@sync-in/server 1.3.0

package/server/applications/users/dto/delete-user.dto.js

@@ -0,0 +1,54 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get AdminDeleteUserDto () {
+        return AdminDeleteUserDto;
+    },
+    get DeleteUserDto () {
+        return DeleteUserDto;
+    }
+});
+const _classvalidator = require("class-validator");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let DeleteUserDto = class DeleteUserDto {
+    constructor(){
+        this.isGuest = false;
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsBoolean)(),
+    _ts_metadata("design:type", Boolean)
+], DeleteUserDto.prototype, "deleteSpace", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsBoolean)()
+], DeleteUserDto.prototype, "isGuest", void 0);
+let AdminDeleteUserDto = class AdminDeleteUserDto extends DeleteUserDto {
+};
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], AdminDeleteUserDto.prototype, "adminPassword", void 0);
+
+//# sourceMappingURL=delete-user.dto.js.map

package/server/applications/users/dto/delete-user.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/dto/delete-user.dto.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { IsBoolean, IsNotEmpty, IsOptional, IsString } from 'class-validator'\n\nexport class DeleteUserDto {\n  @IsBoolean()\n  deleteSpace: boolean\n\n  @IsOptional()\n  @IsBoolean()\n  isGuest? = false\n}\n\nexport class AdminDeleteUserDto extends DeleteUserDto {\n  @IsNotEmpty()\n  @IsString()\n  adminPassword: string\n}\n"],"names":["AdminDeleteUserDto","DeleteUserDto","isGuest"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAaYA;eAAAA;;QATAC;eAAAA;;;gCAF+C;;;;;;;;;;AAErD,IAAA,AAAMA,gBAAN,MAAMA;;aAMXC,UAAW;;AACb;;;;;;;;;AAEO,IAAA,AAAMF,qBAAN,MAAMA,2BAA2BC;AAIxC"}

package/server/applications/users/dto/search-members.dto.js

@@ -0,0 +1,79 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "SearchMembersDto", {
+    enumerable: true,
+    get: function() {
+        return SearchMembersDto;
+    }
+});
+const _classtransformer = require("class-transformer");
+const _classvalidator = require("class-validator");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let SearchMembersDto = class SearchMembersDto {
+    constructor(){
+        this.onlyUsers = false;
+        this.onlyGroups = false;
+        this.excludePersonalGroups = false;
+        this.withPermissions = false;
+    }
+};
+_ts_decorate([
+    (0, _classvalidator.IsString)(),
+    (0, _classtransformer.Transform)(({ value })=>value ? value.trim().toLowerCase() : ''),
+    _ts_metadata("design:type", String)
+], SearchMembersDto.prototype, "search", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsInt)({
+        each: true
+    }),
+    _ts_metadata("design:type", Array)
+], SearchMembersDto.prototype, "ignoreUserIds", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsInt)({
+        each: true
+    }),
+    _ts_metadata("design:type", Array)
+], SearchMembersDto.prototype, "ignoreGroupIds", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsBoolean)(),
+    _ts_metadata("design:type", Boolean)
+], SearchMembersDto.prototype, "onlyUsers", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsBoolean)(),
+    _ts_metadata("design:type", Boolean)
+], SearchMembersDto.prototype, "onlyGroups", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsBoolean)(),
+    _ts_metadata("design:type", Boolean)
+], SearchMembersDto.prototype, "excludePersonalGroups", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsInt)(),
+    _ts_metadata("design:type", Number)
+], SearchMembersDto.prototype, "usersRole", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsBoolean)(),
+    _ts_metadata("design:type", Boolean)
+], SearchMembersDto.prototype, "withPermissions", void 0);
+
+//# sourceMappingURL=search-members.dto.js.map

package/server/applications/users/dto/search-members.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/dto/search-members.dto.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Transform } from 'class-transformer'\nimport { IsBoolean, IsInt, IsOptional, IsString } from 'class-validator'\n\nexport class SearchMembersDto {\n  @IsString()\n  @Transform(({ value }) => (value ? value.trim().toLowerCase() : ''))\n  search: string\n\n  @IsOptional()\n  @IsInt({ each: true })\n  ignoreUserIds?: number[]\n\n  @IsOptional()\n  @IsInt({ each: true })\n  ignoreGroupIds?: number[]\n\n  @IsOptional()\n  @IsBoolean()\n  onlyUsers?: boolean = false\n\n  @IsOptional()\n  @IsBoolean()\n  onlyGroups?: boolean = false\n\n  @IsOptional()\n  @IsBoolean()\n  excludePersonalGroups?: boolean = false\n\n  @IsOptional()\n  @IsInt()\n  usersRole?: number\n\n  @IsOptional()\n  @IsBoolean()\n  withPermissions?: boolean = false\n}\n"],"names":["SearchMembersDto","onlyUsers","onlyGroups","excludePersonalGroups","withPermissions","value","trim","toLowerCase","each"],"mappings":"AAAA;;;;CAIC;;;;+BAKYA;;;eAAAA;;;kCAHa;gCAC6B;;;;;;;;;;AAEhD,IAAA,AAAMA,mBAAN,MAAMA;;aAeXC,YAAsB;aAItBC,aAAuB;aAIvBC,wBAAkC;aAQlCC,kBAA4B;;AAC9B;;;sCA9Bc,EAAEC,KAAK,EAAE,GAAMA,QAAQA,MAAMC,IAAI,GAAGC,WAAW,KAAK;;;;;;QAIvDC,MAAM;;;;;;;QAINA,MAAM"}

