@tomei/sso 0.13.0 → 0.15.0

package/dist/src/components/login-user/login-user.js

@@ -1,215 +1,215 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LoginUser = void 0;
-const general_1 = require("@tomei/general");
-const user_repository_1 = require("./user.repository");
-const system_repository_1 = require("../system/system.repository");
-const system_access_repository_1 = require("../system-access/system-access.repository");
-const login_history_repository_1 = require("../login-history/login-history.repository");
-const user_user_group_repository_1 = require("../user-user-group/user-user-group.repository");
-const password_hash_service_1 = require("../password-hash/password-hash.service");
-const user_group_repository_1 = require("../user-group/user-group.repository");
-const mailer_1 = require("@tomei/mailer");
-const staff_entity_1 = require("../../models/staff.entity");
-const system_privilege_entity_1 = require("../../models/system-privilege.entity");
-const group_system_privilege_entity_1 = require("../../models/group-system-privilege.entity");
-const group_role_privilege_entity_1 = require("../../models/group-role-privilege.entity");
-const user_group_entity_1 = require("../../models/user-group.entity");
-class LoginUser extends general_1.LoginUserBase {
-    getDetails() {
-        return __awaiter(this, void 0, void 0, function* () {
-            return {
-                FullName: this.FullName,
-                IDNo: this.IDNo,
-                IDType: this.IDType,
-                Email: this.Email,
-                ContactNo: this.ContactNo,
-            };
-        });
-    }
-    constructor(sessionService, dbTransaction, userInfo) {
-        super();
-        this.ObjectName = 'User';
-        this.TableName = 'sso_users';
-        this._PasswordHashService = new password_hash_service_1.PasswordHashService();
-        this._SessionService = sessionService;
-        if (dbTransaction) {
-            this._dbTransaction = dbTransaction;
-        }
-        if (userInfo) {
-            this.ObjectId = userInfo.ObjectId;
-            this.FullName = userInfo.FullName;
-            this.IDNo = userInfo.IDNo;
-            this.Email = userInfo.Email;
-            this.ContactNo = userInfo.ContactNo;
-            this.Password = userInfo.Password;
-            this.staffs = userInfo.staffs;
-        }
-    }
-    static init(sessionService, userId, dbTransaction = null) {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (userId) {
-                if (dbTransaction) {
-                    LoginUser._Repository = new user_repository_1.UserRepository();
-                }
-                const user = yield LoginUser._Repository.findOne({
-                    where: {
-                        id: Number(userId),
-                    },
-                    include: [
-                        {
-                            model: staff_entity_1.default,
-                        },
-                    ],
-                });
-                if (!user) {
-                    throw new Error('Invalid credentials.');
-                }
-                if (user) {
-                    const userInfo = {
-                        ObjectId: user.id.toString(),
-                        FullName: user.Staff.FullName,
-                        IDNo: user.Staff.IdNo,
-                        ContactNo: user.Staff.Mobile,
-                        Email: user.Email,
-                        Password: user.Password,
-                        staffs: user.Staff,
-                    };
-                    return new LoginUser(sessionService, dbTransaction, userInfo);
-                }
-                else {
-                    throw new Error('User not found');
-                }
-            }
-            return new LoginUser(sessionService, dbTransaction);
-        });
-    }
-    login(systemCode, email, password, ipAddress) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                if (!this.ObjectId) {
-                    const user = yield LoginUser._Repository.findOne({
-                        where: {
-                            Email: email,
-                        },
-                        include: [
-                            {
-                                model: staff_entity_1.default,
-                            },
-                        ],
-                    });
-                    const userInfo = {
-                        ObjectId: user.id.toString(),
-                        FullName: user.Staff.FullName,
-                        IDNo: user.Staff.IdNo,
-                        ContactNo: user.Staff.Mobile,
-                        Email: user.Staff.Email,
-                        Password: user.Password,
-                        staffs: user.Staff,
-                    };
-                    this.ObjectId = userInfo.ObjectId;
-                    this.FullName = userInfo.FullName;
