@techelusive/nest-auth 0.0.0-stage → 0.2.0

package/dist/features/one-time-codes/one-time-codes.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-time-codes.service.js","sourceRoot":"","sources":["../../../src/features/one-time-codes/one-time-codes.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,qCAAuD;AAEvD,oDAAgD;AAChD,mEAAkH;AAClH,2CAOqB;AACrB,kDAAqE;AAQrE;;;;;;;GAOG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IACb,QAAQ,CAAa;IAEtC,YAAwC,OAAoB;QAC1D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IACrC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,UAAU,CAAC,OAAoB,EAAE,WAAmB,EAAE,KAAgB;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,4BAAiB,CAAC,CAAC;QAC7D,MAAM,kBAAkB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,kBAAkB,GAAG,kCAAsB,CAAC,CAAC;QACpG,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,IAAA,kBAAQ,EAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,CAAC;QACtH,IAAI,YAAY;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAElH,MAAM,IAAI,GAAG,IAAA,kCAAiB,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAA,2BAAU,GAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;YACpD,8BAA8B;YAC9B,MAAM,WAAW,CAAC,MAAM,CAAC,4BAAiB,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAA,gBAAM,GAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAChH,MAAM,WAAW,CAAC,MAAM,CAAC,4BAAiB,EAAE;gBAC1C,OAAO;gBACP,WAAW;gBACX,IAAI;gBACJ,QAAQ,EAAE,IAAA,8BAAa,EAAC,IAAI,EAAE,IAAI,CAAC;gBACnC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,gBAAgB,GAAG,6BAAiB,GAAG,kCAAsB,CAAC;aACtG,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,OAAoB,EAAE,WAAmB,EAAE,SAAkB;QAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,4BAAiB,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAA,gBAAM,GAAE,EAAE;YACjD,KAAK,EAAE,EAAE,SAAS,EAAE,sBAAU,CAAC,WAAW,EAAE;SAC7C,CAAC,CAAC;QACH,MAAM,QAAQ,GACZ,UAAU,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,cAAc,GAAG,sCAA0B,CAAC;QACtH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,UAAU,CAAC,CAAC;QAE3D,MAAM,WAAW,GACf,OAAO,SAAS,KAAK,QAAQ,IAAI,IAAA,mCAAkB,EAAC,IAAA,8BAAa,EAAC,SAAS,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC7H,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,sCAA0B,GAAG,UAAU,CAAC,cAAc,GAAG,CAAC,CAAC;YAChF,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,oFAAoF;QACpF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAA,gBAAM,GAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;CACF,CAAA;AAtEY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAIE,WAAA,IAAA,eAAM,EAAC,8BAAkB,CAAC,CAAA;;GAH5B,mBAAmB,CAsE/B"}

package/dist/features/organizations/organizations.controller.d.ts

@@ -0,0 +1,220 @@
+import { RequestContext } from '../../common/request-context.js';
+import { AccessTokenClaims } from '../sessions/session.types.js';
+import { SettingsService } from '../settings/settings.service.js';
+import { AcceptInvitationInput, ChangeMemberRoleInput, CreateOrganizationInput, InviteMemberInput, SwitchOrganizationInput, UpdateOrganizationInput } from './organizations.dto';
+import { OrganizationsService } from './organizations.service';
+/**
+ * Organizations / teams. Every route needs a signed-in user; roles are checked per organization.
+ *
+ *   GET    /auth/organizations                                   mine, with my role
+ *   POST   /auth/organizations                                   create (I become owner)
+ *   POST   /auth/organizations/switch                            work in an organization -> new access token
+ *   POST   /auth/organizations/invitations/accept                accept an emailed invitation
+ *   GET    /auth/organizations/:id                               details
+ *   PATCH  /auth/organizations/:id                               rename etc. (admin+)
+ *   DELETE /auth/organizations/:id                               delete (owner)
+ *   GET    /auth/organizations/:id/members                       members
+ *   PATCH  /auth/organizations/:id/members/:userId               change role (admin+)
+ *   DELETE /auth/organizations/:id/members/:userId               remove member, or leave (own id)
+ *   GET    /auth/organizations/:id/invitations                   open invitations (admin+)
+ *   POST   /auth/organizations/:id/invitations                   invite by email (admin+)
+ *   DELETE /auth/organizations/:id/invitations/:invitationId     cancel invitation (admin+)
+ */
+export declare class OrganizationsController {
+    private readonly organizations;
+    private readonly settingsService;
+    constructor(organizations: OrganizationsService, settingsService: SettingsService);
+    /**
+     * GET /auth/organizations — The organizations the signed-in user belongs to, with their role.
