@lenne.tech/nest-server 8.6.10 → 8.6.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nest-server",
-  "version": "8.6.10",
+  "version": "8.6.13",
   "description": "Modern, fast, powerful Node.js web framework in TypeScript based on Nest with a GraphQL API and a connection to MongoDB (or other databases).",
   "keywords": [
     "node",

package/src/core/common/helpers/db.helper.ts

@@ -543,7 +543,7 @@ export function removeIds(source: any[], ids: StringOrObjectId | StringOrObjectI
  */
 export async function setPopulates<T = Query<any, any> | Document>(
   queryOrDocument: T,
-  populateOptions: PopulateOptions[],
+  populateOptions: string[] | PopulateOptions[] | (string | PopulateOptions)[],
   modelSchemaPaths?: { [key: string]: SchemaType }
 ): Promise<T> {
   // Check parameters
@@ -553,8 +553,12 @@ export async function setPopulates<T = Query<any, any> | Document>(
 
   // Filter populate options via model schema paths
   if (modelSchemaPaths) {
-    populateOptions = populateOptions.filter((options) => {
-      return Object.keys(modelSchemaPaths).includes(options.path);
+    populateOptions = populateOptions.filter((option: string | PopulateOptions) => {
+      let key: string = option as string;
+      if ((option as PopulateOptions)?.path) {
+        key = (option as PopulateOptions)?.path;
+      }
+      return Object.keys(modelSchemaPaths).includes(key);
     });
   }
 

package/src/core/common/interfaces/service-options.interface.ts

@@ -35,7 +35,7 @@ export interface ServiceOptions {
   outputType?: new (...params: any[]) => any;
 
   // Alias for fieldSelection (if both are set fieldSelection is overwritten by populate)
-  populate?: PopulateOptions | (PopulateOptions | string)[];
+  populate?: string | PopulateOptions | (PopulateOptions | string)[];
 
   // Process field selection
   // If {} or not set, then the field selection runs with defaults

package/src/core/common/types/field-selection.type.ts

@@ -5,4 +5,9 @@ import { ResolveSelector } from '../interfaces/resolve-selector.interface';
 /**
  * Field selection to set fields of (populated) result
  */
-export type FieldSelection = PopulateOptions | (PopulateOptions | string)[] | SelectionNode[] | ResolveSelector;
+export type FieldSelection =
+  | string
+  | PopulateOptions
+  | (PopulateOptions | string)[]
+  | SelectionNode[]
+  | ResolveSelector;

package/src/core/common/types/maybe-promise.type.ts

@@ -0,0 +1,4 @@
+/**
+ * Promise or direct value
+ */
+export type MaybePromise<T = any> = T | Promise<T>;

package/src/core/modules/auth/core-auth.model.ts

@@ -17,7 +17,7 @@ export class CoreAuthModel extends CoreModel {
   token: string = undefined;
 
   // ===================================================================================================================
-  // Properties
+  // Methods
   // ===================================================================================================================
 
   /**
@@ -28,4 +28,14 @@ export class CoreAuthModel extends CoreModel {
     // Nothing more to initialize yet
     return this;
   }
+
+  /**
+   * Map input
+   */
+  map(input) {
+    super.map(input);
+    // There is nothing to map yet. Non-primitive variables should always be mapped.
+    // If something comes up, you can use `mapClasses` / `mapClassesAsync` from ModelHelper.
+    return this;
+  }
 }

package/src/core/modules/file/core-file-info.model.ts

@@ -0,0 +1,40 @@
+import { Field, ObjectType } from '@nestjs/graphql';
+import { Prop } from '@nestjs/mongoose';
+import { Types } from 'mongoose';
+import { CoreModel } from '../../common/models/core-model.model';
+
+/**
+ * File info
+ */
+@ObjectType({ description: 'Information about file' })
+export class CoreFileInfo extends CoreModel {
+  _id: Types.ObjectId;
+
+  @Field(() => String, { description: 'ID of the file' })
+  id: string = undefined;
+
+  @Field(() => Number, {
+    description:
+      'The size of each chunk in bytes. GridFS divides the document into chunks of size chunkSize, ' +
+      'except for the last, which is only as large as needed. The default size is 255 kilobytes (kB)',
+    nullable: true,
+  })
+  @Prop({ type: Number, required: false })
+  chunkSize: number = undefined;
+
+  @Field(() => String, { description: 'Content type', nullable: true })
+  @Prop({ type: String, required: false })
+  contentType?: string = undefined;
+
+  @Field(() => String, { description: 'Name of the file', nullable: true })
+  @Prop({ type: String, required: false })
+  filename?: string = undefined;
+
+  @Field(() => Number, { description: 'The size of the document in bytes', nullable: true })
+  @Prop({ type: Number, required: false })
+  length: number = undefined;
+
+  @Field(() => Date, { description: 'The date the file was first stored', nullable: true })
+  @Prop({ type: Date, required: false })
+  uploadDate: Date = undefined;
+}

