@intlayer/backend 5.6.0 → 5.7.1

package/dist/esm/controllers/project.controller.mjs

@@ -1,12 +1,13 @@
 import { logger } from "./../logger/index.mjs";
+import { SessionModel } from "./../models/session.model.mjs";
 import * as projectService from "./../services/project.service.mjs";
-import * as sessionAuthService from "./../services/sessionAuth.service.mjs";
 import * as userService from "./../services/user.service.mjs";
 import { ErrorHandler } from "./../utils/errors/index.mjs";
 import {
   getProjectFiltersAndPagination
 } from "./../utils/filtersAndPagination/getProjectFiltersAndPagination.mjs";
 import { mapProjectsToAPI, mapProjectToAPI } from "./../utils/mapper/project.mjs";
+import { hasPermission } from "./../utils/permissions.mjs";
 import { getPLanDetails } from "./../utils/plan.mjs";
 import {
   formatPaginatedResponse,
@@ -14,7 +15,7 @@ import {
 } from "./../utils/responseData.mjs";
 import { t } from "express-intlayer";
 const getProjects = async (req, res, _next) => {
-  const { user, organization, projectRights } = res.locals;
+  const { user, organization, roles } = res.locals;
   const { filters, pageSize, skip, page, getNumberOfPages } = getProjectFiltersAndPagination(req);
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -24,14 +25,14 @@ const getProjects = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!projectRights?.read) {
-    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_RIGHTS_NOT_READ");
+  if (!hasPermission(roles, "project:read")(res.locals)) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
   const restrictedFilter = {
     ...filters,
-    membersIds: { $in: [...filters.membersIds ?? [], String(user._id)] },
-    organizationId: String(organization._id)
+    membersIds: { $in: [...filters.membersIds ?? [], String(user.id)] },
+    organizationId: String(organization.id)
   };
   try {
     const projects = await projectService.findProjects(
@@ -40,11 +41,7 @@ const getProjects = async (req, res, _next) => {
       pageSize
     );
     const totalItems = await projectService.countProjects(filters);
-    const formattedProjects = mapProjectsToAPI(
-      projects,
-      user,
-      res.locals.isProjectAdmin
-    );
+    const formattedProjects = mapProjectsToAPI(projects);
     const responseData = formatPaginatedResponse({
       data: formattedProjects,
       page,
@@ -60,7 +57,7 @@ const getProjects = async (req, res, _next) => {
   }
 };
 const addProject = async (req, res, _next) => {
-  const { organization, user, isOrganizationAdmin } = res.locals;
+  const { organization, user, roles } = res.locals;
   const projectData = req.body;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -70,42 +67,40 @@ const addProject = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!isOrganizationAdmin) {
-    ErrorHandler.handleGenericErrorResponse(
-      res,
-      "USER_IS_NOT_ADMIN_OF_ORGANIZATION"
-    );
-  }
   if (!projectData) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_DATA_NOT_FOUND");
   }
+  if (!hasPermission(roles, "project:admin")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   const { plan } = organization;
   const planType = getPLanDetails(plan);
   if (planType.numberOfProjects) {
     const projectCount = await projectService.countProjects({
-      organizationId: organization._id
+      organizationId: organization.id
     });
     if (projectCount >= planType.numberOfProjects) {
       ErrorHandler.handleGenericErrorResponse(
         res,
         "PLAN_PROJECT_LIMIT_REACHED",
         {
-          organizationId: organization._id
+          organizationId: organization.id
         }
       );
       return;
     }
   }
   const project = {
-    membersIds: [user._id],
-    adminsIds: [user._id],
-    creatorId: user._id,
-    organizationId: organization._id,
+    membersIds: [user.id],
+    adminsIds: [user.id],
+    creatorId: user.id,
+    organizationId: organization.id,
     ...projectData
   };
   try {
     const newProject = await projectService.createProject(project);
-    const formattedProject = mapProjectToAPI(newProject, user, true);
+    const formattedProject = mapProjectToAPI(newProject);
     const responseData = formatResponse({
       message: t({
         en: "Project created successfully",
@@ -127,7 +122,7 @@ const addProject = async (req, res, _next) => {
   }
 };
 const updateProject = async (req, res, _next) => {
-  const { organization, projectRights, project, user, isProjectAdmin } = res.locals;
+  const { organization, project, user, roles } = res.locals;
   const projectData = req.body;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -141,28 +136,20 @@ const updateProject = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!isProjectAdmin) {
-    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_RIGHTS_NOT_ADMIN");
-    return;
-  }
-  if (!projectRights?.write) {
-    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_RIGHTS_NOT_WRITE");
+  if (String(project.organizationId) !== String(organization.id)) {
+    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_IN_ORGANIZATION");
     return;
   }
-  if (String(project.organizationId) !== String(organization._id)) {
-    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_IN_ORGANIZATION");
+  if (!hasPermission(roles, "project:write")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
   try {
     const updatedProject = await projectService.updateProjectById(
-      project._id,
+      project.id,
       projectData
     );
-    const formattedProject = mapProjectToAPI(
-      updatedProject,
-      user,
-      isProjectAdmin
-    );
+    const formattedProject = mapProjectToAPI(updatedProject);
     const responseData = formatResponse({
       message: t({
         en: "Project updated successfully",
@@ -184,7 +171,7 @@ const updateProject = async (req, res, _next) => {
   }
 };
 const updateProjectMembers = async (req, res, _next) => {
-  const { user, project, isProjectAdmin, organization, projectRights } = res.locals;
+  const { user, project, organization, roles } = res.locals;
   const { membersIds } = req.body;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -194,17 +181,6 @@ const updateProjectMembers = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
     return;
   }
-  if (!isProjectAdmin) {
-    ErrorHandler.handleGenericErrorResponse(
-      res,
-      "USER_IS_NOT_ADMIN_OF_PROJECT"
-    );
-    return;
-  }
-  if (!projectRights?.admin) {
-    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_RIGHTS_NOT_ADMIN");
-    return;
-  }
   if (!organization) {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
@@ -217,6 +193,10 @@ const updateProjectMembers = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_MUST_HAVE_ADMIN");