+     *
+     * @param userId - From the access token.
+     * @returns The organizations.
+     */
+    listMine(userId: string): Promise<{
+        success: boolean;
+        organizations: {
+            id: any;
+            name: any;
+            slug: any;
+            metadata: any;
+            role: import("../../constants.js").OrganizationRole;
+            joinedAt: string;
+        }[];
+    }>;
+    /**
+     * POST /auth/organizations — Creates an organization; the user becomes its owner.
+     * App admins may create one even when `allowUsersToCreate` is off.
+     *
+     * @param user - The access token's claims (user id and roles).
+     * @param body - `{ name, slug }`.
+     * @param request - Who is asking.
+     * @returns The new organization.
+     */
+    create(user: AccessTokenClaims, body: CreateOrganizationInput, request: RequestContext): Promise<{
+        success: boolean;
+        organization: {
+            name: string;
+            slug: string;
+            metadata: {};
+            createdByUserId: string;
+        } & import("../..").OrganizationEntity;
+    }>;
+    /**
+     * POST /auth/organizations/switch — Works in an organization from now on (or none).
+     *
+     * @param user - The access token's claims (user id and session id).
+     * @param body - `{ organizationId }`, or null for none.
+     * @returns A new access token carrying "org_id" and "org_role".
+     */
+    switch(user: AccessTokenClaims, body: SwitchOrganizationInput): Promise<{
+        success: true;
+        accessToken: string;
+        expiresIn: number;
+        organizationId: string | null;
+    }>;
+    /**
+     * POST /auth/organizations/invitations/accept — Accepts an emailed invitation.
+     *
+     * @param userId - From the access token.
+     * @param body - `{ token }` from the invitation link.
+     * @param request - Who is asking.
+     * @returns The organization joined and the role given.
+     */
+    acceptInvitation(userId: string, body: AcceptInvitationInput, request: RequestContext): Promise<{
+        success: true;
+        organizationId: string;
+        role: import("../../constants.js").OrganizationRole;
+    }>;
+    /**
+     * GET /auth/organizations/:organizationId — Details of one organization. Members only.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @returns The organization plus `myRole`.
+     */
+    get(userId: string, organizationId: string): Promise<{
+        success: boolean;
+        organization: {
+            myRole: import("../../constants.js").OrganizationRole;
+            id: string;
+            name: string;
+            slug: string;
+            metadata: import("../..").JsonObject;
+            createdByUserId: string | null;
+            createdAt: Date;
+            updatedAt: Date;
+        };
+    }>;
+    /**
+     * PATCH /auth/organizations/:organizationId — Renames it, changes its slug or metadata. Admins and owners.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param body - The fields to change.
+     * @param request - Who is asking.
+     * @returns The updated organization.
+     */
+    update(userId: string, organizationId: string, body: UpdateOrganizationInput, request: RequestContext): Promise<{
+        success: boolean;
+        organization: import("../..").OrganizationEntity;
+    }>;
+    /**
+     * DELETE /auth/organizations/:organizationId — Deletes the organization. Owners only.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    delete(userId: string, organizationId: string, request: RequestContext): Promise<{
+        success: true;
+    }>;
+    /**
+     * GET /auth/organizations/:organizationId/members — Lists members. Members only.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @returns The members.
+     */
+    listMembers(userId: string, organizationId: string): Promise<{
+        success: boolean;
+        members: {
+            userId: any;
+            email: any;
+            firstName: any;
+            lastName: any;
+            role: import("../../constants.js").OrganizationRole;
+            joinedAt: string;
+        }[];
+    }>;
+    /**
+     * PATCH /auth/organizations/:organizationId/members/:memberUserId — Changes a member's role.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param memberUserId - The member whose role changes (from the URL).
+     * @param body - `{ role }`.