package/src/core/modules/file/core-file.controller.ts

@@ -0,0 +1,34 @@
+import { BadRequestException, Controller, Get, NotFoundException, Param, Res } from '@nestjs/common';
+import { User } from '../../../server/modules/user/user.model';
+import { RESTUser } from '../../common/decorators/rest-user.decorator';
+import { CoreFileService } from './core-file.service';
+
+/**
+ * File controller
+ */
+@Controller('files')
+export abstract class CoreFileController {
+  /**
+   * Include services
+   */
+  protected constructor(protected fileService: CoreFileService) {}
+
+  /**
+   * Download file
+   */
+  @Get(':filename')
+  async getFile(@Param('filename') filename: string, @Res() res, @RESTUser() user: User) {
+    if (!filename) {
+      throw new BadRequestException('Missing filename for download');
+    }
+
+    const file = await this.fileService.getFileInfoByName(filename);
+    if (!file) {
+      throw new NotFoundException('File not found');
+    }
+    const filestream = await this.fileService.getFileStream(file.id);
+    res.header('Content-Type', file.contentType);
+    res.header('Content-Disposition', 'attachment; filename=' + file.filename);
+    return filestream.pipe(res);
+  }
+}

package/src/core/modules/file/core-file.resolver.ts

@@ -0,0 +1,56 @@
+import { Args, Mutation, Query, Resolver } from '@nestjs/graphql';
+import * as GraphQLUpload from 'graphql-upload/GraphQLUpload.js';
+import { CoreFileInfo } from './core-file-info.model';
+import { CoreFileService } from './core-file.service';
+import { FileUpload } from './interfaces/file-upload.interface';
+
+/**
+ * File resolver
+ */
+@Resolver()
+export class CoreFileResolver {
+  /**
+   * Integrate services
+   */
+  constructor(protected readonly fileService: CoreFileService) {}
+
+  // ===========================================================================
+  // Queries
+  // ===========================================================================
+
+  /**
+   * Get file info
+   */
+  @Query(() => CoreFileInfo, { nullable: true })
+  async getFileInfo(@Args({ name: 'filename', type: () => String }) filename: string): Promise<any> {
+    return await this.fileService.getFileInfoByName(filename);
+  }
+
+  // ===========================================================================
+  // Mutations
+  // ===========================================================================
+
+  /**
+   * Delete file
+   */
+  @Mutation(() => CoreFileInfo)
+  async deleteFile(@Args({ name: 'filename', type: () => String }) filename: string): Promise<any> {
+    return await this.fileService.deleteFileByName(filename);
+  }
+
+  /**
+   * Upload file
+   */
+  @Mutation(() => CoreFileInfo)
+  async uploadFile(@Args({ name: 'file', type: () => GraphQLUpload }) file: FileUpload): Promise<any> {
+    return await this.fileService.createFile(file);
+  }
+
+  /**
+   * Upload files
+   */
+  @Mutation(() => [CoreFileInfo])
+  async uploadFiles(@Args({ name: 'files', type: () => [GraphQLUpload] }) files: FileUpload[]): Promise<any> {
+    return await this.fileService.createFiles(files);
+  }
+}

package/src/core/modules/file/core-file.service.ts

@@ -7,10 +7,16 @@ import { getObjectIds, getStringIds } from '../../common/helpers/db.helper';
 import { convertFilterArgsToQuery } from '../../common/helpers/filter.helper';
 import { check } from '../../common/helpers/input.helper';
 import { prepareOutput } from '../../common/helpers/service.helper';
-import { FileInfo } from './file-info.output';
+import { MaybePromise } from '../../common/types/maybe-promise.type';
+import { CoreFileInfo } from './core-file-info.model';
 import { FileServiceOptions } from './interfaces/file-service-options.interface';
 import { FileUpload } from './interfaces/file-upload.interface';
 
