@flusys/nestjs-auth 7.1.0 → 8.0.0

package/fesm/controllers/user.controller.js

@@ -1,428 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { createApiController, USER_PERMISSIONS } from '@flusys/nestjs-shared/classes';
-import { CurrentUser, RequireAnyPermission, RequirePermission } from '@flusys/nestjs-shared/decorators';
-import { FilterAndPaginationDto } from '@flusys/nestjs-shared/dtos';
-import { JwtAuthGuard, PermissionGuard } from '@flusys/nestjs-shared/guards';
-import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
-import { Body, Controller, Inject, Param, Post, Query, UseGuards } from '@nestjs/common';
-import { ApiBearerAuth, ApiBody, ApiOperation, ApiParam, ApiQuery, ApiTags } from '@nestjs/swagger';
-import { plainToInstance } from 'class-transformer';
-import { USER_MESSAGES } from '../config';
-import { CreateUserDto, UpdateUserDto, UserLookupResponseDto, UserResponseDto } from '../dtos/user.dto';
-import { UserService } from '../services/user.service';
-export class UserController extends createApiController(CreateUserDto, UpdateUserDto, UserResponseDto, {
-    entityName: 'user',
-    security: {
-        insert: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.CREATE
-            ]
-        },
-        insertMany: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.CREATE
-            ]
-        },
-        getById: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.READ
-            ]
-        },
-        getAll: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.READ
-            ]
-        },
-        update: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.UPDATE
-            ]
-        },
-        updateMany: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.UPDATE
-            ]
-        },
-        delete: {
-            level: 'permission',
-            permissions: [
-                USER_PERMISSIONS.DELETE
-            ]
-        }
-    }
-}) {
-    async lookup(filterAndPaginationDto, user, search) {
-        const result = await this.service.getAll(search ?? '', filterAndPaginationDto, user);
-        const data = result.data.map((item)=>plainToInstance(UserLookupResponseDto, item, {
-                excludeExtraneousValues: true
-            }));
-        const page = filterAndPaginationDto.pagination?.currentPage ?? 0;
-        const pageSize = filterAndPaginationDto.pagination?.pageSize ?? data.length;
-        const totalPages = pageSize > 0 ? Math.ceil(result.total / pageSize) : 1;
-        return {
-            success: true,
-            message: 'Users retrieved successfully',
-            messageKey: USER_MESSAGES.LOOKUP_SUCCESS,
-            data,
-            meta: {
-                total: result.total,
-                page,
-                pageSize,
-                count: data.length,
-                hasMore: page < totalPages - 1,
-                totalPages
-            }
-        };
-    }
-    async getProfileWithExtras(id, user) {
-        const data = await this.service.getProfileWithExtras(id, user);
-        return {
-            success: true,
-            message: 'Profile extras retrieved successfully',
-            messageKey: USER_MESSAGES.PROFILE_EXTRAS_SUCCESS,
-            data
-        };
-    }
-    async verifyEmail(id) {
-        await this.service.verifyEmail(id);
-        return {
-            success: true,
-            message: 'Email verified successfully',
-            messageKey: USER_MESSAGES.EMAIL_VERIFY_SUCCESS
-        };
-    }
-    async verifyPhone(id) {
-        await this.service.verifyPhone(id);
-        return {
-            success: true,
-            message: 'Phone verified successfully',
-            messageKey: USER_MESSAGES.PHONE_VERIFY_SUCCESS
-        };
-    }
-    async updateStatus(id, isActive, user) {
-        await this.service.updateStatus(id, isActive, user);
-        return {
-            success: true,
-            message: 'Status updated successfully',
-            messageKey: USER_MESSAGES.STATUS_UPDATE_SUCCESS
-        };
-    }
-    async profile(dto, user) {
-        const data = await this.service.profile(dto, user);
-        return {
-            success: true,
-            message: 'Profile updated successfully',
-            messageKey: USER_MESSAGES.PROFILE_UPDATE_SUCCESS,
-            data
-        };
-    }
-    async getProfileSections() {
-        const sections = await this.service.getProfileSections();
-        return {
-            success: true,
-            message: 'Profile sections retrieved successfully',
-            messageKey: USER_MESSAGES.PROFILE_SECTIONS_SUCCESS,
-            data: sections
