@flusys/nestjs-auth 7.1.0 → 8.0.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (270) hide show
  1. package/README.md +1 -1
  2. package/config/index.d.ts +3 -3
  3. package/config/message-keys.d.ts +2 -0
  4. package/controllers/authentication.controller.d.ts +5 -5
  5. package/controllers/branch.controller.d.ts +2 -2
  6. package/controllers/company-selection.controller.d.ts +4 -4
  7. package/controllers/company.controller.d.ts +2 -2
  8. package/controllers/email-verification.controller.d.ts +6 -6
  9. package/controllers/index.d.ts +9 -9
  10. package/controllers/social-auth-config.controller.d.ts +2 -2
  11. package/controllers/social-auth.controller.d.ts +3 -3
  12. package/controllers/user-permission.controller.d.ts +5 -4
  13. package/controllers/user.controller.d.ts +7 -7
  14. package/docs/auth-swagger.config.d.ts +2 -2
  15. package/docs/index.d.ts +1 -1
  16. package/dtos/index.d.ts +6 -6
  17. package/dtos/social-auth.dto.d.ts +1 -1
  18. package/entities/company-branch.entity.d.ts +1 -1
  19. package/entities/company.entity.d.ts +1 -1
  20. package/entities/index.d.ts +14 -14
  21. package/entities/pending-registration.entity.d.ts +1 -1
  22. package/entities/user-company-permission.entity.d.ts +4 -4
  23. package/enums/index.d.ts +2 -2
  24. package/fesm/118.js +1230 -0
  25. package/fesm/120.js +2197 -0
  26. package/fesm/24.js +4389 -0
  27. package/fesm/370.js +1163 -0
  28. package/fesm/446.js +877 -0
  29. package/fesm/chunks/117.js +69 -0
  30. package/fesm/config/index.js +244 -3
  31. package/fesm/controllers/index.js +27 -9
  32. package/fesm/docs/index.js +479 -1
  33. package/fesm/dtos/index.js +123 -6
  34. package/fesm/entities/index.js +68 -22
  35. package/fesm/enums/index.js +53 -2
  36. package/fesm/helpers/index.js +115 -2
  37. package/fesm/index.js +1437 -13
  38. package/fesm/interceptors/index.js +508 -2
  39. package/fesm/interfaces/index.js +75 -8
  40. package/fesm/modules/index.js +546 -1
  41. package/fesm/runtime.js +134 -0
  42. package/fesm/services/index.js +67 -11
  43. package/helpers/auth-response.mapper.d.ts +3 -3
  44. package/helpers/index.d.ts +2 -2
  45. package/helpers/token.helper.d.ts +2 -2
  46. package/index.d.ts +13 -13
  47. package/interceptors/clear-token.interceptor.d.ts +2 -2
  48. package/interceptors/index.d.ts +2 -2
  49. package/interceptors/set-token.interceptor.d.ts +2 -2
  50. package/interfaces/auth-module-options.interface.d.ts +3 -3
  51. package/interfaces/authentication.interface.d.ts +3 -3
  52. package/interfaces/company-branch.interface.d.ts +2 -2
  53. package/interfaces/company.interface.d.ts +1 -1
  54. package/interfaces/index.d.ts +8 -8
  55. package/interfaces/social-auth.interface.d.ts +2 -2
  56. package/interfaces/user-enricher.interface.d.ts +3 -3
  57. package/modules/auth.module.d.ts +4 -4
  58. package/modules/index.d.ts +1 -1
  59. package/package.json +32 -39
  60. package/providers/facebook.social-provider.d.ts +2 -2
  61. package/providers/google.social-provider.d.ts +2 -2
  62. package/providers/index.d.ts +1 -1
  63. package/providers/linkedin.social-provider.d.ts +2 -2
  64. package/providers/microsoft.social-provider.d.ts +2 -2
  65. package/providers/social-provider.registry.d.ts +2 -2
  66. package/services/auth-config.service.d.ts +3 -3
  67. package/services/auth-datasource.provider.d.ts +3 -3
  68. package/services/auth-email.service.d.ts +3 -3
  69. package/services/authentication.service.d.ts +12 -12
  70. package/services/branch.service.d.ts +7 -7
  71. package/services/company.service.d.ts +6 -6
  72. package/services/index.d.ts +11 -11
  73. package/services/social-auth-config.service.d.ts +6 -6
  74. package/services/social-auth.service.d.ts +5 -5
  75. package/services/user-permission.service.d.ts +8 -4
  76. package/services/user.service.d.ts +7 -7
  77. package/strategies/jwt.strategy.d.ts +4 -4
  78. package/validators/password.validator.d.ts +1 -1
  79. package/cjs/config/auth.constants.js +0 -49
  80. package/cjs/config/event-actions.js +0 -47
  81. package/cjs/config/index.js +0 -20
  82. package/cjs/config/message-keys.js +0 -135
  83. package/cjs/controllers/authentication.controller.js +0 -427
  84. package/cjs/controllers/authentication.controller.spec.js +0 -219
  85. package/cjs/controllers/branch.controller.js +0 -102
  86. package/cjs/controllers/branch.controller.spec.js +0 -134
  87. package/cjs/controllers/company-selection.controller.js +0 -198
  88. package/cjs/controllers/company-selection.controller.spec.js +0 -84
  89. package/cjs/controllers/company.controller.js +0 -102
  90. package/cjs/controllers/company.controller.spec.js +0 -131
  91. package/cjs/controllers/email-verification.controller.js +0 -224
  92. package/cjs/controllers/email-verification.controller.spec.js +0 -142
  93. package/cjs/controllers/index.js +0 -26