     return;
   }
+  if (!hasPermission(roles, "project:write")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
     const existingUsers = [];
     if (membersIds) {
@@ -231,29 +211,25 @@ const updateProjectMembers = async (req, res, _next) => {
         const userMap = users.map((user2) => ({
           user: user2,
           isAdmin: membersIds.find(
-            (member) => String(member.userId) === String(user2._id)
+            (member) => String(member.userId) === String(user2.id)
           )?.isAdmin ?? false
         }));
         existingUsers.push(...userMap);
       }
     }
     const formattedMembers = existingUsers.map(
-      (user2) => user2.user._id
+      (user2) => user2.user.id
     );
-    const formattedAdmin = existingUsers.filter((el) => el.isAdmin).map((user2) => user2.user._id);
+    const formattedAdmin = existingUsers.filter((el) => el.isAdmin).map((user2) => user2.user.id);
     const updatedOrganization = await projectService.updateProjectById(
-      project._id,
+      project.id,
       {
         ...project,
         membersIds: formattedMembers,
         adminsIds: formattedAdmin
       }
     );
-    const formattedProject = mapProjectToAPI(
-      updatedOrganization,
-      user,
-      isProjectAdmin
-    );
+    const formattedProject = mapProjectToAPI(updatedOrganization);
     const responseData = formatResponse({
       message: t({
         en: "Project members updated successfully",
@@ -275,7 +251,7 @@ const updateProjectMembers = async (req, res, _next) => {
   }
 };
 const pushProjectConfiguration = async (req, res, _next) => {
-  const { user, project } = res.locals;
+  const { user, project, roles } = res.locals;
   const projectConfiguration = req.body;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -285,13 +261,17 @@ const pushProjectConfiguration = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
     return;
   }
+  if (!hasPermission(roles, "project:write")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
-    const projectObject = await projectService.getProjectById(project._id);
+    const projectObject = await projectService.getProjectById(project.id);
     projectObject.configuration = projectConfiguration;
     projectObject.save();
     if (!projectObject.configuration) {
       ErrorHandler.handleGenericErrorResponse(res, "PROJECT_UPDATE_FAILED", {
-        projectId: project._id
+        projectId: project.id
       });
       return;
     }
@@ -316,7 +296,7 @@ const pushProjectConfiguration = async (req, res, _next) => {
   }
 };
 const deleteProject = async (_req, res, _next) => {
-  const { user, organization, project, projectRights, isProjectAdmin } = res.locals;
+  const { user, organization, project, session, roles } = res.locals;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
     return;
@@ -329,32 +309,31 @@ const deleteProject = async (_req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
     return;
   }
-  if (!projectRights?.admin) {
-    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_RIGHTS_NOT_ADMIN");
+  if (!session) {
+    ErrorHandler.handleGenericErrorResponse(res, "SESSION_NOT_DEFINED");
+    return;
+  }
+  if (!hasPermission(roles, "project:admin")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
   try {
-    const projectToDelete = await projectService.getProjectById(project._id);
-    if (String(projectToDelete.organizationId) !== String(organization._id)) {
+    const projectToDelete = await projectService.getProjectById(project.id);
+    if (String(projectToDelete.organizationId) !== String(organization.id)) {
       ErrorHandler.handleGenericErrorResponse(
         res,
         "PROJECT_NOT_IN_ORGANIZATION"
       );
       return;
     }
-    const deletedProject = await projectService.deleteProjectById(project._id);
+    const deletedProject = await projectService.deleteProjectById(project.id);
     if (!deletedProject) {
       ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED", {
-        projectId: project._id
+        projectId: project.id
       });
       return;
     }
-    logger.info(`Project deleted: ${String(deletedProject._id)}`);
-    const formattedProject = mapProjectToAPI(
-      deletedProject,
-      user,
-      isProjectAdmin
-    );
+    logger.info(`Project deleted: ${String(deletedProject.id)}`);
     const responseData = formatResponse({
       message: t({
         en: "Project deleted successfully",
@@ -366,9 +345,12 @@ const deleteProject = async (_req, res, _next) => {
         fr: "Votre projet a \xE9t\xE9 supprim\xE9 avec succ\xE8s",
         es: "Su proyecto ha sido eliminado con \xE9xito"
       }),
-      data: formattedProject
+      data: mapProjectToAPI(deletedProject)
     });
-    sessionAuthService.clearProjectAuth(res);
+    await SessionModel.updateOne(
+      { _id: session.id },
+      { $set: { activeProjectId: null } }
+    );
     res.json(responseData);
     return;
   } catch (error) {
@@ -378,13 +360,21 @@ const deleteProject = async (_req, res, _next) => {
 };
 const selectProject = async (req, res, _next) => {
   const { projectId } = req.params;
+  const { session, roles } = res.locals;
   if (!projectId) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_ID_NOT_FOUND");
     return;
   }
+  if (!session) {
+    ErrorHandler.handleGenericErrorResponse(res, "SESSION_NOT_DEFINED");
+    return;
+  }
   try {
     const project = await projectService.getProjectById(projectId);
-    sessionAuthService.setProjectAuth(res, project);
+    await SessionModel.updateOne(
+      { _id: session.id },
+      { $set: { activeProjectId: String(projectId) } }
+    );
     const responseData = formatResponse({
       message: t({
         en: "Project selected successfully",
@@ -396,7 +386,7 @@ const selectProject = async (req, res, _next) => {
         fr: "Votre projet a \xE9t\xE9 s\xE9lectionn\xE9 avec succ\xE8s",
         es: "Su proyecto ha sido seleccionado con \xE9xito"
       }),
-      data: project
+      data: mapProjectToAPI(project)
     });
     res.json(responseData);
     return;
@@ -405,9 +395,17 @@ const selectProject = async (req, res, _next) => {
     return;
   }
 };
-const unselectProject = (_req, res, _next) => {
+const unselectProject = async (_req, res, _next) => {
+  const { session } = res.locals;
+  if (!session) {
+    ErrorHandler.handleGenericErrorResponse(res, "SESSION_NOT_DEFINED");
+    return;
+  }
   try {
-    sessionAuthService.clearProjectAuth(res);
+    await SessionModel.updateOne(
+      { _id: session.id },
+      { $set: { activeProjectId: null } }
+    );
     const responseData = formatResponse({
       message: t({