package/server/applications/users/dto/user-password.dto.js

@@ -0,0 +1,35 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "UserPasswordDto", {
+    enumerable: true,
+    get: function() {
+        return UserPasswordDto;
+    }
+});
+const _classvalidator = require("class-validator");
+const _user = require("../constants/user");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let UserPasswordDto = class UserPasswordDto {
+};
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.MinLength)(_user.USER_PASSWORD_MIN_LENGTH),
+    _ts_metadata("design:type", String)
+], UserPasswordDto.prototype, "password", void 0);
+
+//# sourceMappingURL=user-password.dto.js.map

package/server/applications/users/dto/user-password.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/dto/user-password.dto.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { IsNotEmpty, IsString, MinLength } from 'class-validator'\nimport { USER_PASSWORD_MIN_LENGTH } from '../constants/user'\n\nexport class UserPasswordDto {\n  @IsNotEmpty()\n  @IsString()\n  @MinLength(USER_PASSWORD_MIN_LENGTH)\n  password: string\n}\n"],"names":["UserPasswordDto"],"mappings":"AAAA;;;;CAIC;;;;+BAKYA;;;eAAAA;;;gCAHmC;sBACP;;;;;;;;;;AAElC,IAAA,AAAMA,kBAAN,MAAMA;AAKb"}

package/server/applications/users/dto/user-properties.dto.js

@@ -0,0 +1,64 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get UserLanguageDto () {
+        return UserLanguageDto;
+    },
+    get UserNotificationDto () {
+        return UserNotificationDto;
+    },
+    get UserPasswordDto () {
+        return UserPasswordDto;
+    }
+});
+const _classvalidator = require("class-validator");
+const _user = require("../constants/user");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let UserLanguageDto = class UserLanguageDto {
+};
+_ts_decorate([
+    (0, _classvalidator.ValidateIf)((_, language)=>language === null || typeof language === 'string'),
+    _ts_metadata("design:type", Object)
+], UserLanguageDto.prototype, "language", void 0);
+let UserNotificationDto = class UserNotificationDto {
+};
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsInt)(),
+    _ts_metadata("design:type", Number)
+], UserNotificationDto.prototype, "notification", void 0);
+let UserPasswordDto = class UserPasswordDto {
+};
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], UserPasswordDto.prototype, "oldPassword", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.MinLength)(_user.USER_PASSWORD_MIN_LENGTH),
+    _ts_metadata("design:type", String)
+], UserPasswordDto.prototype, "newPassword", void 0);
+
+//# sourceMappingURL=user-properties.dto.js.map

package/server/applications/users/dto/user-properties.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/dto/user-properties.dto.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { IsInt, IsNotEmpty, IsString, MinLength, ValidateIf } from 'class-validator'\nimport { USER_PASSWORD_MIN_LENGTH } from '../constants/user'\n\nexport class UserLanguageDto {\n  @ValidateIf((_, language) => language === null || typeof language === 'string')\n  language: string | null\n}\n\nexport class UserNotificationDto {\n  @IsNotEmpty()\n  @IsInt()\n  notification: number\n}\n\nexport class UserPasswordDto {\n  @IsNotEmpty()\n  @IsString()\n  oldPassword: string\n\n  @IsNotEmpty()\n  @IsString()\n  @MinLength(USER_PASSWORD_MIN_LENGTH)\n  newPassword: string\n}\n"],"names":["UserLanguageDto","UserNotificationDto","UserPasswordDto","_","language"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAKYA;eAAAA;;QAKAC;eAAAA;;QAMAC;eAAAA;;;gCAdsD;sBAC1B;;;;;;;;;;AAElC,IAAA,AAAMF,kBAAN,MAAMA;AAGb;;qCAFeG,GAAGC,WAAaA,aAAa,QAAQ,OAAOA,aAAa;;;AAIjE,IAAA,AAAMH,sBAAN,MAAMA;AAIb;;;;;;AAEO,IAAA,AAAMC,kBAAN,MAAMA;AASb"}

