@heavybit/pendoadmin-shared-lib 1.1.3 → 1.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/express/auth.middleware.d.ts.map +1 -1
- package/dist/express/auth.middleware.js +17 -4
- package/dist/express/auth.middleware.js.map +1 -1
- package/dist/messaging/index.d.ts +18 -3
- package/dist/messaging/index.d.ts.map +1 -1
- package/dist/messaging/index.js +21 -4
- package/dist/messaging/index.js.map +1 -1
- package/dist/nestjs/auth.guard.d.ts.map +1 -1
- package/dist/nestjs/auth.guard.js +15 -5
- package/dist/nestjs/auth.guard.js.map +1 -1
- package/dist/nestjs/index.d.ts +2 -0
- package/dist/nestjs/index.d.ts.map +1 -1
- package/dist/nestjs/index.js +1 -0
- package/dist/nestjs/index.js.map +1 -1
- package/dist/types/index.d.ts +7 -0
- package/dist/types/index.d.ts.map +1 -1
- package/dist/types/index.js +12 -0
- package/dist/types/index.js.map +1 -1
- package/package.json +1 -1
- package/src/express/auth.middleware.ts +14 -4
- package/src/messaging/index.ts +24 -5
- package/src/nestjs/auth.guard.ts +12 -5
- package/src/nestjs/index.ts +2 -0
- package/src/types/index.ts +16 -0
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.middleware.d.ts","sourceRoot":"","sources":["../../src/express/auth.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"auth.middleware.d.ts","sourceRoot":"","sources":["../../src/express/auth.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAapE,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,IAAI,CAAC,EAAE,SAAS,CAAC;SAClB;KACF;CACF;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,CAAC,EAAE,MAAM,IAChD,KAAK,OAAO,EAAE,MAAM,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CAsChE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,CAAC,EAAE,MAAM,IAChD,KAAK,OAAO,EAAE,MAAM,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CA6BhE"}
|
|
@@ -1,5 +1,18 @@
|
|
|
1
1
|
import { verifyToken, extractBearerToken } from '../common/jwt.utils.js';
|
|
2
2
|
import { GATEWAY_HEADERS } from '../types/index.js';
|
|
3
|
+
/** Parse a header value that may be a JSON array string or comma-separated. */
|
|
4
|
+
function parseArrayHeader(value) {
|
|
5
|
+
if (!value)
|
|
6
|
+
return [];
|
|
7
|
+
const trimmed = value.trim();
|
|
8
|
+
if (trimmed.startsWith('[')) {
|
|
9
|
+
try {
|
|
10
|
+
return JSON.parse(trimmed);
|
|
11
|
+
}
|
|
12
|
+
catch { /* fall through */ }
|
|
13
|
+
}
|
|
14
|
+
return trimmed.split(',').filter(Boolean);
|
|
15
|
+
}
|
|
3
16
|
/**
|
|
4
17
|
* Auth middleware for downstream services (behind API gateway).
|
|
5
18
|
* Reads user context from gateway-injected headers.
|
|
@@ -14,8 +27,8 @@ export function authenticateFromGateway(jwtSecret) {
|
|
|
14
27
|
id: userId,
|
|
15
28
|
email: req.headers[GATEWAY_HEADERS.USER_EMAIL] || '',
|
|
16
29
|
companyId: req.headers[GATEWAY_HEADERS.COMPANY_ID] || '',
|
|
17
|
-
roles: (req.headers[GATEWAY_HEADERS.USER_ROLES]
|
|
18
|
-
permissions: (req.headers[GATEWAY_HEADERS.USER_PERMISSIONS]
|
|
30
|
+
roles: parseArrayHeader(req.headers[GATEWAY_HEADERS.USER_ROLES]),
|
|
31
|
+
permissions: parseArrayHeader(req.headers[GATEWAY_HEADERS.USER_PERMISSIONS]),
|
|
19
32
|
isSuperAdmin: req.headers[GATEWAY_HEADERS.IS_SUPERADMIN] === 'true',
|
|
20
33
|
};
|
|
21
34
|
return next();
|
|
@@ -55,8 +68,8 @@ export function optionalAuthFromGateway(jwtSecret) {
|
|
|
55
68
|
id: userId,
|
|
56
69
|
email: req.headers[GATEWAY_HEADERS.USER_EMAIL] || '',
|
|
57
70
|
companyId: req.headers[GATEWAY_HEADERS.COMPANY_ID] || '',
|
|
58
|
-
roles: (req.headers[GATEWAY_HEADERS.USER_ROLES]
|
|
59
|
-
permissions: (req.headers[GATEWAY_HEADERS.USER_PERMISSIONS]
|
|
71
|
+
roles: parseArrayHeader(req.headers[GATEWAY_HEADERS.USER_ROLES]),
|
|
72
|
+
permissions: parseArrayHeader(req.headers[GATEWAY_HEADERS.USER_PERMISSIONS]),
|
|
60
73
|
isSuperAdmin: req.headers[GATEWAY_HEADERS.IS_SUPERADMIN] === 'true',
|
|
61
74
|
};
|
|
62
75