+/**
+ * Type for checking input
+ */
+export type FileInputCheckType = 'file' | 'files' | 'filterArgs' | 'id' | 'filename';
+
 /**
  * Abstract core file service
  */
@@ -20,16 +26,19 @@ export abstract class CoreFileService {
   /**
    * Include MongoDB connection and create File bucket
    */
-  protected constructor(protected readonly connection: Connection, modelName = 'File') {
-    this.files = createBucket({ modelName, connection });
+  protected constructor(protected readonly connection: Connection, bucketName = 'fs') {
+    this.files = createBucket({ bucketName, connection });
   }
 
   /**
    * Save file in DB
    */
-  createFile(file: FileUpload, serviceOptions?: FileServiceOptions): Promise<FileInfo> {
-    return new Promise(async (resolve, reject) => {
-      const { filename, mimetype, encoding, createReadStream } = file;
+  async createFile(file: MaybePromise<FileUpload>, serviceOptions?: FileServiceOptions): Promise<CoreFileInfo> {
+    if (!(await this.checkRights(file, { ...serviceOptions, checkInputType: 'file' }))) {
+      return null;
+    }
+    return await new Promise(async (resolve, reject) => {
+      const { filename, mimetype, encoding, createReadStream } = await file;
       const readStream = createReadStream();
       const options: MongoGridFSOptions = { filename, contentType: mimetype };
       this.files.writeFile(options, readStream, (error, fileInfo) => {
@@ -41,8 +50,12 @@ export abstract class CoreFileService {
   /**
    * Save files in DB
    */
-  async createFiles(files: FileUpload[], serviceOptions?: FileServiceOptions): Promise<FileInfo[]> {
-    const promises: Promise<FileInfo>[] = [];
+  async createFiles(files: MaybePromise<FileUpload>[], serviceOptions?: FileServiceOptions): Promise<CoreFileInfo[]> {
+    if (!(await this.checkRights(files, { ...serviceOptions, checkInputType: 'files' }))) {
+      return null;
+    }
+    console.log(files);
+    const promises: Promise<CoreFileInfo>[] = [];
     for (const file of files) {
       promises.push(this.createFile(file, serviceOptions));
     }
@@ -52,8 +65,11 @@ export abstract class CoreFileService {
   /**
    * Get file infos via filter
    */
-  findFileInfo(filterArgs?: FilterArgs, serviceOptions?: FileServiceOptions): Promise<FileInfo[]> {
-    return new Promise((resolve, reject) => {
+  async findFileInfo(filterArgs?: FilterArgs, serviceOptions?: FileServiceOptions): Promise<CoreFileInfo[]> {
+    if (!(await this.checkRights(filterArgs, { ...serviceOptions, checkInputType: 'filterArgs' }))) {
+      return null;
+    }
+    return await new Promise((resolve, reject) => {
       const filterQuery = convertFilterArgsToQuery(filterArgs);
       const cursor = this.files.find(filterQuery[0], filterQuery[1]);
       if (!cursor) {
@@ -68,8 +84,11 @@ export abstract class CoreFileService {
   /**
    * Get info about file via file ID
    */
-  getFileInfo(id: string | Types.ObjectId, serviceOptions?: FileServiceOptions): Promise<FileInfo> {
-    return new Promise((resolve, reject) => {
+  async getFileInfo(id: string | Types.ObjectId, serviceOptions?: FileServiceOptions): Promise<CoreFileInfo> {
+    if (!(await this.checkRights(id, { ...serviceOptions, checkInputType: 'id' }))) {
+      return null;
+    }
+    return await new Promise((resolve, reject) => {
       this.files.findById(getObjectIds(id), (error, fileInfo) => {
         error ? reject(error) : resolve(this.prepareOutput(fileInfo, serviceOptions));
       });
@@ -79,8 +98,11 @@ export abstract class CoreFileService {
   /**
    * Get info about file via filename
    */
-  getFileInfoByName(filename: string, serviceOptions?: FileServiceOptions): Promise<FileInfo> {
-    return new Promise((resolve, reject) => {
+  async getFileInfoByName(filename: string, serviceOptions?: FileServiceOptions): Promise<CoreFileInfo> {
+    if (!(await this.checkRights(filename, { ...serviceOptions, checkInputType: 'filename' }))) {
+      return null;
+    }
+    return await new Promise((resolve, reject) => {
       this.files.findOne({ filename }, (error, fileInfo) => {
         error ? reject(error) : resolve(this.prepareOutput(fileInfo, serviceOptions));
       });
@@ -90,22 +112,34 @@ export abstract class CoreFileService {
   /**
    * Get file stream (for big files) via file ID
    */
-  getFileStream(id: string | Types.ObjectId, options?: GridFSBucketReadStreamOptions) {
-    return this.files.openDownloadStream(getObjectIds(id), options);
+  async getFileStream(id: string | Types.ObjectId, serviceOptions?: FileServiceOptions) {
+    if (!(await this.checkRights(id, { ...serviceOptions, checkInputType: 'id' }))) {
+      return null;
+    }
+    return this.files.openDownloadStream(getObjectIds(id));
   }
 