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    changeRole(userId: string, organizationId: string, memberUserId: string, body: ChangeMemberRoleInput, request: RequestContext): Promise<{
+        success: true;
+    }>;
+    /**
+     * DELETE /auth/organizations/:organizationId/members/:memberUserId — Removes a member,
+     * or leaves when `memberUserId` is the signed-in user.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param memberUserId - The member to remove (from the URL).
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    removeMember(userId: string, organizationId: string, memberUserId: string, request: RequestContext): Promise<{
+        success: true;
+    }>;
+    /**
+     * GET /auth/organizations/:organizationId/invitations — Open invitations. Admins and owners.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @returns The invitations.
+     */
+    listInvitations(userId: string, organizationId: string): Promise<{
+        success: boolean;
+        invitations: {
+            id: string;
+            organizationId: string;
+            email: string;
+            role: import("../../constants.js").OrganizationRole;
+            invitedByUserId: string;
+            expiresAt: Date;
+            acceptedAt: Date | null;
+            revokedAt: Date | null;
+            createdAt: Date;
+        }[];
+    }>;
+    /**
+     * POST /auth/organizations/:organizationId/invitations — Emails an invitation. Admins and owners.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param body - `{ email, role }`.
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    invite(userId: string, organizationId: string, body: InviteMemberInput, request: RequestContext): Promise<{
+        success: true;
+    }>;
+    /**
+     * DELETE /auth/organizations/:organizationId/invitations/:invitationId — Cancels an invitation.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param invitationId - From the URL.
+     * @returns `{ success: true }`.
+     */
+    revokeInvitation(userId: string, organizationId: string, invitationId: string): Promise<{
+        success: true;
+    }>;
+}

package/dist/features/organizations/organizations.controller.js

@@ -0,0 +1,337 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationsController = void 0;
+const common_1 = require("@nestjs/common");
+const strict_validation_pipe_1 = require("../../common/strict-validation.pipe.js");
+const request_context_1 = require("../../common/request-context.js");
+const auth_decorators_1 = require("../../guards/auth.decorators.js");
+const settings_service_1 = require("../settings/settings.service.js");
+const organizations_dto_1 = require("./organizations.dto");
+const organizations_service_1 = require("./organizations.service");
+const constants_1 = require("../../constants.js");
+const refresh_token_cookie_1 = require("../../common/refresh-token-cookie.js");
+/**
+ * Shorthand for the pipe that rejects route ids that aren't UUIDs (with a 400, before any query runs).
+ *
+ * @returns A new ParseUUIDPipe.
+ */
+const uuid = () => new common_1.ParseUUIDPipe();
+/**
+ * Organizations / teams. Every route needs a signed-in user; roles are checked per organization.
+ *
+ *   GET    /auth/organizations                                   mine, with my role
+ *   POST   /auth/organizations                                   create (I become owner)
+ *   POST   /auth/organizations/switch                            work in an organization -> new access token
+ *   POST   /auth/organizations/invitations/accept                accept an emailed invitation
+ *   GET    /auth/organizations/:id                               details
+ *   PATCH  /auth/organizations/:id                               rename etc. (admin+)
+ *   DELETE /auth/organizations/:id                               delete (owner)
+ *   GET    /auth/organizations/:id/members                       members
+ *   PATCH  /auth/organizations/:id/members/:userId               change role (admin+)
+ *   DELETE /auth/organizations/:id/members/:userId               remove member, or leave (own id)
+ *   GET    /auth/organizations/:id/invitations                   open invitations (admin+)
+ *   POST   /auth/organizations/:id/invitations                   invite by email (admin+)
+ *   DELETE /auth/organizations/:id/invitations/:invitationId     cancel invitation (admin+)
+ */
+let OrganizationsController = class OrganizationsController {
+    organizations;
+    settingsService;
+    constructor(organizations, settingsService) {
+        this.organizations = organizations;
+        this.settingsService = settingsService;
+    }
+    /**
+     * GET /auth/organizations — The organizations the signed-in user belongs to, with their role.
+     *
+     * @param userId - From the access token.
+     * @returns The organizations.
+     */
+    async listMine(userId) {
+        return { success: true, organizations: await this.organizations.listMyOrganizations(userId) };
+    }
+    /**
+     * POST /auth/organizations — Creates an organization; the user becomes its owner.
+     * App admins may create one even when `allowUsersToCreate` is off.
+     *
+     * @param user - The access token's claims (user id and roles).
