs/config/index.js +0 -20
  87. package/cjs/config/message-keys.js +0 -108
  88. package/cjs/controllers/authentication.controller.js +0 -427
  89. package/cjs/controllers/authentication.controller.spec.js +0 -219
  90. package/cjs/controllers/branch.controller.js +0 -102
  91. package/cjs/controllers/branch.controller.spec.js +0 -134
  92. package/cjs/controllers/company-selection.controller.js +0 -198
  93. package/cjs/controllers/company-selection.controller.spec.js +0 -84
  94. package/cjs/controllers/company.controller.js +0 -102
  95. package/cjs/controllers/company.controller.spec.js +0 -131
  96. package/cjs/controllers/email-verification.controller.js +0 -224
  97. package/cjs/controllers/email-verification.controller.spec.js +0 -142
  98. package/cjs/controllers/index.js +0 -24
  99. package/cjs/controllers/user-permission.controller.js +0 -223
  100. package/cjs/controllers/user-permission.controller.spec.js +0 -138
  101. package/cjs/controllers/user.controller.js +0 -438
  102. package/cjs/controllers/user.controller.spec.js +0 -204
  103. package/cjs/docs/auth-swagger.config.js +0 -453
  104. package/cjs/docs/auth-swagger.config.spec.js +0 -130
  105. package/cjs/docs/index.js +0 -18
  106. package/cjs/dtos/authentication.dto.js +0 -755
  107. package/cjs/dtos/company-branch.dto.js +0 -294
  108. package/cjs/dtos/company.dto.js +0 -298
  109. package/cjs/dtos/index.js +0 -22
  110. package/cjs/dtos/user-permission.dto.js +0 -358
  111. package/cjs/dtos/user.dto.js +0 -413
  112. package/cjs/entities/app-user.entity.js +0 -25
  113. package/cjs/entities/company-branch.entity.js +0 -163
  114. package/cjs/entities/company.entity.js +0 -146
  115. package/cjs/entities/index.js +0 -65
  116. package/cjs/entities/index.spec.js +0 -73
  117. package/cjs/entities/pending-registration.entity.js +0 -135
  118. package/cjs/entities/user-company-permission.entity.js +0 -153
  119. package/cjs/entities/user-token.entity.js +0 -120
  120. package/cjs/enums/index.js +0 -18
  121. package/cjs/enums/user-org-permission-type.enum.js +0 -15
  122. package/cjs/helpers/auth-response.mapper.js +0 -46
  123. package/cjs/helpers/auth-response.mapper.spec.js +0 -139
  124. package/cjs/helpers/index.js +0 -19
  125. package/cjs/helpers/token.helper.js +0 -58
  126. package/cjs/helpers/token.helper.spec.js +0 -86
  127. package/cjs/index.js +0 -29
  128. package/cjs/interceptors/clear-token.interceptor.js +0 -73
  129. package/cjs/interceptors/clear-token.interceptor.spec.js +0 -107
  130. package/cjs/interceptors/index.js +0 -19
  131. package/cjs/interceptors/set-token.interceptor.js +0 -107
  132. package/cjs/interceptors/set-token.interceptor.spec.js +0 -165
  133. package/cjs/interfaces/auth-email-provider.interface.js +0 -45
  134. package/cjs/interfaces/auth-module-options.interface.js +0 -4
  135. package/cjs/interfaces/authentication.interface.js +0 -4
  136. package/cjs/interfaces/company-branch.interface.js +0 -4
  137. package/cjs/interfaces/company.interface.js +0 -4
  138. package/cjs/interfaces/index.js +0 -24
  139. package/cjs/interfaces/user-enricher.interface.js +0 -4
  140. package/cjs/interfaces/user.interface.js +0 -4
  141. package/cjs/modules/auth.module.js +0 -202
  142. package/cjs/modules/auth.module.spec.js +0 -243
  143. package/cjs/modules/index.js +0 -18
  144. package/cjs/services/auth-config.service.js +0 -110
  145. package/cjs/services/auth-config.service.spec.js +0 -97
  146. package/cjs/services/auth-datasource.provider.js +0 -134
  147. package/cjs/services/auth-datasource.provider.spec.js +0 -161
  148. package/cjs/services/auth-email.service.js +0 -539
  149. package/cjs/services/auth-email.service.spec.js +0 -456
  150. package/cjs/services/authentication.service.js +0 -1173
  151. package/cjs/services/authentication.service.spec.js +0 -962
  152. package/cjs/services/branch.service.js +0 -153
  153. package/cjs/services/branch.service.spec.js +0 -169
  154. package/cjs/services/company-selection-session.service.js +0 -121
  155. package/cjs/services/company-selection-session.service.spec.js +0 -90