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.middleware.js","sourceRoot":"","sources":["../../src/express/auth.middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"auth.middleware.js","sourceRoot":"","sources":["../../src/express/auth.middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAC;AAEpE,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAkB;IACxD,OAAO,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAQ,EAAE;QAChE,0CAA0C;QAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAW,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,GAAG;gBACT,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAW,IAAI,EAAE;gBAC9D,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAW,IAAI,EAAE;gBAClE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAW,CAAC;gBAC1E,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,gBAAgB,CAAW,CAAC;gBACtF,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,MAAM;aACpE,CAAC;YACF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,oEAAoE;QACpE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC5D,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBAC9C,GAAG,CAAC,IAAI,GAAG;wBACT,EAAE,EAAE,OAAO,CAAC,GAAG;wBACf,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;wBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;wBACtC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;qBAC5C,CAAC;oBACF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAkB;IACxD,OAAO,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAQ,EAAE;QAChE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAW,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,GAAG;gBACT,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAW,IAAI,EAAE;gBAC9D,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAW,IAAI,EAAE;gBAClE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAW,CAAC;gBAC1E,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,gBAAgB,CAAW,CAAC;gBACtF,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,MAAM;aACpE,CAAC;QACJ,CAAC;aAAM,IAAI,SAAS,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC5D,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBAC9C,GAAG,CAAC,IAAI,GAAG;wBACT,EAAE,EAAE,OAAO,CAAC,GAAG;wBACf,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;wBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;wBACtC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;qBAC5C,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -11,6 +11,14 @@ export declare const EVENTS: {
|
|
|
11
11
|
readonly AUTH_COMPANY_CONFIG_UPDATED: "auth.company.config_updated";
|
|
12
12
|
readonly AUTH_PASSWORD_RESET_REQUESTED: "auth.password.reset_requested";
|
|
13
13
|
readonly AUTH_OTP_REQUESTED: "auth.otp.requested";
|
|
14
|
+
readonly USER_CREATED: "auth.user.created";
|
|
15
|
+
readonly USER_UPDATED: "auth.user.updated";
|
|
16
|
+
readonly USER_DELETED: "auth.user.deleted";
|
|
17
|
+
readonly USER_LOGGED_IN: "auth.login.success";
|
|
18
|
+
readonly USER_LOGGED_OUT: "auth.user.logged_out";
|
|
19
|
+
readonly COMPANY_CREATED: "auth.company.created";
|
|
20
|
+
readonly COMPANY_UPDATED: "auth.company.updated";
|
|
21
|
+
readonly COMPANY_DELETED: "auth.company.deleted";
|
|
14
22
|
readonly SMS_MESSAGE_SENT: "sms.message.sent";
|
|
15
23
|
readonly SMS_MESSAGE_DELIVERED: "sms.message.delivered";
|
|
16
24
|
readonly SMS_MESSAGE_FAILED: "sms.message.failed";
|
|
@@ -19,6 +27,16 @@ export declare const EVENTS: {
|
|
|
19
27
|
readonly SMS_PROCESS_SCHEDULED: "sms.process_scheduled";
|
|
20
28
|
readonly SMS_BULK_QUEUED: "sms.bulk.queued";
|
|
21
29
|
readonly SMS_BULK_COMPLETED: "sms.bulk.completed";
|
|
30
|
+
readonly SMS_ACCOUNT_CREATED: "sms.account.created";
|
|
31
|
+
readonly SMS_SENT: "sms.message.sent";
|
|
32
|
+
readonly SMS_FAILED: "sms.message.failed";
|
|
33
|
+
readonly SMS_SCHEDULED: "sms.schedule.triggered";
|
|
34
|
+
readonly SMS_DELIVERY_REPORT: "sms.delivery.report";
|
|
35
|
+
readonly NOTIFICATION_SEND_SMS: "notification.send_sms";
|
|
36
|
+
readonly NOTIFICATION_SEND_WHATSAPP: "notification.send_whatsapp";
|
|
37
|
+
readonly NOTIFICATION_SEND_EMAIL: "notification.send_email";
|
|
38
|
+
readonly NOTIFICATION_REQUESTED: "notification.requested";
|
|
39
|
+
readonly NOTIFICATION_SENT: "notification.sent";
|
|
22
40
|
readonly MPESA_PAYBILL_CREATED: "mpesa.paybill.created";
|
|
23
41
|
readonly MPESA_STK_INITIATED: "mpesa.stk.initiated";
|
|
24
42
|
readonly MPESA_B2C_INITIATED: "mpesa.b2c.initiated";
|
|
@@ -35,9 +53,6 @@ export declare const EVENTS: {
|
|
|
35
53
|
readonly WHATSAPP_MESSAGE_RECEIVED: "whatsapp.message.received";
|
|
36
54
|
readonly WHATSAPP_MESSAGE_DELIVERED: "whatsapp.message.delivered";
|
|
37
55
|
readonly WHATSAPP_MESSAGE_READ: "whatsapp.message.read";
|
|
38
|
-
readonly NOTIFICATION_SEND_SMS: "notification.send_sms";
|
|
39
|
-
readonly NOTIFICATION_SEND_WHATSAPP: "notification.send_whatsapp";