package/server/applications/users/guards/permissions.guard.js

@@ -0,0 +1,71 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "UserPermissionsGuard", {
+    enumerable: true,
+    get: function() {
+        return UserPermissionsGuard;
+    }
+});
+const _common = require("@nestjs/common");
+const _core = require("@nestjs/core");
+const _permissionsdecorator = require("../decorators/permissions.decorator");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let UserPermissionsGuard = class UserPermissionsGuard {
+    canActivate(ctx) {
+        const permissions = this.reflector.getAllAndOverride(_permissionsdecorator.UserHavePermission, [
+            ctx.getHandler(),
+            ctx.getClass()
+        ]);
+        if (typeof permissions === 'object') {
+            // used to bypass the check, the guard is called without argument, the value is '{}'
+            return true;
+        }
+        if (permissions === undefined) {
+            this.logger.warn(`no application defined on ${ctx.getClass().name}:${ctx.getHandler().name}`);
+            return false;
+        }
+        const req = ctx.switchToHttp().getRequest();
+        if (req.user.isAdmin) {
+            return true;
+        }
+        let authorized = false;
+        if (Array.isArray(permissions)) {
+            // if any of the apps are allowed, proceed
+            authorized = permissions.some((p)=>req.user.havePermission(p));
+        } else {
+            authorized = req.user.havePermission(permissions);
+        }
+        if (!authorized) {
+            this.logger.warn(`does not have permissions : ${permissions}`);
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        return authorized;
+    }
+    constructor(reflector){
+        this.reflector = reflector;
+        this.logger = new _common.Logger(UserPermissionsGuard.name);
+    }
+};
+UserPermissionsGuard = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _core.Reflector === "undefined" ? Object : _core.Reflector
+    ])
+], UserPermissionsGuard);
+
+//# sourceMappingURL=permissions.guard.js.map

package/server/applications/users/guards/permissions.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/guards/permissions.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { CanActivate, ExecutionContext, HttpException, HttpStatus, Injectable, Logger } from '@nestjs/common'\nimport { Reflector } from '@nestjs/core'\nimport { FastifyAuthenticatedRequest } from '../../../authentication/interfaces/auth-request.interface'\nimport { USER_PERMISSION } from '../constants/user'\nimport { UserHavePermission } from '../decorators/permissions.decorator'\n\n@Injectable()\nexport class UserPermissionsGuard implements CanActivate {\n  private readonly logger = new Logger(UserPermissionsGuard.name)\n\n  constructor(private readonly reflector: Reflector) {}\n\n  canActivate(ctx: ExecutionContext): boolean {\n    const permissions: USER_PERMISSION | USER_PERMISSION[] = this.reflector.getAllAndOverride(UserHavePermission, [ctx.getHandler(), ctx.getClass()])\n    if (typeof permissions === 'object') {\n      // used to bypass the check, the guard is called without argument, the value is '{}'\n      return true\n    }\n    if (permissions === undefined) {\n      this.logger.warn(`no application defined on ${ctx.getClass().name}:${ctx.getHandler().name}`)\n      return false\n    }\n    const req: FastifyAuthenticatedRequest = ctx.switchToHttp().getRequest()\n    if (req.user.isAdmin) {\n      return true\n    }\n    let authorized = false\n    if (Array.isArray(permissions)) {\n      // if any of the apps are allowed, proceed\n      authorized = permissions.some((p: string) => req.user.havePermission(p))\n    } else {\n      authorized = req.user.havePermission(permissions)\n    }\n    if (!authorized) {\n      this.logger.warn(`does not have permissions : ${permissions}`)\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    return authorized\n  }\n}\n"],"names":["UserPermissionsGuard","canActivate","ctx","permissions","reflector","getAllAndOverride","UserHavePermission","getHandler","getClass","undefined","logger","warn","name","req","switchToHttp","getRequest","user","isAdmin","authorized","Array","isArray","some","p","havePermission","HttpException","HttpStatus","FORBIDDEN","Logger"],"mappings":"AAAA;;;;CAIC;;;;+BASYA;;;eAAAA;;;wBAPgF;sBACnE;sCAGS;;;;;;;;;;AAG5B,IAAA,AAAMA,uBAAN,MAAMA;IAKXC,YAAYC,GAAqB,EAAW;QAC1C,MAAMC,cAAmD,IAAI,CAACC,SAAS,CAACC,iBAAiB,CAACC,wCAAkB,EAAE;YAACJ,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QAChJ,IAAI,OAAOL,gBAAgB,UAAU;YACnC,oFAAoF;YACpF,OAAO;QACT;QACA,IAAIA,gBAAgBM,WAAW;YAC7B,IAAI,CAACC,MAAM,CAACC,IAAI,CAAC,CAAC,0BAA0B,EAAET,IAAIM,QAAQ,GAAGI,IAAI,CAAC,CAAC,EAAEV,IAAIK,UAAU,GAAGK,IAAI,EAAE;YAC5F,OAAO;QACT;QACA,MAAMC,MAAmCX,IAAIY,YAAY,GAAGC,UAAU;QACtE,IAAIF,IAAIG,IAAI,CAACC,OAAO,EAAE;YACpB,OAAO;QACT;QACA,IAAIC,aAAa;QACjB,IAAIC,MAAMC,OAAO,CAACjB,cAAc;YAC9B,0CAA0C;YAC1Ce,aAAaf,YAAYkB,IAAI,CAAC,CAACC,IAAcT,IAAIG,IAAI,CAACO,cAAc,CAACD;QACvE,OAAO;YACLJ,aAAaL,IAAIG,IAAI,CAACO,cAAc,CAACpB;QACvC;QACA,IAAI,CAACe,YAAY;YACf,IAAI,CAACR,MAAM,CAACC,IAAI,CAAC,CAAC,4BAA4B,EAAER,aAAa;YAC7D,MAAM,IAAIqB,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,OAAOR;IACT;IA5BA,YAAY,AAAiBd,SAAoB,CAAE;aAAtBA,YAAAA;aAFZM,SAAS,IAAIiB,cAAM,CAAC3B,qBAAqBY,IAAI;IAEV;AA6BtD"}

