@flusys/nestjs-form-builder 7.1.0 → 8.0.0

package/fesm/utils/index.js

@@ -1,2 +0,0 @@
-export * from './permission.utils';
-export * from './computed-field.utils';

package/fesm/utils/permission.utils.js

@@ -1,42 +0,0 @@
-import { FORM_MESSAGES } from '../config';
-import { ForbiddenException } from '@nestjs/common';
-const CACHE_PREFIX = 'permissions';
-/**
- * Build permission cache key for a user
- * Uses same cache key format as PermissionGuard in nestjs-shared
- */ function buildPermissionCacheKey(user, enableCompanyFeature) {
-    if (enableCompanyFeature && user.companyId) {
-        return `${CACHE_PREFIX}:company:${user.companyId}:branch:${user.branchId || 'null'}:user:${user.id}`;
-    }
-    return `${CACHE_PREFIX}:user:${user.id}`;
-}
-/**
- * Get user permissions from cache
- * Fail-closed: if cache fails, deny access rather than allowing potentially unauthorized access
- */ async function getUserPermissionsFromCache(user, cacheManager, enableCompanyFeature) {
-    const cacheKey = buildPermissionCacheKey(user, enableCompanyFeature);
-    try {
-        const permissions = await cacheManager.get(cacheKey);
-        return permissions ?? [];
-    } catch  {
-        throw new ForbiddenException({
-            message: 'Unable to verify permissions. Please try again.',
-            messageKey: FORM_MESSAGES.PERMISSION_CHECK_FAILED
-        });
-    }
-}
-/**
- * Validate user has at least one of the required permissions
- *
- * @param user - The logged-in user
- * @param requiredPermissions - Array of required permission strings (user needs at least one)
- * @param cacheManager - Cache manager instance
- * @param enableCompanyFeature - Whether company feature is enabled
- * @returns true if user has permission, false otherwise
- */ export async function validateUserPermissions(user, requiredPermissions, cacheManager, enableCompanyFeature) {
-    if (!requiredPermissions.length) {
-        return true;
-    }
-    const userPermissions = await getUserPermissionsFromCache(user, cacheManager, enableCompanyFeature);
-    return requiredPermissions.some((perm)=>userPermissions.includes(perm));
-}

package/fesm/utils/permission.utils.spec.js

@@ -1,114 +0,0 @@
-import { ForbiddenException } from '@nestjs/common';
-import { buildMockUser } from '@test-utils/mocks/logged-user.mock';
-import { validateUserPermissions } from './permission.utils';
-function buildMockCache() {
-    return {
-        get: jest.fn(),
-        set: jest.fn(),
-        del: jest.fn()
-    };
-}
-describe('validateUserPermissions', ()=>{
-    it('returns true immediately without touching the cache when no permissions are required', async ()=>{
-        const cache = buildMockCache();
-        const result = await validateUserPermissions(buildMockUser(), [], cache, false);
-        expect(result).toBe(true);
-        expect(cache.get).not.toHaveBeenCalled();
-    });
-    it('returns true when the user has at least one of the required permissions', async ()=>{
-        const cache = buildMockCache();
-        cache.get.mockResolvedValue([
-            'hr.survey.submit',
-            'other.permission'
-        ]);
-        const result = await validateUserPermissions(buildMockUser(), [
-            'hr.survey.submit',
-            'employee.feedback.submit'
-        ], cache, false);
-        expect(result).toBe(true);
-    });
-    it('returns false when the user has none of the required permissions', async ()=>{
-        const cache = buildMockCache();
-        cache.get.mockResolvedValue([
-            'some.other.permission'
-        ]);
-        const result = await validateUserPermissions(buildMockUser(), [
-            'hr.survey.submit'
-        ], cache, false);
-        expect(result).toBe(false);
-    });
-    it('treats a missing cache entry as no permissions (returns false)', async ()=>{
-        const cache = buildMockCache();
-        cache.get.mockResolvedValue(undefined);
-        const result = await validateUserPermissions(buildMockUser(), [
-            'hr.survey.submit'
-        ], cache, false);
-        expect(result).toBe(false);
-    });
-    it('fails closed with a ForbiddenException when the cache lookup throws', async ()=>{
-        const cache = buildMockCache();
-        cache.get.mockRejectedValue(new Error('redis down'));
-        await expect(validateUserPermissions(buildMockUser(), [
-            'hr.survey.submit'
-        ], cache, false)).rejects.toMatchObject({
-            response: expect.objectContaining({
-                messageKey: 'form.permission.check.failed'
-            })
-        });
-        await expect(validateUserPermissions(buildMockUser(), [
-            'hr.survey.submit'
-        ], cache, false)).rejects.toBeInstanceOf(ForbiddenException);
-    });
-    describe('cache key construction', ()=>{
-        it('uses a company/branch/user scoped key when the company feature is enabled and both are present', async ()=>{
-            const cache = buildMockCache();
-            cache.get.mockResolvedValue([]);
-            const user = buildMockUser({
-                companyId: 'company-1',
-                branchId: 'branch-1',
-                id: 'user-1'
-            });
-            await validateUserPermissions(user, [
-                'perm.read'
-            ], cache, true);
-            expect(cache.get).toHaveBeenCalledWith('permissions:company:company-1:branch:branch-1:user:user-1');
-        });
-        it('uses "null" as the branch placeholder when branchId is missing under the company feature', async ()=>{
-            const cache = buildMockCache();
-            cache.get.mockResolvedValue([]);
-            const user = buildMockUser({
-                companyId: 'company-1',
-                branchId: undefined,
-                id: 'user-1'
-            });
-            await validateUserPermissions(user, [
-                'perm.read'
-            ], cache, true);
-            expect(cache.get).toHaveBeenCalledWith('permissions:company:company-1:branch:null:user:user-1');
-        });
-        it('falls back to a plain user-scoped key when the company feature is enabled but companyId is missing', async ()=>{
-            const cache = buildMockCache();
-            cache.get.mockResolvedValue([]);
-            const user = buildMockUser({
-                companyId: undefined,
-                id: 'user-1'
-            });
-            await validateUserPermissions(user, [
-                'perm.read'
-            ], cache, true);
-            expect(cache.get).toHaveBeenCalledWith('permissions:user:user-1');
-        });
-        it('uses a plain user-scoped key when the company feature is disabled', async ()=>{
-            const cache = buildMockCache();
-            cache.get.mockResolvedValue([]);
-            const user = buildMockUser({
-                companyId: 'company-1',
-                id: 'user-1'
-            });
-            await validateUserPermissions(user, [
-                'perm.read'
-            ], cache, false);
-            expect(cache.get).toHaveBeenCalledWith('permissions:user:user-1');
-        });
-    });
-});