@intlayer/backend 5.7.2 → 5.7.4

package/dist/esm/controllers/projectAccessKey.controller.mjs

@@ -1,11 +1,12 @@
 import { sendEmail } from "./../services/email.service.mjs";
 import * as projectAccessKeyService from "./../services/projectAccessKey.service.mjs";
 import { ErrorHandler } from "./../utils/errors/index.mjs";
-import { hasPermission } from "./../utils/permissions.mjs";
+import { hasPermission, intersectPermissions } from "./../utils/permissions.mjs";
 import { formatResponse } from "./../utils/responseData.mjs";
 import { t } from "express-intlayer";
 const addNewAccessKey = async (req, res, _next) => {
-  const { user, project, roles } = res.locals;
+  const { user, project, roles, permissions } = res.locals;
+  const { grants, name, expiresAt } = req.body;
   if (!project) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
     return;
@@ -14,13 +15,24 @@ const addNewAccessKey = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [project.id]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
+  const filteredPermisions = intersectPermissions(permissions, grants);
   try {
     const newAccessKey = await projectAccessKeyService.addNewAccessKey(
-      req.body,
+      {
+        name,
+        expiresAt,
+        grants: filteredPermisions
+      },
       project.id,
       user
     );
@@ -42,7 +54,7 @@ const addNewAccessKey = async (req, res, _next) => {
       type: "oAuthTokenCreated",
       to: user.email,
       username: user.name,
-      applicationName: newAccessKey.clientId,
+      applicationName: newAccessKey.name ?? newAccessKey.clientId,
       scopes: newAccessKey.grants,
       tokenDetailsUrl: `${process.env.CLIENT_URL}/oauth2/token`,
       securityLogUrl: `${process.env.CLIENT_URL}/security-log`,
@@ -69,7 +81,13 @@ const deleteAccessKey = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "CLIENT_ID_NOT_FOUND");
     return;
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [project.id]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
@@ -117,7 +135,13 @@ const refreshAccessKey = async (req, res, _next) => {
   if (!clientId) {
     ErrorHandler.handleGenericErrorResponse(res, "CLIENT_ID_NOT_FOUND");
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [project.id]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }

package/dist/esm/controllers/projectAccessKey.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/projectAccessKey.controller.ts"],"sourcesContent":["import type { AccessKeyData, OAuth2Access } from '@/types/project.types';\nimport { sendEmail } from '@services/email.service';\nimport * as projectAccessKeyService from '@services/projectAccessKey.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { hasPermission } from '@utils/permissions';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type AddNewAccessKeyBody = AccessKeyData;\nexport type AddNewAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Adds a new access key to a project.\n */\nexport const addNewAccessKey = async (\n  req: Request<AddNewAccessKeyBody>,\n  res: Response<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.addNewAccessKey(\n      req.body,\n      project.id,\n      user\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key created successfully',\n        es: 'Clave de acceso creada con éxito',\n        fr: \"Clé d'accès créée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been created successfully',\n        es: 'La clave de acceso ha sido creada con éxito',\n        fr: \"La clé d'accès a été créée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n\n    sendEmail({\n      type: 'oAuthTokenCreated',\n      to: user.email,\n      username: user.name,\n      applicationName: newAccessKey.clientId,\n      scopes: newAccessKey.grants,\n      tokenDetailsUrl: `${process.env.CLIENT_URL}/oauth2/token`,\n      securityLogUrl: `${process.env.CLIENT_URL}/security-log`,\n      supportUrl: `${process.env.CLIENT_URL}/support`,\n    });\n\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteAccessKeyBody = { clientId: string };\nexport type DeleteAccessKeyResponse = ResponseData<null>;\n\n/**\n * Deletes an access key from a project.\n */\nexport const deleteAccessKey = async (\n  req: Request,\n  res: Response<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const deletedAccessKey = await projectAccessKeyService.deleteAccessKey(\n      clientId,\n      project,\n      user.id\n    );\n\n    if (!deletedAccessKey) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ACCESS_KEY_NOT_FOUND', {\n        clientId,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Access key deleted successfully',\n        es: 'Clave de acceso eliminada con éxito',\n        fr: \"Clé d'accès supprimée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been deleted successfully',\n        es: 'La clave de acceso ha sido eliminada con éxito',\n        fr: \"La clé d'accès a été supprimée avec succès\",\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type RefreshAccessKeyBody = { clientId: string };\nexport type RefreshAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Refreshes an access key from a project.\n */\nexport const refreshAccessKey = async (\n  req: Request<RefreshAccessKeyBody>,\n  res: Response<RefreshAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.refreshAccessKey(\n      clientId,\n      project!.id,\n      user!.id\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key refreshed successfully',\n        es: 'Clave de acceso actualizada con éxito',\n        fr: \"Clé d'accès actualisée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been refreshed successfully',\n        es: 'La clave de acceso ha sido actualizada con éxito',\n        fr: \"La clé d'accès a été actualisée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AACA,SAAS,iBAAiB;AAC1B,YAAY,6BAA6B;AACzC,SAAwB,oBAAoB;AAC5C,SAAS,qBAAqB;AAC9B,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAQX,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AAErC,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAErB,cAAU;AAAA,MACR,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,iBAAiB,aAAa;AAAA,MAC9B,QAAQ,aAAa;AAAA,MACrB,iBAAiB,GAAG,QAAQ,IAAI,UAAU;AAAA,MAC1C,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,YAAY,GAAG,QAAQ,IAAI,UAAU;AAAA,IACvC,CAAC;AAED;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,mBAAmB,MAAM,wBAAwB;AAAA,MACrD;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP;AAEA,QAAI,CAAC,kBAAkB;AACrB,mBAAa,2BAA2B,KAAK,wBAAwB;AAAA,QACnE;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAAA,EACjE;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA,QAAS;AAAA,MACT,KAAM;AAAA,IACR;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/projectAccessKey.controller.ts"],"sourcesContent":["import type { AccessKeyData, OAuth2Access } from '@/types/project.types';\nimport type { ResponseWithSession } from '@middlewares/sessionAuth.middleware';\nimport { sendEmail } from '@services/email.service';\nimport * as projectAccessKeyService from '@services/projectAccessKey.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { hasPermission, intersectPermissions } from '@utils/permissions';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type AddNewAccessKeyBody = AccessKeyData;\nexport type AddNewAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Adds a new access key to a project.\n */\nexport const addNewAccessKey = async (\n  req: Request<AddNewAccessKeyBody>,\n  res: ResponseWithSession<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles, permissions } = res.locals;\n  const { grants, name, expiresAt } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [project.id],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const filteredPermisions = intersectPermissions(permissions, grants);\n\n  try {\n    const newAccessKey = await projectAccessKeyService.addNewAccessKey(\n      {\n        name,\n        expiresAt,\n        grants: filteredPermisions,\n      },\n      project.id,\n      user\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key created successfully',\n        es: 'Clave de acceso creada con éxito',\n        fr: \"Clé d'accès créée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been created successfully',\n        es: 'La clave de acceso ha sido creada con éxito',\n        fr: \"La clé d'accès a été créée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n\n    sendEmail({\n      type: 'oAuthTokenCreated',\n      to: user.email,\n      username: user.name,\n      applicationName: newAccessKey.name ?? newAccessKey.clientId,\n      scopes: newAccessKey.grants,\n      tokenDetailsUrl: `${process.env.CLIENT_URL}/oauth2/token`,\n      securityLogUrl: `${process.env.CLIENT_URL}/security-log`,\n      supportUrl: `${process.env.CLIENT_URL}/support`,\n    });\n\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteAccessKeyBody = { clientId: string };\nexport type DeleteAccessKeyResponse = ResponseData<null>;\n\n/**\n * Deletes an access key from a project.\n */\nexport const deleteAccessKey = async (\n  req: Request,\n  res: ResponseWithSession<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [project.id],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const deletedAccessKey = await projectAccessKeyService.deleteAccessKey(\n      clientId,\n      project,\n      user.id\n    );\n\n    if (!deletedAccessKey) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ACCESS_KEY_NOT_FOUND', {\n        clientId,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Access key deleted successfully',\n        es: 'Clave de acceso eliminada con éxito',\n        fr: \"Clé d'accès supprimée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been deleted successfully',\n        es: 'La clave de acceso ha sido eliminada con éxito',\n        fr: \"La clé d'accès a été supprimée avec succès\",\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type RefreshAccessKeyBody = { clientId: string };\nexport type RefreshAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Refreshes an access key from a project.\n */\nexport const refreshAccessKey = async (\n  req: Request<RefreshAccessKeyBody>,\n  res: ResponseWithSession<RefreshAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [project!.id],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.refreshAccessKey(\n      clientId,\n      project!.id,\n      user!.id\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key refreshed successfully',\n        es: 'Clave de acceso actualizada con éxito',\n        fr: \"Clé d'accès actualisée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been refreshed successfully',\n        es: 'La clave de acceso ha sido actualizada con éxito',\n        fr: \"La clé d'accès a été actualisée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAEA,SAAS,iBAAiB;AAC1B,YAAY,6BAA6B;AACzC,SAAwB,oBAAoB;AAC5C,SAAS,eAAe,4BAA4B;AACpD,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAQX,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,OAAO,YAAY,IAAI,IAAI;AAClD,QAAM,EAAE,QAAQ,MAAM,UAAU,IAAI,IAAI;AAExC,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,QAAQ,EAAE;AAAA,EAC/B,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,qBAAqB,qBAAqB,aAAa,MAAM;AAEnE,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD;AAAA,QACE;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAErB,cAAU;AAAA,MACR,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,iBAAiB,aAAa,QAAQ,aAAa;AAAA,MACnD,QAAQ,aAAa;AAAA,MACrB,iBAAiB,GAAG,QAAQ,IAAI,UAAU;AAAA,MAC1C,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,YAAY,GAAG,QAAQ,IAAI,UAAU;AAAA,IACvC,CAAC;AAED;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,QAAQ,EAAE;AAAA,EAC/B,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,mBAAmB,MAAM,wBAAwB;AAAA,MACrD;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP;AAEA,QAAI,CAAC,kBAAkB;AACrB,mBAAa,2BAA2B,KAAK,wBAAwB;AAAA,QACnE;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAAA,EACjE;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,QAAS,EAAE;AAAA,EAChC,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA,QAAS;AAAA,MACT,KAAM;AAAA,IACR;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}