         en: "Project unselected successfully",

package/dist/esm/controllers/project.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/project.controller.ts"],"sourcesContent":["import type {\n  Project,\n  ProjectAPI,\n  ProjectConfiguration,\n  ProjectCreationData,\n  ProjectData,\n} from '@/types/project.types';\nimport { logger } from '@logger';\nimport type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport * as projectService from '@services/project.service';\nimport * as sessionAuthService from '@services/sessionAuth.service';\nimport * as userService from '@services/user.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getProjectFiltersAndPagination,\n  type ProjectFilters,\n  type ProjectFiltersParams,\n} from '@utils/filtersAndPagination/getProjectFiltersAndPagination';\nimport { mapProjectsToAPI, mapProjectToAPI } from '@utils/mapper/project';\nimport { getPLanDetails } from '@utils/plan';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\nimport type { ObjectId } from 'mongoose';\nimport type { User } from 'oauth2-server';\n\nexport type GetProjectsParams = FiltersAndPagination<ProjectFiltersParams>;\nexport type GetProjectsResult = PaginatedResponse<ProjectAPI>;\n\n/**\n * Retrieves a list of projects based on filters and pagination.\n */\nexport const getProjects = async (\n  req: Request<GetProjectsParams>,\n  res: ResponseWithInformation<GetProjectsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, projectRights } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getProjectFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!projectRights?.read) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_RIGHTS_NOT_READ');\n    return;\n  }\n\n  const restrictedFilter: ProjectFilters = {\n    ...filters,\n    membersIds: { $in: [...(filters.membersIds ?? []), String(user._id)] },\n    organizationId: String(organization._id),\n  };\n\n  try {\n    const projects = await projectService.findProjects(\n      restrictedFilter,\n      skip,\n      pageSize\n    );\n    const totalItems = await projectService.countProjects(filters);\n\n    const formattedProjects = mapProjectsToAPI(\n      projects,\n      user,\n      res.locals.isProjectAdmin\n    );\n\n    const responseData = formatPaginatedResponse<ProjectAPI>({\n      data: formattedProjects,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddProjectBody = ProjectCreationData;\nexport type AddProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Adds a new project to the database.\n */\nexport const addProject = async (\n  req: Request<any, any, AddProjectBody>,\n  res: ResponseWithInformation<AddProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, user, isOrganizationAdmin } = res.locals;\n  const projectData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!isOrganizationAdmin) {\n    ErrorHandler.handleGenericErrorResponse(\n      res,\n      'USER_IS_NOT_ADMIN_OF_ORGANIZATION'\n    );\n  }\n\n  if (!projectData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  const { plan } = organization;\n\n  const planType = getPLanDetails(plan);\n\n  if (planType.numberOfProjects) {\n    const projectCount = await projectService.countProjects({\n      organizationId: organization._id,\n    });\n\n    if (projectCount >= planType.numberOfProjects) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'PLAN_PROJECT_LIMIT_REACHED',\n        {\n          organizationId: organization._id,\n        }\n      );\n      return;\n    }\n  }\n\n  const project: ProjectData = {\n    membersIds: [user._id],\n    adminsIds: [user._id],\n    creatorId: user._id,\n    organizationId: organization._id,\n    ...projectData,\n  };\n\n  try {\n    const newProject = await projectService.createProject(project);\n\n    const formattedProject = mapProjectToAPI(newProject, user, true);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project created successfully',\n        fr: 'Projet créé avec succès',\n        es: 'Proyecto creado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been created successfully',\n        fr: 'Votre projet a été créé avec succès',\n        es: 'Su proyecto ha sido creado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateProjectBody = Partial<Project>;\nexport type UpdateProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Updates an existing project in the database.\n */\nexport const updateProject = async (\n  req: Request<any, any, UpdateProjectBody>,\n  res: ResponseWithInformation<UpdateProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, projectRights, project, user, isProjectAdmin } =\n    res.locals;\n  const projectData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!isProjectAdmin) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_RIGHTS_NOT_ADMIN');\n    return;\n  }\n\n  if (!projectRights?.write) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_RIGHTS_NOT_WRITE');\n    return;\n  }\n\n  if (String(project.organizationId) !== String(organization._id)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_IN_ORGANIZATION');\n    return;\n  }\n\n  try {\n    const updatedProject = await projectService.updateProjectById(\n      project._id,\n      projectData\n    );\n\n    const formattedProject = mapProjectToAPI(\n      updatedProject,\n      user,\n      isProjectAdmin\n    );\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project updated successfully',\n        fr: 'Projet mis à jour avec succès',\n        es: 'Proyecto actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been updated successfully',\n        fr: 'Votre projet a été mis à jour avec succès',\n        es: 'Su proyecto ha sido actualizado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype UserAndAdmin = { user: User; isAdmin: boolean };\nexport type ProjectMemberByIdOption = {\n  userId: string | ObjectId;\n  isAdmin?: boolean;\n};\n\nexport type UpdateProjectMembersBody = Partial<{\n  membersIds: ProjectMemberByIdOption[];\n}>;\nexport type UpdateProjectMembersResult = ResponseData<ProjectAPI>;\n\n/**\n * Update members to the dictionary in the database.