  94. package/cjs/controllers/social-auth-config.controller.js +0 -107
  95. package/cjs/controllers/social-auth.controller.js +0 -175
  96. package/cjs/controllers/social-auth.controller.spec.js +0 -79
  97. package/cjs/controllers/user-permission.controller.js +0 -223
  98. package/cjs/controllers/user-permission.controller.spec.js +0 -138
  99. package/cjs/controllers/user.controller.js +0 -438
  100. package/cjs/controllers/user.controller.spec.js +0 -204
  101. package/cjs/docs/auth-swagger.config.js +0 -461
  102. package/cjs/docs/auth-swagger.config.spec.js +0 -130
  103. package/cjs/docs/index.js +0 -18
  104. package/cjs/dtos/authentication.dto.js +0 -755
  105. package/cjs/dtos/company-branch.dto.js +0 -294
  106. package/cjs/dtos/company.dto.js +0 -298
  107. package/cjs/dtos/index.js +0 -23
  108. package/cjs/dtos/social-auth.dto.js +0 -318
  109. package/cjs/dtos/user-permission.dto.js +0 -358
  110. package/cjs/dtos/user.dto.js +0 -413
  111. package/cjs/entities/app-user.entity.js +0 -25
  112. package/cjs/entities/company-branch.entity.js +0 -163
  113. package/cjs/entities/company.entity.js +0 -146
  114. package/cjs/entities/index.js +0 -67
  115. package/cjs/entities/index.spec.js +0 -84
  116. package/cjs/entities/pending-registration.entity.js +0 -135
  117. package/cjs/entities/social-auth-config.entity.js +0 -102
  118. package/cjs/entities/user-company-permission.entity.js +0 -153
  119. package/cjs/entities/user-token.entity.js +0 -120
  120. package/cjs/enums/index.js +0 -19
  121. package/cjs/enums/social-provider-type.enum.js +0 -17
  122. package/cjs/enums/user-org-permission-type.enum.js +0 -15
  123. package/cjs/helpers/auth-response.mapper.js +0 -46
  124. package/cjs/helpers/auth-response.mapper.spec.js +0 -139
  125. package/cjs/helpers/index.js +0 -19
  126. package/cjs/helpers/token.helper.js +0 -58
  127. package/cjs/helpers/token.helper.spec.js +0 -86
  128. package/cjs/index.js +0 -30
  129. package/cjs/interceptors/clear-token.interceptor.js +0 -73
  130. package/cjs/interceptors/clear-token.interceptor.spec.js +0 -107
  131. package/cjs/interceptors/index.js +0 -19
  132. package/cjs/interceptors/set-token.interceptor.js +0 -107
  133. package/cjs/interceptors/set-token.interceptor.spec.js +0 -165
  134. package/cjs/interfaces/auth-email-provider.interface.js +0 -45
  135. package/cjs/interfaces/auth-module-options.interface.js +0 -4
  136. package/cjs/interfaces/authentication.interface.js +0 -4
  137. package/cjs/interfaces/company-branch.interface.js +0 -4
  138. package/cjs/interfaces/company.interface.js +0 -4
  139. package/cjs/interfaces/index.js +0 -25
  140. package/cjs/interfaces/social-auth.interface.js +0 -4
  141. package/cjs/interfaces/user-enricher.interface.js +0 -4
  142. package/cjs/interfaces/user.interface.js +0 -4
  143. package/cjs/modules/auth.module.js +0 -208
  144. package/cjs/modules/auth.module.spec.js +0 -258
  145. package/cjs/modules/index.js +0 -18
  146. package/cjs/providers/facebook.social-provider.js +0 -73
  147. package/cjs/providers/google.social-provider.js +0 -68
  148. package/cjs/providers/index.js +0 -18
  149. package/cjs/providers/linkedin.social-provider.js +0 -66
  150. package/cjs/providers/microsoft.social-provider.js +0 -78
  151. package/cjs/providers/oauth-http.util.js +0 -107
  152. package/cjs/providers/social-provider.registry.js +0 -24
  153. package/cjs/providers/social-provider.registry.spec.js +0 -135
  154. package/cjs/services/auth-config.service.js +0 -113
  155. package/cjs/services/auth-config.service.spec.js +0 -100
  156. package/cjs/services/auth-datasource.provider.js +0 -138
  157. package/cjs/services/auth-datasource.provider.spec.js +0 -191
  158. package/cjs/services/auth-email.service.js +0 -539
  159. package/cjs/services/auth-email.service.spec.js +0 -456
  160. package/cjs/services/authentication.service.js +0 -1203
  161. package/cjs/services/authentication.service.spec.js +0 -1020
  162. package/cjs/services/branch.service.js +0 -153
  163. package/cjs/services/branch.service.spec.js +0 -169
  164. package/cjs/services/company-selection-session.service.js +0 -121
  165. package/cjs/services/company-selection-session.service.spec.js +0 -90
  166. package/cjs/services/company.service.js +0 -140
  167. package/cjs/services/company.service.spec.js +0 -127
  168. package/cjs/services/index.js +0 -28
  169. package/cjs/services/social-auth-config.service.js +0 -103
  170. package/cjs/services/social-auth-config.service.spec.js +0 -71
  171. package/cjs/services/social-auth.service.js +0 -310
  172. package/cjs/services/social-auth.service.spec.js +0 -310
  173. package/cjs/services/user-permission.service.js +0 -236
  174. package/cjs/services/user-permission.service.spec.js +0 -254
  175. package/cjs/services/user.service.js +0 -671
  176. package/cjs/services/user.service.spec.js +0 -718
  177. package/cjs/strategies/jwt.strategy.js +0 -140