package/dist/esm/controllers/search.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/search.controller.ts"],"sourcesContent":["import * as askDocQuestionUtil from '@utils/AI/askDocQuestion/askDocQuestion';\n\nimport { formatResponse, type ResponseData } from '@utils/responseData';\nimport type { Request, Response } from 'express';\n\nexport type SearchDocUtilParams = {\n  input: string;\n};\nexport type SearchDocUtilResult = ResponseData<string[]>;\n\nexport const searchDocUtil = async (\n  req: Request<unknown, unknown, unknown, SearchDocUtilParams>,\n  res: Response<SearchDocUtilResult>\n) => {\n  const { input } = req.query;\n\n  const response = await askDocQuestionUtil.searchChunkReference(\n    input,\n    30,\n    0.2\n  );\n  const docFileList = response.map((doc) => doc.fileKey);\n\n  const uniqueDocFileList = Array.from(new Set(docFileList));\n\n  const responseData = formatResponse<string[]>({\n    data: uniqueDocFileList,\n  });\n\n  res.json(responseData);\n};\n"],"mappings":"AAAA,YAAY,wBAAwB;AAEpC,SAAS,sBAAyC;AAQ3C,MAAM,gBAAgB,OAC3B,KACA,QACG;AACH,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,QAAM,WAAW,MAAM,mBAAmB;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,cAAc,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO;AAErD,QAAM,oBAAoB,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC;AAEzD,QAAM,eAAe,eAAyB;AAAA,IAC5C,MAAM;AAAA,EACR,CAAC;AAED,MAAI,KAAK,YAAY;AACvB;","names":[]}
+{"version":3,"sources":["../../../src/controllers/search.controller.ts"],"sourcesContent":["import * as askDocQuestionUtil from '@utils/AI/askDocQuestion/askDocQuestion';\nimport { formatResponse, type ResponseData } from '@utils/responseData';\nimport type { Request, Response } from 'express';\n\nexport type SearchDocUtilParams = {\n  input: string;\n};\nexport type SearchDocUtilResult = ResponseData<string[]>;\n\nexport const searchDocUtil = async (\n  req: Request<unknown, unknown, unknown, SearchDocUtilParams>,\n  res: Response<SearchDocUtilResult>\n) => {\n  const { input } = req.query;\n\n  const response = await askDocQuestionUtil.searchChunkReference(\n    input,\n    30,\n    0.2\n  );\n  const docFileList = response.map((doc) => doc.fileKey);\n\n  const uniqueDocFileList = Array.from(new Set(docFileList));\n\n  const responseData = formatResponse<string[]>({\n    data: uniqueDocFileList,\n  });\n\n  res.json(responseData);\n};\n"],"mappings":"AAAA,YAAY,wBAAwB;AACpC,SAAS,sBAAyC;AAQ3C,MAAM,gBAAgB,OAC3B,KACA,QACG;AACH,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,QAAM,WAAW,MAAM,mBAAmB;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,cAAc,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO;AAErD,QAAM,oBAAoB,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC;AAEzD,QAAM,eAAe,eAAyB;AAAA,IAC5C,MAAM;AAAA,EACR,CAAC;AAED,MAAI,KAAK,YAAY;AACvB;","names":[]}

package/dist/esm/controllers/stripe.controller.mjs

@@ -55,8 +55,7 @@ const getSubscription = async (req, res) => {
       // Associate the subscription with the customer
       items: [{ price: priceId }],
       // Set the price ID for the subscription
-      expand: ["latest_invoice.payment_intent"],
-      // Expand to get payment intent details
+      expand: ["latest_invoice.confirmation_secret"],
       payment_settings: {
         payment_method_types: ["card"]
         // Specify payment method types
@@ -77,8 +76,21 @@ const getSubscription = async (req, res) => {
       );
       return;
     }
+    const clientSecret = subscription.latest_invoice?.confirmation_secret?.client_secret;
+    if (!clientSecret) {
+      ErrorHandler.handleGenericErrorResponse(
+        res,
+        "SUBSCRIPTION_CREATION_FAILED",
+        {
+          user,
+          organization,
+          priceId
+        }
+      );
+      return;
+    }
     const responseData = formatResponse({
-      data: subscription
+      data: { subscription, clientSecret }
     });
     res.json(responseData);
     return;