\n */\nexport const updateProjectMembers = async (\n  req: Request<any, any, UpdateProjectMembersBody>,\n  res: ResponseWithInformation<UpdateProjectMembersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, isProjectAdmin, organization, projectRights } =\n    res.locals;\n  const { membersIds } = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!isProjectAdmin) {\n    ErrorHandler.handleGenericErrorResponse(\n      res,\n      'USER_IS_NOT_ADMIN_OF_PROJECT'\n    );\n    return;\n  }\n\n  if (!projectRights?.admin) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_RIGHTS_NOT_ADMIN');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (membersIds?.length === 0) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_MUST_HAVE_MEMBER');\n    return;\n  }\n\n  if (membersIds?.map((el) => el.isAdmin)?.length === 0) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_MUST_HAVE_ADMIN');\n    return;\n  }\n\n  try {\n    const existingUsers: UserAndAdmin[] = [];\n\n    if (membersIds) {\n      const userIdList = membersIds\n        ?.filter(\n          (member) =>\n            // Remove members that are not in the organization\n            !organization?.membersIds.includes(member.userId as ObjectId)\n        )\n        .map((member) => member.userId);\n\n      const users = await userService.getUsersByIds(userIdList);\n\n      if (users) {\n        const userMap: UserAndAdmin[] = users.map((user) => ({\n          user,\n          isAdmin:\n            membersIds.find(\n              (member) => String(member.userId) === String(user._id)\n            )?.isAdmin ?? false,\n        }));\n\n        existingUsers.push(...userMap);\n      }\n    }\n\n    const formattedMembers: ObjectId[] = existingUsers.map(\n      (user) => user.user._id\n    );\n    const formattedAdmin: ObjectId[] = existingUsers\n      .filter((el) => el.isAdmin)\n      .map((user) => user.user._id);\n\n    const updatedOrganization = await projectService.updateProjectById(\n      project._id,\n      {\n        ...project,\n        membersIds: formattedMembers,\n        adminsIds: formattedAdmin,\n      }\n    );\n\n    const formattedProject = mapProjectToAPI(\n      updatedOrganization,\n      user,\n      isProjectAdmin\n    );\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project members updated successfully',\n        fr: 'Membres du projet mis à jour avec succès',\n        es: 'Miembros del proyecto actualizados con éxito',\n      }),\n      description: t({\n        en: 'Your project members have been updated successfully',\n        fr: 'Les membres de votre projet ont été mis à jour avec succès',\n        es: 'Los miembros de su proyecto han sido actualizados con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type PushProjectConfigurationBody = ProjectConfiguration;\nexport type PushProjectConfigurationResult = ResponseData<ProjectConfiguration>;\n\n/**\n * Pushes a project configuration to the database.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const pushProjectConfiguration = async (\n  req: Request<any, any, PushProjectConfigurationBody>,\n  res: ResponseWithInformation<PushProjectConfigurationResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project } = res.locals;\n  const projectConfiguration = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const projectObject = await projectService.getProjectById(project._id);\n    projectObject.configuration = projectConfiguration;\n\n    projectObject.save();\n\n    if (!projectObject.configuration) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_UPDATE_FAILED', {\n        projectId: project._id,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<ProjectConfiguration>({\n      message: t({\n        en: 'Project configuration updated successfully',\n        fr: 'Configuration du projet mise à jour avec succès',\n        es: 'Configuración del proyecto actualizada con éxito',\n      }),\n      description: t({\n        en: 'Your project configuration has been updated successfully',\n        fr: 'La configuration du projet a été mise à jour avec succès',\n        es: 'Su configuración del proyecto ha sido actualizada con éxito',\n      }),\n      data: projectObject.configuration,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Deletes a project from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteProject = async (\n  _req: Request,\n  res: ResponseWithInformation<DeleteProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, project, projectRights, isProjectAdmin } =\n    res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!projectRights?.admin) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_RIGHTS_NOT_ADMIN');\n    return;\n  }\n\n  try {\n    const projectToDelete = await projectService.getProjectById(project._id);\n\n    if (String(projectToDelete.organizationId) !== String(organization._id)) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'PROJECT_NOT_IN_ORGANIZATION'\n      );\n      return;\n    }\n\n    const deletedProject = await projectService.deleteProjectById(project._id);\n\n    if (!deletedProject) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED', {\n        projectId: project._id,\n      });\n\n      return;\n    }\n\n    logger.info(`Project deleted: ${String(deletedProject._id)}`);\n\n    const formattedProject = mapProjectToAPI(\n      deletedProject,\n      user,\n      isProjectAdmin\n    );\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project deleted successfully',\n        fr: 'Projet supprimé avec succès',\n        es: 'Proyecto eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been deleted successfully',\n        fr: 'Votre projet a été supprimé avec succès',\n        es: 'Su proyecto ha sido eliminado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    sessionAuthService.clearProjectAuth(res);\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type SelectProjectParam = { projectId: ObjectId | string };\nexport type SelectProjectResult = ResponseData<Project>;\n\n/**\n * Select a project.\n */\nexport const selectProject = async (\n  req: Request<SelectProjectParam>,\n  res: ResponseWithInformation<SelectProjectResult>,\n  _next: NextFunction\n) => {\n  const { projectId } = req.params;\n\n  if (!projectId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_ID_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const project = await projectService.getProjectById(projectId);\n\n    sessionAuthService.setProjectAuth(res, project);\n\n    const responseData = formatResponse<Project>({\n      message: t({\n        en: 'Project selected successfully',\n        fr: 'Projet sélectionné avec succès',\n        es: 'Proyecto seleccionado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been selected successfully',\n        fr: 'Votre projet a été sélectionné avec succès',\n        es: 'Su proyecto ha sido seleccionado con éxito',\n      }),\n      data: project,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UnselectProjectResult = ResponseData<null>;\n\n/**\n * Unselect a project.