|
|
40
|
-
readonly NOTIFICATION_SEND_EMAIL: "notification.send_email";
|
|
41
56
|
readonly AI_COMPLETION_SUCCESS: "ai.completion.success";
|
|
42
57
|
readonly AI_COMPLETION_FAILED: "ai.completion.failed";
|
|
43
58
|
readonly AI_ANOMALY_DETECTED: "ai.anomaly.detected";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/messaging/index.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,MAAM
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/messaging/index.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+ET,CAAC;AAEX,eAAO,MAAM,SAAS;;;CAGZ,CAAC;AAIX,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,GAAG,CAAS;gBAER,GAAG,EAAE,MAAM;IAIjB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAyBxB,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAE,MAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9G,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,EAC9B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,EAC7E,QAAQ,GAAE,MAAyB,GAClC,OAAO,CAAC,IAAI,CAAC;IAyBV,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAI7B"}
|
package/dist/messaging/index.js
CHANGED
|
@@ -16,6 +16,15 @@ export const EVENTS = {
|
|
|
16
16
|
AUTH_COMPANY_CONFIG_UPDATED: 'auth.company.config_updated',
|
|
17
17
|
AUTH_PASSWORD_RESET_REQUESTED: 'auth.password.reset_requested',
|
|
18
18
|
AUTH_OTP_REQUESTED: 'auth.otp.requested',
|
|
19
|
+
// Auth shorthand aliases (used by auth-admin-service)
|
|
20
|
+
USER_CREATED: 'auth.user.created',
|
|
21
|
+
USER_UPDATED: 'auth.user.updated',
|
|
22
|
+
USER_DELETED: 'auth.user.deleted',
|
|
23
|
+
USER_LOGGED_IN: 'auth.login.success',
|
|
24
|
+
USER_LOGGED_OUT: 'auth.user.logged_out',
|
|
25
|
+
COMPANY_CREATED: 'auth.company.created',
|
|
26
|
+
COMPANY_UPDATED: 'auth.company.updated',
|
|
27
|
+
COMPANY_DELETED: 'auth.company.deleted',
|
|
19
28
|
// SMS events
|
|
20
29
|
SMS_MESSAGE_SENT: 'sms.message.sent',
|
|
21
30
|
SMS_MESSAGE_DELIVERED: 'sms.message.delivered',
|
|
@@ -25,6 +34,18 @@ export const EVENTS = {
|
|
|
25
34
|
SMS_PROCESS_SCHEDULED: 'sms.process_scheduled',
|
|
26
35
|
SMS_BULK_QUEUED: 'sms.bulk.queued',
|
|
27
36
|
SMS_BULK_COMPLETED: 'sms.bulk.completed',
|
|
37
|
+
// SMS shorthand aliases (used by sms-service)
|
|
38
|
+
SMS_ACCOUNT_CREATED: 'sms.account.created',
|
|
39
|
+
SMS_SENT: 'sms.message.sent',
|
|
40
|
+
SMS_FAILED: 'sms.message.failed',
|
|
41
|
+
SMS_SCHEDULED: 'sms.schedule.triggered',
|
|
42
|
+
SMS_DELIVERY_REPORT: 'sms.delivery.report',
|
|
43
|
+
// Notification events
|
|
44
|
+
NOTIFICATION_SEND_SMS: 'notification.send_sms',
|
|
45
|
+
NOTIFICATION_SEND_WHATSAPP: 'notification.send_whatsapp',
|
|
46
|
+
NOTIFICATION_SEND_EMAIL: 'notification.send_email',
|
|
47
|
+
NOTIFICATION_REQUESTED: 'notification.requested',
|
|
48
|
+
NOTIFICATION_SENT: 'notification.sent',
|
|
28
49
|
// M-Pesa events
|
|
29
50
|
MPESA_PAYBILL_CREATED: 'mpesa.paybill.created',
|
|
30
51
|
MPESA_STK_INITIATED: 'mpesa.stk.initiated',
|
|
@@ -44,10 +65,6 @@ export const EVENTS = {
|
|
|
44
65
|
WHATSAPP_MESSAGE_RECEIVED: 'whatsapp.message.received',
|
|
45
66
|
WHATSAPP_MESSAGE_DELIVERED: 'whatsapp.message.delivered',
|
|
46
67
|
WHATSAPP_MESSAGE_READ: 'whatsapp.message.read',
|
|
47
|
-
// Notification events
|
|
48
|
-
NOTIFICATION_SEND_SMS: 'notification.send_sms',
|
|
49
|
-
NOTIFICATION_SEND_WHATSAPP: 'notification.send_whatsapp',
|
|
50
|
-
NOTIFICATION_SEND_EMAIL: 'notification.send_email',
|
|
51
68
|
// AI events
|
|
52
69
|
AI_COMPLETION_SUCCESS: 'ai.completion.success',
|
|
53
70
|
AI_COMPLETION_FAILED: 'ai.completion.failed',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/messaging/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC,yDAAyD;AAEzD,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,cAAc;IACd,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,oBAAoB,EAAE,sBAAsB;IAC5C,2BAA2B,EAAE,6BAA6B;IAC1D,6BAA6B,EAAE,+BAA+B;IAC9D,kBAAkB,EAAE,oBAAoB;IAExC,aAAa;IACb,gBAAgB,EAAE,kBAAkB;IACpC,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,oBAAoB;IACxC,mBAAmB,EAAE,qBAAqB;IAC1C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,oBAAoB;IAExC,gBAAgB;IAChB,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,mBAAmB,EAAE,qBAAqB;IAC1C,sBAAsB,EAAE,wBAAwB;IAChD,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,wBAAwB,EAAE,0BAA0B;IACpD,mBAAmB,EAAE,qBAAqB;IAE1C,cAAc;IACd,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