@solidstarters/solid-core 1.2.201 → 1.2.203

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solidstarters/solid-core",
-  "version": "1.2.201",
+  "version": "1.2.203",
   "description": "This module is a NestJS module containing all the required core providers required by a Solid application",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/config/cache.options.ts

@@ -3,15 +3,19 @@ import { ConfigModule, ConfigService } from '@nestjs/config';
 import { redisStore } from 'cache-manager-redis-store';
 import { isRedisConfigured } from 'src/helpers/environment.helper';
 
-export const RedisOptions: CacheModuleAsyncOptions = {
+export const CacheManagerOptions: CacheModuleAsyncOptions = {
     isGlobal: true,
     imports: [ConfigModule],
     useFactory: async (configService: ConfigService) => {
+
+        // This defaults to in-memory cache
         if (!isRedisConfigured(configService)) {
             return {
                 ttl: 0
-            } // This defaults to in-memory cache
+            }
         }
+
+        // If redis is configured we use that...
         const store = await createRedisStore(configService);
         return {
             store: () => store,
@@ -28,4 +32,3 @@ async function createRedisStore(configService: ConfigService<Record<string, unkn
         },
     });
 }
-

package/src/config/iam.config.ts

@@ -26,6 +26,7 @@ export const iamConfig = registerAs('iam', () => {
         iamAutoGeneratedPassword:process.env.IAM_AUTOGENERATED_PASSWORD || true,
         passwordPepper: process.env.IAM_PASSWORD_PEPPER || '', // Adding a pepper to the password hashing process for extra security,
         showNameFieldsForRegistration:process.env.IAM_SHOW_NAME_FIELDS_FOR_REGISTRATION === 'true' ? true : false,
+        sendWelcomeEmailOnSignup: (process.env.IAM_SEND_WELCOME_EMAIL_ON_SIGNUP ?? 'false').toLowerCase() === 'true',
+        sendWelcomeSmsOnSignup: (process.env.IAM_SEND_WELCOME_SMS_ON_SIGNUP ?? 'false').toLowerCase() === 'true',
     };
 })
-

package/src/controllers/model-metadata.controller.ts

@@ -5,6 +5,7 @@ import { BasicFilterDto } from '../dtos/basic-filters.dto';
 import { CreateModelMetadataDto } from '../dtos/create-model-metadata.dto';
 import { UpdateModelMetaDataDto } from '../dtos/update-model-metadata.dto';
 import { ModelMetadataService } from '../services/model-metadata.service';
+import { NavigationDto } from 'src/dtos/navigation.dto';
 
 @Controller('model-metadata')
 @ApiTags("Solid Core")
@@ -43,13 +44,31 @@ export class ModelMetadataController {
             offset: 0,
             filters: [],
             groupBy: [],
-            populate: [],   
+            populate: [],
             populateMedia: [],
             sort: []
         }
         return this.modelMetadataService.findMany(basicFilterDto);
     }
 
+    @ApiBearerAuth("jwt")
+    @ApiQuery({ name: 'modelName', required: true, type: String })
+    @ApiQuery({ name: 'recordId', required: true, type: Number })
+    @ApiQuery({ name: 'limit', required: false, type: Number })
+    @ApiQuery({ name: 'offset', required: false, type: Number })
+    @ApiQuery({ name: 'fields', required: false, type: Array })
+    @ApiQuery({ name: 'sort', required: false, type: Array })
+    @ApiQuery({ name: 'groupBy', required: false, type: Array })
+    @ApiQuery({ name: 'populate', required: false, type: Array })
+    @ApiQuery({ name: 'populateMedia', required: false, type: Array })
+    @ApiQuery({ name: 'filters', required: false, type: Array })
+    @Get("/navigation")
+    async navigation(
+        @Query() navigationDto: NavigationDto
+    ) {
+        return this.modelMetadataService.navigation(navigationDto);
+    }
+
     @ApiBearerAuth("jwt")
     @Get(':id')
     findOne(@Param('id', ParseIntPipe) id: number, @Query() query: any) {
@@ -94,4 +113,5 @@ export class ModelMetadataController {
         return this.modelMetadataService.remove(id);
     }
 
+
 }

package/src/controllers/setting.controller.ts

@@ -27,6 +27,26 @@ export class SettingController {
     return this.service.insertMany(createDtos, filesArray, solidRequestContext);
   }
 