\n */\nexport const unselectProject = (\n  _req: Request,\n  res: ResponseWithInformation<UnselectProjectResult>,\n  _next: NextFunction\n) => {\n  try {\n    sessionAuthService.clearProjectAuth(res);\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Project unselected successfully',\n        fr: 'Projet désélectionné avec succès',\n        es: 'Proyecto deseleccionado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been unselected successfully',\n        fr: 'Votre projet a été désélectionné avec succès',\n        es: 'Su proyecto ha sido deseleccionado con éxito',\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAOA,SAAS,cAAc;AAEvB,YAAY,oBAAoB;AAChC,YAAY,wBAAwB;AACpC,YAAY,iBAAiB;AAC7B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,kBAAkB,uBAAuB;AAClD,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAUX,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,cAAc,IAAI,IAAI;AAClD,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,+BAA+B,GAAG;AAEpC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,eAAe,MAAM;AACxB,iBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,EACF;AAEA,QAAM,mBAAmC;AAAA,IACvC,GAAG;AAAA,IACH,YAAY,EAAE,KAAK,CAAC,GAAI,QAAQ,cAAc,CAAC,GAAI,OAAO,KAAK,GAAG,CAAC,EAAE;AAAA,IACrE,gBAAgB,OAAO,aAAa,GAAG;AAAA,EACzC;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,eAAe;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,aAAa,MAAM,eAAe,cAAc,OAAO;AAE7D,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,IAAI,OAAO;AAAA,IACb;AAEA,UAAM,eAAe,wBAAoC;AAAA,MACvD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,MAAM,oBAAoB,IAAI,IAAI;AACxD,QAAM,cAAc,IAAI;AAExB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,qBAAqB;AACxB,iBAAa;AAAA,MACX;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,aAAa;AAChB,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,QAAM,EAAE,KAAK,IAAI;AAEjB,QAAM,WAAW,eAAe,IAAI;AAEpC,MAAI,SAAS,kBAAkB;AAC7B,UAAM,eAAe,MAAM,eAAe,cAAc;AAAA,MACtD,gBAAgB,aAAa;AAAA,IAC/B,CAAC;AAED,QAAI,gBAAgB,SAAS,kBAAkB;AAC7C,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE,gBAAgB,aAAa;AAAA,QAC/B;AAAA,MACF;AACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAuB;AAAA,IAC3B,YAAY,CAAC,KAAK,GAAG;AAAA,IACrB,WAAW,CAAC,KAAK,GAAG;AAAA,IACpB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,GAAG;AAAA,EACL;AAEA,MAAI;AACF,UAAM,aAAa,MAAM,eAAe,cAAc,OAAO;AAE7D,UAAM,mBAAmB,gBAAgB,YAAY,MAAM,IAAI;AAE/D,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,eAAe,SAAS,MAAM,eAAe,IACjE,IAAI;AACN,QAAM,cAAc,IAAI;AAExB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,gBAAgB;AACnB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,eAAe,OAAO;AACzB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,OAAO,QAAQ,cAAc,MAAM,OAAO,aAAa,GAAG,GAAG;AAC/D,iBAAa,2BAA2B,KAAK,6BAA6B;AAC1E;AAAA,EACF;AAEA,MAAI;AACF,UAAM,iBAAiB,MAAM,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,mBAAmB;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAgBO,MAAM,uBAAuB,OAClC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,gBAAgB,cAAc,cAAc,IACjE,IAAI;AACN,QAAM,EAAE,WAAW,IAAI,IAAI;AAE3B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,gBAAgB;AACnB,iBAAa;AAAA,MACX;AAAA,MACA;AAAA,IACF;AACA;AAAA,EACF;AAEA,MAAI,CAAC,eAAe,OAAO;AACzB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,YAAY,WAAW,GAAG;AAC5B,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,YAAY,IAAI,CAAC,OAAO,GAAG,OAAO,GAAG,WAAW,GAAG;AACrD,iBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgC,CAAC;AAEvC,QAAI,YAAY;AACd,YAAM,aAAa,YACf;AAAA,QACA,CAAC;AAAA;AAAA,UAEC,CAAC,cAAc,WAAW,SAAS,OAAO,MAAkB;AAAA;AAAA,MAChE,EACC,IAAI,CAAC,WAAW,OAAO,MAAM;AAEhC,YAAM,QAAQ,MAAM,YAAY,cAAc,UAAU;AAExD,UAAI,OAAO;AACT,cAAM,UAA0B,MAAM,IAAI,CAACA,WAAU;AAAA,UACnD,MAAAA;AAAA,UACA,SACE,WAAW;AAAA,YACT,CAAC,WAAW,OAAO,OAAO,MAAM,MAAM,OAAOA,MAAK,GAAG;AAAA,UACvD,GAAG,WAAW;AAAA,QAClB,EAAE;AAEF,sBAAc,KAAK,GAAG,OAAO;AAAA,MAC/B;AAAA,IACF;AAEA,UAAM,mBAA+B,cAAc;AAAA,MACjD,CAACA,UAASA,MAAK,KAAK;AAAA,IACtB;AACA,UAAM,iBAA6B,cAChC,OAAO,CAAC,OAAO,GAAG,OAAO,EACzB,IAAI,CAACA,UAASA,MAAK,KAAK,GAAG;AAE9B,UAAM,sBAAsB,MAAM,eAAe;AAAA,MAC/C,QAAQ;AAAA,MACR;AAAA,QACE,GAAG;AAAA,QACH,YAAY;AAAA,QACZ,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,mBAAmB;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,2BAA2B,OACtC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,QAAQ,IAAI,IAAI;AAC9B,QAAM,uBAAuB,IAAI;AAEjC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,eAAe,eAAe,QAAQ,GAAG;AACrE,kBAAc,gBAAgB;AAE9B,kBAAc,KAAK;AAEnB,QAAI,CAAC,cAAc,eAAe;AAChC,mBAAa,2BAA2B,KAAK,yBAAyB;AAAA,QACpE,WAAW,QAAQ;AAAA,MACrB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqC;AAAA,MACxD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,cAAc;AAAA,IACtB,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAUO,MAAM,gBAAgB,OAC3B,MACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,SAAS,eAAe,eAAe,IACjE,IAAI;AAEN,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,eAAe,OAAO;AACzB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,kBAAkB,MAAM,eAAe,eAAe,QAAQ,GAAG;AAEvE,QAAI,OAAO,gBAAgB,cAAc,MAAM,OAAO,aAAa,GAAG,GAAG;AACvE,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,eAAe,kBAAkB,QAAQ,GAAG;AAEzE,QAAI,CAAC,gBAAgB;AACnB,mBAAa,2BAA2B,KAAK,uBAAuB;AAAA,QAClE,WAAW,QAAQ;AAAA,MACrB,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,oBAAoB,OAAO,eAAe,GAAG,CAAC,EAAE;AAE5D,UAAM,mBAAmB;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,uBAAmB,iBAAiB,GAAG;AAEvC,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACG;AACH,QAAM,EAAE,UAAU,IAAI,IAAI;AAE1B,MAAI,CAAC,WAAW;AACd,iBAAa,2BAA2B,KAAK,sBAAsB;AACnE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,eAAe,eAAe,SAAS;AAE7D,uBAAmB,eAAe,KAAK,OAAO;AAE9C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAOO,MAAM,kBAAkB,CAC7B,MACA,KACA,UACG;AACH,MAAI;AACF,uBAAmB,iBAAiB,GAAG;AAEvC,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":["user"]}
+{"version":3,"sources":["../../../src/controllers/project.controller.ts"],"sourcesContent":["import type {\n  Project,\n  ProjectAPI,\n  ProjectConfiguration,\n  ProjectCreationData,\n  ProjectData,\n} from '@/types/project.types';\nimport type { User } from '@/types/user.types';\nimport { logger } from '@logger';\nimport { SessionModel } from '@models/session.model';\nimport * as projectService from '@services/project.service';\nimport * as userService from '@services/user.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getProjectFiltersAndPagination,\n  type ProjectFilters,\n  type ProjectFiltersParams,\n} from '@utils/filtersAndPagination/getProjectFiltersAndPagination';\nimport { mapProjectsToAPI, mapProjectToAPI } from '@utils/mapper/project';\nimport { hasPermission } from '@utils/permissions';\nimport { getPLanDetails } from '@utils/plan';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\nimport { Types } from 'mongoose';\n\nexport type GetProjectsParams = FiltersAndPagination<ProjectFiltersParams>;\nexport type GetProjectsResult = PaginatedResponse<ProjectAPI>;\n\n/**\n * Retrieves a list of projects based on filters and pagination.