   /**
    * Get file stream (for big files) via filename
    */
-  getFileStreamByName(filename: string): GridFSBucketReadStreamOptions {
+  async getFileStreamByName(
+    filename: string,
+    serviceOptions?: FileServiceOptions
+  ): Promise<GridFSBucketReadStreamOptions> {
+    if (!(await this.checkRights(filename, { ...serviceOptions, checkInputType: 'filename' }))) {
+      return null;
+    }
     return this.files.readFile({ filename });
   }
 
   /**
    * Get file buffer (for small files) via file ID
    */
-  getBuffer(id: string | Types.ObjectId): Promise<Buffer> {
-    return new Promise((resolve, reject) => {
+  async getBuffer(id: string | Types.ObjectId, serviceOptions?: FileServiceOptions): Promise<Buffer> {
+    if (!(await this.checkRights(id, { ...serviceOptions, checkInputType: 'id' }))) {
+      return null;
+    }
+    return await new Promise((resolve, reject) => {
       this.files.readFile({ _id: getObjectIds(id) }, (error, buffer) => {
         error ? reject(error) : resolve(buffer);
       });
@@ -115,8 +149,11 @@ export abstract class CoreFileService {
   /**
    * Get file buffer (for small files) via file ID
    */
-  getBufferByName(filename: string): Promise<Buffer> {
-    return new Promise((resolve, reject) => {
+  async getBufferByName(filename: string, serviceOptions?: FileServiceOptions): Promise<Buffer> {
+    if (!(await this.checkRights(filename, { ...serviceOptions, checkInputType: 'filename' }))) {
+      return null;
+    }
+    return await new Promise((resolve, reject) => {
       this.files.readFile({ filename }, (error, buffer) => {
         error ? reject(error) : resolve(buffer);
       });
@@ -126,8 +163,11 @@ export abstract class CoreFileService {
   /**
    * Delete file reference of avatar
    */
-  deleteFile(id: string | Types.ObjectId, serviceOptions?: FileServiceOptions): Promise<FileInfo> {
-    return new Promise((resolve, reject) => {
+  async deleteFile(id: string | Types.ObjectId, serviceOptions?: FileServiceOptions): Promise<CoreFileInfo> {
+    if (!(await this.checkRights(id, { ...serviceOptions, checkInputType: 'id' }))) {
+      return null;
+    }
+    return await new Promise((resolve, reject) => {
       return this.files.unlink(getObjectIds(id), (error, fileInfo) => {
         error ? reject(error) : resolve(this.prepareOutput(fileInfo, serviceOptions));
       });
@@ -137,7 +177,10 @@ export abstract class CoreFileService {
   /**
    * Delete file reference of avatar
    */
-  async deleteFileByName(filename: string, serviceOptions?: FileServiceOptions): Promise<FileInfo> {
+  async deleteFileByName(filename: string, serviceOptions?: FileServiceOptions): Promise<CoreFileInfo> {
+    if (!(await this.checkRights(filename, { ...serviceOptions, checkInputType: 'filename' }))) {
+      return null;
+    }
     const fileInfo = await this.getFileInfoByName(filename);
     if (!fileInfo) {
       throw new NotFoundException('File not found with filename ' + filename);
@@ -149,22 +192,33 @@ export abstract class CoreFileService {
   //  Helper methods
   // ===================================================================================================================
 