-        };
-    }
-    async getProfileSectionData(id, sectionId, user) {
-        const data = await this.service.getProfileSectionData(id, sectionId, user);
-        return {
-            success: true,
-            message: 'Profile section data retrieved successfully',
-            messageKey: USER_MESSAGES.PROFILE_SECTION_DATA_SUCCESS,
-            data
-        };
-    }
-    async updateProfileSection(id, sectionId, data, user) {
-        await this.service.updateProfileSection(id, sectionId, data, user);
-        return {
-            success: true,
-            message: 'Section updated successfully',
-            messageKey: USER_MESSAGES.PROFILE_SECTION_UPDATE_SUCCESS
-        };
-    }
-    async getProfileCompletion(id, user) {
-        const percentage = await this.service.getProfileCompletion(id, user);
-        return {
-            success: true,
-            message: 'Profile completion retrieved successfully',
-            messageKey: USER_MESSAGES.PROFILE_COMPLETION_SUCCESS,
-            data: {
-                completionPercentage: percentage
-            }
-        };
-    }
-    constructor(service){
-        super(service), _define_property(this, "service", void 0), this.service = service;
-    }
-}
-_ts_decorate([
-    Post('lookup'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequireAnyPermission(USER_PERMISSIONS.READ, USER_PERMISSIONS.LOOKUP),
-    ApiOperation({
-        summary: 'Lookup users for pickers/directory',
-        description: 'Lightweight user directory search for selection widgets (event participants, assignees, etc.). ' + 'Returns only id/name/email. Accessible with USER_PERMISSIONS.READ or the narrower USER_PERMISSIONS.LOOKUP, ' + 'so panels that only need to pick a user do not require full user-management access.'
-    }),
-    ApiQuery({
-        name: 'q',
-        required: false,
-        description: 'Global text search across searchable fields'
-    }),
-    ApiBody({
-        type: FilterAndPaginationDto
-    }),
-    _ts_param(0, Body()),
-    _ts_param(1, CurrentUser()),
-    _ts_param(2, Query('q')),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof FilterAndPaginationDto === "undefined" ? Object : FilterAndPaginationDto,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo,
-        String
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "lookup", null);
-_ts_decorate([
-    Post(':id/profile-extras'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.READ),
-    ApiOperation({
-        summary: 'Get user profile with extras',
-        description: 'Returns user profile along with extra data (roles, permissions, etc.) if UserEnricher is provided.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "getProfileWithExtras", null);
-_ts_decorate([
-    Post(':id/verify-email'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.UPDATE),
-    ApiOperation({
-        summary: 'Verify user email'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "verifyEmail", null);
-_ts_decorate([
-    Post(':id/verify-phone'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.UPDATE),
-    ApiOperation({
-        summary: 'Verify user phone'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "verifyPhone", null);
-_ts_decorate([
-    Post(':id/status'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.UPDATE),
-    ApiOperation({
-        summary: 'Update user active status',
-        description: 'Updates user active status. When company feature is enabled, updates the status for the current company context.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    ApiBody({
-        schema: {
-            example: {
-                isActive: true
-            }
-        }
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, Body('isActive')),
-    _ts_param(2, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        Boolean,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "updateStatus", null);
-_ts_decorate([
-    Post('profile'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Update user profile'
-    }),
-    ApiBody({
-        type: UpdateUserDto
-    }),
-    _ts_param(0, Body()),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof UpdateUserDto === "undefined" ? Object : UpdateUserDto,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "profile", null);
-_ts_decorate([
-    Post('profile-sections'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    RequirePermission(USER_PERMISSIONS.READ),
-    ApiOperation({
-        summary: 'Get profile section definitions',
-        description: 'Returns available profile sections for multi-step profile (if enricher configured).'
