@flusys/nestjs-iam 7.1.0 → 8.0.0-beta.1

package/fesm/entities/action.entity.js

@@ -1,128 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-import { Identity, getJsonColumnType } from '@flusys/nestjs-shared';
-import { Column, Entity, Index, JoinColumn, ManyToOne, OneToMany } from 'typeorm';
-import { ActionType } from '../enums';
-export class Action extends Identity {
-    constructor(...args){
-        super(...args), _define_property(this, "readOnly", void 0), _define_property(this, "name", void 0), _define_property(this, "description", void 0), _define_property(this, "code", void 0), _define_property(this, "actionType", void 0), _define_property(this, "permissionLogic", void 0), _define_property(this, "serial", void 0), _define_property(this, "isActive", void 0), _define_property(this, "parent", void 0), _define_property(this, "parentId", void 0), _define_property(this, "children", void 0);
-    }
-}
-_ts_decorate([
-    Column({
-        type: 'boolean',
-        nullable: false,
-        default: false,
-        name: 'read_only'
-    }),
-    _ts_metadata("design:type", Boolean)
-], Action.prototype, "readOnly", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 255,
-        nullable: false
-    }),
-    _ts_metadata("design:type", String)
-], Action.prototype, "name", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 500,
-        nullable: true
-    }),
-    _ts_metadata("design:type", Object)
-], Action.prototype, "description", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 255,
-        nullable: true,
-        unique: true
-    }),
-    _ts_metadata("design:type", Object)
-], Action.prototype, "code", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 50,
-        nullable: false,
-        default: 'BACKEND',
-        name: 'action_type'
-    }),
-    _ts_metadata("design:type", typeof ActionType === "undefined" ? Object : ActionType)
-], Action.prototype, "actionType", void 0);
-_ts_decorate([
-    Column({
-        type: getJsonColumnType(),
-        nullable: true,
-        name: 'permission_logic'
-    }),
-    _ts_metadata("design:type", Object)
-], Action.prototype, "permissionLogic", void 0);
-_ts_decorate([
-    Column({
-        type: 'int',
-        nullable: true
-    }),
-    _ts_metadata("design:type", Object)
-], Action.prototype, "serial", void 0);
-_ts_decorate([
-    Column({
-        type: 'boolean',
-        nullable: false,
-        default: true,
-        name: 'is_active'
-    }),
-    _ts_metadata("design:type", Boolean)
-], Action.prototype, "isActive", void 0);
-_ts_decorate([
-    ManyToOne('Action', 'children', {
-        nullable: true,
-        onDelete: 'CASCADE'
-    }),
-    JoinColumn({
-        name: 'parent_id'
-    }),
-    _ts_metadata("design:type", Object)
-], Action.prototype, "parent", void 0);
-_ts_decorate([
-    Column({
-        type: 'uuid',
-        nullable: true,
-        name: 'parent_id'
-    }),
-    _ts_metadata("design:type", Object)
-], Action.prototype, "parentId", void 0);
-_ts_decorate([
-    OneToMany('Action', 'parent'),
-    _ts_metadata("design:type", Array)
-], Action.prototype, "children", void 0);
-Action = _ts_decorate([
-    Entity({
-        name: 'action'
-    }),
-    Index([
-        'parentId'
-    ])
-], Action);

package/fesm/entities/index.spec.js

@@ -1,52 +0,0 @@
-import { getIAMEntitiesByConfig } from './index';
-import { Action } from './action.entity';
-import { Role } from './role.entity';
-import { RoleWithCompany } from './role-with-company.entity';
-import { UserIamPermission } from './user-iam-permission.entity';
-import { UserIamPermissionWithCompany } from './permission-with-company.entity';
-describe('getIAMEntitiesByConfig', ()=>{
-    it('should always include Action', ()=>{
-        expect(getIAMEntitiesByConfig(false)).toContain(Action);
-        expect(getIAMEntitiesByConfig(true)).toContain(Action);
-    });
-    it('should default permissionMode to FULL and include Role + UserIamPermission when company feature is off', ()=>{
-        const entities = getIAMEntitiesByConfig(false);
-        expect(entities).toEqual(expect.arrayContaining([
-            Action,
-            UserIamPermission,
-            Role
-        ]));
-        expect(entities).not.toContain(RoleWithCompany);
-        expect(entities).not.toContain(UserIamPermissionWithCompany);
-    });
-    it('should use the company-scoped permission entity when enableCompanyFeature is true', ()=>{
-        const entities = getIAMEntitiesByConfig(true, 'FULL');
-        expect(entities).toContain(UserIamPermissionWithCompany);
-        expect(entities).not.toContain(UserIamPermission);
-    });
-    it('should use the company-scoped role entity when enableCompanyFeature is true', ()=>{
-        const entities = getIAMEntitiesByConfig(true, 'RBAC');
-        expect(entities).toContain(RoleWithCompany);
-        expect(entities).not.toContain(Role);
-    });
-    it('should include Role for RBAC mode', ()=>{
-        expect(getIAMEntitiesByConfig(false, 'RBAC')).toContain(Role);
-    });
-    it('should include Role for FULL mode', ()=>{
-        expect(getIAMEntitiesByConfig(false, 'FULL')).toContain(Role);
-    });
-    it('should exclude Role entirely for DIRECT mode', ()=>{
-        const entities = getIAMEntitiesByConfig(false, 'DIRECT');
-        expect(entities).not.toContain(Role);
-        expect(entities).not.toContain(RoleWithCompany);
-        expect(entities).toEqual(expect.arrayContaining([
-            Action,
-            UserIamPermission
-        ]));
-    });
-    it('should exclude the company-scoped Role for DIRECT mode even with company feature enabled', ()=>{
-        const entities = getIAMEntitiesByConfig(true, 'DIRECT');
-        expect(entities).not.toContain(RoleWithCompany);
-        expect(entities).toContain(UserIamPermissionWithCompany);
-    });
-});