\n */\nexport const getProjects = async (\n  req: Request<GetProjectsParams>,\n  res: Response<GetProjectsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getProjectFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:read')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const restrictedFilter: ProjectFilters = {\n    ...filters,\n    membersIds: { $in: [...(filters.membersIds ?? []), String(user.id)] },\n    organizationId: String(organization.id),\n  };\n\n  try {\n    const projects = await projectService.findProjects(\n      restrictedFilter,\n      skip,\n      pageSize\n    );\n    const totalItems = await projectService.countProjects(filters);\n\n    const formattedProjects = mapProjectsToAPI(projects);\n\n    const responseData = formatPaginatedResponse<ProjectAPI>({\n      data: formattedProjects,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddProjectBody = ProjectCreationData;\nexport type AddProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Adds a new project to the database.\n */\nexport const addProject = async (\n  req: Request<any, any, AddProjectBody>,\n  res: Response<AddProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, user, roles } = res.locals;\n  const projectData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!projectData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'project:admin')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const { plan } = organization;\n\n  const planType = getPLanDetails(plan);\n\n  if (planType.numberOfProjects) {\n    const projectCount = await projectService.countProjects({\n      organizationId: organization.id,\n    });\n\n    if (projectCount >= planType.numberOfProjects) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'PLAN_PROJECT_LIMIT_REACHED',\n        {\n          organizationId: organization.id,\n        }\n      );\n      return;\n    }\n  }\n\n  const project: ProjectData = {\n    membersIds: [user.id],\n    adminsIds: [user.id],\n    creatorId: user.id,\n    organizationId: organization.id,\n    ...projectData,\n  };\n\n  try {\n    const newProject = await projectService.createProject(project);\n\n    const formattedProject = mapProjectToAPI(newProject);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project created successfully',\n        fr: 'Projet créé avec succès',\n        es: 'Proyecto creado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been created successfully',\n        fr: 'Votre projet a été créé avec succès',\n        es: 'Su proyecto ha sido creado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateProjectBody = Partial<Project>;\nexport type UpdateProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Updates an existing project in the database.\n */\nexport const updateProject = async (\n  req: Request<any, any, UpdateProjectBody>,\n  res: Response<UpdateProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, project, user, roles } = res.locals;\n  const projectData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (String(project.organizationId) !== String(organization.id)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_IN_ORGANIZATION');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const updatedProject = await projectService.updateProjectById(\n      project.id,\n      projectData\n    );\n\n    const formattedProject = mapProjectToAPI(updatedProject);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project updated successfully',\n        fr: 'Projet mis à jour avec succès',\n        es: 'Proyecto actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been updated successfully',\n        fr: 'Votre projet a été mis à jour avec succès',\n        es: 'Su proyecto ha sido actualizado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype UserAndAdmin = { user: User; isAdmin: boolean };\nexport type ProjectMemberByIdOption = {\n  userId: string | Types.ObjectId;\n  isAdmin?: boolean;\n};\n\nexport type UpdateProjectMembersBody = Partial<{\n  membersIds: ProjectMemberByIdOption[];\n}>;\nexport type UpdateProjectMembersResult = ResponseData<ProjectAPI>;\n\n/**\n * Update members to the dictionary in the database.\n */\nexport const updateProjectMembers = async (\n  req: Request<any, any, UpdateProjectMembersBody>,\n  res: Response<UpdateProjectMembersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, organization, roles } = res.locals;\n  const { membersIds } = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (membersIds?.length === 0) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_MUST_HAVE_MEMBER');\n    return;\n  }\n\n  if (membersIds?.map((el) => el.isAdmin)?.length === 0) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_MUST_HAVE_ADMIN');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const existingUsers: UserAndAdmin[] = [];\n\n    if (membersIds) {\n      const userIdList = membersIds\n        ?.filter(\n          (member) =>\n            // Remove members that are not in the organization\n            !organization?.membersIds.includes(member.userId as Types.ObjectId)\n        )\n        .map((member) => member.userId);\n\n      const users = await userService.getUsersByIds(userIdList);\n\n      if (users) {\n        const userMap: UserAndAdmin[] = users.map((user) => ({\n          user,\n          isAdmin:\n            membersIds.find(\n              (member) => String(member.userId) === String(user.id)\n            )?.isAdmin ?? false,\n        }));\n\n        existingUsers.push(...userMap);\n      }\n    }\n\n    const formattedMembers: Types.ObjectId[] = existingUsers.map(\n      (user) => user.user.id\n    );\n    const formattedAdmin: Types.ObjectId[] = existingUsers\n      .filter((el) => el.isAdmin)\n      .map((user) => user.user.id);\n\n    const updatedOrganization = await projectService.updateProjectById(\n      project.id,\n      {\n        ...project,\n        membersIds: formattedMembers,\n        adminsIds: formattedAdmin,\n      }\n    );\n\n    const formattedProject = mapProjectToAPI(updatedOrganization);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project members updated successfully',\n        fr: 'Membres du projet mis à jour avec succès',\n        es: 'Miembros del proyecto actualizados con éxito',\n      }),\n      description: t({\n        en: 'Your project members have been updated successfully',\n        fr: 'Les membres de votre projet ont été mis à jour avec succès',\n        es: 'Los miembros de su proyecto han sido actualizados con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type PushProjectConfigurationBody = ProjectConfiguration;\nexport type PushProjectConfigurationResult = ResponseData<ProjectConfiguration>;\n\n/**\n * Pushes a project configuration to the database.