  156. package/cjs/services/company.service.js +0 -140
  157. package/cjs/services/company.service.spec.js +0 -127
  158. package/cjs/services/index.js +0 -26
  159. package/cjs/services/user-permission.service.js +0 -236
  160. package/cjs/services/user-permission.service.spec.js +0 -254
  161. package/cjs/services/user.service.js +0 -671
  162. package/cjs/services/user.service.spec.js +0 -718
  163. package/cjs/strategies/jwt.strategy.js +0 -140
  164. package/cjs/strategies/jwt.strategy.spec.js +0 -166
  165. package/cjs/validators/password.validator.js +0 -45
  166. package/cjs/validators/password.validator.spec.js +0 -161
  167. package/fesm/config/auth.constants.js +0 -11
  168. package/fesm/config/event-actions.js +0 -24
  169. package/fesm/config/message-keys.js +0 -78
  170. package/fesm/controllers/authentication.controller.js +0 -417
  171. package/fesm/controllers/authentication.controller.spec.js +0 -215
  172. package/fesm/controllers/branch.controller.js +0 -92
  173. package/fesm/controllers/branch.controller.spec.js +0 -130
  174. package/fesm/controllers/company-selection.controller.js +0 -188
  175. package/fesm/controllers/company-selection.controller.spec.js +0 -80
  176. package/fesm/controllers/company.controller.js +0 -92
  177. package/fesm/controllers/company.controller.spec.js +0 -127
  178. package/fesm/controllers/email-verification.controller.js +0 -214
  179. package/fesm/controllers/email-verification.controller.spec.js +0 -138
  180. package/fesm/controllers/user-permission.controller.js +0 -213
  181. package/fesm/controllers/user-permission.controller.spec.js +0 -134
  182. package/fesm/controllers/user.controller.js +0 -428
  183. package/fesm/controllers/user.controller.spec.js +0 -200
  184. package/fesm/docs/auth-swagger.config.js +0 -446
  185. package/fesm/docs/auth-swagger.config.spec.js +0 -126
  186. package/fesm/dtos/authentication.dto.js +0 -683
  187. package/fesm/dtos/company-branch.dto.js +0 -279
  188. package/fesm/dtos/company.dto.js +0 -283
  189. package/fesm/dtos/user-permission.dto.js +0 -339
  190. package/fesm/dtos/user.dto.js +0 -391
  191. package/fesm/entities/app-user.entity.js +0 -15
  192. package/fesm/entities/company-branch.entity.js +0 -153
  193. package/fesm/entities/company.entity.js +0 -136
  194. package/fesm/entities/index.spec.js +0 -69
  195. package/fesm/entities/pending-registration.entity.js +0 -125
  196. package/fesm/entities/user-company-permission.entity.js +0 -136
  197. package/fesm/entities/user-token.entity.js +0 -104
  198. package/fesm/enums/user-org-permission-type.enum.js +0 -5
  199. package/fesm/helpers/auth-response.mapper.js +0 -25
  200. package/fesm/helpers/auth-response.mapper.spec.js +0 -135
  201. package/fesm/helpers/token.helper.js +0 -40
  202. package/fesm/helpers/token.helper.spec.js +0 -82
  203. package/fesm/interceptors/clear-token.interceptor.js +0 -63
  204. package/fesm/interceptors/clear-token.interceptor.spec.js +0 -103
  205. package/fesm/interceptors/set-token.interceptor.js +0 -98
  206. package/fesm/interceptors/set-token.interceptor.spec.js +0 -161
  207. package/fesm/interfaces/auth-email-provider.interface.js +0 -38
  208. package/fesm/interfaces/auth-module-options.interface.js +0 -3
  209. package/fesm/interfaces/authentication.interface.js +0 -1
  210. package/fesm/interfaces/company-branch.interface.js +0 -1
  211. package/fesm/interfaces/company.interface.js +0 -1
  212. package/fesm/interfaces/user-enricher.interface.js +0 -4
  213. package/fesm/interfaces/user.interface.js +0 -1
  214. package/fesm/modules/auth.module.js +0 -192
  215. package/fesm/modules/auth.module.spec.js +0 -239
  216. package/fesm/services/auth-config.service.js +0 -100
  217. package/fesm/services/auth-config.service.spec.js +0 -93
  218. package/fesm/services/auth-datasource.provider.js +0 -83
  219. package/fesm/services/auth-datasource.provider.spec.js +0 -157
  220. package/fesm/services/auth-email.service.js +0 -488
  221. package/fesm/services/auth-email.service.spec.js +0 -411