+  /**
+   * Important to keep this method just above the @Put(':id') definition that follows as otherwise it will conflict. 
+   * 
+   * @param body 
+   * @param files 
+   * @returns 
+   */
+  @ApiBearerAuth("jwt")
+  @Put('/bulk')
+  @UseInterceptors(AnyFilesInterceptor())
+  async updateSettings(@Body() body: any, @UploadedFiles() files: Array<Express.Multer.File>) {
+    let settings: CreateSettingDto[] = [];
+
+    try {
+      settings = typeof body.settings === 'string' ? JSON.parse(body.settings) : body.settings;
+    } catch (e) {
+      throw new BadRequestException('Invalid settings payload');
+    }
+    return this.service.updateSettings(settings, files);
+  }
 
   @ApiBearerAuth("jwt")
   @Put(':id')
@@ -54,7 +74,6 @@ export class SettingController {
     return this.service.getAllSettings();
   }
 
-
   @ApiBearerAuth("jwt")
   @ApiQuery({ name: 'showHeader', required: false, type: String })
   @ApiQuery({ name: 'inListView', required: false, type: String })
@@ -97,40 +116,17 @@ export class SettingController {
     return this.service.delete(id, solidRequestContext);
   }
 
-  @ApiBearerAuth("jwt")
-  @Post('/bulk-update')
-  @UseInterceptors(AnyFilesInterceptor())
-  async updateSettings(
-    @Body() body: any,
-    @UploadedFiles() files: Array<Express.Multer.File>
-  ) {
-    let settings: CreateSettingDto[] = [];
-
-    try {
-      settings = typeof body.settings === 'string' ? JSON.parse(body.settings) : body.settings;
-    } catch (e) {
-      throw new BadRequestException('Invalid settings payload');
-    }
-    return this.service.updateSettings(settings, files);
-  }
-
-
-  @ApiBearerAuth("jwt")
-  @Post('/bulk/user')
-  @UseInterceptors(AnyFilesInterceptor())
-  async updateUserSettings(
-    @Body() body: any,
-    @UploadedFiles() files: Array<Express.Multer.File>
-  ) {
-    let settings: CreateSettingDto[] = [];
-
-    try {
-      settings = typeof body.settings === 'string' ? JSON.parse(body.settings) : body.settings;
-    } catch (e) {
-      throw new BadRequestException('Invalid settings payload');
-    }
-    return this.service.updateSettings(settings, files);
-  }
-
+  // @ApiBearerAuth("jwt")
+  // @Post('/bulk/user')
+  // @UseInterceptors(AnyFilesInterceptor())
+  // async updateUserSettings(@Body() body: any, @UploadedFiles() files: Array<Express.Multer.File>) {
+  //   let settings: CreateSettingDto[] = [];
+  //   try {
+  //     settings = typeof body.settings === 'string' ? JSON.parse(body.settings) : body.settings;
+  //   } catch (e) {
+  //     throw new BadRequestException('Invalid settings payload');
+  //   }
+  //   return this.service.updateSettings(settings, files);
+  // }
 
 }

package/src/decorators/sms-provider.decorator.ts

@@ -0,0 +1,7 @@
+export const IS_SMS_PROVIDER = 'IS_SMS_PROVIDER';
+
+export const SmsProvider = () => {
+    return (target: Function) => {
+        Reflect.defineMetadata(IS_SMS_PROVIDER, true, target);
+    };
+};

package/src/dtos/create-role-metadata.dto.ts

@@ -91,6 +91,9 @@ export const INTERNAL_ROLE_PERMISSIONS = [
     'AuthenticationController.logout',
     'AuthenticationController.me',
 
+    // Field Metadata permissions
+    'ModelMetadataController.navigation',
+
     // Field Metadata permissions
     'FieldMetadataController.getSelectionDynamicValues',
     'FieldMetadataController.getSelectionDynamicValue',

package/src/dtos/navigation.dto.ts

@@ -0,0 +1,14 @@
+import { Type } from "class-transformer";
+import { IsNumber, IsOptional, IsString } from "class-validator";
+import { BasicFilterDto } from "./basic-filters.dto";
+
+export class NavigationDto extends BasicFilterDto {
+  
+  @IsString()
+  modelName: string;
+
+  @Type(() => Number)
+  @IsNumber()
+  @IsOptional()
+  recordId: number;
+}

package/src/dtos/sign-in.dto.ts

@@ -3,19 +3,19 @@ import { IsEmail, IsNotEmpty, IsOptional, IsString, MinLength } from 'class-vali
 
 export class SignInDto {
 
-    @ApiProperty({ default: 'admin@example.service.com' })
+    @ApiProperty({ default: 'sa@solidxai.com' })
     @IsEmail()
     // @IsNotEmpty()
     @IsOptional()
     email: string;
     