package/server/applications/users/guards/permissions.guard.spec.js

@@ -0,0 +1,103 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+const _tsjest = require("@golevelup/ts-jest");
+const _common = require("@nestjs/common");
+const _core = require("@nestjs/core");
+const _user = require("../constants/user");
+const _permissionsdecorator = require("../decorators/permissions.decorator");
+const _usermodel = require("../models/user.model");
+const _test = require("../utils/test");
+const _permissionsguard = require("./permissions.guard");
+describe(_permissionsguard.UserPermissionsGuard.name, ()=>{
+    let reflector;
+    let permissionsGuard;
+    let userTest;
+    let context;
+    beforeAll(async ()=>{
+        reflector = new _core.Reflector();
+        permissionsGuard = new _permissionsguard.UserPermissionsGuard(reflector);
+        userTest = new _usermodel.UserModel((0, _test.generateUserTest)());
+        _common.Logger.overrideLogger([
+            'fatal'
+        ]);
+    });
+    it('should be defined', ()=>{
+        expect(permissionsGuard).toBeDefined();
+        expect(userTest).toBeDefined();
+    });
+    it('should pass with a valid permission', async ()=>{
+        userTest.applications = [
+            _user.USER_PERMISSION.PERSONAL_SPACE
+        ];
+        context = (0, _tsjest.createMock)();
+        (0, _permissionsdecorator.UserHavePermission)(_user.USER_PERMISSION.PERSONAL_SPACE)(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(permissionsGuard.canActivate(context)).toBe(true);
+    });
+    it('should pass if any of the permissions are granted', async ()=>{
+        userTest.applications = [
+            _user.USER_PERMISSION.PERSONAL_SPACE
+        ];
+        context = (0, _tsjest.createMock)();
+        (0, _permissionsdecorator.UserHavePermission)([
+            _user.USER_PERMISSION.SPACES,
+            _user.USER_PERMISSION.PERSONAL_SPACE
+        ])(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(permissionsGuard.canActivate(context)).toBe(true);
+    });
+    it('should not pass with a bad permission', async ()=>{
+        userTest.applications = [];
+        context = (0, _tsjest.createMock)();
+        (0, _permissionsdecorator.UserHavePermission)(_user.USER_PERMISSION.PERSONAL_SPACE)(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(()=>permissionsGuard.canActivate(context)).toThrow(_common.HttpException);
+    });
+    it('should pass with no permissions but with the admin role', async ()=>{
+        userTest.applications = [];
+        userTest.role = _user.USER_ROLE.ADMINISTRATOR;
+        context = (0, _tsjest.createMock)();
+        (0, _permissionsdecorator.UserHavePermission)(_user.USER_PERMISSION.PERSONAL_SPACE)(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(permissionsGuard.canActivate(context)).toBe(true);
+        // reset
+        userTest.role = _user.USER_ROLE.USER;
+    });
+    it('should not pass with a missing decorator', async ()=>{
+        userTest.applications = [
+            _user.USER_PERMISSION.PERSONAL_SPACE
+        ];
+        context = (0, _tsjest.createMock)();
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(permissionsGuard.canActivate(context)).toBeFalsy();
+    });
+    it('should pass with an empty decorator', async ()=>{
+        userTest.applications = [
+            _user.USER_PERMISSION.PERSONAL_SPACE
+        ];
+        context = (0, _tsjest.createMock)();
+        (0, _permissionsdecorator.UserHavePermission)()(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(permissionsGuard.canActivate(context)).toBeTruthy();
+    });
+});
+
+//# sourceMappingURL=permissions.guard.spec.js.map