package/fesm/entities/permission-base.entity.js

@@ -1,100 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-import { Identity } from '@flusys/nestjs-shared';
-import { Column } from 'typeorm';
-/**
- * Permission Base Entity
- * Core permission fields - always included regardless of company feature
- */ export class PermissionBase extends Identity {
-    isValid(now = new Date()) {
-        if (this.validFrom && now < this.validFrom) return false;
-        if (this.validUntil && now > this.validUntil) return false;
-        return true;
-    }
-    constructor(...args){
-        super(...args), _define_property(this, "permissionType", void 0), _define_property(this, "sourceType", void 0), _define_property(this, "sourceId", void 0), _define_property(this, "targetType", void 0), _define_property(this, "targetId", void 0), _define_property(this, "validFrom", void 0), _define_property(this, "validUntil", void 0), _define_property(this, "reason", void 0);
-    }
-}
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 50,
-        name: 'permission_type'
-    }),
-    _ts_metadata("design:type", String)
-], PermissionBase.prototype, "permissionType", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 50,
-        name: 'source_type'
-    }),
-    _ts_metadata("design:type", String)
-], PermissionBase.prototype, "sourceType", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 150,
-        name: 'source_id'
-    }),
-    _ts_metadata("design:type", String)
-], PermissionBase.prototype, "sourceId", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 50,
-        name: 'target_type'
-    }),
-    _ts_metadata("design:type", String)
-], PermissionBase.prototype, "targetType", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 150,
-        name: 'target_id'
-    }),
-    _ts_metadata("design:type", String)
-], PermissionBase.prototype, "targetId", void 0);
-_ts_decorate([
-    Column({
-        type: 'timestamp',
-        nullable: true,
-        name: 'valid_from'
-    }),
-    _ts_metadata("design:type", Object)
-], PermissionBase.prototype, "validFrom", void 0);
-_ts_decorate([
-    Column({
-        type: 'timestamp',
-        nullable: true,
-        name: 'valid_until'
-    }),
-    _ts_metadata("design:type", Object)
-], PermissionBase.prototype, "validUntil", void 0);
-_ts_decorate([
-    Column({
-        type: 'text',
-        nullable: true
-    }),
-    _ts_metadata("design:type", Object)
-], PermissionBase.prototype, "reason", void 0);

package/fesm/entities/permission-with-company.entity.js

@@ -1,90 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-import { Column, Entity, Index } from 'typeorm';
-import { PermissionBase } from './permission-base.entity';
-export class UserIamPermissionWithCompany extends PermissionBase {
-    constructor(...args){
-        super(...args), /**
-   * Company ID - Company scope for this permission
-   * - null: Global permission (not company-specific)
-   * - set: Permission belongs to this company
-   */ _define_property(this, "companyId", void 0), /**
-   * Branch ID - Branch scope for this permission
-   * - null: Company-wide permission (all branches in company)
-   * - set: Permission applies only to this specific branch
-   */ _define_property(this, "branchId", void 0);
-    }
-}
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 150,
-        nullable: true,
-        name: 'company_id'
-    }),
-    _ts_metadata("design:type", Object)
-], UserIamPermissionWithCompany.prototype, "companyId", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 150,
-        nullable: true,
-        name: 'branch_id'
-    }),
-    _ts_metadata("design:type", Object)
-], UserIamPermissionWithCompany.prototype, "branchId", void 0);
-UserIamPermissionWithCompany = _ts_decorate([
-    Entity({
-        name: 'user_iam_permission'
-    }),
-    Index([
-        'permissionType',
-        'sourceId',
-        'targetId',
-        'companyId',
-        'branchId'
-    ], {
-        unique: true
-    }),
-    Index([
-        'sourceId',
-        'sourceType'
-    ]),
-    Index([
-        'targetId',
-        'targetType'
-    ]),
-    Index([
-        'permissionType'
-    ]),
-    Index([
-        'companyId'
-    ]),
-    Index([
-        'branchId'
-    ]),
-    Index([
-        'companyId',
-        'branchId'
-    ])
-], UserIamPermissionWithCompany);