,0BAA0B,EAAE,4BAA4B;IACxD,qBAAqB,EAAE,uBAAuB;IAE9C,kBAAkB;IAClB,qBAAqB,EAAE,uBAAuB;IAC9C,yBAAyB,EAAE,2BAA2B;IACtD,0BAA0B,EAAE,4BAA4B;IACxD,qBAAqB,EAAE,uBAAuB;IAE9C,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/messaging/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC,yDAAyD;AAEzD,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,cAAc;IACd,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,oBAAoB,EAAE,sBAAsB;IAC5C,2BAA2B,EAAE,6BAA6B;IAC1D,6BAA6B,EAAE,+BAA+B;IAC9D,kBAAkB,EAAE,oBAAoB;IAExC,sDAAsD;IACtD,YAAY,EAAE,mBAAmB;IACjC,YAAY,EAAE,mBAAmB;IACjC,YAAY,EAAE,mBAAmB;IACjC,cAAc,EAAE,oBAAoB;IACpC,eAAe,EAAE,sBAAsB;IACvC,eAAe,EAAE,sBAAsB;IACvC,eAAe,EAAE,sBAAsB;IACvC,eAAe,EAAE,sBAAsB;IAEvC,aAAa;IACb,gBAAgB,EAAE,kBAAkB;IACpC,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,oBAAoB;IACxC,mBAAmB,EAAE,qBAAqB;IAC1C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,oBAAoB;IAExC,8CAA8C;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,QAAQ,EAAE,kBAAkB;IAC5B,UAAU,EAAE,oBAAoB;IAChC,aAAa,EAAE,wBAAwB;IACvC,mBAAmB,EAAE,qBAAqB;IAE1C,sBAAsB;IACtB,qBAAqB,EAAE,uBAAuB;IAC9C,0BAA0B,EAAE,4BAA4B;IACxD,uBAAuB,EAAE,yBAAyB;IAClD,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IAEtC,gBAAgB;IAChB,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,mBAAmB,EAAE,qBAAqB;IAC1C,sBAAsB,EAAE,wBAAwB;IAChD,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,wBAAwB,EAAE,0BAA0B;IACpD,mBAAmB,EAAE,qBAAqB;IAE1C,cAAc;IACd,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,0BAA0B,EAAE,4BAA4B;IACxD,qBAAqB,EAAE,uBAAuB;IAE9C,kBAAkB;IAClB,qBAAqB,EAAE,uBAAuB;IAC9C,yBAAyB,EAAE,2BAA2B;IACtD,0BAA0B,EAAE,4BAA4B;IACxD,qBAAqB,EAAE,uBAAuB;IAE9C,YAAY;IACZ,qBAAqB,EAAE,uBAAuB;IAC9C,oBAAoB,EAAE,sBAAsB;IAC5C,mBAAmB,EAAE,qBAAqB;IAE1C,iBAAiB;IACjB,yBAAyB,EAAE,2BAA2B;IACtD,qBAAqB,EAAE,uBAAuB;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,MAAM,EAAE,mBAAmB;IAC3B,QAAQ,EAAE,qBAAqB;CACvB,CAAC;AAEX,yDAAyD;AAEzD,MAAM,OAAO,cAAc;IACjB,UAAU,GAAwB,IAAI,CAAC;IACvC,OAAO,GAAmB,IAAI,CAAC;IAC/B,GAAG,CAAS;IAEpB,YAAY,GAAW;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YAErD,mBAAmB;YACnB,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnF,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAClC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC/B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBAC3D,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,IAA6B,EAAE,WAAmB,SAAS,CAAC,MAAM;QAClG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACzC,UAAU;YACV,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE;YAClD,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,WAA8B,EAC9B,OAA6E,EAC7E,WAAmB,SAAS,CAAC,MAAM;QAEnC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,GAA0B,EAAE,EAAE;YACzE,IAAI,CAAC,GAAG;gBAAE,OAAO;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAClD,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC5D,IAAI,CAAC,OAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChG,IAAI,CAAC,OAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc;YACvD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,wBAAwB,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;CACF"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;
|
|
1
|
+
{"version":3,"file":"auth.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAczC,eAAO,MAAM,aAAa,aAAa,CAAC;AAExC;;GAEG;AACH,qBACa,SAAU,YAAW,WAAW;IAC/B,OAAO,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAElC,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CA8C/D"}
|
|
@@ -11,6 +11,19 @@ import { Injectable, UnauthorizedException, } from '@nestjs/common';
|
|
|
11
11
|
import { Reflector } from '@nestjs/core';
|
|
12
12
|
import { verifyToken } from '../common/jwt.utils.js';
|
|
13
13
|
import { GATEWAY_HEADERS } from '../types/index.js';
|
|
14
|
+
/** Parse a header value that may be a JSON array string or comma-separated. */
|
|
15
|
+
function parseArrayHeader(value) {
|
|
16
|
+
if (!value)
|
|
17
|
+
return [];
|
|
18
|
+
const trimmed = value.trim();
|
|
19
|
+
if (trimmed.startsWith('[')) {
|
|
20
|
+
try {
|
|
21
|
+
return JSON.parse(trimmed);
|
|
22
|
+
}
|
|
23
|
+
catch { /* fall through */ }
|
|
24
|
+
}
|
|
25
|
+
return trimmed.split(',').filter(Boolean);
|
|
26
|
+
}
|
|
14
27
|
export const IS_PUBLIC_KEY = 'isPublic';
|
|
15
28
|
/**
|
|
16
29
|
* NestJS Guard: validates JWT or trusts gateway-injected headers.