+  /**
+   * Check rights before processing file handling
+   * Can throw an exception if the rights do not fit
+   */
+  protected checkRights(
+    input: any,
+    options?: FileServiceOptions & { checkInputType: FileInputCheckType }
+  ): MaybePromise<boolean> {
+    return true;
+  }
+
   /**
    * Prepare output before return
    */
-  protected async prepareOutput(fileInfo: FileInfo | FileInfo[], options?: FileServiceOptions) {
+  protected async prepareOutput(fileInfo: CoreFileInfo | CoreFileInfo[], options?: FileServiceOptions) {
     if (!fileInfo) {
       return fileInfo;
     }
     this.setId(fileInfo);
-    fileInfo = await prepareOutput(fileInfo, { targetModel: FileInfo });
+    fileInfo = await prepareOutput(fileInfo, { targetModel: CoreFileInfo });
     return check(fileInfo, options?.currentUser, { roles: options?.roles });
   }
 
   /**
    * Set file info ID via _id
    */
-  protected setId(fileInfo: FileInfo | FileInfo[]) {
+  protected setId(fileInfo: CoreFileInfo | CoreFileInfo[]) {
     if (Array.isArray(fileInfo)) {
       fileInfo.forEach((item) => {
         if (typeof item === 'object') {

package/src/core/modules/user/core-user.model.ts

@@ -122,4 +122,14 @@ export abstract class CoreUserModel extends CorePersistenceModel {
     this.roles = this.roles === undefined ? [] : this.roles;
     return this;
   }
+
+  /**
+   * Map input
+   */
+  map(input) {
+    super.map(input);
+    // There is nothing to map yet. Non-primitive variables should always be mapped.
+    // If something comes up, you can use `mapClasses` / `mapClassesAsync` from ModelHelper.
+    return this;
+  }
 }

package/src/core.module.ts

@@ -79,8 +79,7 @@ export class CoreModule implements NestModule {
                         const { connectionParams, extra } = context;
                         if (config.graphQl.enableSubscriptionAuth) {
                           // get authToken from authorization header
-                          const authToken: string =
-                            'Authorization' in connectionParams && connectionParams?.Authorization?.split(' ')[1];
+                          const authToken: string = connectionParams?.Authorization?.split(' ')[1];
                           if (authToken) {
                             // verify authToken/getJwtPayLoad
                             const payload = authService.decodeJwt(authToken);

package/src/index.ts

@@ -56,6 +56,7 @@ export * from './core/common/services/template.service';
 export * from './core/common/types/core-model-constructor.type';
 export * from './core/common/types/field-selection.type';
 export * from './core/common/types/ids.type';
+export * from './core/common/types/maybe-promise.type';
 export * from './core/common/types/plain-input.type';
 export * from './core/common/types/require-only-one.type';
 export * from './core/common/types/required-at-least-one.type';
@@ -84,8 +85,10 @@ export * from './core/modules/auth/jwt.strategy';
 
 export * from './core/modules/file/interfaces/file-service-options.interface';
 export * from './core/modules/file/interfaces/file-upload.interface';
+export * from './core/modules/file/core-file.controller';
+export * from './core/modules/file/core-file.resolver';
 export * from './core/modules/file/core-file.service';
-export * from './core/modules/file/file-info.output';
+export * from './core/modules/file/core-file-info.model';
 
 // =====================================================================================================================
 // Core - Modules - User

package/src/server/common/models/persistence.model.ts

@@ -15,33 +15,37 @@ import { User } from '../../modules/user/user.model';
   isAbstract: true,
 })
 export abstract class PersistenceModel extends CorePersistenceModel {
+  // ===================================================================================================================
+  // Properties
+  // ===================================================================================================================
+
   /**
-   * User who created the object
+   * ID of the user who created the object
    *
    * Not set when created by system
    */
-  @Field((type) => User, {
-    description: 'User who created the object',
+  @Field(() => User, {
+    description: 'ID of the user who created the object',
     nullable: true,
   })
   @Prop({ type: mongoose.Schema.Types.ObjectId, ref: 'User' })
-  createdBy?: Types.ObjectId | User = undefined;
+  createdBy?: Types.ObjectId | string = undefined;
 
   /**
-   * User who last updated the object
+   * ID of the user who updated the object
    *
    * Not set when updated by system
    */
-  @Field((type) => User, {
-    description: 'User who last updated the object',
+  @Field(() => User, {
+    description: 'ID of the user who updated the object',
     nullable: true,
   })
   @Prop({ type: mongoose.Schema.Types.ObjectId, ref: 'User' })
-  updatedBy?: Types.ObjectId | User = undefined;
+  updatedBy?: Types.ObjectId | string = undefined;
 