package/dist/esm/controllers/stripe.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/stripe.controller.ts"],"sourcesContent":["import type { Organization } from '@/types/organization.types';\nimport * as emailService from '@services/email.service';\nimport * as subscriptionService from '@services/subscription.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { retrievePlanInformation } from '@utils/plan';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { Request, Response } from 'express';\nimport { t } from 'express-intlayer';\nimport type { Locales } from 'intlayer';\nimport { Stripe } from 'stripe';\n\nexport type GetPricingBody = {\n  priceIds: string[];\n  promoCode?: string;\n};\n\nexport type GetPricingResult = ResponseData<subscriptionService.PricingResult>;\n\n/**\n * Simulate pricing for a given set of prices and a promotion code.\n *\n * @param req - The request object containing the price IDs and promotion code.\n * @param res - The response object to send the simulated pricing result.\n */\nexport const getPricing = async (\n  req: Request<undefined, undefined, GetPricingBody>,\n  res: Response<GetPricingResult>\n) => {\n  const { priceIds, promoCode } = req.body;\n\n  const pricingResult = await subscriptionService.getPricing(\n    priceIds,\n    promoCode\n  );\n\n  const formattedPricingResult =\n    formatResponse<subscriptionService.PricingResult>({\n      data: pricingResult,\n    });\n\n  res.status(200).json(formattedPricingResult);\n};\n\nexport type GetCheckoutSessionBody = {\n  priceId: string;\n  promoCode?: string;\n};\n\nexport type GetCheckoutSessionResult = ResponseData<\n  Stripe.Response<Stripe.Subscription>\n>;\n\n/**\n * Handles subscription creation or update with Stripe and returns a ClientSecret.\n * @param req - Express request object.\n * @param res - Express response object.\n */\nexport const getSubscription = async (\n  req: Request<undefined, undefined, GetCheckoutSessionBody>,\n  res: Response<GetCheckoutSessionResult>\n): Promise<void> => {\n  try {\n    const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n    // Extract organization and user from response locals (set by authentication middleware)\n    const { organization, user } = res.locals;\n    // Get the price ID (Stripe Price ID) from the request body\n    const { priceId, promoCode } = req.body;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    const { period, type } = retrievePlanInformation(priceId);\n\n    if (\n      organization.plan?.subscriptionId &&\n      organization.plan?.type === type &&\n      organization.plan?.period === period &&\n      organization.plan?.status === 'active'\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ALREADY_SUBSCRIBED', {\n        organizationId: organization.id,\n      });\n      return;\n    }\n\n    // Attempt to retrieve the Stripe customer ID from the organization's plan\n    let customerId = organization.plan?.customerId;\n\n    if (!customerId) {\n      // If no customer ID exists, create a new Stripe customer for the organization\n      const customer = await stripe.customers.create({\n        metadata: {\n          organizationId: String(organization.id),\n          userId: String(user.id),\n          // Include the locale for potential localization\n          locale: (res.locals as unknown as { locale: Locales }).locale,\n        },\n      });\n      customerId = customer.id;\n    }\n\n    const promoCodeId = promoCode\n      ? await subscriptionService.getCouponId(promoCode)\n      : null;\n\n    const discounts: Stripe.SubscriptionCreateParams.Discount[] = promoCodeId\n      ? [{ coupon: promoCodeId }]\n      : [];\n\n    // If no subscription exists, create a new one\n    const subscription = await stripe.subscriptions.create({\n      customer: customerId, // Associate the subscription with the customer\n      items: [{ price: priceId }], // Set the price ID for the subscription\n      expand: ['latest_invoice.payment_intent'], // Expand to get payment intent details\n      payment_settings: {\n        payment_method_types: ['card'], // Specify payment method types\n      },\n      payment_behavior: 'default_incomplete', // Create the subscription in an incomplete state until payment is confirmed\n      discounts: discounts,\n    });\n\n    // Handle subscription creation failure\n    if (!subscription) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'SUBSCRIPTION_CREATION_FAILED',\n        {\n          user,\n          organization,\n          priceId,\n        }\n      );\n      return;\n    }\n\n    // Prepare the response data with subscription details\n    const responseData = formatResponse<Stripe.Response<Stripe.Subscription>>({\n      data: subscription,\n    });\n\n    // Send the response back to the client\n    res.json(responseData);\n\n    return;\n  } catch (error) {\n    // Handle any errors that occur during the process\n\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype CancelSubscriptionData = Organization['plan'];\n\ntype CancelSubscriptionResult = ResponseData<CancelSubscriptionData>;\n\n/**\n * Cancels a subscription for an organization.\n * @param _req - Express request object.\n * @param res - Express response object.\n */\nexport const cancelSubscription = async (\n  _req: Request,\n  res: Response<CancelSubscriptionResult>\n): Promise<void> => {\n  const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n  try {\n    // Extract the organization and user from the response locals\n    // These are typically set by authentication middleware earlier in the request pipeline\n    const { organization, user } = res.locals;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    // Check if the organization has an active subscription to cancel\n    if (!organization.plan?.subscriptionId) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Cancel the subscription on Stripe immediately using the subscription ID\n    await stripe.subscriptions.cancel(organization.plan.subscriptionId);\n\n    // Update the organization's plan in the database to reflect the cancellation\n    const plan = await subscriptionService.cancelSubscription(\n      organization.plan.subscriptionId,\n      String(organization.id)\n    );\n\n    // If the plan could not be updated in the database, handle the error\n    if (!plan) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Prepare a formatted response with a success message and the updated plan data\n    const formattedPlan = formatResponse<CancelSubscriptionData>({\n      message: t({\n        en: 'Subscription cancelled successfully',\n        fr: 'Souscription annulée avec succès',\n        es: 'Suscripción cancelada con éxito',\n      }),\n      description: t({\n        en: 'Your subscription has been cancelled successfully',\n        fr: 'Votre souscription a été annulée avec succès',\n        es: 'Su suscripción ha sido cancelada con éxito',\n      }),\n      data: plan!,\n    });\n\n    // Send the response back to the client\n    res.json(formattedPlan);\n\n    await emailService.sendEmail({\n      type: 'subscriptionPaymentCancellation',\n      to: user.email,\n      email: user.email,\n      cancellationDate: new Date().toLocaleDateString(),\n      reactivateLink: `${process.env.CLIENT_URL}/pricing`,\n      username: user.name,\n      organizationName: organization.name,\n      planName: plan.type,\n    });\n  } catch (error) {\n    // Handle any errors that occur during the cancellation process\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n"],"mappings":"AACA,YAAY,kBAAkB;AAC9B,YAAY,yBAAyB;AACrC,SAAwB,oBAAoB;AAC5C,SAAS,+BAA+B;AACxC,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAElB,SAAS,cAAc;AAehB,MAAM,aAAa,OACxB,KACA,QACG;AACH,QAAM,EAAE,UAAU,UAAU,IAAI,IAAI;AAEpC,QAAM,gBAAgB,MAAM,oBAAoB;AAAA,IAC9C;AAAA,IACA;AAAA,EACF;AAEA,QAAM,yBACJ,eAAkD;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AAEH,MAAI,OAAO,GAAG,EAAE,KAAK,sBAAsB;AAC7C;AAgBO,MAAM,kBAAkB,OAC7B,KACA,QACkB;AAClB,MAAI;AACF,UAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAGxD,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAEnC,UAAM,EAAE,SAAS,UAAU,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,KAAK,IAAI,wBAAwB,OAAO;AAExD,QACE,aAAa,MAAM,kBACnB,aAAa,MAAM,SAAS,QAC5B,aAAa,MAAM,WAAW,UAC9B,aAAa,MAAM,WAAW,UAC9B;AACA,mBAAa,2BAA2B,KAAK,sBAAsB;AAAA,QACjE,gBAAgB,aAAa;AAAA,MAC/B,CAAC;AACD;AAAA,IACF;AAGA,QAAI,aAAa,aAAa,MAAM;AAEpC,QAAI,CAAC,YAAY;AAEf,YAAM,WAAW,MAAM,OAAO,UAAU,OAAO;AAAA,QAC7C,UAAU;AAAA,UACR,gBAAgB,OAAO,aAAa,EAAE;AAAA,UACtC,QAAQ,OAAO,KAAK,EAAE;AAAA;AAAA,UAEtB,QAAS,IAAI,OAA0C;AAAA,QACzD;AAAA,MACF,CAAC;AACD,mBAAa,SAAS;AAAA,IACxB;AAEA,UAAM,cAAc,YAChB,MAAM,oBAAoB,YAAY,SAAS,IAC/C;AAEJ,UAAM,YAAwD,cAC1D,CAAC,EAAE,QAAQ,YAAY,CAAC,IACxB,CAAC;AAGL,UAAM,eAAe,MAAM,OAAO,cAAc,OAAO;AAAA,MACrD,UAAU;AAAA;AAAA,MACV,OAAO,CAAC,EAAE,OAAO,QAAQ,CAAC;AAAA;AAAA,MAC1B,QAAQ,CAAC,+BAA+B;AAAA;AAAA,MACxC,kBAAkB;AAAA,QAChB,sBAAsB,CAAC,MAAM;AAAA;AAAA,MAC/B;AAAA,MACA,kBAAkB;AAAA;AAAA,MAClB;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,cAAc;AACjB,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,eAAe,eAAqD;AAAA,MACxE,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,YAAY;AAErB;AAAA,EACF,SAAS,OAAO;AAGd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,qBAAqB,OAChC,MACA,QACkB;AAClB,QAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAExD,MAAI;AAGF,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,MAAM,gBAAgB;AACtC,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,OAAO,cAAc,OAAO,aAAa,KAAK,cAAc;AAGlE,UAAM,OAAO,MAAM,oBAAoB;AAAA,MACrC,aAAa,KAAK;AAAA,MAClB,OAAO,aAAa,EAAE;AAAA,IACxB;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,gBAAgB,eAAuC;AAAA,MAC3D,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,aAAa;AAEtB,UAAM,aAAa,UAAU;AAAA,MAC3B,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,OAAO,KAAK;AAAA,MACZ,mBAAkB,oBAAI,KAAK,GAAE,mBAAmB;AAAA,MAChD,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,kBAAkB,aAAa;AAAA,MAC/B,UAAU,KAAK;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,iBAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/stripe.controller.ts"],"sourcesContent":["import type { Organization } from '@/types/organization.types';\nimport type { ResponseWithSession } from '@middlewares/sessionAuth.middleware';\nimport * as emailService from '@services/email.service';\nimport * as subscriptionService from '@services/subscription.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { retrievePlanInformation } from '@utils/plan';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { Request } from 'express';\nimport { t } from 'express-intlayer';\nimport type { Locales } from 'intlayer';\nimport { Stripe } from 'stripe';\n\nexport type GetPricingBody = {\n  priceIds: string[];\n  promoCode?: string;\n};\n\nexport type GetPricingResult = ResponseData<subscriptionService.PricingResult>;\n\n/**\n * Simulate pricing for a given set of prices and a promotion code.\n *\n * @param req - The request object containing the price IDs and promotion code.\n * @param res - The response object to send the simulated pricing result.\n */\nexport const getPricing = async (\n  req: Request<undefined, undefined, GetPricingBody>,\n  res: ResponseWithSession<GetPricingResult>\n) => {\n  const { priceIds, promoCode } = req.body;\n\n  const pricingResult = await subscriptionService.getPricing(\n    priceIds,\n    promoCode\n  );\n\n  const formattedPricingResult =\n    formatResponse<subscriptionService.PricingResult>({\n      data: pricingResult,\n    });\n\n  res.status(200).json(formattedPricingResult);\n};\n\nexport type GetCheckoutSessionBody = {\n  priceId: string;\n  promoCode?: string;\n};\n\nexport type GetCheckoutSessionResult = ResponseData<{\n  subscription: Stripe.Response<Stripe.Subscription>;\n  clientSecret: string;\n}>;\n\n/**\n * Handles subscription creation or update with Stripe and returns a ClientSecret.\n * @param req - Express request object.\n * @param res - Express response object.\n */\nexport const getSubscription = async (\n  req: Request<undefined, undefined, GetCheckoutSessionBody>,\n  res: ResponseWithSession<GetCheckoutSessionResult>\n): Promise<void> => {\n  try {\n    const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n    // Extract organization and user from response locals (set by authentication middleware)\n    const { organization, user } = res.locals;\n    // Get the price ID (Stripe Price ID) from the request body\n    const { priceId, promoCode } = req.body;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    const { period, type } = retrievePlanInformation(priceId);\n\n    if (\n      organization.plan?.subscriptionId &&\n      organization.plan?.type === type &&\n      organization.plan?.period === period &&\n      organization.plan?.status === 'active'\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ALREADY_SUBSCRIBED', {\n        organizationId: organization.id,\n      });\n      return;\n    }\n\n    // Attempt to retrieve the Stripe customer ID from the organization's plan\n    let customerId = organization.plan?.customerId;\n\n    if (!customerId) {\n      // If no customer ID exists, create a new Stripe customer for the organization\n      const customer = await stripe.customers.create({\n        metadata: {\n          organizationId: String(organization.id),\n          userId: String(user.id),\n          // Include the locale for potential localization\n          locale: (res.locals as unknown as { locale: Locales }).locale,\n        },\n      });\n      customerId = customer.id;\n    }\n\n    const promoCodeId = promoCode\n      ? await subscriptionService.getCouponId(promoCode)\n      : null;\n\n    const discounts: Stripe.SubscriptionCreateParams.Discount[] = promoCodeId\n      ? [{ coupon: promoCodeId }]\n      : [];\n\n    // If no subscription exists, create a new one\n    const subscription = await stripe.subscriptions.create({\n      customer: customerId, // Associate the subscription with the customer\n      items: [{ price: priceId }], // Set the price ID for the subscription\n      expand: ['latest_invoice.confirmation_secret'],\n      payment_settings: {\n        payment_method_types: ['card'], // Specify payment method types\n      },\n      payment_behavior: 'default_incomplete', // Create the subscription in an incomplete state until payment is confirmed\n      discounts,\n    });\n\n    // Handle subscription creation failure\n    if (!subscription) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'SUBSCRIPTION_CREATION_FAILED',\n        {\n          user,\n          organization,\n          priceId,\n        }\n      );\n      return;\n    }\n\n    const clientSecret = (\n      subscription.latest_invoice as Stripe.Invoice & {\n        confirmation_secret?: { client_secret: string };\n      }\n    )?.confirmation_secret?.client_secret;\n\n    // Handle subscription creation failure\n    if (!clientSecret) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'SUBSCRIPTION_CREATION_FAILED',\n        {\n          user,\n          organization,\n          priceId,\n        }\n      );\n      return;\n    }\n\n    // Prepare the response data with subscription details\n    const responseData = formatResponse<GetCheckoutSessionResult['data']>({\n      data: { subscription, clientSecret },\n    });\n\n    // Send the response back to the client\n    res.json(responseData);\n\n    return;\n  } catch (error) {\n    // Handle any errors that occur during the process\n\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype CancelSubscriptionData = Organization['plan'];\n\ntype CancelSubscriptionResult = ResponseData<CancelSubscriptionData>;\n\n/**\n * Cancels a subscription for an organization.\n * @param _req - Express request object.\n * @param res - Express response object.\n */\nexport const cancelSubscription = async (\n  _req: Request,\n  res: ResponseWithSession<CancelSubscriptionResult>\n): Promise<void> => {\n  const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n  try {\n    // Extract the organization and user from the response locals\n    // These are typically set by authentication middleware earlier in the request pipeline\n    const { organization, user } = res.locals;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    // Check if the organization has an active subscription to cancel\n    if (!organization.plan?.subscriptionId) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Cancel the subscription on Stripe immediately using the subscription ID\n    await stripe.subscriptions.cancel(organization.plan.subscriptionId);\n\n    // Update the organization's plan in the database to reflect the cancellation\n    const plan = await subscriptionService.cancelSubscription(\n      organization.plan.subscriptionId,\n      String(organization.id)\n    );\n\n    // If the plan could not be updated in the database, handle the error\n    if (!plan) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Prepare a formatted response with a success message and the updated plan data\n    const formattedPlan = formatResponse<CancelSubscriptionData>({\n      message: t({\n        en: 'Subscription cancelled successfully',\n        fr: 'Souscription annulée avec succès',\n        es: 'Suscripción cancelada con éxito',\n      }),\n      description: t({\n        en: 'Your subscription has been cancelled successfully',\n        fr: 'Votre souscription a été annulée avec succès',\n        es: 'Su suscripción ha sido cancelada con éxito',\n      }),\n      data: plan!,\n    });\n\n    // Send the response back to the client\n    res.json(formattedPlan);\n\n    await emailService.sendEmail({\n      type: 'subscriptionPaymentCancellation',\n      to: user.email,\n      email: user.email,\n      cancellationDate: new Date().toLocaleDateString(),\n      reactivateLink: `${process.env.CLIENT_URL}/pricing`,\n      username: user.name,\n      organizationName: organization.name,\n      planName: plan.type,\n    });\n  } catch (error) {\n    // Handle any errors that occur during the cancellation process\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n"],"mappings":"AAEA,YAAY,kBAAkB;AAC9B,YAAY,yBAAyB;AACrC,SAAwB,oBAAoB;AAC5C,SAAS,+BAA+B;AACxC,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAElB,SAAS,cAAc;AAehB,MAAM,aAAa,OACxB,KACA,QACG;AACH,QAAM,EAAE,UAAU,UAAU,IAAI,IAAI;AAEpC,QAAM,gBAAgB,MAAM,oBAAoB;AAAA,IAC9C;AAAA,IACA;AAAA,EACF;AAEA,QAAM,yBACJ,eAAkD;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AAEH,MAAI,OAAO,GAAG,EAAE,KAAK,sBAAsB;AAC7C;AAiBO,MAAM,kBAAkB,OAC7B,KACA,QACkB;AAClB,MAAI;AACF,UAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAGxD,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAEnC,UAAM,EAAE,SAAS,UAAU,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,KAAK,IAAI,wBAAwB,OAAO;AAExD,QACE,aAAa,MAAM,kBACnB,aAAa,MAAM,SAAS,QAC5B,aAAa,MAAM,WAAW,UAC9B,aAAa,MAAM,WAAW,UAC9B;AACA,mBAAa,2BAA2B,KAAK,sBAAsB;AAAA,QACjE,gBAAgB,aAAa;AAAA,MAC/B,CAAC;AACD;AAAA,IACF;AAGA,QAAI,aAAa,aAAa,MAAM;AAEpC,QAAI,CAAC,YAAY;AAEf,YAAM,WAAW,MAAM,OAAO,UAAU,OAAO;AAAA,QAC7C,UAAU;AAAA,UACR,gBAAgB,OAAO,aAAa,EAAE;AAAA,UACtC,QAAQ,OAAO,KAAK,EAAE;AAAA;AAAA,UAEtB,QAAS,IAAI,OAA0C;AAAA,QACzD;AAAA,MACF,CAAC;AACD,mBAAa,SAAS;AAAA,IACxB;AAEA,UAAM,cAAc,YAChB,MAAM,oBAAoB,YAAY,SAAS,IAC/C;AAEJ,UAAM,YAAwD,cAC1D,CAAC,EAAE,QAAQ,YAAY,CAAC,IACxB,CAAC;AAGL,UAAM,eAAe,MAAM,OAAO,cAAc,OAAO;AAAA,MACrD,UAAU;AAAA;AAAA,MACV,OAAO,CAAC,EAAE,OAAO,QAAQ,CAAC;AAAA;AAAA,MAC1B,QAAQ,CAAC,oCAAoC;AAAA,MAC7C,kBAAkB;AAAA,QAChB,sBAAsB,CAAC,MAAM;AAAA;AAAA,MAC/B;AAAA,MACA,kBAAkB;AAAA;AAAA,MAClB;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,cAAc;AACjB,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,eACJ,aAAa,gBAGZ,qBAAqB;AAGxB,QAAI,CAAC,cAAc;AACjB,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,eAAe,eAAiD;AAAA,MACpE,MAAM,EAAE,cAAc,aAAa;AAAA,IACrC,CAAC;AAGD,QAAI,KAAK,YAAY;AAErB;AAAA,EACF,SAAS,OAAO;AAGd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,qBAAqB,OAChC,MACA,QACkB;AAClB,QAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAExD,MAAI;AAGF,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,MAAM,gBAAgB;AACtC,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,OAAO,cAAc,OAAO,aAAa,KAAK,cAAc;AAGlE,UAAM,OAAO,MAAM,oBAAoB;AAAA,MACrC,aAAa,KAAK;AAAA,MAClB,OAAO,aAAa,EAAE;AAAA,IACxB;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,gBAAgB,eAAuC;AAAA,MAC3D,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,aAAa;AAEtB,UAAM,aAAa,UAAU;AAAA,MAC3B,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,OAAO,KAAK;AAAA,MACZ,mBAAkB,oBAAI,KAAK,GAAE,mBAAmB;AAAA,MAChD,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,kBAAkB,aAAa;AAAA,MAC/B,UAAU,KAAK;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,iBAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;","names":[]}