|
|
@@ -31,15 +44,12 @@ let AuthGuard = class AuthGuard {
|
|
|
31
44
|
// Trust gateway-injected headers first
|
|
32
45
|
const gatewayUserId = request.headers[GATEWAY_HEADERS.USER_ID];
|
|
33
46
|
if (gatewayUserId) {
|
|
34
|
-
const permissions = request.headers[GATEWAY_HEADERS.USER_PERMISSIONS];
|
|
35
47
|
request.user = {
|
|
36
48
|
id: gatewayUserId,
|
|
37
49
|
companyId: request.headers[GATEWAY_HEADERS.COMPANY_ID] || undefined,
|
|
38
50
|
email: request.headers[GATEWAY_HEADERS.USER_EMAIL] || undefined,
|
|
39
|
-
roles: request.headers[GATEWAY_HEADERS.USER_ROLES]
|
|
40
|
-
|
|
41
|
-
: [],
|
|
42
|
-
permissions: permissions ? permissions.split(',') : [],
|
|
51
|
+
roles: parseArrayHeader(request.headers[GATEWAY_HEADERS.USER_ROLES]),
|
|
52
|
+
permissions: parseArrayHeader(request.headers[GATEWAY_HEADERS.USER_PERMISSIONS]),
|
|
43
53
|
isSuperAdmin: request.headers[GATEWAY_HEADERS.IS_SUPERADMIN] === 'true',
|
|
44
54
|
};
|
|
45
55
|
return true;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.guard.js","sourceRoot":"","sources":["../../src/nestjs/auth.guard.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,UAAU,EAGV,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAC;AAEpE,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAExC;;GAEG;AAEI,IAAM,SAAS,GAAf,MAAM,SAAS;IACA;IAApB,YAAoB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAE5C,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,aAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAEpD,uCAAuC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,aAAa,EAAE,CAAC;YAClB,
|
|
1
|
+
{"version":3,"file":"auth.guard.js","sourceRoot":"","sources":["../../src/nestjs/auth.guard.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,UAAU,EAGV,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAC;AAEpE,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAExC;;GAEG;AAEI,IAAM,SAAS,GAAf,MAAM,SAAS;IACA;IAApB,YAAoB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAE5C,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,aAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAEpD,uCAAuC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,GAAG;gBACb,EAAE,EAAE,aAAa;gBACjB,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,SAAS;gBACnE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,SAAS;gBAC/D,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAW,CAAC;gBAC9E,WAAW,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,gBAAgB,CAAW,CAAC;gBAC1F,YAAY,EACV,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,MAAM;aAC/C,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oCAAoC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAW,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,GAAG;gBACb,EAAE,EAAE,OAAO,CAAC,GAAG;gBACf,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;gBACtC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;aAC/B,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;CACF,CAAA;AAjDY,SAAS;IADrB,UAAU,EAAE;qCAEoB,SAAS;GAD7B,SAAS,CAiDrB"}
|
package/dist/nestjs/index.d.ts
CHANGED
|
@@ -4,6 +4,8 @@ export { PermissionGuard } from './permission.guard.js';
|
|
|
4
4
|
export { CurrentUser } from './user.decorator.js';
|
|
5
5
|
export { CorrelationInterceptor } from './correlation.interceptor.js';
|
|
6
6
|
export { GlobalExceptionFilter } from './exception.filter.js';
|
|
7
|
+
export { resolveCompanyId } from '../types/index.js';
|
|
8
|
+
export type { IAuthUser } from '../types/index.js';
|
|
7
9
|
export { BaseSocketGateway } from '../socket/nestjs-socket.module.js';
|
|
8
10
|
export type { NestSocketOptions } from '../socket/nestjs-socket.module.js';
|
|
9
11
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,MAAM,GACP,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,MAAM,GACP,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC"}
|
package/dist/nestjs/index.js
CHANGED
|
@@ -4,6 +4,7 @@ export { PermissionGuard } from './permission.guard.js';
|
|
|
4
4
|
export { CurrentUser } from './user.decorator.js';
|
|
5
5
|
export { CorrelationInterceptor } from './correlation.interceptor.js';
|
|
6
6
|
export { GlobalExceptionFilter } from './exception.filter.js';
|
|
7
|
+
export { resolveCompanyId } from '../types/index.js';
|
|
7
8
|
// Socket.IO NestJS gateway base class
|
|
8
9
|
export { BaseSocketGateway } from '../socket/nestjs-socket.module.js';
|
|
9
10
|
//# sourceMappingURL=index.js.map
|
package/dist/nestjs/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,MAAM,GACP,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,MAAM,GACP,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,sCAAsC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC"}
|
package/dist/types/index.d.ts
CHANGED
|
@@ -63,6 +63,13 @@ export interface IAuthUser {
|
|
|
63
63
|
permissions: string[];
|
|
64
64
|
isSuperAdmin: boolean;
|
|
65
65
|
}
|
|
66
|
+
/**
|
|
67
|
+
* Resolve the effective companyId for a request.