-  // ===========================================================================
-  // Properties
-  // ===========================================================================
+  // ===================================================================================================================
+  // Methods
+  // ===================================================================================================================
 
   /**
    * Initialize instance with default values instead of undefined
@@ -51,4 +55,14 @@ export abstract class PersistenceModel extends CorePersistenceModel {
     // Nothing more to initialize yet
     return this;
   }
+
+  /**
+   * Map input
+   */
+  map(input) {
+    super.map(input);
+    // There is nothing to map yet. Non-primitive variables should always be mapped.
+    // If something comes up, you can use `mapClasses` / `mapClassesAsync` from ModelHelper.
+    return this;
+  }
 }

package/src/server/modules/auth/auth.model.ts

@@ -1,4 +1,5 @@
 import { Field, ObjectType } from '@nestjs/graphql';
+import { mapClasses } from '../../../core/common/helpers/model.helper';
 import { CoreAuthModel } from '../../../core/modules/auth/core-auth.model';
 import { User } from '../user/user.model';
 
@@ -29,4 +30,12 @@ export class Auth extends CoreAuthModel {
     // Nothing more to initialize yet
     return this;
   }
+
+  /**
+   * Map input
+   */
+  map(input) {
+    super.map(input);
+    return mapClasses(input, { user: User }, this);
+  }
 }

package/src/server/modules/file/file-info.model.ts

@@ -0,0 +1,15 @@
+import { ObjectType } from '@nestjs/graphql';
+import { Schema as MongooseSchema, SchemaFactory } from '@nestjs/mongoose';
+import { CoreFileInfo } from '../../../core/modules/file/core-file-info.model';
+
+/**
+ * File info model
+ */
+@ObjectType({ description: 'Information about file' })
+@MongooseSchema({ collection: 'fs.files' })
+export class FileInfo extends CoreFileInfo {}
+
+/**
+ * File info schema
+ */
+export const FileInfoSchema = SchemaFactory.createForClass(FileInfo);

package/src/server/modules/file/file.controller.ts

@@ -1,34 +1,25 @@
-import {
-  BadRequestException,
-  Body,
-  Controller,
-  Get,
-  NotFoundException,
-  Param,
-  Post,
-  Res,
-  UploadedFiles,
-  UseInterceptors,
-} from '@nestjs/common';
+import { Body, Controller, Post, UploadedFiles, UseInterceptors } from '@nestjs/common';
 import { FilesInterceptor } from '@nestjs/platform-express';
 import { diskStorage } from 'multer';
 import envConfig from '../../../config.env';
-import { RESTUser } from '../../../core/common/decorators/rest-user.decorator';
 import { Roles } from '../../../core/common/decorators/roles.decorator';
 import { RoleEnum } from '../../../core/common/enums/role.enum';
 import { multerRandomFileName } from '../../../core/common/helpers/file.helper';
-import { User } from '../user/user.model';
+import { CoreFileController } from '../../../core/modules/file/core-file.controller';
 import { FileService } from './file.service';
 
 /**
- * File controller for
+ * File controller
  */
+@Roles(RoleEnum.S_USER)
 @Controller('files')
-export class FileController {
+export class FileController extends CoreFileController {
   /**
    * Include services
    */
-  constructor(protected fileService: FileService) {}
+  constructor(protected fileService: FileService) {
+    super(fileService);
+  }
 
   /**
    * Upload files via REST as an alternative to uploading via GraphQL (see file.resolver.ts)
@@ -53,24 +44,4 @@ export class FileController {
   uploadFiles(@UploadedFiles() files, @Body() fields: any) {
     console.log('Saved file info', JSON.stringify({ files, fields }, null, 2));
   }
-
-  /**
-   * Download file
-   */
-  @Roles(RoleEnum.ADMIN)
-  @Get(':filename')
-  async getFile(@Param('filename') filename: string, @Res() res, @RESTUser() user: User) {
-    if (!filename) {
-      throw new BadRequestException('Missing filename for download');
-    }
-
-    const file = await this.fileService.getFileInfoByName(filename);
-    if (!file) {
-      throw new NotFoundException('File not found');
-    }
-    const filestream = await this.fileService.getFileStream(file.id);
-    res.header('Content-Type', file.contentType);
-    res.header('Content-Disposition', 'attachment; filename=' + file.filename);
-    return filestream.pipe(res);
-  }
 }