package/dist/esm/controllers/tag.controller.mjs

@@ -22,16 +22,22 @@ const getTags = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "tag:read")()) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   const restrictedFilter = {
     ...filters,
     organizationId: String(organization.id)
   };
   try {
     const tags = await tagService.findTags(restrictedFilter, skip, pageSize);
+    if (!hasPermission(
+      roles,
+      "tag:read"
+    )({
+      ...res.locals,
+      targetTags: tags
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     const totalItems = await tagService.countTags(filters);
     const formattedTags = mapTagsToAPI(tags);
     const responseData = formatPaginatedResponse({
@@ -49,7 +55,7 @@ const getTags = async (req, res, _next) => {
   }
 };
 const addTag = async (req, res, _next) => {
-  const { organization, user, roles } = res.locals;
+  const { organization, project, user, roles } = res.locals;
   const tagData = req.body;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -59,18 +65,29 @@ const addTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
+  if (!project) {
+    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
+    return;
+  }
   if (!tagData) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_DATA_NOT_FOUND");
   }
-  if (!hasPermission(roles, "tag:admin")(res.locals)) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   const tag = {
     creatorId: user.id,
     organizationId: organization.id,
+    projectId: project.id,
     ...tagData
   };
+  if (!hasPermission(
+    roles,
+    "tag:admin"
+  )({
+    ...res.locals,
+    targetTags: [tag]
+  })) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
     const newTag = await tagService.createTag(tag);
     const formattedTag = mapTagToAPI(newTag);
@@ -105,10 +122,6 @@ const updateTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "tag:write")()) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   try {
     const tag = {
       _id: tagId,
@@ -118,6 +131,16 @@ const updateTag = async (req, res, _next) => {
       instructions: req.body.instructions
     };
     const tagToDelete = await tagService.getTagById(tagId);
+    if (!hasPermission(
+      roles,
+      "tag:write"
+    )({
+      ...res.locals,
+      targetTags: [tagToDelete]
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     if (String(tagToDelete.organizationId) !== String(organization.id)) {
       ErrorHandler.handleGenericErrorResponse(res, "TAG_NOT_IN_ORGANIZATION");
       return;
@@ -159,12 +182,18 @@ const deleteTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "TAG_ID_NOT_FOUND");
     return;
   }
-  if (!hasPermission(roles, "tag:admin")(res.locals)) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   try {
     const tagToDelete = await tagService.getTagById(tagId);
+    if (!hasPermission(
+      roles,
+      "tag:admin"
+    )({
+      ...res.locals,
+      targetTags: [tagToDelete]
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     if (String(tagToDelete.organizationId) !== String(organization.id)) {
       ErrorHandler.handleGenericErrorResponse(res, "TAG_NOT_IN_ORGANIZATION");
       return;