|
|
68
|
+
*
|
|
69
|
+
* - Company admins: always returns `user.companyId` (ignore requested override).
|
|
70
|
+
* - Super admins: uses `requestedCompanyId` if provided, else `user.companyId`.
|
|
71
|
+
*/
|
|
72
|
+
export declare function resolveCompanyId(user: IAuthUser, requestedCompanyId?: string | null): string;
|
|
66
73
|
export interface ICompany {
|
|
67
74
|
id: string;
|
|
68
75
|
name: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,0BAA0B,EAAE,OAAO,CAAC;IACpC,aAAa,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,aAAa,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;CACvB;AAMD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAMD,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;CAClB;AAMD,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE,eAAe,CAAC;CACvB;AAMD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAMD,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,eAAO,MAAM,eAAe;;;;;;;;;CASlB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,0BAA0B,EAAE,OAAO,CAAC;IACpC,aAAa,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,aAAa,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,SAAS,EACf,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,GACjC,MAAM,CAKR;AAMD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAMD,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;CAClB;AAMD,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE,eAAe,CAAC;CACvB;AAMD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAMD,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,eAAO,MAAM,eAAe;;;;;;;;;CASlB,CAAC"}
|
package/dist/types/index.js
CHANGED
|
@@ -1,6 +1,18 @@
|
|
|
1
1
|
// ──────────────────────────────────────────────
|
|
2
2
|
// User & Auth Types
|
|
3
3
|
// ──────────────────────────────────────────────
|
|
4
|
+
/**
|
|
5
|
+
* Resolve the effective companyId for a request.
|
|
6
|
+
*
|
|
7
|
+
* - Company admins: always returns `user.companyId` (ignore requested override).
|
|
8
|
+
* - Super admins: uses `requestedCompanyId` if provided, else `user.companyId`.
|
|
9
|
+
*/
|
|
10
|
+
export function resolveCompanyId(user, requestedCompanyId) {
|
|
11
|
+
if (user.isSuperAdmin && requestedCompanyId) {
|
|
12
|
+
return requestedCompanyId;
|
|
13
|
+
}
|
|
14
|
+
return user.companyId;
|
|
15
|
+
}
|
|
4
16
|
// ──────────────────────────────────────────────
|
|
5
17
|
// Gateway Header Types
|
|
6
18
|
// ──────────────────────────────────────────────
|
package/dist/types/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,oBAAoB;AACpB,iDAAiD;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,oBAAoB;AACpB,iDAAiD;AAyEjD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAe,EACf,kBAAkC;IAElC,IAAI,IAAI,CAAC,YAAY,IAAI,kBAAkB,EAAE,CAAC;QAC5C,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB,CAAC;AAwJD,iDAAiD;AACjD,uBAAuB;AACvB,iDAAiD;AAEjD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,OAAO,EAAE,WAAW;IACpB,UAAU,EAAE,cAAc;IAC1B,UAAU,EAAE,cAAc;IAC1B,UAAU,EAAE,cAAc;IAC1B,gBAAgB,EAAE,oBAAoB;IACtC,aAAa,EAAE,iBAAiB;IAChC,cAAc,EAAE,kBAAkB;IAClC,YAAY,EAAE,gBAAgB;CACtB,CAAC"}
|
package/package.json
CHANGED
|
@@ -2,6 +2,16 @@ import type { Request, Response, NextFunction } from 'express';
|
|
|
2
2
|
import { verifyToken, extractBearerToken } from '../common/jwt.utils.js';
|
|
3
3
|
import { GATEWAY_HEADERS, type IAuthUser } from '../types/index.js';
|
|
4
4
|
|
|
5
|
+
/** Parse a header value that may be a JSON array string or comma-separated. */
|
|
6
|
+
function parseArrayHeader(value: string | undefined): string[] {
|
|
7
|
+
if (!value) return [];
|
|
8
|
+
const trimmed = value.trim();
|
|
9
|
+