  222. package/fesm/services/authentication.service.js +0 -1122
  223. package/fesm/services/authentication.service.spec.js +0 -917
  224. package/fesm/services/branch.service.js +0 -143
  225. package/fesm/services/branch.service.spec.js +0 -165
  226. package/fesm/services/company-selection-session.service.js +0 -111
  227. package/fesm/services/company-selection-session.service.spec.js +0 -86
  228. package/fesm/services/company.service.js +0 -130
  229. package/fesm/services/company.service.spec.js +0 -123
  230. package/fesm/services/user-permission.service.js +0 -226
  231. package/fesm/services/user-permission.service.spec.js +0 -250
  232. package/fesm/services/user.service.js +0 -620
  233. package/fesm/services/user.service.spec.js +0 -673
  234. package/fesm/strategies/jwt.strategy.js +0 -130
  235. package/fesm/strategies/jwt.strategy.spec.js +0 -162
  236. package/fesm/validators/password.validator.js +0 -48
  237. package/fesm/validators/password.validator.spec.js +0 -157
@@ -1,143 +0,0 @@
1
- function _define_property(obj, key, value) {
2
- if (key in obj) {
3
- Object.defineProperty(obj, key, {
4
- value: value,
5
- enumerable: true,
6
- configurable: true,
7
- writable: true
8
- });
9
- } else {
10
- obj[key] = value;
11
- }
12
- return obj;
13
- }
14
- function _ts_decorate(decorators, target, key, desc) {
15
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
16
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
17
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
18
- return c > 3 && r && Object.defineProperty(target, key, r), r;
19
- }
20
- function _ts_metadata(k, v) {
21
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
22
- }
23
- function _ts_param(paramIndex, decorator) {
24
- return function(target, key) {
25
- decorator(target, key, paramIndex);
26
- };
27
- }
28
- import { ApiService, HybridCache } from '@flusys/nestjs-shared/classes';
29
- import { IPermissionSyncAdapter, PERMISSION_SYNC_ADAPTER } from '@flusys/nestjs-shared/interfaces';
30
- import { UtilsService } from '@flusys/nestjs-shared/modules';
31
- import { applyCompanyFilter } from '@flusys/nestjs-shared/utils';
32
- import { ForbiddenException, Inject, Injectable, Optional, Scope } from '@nestjs/common';
33
- import { In, IsNull } from 'typeorm';
34
- import { AUTH_EVENT_ENTITIES, AUTH_EVENT_MODULE, BRANCH_MESSAGES } from '../config';
35
- import { CompanyBranch } from '../entities/company-branch.entity';
36
- import { UserCompanyPermission } from '../entities/user-company-permission.entity';
37
- import { AuthConfigService } from './auth-config.service';
38
- import { AuthDataSourceProvider } from './auth-datasource.provider';
39
- export class BranchService extends ApiService {
40
- async beforeDeleteOperation(dto, user, queryRunner) {
41
- const branchIds = Array.isArray(dto.id) ? dto.id : [
42
- dto.id
43
- ];
44
- await this.ensureDataSourceRepository();
45
- const readonlyBranches = await this.repository.find({
46
- where: {
47
- id: In(branchIds),
48
- readOnly: true,
49
- deletedAt: IsNull()
50
- }
51
- });
52
- if (readonlyBranches.length > 0) {
53
- const names = readonlyBranches.map((b)=>b.name).join(', ');
54
- throw new ForbiddenException({
55
- message: `Cannot delete readonly branch(es): ${names}`,
56
- messageKey: BRANCH_MESSAGES.READONLY_DELETE_FORBIDDEN,
57
- messageVariables: {
58
- names
59
- }
60
- });
61
- }
62
- await queryRunner.manager.getRepository(UserCompanyPermission).delete({
63
- targetId: In(branchIds)
64
- });
65
- if (!this.permissionSyncAdapter?.onBranchDeleted) {
66
- return;
67
- }
68
- const rows = await queryRunner.manager.getRepository(CompanyBranch).find({
69
- where: {
70
- id: In(branchIds)
71
- },
72
- select: [
73
- 'id',
74
- 'companyId'
75
- ]
76
- });
77
- await Promise.all(rows.map((row)=>this.permissionSyncAdapter.onBranchDeleted(row.id, row.companyId)));
78
- }
79
- // Query Customization
80
- async getSelectQuery(query, _user, select) {
81
- if (!select?.length) {
82
- select = [
83
- 'id',
84
- 'name',
85
- 'slug',
86
- 'email',
87