  178. package/cjs/strategies/jwt.strategy.spec.js +0 -166
  179. package/cjs/validators/password.validator.js +0 -45
  180. package/cjs/validators/password.validator.spec.js +0 -161
  181. package/fesm/config/auth.constants.js +0 -14
  182. package/fesm/config/event-actions.js +0 -26
  183. package/fesm/config/message-keys.js +0 -99
  184. package/fesm/controllers/authentication.controller.js +0 -417
  185. package/fesm/controllers/authentication.controller.spec.js +0 -215
  186. package/fesm/controllers/branch.controller.js +0 -92
  187. package/fesm/controllers/branch.controller.spec.js +0 -130
  188. package/fesm/controllers/company-selection.controller.js +0 -188
  189. package/fesm/controllers/company-selection.controller.spec.js +0 -80
  190. package/fesm/controllers/company.controller.js +0 -92
  191. package/fesm/controllers/company.controller.spec.js +0 -127
  192. package/fesm/controllers/email-verification.controller.js +0 -214
  193. package/fesm/controllers/email-verification.controller.spec.js +0 -138
  194. package/fesm/controllers/social-auth-config.controller.js +0 -97
  195. package/fesm/controllers/social-auth.controller.js +0 -165
  196. package/fesm/controllers/social-auth.controller.spec.js +0 -75
  197. package/fesm/controllers/user-permission.controller.js +0 -213
  198. package/fesm/controllers/user-permission.controller.spec.js +0 -134
  199. package/fesm/controllers/user.controller.js +0 -428
  200. package/fesm/controllers/user.controller.spec.js +0 -200
  201. package/fesm/docs/auth-swagger.config.js +0 -454
  202. package/fesm/docs/auth-swagger.config.spec.js +0 -126
  203. package/fesm/dtos/authentication.dto.js +0 -683
  204. package/fesm/dtos/company-branch.dto.js +0 -279
  205. package/fesm/dtos/company.dto.js +0 -283
  206. package/fesm/dtos/social-auth.dto.js +0 -282
  207. package/fesm/dtos/user-permission.dto.js +0 -339
  208. package/fesm/dtos/user.dto.js +0 -391
  209. package/fesm/entities/app-user.entity.js +0 -15
  210. package/fesm/entities/company-branch.entity.js +0 -153
  211. package/fesm/entities/company.entity.js +0 -136
  212. package/fesm/entities/index.spec.js +0 -80
  213. package/fesm/entities/pending-registration.entity.js +0 -125
  214. package/fesm/entities/social-auth-config.entity.js +0 -92
  215. package/fesm/entities/user-company-permission.entity.js +0 -136
  216. package/fesm/entities/user-token.entity.js +0 -104
  217. package/fesm/enums/social-provider-type.enum.js +0 -7
  218. package/fesm/enums/user-org-permission-type.enum.js +0 -5
  219. package/fesm/helpers/auth-response.mapper.js +0 -25
  220. package/fesm/helpers/auth-response.mapper.spec.js +0 -135
  221. package/fesm/helpers/token.helper.js +0 -40
  222. package/fesm/helpers/token.helper.spec.js +0 -82
  223. package/fesm/interceptors/clear-token.interceptor.js +0 -63
  224. package/fesm/interceptors/clear-token.interceptor.spec.js +0 -103
  225. package/fesm/interceptors/set-token.interceptor.js +0 -98
  226. package/fesm/interceptors/set-token.interceptor.spec.js +0 -161
  227. package/fesm/interfaces/auth-email-provider.interface.js +0 -38
  228. package/fesm/interfaces/auth-module-options.interface.js +0 -3
  229. package/fesm/interfaces/authentication.interface.js +0 -1
  230. package/fesm/interfaces/company-branch.interface.js +0 -1
  231. package/fesm/interfaces/company.interface.js +0 -1
  232. package/fesm/interfaces/social-auth.interface.js +0 -1
  233. package/fesm/interfaces/user-enricher.interface.js +0 -4
  234. package/fesm/interfaces/user.interface.js +0 -1
  235. package/fesm/modules/auth.module.js +0 -198
  236. package/fesm/modules/auth.module.spec.js +0 -254
  237. package/fesm/providers/facebook.social-provider.js +0 -63
  238. package/fesm/providers/google.social-provider.js +0 -58
  239. package/fesm/providers/index.js +0 -1
  240. package/fesm/providers/linkedin.social-provider.js +0 -56
  241. package/fesm/providers/microsoft.social-provider.js +0 -68
  242. package/fesm/providers/oauth-http.util.js +0 -77
  243. package/fesm/providers/social-provider.registry.js +0 -14
  244. package/fesm/providers/social-provider.registry.spec.js +0 -131
  245. package/fesm/services/auth-config.service.js +0 -103
  246. package/fesm/services/auth-config.service.spec.js +0 -96
  247. package/fesm/services/auth-datasource.provider.js +0 -87
  248. package/fesm/services/auth-datasource.provider.spec.js +0 -187
  249. package/fesm/services/auth-email.service.js +0 -488
  250. package/fesm/services/auth-email.service.spec.js +0 -411
  251. package/fesm/services/authentication.service.js +0 -1152
  252. package/fesm/services/authentication.service.spec.js +0 -975
  253. package/fesm/services/branch.service.js +0 -143
  254. package/fesm/services/branch.service.spec.js +0 -165
  255. package/fesm/services/company-selection-session.service.js +0 -111