package/server/applications/users/guards/permissions.guard.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/guards/permissions.guard.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext, HttpException, Logger } from '@nestjs/common'\nimport { Reflector } from '@nestjs/core'\nimport { USER_PERMISSION, USER_ROLE } from '../constants/user'\nimport { UserHavePermission } from '../decorators/permissions.decorator'\nimport { UserModel } from '../models/user.model'\nimport { generateUserTest } from '../utils/test'\nimport { UserPermissionsGuard } from './permissions.guard'\n\ndescribe(UserPermissionsGuard.name, () => {\n  let reflector: Reflector\n  let permissionsGuard: UserPermissionsGuard\n  let userTest: UserModel\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    reflector = new Reflector()\n    permissionsGuard = new UserPermissionsGuard(reflector)\n    userTest = new UserModel(generateUserTest())\n    Logger.overrideLogger(['fatal'])\n  })\n\n  it('should be defined', () => {\n    expect(permissionsGuard).toBeDefined()\n    expect(userTest).toBeDefined()\n  })\n\n  it('should pass with a valid permission', async () => {\n    userTest.applications = [USER_PERMISSION.PERSONAL_SPACE]\n    context = createMock<ExecutionContext>()\n    UserHavePermission(USER_PERMISSION.PERSONAL_SPACE)(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(permissionsGuard.canActivate(context)).toBe(true)\n  })\n\n  it('should pass if any of the permissions are granted', async () => {\n    userTest.applications = [USER_PERMISSION.PERSONAL_SPACE]\n    context = createMock<ExecutionContext>()\n    UserHavePermission([USER_PERMISSION.SPACES, USER_PERMISSION.PERSONAL_SPACE])(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(permissionsGuard.canActivate(context)).toBe(true)\n  })\n\n  it('should not pass with a bad permission', async () => {\n    userTest.applications = []\n    context = createMock<ExecutionContext>()\n    UserHavePermission(USER_PERMISSION.PERSONAL_SPACE)(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(() => permissionsGuard.canActivate(context)).toThrow(HttpException)\n  })\n\n  it('should pass with no permissions but with the admin role', async () => {\n    userTest.applications = []\n    userTest.role = USER_ROLE.ADMINISTRATOR\n    context = createMock<ExecutionContext>()\n    UserHavePermission(USER_PERMISSION.PERSONAL_SPACE)(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(permissionsGuard.canActivate(context)).toBe(true)\n    // reset\n    userTest.role = USER_ROLE.USER\n  })\n\n  it('should not pass with a missing decorator', async () => {\n    userTest.applications = [USER_PERMISSION.PERSONAL_SPACE]\n    context = createMock<ExecutionContext>()\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(permissionsGuard.canActivate(context)).toBeFalsy()\n  })\n\n  it('should pass with an empty decorator', async () => {\n    userTest.applications = [USER_PERMISSION.PERSONAL_SPACE]\n    context = createMock<ExecutionContext>()\n    UserHavePermission()(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(permissionsGuard.canActivate(context)).toBeTruthy()\n  })\n})\n"],"names":["describe","UserPermissionsGuard","name","reflector","permissionsGuard","userTest","context","beforeAll","Reflector","UserModel","generateUserTest","Logger","overrideLogger","it","expect","toBeDefined","applications","USER_PERMISSION","PERSONAL_SPACE","createMock","UserHavePermission","getHandler","switchToHttp","getRequest","mockReturnValue","user","canActivate","toBe","SPACES","toThrow","HttpException","role","USER_ROLE","ADMINISTRATOR","USER","toBeFalsy","toBeTruthy"],"mappings":"AAAA;;;;CAIC;;;;wBAEsC;wBACiB;sBAC9B;sBACiB;sCACR;2BACT;sBACO;kCACI;AAErCA,SAASC,sCAAoB,CAACC,IAAI,EAAE;IAClC,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACRJ,YAAY,IAAIK,eAAS;QACzBJ,mBAAmB,IAAIH,sCAAoB,CAACE;QAC5CE,WAAW,IAAII,oBAAS,CAACC,IAAAA,sBAAgB;QACzCC,cAAM,CAACC,cAAc,CAAC;YAAC;SAAQ;IACjC;IAEAC,GAAG,qBAAqB;QACtBC,OAAOV,kBAAkBW,WAAW;QACpCD,OAAOT,UAAUU,WAAW;IAC9B;IAEAF,GAAG,uCAAuC;QACxCR,SAASW,YAAY,GAAG;YAACC,qBAAe,CAACC,cAAc;SAAC;QACxDZ,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,wCAAkB,EAACH,qBAAe,CAACC,cAAc,EAAEZ,QAAQe,UAAU;QACrEf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,iBAAiBsB,WAAW,CAACpB,UAAUqB,IAAI,CAAC;IACrD;IAEAd,GAAG,qDAAqD;QACtDR,SAASW,YAAY,GAAG;YAACC,qBAAe,CAACC,cAAc;SAAC;QACxDZ,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,wCAAkB,EAAC;YAACH,qBAAe,CAACW,MAAM;YAAEX,qBAAe,CAACC,cAAc;SAAC,EAAEZ,QAAQe,UAAU;QAC/Ff,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,iBAAiBsB,WAAW,CAACpB,UAAUqB,IAAI,CAAC;IACrD;IAEAd,GAAG,yCAAyC;QAC1CR,SAASW,YAAY,GAAG,EAAE;QAC1BV,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,wCAAkB,EAACH,qBAAe,CAACC,cAAc,EAAEZ,QAAQe,UAAU;QACrEf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAO,IAAMV,iBAAiBsB,WAAW,CAACpB,UAAUuB,OAAO,CAACC,qBAAa;IAC3E;IAEAjB,GAAG,2DAA2D;QAC5DR,SAASW,YAAY,GAAG,EAAE;QAC1BX,SAAS0B,IAAI,GAAGC,eAAS,CAACC,aAAa;QACvC3B,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,wCAAkB,EAACH,qBAAe,CAACC,cAAc,EAAEZ,QAAQe,UAAU;QACrEf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,iBAAiBsB,WAAW,CAACpB,UAAUqB,IAAI,CAAC;QACnD,QAAQ;QACRtB,SAAS0B,IAAI,GAAGC,eAAS,CAACE,IAAI;IAChC;IAEArB,GAAG,4CAA4C;QAC7CR,SAASW,YAAY,GAAG;YAACC,qBAAe,CAACC,cAAc;SAAC;QACxDZ,UAAUa,IAAAA,kBAAU;QACpBb,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,iBAAiBsB,WAAW,CAACpB,UAAU6B,SAAS;IACzD;IAEAtB,GAAG,uCAAuC;QACxCR,SAASW,YAAY,GAAG;YAACC,qBAAe,CAACC,cAAc;SAAC;QACxDZ,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,wCAAkB,IAAGd,QAAQe,UAAU;QACvCf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,iBAAiBsB,WAAW,CAACpB,UAAU8B,UAAU;IAC1D;AACF"}