- 'phone',
88
- 'isActive',
89
- 'readOnly',
90
- 'createdAt'
91
- ];
92
- }
93
- query.select(select.map((f)=>`${this.entityName}.${f}`));
94
- return {
95
- query,
96
- isRaw: false
97
- };
98
- }
99
- async getGlobalSearchQuery(query, search) {
100
- query.andWhere('(company_branch.name LIKE :search OR company_branch.slug LIKE :search OR company_branch.email LIKE :search)', {
101
- search: `%${search}%`
102
- });
103
- return {
104
- query,
105
- isRaw: false
106
- };
107
- }
108
- async getExtraManipulateQuery(query, filterDto, user) {
109
- const result = await super.getExtraManipulateQuery(query, filterDto, user);
110
- // Only apply company filter if companyId is NOT explicitly provided in filter
111
- // This prevents dual filtering when user selects a specific company
112
- if (!filterDto?.filter?.companyId) {
113
- applyCompanyFilter(query, {
114
- isCompanyFeatureEnabled: this.authConfig.isCompanyFeatureEnabled(),
115
- entityAlias: 'company_branch',
116
- columnName: 'company_id'
117
- }, user);
118
- }
119
- return result;
120
- }
121
- constructor(cacheManager, utilsService, dataSourceProvider, authConfig, permissionSyncAdapter){
122
- super(AUTH_EVENT_ENTITIES.COMPANY_BRANCH, cacheManager, utilsService, BranchService.name, true, AUTH_EVENT_MODULE, dataSourceProvider, CompanyBranch), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "authConfig", void 0), _define_property(this, "permissionSyncAdapter", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.authConfig = authConfig, this.permissionSyncAdapter = permissionSyncAdapter;
123
- }
124
- }
125
- BranchService = _ts_decorate([
126
- Injectable({
127
- scope: Scope.REQUEST
128
- }),
129
- _ts_param(0, Inject('CACHE_INSTANCE')),
130
- _ts_param(1, Inject(UtilsService)),
131
- _ts_param(2, Inject(AuthDataSourceProvider)),
132
- _ts_param(3, Inject(AuthConfigService)),
133
- _ts_param(4, Optional()),
134
- _ts_param(4, Inject(PERMISSION_SYNC_ADAPTER)),
135
- _ts_metadata("design:type", Function),
136
- _ts_metadata("design:paramtypes", [
137
- typeof HybridCache === "undefined" ? Object : HybridCache,
138
- typeof UtilsService === "undefined" ? Object : UtilsService,
139
- typeof AuthDataSourceProvider === "undefined" ? Object : AuthDataSourceProvider,
140
- typeof AuthConfigService === "undefined" ? Object : AuthConfigService,
141
- typeof IPermissionSyncAdapter === "undefined" ? Object : IPermissionSyncAdapter
142
- ])
143
- ], BranchService);
@@ -1,165 +0,0 @@
1
- import { createMockDataSourceProvider, createMockRepository } from '@test-utils/mocks/repository.mock';
2
- import { BranchService } from './branch.service';
3
- import { CompanyBranch } from '../entities/company-branch.entity';
4
- import { UserCompanyPermission } from '../entities/user-company-permission.entity';
5
- describe('BranchService', ()=>{
6
- let service;
7
- let mockRepo;
8
- let mockAuthConfig;
9
- let mockPermissionSyncAdapter;
10
- let mockQueryRunner;
11
- beforeEach(()=>{
12
- mockRepo = createMockRepository();
13
- mockRepo.find.mockResolvedValue([]);
14
- Object.assign(mockRepo.createQueryBuilder(), {
15
- leftJoinAndSelect: jest.fn().mockReturnThis(),
16
- addOrderBy: jest.fn().mockReturnThis()
17
- });
18
- const mockDataSourceProvider = createMockDataSourceProvider(mockRepo);
19
- mockAuthConfig = {
20
- isCompanyFeatureEnabled: jest.fn().mockReturnValue(false)
21
- };
22
- mockPermissionSyncAdapter = {
23
- onBranchDeleted: jest.fn()
24
- };
25
- service = new BranchService({}, {}, mockDataSourceProvider, mockAuthConfig, mockPermissionSyncAdapter);
26
- const permissionRepo = createMockRepository();
27
- const branchRepo = createMockRepository();
28
- branchRepo.find.mockResolvedValue([]);
29
- mockQueryRunner = {
30
- manager: {
31
- getRepository: jest.fn().mockImplementation((entity)=>{
32
- if (entity === UserCompanyPermission) return permissionRepo;
33
- if (entity === CompanyBranch) return branchRepo;
34
- throw new Error('Unexpected entity');
35
- })
36
- }
37
- };
38
- });
39
- describe('beforeDeleteOperation', ()=>{
40