+     * @param body - `{ name, slug }`.
+     * @param request - Who is asking.
+     * @returns The new organization.
+     */
+    async create(user, body, request) {
+        const { adminRoles } = (await this.settingsService.getSettings()).admin;
+        const isAppAdmin = adminRoles.some((role) => user.roles.includes(role));
+        return { success: true, organization: await this.organizations.createOrganization(user.sub, body, isAppAdmin, request) };
+    }
+    /**
+     * POST /auth/organizations/switch — Works in an organization from now on (or none).
+     *
+     * @param user - The access token's claims (user id and session id).
+     * @param body - `{ organizationId }`, or null for none.
+     * @returns A new access token carrying "org_id" and "org_role".
+     */
+    switch(user, body) {
+        return this.organizations.switchActiveOrganization(user.sub, user.sid, body.organizationId);
+    }
+    /**
+     * POST /auth/organizations/invitations/accept — Accepts an emailed invitation.
+     *
+     * @param userId - From the access token.
+     * @param body - `{ token }` from the invitation link.
+     * @param request - Who is asking.
+     * @returns The organization joined and the role given.
+     */
+    acceptInvitation(userId, body, request) {
+        return this.organizations.acceptInvitation(userId, body.token, request);
+    }
+    /**
+     * GET /auth/organizations/:organizationId — Details of one organization. Members only.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @returns The organization plus `myRole`.
+     */
+    async get(userId, organizationId) {
+        return { success: true, organization: await this.organizations.getOrganization(organizationId, userId) };
+    }
+    /**
+     * PATCH /auth/organizations/:organizationId — Renames it, changes its slug or metadata. Admins and owners.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param body - The fields to change.
+     * @param request - Who is asking.
+     * @returns The updated organization.
+     */
+    async update(userId, organizationId, body, request) {
+        return { success: true, organization: await this.organizations.updateOrganization(organizationId, userId, body, request) };
+    }
+    /**
+     * DELETE /auth/organizations/:organizationId — Deletes the organization. Owners only.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    delete(userId, organizationId, request) {
+        return this.organizations.deleteOrganization(organizationId, userId, request);
+    }
+    /**
+     * GET /auth/organizations/:organizationId/members — Lists members. Members only.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @returns The members.
+     */
+    async listMembers(userId, organizationId) {
+        return { success: true, members: await this.organizations.listMembers(organizationId, userId) };
+    }
+    /**
+     * PATCH /auth/organizations/:organizationId/members/:memberUserId — Changes a member's role.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param memberUserId - The member whose role changes (from the URL).
+     * @param body - `{ role }`.
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    changeRole(userId, organizationId, memberUserId, body, request) {
+        return this.organizations.changeMemberRole(organizationId, userId, memberUserId, body.role, request);
+    }
+    /**
+     * DELETE /auth/organizations/:organizationId/members/:memberUserId — Removes a member,
+     * or leaves when `memberUserId` is the signed-in user.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param memberUserId - The member to remove (from the URL).
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    removeMember(userId, organizationId, memberUserId, request) {
+        return this.organizations.removeMember(organizationId, userId, memberUserId, request);
+    }
+    /**
+     * GET /auth/organizations/:organizationId/invitations — Open invitations. Admins and owners.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @returns The invitations.
+     */
+    async listInvitations(userId, organizationId) {
+        return { success: true, invitations: await this.organizations.listInvitations(organizationId, userId) };
+    }
+    /**
+     * POST /auth/organizations/:organizationId/invitations — Emails an invitation. Admins and owners.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param body - `{ email, role }`.
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    invite(userId, organizationId, body, request) {
+        return this.organizations.inviteMember(organizationId, userId, body.email, body.role, request);
+    }
+    /**
+     * DELETE /auth/organizations/:organizationId/invitations/:invitationId — Cancels an invitation.
+     *
+     * @param userId - From the access token.
+     * @param organizationId - From the URL.
+     * @param invitationId - From the URL.
+     * @returns `{ success: true }`.