package/dist/esm/controllers/tag.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/tag.controller.ts"],"sourcesContent":["import type {\n  Tag,\n  TagAPI,\n  TagCreationData,\n  TagData,\n  TagSchema,\n} from '@/types/tag.types';\nimport { logger } from '@logger';\nimport * as tagService from '@services/tag.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getTagFiltersAndPagination,\n  type TagFilters,\n  type TagFiltersParams,\n} from '@utils/filtersAndPagination/getTagFiltersAndPagination';\nimport { mapTagsToAPI, mapTagToAPI } from '@utils/mapper/tag';\nimport { hasPermission } from '@utils/permissions';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type GetTagsParams = FiltersAndPagination<TagFiltersParams>;\nexport type GetTagsResult = PaginatedResponse<TagAPI>;\n\n/**\n * Retrieves a list of tags based on filters and pagination.\n */\nexport const getTags = async (\n  req: Request<GetTagsParams>,\n  res: Response<GetTagsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getTagFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:read')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const restrictedFilter: TagFilters = {\n    ...filters,\n    organizationId: String(organization.id),\n  };\n\n  try {\n    const tags = await tagService.findTags(restrictedFilter, skip, pageSize);\n    const totalItems = await tagService.countTags(filters);\n\n    const formattedTags = mapTagsToAPI(tags);\n\n    const responseData = formatPaginatedResponse<TagAPI>({\n      data: formattedTags,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddTagBody = TagCreationData;\nexport type AddTagResult = ResponseData<TagAPI>;\n\n/**\n * Adds a new tag to the database.\n */\nexport const addTag = async (\n  req: Request<any, any, AddTagBody>,\n  res: Response<AddTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, user, roles } = res.locals;\n  const tagData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'tag:admin')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const tag: TagData = {\n    creatorId: user.id,\n    organizationId: organization.id,\n    ...tagData,\n  };\n\n  try {\n    const newTag = await tagService.createTag(tag);\n\n    const formattedTag = mapTagToAPI(newTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag created successfully',\n        fr: 'Tag créé avec succès',\n        es: 'Tag creado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been created successfully',\n        fr: 'Votre tag a été créé avec succès',\n        es: 'Su tag ha sido creado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateTagParams = { tagId: string | Tag['id'] };\nexport type UpdateTagBody = Partial<TagData>;\nexport type UpdateTagResult = ResponseData<TagAPI>;\n\n/**\n * Updates an existing tag in the database.\n */\nexport const updateTag = async (\n  req: Request<UpdateTagParams, any, UpdateTagBody>,\n  res: Response<UpdateTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { tagId } = req.params;\n  const { organization, user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const tag = {\n      _id: tagId,\n      name: req.body.name,\n      key: req.body.key,\n      description: req.body.description,\n      instructions: req.body.instructions,\n    } as Partial<TagSchema> & { _id: Tag['id'] };\n\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const updatedTag = await tagService.updateTagById(tag._id, tag);\n\n    const formattedTag = mapTagToAPI(updatedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag updated successfully',\n        fr: 'Tag mis à jour avec succès',\n        es: 'Tag actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been updated successfully',\n        fr: 'Votre tag a été mis à jour avec succès',\n        es: 'Su tag ha sido actualizado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteTagParams = { tagId: string | Tag['id'] };\nexport type DeleteTagResult = ResponseData<TagAPI>;\n\n/**\n * Deletes a tag from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteTag = async (\n  req: Request<DeleteTagParams>,\n  res: Response<DeleteTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { tagId } = req.params;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'TAG_ID_NOT_FOUND');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:admin')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const deletedTag = await tagService.deleteTagById(tagId);\n\n    if (!deletedTag) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_FOUND', {\n        tagId,\n      });\n\n      return;\n    }\n\n    logger.info(`Tag deleted: ${String(deletedTag.id)}`);\n\n    const formattedTag = mapTagToAPI(deletedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag deleted successfully',\n        fr: 'Tag supprimé avec succès',\n        es: 'Tag eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been deleted successfully',\n        fr: 'Votre tag a été supprimé avec succès',\n        es: 'Su tag ha sido eliminado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAOA,SAAS,cAAc;AACvB,YAAY,gBAAgB;AAC5B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,cAAc,mBAAmB;AAC1C,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAQX,MAAM,UAAU,OACrB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,2BAA2B,GAAG;AAEhC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,UAAU,EAAE,GAAG;AACvC,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,mBAA+B;AAAA,IACnC,GAAG;AAAA,IACH,gBAAgB,OAAO,aAAa,EAAE;AAAA,EACxC;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,WAAW,SAAS,kBAAkB,MAAM,QAAQ;AACvE,UAAM,aAAa,MAAM,WAAW,UAAU,OAAO;AAErD,UAAM,gBAAgB,aAAa,IAAI;AAEvC,UAAM,eAAe,wBAAgC;AAAA,MACnD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,SAAS,OACpB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAC1C,QAAM,UAAU,IAAI;AAEpB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,IAAI,MAAM,GAAG;AAClD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,MAAe;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,GAAG;AAAA,EACL;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,WAAW,UAAU,GAAG;AAE7C,UAAM,eAAe,YAAY,MAAM;AAEvC,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AASO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAE1C,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,GAAG;AACxC,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,MAAM;AAAA,MACV,KAAK;AAAA,MACL,MAAM,IAAI,KAAK;AAAA,MACf,KAAK,IAAI,KAAK;AAAA,MACd,aAAa,IAAI,KAAK;AAAA,MACtB,cAAc,IAAI,KAAK;AAAA,IACzB;AAEA,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,IAAI,KAAK,GAAG;AAE9D,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,OAAO;AACV,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,IAAI,MAAM,GAAG;AAClD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,KAAK;AAEvD,QAAI,CAAC,YAAY;AACf,mBAAa,2BAA2B,KAAK,iBAAiB;AAAA,QAC5D;AAAA,MACF,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,gBAAgB,OAAO,WAAW,EAAE,CAAC,EAAE;AAEnD,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/tag.controller.ts"],"sourcesContent":["import type {\n  Tag,\n  TagAPI,\n  TagCreationData,\n  TagData,\n  TagSchema,\n} from '@/types/tag.types';\nimport { logger } from '@logger';\nimport type { ResponseWithSession } from '@middlewares/sessionAuth.middleware';\nimport * as tagService from '@services/tag.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getTagFiltersAndPagination,\n  type TagFilters,\n  type TagFiltersParams,\n} from '@utils/filtersAndPagination/getTagFiltersAndPagination';\nimport { mapTagsToAPI, mapTagToAPI } from '@utils/mapper/tag';\nimport { hasPermission } from '@utils/permissions';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type GetTagsParams = FiltersAndPagination<TagFiltersParams>;\nexport type GetTagsResult = PaginatedResponse<TagAPI>;\n\n/**\n * Retrieves a list of tags based on filters and pagination.\n */\nexport const getTags = async (\n  req: Request<GetTagsParams>,\n  res: ResponseWithSession<GetTagsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getTagFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  const restrictedFilter: TagFilters = {\n    ...filters,\n    organizationId: String(organization.id),\n  };\n\n  try {\n    const tags = await tagService.findTags(restrictedFilter, skip, pageSize);\n\n    if (\n      !hasPermission(\n        roles,\n        'tag:read'\n      )({\n        ...res.locals,\n        targetTags: tags,\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const totalItems = await tagService.countTags(filters);\n\n    const formattedTags = mapTagsToAPI(tags);\n\n    const responseData = formatPaginatedResponse<TagAPI>({\n      data: formattedTags,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddTagBody = TagCreationData;\nexport type AddTagResult = ResponseData<TagAPI>;\n\n/**\n * Adds a new tag to the database.\n */\nexport const addTag = async (\n  req: Request<any, any, AddTagBody>,\n  res: ResponseWithSession<AddTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, project, user, roles } = res.locals;\n  const tagData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  const tag: TagData = {\n    creatorId: user.id,\n    organizationId: organization.id,\n    projectId: project.id,\n    ...tagData,\n  };\n\n  if (\n    !hasPermission(\n      roles,\n      'tag:admin'\n    )({\n      ...res.locals,\n      targetTags: [tag as Tag],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newTag = await tagService.createTag(tag);\n\n    const formattedTag = mapTagToAPI(newTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag created successfully',\n        fr: 'Tag créé avec succès',\n        es: 'Tag creado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been created successfully',\n        fr: 'Votre tag a été créé avec succès',\n        es: 'Su tag ha sido creado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateTagParams = { tagId: string | Tag['id'] };\nexport type UpdateTagBody = Partial<TagData>;\nexport type UpdateTagResult = ResponseData<TagAPI>;\n\n/**\n * Updates an existing tag in the database.\n */\nexport const updateTag = async (\n  req: Request<UpdateTagParams, any, UpdateTagBody>,\n  res: ResponseWithSession<UpdateTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { tagId } = req.params;\n  const { organization, user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const tag = {\n      _id: tagId,\n      name: req.body.name,\n      key: req.body.key,\n      description: req.body.description,\n      instructions: req.body.instructions,\n    } as Partial<TagSchema> & { _id: Tag['id'] };\n\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (\n      !hasPermission(\n        roles,\n        'tag:write'\n      )({\n        ...res.locals,\n        targetTags: [tagToDelete],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const updatedTag = await tagService.updateTagById(tag._id, tag);\n\n    const formattedTag = mapTagToAPI(updatedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag updated successfully',\n        fr: 'Tag mis à jour avec succès',\n        es: 'Tag actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been updated successfully',\n        fr: 'Votre tag a été mis à jour avec succès',\n        es: 'Su tag ha sido actualizado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteTagParams = { tagId: string | Tag['id'] };\nexport type DeleteTagResult = ResponseData<TagAPI>;\n\n/**\n * Deletes a tag from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteTag = async (\n  req: Request<DeleteTagParams>,\n  res: ResponseWithSession<DeleteTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { tagId } = req.params;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'TAG_ID_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (\n      !hasPermission(\n        roles,\n        'tag:admin'\n      )({\n        ...res.locals,\n        targetTags: [tagToDelete],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const deletedTag = await tagService.deleteTagById(tagId);\n\n    if (!deletedTag) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_FOUND', {\n        tagId,\n      });\n\n      return;\n    }\n\n    logger.info(`Tag deleted: ${String(deletedTag.id)}`);\n\n    const formattedTag = mapTagToAPI(deletedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag deleted successfully',\n        fr: 'Tag supprimé avec succès',\n        es: 'Tag eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been deleted successfully',\n        fr: 'Votre tag a été supprimé avec succès',\n        es: 'Su tag ha sido eliminado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAOA,SAAS,cAAc;AAEvB,YAAY,gBAAgB;AAC5B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,cAAc,mBAAmB;AAC1C,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAQX,MAAM,UAAU,OACrB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,2BAA2B,GAAG;AAEhC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,QAAM,mBAA+B;AAAA,IACnC,GAAG;AAAA,IACH,gBAAgB,OAAO,aAAa,EAAE;AAAA,EACxC;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,WAAW,SAAS,kBAAkB,MAAM,QAAQ;AAEvE,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,YAAY;AAAA,IACd,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,UAAU,OAAO;AAErD,UAAM,gBAAgB,aAAa,IAAI;AAEvC,UAAM,eAAe,wBAAgC;AAAA,MACnD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,SAAS,OACpB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,SAAS,MAAM,MAAM,IAAI,IAAI;AACnD,QAAM,UAAU,IAAI;AAEpB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,QAAM,MAAe;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,WAAW,QAAQ;AAAA,IACnB,GAAG;AAAA,EACL;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,YAAY,CAAC,GAAU;AAAA,EACzB,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,WAAW,UAAU,GAAG;AAE7C,UAAM,eAAe,YAAY,MAAM;AAEvC,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AASO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAE1C,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,MAAM;AAAA,MACV,KAAK;AAAA,MACL,MAAM,IAAI,KAAK;AAAA,MACf,KAAK,IAAI,KAAK;AAAA,MACd,aAAa,IAAI,KAAK;AAAA,MACtB,cAAc,IAAI,KAAK;AAAA,IACzB;AAEA,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,YAAY,CAAC,WAAW;AAAA,IAC1B,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,IAAI,KAAK,GAAG;AAE9D,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,OAAO;AACV,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,YAAY,CAAC,WAAW;AAAA,IAC1B,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,KAAK;AAEvD,QAAI,CAAC,YAAY;AACf,mBAAa,2BAA2B,KAAK,iBAAiB;AAAA,QAC5D;AAAA,MACF,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,gBAAgB,OAAO,WAAW,EAAE,CAAC,EAAE;AAEnD,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}