- it('deletes user permissions targeting the deleted branch ids', async ()=>{
41
- await service.beforeDeleteOperation({
42
- id: [
43
- 'branch-1',
44
- 'branch-2'
45
- ]
46
- }, null, mockQueryRunner);
47
- const permissionRepo = mockQueryRunner.manager.getRepository(UserCompanyPermission);
48
- expect(permissionRepo.delete).toHaveBeenCalledWith({
49
- targetId: expect.anything()
50
- });
51
- });
52
- it('handles a single (non-array) branch id', async ()=>{
53
- await service.beforeDeleteOperation({
54
- id: 'branch-1'
55
- }, null, mockQueryRunner);
56
- const permissionRepo = mockQueryRunner.manager.getRepository(UserCompanyPermission);
57
- expect(permissionRepo.delete).toHaveBeenCalled();
58
- });
59
- it('does nothing further when no permission sync adapter is configured', async ()=>{
60
- service = new BranchService({}, {}, createMockDataSourceProvider(mockRepo), mockAuthConfig, undefined);
61
- await expect(service.beforeDeleteOperation({
62
- id: [
63
- 'branch-1'
64
- ]
65
- }, null, mockQueryRunner)).resolves.toBeUndefined();
66
- });
67
- it('notifies the permission sync adapter for each deleted branch', async ()=>{
68
- const branchRepo = mockQueryRunner.manager.getRepository(CompanyBranch);
69
- branchRepo.find.mockResolvedValue([
70
- {
71
- id: 'branch-1',
72
- companyId: 'company-1'
73
- }
74
- ]);
75
- await service.beforeDeleteOperation({
76
- id: [
77
- 'branch-1'
78
- ]
79
- }, null, mockQueryRunner);
80
- expect(mockPermissionSyncAdapter.onBranchDeleted).toHaveBeenCalledWith('branch-1', 'company-1');
81
- });
82
- it('rejects deleting a readonly branch', async ()=>{
83
- mockRepo.find.mockResolvedValue([
84
- {
85
- id: 'branch-1',
86
- name: 'Default Branch',
87
- readOnly: true
88
- }
89
- ]);
90
- const permissionRepo = mockQueryRunner.manager.getRepository(UserCompanyPermission);
91
- await expect(service.beforeDeleteOperation({
92
- id: 'branch-1'
93
- }, null, mockQueryRunner)).rejects.toThrow('Cannot delete readonly branch');
94
- expect(permissionRepo.delete).not.toHaveBeenCalled();
95
- });
96
- });
97
- describe('getSelectQuery', ()=>{
98
- it('applies the default selected fields when none are provided', async ()=>{
99
- const qb = mockRepo.createQueryBuilder();
100
- const { isRaw } = await service.getSelectQuery(qb, null);
101
- expect(qb.select).toHaveBeenCalledWith(expect.arrayContaining([
102
- 'company_branch.id',
103
- 'company_branch.name',
104
- 'company_branch.slug'
105
- ]));
106
- expect(isRaw).toBe(false);
107
- });
108
- it('honors an explicit select list', async ()=>{
109
- const qb = mockRepo.createQueryBuilder();
110
- await service.getSelectQuery(qb, null, [
111
- 'id',
112
- 'name'
113
- ]);
114
- expect(qb.select).toHaveBeenCalledWith([
115
- 'company_branch.id',
116
- 'company_branch.name'
117
- ]);
118
- });
119
- });
120
- describe('getGlobalSearchQuery', ()=>{
121
- it('adds a LIKE search clause across name/slug/email', async ()=>{
122
- const qb = mockRepo.createQueryBuilder();
123
- await service.getGlobalSearchQuery(qb, 'acme');
124
- expect(qb.andWhere).toHaveBeenCalledWith(expect.stringContaining('company_branch.name LIKE'), {
125
- search: '%acme%'
126
- });
127
- });
128
- });
129
- describe('getExtraManipulateQuery', ()=>{
130
- it('applies a company filter when company feature is enabled and no explicit companyId filter is present', async ()=>{
131
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(true);
132
- const qb = mockRepo.createQueryBuilder();
133
- await service.getExtraManipulateQuery(qb, {
134
- filter: {}
135
- }, {
136
- id: 'user-1',
137
- companyId: 'company-1'
138
- });
139
- expect(qb.andWhere).toHaveBeenCalledWith('company_branch.company_id = :companyId', {
140
- companyId: 'company-1'
141
- });
142
- });
143
- it('does not apply a company filter when companyId is explicitly provided in the filter', async ()=>{
144
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(true);
145
- const qb = mockRepo.createQueryBuilder();
146
- await service.getExtraManipulateQuery(qb, {
147
- filter: {
148
- companyId: 'explicit-company'
149
- }
150