package/fesm/entities/role-base.entity.js

@@ -1,70 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-import { Identity } from '@flusys/nestjs-shared';
-import { Column } from 'typeorm';
-export class RoleBase extends Identity {
-    constructor(...args){
-        super(...args), _define_property(this, "readOnly", void 0), _define_property(this, "name", void 0), _define_property(this, "description", void 0), _define_property(this, "isActive", void 0), _define_property(this, "serial", void 0);
-    }
-}
-_ts_decorate([
-    Column({
-        type: 'boolean',
-        nullable: false,
-        default: false,
-        name: 'read_only'
-    }),
-    _ts_metadata("design:type", Boolean)
-], RoleBase.prototype, "readOnly", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 255,
-        nullable: false
-    }),
-    _ts_metadata("design:type", String)
-], RoleBase.prototype, "name", void 0);
-_ts_decorate([
-    Column({
-        type: 'varchar',
-        length: 500,
-        nullable: true
-    }),
-    _ts_metadata("design:type", Object)
-], RoleBase.prototype, "description", void 0);
-_ts_decorate([
-    Column({
-        type: 'boolean',
-        nullable: false,
-        default: true,
-        name: 'is_active'
-    }),
-    _ts_metadata("design:type", Boolean)
-], RoleBase.prototype, "isActive", void 0);
-_ts_decorate([
-    Column({
-        type: 'int',
-        nullable: true
-    }),
-    _ts_metadata("design:type", Object)
-], RoleBase.prototype, "serial", void 0);

package/fesm/entities/role-with-company.entity.js

@@ -1,45 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-import { Column, Entity, Index } from 'typeorm';
-import { RoleBase } from './role-base.entity';
-export class RoleWithCompany extends RoleBase {
-    constructor(...args){
-        super(...args), _define_property(this, "companyId", void 0);
-    }
-}
-_ts_decorate([
-    Column({
-        type: 'uuid',
-        nullable: true,
-        name: 'company_id'
-    }),
-    _ts_metadata("design:type", Object)
-], RoleWithCompany.prototype, "companyId", void 0);
-RoleWithCompany = _ts_decorate([
-    Entity({
-        name: 'role'
-    }),
-    Index([
-        'companyId'
-    ])
-], RoleWithCompany);

package/fesm/entities/role.entity.js

@@ -1,15 +0,0 @@
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-import { Entity } from 'typeorm';
-import { RoleBase } from './role-base.entity';
-export class Role extends RoleBase {
-}
-Role = _ts_decorate([
-    Entity({
-        name: 'role'
-    })
-], Role);

package/fesm/entities/user-iam-permission.entity.js

@@ -1,33 +0,0 @@
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-import { Entity, Index } from 'typeorm';
-import { PermissionBase } from './permission-base.entity';
-export class UserIamPermission extends PermissionBase {
-}
-UserIamPermission = _ts_decorate([
-    Entity({
-        name: 'user_iam_permission'
-    }),
-    Index([
-        'permissionType',
-        'sourceId',
-        'targetId'
-    ], {
-        unique: true
-    }),
-    Index([
-        'sourceId',
-        'sourceType'
-    ]),
-    Index([
-        'targetId',
-        'targetType'
-    ]),
-    Index([
-        'permissionType'
-    ])
-], UserIamPermission);

package/fesm/enums/action-type.enum.js

@@ -1,12 +0,0 @@
-/**
- * ActionType Enum - Categorizes actions by their usage context
- *
- * - BACKEND: Actions for API endpoint permissions (cached for PermissionGuard)
- * - FRONTEND: Actions for frontend features (returned in my-permissions API)
- * - BOTH: Actions used for both backend and frontend (cached + returned)
- */ export var ActionType = /*#__PURE__*/ function(ActionType) {
-    ActionType["BACKEND"] = "backend";
-    ActionType["FRONTEND"] = "frontend";
-    ActionType["BOTH"] = "both";
-    return ActionType;
-}({});

package/fesm/enums/iam-entity-type.enum.js

@@ -1,7 +0,0 @@
-export var IamEntityType = /*#__PURE__*/ function(IamEntityType) {
-    IamEntityType["USER"] = "user";
-    IamEntityType["ROLE"] = "role";
-    IamEntityType["ACTION"] = "action";
-    IamEntityType["COMPANY"] = "company";
-    return IamEntityType;
-}({});