package/server/applications/users/guards/roles.guard.js

@@ -0,0 +1,62 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "UserRolesGuard", {
+    enumerable: true,
+    get: function() {
+        return UserRolesGuard;
+    }
+});
+const _common = require("@nestjs/common");
+const _core = require("@nestjs/core");
+const _user = require("../constants/user");
+const _rolesdecorator = require("../decorators/roles.decorator");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let UserRolesGuard = class UserRolesGuard {
+    canActivate(ctx) {
+        const role = this.reflector.getAllAndOverride(_rolesdecorator.UserHaveRole, [
+            ctx.getHandler(),
+            ctx.getClass()
+        ]);
+        if (typeof role === 'object') {
+            // used to bypass the check, the guard is called without argument, the value is '{}'
+            return true;
+        }
+        if (role === undefined) {
+            this.logger.warn(`no role defined on : ${ctx.getClass().name}:${ctx.getHandler().name}`);
+            return false;
+        }
+        const req = ctx.switchToHttp().getRequest();
+        const authorized = req.user.haveRole(role);
+        if (!authorized) {
+            this.logger.warn(`does not have role : ${_user.USER_ROLE[role]}`);
+        }
+        return authorized;
+    }
+    constructor(reflector){
+        this.reflector = reflector;
+        this.logger = new _common.Logger(UserRolesGuard.name);
+    }
+};
+UserRolesGuard = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _core.Reflector === "undefined" ? Object : _core.Reflector
+    ])
+], UserRolesGuard);
+
+//# sourceMappingURL=roles.guard.js.map

package/server/applications/users/guards/roles.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/guards/roles.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { CanActivate, ExecutionContext, Injectable, Logger } from '@nestjs/common'\nimport { Reflector } from '@nestjs/core'\nimport { FastifyAuthenticatedRequest } from '../../../authentication/interfaces/auth-request.interface'\nimport { USER_ROLE } from '../constants/user'\nimport { UserHaveRole } from '../decorators/roles.decorator'\n\n@Injectable()\nexport class UserRolesGuard implements CanActivate {\n  private readonly logger = new Logger(UserRolesGuard.name)\n\n  constructor(private readonly reflector: Reflector) {}\n\n  canActivate(ctx: ExecutionContext): boolean {\n    const role: USER_ROLE = this.reflector.getAllAndOverride(UserHaveRole, [ctx.getHandler(), ctx.getClass()])\n    if (typeof role === 'object') {\n      // used to bypass the check, the guard is called without argument, the value is '{}'\n      return true\n    }\n    if (role === undefined) {\n      this.logger.warn(`no role defined on : ${ctx.getClass().name}:${ctx.getHandler().name}`)\n      return false\n    }\n    const req: FastifyAuthenticatedRequest = ctx.switchToHttp().getRequest()\n    const authorized: boolean = req.user.haveRole(role)\n    if (!authorized) {\n      this.logger.warn(`does not have role : ${USER_ROLE[role]}`)\n    }\n    return authorized\n  }\n}\n"],"names":["UserRolesGuard","canActivate","ctx","role","reflector","getAllAndOverride","UserHaveRole","getHandler","getClass","undefined","logger","warn","name","req","switchToHttp","getRequest","authorized","user","haveRole","USER_ROLE","Logger"],"mappings":"AAAA;;;;CAIC;;;;+BASYA;;;eAAAA;;;wBAPqD;sBACxC;sBAEA;gCACG;;;;;;;;;;AAGtB,IAAA,AAAMA,iBAAN,MAAMA;IAKXC,YAAYC,GAAqB,EAAW;QAC1C,MAAMC,OAAkB,IAAI,CAACC,SAAS,CAACC,iBAAiB,CAACC,4BAAY,EAAE;YAACJ,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QACzG,IAAI,OAAOL,SAAS,UAAU;YAC5B,oFAAoF;YACpF,OAAO;QACT;QACA,IAAIA,SAASM,WAAW;YACtB,IAAI,CAACC,MAAM,CAACC,IAAI,CAAC,CAAC,qBAAqB,EAAET,IAAIM,QAAQ,GAAGI,IAAI,CAAC,CAAC,EAAEV,IAAIK,UAAU,GAAGK,IAAI,EAAE;YACvF,OAAO;QACT;QACA,MAAMC,MAAmCX,IAAIY,YAAY,GAAGC,UAAU;QACtE,MAAMC,aAAsBH,IAAII,IAAI,CAACC,QAAQ,CAACf;QAC9C,IAAI,CAACa,YAAY;YACf,IAAI,CAACN,MAAM,CAACC,IAAI,CAAC,CAAC,qBAAqB,EAAEQ,eAAS,CAAChB,KAAK,EAAE;QAC5D;QACA,OAAOa;IACT;IAlBA,YAAY,AAAiBZ,SAAoB,CAAE;aAAtBA,YAAAA;aAFZM,SAAS,IAAIU,cAAM,CAACpB,eAAeY,IAAI;IAEJ;AAmBtD"}