- }, {
151
- id: 'user-1',
152
- companyId: 'company-1'
153
- });
154
- expect(qb.andWhere).not.toHaveBeenCalledWith('company_branch.company_id = :companyId', expect.anything());
155
- });
156
- it('does not apply a company filter when the company feature is disabled', async ()=>{
157
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(false);
158
- const qb = mockRepo.createQueryBuilder();
159
- await service.getExtraManipulateQuery(qb, {
160
- filter: {}
161
- }, null);
162
- expect(qb.andWhere).not.toHaveBeenCalledWith('company_branch.company_id = :companyId', expect.anything());
163
- });
164
- });
165
- });
@@ -1,111 +0,0 @@
1
- function _define_property(obj, key, value) {
2
- if (key in obj) {
3
- Object.defineProperty(obj, key, {
4
- value: value,
5
- enumerable: true,
6
- configurable: true,
7
- writable: true
8
- });
9
- } else {
10
- obj[key] = value;
11
- }
12
- return obj;
13
- }
14
- function _ts_decorate(decorators, target, key, desc) {
15
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
16
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
17
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
18
- return c > 3 && r && Object.defineProperty(target, key, r), r;
19
- }
20
- function _ts_metadata(k, v) {
21
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
22
- }
23
- function _ts_param(paramIndex, decorator) {
24
- return function(target, key) {
25
- decorator(target, key, paramIndex);
26
- };
27
- }
28
- import { LogAction } from '@flusys/nestjs-shared';
29
- import { HybridCache } from '@flusys/nestjs-shared/classes';
30
- import { Inject, Injectable } from '@nestjs/common';
31
- import { randomUUID } from 'crypto';
32
- import { SESSION_CACHE_PREFIX } from '../config/auth.constants';
33
- const SESSION_TTL_MS = 5 * 60 * 1000; // 5 minutes
34
- export class CompanySelectionSessionService {
35
- async createSession(userId) {
36
- const sessionId = randomUUID();
37
- const now = new Date();
38
- const expiresAt = new Date(now.getTime() + SESSION_TTL_MS);
39
- const session = {
40
- sessionId,
41
- userId,
42
- createdAt: now,
43
- expiresAt
44
- };
45
- await this.cacheManager.set(this.getKey(sessionId), session, SESSION_TTL_MS);
46
- return sessionId;
47
- }
48
- /**
49
- * Get session by ID (does not consume/delete)
50
- */ async getSession(sessionId) {
51
- const session = await this.cacheManager.get(this.getKey(sessionId));
52
- if (!session) return null;
53
- // Check if expired (extra safety, cache should handle TTL)
54
- if (new Date() > new Date(session.expiresAt)) {
55
- await this.deleteSession(sessionId);
56
- return null;
57
- }
58
- return session;
59
- }
60
- async consumeSession(sessionId) {
61
- const session = await this.getSession(sessionId);
62
- if (session) {
63
- await this.deleteSession(sessionId);
64
- }
65
- return session;
66
- }
67
- /**
68
- * Delete session
69
- */ async deleteSession(sessionId) {
70
- await this.cacheManager.del(this.getKey(sessionId));
71
- }
72
- /**
73
- * Get cache key for session
74
- */ getKey(sessionId) {
75
- return `${SESSION_CACHE_PREFIX}:${sessionId}`;
76
- }
77
- constructor(cacheManager){
78
- _define_property(this, "cacheManager", void 0);
79
- this.cacheManager = cacheManager;
80
- }
81
- }
82
- _ts_decorate([
83
- LogAction({
84
- action: 'session.create',
85
- module: 'auth'
86
- }),
87
- _ts_metadata("design:type", Function),
88
- _ts_metadata("design:paramtypes", [
89
- String
90
- ]),
91
- _ts_metadata("design:returntype", Promise)
92
- ], CompanySelectionSessionService.prototype, "createSession", null);
93
- _ts_decorate([
94
- LogAction({
95
- action: 'session.consume',
96
- module: 'auth'
97
- }),
98
- _ts_metadata("design:type", Function),
99
- _ts_metadata("design:paramtypes", [
100
- String
101
- ]),
102
- _ts_metadata("design:returntype", Promise)
103
- ], CompanySelectionSessionService.prototype, "consumeSession", null);
104
- CompanySelectionSessionService = _ts_decorate([
105
- Injectable(),
106
- _ts_param(0, Inject('CACHE_INSTANCE')),
107
- _ts_metadata("design:type", Function),
108