  256. package/fesm/services/company-selection-session.service.spec.js +0 -86
  257. package/fesm/services/company.service.js +0 -130
  258. package/fesm/services/company.service.spec.js +0 -123
  259. package/fesm/services/social-auth-config.service.js +0 -93
  260. package/fesm/services/social-auth-config.service.spec.js +0 -67
  261. package/fesm/services/social-auth.service.js +0 -300
  262. package/fesm/services/social-auth.service.spec.js +0 -265
  263. package/fesm/services/user-permission.service.js +0 -226
  264. package/fesm/services/user-permission.service.spec.js +0 -250
  265. package/fesm/services/user.service.js +0 -620
  266. package/fesm/services/user.service.spec.js +0 -673
  267. package/fesm/strategies/jwt.strategy.js +0 -130
  268. package/fesm/strategies/jwt.strategy.spec.js +0 -162
  269. package/fesm/validators/password.validator.js +0 -48
  270. package/fesm/validators/password.validator.spec.js +0 -157
@@ -1,143 +0,0 @@
1
- function _define_property(obj, key, value) {
2
- if (key in obj) {
3
- Object.defineProperty(obj, key, {
4
- value: value,
5
- enumerable: true,
6
- configurable: true,
7
- writable: true
8
- });
9
- } else {
10
- obj[key] = value;
11
- }
12
- return obj;
13
- }
14
- function _ts_decorate(decorators, target, key, desc) {
15
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
16
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
17
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
18
- return c > 3 && r && Object.defineProperty(target, key, r), r;
19
- }
20
- function _ts_metadata(k, v) {
21
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
22
- }
23
- function _ts_param(paramIndex, decorator) {
24
- return function(target, key) {
25
- decorator(target, key, paramIndex);
26
- };
27
- }
28
- import { ApiService, HybridCache } from '@flusys/nestjs-shared/classes';
29
- import { IPermissionSyncAdapter, PERMISSION_SYNC_ADAPTER } from '@flusys/nestjs-shared/interfaces';
30
- import { UtilsService } from '@flusys/nestjs-shared/modules';
31
- import { applyCompanyFilter } from '@flusys/nestjs-shared/utils';
32
- import { ForbiddenException, Inject, Injectable, Optional, Scope } from '@nestjs/common';
33
- import { In, IsNull } from 'typeorm';
34
- import { AUTH_EVENT_ENTITIES, AUTH_EVENT_MODULE, BRANCH_MESSAGES } from '../config';
35
- import { CompanyBranch } from '../entities/company-branch.entity';
36
- import { UserCompanyPermission } from '../entities/user-company-permission.entity';
37
- import { AuthConfigService } from './auth-config.service';
38
- import { AuthDataSourceProvider } from './auth-datasource.provider';
39
- export class BranchService extends ApiService {
40
- async beforeDeleteOperation(dto, user, queryRunner) {
41
- const branchIds = Array.isArray(dto.id) ? dto.id : [
42
- dto.id
43
- ];
44
- await this.ensureDataSourceRepository();
45
- const readonlyBranches = await this.repository.find({
46
- where: {
47
- id: In(branchIds),
48
- readOnly: true,
49
- deletedAt: IsNull()
50
- }
51
- });
52
- if (readonlyBranches.length > 0) {
53
- const names = readonlyBranches.map((b)=>b.name).join(', ');
54
- throw new ForbiddenException({
55
- message: `Cannot delete readonly branch(es): ${names}`,
56
- messageKey: BRANCH_MESSAGES.READONLY_DELETE_FORBIDDEN,
57
- messageVariables: {
58
- names
59
- }
60
- });
61
- }
62
- await queryRunner.manager.getRepository(UserCompanyPermission).delete({
63
- targetId: In(branchIds)
64
- });
65
- if (!this.permissionSyncAdapter?.onBranchDeleted) {
66
- return;
67
- }
68
- const rows = await queryRunner.manager.getRepository(CompanyBranch).find({
69
- where: {
70
- id: In(branchIds)
71
- },
72
- select: [
73
- 'id',
74
- 'companyId'
75
- ]
76
- });
77
- await Promise.all(rows.map((row)=>this.permissionSyncAdapter.onBranchDeleted(row.id, row.companyId)));
78
- }
79
- // Query Customization
80
- async getSelectQuery(query, _user, select) {
81
- if (!select?.length) {
82
- select = [
83
- 'id',
84
- 'name',
85
- 'slug',
86
- 'email',
87
- 'phone',
88
- 'isActive',
89
- 'readOnly',
90
- 'createdAt'
91
- ];
92
- }
93
- query.select(select.map((f)=>`${this.entityName}.${f}`));
94
- return {
95
- query,
96
- isRaw: false
97
- };
98
- }
99
- async getGlobalSearchQuery(query, search) {
100
- query.andWhere('(company_branch.name LIKE :search OR company_branch.slug LIKE :search OR company_branch.email LIKE :search)', {
101
- search: `%${search}%`
102
- });
103
- return {
104
- query,
105
- isRaw: false
106
- };
107
- }
108
- async getExtraManipulateQuery(query, filterDto, user) {
109
- const result = await super.getExtraManipulateQuery(query, filterDto, user);
110
- // Only apply company filter if companyId is NOT explicitly provided in filter
111
- // This prevents dual filtering when user selects a specific company
112
- if (!filterDto?.filter?.companyId) {
113
- applyCompanyFilter(query, {
114