+     */
+    revokeInvitation(userId, organizationId, invitationId) {
+        return this.organizations.revokeInvitation(organizationId, userId, invitationId);
+    }
+};
+exports.OrganizationsController = OrganizationsController;
+__decorate([
+    (0, common_1.Get)(),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], OrganizationsController.prototype, "listMine", null);
+__decorate([
+    (0, common_1.Post)(),
+    (0, auth_decorators_1.CheckSession)(),
+    __param(0, (0, auth_decorators_1.CurrentUser)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, organizations_dto_1.CreateOrganizationInput, Object]),
+    __metadata("design:returntype", Promise)
+], OrganizationsController.prototype, "create", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.organizations.switch),
+    (0, auth_decorators_1.CheckSession)(),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, auth_decorators_1.CurrentUser)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, organizations_dto_1.SwitchOrganizationInput]),
+    __metadata("design:returntype", void 0)
+], OrganizationsController.prototype, "switch", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.organizations.acceptInvitation),
+    (0, auth_decorators_1.CheckSession)(),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, organizations_dto_1.AcceptInvitationInput, Object]),
+    __metadata("design:returntype", void 0)
+], OrganizationsController.prototype, "acceptInvitation", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.organizations.organization),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], OrganizationsController.prototype, "get", null);
+__decorate([
+    (0, common_1.Patch)(constants_1.ROUTES.organizations.organization),
+    (0, auth_decorators_1.CheckSession)(),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, organizations_dto_1.UpdateOrganizationInput, Object]),
+    __metadata("design:returntype", Promise)
+], OrganizationsController.prototype, "update", null);
+__decorate([
+    (0, common_1.Delete)(constants_1.ROUTES.organizations.organization),
+    (0, auth_decorators_1.CheckSession)(),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __param(2, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", void 0)
+], OrganizationsController.prototype, "delete", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.organizations.members),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], OrganizationsController.prototype, "listMembers", null);
+__decorate([
+    (0, common_1.Patch)(constants_1.ROUTES.organizations.member),
+    (0, auth_decorators_1.CheckSession)(),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __param(2, (0, common_1.Param)(constants_1.ROUTE_PARAM.memberUserId, uuid())),
+    __param(3, (0, common_1.Body)()),
+    __param(4, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, organizations_dto_1.ChangeMemberRoleInput, Object]),
+    __metadata("design:returntype", void 0)
+], OrganizationsController.prototype, "changeRole", null);
+__decorate([
+    (0, common_1.Delete)(constants_1.ROUTES.organizations.member),
+    (0, auth_decorators_1.CheckSession)(),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __param(2, (0, common_1.Param)(constants_1.ROUTE_PARAM.memberUserId, uuid())),
+    __param(3, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object]),
+    __metadata("design:returntype", void 0)
+], OrganizationsController.prototype, "removeMember", null);
+__decorate([
+    (0, common_1.Get)(constants_1.ROUTES.organizations.invitations),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], OrganizationsController.prototype, "listInvitations", null);
+__decorate([
+    (0, common_1.Post)(constants_1.ROUTES.organizations.invitations),