if (trimmed.startsWith('[')) {
|
|
10
|
+
try { return JSON.parse(trimmed); } catch { /* fall through */ }
|
|
11
|
+
}
|
|
12
|
+
return trimmed.split(',').filter(Boolean);
|
|
13
|
+
}
|
|
14
|
+
|
|
5
15
|
// Extend Express Request
|
|
6
16
|
declare global {
|
|
7
17
|
namespace Express {
|
|
@@ -25,8 +35,8 @@ export function authenticateFromGateway(jwtSecret?: string) {
|
|
|
25
35
|
id: userId,
|
|
26
36
|
email: req.headers[GATEWAY_HEADERS.USER_EMAIL] as string || '',
|
|
27
37
|
companyId: req.headers[GATEWAY_HEADERS.COMPANY_ID] as string || '',
|
|
28
|
-
roles: (
|
|
29
|
-
permissions: (
|
|
38
|
+
roles: parseArrayHeader(req.headers[GATEWAY_HEADERS.USER_ROLES] as string),
|
|
39
|
+
permissions: parseArrayHeader(req.headers[GATEWAY_HEADERS.USER_PERMISSIONS] as string),
|
|
30
40
|
isSuperAdmin: req.headers[GATEWAY_HEADERS.IS_SUPERADMIN] === 'true',
|
|
31
41
|
};
|
|
32
42
|
return next();
|
|
@@ -68,8 +78,8 @@ export function optionalAuthFromGateway(jwtSecret?: string) {
|
|
|
68
78
|
id: userId,
|
|
69
79
|
email: req.headers[GATEWAY_HEADERS.USER_EMAIL] as string || '',
|
|
70
80
|
companyId: req.headers[GATEWAY_HEADERS.COMPANY_ID] as string || '',
|
|
71
|
-
roles: (
|
|
72
|
-
permissions: (
|
|
81
|
+
roles: parseArrayHeader(req.headers[GATEWAY_HEADERS.USER_ROLES] as string),
|
|
82
|
+
permissions: parseArrayHeader(req.headers[GATEWAY_HEADERS.USER_PERMISSIONS] as string),
|
|
73
83
|
isSuperAdmin: req.headers[GATEWAY_HEADERS.IS_SUPERADMIN] === 'true',
|
|
74
84
|
};
|
|
75
85
|
} else if (jwtSecret) {
|
package/src/messaging/index.ts
CHANGED
|
@@ -21,6 +21,16 @@ export const EVENTS = {
|
|
|
21
21
|
AUTH_PASSWORD_RESET_REQUESTED: 'auth.password.reset_requested',
|
|
22
22
|
AUTH_OTP_REQUESTED: 'auth.otp.requested',
|
|
23
23
|
|
|
24
|
+
// Auth shorthand aliases (used by auth-admin-service)
|
|
25
|
+
USER_CREATED: 'auth.user.created',
|
|
26
|
+
USER_UPDATED: 'auth.user.updated',
|
|
27
|
+
USER_DELETED: 'auth.user.deleted',
|
|
28
|
+
USER_LOGGED_IN: 'auth.login.success',
|
|
29
|
+
USER_LOGGED_OUT: 'auth.user.logged_out',
|
|
30
|
+
COMPANY_CREATED: 'auth.company.created',
|
|
31
|
+
COMPANY_UPDATED: 'auth.company.updated',
|
|
32
|
+
COMPANY_DELETED: 'auth.company.deleted',
|
|
33
|
+
|
|
24
34
|
// SMS events
|
|
25
35
|
SMS_MESSAGE_SENT: 'sms.message.sent',
|
|
26
36
|
SMS_MESSAGE_DELIVERED: 'sms.message.delivered',
|
|
@@ -31,6 +41,20 @@ export const EVENTS = {
|
|
|
31
41
|
SMS_BULK_QUEUED: 'sms.bulk.queued',
|
|
32
42
|
SMS_BULK_COMPLETED: 'sms.bulk.completed',
|
|
33
43
|
|
|
44
|
+
// SMS shorthand aliases (used by sms-service)
|
|
45
|
+
SMS_ACCOUNT_CREATED: 'sms.account.created',
|
|
46
|
+
SMS_SENT: 'sms.message.sent',
|
|
47
|
+
SMS_FAILED: 'sms.message.failed',
|
|
48
|
+
SMS_SCHEDULED: 'sms.schedule.triggered',
|
|
49
|
+
SMS_DELIVERY_REPORT: 'sms.delivery.report',
|
|
50
|
+
|
|
51
|
+
// Notification events
|
|
52
|
+
NOTIFICATION_SEND_SMS: 'notification.send_sms',
|
|
53
|
+
NOTIFICATION_SEND_WHATSAPP: 'notification.send_whatsapp',
|
|
54
|
+
NOTIFICATION_SEND_EMAIL: 'notification.send_email',
|
|
55
|
+
NOTIFICATION_REQUESTED: 'notification.requested',
|
|
56
|
+
NOTIFICATION_SENT: 'notification.sent',
|
|
57
|
+
|
|
34
58
|
// M-Pesa events
|
|
35
59
|
MPESA_PAYBILL_CREATED: 'mpesa.paybill.created',
|
|
36
60
|
MPESA_STK_INITIATED: 'mpesa.stk.initiated',
|
|
@@ -53,11 +77,6 @@ export const EVENTS = {
|
|
|
53
77
|
WHATSAPP_MESSAGE_DELIVERED: 'whatsapp.message.delivered',
|
|
54
78
|
WHATSAPP_MESSAGE_READ: 'whatsapp.message.read',
|
|
55
79
|
|
|
56
|
-
// Notification events
|
|
57
|
-
NOTIFICATION_SEND_SMS: 'notification.send_sms',