package/dist/esm/controllers/user.controller.mjs

@@ -59,7 +59,7 @@ const getUsers = async (req, res, _next) => {
       "user:read"
     )({
       ...res.locals,
-      targetUserIds: users.map((user2) => user2.id)
+      targetUsers: users
     })) {
       ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
       return;
@@ -111,7 +111,7 @@ const getUserByEmail = async (req, res, _next) => {
       "user:read"
     )({
       ...res.locals,
-      targetUserIds: [user.id]
+      targetUsers: [user]
     })) {
       ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
       return;
@@ -140,7 +140,7 @@ const updateUser = async (req, res, _next) => {
     "user:write"
   )({
     ...res.locals,
-    targetUserIds: [user.id]
+    targetUsers: [userData]
   })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
@@ -174,12 +174,23 @@ const updateUser = async (req, res, _next) => {
 const deleteUser = async (req, res, _next) => {
   const { userId } = req.params;
   const { roles } = res.locals;
-  if (!hasPermission(roles, "user:admin")()) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   try {
-    const user = await userService.deleteUser(userId);
+    const user = await userService.getUserById(userId);
+    if (!user) {
+      ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_FOUND");
+      return;
+    }
+    if (!hasPermission(
+      roles,
+      "user:admin"
+    )({
+      ...res.locals,
+      targetUsers: [user]
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
+    await userService.deleteUser(userId);
     const formattedUser = mapUserToAPI(user);
     const responseData = formatResponse({
       message: t({