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const pushProjectConfiguration = async (\n  req: Request<any, any, PushProjectConfigurationBody>,\n  res: Response<PushProjectConfigurationResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const projectConfiguration = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const projectObject = await projectService.getProjectById(project.id);\n    projectObject.configuration = projectConfiguration;\n\n    projectObject.save();\n\n    if (!projectObject.configuration) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_UPDATE_FAILED', {\n        projectId: project.id,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<ProjectConfiguration>({\n      message: t({\n        en: 'Project configuration updated successfully',\n        fr: 'Configuration du projet mise à jour avec succès',\n        es: 'Configuración del proyecto actualizada con éxito',\n      }),\n      description: t({\n        en: 'Your project configuration has been updated successfully',\n        fr: 'La configuration du projet a été mise à jour avec succès',\n        es: 'Su configuración del proyecto ha sido actualizada con éxito',\n      }),\n      data: projectObject.configuration,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Deletes a project from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteProject = async (\n  _req: Request,\n  res: Response<DeleteProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, project, session, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!session) {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:admin')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const projectToDelete = await projectService.getProjectById(project.id);\n\n    if (String(projectToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'PROJECT_NOT_IN_ORGANIZATION'\n      );\n      return;\n    }\n\n    const deletedProject = await projectService.deleteProjectById(project.id);\n\n    if (!deletedProject) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED', {\n        projectId: project.id,\n      });\n\n      return;\n    }\n\n    logger.info(`Project deleted: ${String(deletedProject.id)}`);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project deleted successfully',\n        fr: 'Projet supprimé avec succès',\n        es: 'Proyecto eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been deleted successfully',\n        fr: 'Votre projet a été supprimé avec succès',\n        es: 'Su proyecto ha sido eliminado con éxito',\n      }),\n      data: mapProjectToAPI(deletedProject),\n    });\n\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: null } }\n    );\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type SelectProjectParam = { projectId: string | Types.ObjectId };\nexport type SelectProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Select a project.\n */\nexport const selectProject = async (\n  req: Request<SelectProjectParam>,\n  res: Response<SelectProjectResult>,\n  _next: NextFunction\n) => {\n  const { projectId } = req.params;\n  const { session, roles } = res.locals;\n\n  if (!projectId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_ID_NOT_FOUND');\n    return;\n  }\n\n  if (!session) {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const project = await projectService.getProjectById(projectId);\n\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: String(projectId) } }\n    );\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project selected successfully',\n        fr: 'Projet sélectionné avec succès',\n        es: 'Proyecto seleccionado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been selected successfully',\n        fr: 'Votre projet a été sélectionné avec succès',\n        es: 'Su proyecto ha sido seleccionado con éxito',\n      }),\n      data: mapProjectToAPI(project),\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UnselectProjectResult = ResponseData<null>;\n\n/**\n * Unselect a project.\n */\nexport const unselectProject = async (\n  _req: Request,\n  res: Response<UnselectProjectResult>,\n  _next: NextFunction\n) => {\n  const { session } = res.locals;\n\n  if (!session) {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: null } }\n    );\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Project unselected successfully',\n        fr: 'Projet désélectionné avec succès',\n        es: 'Proyecto deseleccionado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been unselected successfully',\n        fr: 'Votre projet a été désélectionné avec succès',\n        es: 'Su proyecto ha sido deseleccionado con éxito',\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAQA,SAAS,cAAc;AACvB,SAAS,oBAAoB;AAC7B,YAAY,oBAAoB;AAChC,YAAY,iBAAiB;AAC7B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,kBAAkB,uBAAuB;AAClD,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AASX,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,+BAA+B,GAAG;AAEpC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,cAAc,EAAE,IAAI,MAAM,GAAG;AACrD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,mBAAmC;AAAA,IACvC,GAAG;AAAA,IACH,YAAY,EAAE,KAAK,CAAC,GAAI,QAAQ,cAAc,CAAC,GAAI,OAAO,KAAK,EAAE,CAAC,EAAE;AAAA,IACpE,gBAAgB,OAAO,aAAa,EAAE;AAAA,EACxC;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,eAAe;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,aAAa,MAAM,eAAe,cAAc,OAAO;AAE7D,UAAM,oBAAoB,iBAAiB,QAAQ;AAEnD,UAAM,eAAe,wBAAoC;AAAA,MACvD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAC1C,QAAM,cAAc,IAAI;AAExB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,aAAa;AAChB,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,EAAE,KAAK,IAAI;AAEjB,QAAM,WAAW,eAAe,IAAI;AAEpC,MAAI,SAAS,kBAAkB;AAC7B,UAAM,eAAe,MAAM,eAAe,cAAc;AAAA,MACtD,gBAAgB,aAAa;AAAA,IAC/B,CAAC;AAED,QAAI,gBAAgB,SAAS,kBAAkB;AAC7C,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE,gBAAgB,aAAa;AAAA,QAC/B;AAAA,MACF;AACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAuB;AAAA,IAC3B,YAAY,CAAC,KAAK,EAAE;AAAA,IACpB,WAAW,CAAC,KAAK,EAAE;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,GAAG;AAAA,EACL;AAEA,MAAI;AACF,UAAM,aAAa,MAAM,eAAe,cAAc,OAAO;AAE7D,UAAM,mBAAmB,gBAAgB,UAAU;AAEnD,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,SAAS,MAAM,MAAM,IAAI,IAAI;AACnD,QAAM,cAAc,IAAI;AAExB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,OAAO,QAAQ,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAC9D,iBAAa,2BAA2B,KAAK,6BAA6B;AAC1E;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,iBAAiB,MAAM,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,mBAAmB,gBAAgB,cAAc;AAEvD,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAgBO,MAAM,uBAAuB,OAClC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,cAAc,MAAM,IAAI,IAAI;AACnD,QAAM,EAAE,WAAW,IAAI,IAAI;AAE3B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