@flusys/nestjs-form-builder 6.0.2 → 6.1.1

package/fesm/utils/permission.utils.spec.js

@@ -0,0 +1,114 @@
+import { ForbiddenException } from '@nestjs/common';
+import { buildMockUser } from '@test-utils/mocks/logged-user.mock';
+import { validateUserPermissions } from './permission.utils';
+function buildMockCache() {
+    return {
+        get: jest.fn(),
+        set: jest.fn(),
+        del: jest.fn()
+    };
+}
+describe('validateUserPermissions', ()=>{
+    it('returns true immediately without touching the cache when no permissions are required', async ()=>{
+        const cache = buildMockCache();
+        const result = await validateUserPermissions(buildMockUser(), [], cache, false);
+        expect(result).toBe(true);
+        expect(cache.get).not.toHaveBeenCalled();
+    });
+    it('returns true when the user has at least one of the required permissions', async ()=>{
+        const cache = buildMockCache();
+        cache.get.mockResolvedValue([
+            'hr.survey.submit',
+            'other.permission'
+        ]);
+        const result = await validateUserPermissions(buildMockUser(), [
+            'hr.survey.submit',
+            'employee.feedback.submit'
+        ], cache, false);
+        expect(result).toBe(true);
+    });
+    it('returns false when the user has none of the required permissions', async ()=>{
+        const cache = buildMockCache();
+        cache.get.mockResolvedValue([
+            'some.other.permission'
+        ]);
+        const result = await validateUserPermissions(buildMockUser(), [
+            'hr.survey.submit'
+        ], cache, false);
+        expect(result).toBe(false);
+    });
+    it('treats a missing cache entry as no permissions (returns false)', async ()=>{
+        const cache = buildMockCache();
+        cache.get.mockResolvedValue(undefined);
+        const result = await validateUserPermissions(buildMockUser(), [
+            'hr.survey.submit'
+        ], cache, false);
+        expect(result).toBe(false);
+    });
+    it('fails closed with a ForbiddenException when the cache lookup throws', async ()=>{
+        const cache = buildMockCache();
+        cache.get.mockRejectedValue(new Error('redis down'));
+        await expect(validateUserPermissions(buildMockUser(), [
+            'hr.survey.submit'
+        ], cache, false)).rejects.toMatchObject({
+            response: expect.objectContaining({
+                messageKey: 'form.permission.check.failed'
+            })
+        });
+        await expect(validateUserPermissions(buildMockUser(), [
+            'hr.survey.submit'
+        ], cache, false)).rejects.toBeInstanceOf(ForbiddenException);
+    });
+    describe('cache key construction', ()=>{
+        it('uses a company/branch/user scoped key when the company feature is enabled and both are present', async ()=>{
+            const cache = buildMockCache();
+            cache.get.mockResolvedValue([]);
+            const user = buildMockUser({
+                companyId: 'company-1',
+                branchId: 'branch-1',
+                id: 'user-1'
+            });
+            await validateUserPermissions(user, [
+                'perm.read'
+            ], cache, true);
+            expect(cache.get).toHaveBeenCalledWith('permissions:company:company-1:branch:branch-1:user:user-1');
+        });
+        it('uses "null" as the branch placeholder when branchId is missing under the company feature', async ()=>{
+            const cache = buildMockCache();
+            cache.get.mockResolvedValue([]);
+            const user = buildMockUser({
+                companyId: 'company-1',
+                branchId: undefined,
+                id: 'user-1'
+            });
+            await validateUserPermissions(user, [
+                'perm.read'
+            ], cache, true);
+            expect(cache.get).toHaveBeenCalledWith('permissions:company:company-1:branch:null:user:user-1');
+        });
+        it('falls back to a plain user-scoped key when the company feature is enabled but companyId is missing', async ()=>{
+            const cache = buildMockCache();
+            cache.get.mockResolvedValue([]);
+            const user = buildMockUser({
+                companyId: undefined,
+                id: 'user-1'
+            });
+            await validateUserPermissions(user, [
+                'perm.read'
+            ], cache, true);
+            expect(cache.get).toHaveBeenCalledWith('permissions:user:user-1');
+        });
+        it('uses a plain user-scoped key when the company feature is disabled', async ()=>{
+            const cache = buildMockCache();
+            cache.get.mockResolvedValue([]);
+            const user = buildMockUser({
+                companyId: 'company-1',
+                id: 'user-1'
+            });
+            await validateUserPermissions(user, [
+                'perm.read'
+            ], cache, false);
+            expect(cache.get).toHaveBeenCalledWith('permissions:user:user-1');
+        });
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/nestjs-form-builder",
-  "version": "6.0.2",
+  "version": "6.1.1",
   "description": "Dynamic form builder module with schema versioning and access control",
   "main": "cjs/index.js",
   "module": "fesm/index.js",
@@ -84,7 +84,7 @@
     "express": "^5.0.0"
   },
   "dependencies": {
-    "@flusys/nestjs-core": "6.0.2",
-    "@flusys/nestjs-shared": "6.0.2"
+    "@flusys/nestjs-core": "6.1.1",
+    "@flusys/nestjs-shared": "6.1.1"
   }
 }