-                    this.IDNo = userInfo.IDNo;
-                    this.Email = userInfo.Email;
-                    this.ContactNo = userInfo.ContactNo;
-                    this.Password = userInfo.Password;
-                    this.staffs = userInfo.staffs;
-                }
-                if (this.ObjectId && this.Email !== email) {
-                    throw new Error('Invalid credentials.');
-                }
-                const isPasswordValid = yield this._PasswordHashService.verify(password, this.Password);
-                if (!isPasswordValid) {
-                    throw new Error('Invalid credentials.');
-                }
-                const system = yield LoginUser._SystemRepository.findOne({
-                    where: {
-                        code: systemCode,
-                    },
-                });
-                if (!system) {
-                    throw new Error('Invalid system code.');
-                }
-                yield this.checkSystemAccess(this.ObjectId, system.id);
-                const userSession = yield this._SessionService.retrieveUserSession(this.ObjectId);
-                let systemLogin = userSession.systemLogins.find((system) => system.code === systemCode);
-                const { randomUUID } = require('crypto');
-                const sessionId = randomUUID();
-                if (systemLogin) {
-                    systemLogin = systemLogin.sessionId = sessionId;
-                    userSession.systemLogins.map((system) => system.code === systemCode ? systemLogin : system);
-                }
-                else {
-                    const newLogin = {
-                        id: system.id.toString(),
-                        code: system.Code,
-                        sessionId: sessionId,
-                        privileges: yield this.getPrivileges(system.Code),
-                    };
-                    userSession.systemLogins.push(newLogin);
-                }
-                this._SessionService.setUserSession(this.ObjectId, userSession);
-                yield LoginUser._LoginHistoryRepository.create({
-                    UserId: this.ObjectId,
-                    SystemId: system.id,
-                    OriginIp: ipAddress,
-                    CreatedAt: new Date(),
-                });
-                return `${this.ObjectId}:${sessionId}`;
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    checkSystemAccess(userId, systemId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const systemAccess = yield LoginUser._SystemAccessRepository.findOne({
-                    where: {
-                        UserId: userId,
-                        SystemId: systemId,
-                    },
-                });
-                if (!systemAccess) {
-                    throw new Error("User don't have access to the system.");
-                }
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    alertNewLogin(userId, systemId, ipAddress) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const userLogins = yield LoginUser._LoginHistoryRepository.findAll({
-                    where: {
-                        UserId: userId,
-                        SystemId: systemId,
-                    },
-                });
-                const gotPreviousLogins = (userLogins === null || userLogins === void 0 ? void 0 : userLogins.length) !== 0;
-                let ipFound = undefined;
-                if (gotPreviousLogins) {
-                    ipFound = userLogins.find((item) => item.OriginIp === ipAddress);
-                }
-                if (gotPreviousLogins && !ipFound) {
-                    const EMAIL_SENDER = process.env.EMAIL_SENDER || 'itd-system@tomei.com.my';
-                    const transporter = new mailer_1.SMTPMailer();
-                    yield transporter.sendMail({
-                        from: EMAIL_SENDER,
-                        to: this.Email,
-                        subject: 'New Login Alert',
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginUser = void 0;
+const general_1 = require("@tomei/general");
+const user_repository_1 = require("./user.repository");
+const system_repository_1 = require("../system/system.repository");
+const system_access_repository_1 = require("../system-access/system-access.repository");
+const login_history_repository_1 = require("../login-history/login-history.repository");
+const user_user_group_repository_1 = require("../user-user-group/user-user-group.repository");
+const password_hash_service_1 = require("../password-hash/password-hash.service");
+const user_group_repository_1 = require("../user-group/user-group.repository");
+const mailer_1 = require("@tomei/mailer");
+const staff_entity_1 = require("../../models/staff.entity");
+const system_privilege_entity_1 = require("../../models/system-privilege.entity");