package/server/applications/users/guards/roles.guard.spec.js

@@ -0,0 +1,90 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+const _tsjest = require("@golevelup/ts-jest");
+const _common = require("@nestjs/common");
+const _core = require("@nestjs/core");
+const _user = require("../constants/user");
+const _rolesdecorator = require("../decorators/roles.decorator");
+const _usermodel = require("../models/user.model");
+const _test = require("../utils/test");
+const _rolesguard = require("./roles.guard");
+describe(_rolesguard.UserRolesGuard.name, ()=>{
+    let reflector;
+    let rolesGuard;
+    let userTest;
+    let context;
+    beforeAll(async ()=>{
+        reflector = new _core.Reflector();
+        rolesGuard = new _rolesguard.UserRolesGuard(reflector);
+        userTest = new _usermodel.UserModel((0, _test.generateUserTest)());
+        _common.Logger.overrideLogger([
+            'fatal'
+        ]);
+    });
+    it('should be defined', ()=>{
+        expect(reflector).toBeDefined();
+        expect(rolesGuard).toBeDefined();
+        expect(userTest).toBeDefined();
+    });
+    it('should pass with a valid role', async ()=>{
+        userTest.role = _user.USER_ROLE.GUEST;
+        context = (0, _tsjest.createMock)();
+        (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.GUEST)(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(rolesGuard.canActivate(context)).toBe(true);
+    });
+    it('should pass with a higher user role', async ()=>{
+        userTest.role = _user.USER_ROLE.USER;
+        context = (0, _tsjest.createMock)();
+        (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.GUEST)(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(rolesGuard.canActivate(context)).toBe(true);
+    });
+    it('should not pass with a lower role', async ()=>{
+        userTest.role = _user.USER_ROLE.GUEST;
+        context = (0, _tsjest.createMock)();
+        (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.USER)(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(rolesGuard.canActivate(context)).toBeFalsy();
+    });
+    it('should not pass with an undefined user role', async ()=>{
+        userTest.role = undefined;
+        context = (0, _tsjest.createMock)();
+        (0, _rolesdecorator.UserHaveRole)(_user.USER_ROLE.USER)(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(rolesGuard.canActivate(context)).toBeFalsy();
+    });
+    it('should not pass with a missing decorator', async ()=>{
+        userTest.role = _user.USER_ROLE.USER;
+        context = (0, _tsjest.createMock)();
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(rolesGuard.canActivate(context)).toBeFalsy();
+    });
+    it('should pass with an empty decorator', async ()=>{
+        userTest.role = _user.USER_ROLE.USER;
+        context = (0, _tsjest.createMock)();
+        (0, _rolesdecorator.UserHaveRole)()(context.getHandler());
+        context.switchToHttp().getRequest.mockReturnValue({
+            user: userTest
+        });
+        expect(rolesGuard.canActivate(context)).toBeTruthy();
+    });
+});
+
+//# sourceMappingURL=roles.guard.spec.js.map