-    @ApiProperty({ default: 'admin@example.service.com' })
+    @ApiProperty({ default: 'sa' })
     @IsString()
     // @IsNotEmpty()
     @IsOptional()
     username: string;
 
-    @ApiProperty({ default: 'Admin@3214$' })
+    @ApiProperty({ default: '' })
     @IsOptional()
     password: string;
 }

package/src/entities/common.entity.ts

@@ -1,6 +1,6 @@
-import { Column, CreateDateColumn, DeleteDateColumn, Index, ManyToOne, PrimaryGeneratedColumn, UpdateDateColumn } from "typeorm";
-import type { User } from "./user.entity";
-import { Exclude, Expose, Type } from "class-transformer";
+import { Column, CreateDateColumn, DeleteDateColumn, Index, PrimaryGeneratedColumn, UpdateDateColumn } from "typeorm";
+import { Exclude, Expose } from "class-transformer";
+import { LocalDateTimeTransformer } from "src/transformers/typeorm/local-date-time-transformer";
 
 @Exclude()
 export abstract class CommonEntity {
@@ -8,13 +8,13 @@ export abstract class CommonEntity {
     @PrimaryGeneratedColumn({ type: 'integer' })
     id: number
 
-    @CreateDateColumn({ name: "created_at" })
+    @CreateDateColumn({ name: "created_at", transformer: LocalDateTimeTransformer })
     createdAt: Date;
 
-    @UpdateDateColumn({ name: "updated_at" })
+    @UpdateDateColumn({ name: "updated_at", transformer: LocalDateTimeTransformer })
     updatedAt: Date;
 
-    @DeleteDateColumn({ name: "deleted_at" })
+    @DeleteDateColumn({ name: "deleted_at", transformer: LocalDateTimeTransformer })
     @Index()
     deletedAt: Date;
 
@@ -22,7 +22,7 @@ export abstract class CommonEntity {
     deletedTracker: string;
 
     @Expose()
-    @Column({ name: 'published_at', default: null, nullable: true })
+    @Column({ name: 'published_at', default: null, nullable: true, transformer: LocalDateTimeTransformer })
     publishedAt: Date;
 
     @Expose()

package/src/entities/field-metadata.entity.ts

@@ -159,7 +159,7 @@ export class FieldMetadata extends CommonEntity {
     relationJoinTableName: string;
 
     @Column({ name: 'enable_audit_tracking', default: false })
-    enableAuditTracking: boolean;
+    enableAuditTracking: boolean = false;
 
     @Column({ name: "is_multiSelect", default: false })
     isMultiSelect: boolean;

package/src/entities/legacy-common.entity.ts

@@ -1,6 +1,7 @@
 import { Exclude, Expose, Type } from "class-transformer";
 import { Column, CreateDateColumn, DeleteDateColumn, Index, JoinColumn, ManyToOne, UpdateDateColumn } from "typeorm";
 import type { User } from "./user.entity";
+import { LocalDateTimeTransformer } from "src/transformers/typeorm/local-date-time-transformer";
 
 export const LEGACY_TABLE_FIELDS_PREFIX = 'ss';
 
@@ -11,13 +12,13 @@ export abstract class LegacyCommonEntity {
     // @Generated("increment")
     // id: number
 
-    @CreateDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_created_at` })
+    @CreateDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_created_at`, transformer: LocalDateTimeTransformer })
     createdAt: Date;
 
-    @UpdateDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_updated_at` })
+    @UpdateDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_updated_at`, transformer: LocalDateTimeTransformer })
     updatedAt: Date;
 
-    @DeleteDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_deleted_at` })
+    @DeleteDateColumn({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_deleted_at`, transformer: LocalDateTimeTransformer })
     @Index()
     deletedAt: Date;
 
@@ -25,7 +26,7 @@ export abstract class LegacyCommonEntity {
     deletedTracker: string;
 
     @Expose()
-    @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_published_at`, default: null ,nullable: true})
+    @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_published_at`, default: null, nullable: true, transformer: LocalDateTimeTransformer })
     publishedAt: Date;
 