+    (0, auth_decorators_1.CheckSession)(),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, request_context_1.CurrentRequest)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, organizations_dto_1.InviteMemberInput, Object]),
+    __metadata("design:returntype", void 0)
+], OrganizationsController.prototype, "invite", null);
+__decorate([
+    (0, common_1.Delete)(constants_1.ROUTES.organizations.invitation),
+    (0, auth_decorators_1.CheckSession)(),
+    __param(0, (0, auth_decorators_1.CurrentUserId)()),
+    __param(1, (0, common_1.Param)(constants_1.ROUTE_PARAM.organizationId, uuid())),
+    __param(2, (0, common_1.Param)(constants_1.ROUTE_PARAM.invitationId, uuid())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", void 0)
+], OrganizationsController.prototype, "revokeInvitation", null);
+exports.OrganizationsController = OrganizationsController = __decorate([
+    (0, common_1.Controller)(constants_1.ROUTES.organizations.prefix),
+    (0, refresh_token_cookie_1.LibraryController)(),
+    (0, common_1.UsePipes)(strict_validation_pipe_1.strictValidationPipe),
+    __metadata("design:paramtypes", [organizations_service_1.OrganizationsService,
+        settings_service_1.SettingsService])
+], OrganizationsController);
+//# sourceMappingURL=organizations.controller.js.map

package/dist/features/organizations/organizations.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.controller.js","sourceRoot":"","sources":["../../../src/features/organizations/organizations.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAkI;AAClI,4EAAuE;AACvE,8DAA0E;AAC1E,8DAAoF;AAEpF,2EAAuE;AACvE,2DAO6B;AAC7B,mEAA+D;AAC/D,2CAAkD;AAClD,wEAAkE;AAElE;;;;GAIG;AACH,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,sBAAa,EAAE,CAAC;AAEvC;;;;;;;;;;;;;;;;GAgBG;AAII,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAEf;IACA;IAFnB,YACmB,aAAmC,EACnC,eAAgC;QADhC,kBAAa,GAAb,aAAa,CAAsB;QACnC,oBAAe,GAAf,eAAe,CAAiB;IAChD,CAAC;IAEJ;;;;;OAKG;IAEG,AAAN,KAAK,CAAC,QAAQ,CAAkB,MAAc;QAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;IAChG,CAAC;IAED;;;;;;;;OAQG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAgB,IAAuB,EAAU,IAA6B,EAAoB,OAAuB;QACnI,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;QACxE,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;IAC3H,CAAC;IAED;;;;;;OAMG;IAIH,MAAM,CAAgB,IAAuB,EAAU,IAA6B;QAClF,OAAO,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;;OAOG;IAIH,gBAAgB,CAAkB,MAAc,EAAU,IAA2B,EAAoB,OAAuB;QAC9H,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,GAAG,CAAkB,MAAc,EAA6C,cAAsB;QAC1G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC;IAC3G,CAAC;IAED;;;;;;;;OAQG;IAGG,AAAN,KAAK,CAAC,MAAM,CACO,MAAc,EACY,cAAsB,EACzD,IAA6B,EACnB,OAAuB;QAEzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;IAC7H,CAAC;IAED;;;;;;;OAOG;IAGH,MAAM,CAAkB,MAAc,EAA6C,cAAsB,EAAoB,OAAuB;QAClJ,OAAO,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChF,CAAC;IAED;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,WAAW,CAAkB,MAAc,EAA6C,cAAsB;QAClH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC;IAClG,CAAC;IAED;;;;;;;;;OASG;IAGH,UAAU,CACS,MAAc,EACY,cAAsB,EACxB,YAAoB,EACrD,IAA2B,EACjB,OAAuB;QAEzC,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvG,CAAC;IAED;;;;;;;;;OASG;IAGH,YAAY,CACO,MAAc,EACY,cAAsB,EACxB,YAAoB,EAC3C,OAAuB;QAEzC,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IAED;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,eAAe,CAAkB,MAAc,EAA6C,cAAsB;QACtH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC;IAC1G,CAAC;IAED;;;;;;;;OAQG;IAGH,MAAM,CACa,MAAc,EACY,cAAsB,EACzD,IAAuB,EACb,OAAuB;QAEzC,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjG,CAAC;IAED;;;;;;;OAOG;IAGH,gBAAgB,CACG,MAAc,EACY,cAAsB,EACxB,YAAoB;QAE7D,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACnF,CAAC;CACF,CAAA;AArNY,0DAAuB;AAa5B;IADL,IAAA,YAAG,GAAE;IACU,WAAA,IAAA,+BAAa,GAAE,CAAA;;;;uDAE9B;AAaK;IAFL,IAAA,aAAI,GAAE;IACN,IAAA,8BAAY,GAAE;IACD,WAAA,IAAA,6BAAW,GAAE,CAAA;IAA2B,WAAA,IAAA,aAAI,GAAE,CAAA;IAAiC,WAAA,IAAA,gCAAc,GAAE,CAAA;;6CAA1C,2CAAuB;;qDAIzF;AAYD;IAHC,IAAA,aAAI,EAAC,kBAAM,CAAC,aAAa,CAAC,MAAM,CAAC;IACjC,IAAA,8BAAY,GAAE;IACd,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IAChB,WAAA,IAAA,6BAAW,GAAE,CAAA;IAA2B,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,2CAAuB;;qDAEnF;AAaD;IAHC,IAAA,aAAI,EAAC,kBAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC;IAC3C,IAAA,8BAAY,GAAE;IACd,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACN,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAkB,WAAA,IAAA,aAAI,GAAE,CAAA;IAA+B,WAAA,IAAA,gCAAc,GAAE,CAAA;;6CAAxC,yCAAqB;;+DAEpF;AAUK;IADL,IAAA,YAAG,EAAC,kBAAM,CAAC,aAAa,CAAC,YAAY,CAAC;IAC5B,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAkB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;;;;kDAEpF;AAaK;IAFL,IAAA,cAAK,EAAC,kBAAM,CAAC,aAAa,CAAC,YAAY,CAAC;IACxC,IAAA,8BAAY,GAAE;IAEZ,WAAA,IAAA,+BAAa,GAAE,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gCAAc,GAAE,CAAA;;qDADH,2CAAuB;;qDAItC;AAYD;IAFC,IAAA,eAAM,EAAC,kBAAM,CAAC,aAAa,CAAC,YAAY,CAAC;IACzC,IAAA,8BAAY,GAAE;IACP,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAkB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IAA0B,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;qDAE3H;AAUK;IADL,IAAA,YAAG,EAAC,kBAAM,CAAC,aAAa,CAAC,OAAO,CAAC;IACf,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAkB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;;;;0DAE5F;AAcD;IAFC,IAAA,cAAK,EAAC,kBAAM,CAAC,aAAa,CAAC,MAAM,CAAC;IAClC,IAAA,8BAAY,GAAE;IAEZ,WAAA,IAAA,+BAAa,GAAE,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gCAAc,GAAE,CAAA;;6DADH,yCAAqB;;yDAIpC;AAcD;IAFC,IAAA,eAAM,EAAC,kBAAM,CAAC,aAAa,CAAC,MAAM,CAAC;IACnC,IAAA,8BAAY,GAAE;IAEZ,WAAA,IAAA,+BAAa,GAAE,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,WAAA,IAAA,gCAAc,GAAE,CAAA;;;;2DAGlB;AAUK;IADL,IAAA,YAAG,EAAC,kBAAM,CAAC,aAAa,CAAC,WAAW,CAAC;IACf,WAAA,IAAA,+BAAa,GAAE,CAAA;IAAkB,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;;;;8DAEhG;AAaD;IAFC,IAAA,aAAI,EAAC,kBAAM,CAAC,aAAa,CAAC,WAAW,CAAC;IACtC,IAAA,8BAAY,GAAE;IAEZ,WAAA,IAAA,+BAAa,GAAE,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gCAAc,GAAE,CAAA;;qDADH,qCAAiB;;qDAIhC;AAYD;IAFC,IAAA,eAAM,EAAC,kBAAM,CAAC,aAAa,CAAC,UAAU,CAAC;IACvC,IAAA,8BAAY,GAAE;IAEZ,WAAA,IAAA,+BAAa,GAAE,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,WAAA,IAAA,cAAK,EAAC,uBAAW,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;;;;+DAGzC;kCApNU,uBAAuB;IAHnC,IAAA,mBAAU,EAAC,kBAAM,CAAC,aAAa,CAAC,MAAM,CAAC;IACvC,IAAA,wCAAiB,GAAE;IACnB,IAAA,iBAAQ,EAAC,6CAAoB,CAAC;qCAGK,4CAAoB;QAClB,kCAAe;GAHxC,uBAAuB,CAqNnC"}

package/dist/features/organizations/organizations.dto.d.ts

@@ -0,0 +1,31 @@
+import { OrganizationRole } from '../../constants.js';
+import type { JsonObject } from '../../database/entities/json-object.js';
+/** POST /auth/organizations */
+export declare class CreateOrganizationInput {
+    name: string;
+    /** Unique handle: lowercase letters, digits and dashes, e.g. "acme-india". */
+    slug: string;
+}
+/** PATCH /auth/organizations/:organizationId */
+export declare class UpdateOrganizationInput {
+    name?: string;
+    slug?: string;
+    metadata?: JsonObject;
+}
+/** POST /auth/organizations/:organizationId/invitations */
+export declare class InviteMemberInput {
+    email: string;
+    role: OrganizationRole;
+}
+/** PATCH /auth/organizations/:organizationId/members/:userId */
+export declare class ChangeMemberRoleInput {
+    role: OrganizationRole;
+}
+/** POST /auth/organizations/invitations/accept */
+export declare class AcceptInvitationInput {
+    token: string;
+}
+/** POST /auth/organizations/switch. Send null to work outside any organization. */
+export declare class SwitchOrganizationInput {
+    organizationId: string | null;
+}