package/dist/esm/controllers/user.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/user.controller.ts"],"sourcesContent":["import type { User, UserAPI } from '@/types/user.types';\nimport { logger } from '@logger';\nimport { sendEmail } from '@services/email.service';\nimport * as userService from '@services/user.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport { getOrganizationFiltersAndPagination } from '@utils/filtersAndPagination/getOrganizationFiltersAndPagination';\nimport type { UserFiltersParam } from '@utils/filtersAndPagination/getUserFiltersAndPagination';\nimport { mapUsersToAPI, mapUserToAPI } from '@utils/mapper/user';\nimport { hasPermission } from '@utils/permissions';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type CreateUserBody = { email: string; password?: string };\nexport type CreateUserResult = ResponseData<UserAPI>;\n\n/**\n * Creates a new user.\n */\nexport const createUser = async (\n  req: Request<any, any, User>,\n  res: Response<CreateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const user: User | undefined = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const newUser = await userService.createUser(user);\n\n    await sendEmail({\n      type: 'welcome',\n      to: newUser.email,\n      username: newUser.name,\n      loginLink: `${process.env.CLIENT_URL}/auth/login`,\n    });\n\n    const formattedUser = mapUserToAPI(newUser);\n\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User created',\n        fr: 'Utilisateur créé',\n        es: 'Usuario creado',\n      }),\n      description: t({\n        en: 'User created successfully',\n        fr: 'Utilisateur créé avec succès',\n        es: 'Usuario creado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUsersParams = FiltersAndPagination<UserFiltersParam>;\nexport type GetUsersResult = PaginatedResponse<UserAPI>;\n\n/**\n * Retrieves a list of users based on filters and pagination.\n */\nexport const getUsers = async (\n  req: Request<GetUsersParams>,\n  res: Response<GetUsersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getOrganizationFiltersAndPagination(req);\n\n  try {\n    const users = await userService.findUsers(filters, skip, pageSize);\n\n    if (\n      !hasPermission(\n        roles,\n        'user:read'\n      )({\n        ...res.locals,\n        targetUserIds: users.map((user) => user.id),\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const totalItems = await userService.countUsers(filters);\n\n    const formattedUsers = mapUsersToAPI(users);\n\n    const responseData = formatPaginatedResponse<UserAPI>({\n      data: formattedUsers,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByIdParams = { userId: string };\nexport type GetUserByIdResult = ResponseData<UserAPI>;\n\nexport const getUserById = async (\n  req: Request<GetUserByIdParams>,\n  res: Response<GetUserByIdResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.getUserById(userId);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByEmailParams = { email: string };\nexport type GetUserByEmailResult = ResponseData<UserAPI>;\n\nexport const getUserByEmail = async (\n  req: Request<GetUserByEmailParams>,\n  res: Response<GetUserByEmailResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { email } = req.params;\n  const { roles } = res.locals;\n\n  try {\n    const user = await userService.getUserByEmail(email);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    if (\n      !hasPermission(\n        roles,\n        'user:read'\n      )({\n        ...res.locals,\n        targetUserIds: [user.id],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateUserBody = Partial<User>;\nexport type UpdateUserResult = ResponseData<UserAPI>;\n\n/**\n * Updates user information (phone number, date of birth).\n */\nexport const updateUser = async (\n  req: Request<any, any, UpdateUserBody | undefined>,\n  res: Response<UpdateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const userData = req.body;\n  const { user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (typeof userData !== 'object') {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_DATA_NOT_FOUND');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'user:write'\n    )({\n      ...res.locals,\n      targetUserIds: [user.id],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const updatedUser = await userService.updateUserById(user.id, userData);\n\n    logger.info(\n      `User updated: Name: ${updatedUser.name}, id: ${String(updatedUser.id)}`\n    );\n\n    const formattedUser = mapUserToAPI(updatedUser);\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User updated',\n        fr: 'Utilisateur mis à jour',\n        es: 'Usuario actualizado',\n      }),\n      description: t({\n        en: 'User updated successfully',\n        fr: 'Utilisateur mis à jour avec succès',\n        es: 'Usuario actualizado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteUserParams = { userId: string };\nexport type DeleteUserResult = ResponseData<UserAPI>;\n\n/**\n * Deletes a user based on the provided ID.\n */\nexport const deleteUser = async (\n  req: Request<any, any, DeleteUserParams>,\n  res: Response<DeleteUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n  const { roles } = res.locals;\n\n  if (!hasPermission(roles, 'user:admin')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const user = await userService.deleteUser(userId);\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User deleted',\n        fr: 'Utilisateur supprimé',\n        es: 'Usuario eliminado',\n      }),\n      description: t({\n        en: 'User deleted successfully',\n        fr: 'Utilisateur supprimé avec succès',\n        es: 'Usuario eliminado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nlet clients: Array<{ id: number; userId: string; res: Response }> = [];\n\nexport const sendVerificationUpdate = (user: User) => {\n  const filteredClients = clients.filter(\n    (client) => String(client.userId) === String(user.id)\n  );\n\n  for (const client of filteredClients) {\n    if (user.emailVerified) {\n      client.res.write(\n        `data: ${JSON.stringify({ userId: user.id, status: 'verified' })}\\n\\n`\n      );\n    }\n  }\n};\n\nexport type VerifyEmailStatusSSEParams = { userId: string };\n\n/**\n * SSE to check the email verification status\n */\nexport const verifyEmailStatusSSE = async (\n  req: Request<VerifyEmailStatusSSEParams, any, any>,\n  res: Response\n) => {\n  // Set headers for SSE\n  res.setHeader('Content-Type', 'text/event-stream;charset=utf-8');\n  res.setHeader('Cache-Control', 'no-cache, no-transform');\n  res.setHeader('Connection', 'keep-alive');\n  res.setHeader('X-Accel-Buffering', 'no'); // For Nginx buffering\n\n  // Send initial data to ensure the connection is open\n  res.write(':\\n\\n'); // Comment to keep connection alive\n  res.flushHeaders();\n\n  const { userId } = req.params; // Get user ID from query parameters\n  const clientId = Date.now();\n\n  const user = await userService.getUserById(userId);\n\n  if (!user) {\n    logger.error(`User not found - User ID: ${userId}`);\n    res.write(`data: ${JSON.stringify({ userId, status: 'error' })}\\n\\n`);\n    res.end();\n    return;\n  }\n\n  // Add client to the list\n  const newClient = { id: clientId, userId, res };\n  clients.push(newClient);\n\n  sendVerificationUpdate(user);\n\n  // Remove client on connection close\n  req.on('close', () => {\n    clients = clients.filter((client) => client.id !== clientId);\n  });\n};\n"],"mappings":"AACA,SAAS,cAAc;AACvB,SAAS,iBAAiB;AAC1B,YAAY,iBAAiB;AAC7B,SAAwB,oBAAoB;AAE5C,SAAS,2CAA2C;AAEpD,SAAS,eAAe,oBAAoB;AAC5C,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAQX,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,OAAyB,IAAI;AAEnC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,YAAY,WAAW,IAAI;AAEjD,UAAM,UAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,WAAW,GAAG,QAAQ,IAAI,UAAU;AAAA,IACtC,CAAC;AAED,UAAM,gBAAgB,aAAa,OAAO;AAE1C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,WAAW,OACtB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAE5B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,oCAAoC,GAAG;AAEzC,MAAI;AACF,UAAM,QAAQ,MAAM,YAAY,UAAU,SAAS,MAAM,QAAQ;AAEjE,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,eAAe,MAAM,IAAI,CAACA,UAASA,MAAK,EAAE;AAAA,IAC5C,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,YAAY,WAAW,OAAO;AAEvD,UAAM,iBAAiB,cAAc,KAAK;AAE1C,UAAM,eAAe,wBAAiC;AAAA,MACpD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,eAAe,KAAK;AAEnD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,eAAe,CAAC,KAAK,EAAE;AAAA,IACzB,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,WAAW,IAAI;AACrB,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAE5B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,OAAO,aAAa,UAAU;AAChC,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,eAAe,CAAC,KAAK,EAAE;AAAA,EACzB,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,YAAY,eAAe,KAAK,IAAI,QAAQ;AAEtE,WAAO;AAAA,MACL,uBAAuB,YAAY,IAAI,SAAS,OAAO,YAAY,EAAE,CAAC;AAAA,IACxE;AAEA,UAAM,gBAAgB,aAAa,WAAW;AAC9C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,cAAc,OAAO,YAAY,EAAE,GAAG;AACzC,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,WAAW,MAAM;AAEhD,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAEA,IAAI,UAAgE,CAAC;AAE9D,MAAM,yBAAyB,CAAC,SAAe;AACpD,QAAM,kBAAkB,QAAQ;AAAA,IAC9B,CAAC,WAAW,OAAO,OAAO,MAAM,MAAM,OAAO,KAAK,EAAE;AAAA,EACtD;AAEA,aAAW,UAAU,iBAAiB;AACpC,QAAI,KAAK,eAAe;AACtB,aAAO,IAAI;AAAA,QACT,SAAS,KAAK,UAAU,EAAE,QAAQ,KAAK,IAAI,QAAQ,WAAW,CAAC,CAAC;AAAA;AAAA;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;AAOO,MAAM,uBAAuB,OAClC,KACA,QACG;AAEH,MAAI,UAAU,gBAAgB,iCAAiC;AAC/D,MAAI,UAAU,iBAAiB,wBAAwB;AACvD,MAAI,UAAU,cAAc,YAAY;AACxC,MAAI,UAAU,qBAAqB,IAAI;AAGvC,MAAI,MAAM,OAAO;AACjB,MAAI,aAAa;AAEjB,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,WAAW,KAAK,IAAI;AAE1B,QAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,MAAI,CAAC,MAAM;AACT,WAAO,MAAM,6BAA6B,MAAM,EAAE;AAClD,QAAI,MAAM,SAAS,KAAK,UAAU,EAAE,QAAQ,QAAQ,QAAQ,CAAC,CAAC;AAAA;AAAA,CAAM;AACpE,QAAI,IAAI;AACR;AAAA,EACF;AAGA,QAAM,YAAY,EAAE,IAAI,UAAU,QAAQ,IAAI;AAC9C,UAAQ,KAAK,SAAS;AAEtB,yBAAuB,IAAI;AAG3B,MAAI,GAAG,SAAS,MAAM;AACpB,cAAU,QAAQ,OAAO,CAAC,WAAW,OAAO,OAAO,QAAQ;AAAA,EAC7D,CAAC;AACH;","names":["user"]}
+{"version":3,"sources":["../../../src/controllers/user.controller.ts"],"sourcesContent":["import type { User, UserAPI } from '@/types/user.types';\nimport { logger } from '@logger';\nimport type { ResponseWithSession } from '@middlewares/sessionAuth.middleware';\nimport { sendEmail } from '@services/email.service';\nimport * as userService from '@services/user.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport { getOrganizationFiltersAndPagination } from '@utils/filtersAndPagination/getOrganizationFiltersAndPagination';\nimport type { UserFiltersParam } from '@utils/filtersAndPagination/getUserFiltersAndPagination';\nimport { mapUsersToAPI, mapUserToAPI } from '@utils/mapper/user';\nimport { hasPermission } from '@utils/permissions';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type CreateUserBody = { email: string; password?: string };\nexport type CreateUserResult = ResponseData<UserAPI>;\n\n/**\n * Creates a new user.\n */\nexport const createUser = async (\n  req: Request<any, any, User>,\n  res: ResponseWithSession<CreateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const user: User | undefined = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const newUser = await userService.createUser(user);\n\n    await sendEmail({\n      type: 'welcome',\n      to: newUser.email,\n      username: newUser.name,\n      loginLink: `${process.env.CLIENT_URL}/auth/login`,\n    });\n\n    const formattedUser = mapUserToAPI(newUser);\n\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User created',\n        fr: 'Utilisateur créé',\n        es: 'Usuario creado',\n      }),\n      description: t({\n        en: 'User created successfully',\n        fr: 'Utilisateur créé avec succès',\n        es: 'Usuario creado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUsersParams = FiltersAndPagination<UserFiltersParam>;\nexport type GetUsersResult = PaginatedResponse<UserAPI>;\n\n/**\n * Retrieves a list of users based on filters and pagination.\n */\nexport const getUsers = async (\n  req: Request<GetUsersParams>,\n  res: ResponseWithSession<GetUsersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getOrganizationFiltersAndPagination(req);\n\n  try {\n    const users = await userService.findUsers(filters, skip, pageSize);\n\n    if (\n      !hasPermission(\n        roles,\n        'user:read'\n      )({\n        ...res.locals,\n        targetUsers: users,\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const totalItems = await userService.countUsers(filters);\n\n    const formattedUsers = mapUsersToAPI(users);\n\n    const responseData = formatPaginatedResponse<UserAPI>({\n      data: formattedUsers,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByIdParams = { userId: string };\nexport type GetUserByIdResult = ResponseData<UserAPI>;\n\nexport const getUserById = async (\n  req: Request<GetUserByIdParams>,\n  res: ResponseWithSession<GetUserByIdResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.getUserById(userId);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByEmailParams = { email: string };\nexport type GetUserByEmailResult = ResponseData<UserAPI>;\n\nexport const getUserByEmail = async (\n  req: Request<GetUserByEmailParams>,\n  res: ResponseWithSession<GetUserByEmailResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { email } = req.params;\n  const { roles } = res.locals;\n\n  try {\n    const user = await userService.getUserByEmail(email);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    if (\n      !hasPermission(\n        roles,\n        'user:read'\n      )({\n        ...res.locals,\n        targetUsers: [user],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateUserBody = Partial<User>;\nexport type UpdateUserResult = ResponseData<UserAPI>;\n\n/**\n * Updates user information (phone number, date of birth).\n */\nexport const updateUser = async (\n  req: Request<any, any, UpdateUserBody | undefined>,\n  res: ResponseWithSession<UpdateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const userData = req.body;\n  const { user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (typeof userData !== 'object') {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_DATA_NOT_FOUND');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'user:write'\n    )({\n      ...res.locals,\n      targetUsers: [userData as User],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const updatedUser = await userService.updateUserById(user.id, userData);\n\n    logger.info(\n      `User updated: Name: ${updatedUser.name}, id: ${String(updatedUser.id)}`\n    );\n\n    const formattedUser = mapUserToAPI(updatedUser);\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User updated',\n        fr: 'Utilisateur mis à jour',\n        es: 'Usuario actualizado',\n      }),\n      description: t({\n        en: 'User updated successfully',\n        fr: 'Utilisateur mis à jour avec succès',\n        es: 'Usuario actualizado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteUserParams = { userId: string };\nexport type DeleteUserResult = ResponseData<UserAPI>;\n\n/**\n * Deletes a user based on the provided ID.\n */\nexport const deleteUser = async (\n  req: Request<DeleteUserParams>,\n  res: ResponseWithSession<DeleteUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n  const { roles } = res.locals;\n\n  try {\n    const user = await userService.getUserById(userId);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    if (\n      !hasPermission(\n        roles,\n        'user:admin'\n      )({\n        ...res.locals,\n        targetUsers: [user],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    await userService.deleteUser(userId);\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User deleted',\n        fr: 'Utilisateur supprimé',\n        es: 'Usuario eliminado',\n      }),\n      description: t({\n        en: 'User deleted successfully',\n        fr: 'Utilisateur supprimé avec succès',\n        es: 'Usuario eliminado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nlet clients: Array<{ id: number; userId: string; res: ResponseWithSession }> =\n  [];\n\nexport const sendVerificationUpdate = (user: User) => {\n  const filteredClients = clients.filter(\n    (client) => String(client.userId) === String(user.id)\n  );\n\n  for (const client of filteredClients) {\n    if (user.emailVerified) {\n      client.res.write(\n        `data: ${JSON.stringify({ userId: user.id, status: 'verified' })}\\n\\n`\n      );\n    }\n  }\n};\n\nexport type VerifyEmailStatusSSEParams = { userId: string };\n\n/**\n * SSE to check the email verification status\n */\nexport const verifyEmailStatusSSE = async (\n  req: Request<VerifyEmailStatusSSEParams, any, any>,\n  res: ResponseWithSession\n) => {\n  // Set headers for SSE\n  res.setHeader('Content-Type', 'text/event-stream;charset=utf-8');\n  res.setHeader('Cache-Control', 'no-cache, no-transform');\n  res.setHeader('Connection', 'keep-alive');\n  res.setHeader('X-Accel-Buffering', 'no'); // For Nginx buffering\n\n  // Send initial data to ensure the connection is open\n  res.write(':\\n\\n'); // Comment to keep connection alive\n  res.flushHeaders();\n\n  const { userId } = req.params; // Get user ID from query parameters\n  const clientId = Date.now();\n\n  const user = await userService.getUserById(userId);\n\n  if (!user) {\n    logger.error(`User not found - User ID: ${userId}`);\n    res.write(`data: ${JSON.stringify({ userId, status: 'error' })}\\n\\n`);\n    res.end();\n    return;\n  }\n\n  // Add client to the list\n  const newClient = { id: clientId, userId, res };\n  clients.push(newClient);\n\n  sendVerificationUpdate(user);\n\n  // Remove client on connection close\n  req.on('close', () => {\n    clients = clients.filter((client) => client.id !== clientId);\n  });\n};\n"],"mappings":"AACA,SAAS,cAAc;AAEvB,SAAS,iBAAiB;AAC1B,YAAY,iBAAiB;AAC7B,SAAwB,oBAAoB;AAE5C,SAAS,2CAA2C;AAEpD,SAAS,eAAe,oBAAoB;AAC5C,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAQX,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,OAAyB,IAAI;AAEnC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,YAAY,WAAW,IAAI;AAEjD,UAAM,UAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,WAAW,GAAG,QAAQ,IAAI,UAAU;AAAA,IACtC,CAAC;AAED,UAAM,gBAAgB,aAAa,OAAO;AAE1C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,WAAW,OACtB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAE5B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,oCAAoC,GAAG;AAEzC,MAAI;AACF,UAAM,QAAQ,MAAM,YAAY,UAAU,SAAS,MAAM,QAAQ;AAEjE,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,aAAa;AAAA,IACf,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,YAAY,WAAW,OAAO;AAEvD,UAAM,iBAAiB,cAAc,KAAK;AAE1C,UAAM,eAAe,wBAAiC;AAAA,MACpD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,eAAe,KAAK;AAEnD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,aAAa,CAAC,IAAI;AAAA,IACpB,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,WAAW,IAAI;AACrB,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAE5B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,OAAO,aAAa,UAAU;AAChC,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,aAAa,CAAC,QAAgB;AAAA,EAChC,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,YAAY,eAAe,KAAK,IAAI,QAAQ;AAEtE,WAAO;AAAA,MACL,uBAAuB,YAAY,IAAI,SAAS,OAAO,YAAY,EAAE,CAAC;AAAA,IACxE;AAEA,UAAM,gBAAgB,aAAa,WAAW;AAC9C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,aAAa,CAAC,IAAI;AAAA,IACpB,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,YAAY,WAAW,MAAM;AAEnC,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAEA,IAAI,UACF,CAAC;AAEI,MAAM,yBAAyB,CAAC,SAAe;AACpD,QAAM,kBAAkB,QAAQ;AAAA,IAC9B,CAAC,WAAW,OAAO,OAAO,MAAM,MAAM,OAAO,KAAK,EAAE;AAAA,EACtD;AAEA,aAAW,UAAU,iBAAiB;AACpC,QAAI,KAAK,eAAe;AACtB,aAAO,IAAI;AAAA,QACT,SAAS,KAAK,UAAU,EAAE,QAAQ,KAAK,IAAI,QAAQ,WAAW,CAAC,CAAC;AAAA;AAAA;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;AAOO,MAAM,uBAAuB,OAClC,KACA,QACG;AAEH,MAAI,UAAU,gBAAgB,iCAAiC;AAC/D,MAAI,UAAU,iBAAiB,wBAAwB;AACvD,MAAI,UAAU,cAAc,YAAY;AACxC,MAAI,UAAU,qBAAqB,IAAI;AAGvC,MAAI,MAAM,OAAO;AACjB,MAAI,aAAa;AAEjB,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,WAAW,KAAK,IAAI;AAE1B,QAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,MAAI,CAAC,MAAM;AACT,WAAO,MAAM,6BAA6B,MAAM,EAAE;AAClD,QAAI,MAAM,SAAS,KAAK,UAAU,EAAE,QAAQ,QAAQ,QAAQ,CAAC,CAAC;AAAA;AAAA,CAAM;AACpE,QAAI,IAAI;AACR;AAAA,EACF;AAGA,QAAM,YAAY,EAAE,IAAI,UAAU,QAAQ,IAAI;AAC9C,UAAQ,KAAK,SAAS;AAEtB,yBAAuB,IAAI;AAG3B,MAAI,GAAG,SAAS,MAAM;AACpB,cAAU,QAAQ,OAAO,CAAC,WAAW,OAAO,OAAO,QAAQ;AAAA,EAC7D,CAAC;AACH;","names":[]}