     @Expose()
@@ -51,7 +52,7 @@ export abstract class LegacyCommonEntity {
     @Expose()
     @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_created_by_id`, nullable: true })
     createdBy: number;
-    
+
     @Expose()
     @Column({ name: `${LEGACY_TABLE_FIELDS_PREFIX}_updated_by_id`, nullable: true })
     updatedBy: number;

package/src/entities/model-metadata.entity.ts

@@ -34,7 +34,7 @@ export class ModelMetadata extends CommonEntity {
     enableSoftDelete: boolean;
 
     @Column({ name: "enable_audit_tracking", default: false })
-    enableAuditTracking: boolean;
+    enableAuditTracking: boolean = false;
 
     @Column({ name: "internationalisation", default: false })
     internationalisation: boolean;

package/src/factories/mail.factory.ts

@@ -20,7 +20,6 @@ export class MailFactory {
         private readonly commonConfiguration: ConfigType<typeof commonConfig>,
     ) { }
 
-
     getMailService(): IMail {
         const mailServiceName = this.commonConfiguration.emailProvider;
         const mailProviders = this.solidRegistry.getMailProviders();

package/src/factories/sms.factory.ts

@@ -0,0 +1,43 @@
+import { Inject, Injectable, Logger } from "@nestjs/common";
+import { ConfigType } from "@nestjs/config";
+import { ModuleRef } from "@nestjs/core";
+import commonConfig from "src/config/common.config";
+import { SolidRegistry } from "src/helpers/solid-registry";
+import { ISMS } from "src/interfaces";
+
+function norm(s?: string) {
+    return s?.trim().toLowerCase();
+}
+
+// This factory will be use to return a mail service instance, using the configured environment variables
+@Injectable()
+export class SmsFactory {
+    private readonly logger = new Logger(this.constructor.name);
+
+    constructor(
+        private readonly moduleRef: ModuleRef,
+        private readonly solidRegistry: SolidRegistry,
+        @Inject(commonConfig.KEY)
+        private readonly commonConfiguration: ConfigType<typeof commonConfig>,
+    ) { }
+
+    getSmsService(name: string = null): ISMS {
+        // This is the default provider
+        const smsServiceName = name || this.commonConfiguration.smsProvider;
+        if (!smsServiceName) {
+            throw new Error("Unable to resolve sms provider")
+        }
+        const smsProviders = this.solidRegistry.getSmsProviders();
+
+        // Return the instance which matches the smsServicename
+        if (!smsProviders.length) {
+            // throw new Error("No mail providers are registered.");
+            this.logger.error("No sms providers are registered.");
+        }
+
+        const smsServiceProvider = smsProviders.find(provider => provider.name === smsServiceName);
+
+        return smsServiceProvider.instance as ISMS;
+    }
+
+}

package/src/helpers/date.helper.ts

@@ -1,34 +1,63 @@
 import dayjs from 'dayjs';
 import customParseFormat from 'dayjs/plugin/customParseFormat';
+
 dayjs.extend(customParseFormat);
 
 export function parseFlexibleDate(value: any): Date | null {
   if (!value) return null;
+
+  // Already a valid Date (ExcelJS often gives this)
   if (value instanceof Date && !isNaN(value.getTime())) {
     return value;
   }
+
+  // Excel serial number
   if (typeof value === 'number') {
     const excelEpoch = new Date(Date.UTC(1899, 11, 30));
     const d = new Date(excelEpoch.getTime() + value * 86400000);
     return isNaN(d.getTime()) ? null : d;
   }
-  const str = value.toString().trim();
+
+  let str = value.toString().trim();
+
+  // STRIP "(British Summer Time)" or any "(...)" suffix
+  str = str.replace(/\s*\(.*\)$/, '');
+
   const formats = [
+    // strict business formats
     'DD-MM-YYYY',
+
+    // common alternates
     'YYYY-MM-DD',
     'DD/MM/YYYY',
     'MM/DD/YYYY',
     'D-M-YYYY',
     'YYYY/MM/DD',
+
+    // JS Date.toString() (without timezone name)
+    // (handle single-digit day + different offset shapes)
+    'ddd MMM D YYYY HH:mm:ss [GMT]ZZ', // GMT+0100
+    'ddd MMM DD YYYY HH:mm:ss [GMT]ZZ',
+    'ddd MMM D YYYY HH:mm:ss [GMT]Z',  // GMT+01:00
+    'ddd MMM DD YYYY HH:mm:ss [GMT]Z',
+
+    // ISO variants
     'YYYY-MM-DD HH:mm:ss',
-    'YYYY-MM-DDTHH:mm:ss',       // ISO without Z
-    'YYYY-MM-DDTHH:mm:ss.SSS',   // ISO with millis
-    'YYYY-MM-DDTHH:mm:ssZ',      // ISO with timezone
+    'YYYY-MM-DDTHH:mm:ss',
+    'YYYY-MM-DDTHH:mm:ss.SSS',
+    'YYYY-MM-DDTHH:mm:ssZ',
   ];
-  const parsed = dayjs(str, formats, true); // true = strict parsing
-  if (!parsed.isValid()) {
-    return null;
+
+  const parsed = dayjs(str, formats, true); // strict
+  if (parsed.isValid()) {
+    return parsed.toDate();
+  }
+
+  // Fallback: native Date can parse this JS format very reliably
+  const native = new Date(str);
+  if (!isNaN(native.getTime())) {
+    return native;
   }
-  return parsed.toDate();
-}
 