- isCompanyFeatureEnabled: this.authConfig.isCompanyFeatureEnabled(),
115
- entityAlias: 'company_branch',
116
- columnName: 'company_id'
117
- }, user);
118
- }
119
- return result;
120
- }
121
- constructor(cacheManager, utilsService, dataSourceProvider, authConfig, permissionSyncAdapter){
122
- super(AUTH_EVENT_ENTITIES.COMPANY_BRANCH, cacheManager, utilsService, BranchService.name, true, AUTH_EVENT_MODULE, dataSourceProvider, CompanyBranch), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "authConfig", void 0), _define_property(this, "permissionSyncAdapter", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.authConfig = authConfig, this.permissionSyncAdapter = permissionSyncAdapter;
123
- }
124
- }
125
- BranchService = _ts_decorate([
126
- Injectable({
127
- scope: Scope.REQUEST
128
- }),
129
- _ts_param(0, Inject('CACHE_INSTANCE')),
130
- _ts_param(1, Inject(UtilsService)),
131
- _ts_param(2, Inject(AuthDataSourceProvider)),
132
- _ts_param(3, Inject(AuthConfigService)),
133
- _ts_param(4, Optional()),
134
- _ts_param(4, Inject(PERMISSION_SYNC_ADAPTER)),
135
- _ts_metadata("design:type", Function),
136
- _ts_metadata("design:paramtypes", [
137
- typeof HybridCache === "undefined" ? Object : HybridCache,
138
- typeof UtilsService === "undefined" ? Object : UtilsService,
139
- typeof AuthDataSourceProvider === "undefined" ? Object : AuthDataSourceProvider,
140
- typeof AuthConfigService === "undefined" ? Object : AuthConfigService,
141
- typeof IPermissionSyncAdapter === "undefined" ? Object : IPermissionSyncAdapter
142
- ])
143
- ], BranchService);
@@ -1,165 +0,0 @@
1
- import { createMockDataSourceProvider, createMockRepository } from '@test-utils/mocks/repository.mock';
2
- import { BranchService } from './branch.service';
3
- import { CompanyBranch } from '../entities/company-branch.entity';
4
- import { UserCompanyPermission } from '../entities/user-company-permission.entity';
5
- describe('BranchService', ()=>{
6
- let service;
7
- let mockRepo;
8
- let mockAuthConfig;
9
- let mockPermissionSyncAdapter;
10
- let mockQueryRunner;
11
- beforeEach(()=>{
12
- mockRepo = createMockRepository();
13
- mockRepo.find.mockResolvedValue([]);
14
- Object.assign(mockRepo.createQueryBuilder(), {
15
- leftJoinAndSelect: jest.fn().mockReturnThis(),
16
- addOrderBy: jest.fn().mockReturnThis()
17
- });
18
- const mockDataSourceProvider = createMockDataSourceProvider(mockRepo);
19
- mockAuthConfig = {
20
- isCompanyFeatureEnabled: jest.fn().mockReturnValue(false)
21
- };
22
- mockPermissionSyncAdapter = {
23
- onBranchDeleted: jest.fn()
24
- };
25
- service = new BranchService({}, {}, mockDataSourceProvider, mockAuthConfig, mockPermissionSyncAdapter);
26
- const permissionRepo = createMockRepository();
27
- const branchRepo = createMockRepository();
28
- branchRepo.find.mockResolvedValue([]);
29
- mockQueryRunner = {
30
- manager: {
31
- getRepository: jest.fn().mockImplementation((entity)=>{
32
- if (entity === UserCompanyPermission) return permissionRepo;
33
- if (entity === CompanyBranch) return branchRepo;
34
- throw new Error('Unexpected entity');
35
- })
36
- }
37
- };
38
- });
39
- describe('beforeDeleteOperation', ()=>{
40
- it('deletes user permissions targeting the deleted branch ids', async ()=>{
41
- await service.beforeDeleteOperation({
42
- id: [
43
- 'branch-1',
44
- 'branch-2'
45
- ]
46
- }, null, mockQueryRunner);
47
- const permissionRepo = mockQueryRunner.manager.getRepository(UserCompanyPermission);
48
- expect(permissionRepo.delete).toHaveBeenCalledWith({
49
- targetId: expect.anything()
50
- });
51
- });
52
- it('handles a single (non-array) branch id', async ()=>{
53
- await service.beforeDeleteOperation({
54
- id: 'branch-1'
55
- }, null, mockQueryRunner);
56
- const permissionRepo = mockQueryRunner.manager.getRepository(UserCompanyPermission);
57
- expect(permissionRepo.delete).toHaveBeenCalled();
58
- });
59
- it('does nothing further when no permission sync adapter is configured', async ()=>{
60
- service = new BranchService({}, {}, createMockDataSourceProvider(mockRepo), mockAuthConfig, undefined);
61
- await expect(service.beforeDeleteOperation({
62
- id: [
63
- 'branch-1'
64
- ]
65
- }, null, mockQueryRunner)).resolves.toBeUndefined();
66
- });
67
- it('notifies the permission sync adapter for each deleted branch', async ()=>{
68
- const branchRepo = mockQueryRunner.manager.getRepository(CompanyBranch);
69
- branchRepo.find.mockResolvedValue([
70
- {
71
- id: 'branch-1',
72
- companyId: 'company-1'
73
- }
74
- ]);
75
- await service.beforeDeleteOperation({
76
- id: [
77
- 'branch-1'
78
- ]
79
- }, null, mockQueryRunner);
80
- expect(mockPermissionSyncAdapter.onBranchDeleted).toHaveBeenCalledWith('branch-1', 'company-1');
81
- });
82
- it('rejects deleting a readonly branch', async ()=>{
83
- mockRepo.find.mockResolvedValue([
84
- {
85
- id: 'branch-1',
86
- name: 'Default Branch',