,YAAY,WAAW,GAAG;AAC5B,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,YAAY,IAAI,CAAC,OAAO,GAAG,OAAO,GAAG,WAAW,GAAG;AACrD,iBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgC,CAAC;AAEvC,QAAI,YAAY;AACd,YAAM,aAAa,YACf;AAAA,QACA,CAAC;AAAA;AAAA,UAEC,CAAC,cAAc,WAAW,SAAS,OAAO,MAAwB;AAAA;AAAA,MACtE,EACC,IAAI,CAAC,WAAW,OAAO,MAAM;AAEhC,YAAM,QAAQ,MAAM,YAAY,cAAc,UAAU;AAExD,UAAI,OAAO;AACT,cAAM,UAA0B,MAAM,IAAI,CAACA,WAAU;AAAA,UACnD,MAAAA;AAAA,UACA,SACE,WAAW;AAAA,YACT,CAAC,WAAW,OAAO,OAAO,MAAM,MAAM,OAAOA,MAAK,EAAE;AAAA,UACtD,GAAG,WAAW;AAAA,QAClB,EAAE;AAEF,sBAAc,KAAK,GAAG,OAAO;AAAA,MAC/B;AAAA,IACF;AAEA,UAAM,mBAAqC,cAAc;AAAA,MACvD,CAACA,UAASA,MAAK,KAAK;AAAA,IACtB;AACA,UAAM,iBAAmC,cACtC,OAAO,CAAC,OAAO,GAAG,OAAO,EACzB,IAAI,CAACA,UAASA,MAAK,KAAK,EAAE;AAE7B,UAAM,sBAAsB,MAAM,eAAe;AAAA,MAC/C,QAAQ;AAAA,MACR;AAAA,QACE,GAAG;AAAA,QACH,YAAY;AAAA,QACZ,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,mBAAmB,gBAAgB,mBAAmB;AAE5D,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,2BAA2B,OACtC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,uBAAuB,IAAI;AAEjC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,eAAe,eAAe,QAAQ,EAAE;AACpE,kBAAc,gBAAgB;AAE9B,kBAAc,KAAK;AAEnB,QAAI,CAAC,cAAc,eAAe;AAChC,mBAAa,2BAA2B,KAAK,yBAAyB;AAAA,QACpE,WAAW,QAAQ;AAAA,MACrB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqC;AAAA,MACxD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,cAAc;AAAA,IACtB,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAUO,MAAM,gBAAgB,OAC3B,MACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,SAAS,SAAS,MAAM,IAAI,IAAI;AAE5D,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,kBAAkB,MAAM,eAAe,eAAe,QAAQ,EAAE;AAEtE,QAAI,OAAO,gBAAgB,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AACtE,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,eAAe,kBAAkB,QAAQ,EAAE;AAExE,QAAI,CAAC,gBAAgB;AACnB,mBAAa,2BAA2B,KAAK,uBAAuB;AAAA,QAClE,WAAW,QAAQ;AAAA,MACrB,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,oBAAoB,OAAO,eAAe,EAAE,CAAC,EAAE;AAE3D,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,gBAAgB,cAAc;AAAA,IACtC,CAAC;AAED,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,KAAK,EAAE;AAAA,IACpC;AAEA,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACG;AACH,QAAM,EAAE,UAAU,IAAI,IAAI;AAC1B,QAAM,EAAE,SAAS,MAAM,IAAI,IAAI;AAE/B,MAAI,CAAC,WAAW;AACd,iBAAa,2BAA2B,KAAK,sBAAsB;AACnE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,eAAe,eAAe,SAAS;AAE7D,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,OAAO,SAAS,EAAE,EAAE;AAAA,IACjD;AAEA,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,gBAAgB,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAOO,MAAM,kBAAkB,OAC7B,MACA,KACA,UACG;AACH,QAAM,EAAE,QAAQ,IAAI,IAAI;AAExB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,KAAK,EAAE;AAAA,IACpC;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":["user"]}

package/dist/esm/controllers/projectAccessKey.controller.mjs

@@ -1,9 +1,11 @@
+import { sendEmail } from "./../services/email.service.mjs";
 import * as projectAccessKeyService from "./../services/projectAccessKey.service.mjs";
 import { ErrorHandler } from "./../utils/errors/index.mjs";
+import { hasPermission } from "./../utils/permissions.mjs";
 import { formatResponse } from "./../utils/responseData.mjs";
 import { t } from "express-intlayer";
 const addNewAccessKey = async (req, res, _next) => {
-  const { user, project, organizationRights, projectRights, dictionaryRights } = res.locals;
+  const { user, project, roles } = res.locals;
   if (!project) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
     return;
@@ -12,29 +14,15 @@ const addNewAccessKey = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
     return;
   }
-  if (!organizationRights) {
-    ErrorHandler.handleGenericErrorResponse(
-      res,
-      "ORGANIZATION_RIGHTS_NOT_READ"
-    );
-    return;
-  }
-  if (!projectRights) {
-    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_RIGHTS_NOT_READ");
-    return;
-  }
-  if (!dictionaryRights) {
-    ErrorHandler.handleGenericErrorResponse(res, "DICTIONARY_RIGHTS_NOT_READ");
+  if (!hasPermission(roles, "project:write")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
   try {
     const newAccessKey = await projectAccessKeyService.addNewAccessKey(
       req.body,
-      project._id,
-      user,
-      organizationRights,
-      projectRights,
-      dictionaryRights
+      project.id,
+      user
     );
     const responseData = formatResponse({
       message: t({
@@ -50,6 +38,16 @@ const addNewAccessKey = async (req, res, _next) => {
       data: newAccessKey
     });
     res.json(responseData);
+    sendEmail({
+      type: "oAuthTokenCreated",
+      to: user.email,
+      username: user.name,
+      applicationName: newAccessKey.clientId,
+      scopes: newAccessKey.grants,
+      tokenDetailsUrl: `${process.env.CLIENT_URL}/oauth2/token`,
+      securityLogUrl: `${process.env.CLIENT_URL}/security-log`,
+      supportUrl: `${process.env.CLIENT_URL}/support`
+    });
     return;
   } catch (error) {
     ErrorHandler.handleAppErrorResponse(res, error);
@@ -57,7 +55,7 @@ const addNewAccessKey = async (req, res, _next) => {
   }
 };
 const deleteAccessKey = async (req, res, _next) => {
-  const { user, project } = res.locals;
+  const { user, project, roles } = res.locals;
   const { clientId } = req.body;
   if (!project) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
@@ -71,11 +69,15 @@ const deleteAccessKey = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "CLIENT_ID_NOT_FOUND");
     return;
   }
+  if (!hasPermission(roles, "project:write")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
     const deletedAccessKey = await projectAccessKeyService.deleteAccessKey(
       clientId,
       project,
-      user._id
+      user.id
     );
     if (!deletedAccessKey) {
       ErrorHandler.handleGenericErrorResponse(res, "ACCESS_KEY_NOT_FOUND", {
@@ -104,7 +106,7 @@ const deleteAccessKey = async (req, res, _next) => {
   }
 };
 const refreshAccessKey = async (req, res, _next) => {
-  const { user, project } = res.locals;
+  const { user, project, roles } = res.locals;
   const { clientId } = req.body;
   if (!project) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
@@ -115,11 +117,15 @@ const refreshAccessKey = async (req, res, _next) => {
   if (!clientId) {
     ErrorHandler.handleGenericErrorResponse(res, "CLIENT_ID_NOT_FOUND");
   }
+  if (!hasPermission(roles, "project:write")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
     const newAccessKey = await projectAccessKeyService.refreshAccessKey(
       clientId,
-      project._id,
-      user._id
+      project.id,
+      user.id
     );
     const responseData = formatResponse({
       message: t({