+  return null;
+}

package/src/helpers/field-crud-managers/MediaFieldCrudManager.ts

@@ -9,20 +9,122 @@ export interface MediaFieldOptions {
     type: SolidMediaType;
     required: boolean | undefined | null;
     fieldName: string | undefined | null;
+    mediaMaxSizeKb: number | undefined | null;
+    mediaTypes: string[];
 }
 
+type MediaType = 'image' | 'audio' | 'video' | 'file';
+
+const MIME_TO_MEDIA_TYPE: Record<string, MediaType> = {
+    // Images
+    'image/png': 'image',
+    'image/jpeg': 'image',
+    'image/jpg': 'image',
+    'image/webp': 'image',
+    'image/gif': 'image',
+    'image/bmp': 'image',
+    'image/tiff': 'image',
+    'image/svg+xml': 'image',
+    'image/heic': 'image',
+    'image/heif': 'image',
+
+    // Audio
+    'audio/mpeg': 'audio',      // mp3
+    'audio/mp3': 'audio',
+    'audio/wav': 'audio',
+    'audio/x-wav': 'audio',
+    'audio/webm': 'audio',
+    'audio/ogg': 'audio',
+    'audio/aac': 'audio',
+    'audio/mp4': 'audio',       // m4a often shows as audio/mp4
+    'audio/x-m4a': 'audio',
+    'audio/flac': 'audio',
+
+    // Video
+    'video/mp4': 'video',
+    'video/mpeg': 'video',
+    'video/webm': 'video',
+    'video/ogg': 'video',
+    'video/quicktime': 'video', // mov
+    'video/x-msvideo': 'video', // avi
+    'video/x-matroska': 'video',// mkv
+    'video/3gpp': 'video',
+    'video/3gpp2': 'video',
+
+    // Documents / files (treat as "file")
+    'application/pdf': 'file',
+    'text/plain': 'file',
+    'text/markdown': 'file',
+    'application/json': 'file',
+    'text/csv': 'file',
+
+    // Office
+    'application/msword': 'file', // doc
+    'application/vnd.openxmlformats-officedocument.wordprocessingml.document': 'file', // docx
+    'application/vnd.ms-excel': 'file', // xls
+    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet': 'file', // xlsx
+    'application/vnd.ms-powerpoint': 'file', // ppt
+    'application/vnd.openxmlformats-officedocument.presentationml.presentation': 'file', // pptx,
+
+    // Archives (optional)
+    'application/zip': 'file',
+    'application/x-zip-compressed': 'file',
+    'application/x-rar-compressed': 'file',
+    'application/x-7z-compressed': 'file',
+
+    // Common binary fallback category
+    'application/octet-stream': 'file',
+};
+
+const EXT_TO_MEDIA_TYPE: Record<string, MediaType> = {
+    // Images
+    png: 'image', jpg: 'image', jpeg: 'image', webp: 'image', gif: 'image', bmp: 'image', tiff: 'image', svg: 'image', heic: 'image', heif: 'image',
+
+    // Audio
+    mp3: 'audio', wav: 'audio', ogg: 'audio', aac: 'audio', m4a: 'audio', flac: 'audio',
+
+    // Video
+    mp4: 'video', mov: 'video', avi: 'video', mkv: 'video', mpeg: 'video', mpg: 'video', '3gp': 'video', '3g2': 'video',
+
+    // Files
+    pdf: 'file', txt: 'file', md: 'file', csv: 'file', json: 'file',
+    doc: 'file', docx: 'file', xls: 'file', xlsx: 'file', ppt: 'file', pptx: 'file',
+    zip: 'file', rar: 'file', '7z': 'file',
+};
+
+
 export class MediaFieldCrudManager implements FieldCrudManager {
 