87
- readOnly: true
88
- }
89
- ]);
90
- const permissionRepo = mockQueryRunner.manager.getRepository(UserCompanyPermission);
91
- await expect(service.beforeDeleteOperation({
92
- id: 'branch-1'
93
- }, null, mockQueryRunner)).rejects.toThrow('Cannot delete readonly branch');
94
- expect(permissionRepo.delete).not.toHaveBeenCalled();
95
- });
96
- });
97
- describe('getSelectQuery', ()=>{
98
- it('applies the default selected fields when none are provided', async ()=>{
99
- const qb = mockRepo.createQueryBuilder();
100
- const { isRaw } = await service.getSelectQuery(qb, null);
101
- expect(qb.select).toHaveBeenCalledWith(expect.arrayContaining([
102
- 'company_branch.id',
103
- 'company_branch.name',
104
- 'company_branch.slug'
105
- ]));
106
- expect(isRaw).toBe(false);
107
- });
108
- it('honors an explicit select list', async ()=>{
109
- const qb = mockRepo.createQueryBuilder();
110
- await service.getSelectQuery(qb, null, [
111
- 'id',
112
- 'name'
113
- ]);
114
- expect(qb.select).toHaveBeenCalledWith([
115
- 'company_branch.id',
116
- 'company_branch.name'
117
- ]);
118
- });
119
- });
120
- describe('getGlobalSearchQuery', ()=>{
121
- it('adds a LIKE search clause across name/slug/email', async ()=>{
122
- const qb = mockRepo.createQueryBuilder();
123
- await service.getGlobalSearchQuery(qb, 'acme');
124
- expect(qb.andWhere).toHaveBeenCalledWith(expect.stringContaining('company_branch.name LIKE'), {
125
- search: '%acme%'
126
- });
127
- });
128
- });
129
- describe('getExtraManipulateQuery', ()=>{
130
- it('applies a company filter when company feature is enabled and no explicit companyId filter is present', async ()=>{
131
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(true);
132
- const qb = mockRepo.createQueryBuilder();
133
- await service.getExtraManipulateQuery(qb, {
134
- filter: {}
135
- }, {
136
- id: 'user-1',
137
- companyId: 'company-1'
138
- });
139
- expect(qb.andWhere).toHaveBeenCalledWith('company_branch.company_id = :companyId', {
140
- companyId: 'company-1'
141
- });
142
- });
143
- it('does not apply a company filter when companyId is explicitly provided in the filter', async ()=>{
144
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(true);
145
- const qb = mockRepo.createQueryBuilder();
146
- await service.getExtraManipulateQuery(qb, {
147
- filter: {
148
- companyId: 'explicit-company'
149
- }
150
- }, {
151
- id: 'user-1',
152
- companyId: 'company-1'
153
- });
154
- expect(qb.andWhere).not.toHaveBeenCalledWith('company_branch.company_id = :companyId', expect.anything());
155
- });
156
- it('does not apply a company filter when the company feature is disabled', async ()=>{
157
- mockAuthConfig.isCompanyFeatureEnabled.mockReturnValue(false);
158
- const qb = mockRepo.createQueryBuilder();
159
- await service.getExtraManipulateQuery(qb, {
160
- filter: {}
161
- }, null);
162
- expect(qb.andWhere).not.toHaveBeenCalledWith('company_branch.company_id = :companyId', expect.anything());
163
- });
164
- });
165
- });
@@ -1,111 +0,0 @@
1
- function _define_property(obj, key, value) {
2
- if (key in obj) {
3
- Object.defineProperty(obj, key, {
4
- value: value,
5
- enumerable: true,
6
- configurable: true,
7
- writable: true
8
- });
9
- } else {
10
- obj[key] = value;
11
- }
12
- return obj;
13
- }
14
- function _ts_decorate(decorators, target, key, desc) {
15
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
16
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
17
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
18
- return c > 3 && r && Object.defineProperty(target, key, r), r;
19
- }
20
- function _ts_metadata(k, v) {
21
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
22
- }
23
- function _ts_param(paramIndex, decorator) {
24
- return function(target, key) {
25
- decorator(target, key, paramIndex);
26
- };
27
- }
28
- import { LogAction } from '@flusys/nestjs-shared';
29
- import { HybridCache } from '@flusys/nestjs-shared/classes';
30
- import { Inject, Injectable } from '@nestjs/common';
31
- import { randomUUID } from 'crypto';
32
- import { SESSION_CACHE_PREFIX } from '../config/auth.constants';
33
- const SESSION_TTL_MS = 5 * 60 * 1000; // 5 minutes
34
- export class CompanySelectionSessionService {
35
- async createSession(userId) {
36
- const sessionId = randomUUID();
37
- const now = new Date();
38
- const expiresAt = new Date(now.getTime() + SESSION_TTL_MS);
39
- const session = {
40
- sessionId,
41
- userId,
42
- createdAt: now,
43
- expiresAt
44
- };
45
- await this.cacheManager.set(this.getKey(sessionId), session, SESSION_TTL_MS);
46
- return sessionId;
47
- }
48
- /**
49
- * Get session by ID (does not consume/delete)
50
- */ async getSession(sessionId) {
51
- const session = await this.cacheManager.get(this.getKey(sessionId));
52
- if (!session) return null;
53
- // Check if expired (extra safety, cache should handle TTL)