|
|
58
|
-
NOTIFICATION_SEND_WHATSAPP: 'notification.send_whatsapp',
|
|
59
|
-
NOTIFICATION_SEND_EMAIL: 'notification.send_email',
|
|
60
|
-
|
|
61
80
|
// AI events
|
|
62
81
|
AI_COMPLETION_SUCCESS: 'ai.completion.success',
|
|
63
82
|
AI_COMPLETION_FAILED: 'ai.completion.failed',
|
package/src/nestjs/auth.guard.ts
CHANGED
|
@@ -8,6 +8,16 @@ import { Reflector } from '@nestjs/core';
|
|
|
8
8
|
import { verifyToken } from '../common/jwt.utils.js';
|
|
9
9
|
import { GATEWAY_HEADERS, type IAuthUser } from '../types/index.js';
|
|
10
10
|
|
|
11
|
+
/** Parse a header value that may be a JSON array string or comma-separated. */
|
|
12
|
+
function parseArrayHeader(value: string | undefined): string[] {
|
|
13
|
+
if (!value) return [];
|
|
14
|
+
const trimmed = value.trim();
|
|
15
|
+
if (trimmed.startsWith('[')) {
|
|
16
|
+
try { return JSON.parse(trimmed); } catch { /* fall through */ }
|
|
17
|
+
}
|
|
18
|
+
return trimmed.split(',').filter(Boolean);
|
|
19
|
+
}
|
|
20
|
+
|
|
11
21
|
export const IS_PUBLIC_KEY = 'isPublic';
|
|
12
22
|
|
|
13
23
|
/**
|
|
@@ -29,15 +39,12 @@ export class AuthGuard implements CanActivate {
|
|
|
29
39
|
// Trust gateway-injected headers first
|
|
30
40
|
const gatewayUserId = request.headers[GATEWAY_HEADERS.USER_ID];
|
|
31
41
|
if (gatewayUserId) {
|
|
32
|
-
const permissions = request.headers[GATEWAY_HEADERS.USER_PERMISSIONS];
|
|
33
42
|
request.user = {
|
|
34
43
|
id: gatewayUserId,
|
|
35
44
|
companyId: request.headers[GATEWAY_HEADERS.COMPANY_ID] || undefined,
|
|
36
45
|
email: request.headers[GATEWAY_HEADERS.USER_EMAIL] || undefined,
|
|
37
|
-
roles: request.headers[GATEWAY_HEADERS.USER_ROLES]
|
|
38
|
-
|
|
39
|
-
: [],
|
|
40
|
-
permissions: permissions ? (permissions as string).split(',') : [],
|
|
46
|
+
roles: parseArrayHeader(request.headers[GATEWAY_HEADERS.USER_ROLES] as string),
|
|
47
|
+
permissions: parseArrayHeader(request.headers[GATEWAY_HEADERS.USER_PERMISSIONS] as string),
|
|
41
48
|
isSuperAdmin:
|
|
42
49
|
request.headers[GATEWAY_HEADERS.IS_SUPERADMIN] === 'true',
|
|
43
50
|
} as IAuthUser;
|
package/src/nestjs/index.ts
CHANGED
|
@@ -9,6 +9,8 @@ export { PermissionGuard } from './permission.guard.js';
|
|
|
9
9
|
export { CurrentUser } from './user.decorator.js';
|
|
10
10
|
export { CorrelationInterceptor } from './correlation.interceptor.js';
|
|
11
11
|
export { GlobalExceptionFilter } from './exception.filter.js';
|
|
12
|
+
export { resolveCompanyId } from '../types/index.js';
|
|
13
|
+
export type { IAuthUser } from '../types/index.js';
|
|
12
14
|
|
|
13
15
|
// Socket.IO NestJS gateway base class
|
|
14
16
|
export { BaseSocketGateway } from '../socket/nestjs-socket.module.js';
|
package/src/types/index.ts
CHANGED
|
@@ -73,6 +73,22 @@ export interface IAuthUser {
|
|
|
73
73
|
isSuperAdmin: boolean;
|
|
74
74
|
}
|
|
75
75
|
|
|
76
|
+
/**
|
|
77
|
+
* Resolve the effective companyId for a request.
|
|
78
|
+
*
|
|
79
|
+
* - Company admins: always returns `user.companyId` (ignore requested override).
|
|
80
|
+
* - Super admins: uses `requestedCompanyId` if provided, else `user.companyId`.
|
|
81
|
+
*/
|
|
82
|
+
export function resolveCompanyId(
|
|
83
|
+
user: IAuthUser,
|
|
84
|
+
requestedCompanyId?: string | null,
|
|
85
|
+
): string {
|
|
86
|
+
if (user.isSuperAdmin && requestedCompanyId) {
|
|
87
|
+
return requestedCompanyId;
|
|
88
|
+
}
|
|
89
|
+
return user.companyId;
|
|
90
|
+
}
|
|
91
|
+
|
|
76
92
|
// ──────────────────────────────────────────────
|
|
77
93
|
// Company & Branch Types
|
|
78
94
|
// ──────────────────────────────────────────────
|