-    }),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", []),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "getProfileSections", null);
-_ts_decorate([
-    Post(':id/profile-section/:sectionId'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Get profile section data',
-        description: 'Returns data for a specific profile section.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    ApiParam({
-        name: 'sectionId',
-        description: 'Section identifier'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, Param('sectionId')),
-    _ts_param(2, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        String,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "getProfileSectionData", null);
-_ts_decorate([
-    Post(':id/profile-section/:sectionId/update'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Update profile section',
-        description: 'Updates a specific profile section data.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    ApiParam({
-        name: 'sectionId',
-        description: 'Section identifier'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, Param('sectionId')),
-    _ts_param(2, Body()),
-    _ts_param(3, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        String,
-        typeof Record === "undefined" ? Object : Record,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "updateProfileSection", null);
-_ts_decorate([
-    Post(':id/profile-completion'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Get profile completion percentage',
-        description: 'Returns overall profile completion percentage.'
-    }),
-    ApiParam({
-        name: 'id',
-        description: 'User ID'
-    }),
-    _ts_param(0, Param('id')),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        String,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], UserController.prototype, "getProfileCompletion", null);
-UserController = _ts_decorate([
-    ApiTags('Users'),
-    Controller('administration/users'),
-    _ts_param(0, Inject(UserService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof UserService === "undefined" ? Object : UserService
-    ])
-], UserController);

package/fesm/controllers/user.controller.spec.js

@@ -1,200 +0,0 @@
-import { buildMockUser } from '@test-utils/mocks/logged-user.mock';
-import { UserController } from './user.controller';
-function buildUser(overrides = {}) {
-    return {
-        id: 'user-1',
-        name: 'Test User',
-        email: 'test@example.com',
-        phone: null,
-        isActive: true,
-        readOnly: false,
-        createdAt: new Date(),
-        updatedAt: new Date(),
-        ...overrides
-    };
-}
-describe('UserController', ()=>{
-    let controller;
-    let mockUserService;
-    beforeEach(()=>{
-        mockUserService = {
-            insert: jest.fn(),
-            insertMany: jest.fn(),
-            findById: jest.fn(),
-            findByIds: jest.fn(),
-            update: jest.fn(),
-            updateMany: jest.fn(),
-            bulkUpsert: jest.fn(),
-            getAll: jest.fn(),
-            delete: jest.fn(),
-            getProfileWithExtras: jest.fn(),
-            verifyEmail: jest.fn(),
-            verifyPhone: jest.fn(),
-            updateStatus: jest.fn(),
-            profile: jest.fn(),
-            getProfileSections: jest.fn(),
-            getProfileSectionData: jest.fn(),
-            updateProfileSection: jest.fn(),
-            getProfileCompletion: jest.fn()
-        };
-        controller = new UserController(mockUserService);
-    });
-    describe('insert', ()=>{
-        it('creates a user and returns the mapped response', async ()=>{
-            const user = buildMockUser();
-            mockUserService.insert.mockResolvedValue(buildUser());
-            const result = await controller.insert({
-                name: 'Test User',
-                email: 'test@example.com',
-                password: 'Password1!'
-            }, user);
-            expect(mockUserService.insert).toHaveBeenCalledWith({
-                name: 'Test User',
-                email: 'test@example.com',
-                password: 'Password1!'