54
- if (new Date() > new Date(session.expiresAt)) {
55
- await this.deleteSession(sessionId);
56
- return null;
57
- }
58
- return session;
59
- }
60
- async consumeSession(sessionId) {
61
- const session = await this.getSession(sessionId);
62
- if (session) {
63
- await this.deleteSession(sessionId);
64
- }
65
- return session;
66
- }
67
- /**
68
- * Delete session
69
- */ async deleteSession(sessionId) {
70
- await this.cacheManager.del(this.getKey(sessionId));
71
- }
72
- /**
73
- * Get cache key for session
74
- */ getKey(sessionId) {
75
- return `${SESSION_CACHE_PREFIX}:${sessionId}`;
76
- }
77
- constructor(cacheManager){
78
- _define_property(this, "cacheManager", void 0);
79
- this.cacheManager = cacheManager;
80
- }
81
- }
82
- _ts_decorate([
83
- LogAction({
84
- action: 'session.create',
85
- module: 'auth'
86
- }),
87
- _ts_metadata("design:type", Function),
88
- _ts_metadata("design:paramtypes", [
89
- String
90
- ]),
91
- _ts_metadata("design:returntype", Promise)
92
- ], CompanySelectionSessionService.prototype, "createSession", null);
93
- _ts_decorate([
94
- LogAction({
95
- action: 'session.consume',
96
- module: 'auth'
97
- }),
98
- _ts_metadata("design:type", Function),
99
- _ts_metadata("design:paramtypes", [
100
- String
101
- ]),
102
- _ts_metadata("design:returntype", Promise)
103
- ], CompanySelectionSessionService.prototype, "consumeSession", null);
104
- CompanySelectionSessionService = _ts_decorate([
105
- Injectable(),
106
- _ts_param(0, Inject('CACHE_INSTANCE')),
107
- _ts_metadata("design:type", Function),
108
- _ts_metadata("design:paramtypes", [
109
- typeof HybridCache === "undefined" ? Object : HybridCache
110
- ])
111
- ], CompanySelectionSessionService);
@@ -1,86 +0,0 @@
1
- import { CompanySelectionSessionService } from './company-selection-session.service';
2
- describe('CompanySelectionSessionService', ()=>{
3
- let service;
4
- let mockCacheManager;
5
- beforeEach(()=>{
6
- mockCacheManager = {
7
- set: jest.fn(),
8
- get: jest.fn(),
9
- del: jest.fn()
10
- };
11
- service = new CompanySelectionSessionService(mockCacheManager);
12
- });
13
- describe('createSession', ()=>{
14
- it('stores a session in the cache and returns a session id', async ()=>{
15
- const sessionId = await service.createSession('user-1');
16
- expect(typeof sessionId).toBe('string');
17
- expect(sessionId.length).toBeGreaterThan(0);
18
- expect(mockCacheManager.set).toHaveBeenCalledWith(`auth:session:${sessionId}`, expect.objectContaining({
19
- sessionId,
20
- userId: 'user-1'
21
- }), 5 * 60 * 1000);
22
- });
23
- it('generates unique session ids on successive calls', async ()=>{
24
- const first = await service.createSession('user-1');
25
- const second = await service.createSession('user-1');
26
- expect(first).not.toBe(second);
27
- });
28
- });
29
- describe('getSession', ()=>{
30
- it('returns null when no session is cached', async ()=>{
31
- mockCacheManager.get.mockResolvedValue(undefined);
32
- const result = await service.getSession('missing-session');
33
- expect(result).toBeNull();
34
- });
35
- it('returns the session when present and not expired', async ()=>{
36
- const session = {
37
- sessionId: 'sess-1',
38
- userId: 'user-1',
39
- createdAt: new Date(),
40
- expiresAt: new Date(Date.now() + 60_000)
41
- };
42
- mockCacheManager.get.mockResolvedValue(session);
43
- const result = await service.getSession('sess-1');
44
- expect(result).toEqual(session);
45
- expect(mockCacheManager.get).toHaveBeenCalledWith('auth:session:sess-1');
46
- });
47
- it('deletes and returns null when the cached session has expired', async ()=>{
48
- const session = {
49
- sessionId: 'sess-1',
50
- userId: 'user-1',
51
- createdAt: new Date(Date.now() - 10 * 60_000),
52
- expiresAt: new Date(Date.now() - 60_000)
53
- };
54
- mockCacheManager.get.mockResolvedValue(session);
55
- const result = await service.getSession('sess-1');
56
- expect(result).toBeNull();
57
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
58
- });
59
- });
60
- describe('consumeSession', ()=>{
61
- it('returns and deletes the session when present', async ()=>{
62
- const session = {
63
- sessionId: 'sess-1',
64
- userId: 'user-1',
65
- createdAt: new Date(),
66
- expiresAt: new Date(Date.now() + 60_000)
67
- };
68
- mockCacheManager.get.mockResolvedValue(session);
69
- const result = await service.consumeSession('sess-1');
70
- expect(result).toEqual(session);
71
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
72
- });
73
- it('returns null and does not delete when session is missing', async ()=>{
74
- mockCacheManager.get.mockResolvedValue(undefined);
75
- const result = await service.consumeSession('missing');
76
- expect(result).toBeNull();
77
- expect(mockCacheManager.del).not.toHaveBeenCalled();
78
- });
79
- });
80
- describe('deleteSession', ()=>{
81
- it('deletes the session by key', async ()=>{
82