package/server/applications/users/guards/roles.guard.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/guards/roles.guard.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { createMock, DeepMocked } from '@golevelup/ts-jest'\nimport { ExecutionContext, Logger } from '@nestjs/common'\nimport { Reflector } from '@nestjs/core'\nimport { USER_ROLE } from '../constants/user'\nimport { UserHaveRole } from '../decorators/roles.decorator'\nimport { UserModel } from '../models/user.model'\nimport { generateUserTest } from '../utils/test'\nimport { UserRolesGuard } from './roles.guard'\n\ndescribe(UserRolesGuard.name, () => {\n  let reflector: Reflector\n  let rolesGuard: UserRolesGuard\n  let userTest: UserModel\n  let context: DeepMocked<ExecutionContext>\n\n  beforeAll(async () => {\n    reflector = new Reflector()\n    rolesGuard = new UserRolesGuard(reflector)\n    userTest = new UserModel(generateUserTest())\n    Logger.overrideLogger(['fatal'])\n  })\n\n  it('should be defined', () => {\n    expect(reflector).toBeDefined()\n    expect(rolesGuard).toBeDefined()\n    expect(userTest).toBeDefined()\n  })\n\n  it('should pass with a valid role', async () => {\n    userTest.role = USER_ROLE.GUEST\n    context = createMock<ExecutionContext>()\n    UserHaveRole(USER_ROLE.GUEST)(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(rolesGuard.canActivate(context)).toBe(true)\n  })\n\n  it('should pass with a higher user role', async () => {\n    userTest.role = USER_ROLE.USER\n    context = createMock<ExecutionContext>()\n    UserHaveRole(USER_ROLE.GUEST)(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(rolesGuard.canActivate(context)).toBe(true)\n  })\n\n  it('should not pass with a lower role', async () => {\n    userTest.role = USER_ROLE.GUEST\n    context = createMock<ExecutionContext>()\n    UserHaveRole(USER_ROLE.USER)(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(rolesGuard.canActivate(context)).toBeFalsy()\n  })\n\n  it('should not pass with an undefined user role', async () => {\n    userTest.role = undefined\n    context = createMock<ExecutionContext>()\n    UserHaveRole(USER_ROLE.USER)(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(rolesGuard.canActivate(context)).toBeFalsy()\n  })\n\n  it('should not pass with a missing decorator', async () => {\n    userTest.role = USER_ROLE.USER\n    context = createMock<ExecutionContext>()\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(rolesGuard.canActivate(context)).toBeFalsy()\n  })\n\n  it('should pass with an empty decorator', async () => {\n    userTest.role = USER_ROLE.USER\n    context = createMock<ExecutionContext>()\n    UserHaveRole()(context.getHandler())\n    context.switchToHttp().getRequest.mockReturnValue({\n      user: userTest\n    })\n    expect(rolesGuard.canActivate(context)).toBeTruthy()\n  })\n})\n"],"names":["describe","UserRolesGuard","name","reflector","rolesGuard","userTest","context","beforeAll","Reflector","UserModel","generateUserTest","Logger","overrideLogger","it","expect","toBeDefined","role","USER_ROLE","GUEST","createMock","UserHaveRole","getHandler","switchToHttp","getRequest","mockReturnValue","user","canActivate","toBe","USER","toBeFalsy","undefined","toBeTruthy"],"mappings":"AAAA;;;;CAIC;;;;wBAEsC;wBACE;sBACf;sBACA;gCACG;2BACH;sBACO;4BACF;AAE/BA,SAASC,0BAAc,CAACC,IAAI,EAAE;IAC5B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJC,UAAU;QACRJ,YAAY,IAAIK,eAAS;QACzBJ,aAAa,IAAIH,0BAAc,CAACE;QAChCE,WAAW,IAAII,oBAAS,CAACC,IAAAA,sBAAgB;QACzCC,cAAM,CAACC,cAAc,CAAC;YAAC;SAAQ;IACjC;IAEAC,GAAG,qBAAqB;QACtBC,OAAOX,WAAWY,WAAW;QAC7BD,OAAOV,YAAYW,WAAW;QAC9BD,OAAOT,UAAUU,WAAW;IAC9B;IAEAF,GAAG,iCAAiC;QAClCR,SAASW,IAAI,GAAGC,eAAS,CAACC,KAAK;QAC/BZ,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,4BAAY,EAACH,eAAS,CAACC,KAAK,EAAEZ,QAAQe,UAAU;QAChDf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,WAAWsB,WAAW,CAACpB,UAAUqB,IAAI,CAAC;IAC/C;IAEAd,GAAG,uCAAuC;QACxCR,SAASW,IAAI,GAAGC,eAAS,CAACW,IAAI;QAC9BtB,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,4BAAY,EAACH,eAAS,CAACC,KAAK,EAAEZ,QAAQe,UAAU;QAChDf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,WAAWsB,WAAW,CAACpB,UAAUqB,IAAI,CAAC;IAC/C;IAEAd,GAAG,qCAAqC;QACtCR,SAASW,IAAI,GAAGC,eAAS,CAACC,KAAK;QAC/BZ,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,4BAAY,EAACH,eAAS,CAACW,IAAI,EAAEtB,QAAQe,UAAU;QAC/Cf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,WAAWsB,WAAW,CAACpB,UAAUuB,SAAS;IACnD;IAEAhB,GAAG,+CAA+C;QAChDR,SAASW,IAAI,GAAGc;QAChBxB,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,4BAAY,EAACH,eAAS,CAACW,IAAI,EAAEtB,QAAQe,UAAU;QAC/Cf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,WAAWsB,WAAW,CAACpB,UAAUuB,SAAS;IACnD;IAEAhB,GAAG,4CAA4C;QAC7CR,SAASW,IAAI,GAAGC,eAAS,CAACW,IAAI;QAC9BtB,UAAUa,IAAAA,kBAAU;QACpBb,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,WAAWsB,WAAW,CAACpB,UAAUuB,SAAS;IACnD;IAEAhB,GAAG,uCAAuC;QACxCR,SAASW,IAAI,GAAGC,eAAS,CAACW,IAAI;QAC9BtB,UAAUa,IAAAA,kBAAU;QACpBC,IAAAA,4BAAY,IAAGd,QAAQe,UAAU;QACjCf,QAAQgB,YAAY,GAAGC,UAAU,CAACC,eAAe,CAAC;YAChDC,MAAMpB;QACR;QACAS,OAAOV,WAAWsB,WAAW,CAACpB,UAAUyB,UAAU;IACpD;AACF"}

package/server/applications/users/interfaces/admin-group.interface.js

@@ -0,0 +1,10 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+
+//# sourceMappingURL=admin-group.interface.js.map

package/server/applications/users/interfaces/admin-group.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/interfaces/admin-group.interface.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { GROUP_TYPE, GROUP_VISIBILITY } from '../constants/group'\nimport type { Group } from '../schemas/group.interface'\n\nexport interface AdminGroup extends Omit<Group, 'parentId' | 'type'> {\n  id: number\n  name: string\n  type: GROUP_TYPE\n  description: string\n  permissions: string\n  visibility: GROUP_VISIBILITY\n  createdAt: Date\n  modifiedAt: Date\n  parent: Pick<Group, 'id' | 'name'>\n}\n"],"names":[],"mappings":"AAAA;;;;CAIC"}