- _ts_metadata("design:paramtypes", [
109
- typeof HybridCache === "undefined" ? Object : HybridCache
110
- ])
111
- ], CompanySelectionSessionService);
@@ -1,86 +0,0 @@
1
- import { CompanySelectionSessionService } from './company-selection-session.service';
2
- describe('CompanySelectionSessionService', ()=>{
3
- let service;
4
- let mockCacheManager;
5
- beforeEach(()=>{
6
- mockCacheManager = {
7
- set: jest.fn(),
8
- get: jest.fn(),
9
- del: jest.fn()
10
- };
11
- service = new CompanySelectionSessionService(mockCacheManager);
12
- });
13
- describe('createSession', ()=>{
14
- it('stores a session in the cache and returns a session id', async ()=>{
15
- const sessionId = await service.createSession('user-1');
16
- expect(typeof sessionId).toBe('string');
17
- expect(sessionId.length).toBeGreaterThan(0);
18
- expect(mockCacheManager.set).toHaveBeenCalledWith(`auth:session:${sessionId}`, expect.objectContaining({
19
- sessionId,
20
- userId: 'user-1'
21
- }), 5 * 60 * 1000);
22
- });
23
- it('generates unique session ids on successive calls', async ()=>{
24
- const first = await service.createSession('user-1');
25
- const second = await service.createSession('user-1');
26
- expect(first).not.toBe(second);
27
- });
28
- });
29
- describe('getSession', ()=>{
30
- it('returns null when no session is cached', async ()=>{
31
- mockCacheManager.get.mockResolvedValue(undefined);
32
- const result = await service.getSession('missing-session');
33
- expect(result).toBeNull();
34
- });
35
- it('returns the session when present and not expired', async ()=>{
36
- const session = {
37
- sessionId: 'sess-1',
38
- userId: 'user-1',
39
- createdAt: new Date(),
40
- expiresAt: new Date(Date.now() + 60_000)
41
- };
42
- mockCacheManager.get.mockResolvedValue(session);
43
- const result = await service.getSession('sess-1');
44
- expect(result).toEqual(session);
45
- expect(mockCacheManager.get).toHaveBeenCalledWith('auth:session:sess-1');
46
- });
47
- it('deletes and returns null when the cached session has expired', async ()=>{
48
- const session = {
49
- sessionId: 'sess-1',
50
- userId: 'user-1',
51
- createdAt: new Date(Date.now() - 10 * 60_000),
52
- expiresAt: new Date(Date.now() - 60_000)
53
- };
54
- mockCacheManager.get.mockResolvedValue(session);
55
- const result = await service.getSession('sess-1');
56
- expect(result).toBeNull();
57
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
58
- });
59
- });
60
- describe('consumeSession', ()=>{
61
- it('returns and deletes the session when present', async ()=>{
62
- const session = {
63
- sessionId: 'sess-1',
64
- userId: 'user-1',
65
- createdAt: new Date(),
66
- expiresAt: new Date(Date.now() + 60_000)
67
- };
68
- mockCacheManager.get.mockResolvedValue(session);
69
- const result = await service.consumeSession('sess-1');
70
- expect(result).toEqual(session);
71
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
72
- });
73
- it('returns null and does not delete when session is missing', async ()=>{
74
- mockCacheManager.get.mockResolvedValue(undefined);
75
- const result = await service.consumeSession('missing');
76
- expect(result).toBeNull();
77
- expect(mockCacheManager.del).not.toHaveBeenCalled();
78
- });
79
- });
80
- describe('deleteSession', ()=>{
81
- it('deletes the session by key', async ()=>{
82
- await service.deleteSession('sess-1');
83
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
84
- });
85
- });
86
- });
@@ -1,130 +0,0 @@
1
- function _define_property(obj, key, value) {
2
- if (key in obj) {
3
- Object.defineProperty(obj, key, {
4
- value: value,
5
- enumerable: true,
6
- configurable: true,
7
- writable: true
8
- });
9
- } else {
10
- obj[key] = value;
11
- }
12
- return obj;
13
- }
14
- function _ts_decorate(decorators, target, key, desc) {
15
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
16
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
17
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
18
- return c > 3 && r && Object.defineProperty(target, key, r), r;
19
- }
20
- function _ts_metadata(k, v) {
21