- await service.deleteSession('sess-1');
83
- expect(mockCacheManager.del).toHaveBeenCalledWith('auth:session:sess-1');
84
- });
85
- });
86
- });
@@ -1,130 +0,0 @@
1
- function _define_property(obj, key, value) {
2
- if (key in obj) {
3
- Object.defineProperty(obj, key, {
4
- value: value,
5
- enumerable: true,
6
- configurable: true,
7
- writable: true
8
- });
9
- } else {
10
- obj[key] = value;
11
- }
12
- return obj;
13
- }
14
- function _ts_decorate(decorators, target, key, desc) {
15
- var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
16
- if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
17
- else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
18
- return c > 3 && r && Object.defineProperty(target, key, r), r;
19
- }
20
- function _ts_metadata(k, v) {
21
- if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
22
- }
23
- function _ts_param(paramIndex, decorator) {
24
- return function(target, key) {
25
- decorator(target, key, paramIndex);
26
- };
27
- }
28
- import { ApiService, HybridCache } from '@flusys/nestjs-shared/classes';
29
- import { IPermissionSyncAdapter, PERMISSION_SYNC_ADAPTER } from '@flusys/nestjs-shared/interfaces';
30
- import { UtilsService } from '@flusys/nestjs-shared/modules';
31
- import { ForbiddenException, Inject, Injectable, Optional, Scope } from '@nestjs/common';
32
- import { In, IsNull } from 'typeorm';
33
- import { AUTH_EVENT_ENTITIES, AUTH_EVENT_MODULE, COMPANY_MESSAGES } from '../config';
34
- import { CompanyBranch } from '../entities/company-branch.entity';
35
- import { Company } from '../entities/company.entity';
36
- import { UserCompanyPermission } from '../entities/user-company-permission.entity';
37
- import { AuthDataSourceProvider } from './auth-datasource.provider';
38
- export class CompanyService extends ApiService {
39
- async beforeDeleteOperation(dto, user, queryRunner) {
40
- const companyIds = Array.isArray(dto.id) ? dto.id : [
41
- dto.id
42
- ];
43
- await this.ensureDataSourceRepository();
44
- const readonlyCompanies = await this.repository.find({
45
- where: {
46
- id: In(companyIds),
47
- readOnly: true,
48
- deletedAt: IsNull()
49
- }
50
- });
51
- if (readonlyCompanies.length > 0) {
52
- const names = readonlyCompanies.map((c)=>c.name).join(', ');
53
- throw new ForbiddenException({
54
- message: `Cannot delete readonly company(ies): ${names}`,
55
- messageKey: COMPANY_MESSAGES.READONLY_DELETE_FORBIDDEN,
56
- messageVariables: {
57
- names
58
- }
59
- });
60
- }
61
- const branchRows = await queryRunner.manager.getRepository(CompanyBranch).find({
62
- where: {
63
- companyId: In(companyIds)
64
- },
65
- select: [
66
- 'id'
67
- ]
68
- });
69
- const targetIds = [
70
- ...companyIds,
71
- ...branchRows.map((row)=>row.id)
72
- ];
73
- await queryRunner.manager.getRepository(UserCompanyPermission).delete({
74
- targetId: In(targetIds)
75
- });
76
- if (!this.permissionSyncAdapter?.onCompanyDeleted) {
77
- return;
78
- }
79
- await Promise.all(companyIds.map((companyId)=>this.permissionSyncAdapter.onCompanyDeleted(companyId)));
80
- }
81
- // Query Customization
82
- async getSelectQuery(query, _user, select) {
83
- if (!select?.length) {
84
- select = [
85
- 'id',
86
- 'name',
87
- 'slug',
88
- 'email',
89
- 'phone',
90
- 'isActive',
91
- 'readOnly',
92
- 'createdAt'
93
- ];
94
- }
95
- query.select(select.map((f)=>`${this.entityName}.${f}`));
96
- return {
97
- query,
98
- isRaw: false
99
- };
100
- }
101
- async getGlobalSearchQuery(query, search) {
102
- query.andWhere('(company.name LIKE :search OR company.slug LIKE :search OR company.email LIKE :search)', {
103
- search: `%${search}%`
104
- });
105
- return {
106
- query,
107
- isRaw: false
108
- };
109
- }
110
- constructor(cacheManager, utilsService, dataSourceProvider, permissionSyncAdapter){
111
- super(AUTH_EVENT_ENTITIES.COMPANY, cacheManager, utilsService, CompanyService.name, true, AUTH_EVENT_MODULE, dataSourceProvider, Company), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "permissionSyncAdapter", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.permissionSyncAdapter = permissionSyncAdapter;
112
- }
113
- }
114
- CompanyService = _ts_decorate([
115
- Injectable({
116
- scope: Scope.REQUEST
117
- }),
118
- _ts_param(0, Inject('CACHE_INSTANCE')),
119
- _ts_param(1, Inject(UtilsService)),
120
- _ts_param(2, Inject(AuthDataSourceProvider)),
121
- _ts_param(3, Optional()),
122
- _ts_param(3, Inject(PERMISSION_SYNC_ADAPTER)),
123
- _ts_metadata("design:type", Function),
124
- _ts_metadata("design:paramtypes", [
125
- typeof HybridCache === "undefined" ? Object : HybridCache,
126
- typeof UtilsService === "undefined" ? Object : UtilsService,
127
- typeof AuthDataSourceProvider === "undefined" ? Object : AuthDataSourceProvider,
128
- typeof IPermissionSyncAdapter === "undefined" ? Object : IPermissionSyncAdapter
129
- ])
130
- ], CompanyService);