     constructor(private readonly options: MediaFieldOptions) {
     }
 
-    validate(dto: any, files:Array<Express.Multer.File>): ValidationError[] {
+    private resolveMediaType(mimetype?: string, filename?: string): MediaType | null {
+        const mt = (mimetype || '').toLowerCase().trim();
+        if (mt && MIME_TO_MEDIA_TYPE[mt]) {
+            return MIME_TO_MEDIA_TYPE[mt];
+        }
+
+        // Some libs may send "image/*" etc. Treat broad families safely.
+        if (mt.startsWith('image/')) return 'image';
+        if (mt.startsWith('audio/')) return 'audio';
+        if (mt.startsWith('video/')) return 'video';
+
+        // Fallback to extension if provided
+        const ext = (filename || '').split('.').pop()?.toLowerCase();
+        if (ext && EXT_TO_MEDIA_TYPE[ext]) {
+            return EXT_TO_MEDIA_TYPE[ext];
+        }
+
+        return null;
+    }
+
+    validate(dto: any, files: Array<Express.Multer.File>): ValidationError[] {
         const isValidateForUpdate = dto.id !== undefined; //FIXME: This is a hack, since we are using PUT for update. Once we support PATCH, this will be removed
         const fieldFiles = files.filter(file => file.fieldname === this.options.fieldName);
         return this.applyValidations(fieldFiles, isValidateForUpdate);
     }
 
-    private applyValidations(fieldFiles:Array<Express.Multer.File>, isValidateForUpdate: boolean): ValidationError[] {
+    private applyValidations(fieldFiles: Array<Express.Multer.File>, isValidateForUpdate: boolean): ValidationError[] {
         switch (this.options.type) {
             case SolidMediaType.mediaSingle:
                 return this.validateMediaSingle(fieldFiles, isValidateForUpdate);
@@ -33,7 +135,7 @@ export class MediaFieldCrudManager implements FieldCrudManager {
         }
     }
 
-    private validateMediaSingle(fieldFiles:Array<Express.Multer.File>, isValidateForUpdate: boolean): ValidationError[] {
+    private validateMediaSingle(fieldFiles: Array<Express.Multer.File>, isValidateForUpdate: boolean): ValidationError[] {
         const errors: ValidationError[] = [];
         if (!isValidateForUpdate && this.options.required && fieldFiles.length === 0) {
             errors.push({
@@ -47,10 +149,42 @@ export class MediaFieldCrudManager implements FieldCrudManager {
                 error: `${this.options.fieldName} must be a single file`
             });
         }
+        // validate size
+        if (this.options.mediaMaxSizeKb) {
+            for (let i = 0; i < fieldFiles.length; i++) {
+                const fieldFile = fieldFiles[i];
+                const fieldFileSizeInBytes = Math.ceil(fieldFile.size / 1024);
+                if (fieldFileSizeInBytes > this.options.mediaMaxSizeKb) {
+                    errors.push({
+                        field: this.options.fieldName,
+                        error: `${this.options.fieldName} with size ${fieldFileSizeInBytes} KB exceeds max size limit of ${this.options.mediaMaxSizeKb} KB`
+                    });
+                }
+            }
+        }
+        // validate type
+        if (this.options.mediaTypes && this.options.mediaTypes.length > 0) {
+            const allowedFileTypes = this.options.mediaTypes as MediaType[];
+
+            for (let i = 0; i < fieldFiles.length; i++) {
+                const fieldFile = fieldFiles[i];
+
+                const resolvedType = this.resolveMediaType(fieldFile.mimetype, fieldFile.originalname ?? fieldFile.filename ?? '');
+                if (!resolvedType || !allowedFileTypes.includes(resolvedType)) {
+                    errors.push({
+                        field: this.options.fieldName,
+                        error: `${this.options.fieldName} file type not allowed. ` +
+                            `Allowed: ${allowedFileTypes.join(', ')}. ` +
+                            `Received mimetype: ${fieldFile.mimetype}${resolvedType ? ` (mapped to ${resolvedType})` : ''}`
+                    });
+                }
+            }
+        }
+
         return errors;
     }
 
-    private validateMediaMultiple(fieldFiles:Array<Express.Multer.File>, isValidateForUpdate: boolean): ValidationError[] {    
+    private validateMediaMultiple(fieldFiles: Array<Express.Multer.File>, isValidateForUpdate: boolean): ValidationError[] {
         const errors: ValidationError[] = [];
         if (!isValidateForUpdate && this.options.required && fieldFiles.length === 0) {
             errors.push({