package/dist/esm/emails/OAuthTokenCreatedEmail.mjs

@@ -22,7 +22,7 @@ const OAuthTokenCreatedEmailEN = ({
   securityLogUrl,
   supportUrl
 }) => {
-  const previewText = `A third-party OAuth application has been added to your Intlayer account`;
+  const previewText = `A third-party OAuth access key has been added to your Intlayer account`;
   return /* @__PURE__ */ jsxs(Html, { children: [
     /* @__PURE__ */ jsx(Head, {}),
     /* @__PURE__ */ jsx(Preview, { children: previewText }),
@@ -37,19 +37,17 @@ const OAuthTokenCreatedEmailEN = ({
           className: "mx-auto my-0"
         }
       ) }),
-      /* @__PURE__ */ jsx(Heading, { className: "mx-0 my-[30px] p-0 text-center text-[24px] font-normal text-black", children: "A third-party OAuth application has been added to your account" }),
+      /* @__PURE__ */ jsx(Heading, { className: "mx-0 my-[30px] p-0 text-center text-[24px] font-normal text-black", children: "A third-party OAuth access key has been added to your account" }),
       /* @__PURE__ */ jsxs(Text, { className: "text-[14px] leading-[24px] text-black", children: [
         "Hey ",
         username,
         "!"
       ] }),
       /* @__PURE__ */ jsxs(Text, { className: "text-[14px] leading-[24px] text-black", children: [
-        "A third-party OAuth application (",
+        "A third-party OAuth access key (",
         /* @__PURE__ */ jsx("strong", { children: applicationName }),
-        ") with ",
-        scopes.join(", "),
-        " ",
-        "scopes was recently authorized to access your account."
+        ") with the following permissions was recently authorized to access your account:",
+        /* @__PURE__ */ jsx("ul", { children: scopes.map((scope) => /* @__PURE__ */ jsx("li", { children: scope }, scope)) })
       ] }),
       /* @__PURE__ */ jsx(Section, { className: "my-[32px] text-center", children: /* @__PURE__ */ jsx(
         Button,