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
22
- }
23
- function _ts_param(paramIndex, decorator) {
24
- return function(target, key) {
25
- decorator(target, key, paramIndex);
26
- };
27
- }
28
- import { ApiService, HybridCache } from '@flusys/nestjs-shared/classes';
29
- import { IPermissionSyncAdapter, PERMISSION_SYNC_ADAPTER } from '@flusys/nestjs-shared/interfaces';
30
- import { UtilsService } from '@flusys/nestjs-shared/modules';
31
- import { ForbiddenException, Inject, Injectable, Optional, Scope } from '@nestjs/common';
32
- import { In, IsNull } from 'typeorm';
33
- import { AUTH_EVENT_ENTITIES, AUTH_EVENT_MODULE, COMPANY_MESSAGES } from '../config';
34
- import { CompanyBranch } from '../entities/company-branch.entity';
35
- import { Company } from '../entities/company.entity';
36
- import { UserCompanyPermission } from '../entities/user-company-permission.entity';
37
- import { AuthDataSourceProvider } from './auth-datasource.provider';
38
- export class CompanyService extends ApiService {
39
- async beforeDeleteOperation(dto, user, queryRunner) {
40
- const companyIds = Array.isArray(dto.id) ? dto.id : [
41
- dto.id
42
- ];
43
- await this.ensureDataSourceRepository();
44
- const readonlyCompanies = await this.repository.find({
45
- where: {
46
- id: In(companyIds),
47
- readOnly: true,
48
- deletedAt: IsNull()
49
- }
50
- });
51
- if (readonlyCompanies.length > 0) {
52
- const names = readonlyCompanies.map((c)=>c.name).join(', ');
53
- throw new ForbiddenException({
54
- message: `Cannot delete readonly company(ies): ${names}`,
55
- messageKey: COMPANY_MESSAGES.READONLY_DELETE_FORBIDDEN,
56
- messageVariables: {
57
- names
58
- }
59
- });
60
- }
61
- const branchRows = await queryRunner.manager.getRepository(CompanyBranch).find({
62
- where: {
63
- companyId: In(companyIds)
64
- },
65
- select: [
66
- 'id'
67
- ]
68
- });
69
- const targetIds = [
70
- ...companyIds,
71
- ...branchRows.map((row)=>row.id)
72
- ];
73
- await queryRunner.manager.getRepository(UserCompanyPermission).delete({
74
- targetId: In(targetIds)
75
- });
76
- if (!this.permissionSyncAdapter?.onCompanyDeleted) {
77
- return;
78
- }
79
- await Promise.all(companyIds.map((companyId)=>this.permissionSyncAdapter.onCompanyDeleted(companyId)));
80
- }
81
- // Query Customization
82
- async getSelectQuery(query, _user, select) {
83
- if (!select?.length) {
84
- select = [
85
- 'id',
86
- 'name',
87
- 'slug',
88
- 'email',
89
- 'phone',
90
- 'isActive',
91
- 'readOnly',
92
- 'createdAt'
93
- ];
94
- }
95
- query.select(select.map((f)=>`${this.entityName}.${f}`));
96
- return {
97
- query,
98
- isRaw: false
99
- };
100
- }
101
- async getGlobalSearchQuery(query, search) {
102
- query.andWhere('(company.name LIKE :search OR company.slug LIKE :search OR company.email LIKE :search)', {
103
- search: `%${search}%`
104
- });
105
- return {
106
- query,
107
- isRaw: false
108
- };
109
- }
110
- constructor(cacheManager, utilsService, dataSourceProvider, permissionSyncAdapter){
111
- super(AUTH_EVENT_ENTITIES.COMPANY, cacheManager, utilsService, CompanyService.name, true, AUTH_EVENT_MODULE, dataSourceProvider, Company), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "permissionSyncAdapter", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.permissionSyncAdapter = permissionSyncAdapter;
112
- }
113
- }
114
- CompanyService = _ts_decorate([
115
- Injectable({
116
- scope: Scope.REQUEST
117
- }),
118
- _ts_param(0, Inject('CACHE_INSTANCE')),
119
- _ts_param(1, Inject(UtilsService)),
120
- _ts_param(2, Inject(AuthDataSourceProvider)),
121
- _ts_param(3, Optional()),
122
- _ts_param(3, Inject(PERMISSION_SYNC_ADAPTER)),
123
- _ts_metadata("design:type", Function),
124
- _ts_metadata("design:paramtypes", [
125
- typeof HybridCache === "undefined" ? Object : HybridCache,
126
- typeof UtilsService === "undefined" ? Object : UtilsService,
127
- typeof AuthDataSourceProvider === "undefined" ? Object : AuthDataSourceProvider,
128
- typeof IPermissionSyncAdapter === "undefined" ? Object : IPermissionSyncAdapter
129
- ])
130
- ], CompanyService);