package/fesm/enums/iam-permission-type.enum.js

@@ -1,7 +0,0 @@
-export var IamPermissionType = /*#__PURE__*/ function(IamPermissionType) {
-    IamPermissionType["USER_ROLE"] = "user_role";
-    IamPermissionType["ROLE_ACTION"] = "role_action";
-    IamPermissionType["USER_ACTION"] = "user_action";
-    IamPermissionType["COMPANY_ACTION"] = "company_action";
-    return IamPermissionType;
-}({});

package/fesm/enums/permission-type.enum.js

@@ -1,6 +0,0 @@
-export var IAMPermissionMode = /*#__PURE__*/ function(IAMPermissionMode) {
-    IAMPermissionMode[IAMPermissionMode["RBAC"] = 1] = "RBAC";
-    IAMPermissionMode[IAMPermissionMode["DIRECT"] = 2] = "DIRECT";
-    IAMPermissionMode[IAMPermissionMode["FULL"] = 3] = "FULL";
-    return IAMPermissionMode;
-}({});

package/fesm/helpers/company-access.helper.js

@@ -1,18 +0,0 @@
-import { ForbiddenException } from '@nestjs/common';
-import { AUTH_MESSAGES } from '@flusys/nestjs-shared/constants';
-/**
- * Validates that user has access to the specified company.
- * Used for user-action and role-permission operations when company feature is enabled.
- *
- * @throws ForbiddenException if user doesn't have access to the company
- */ export function validateCompanyAccess(config, companyId, user, errorMessage = 'You do not have access to this company', messageKey = AUTH_MESSAGES.COMPANY_NO_ACCESS) {
-    if (!config.isCompanyFeatureEnabled() || !companyId) {
-        return;
-    }
-    if (user.companyId !== companyId) {
-        throw new ForbiddenException({
-            message: errorMessage,
-            messageKey
-        });
-    }
-}

package/fesm/helpers/company-access.helper.spec.js

@@ -1,64 +0,0 @@
-import { ForbiddenException } from '@nestjs/common';
-import { AUTH_MESSAGES } from '@flusys/nestjs-shared/constants';
-import { buildMockUser } from '@test-utils/mocks/logged-user.mock';
-import { validateCompanyAccess } from './company-access.helper';
-describe('validateCompanyAccess', ()=>{
-    function buildConfig(isCompanyFeatureEnabled) {
-        return {
-            isCompanyFeatureEnabled: jest.fn().mockReturnValue(isCompanyFeatureEnabled)
-        };
-    }
-    it('does not throw when company feature is disabled', ()=>{
-        const config = buildConfig(false);
-        const user = buildMockUser({
-            companyId: 'company-uuid-1'
-        });
-        expect(()=>validateCompanyAccess(config, 'company-uuid-2', user)).not.toThrow();
-    });
-    it('does not throw when companyId is undefined', ()=>{
-        const config = buildConfig(true);
-        const user = buildMockUser({
-            companyId: 'company-uuid-1'
-        });
-        expect(()=>validateCompanyAccess(config, undefined, user)).not.toThrow();
-    });
-    it('does not throw when the companyId matches the user company', ()=>{
-        const config = buildConfig(true);
-        const user = buildMockUser({
-            companyId: 'company-uuid-1'
-        });
-        expect(()=>validateCompanyAccess(config, 'company-uuid-1', user)).not.toThrow();
-    });
-    it('throws ForbiddenException with default message/key when the company does not match', ()=>{
-        const config = buildConfig(true);
-        const user = buildMockUser({
-            companyId: 'company-uuid-1'
-        });
-        try {
-            validateCompanyAccess(config, 'company-uuid-2', user);
-            fail('expected validateCompanyAccess to throw');
-        } catch (error) {
-            expect(error).toBeInstanceOf(ForbiddenException);
-            expect(error.getResponse()).toEqual(expect.objectContaining({
-                message: 'You do not have access to this company',
-                messageKey: AUTH_MESSAGES.COMPANY_NO_ACCESS
-            }));
-        }
-    });
-    it('throws with a custom message and messageKey when provided', ()=>{
-        const config = buildConfig(true);
-        const user = buildMockUser({
-            companyId: 'company-uuid-1'
-        });
-        try {
-            validateCompanyAccess(config, 'company-uuid-2', user, 'Custom message', 'custom.message.key');
-            fail('expected validateCompanyAccess to throw');
-        } catch (error) {
-            expect(error).toBeInstanceOf(ForbiddenException);
-            expect(error.getResponse()).toEqual(expect.objectContaining({
-                message: 'Custom message',
-                messageKey: 'custom.message.key'
-            }));
-        }
-    });
-});