-            }, user);
-            expect(result.success).toBe(true);
-            expect(result.data).toEqual(expect.objectContaining({
-                id: 'user-1'
-            }));
-        });
-    });
-    describe('getAll', ()=>{
-        it('paginates users and maps the response list', async ()=>{
-            mockUserService.getAll.mockResolvedValue({
-                data: [
-                    buildUser()
-                ],
-                total: 1
-            });
-            const result = await controller.getAll({}, buildMockUser(), '');
-            expect(mockUserService.getAll).toHaveBeenCalledWith('', {}, buildMockUser());
-            expect(result.data).toHaveLength(1);
-        });
-    });
-    describe('getProfileWithExtras', ()=>{
-        it('returns the enriched profile payload', async ()=>{
-            const user = buildMockUser();
-            mockUserService.getProfileWithExtras.mockResolvedValue({
-                ...buildUser(),
-                completionPercentage: 80
-            });
-            const result = await controller.getProfileWithExtras('user-1', user);
-            expect(mockUserService.getProfileWithExtras).toHaveBeenCalledWith('user-1', user);
-            expect(result).toEqual({
-                success: true,
-                message: 'Profile extras retrieved successfully',
-                messageKey: expect.any(String),
-                data: expect.objectContaining({
-                    completionPercentage: 80
-                })
-            });
-        });
-    });
-    describe('verifyEmail', ()=>{
-        it('verifies the email and returns a success message', async ()=>{
-            mockUserService.verifyEmail.mockResolvedValue(undefined);
-            const result = await controller.verifyEmail('user-1');
-            expect(mockUserService.verifyEmail).toHaveBeenCalledWith('user-1');
-            expect(result.success).toBe(true);
-        });
-    });
-    describe('verifyPhone', ()=>{
-        it('verifies the phone and returns a success message', async ()=>{
-            mockUserService.verifyPhone.mockResolvedValue(undefined);
-            const result = await controller.verifyPhone('user-1');
-            expect(mockUserService.verifyPhone).toHaveBeenCalledWith('user-1');
-            expect(result.success).toBe(true);
-        });
-    });
-    describe('updateStatus', ()=>{
-        it('updates the active status for the given user', async ()=>{
-            const user = buildMockUser();
-            mockUserService.updateStatus.mockResolvedValue(undefined);
-            const result = await controller.updateStatus('user-1', false, user);
-            expect(mockUserService.updateStatus).toHaveBeenCalledWith('user-1', false, user);
-            expect(result.success).toBe(true);
-        });
-    });
-    describe('profile', ()=>{
-        it('updates the current user profile and returns the data', async ()=>{
-            const user = buildMockUser();
-            mockUserService.profile.mockResolvedValue('user-1');
-            const result = await controller.profile({
-                id: 'user-1',
-                name: 'New Name'
-            }, user);
-            expect(mockUserService.profile).toHaveBeenCalledWith({
-                id: 'user-1',
-                name: 'New Name'
-            }, user);
-            expect(result).toEqual({
-                success: true,
-                message: 'Profile updated successfully',
-                messageKey: expect.any(String),
-                data: 'user-1'
-            });
-        });
-    });
-    describe('getProfileSections', ()=>{
-        it('returns the profile section definitions', async ()=>{
-            mockUserService.getProfileSections.mockResolvedValue([
-                {
-                    id: 's1',
-                    name: 'Basic',
-                    order: 1
-                }
-            ]);
-            const result = await controller.getProfileSections();
-            expect(result.data).toEqual([
-                {
-                    id: 's1',
-                    name: 'Basic',
-                    order: 1
-                }
-            ]);
-        });
-    });
-    describe('getProfileSectionData', ()=>{
-        it('returns data for the requested section', async ()=>{
-            const user = buildMockUser();
-            mockUserService.getProfileSectionData.mockResolvedValue({
-                sectionId: 's1',
-                data: {
-                    foo: 'bar'
-                },
-                isComplete: true
-            });
-            const result = await controller.getProfileSectionData('user-1', 's1', user);
-            expect(mockUserService.getProfileSectionData).toHaveBeenCalledWith('user-1', 's1', user);
-            expect(result.data).toEqual(expect.objectContaining({
-                sectionId: 's1',
-                isComplete: true
-            }));
-        });
-    });
-    describe('updateProfileSection', ()=>{
-        it('updates the requested section', async ()=>{
-            const user = buildMockUser();
-            mockUserService.updateProfileSection.mockResolvedValue(undefined);
-            const result = await controller.updateProfileSection('user-1', 's1', {
-                foo: 'bar'
-            }, user);
-            expect(mockUserService.updateProfileSection).toHaveBeenCalledWith('user-1', 's1', {
-                foo: 'bar'
-            }, user);
-            expect(result.success).toBe(true);
-        });
-    });
-    describe('getProfileCompletion', ()=>{
-        it('returns the completion percentage', async ()=>{
-            const user = buildMockUser();
-            mockUserService.getProfileCompletion.mockResolvedValue(42);
-            const result = await controller.getProfileCompletion('user-1', user);
-            expect(mockUserService.getProfileCompletion).toHaveBeenCalledWith('user-1', user);
-            expect(result.data).toEqual({
-                completionPercentage: 42
-            });
-        });
-    });
-});