+const group_system_privilege_entity_1 = require("../../models/group-system-privilege.entity");
+const group_role_privilege_entity_1 = require("../../models/group-role-privilege.entity");
+const user_group_entity_1 = require("../../models/user-group.entity");
+class LoginUser extends general_1.LoginUserBase {
+    getDetails() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return {
+                FullName: this.FullName,
+                IDNo: this.IDNo,
+                IDType: this.IDType,
+                Email: this.Email,
+                ContactNo: this.ContactNo,
+            };
+        });
+    }
+    constructor(sessionService, dbTransaction, userInfo) {
+        super();
+        this.ObjectName = 'User';
+        this.TableName = 'sso_users';
+        this._PasswordHashService = new password_hash_service_1.PasswordHashService();
+        this._SessionService = sessionService;
+        if (dbTransaction) {
+            this._dbTransaction = dbTransaction;
+        }
+        if (userInfo) {
+            this.ObjectId = userInfo.ObjectId;
+            this.FullName = userInfo.FullName;
+            this.IDNo = userInfo.IDNo;
+            this.Email = userInfo.Email;
+            this.ContactNo = userInfo.ContactNo;
+            this.Password = userInfo.Password;
+            this.staffs = userInfo.staffs;
+        }
+    }
+    static init(sessionService, userId, dbTransaction = null) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (userId) {
+                if (dbTransaction) {
+                    LoginUser._Repository = new user_repository_1.UserRepository();
+                }
+                const user = yield LoginUser._Repository.findOne({
+                    where: {
+                        id: Number(userId),
+                    },
+                    include: [
+                        {
+                            model: staff_entity_1.default,
+                        },
+                    ],
+                });
+                if (!user) {
+                    throw new Error('Invalid credentials.');
+                }
+                if (user) {
+                    const userInfo = {
+                        ObjectId: user.id.toString(),
+                        FullName: user.Staff.FullName,
+                        IDNo: user.Staff.IdNo,
+                        ContactNo: user.Staff.Mobile,
+                        Email: user.Email,
+                        Password: user.Password,
+                        staffs: user.Staff,
+                    };
+                    return new LoginUser(sessionService, dbTransaction, userInfo);
+                }
+                else {
+                    throw new Error('User not found');
+                }
+            }
+            return new LoginUser(sessionService, dbTransaction);
+        });
+    }
+    login(systemCode, email, password, ipAddress) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (!this.ObjectId) {
+                    const user = yield LoginUser._Repository.findOne({
+                        where: {
+                            Email: email,
+                        },
+                        include: [
+                            {
+                                model: staff_entity_1.default,
+                            },
+                        ],
+                    });
+                    const userInfo = {
+                        ObjectId: user.id.toString(),
+                        FullName: user.Staff.FullName,
+                        IDNo: user.Staff.IdNo,
+                        ContactNo: user.Staff.Mobile,
+                        Email: user.Staff.Email,
+                        Password: user.Password,
+                        staffs: user.Staff,
+                    };
+                    this.ObjectId = userInfo.ObjectId;
+                    this.FullName = userInfo.FullName;
+                    this.IDNo = userInfo.IDNo;
+                    this.Email = userInfo.Email;
+                    this.ContactNo = userInfo.ContactNo;
+                    this.Password = userInfo.Password;
+                    this.staffs = userInfo.staffs;
+                }
+                if (this.ObjectId && this.Email !== email) {
+                    throw new Error('Invalid credentials.');
+                }
+                const isPasswordValid = yield this._PasswordHashService.verify(password, this.Password);
+                if (!isPasswordValid) {
+                    throw new Error('Invalid credentials.');
+                }
+                const system = yield LoginUser._SystemRepository.findOne({
+                    where: {
+                        code: systemCode,
+                    },
+                });
+                if (!system) {
+                    throw new Error('Invalid system code.');
+                }
+                yield this.checkSystemAccess(this.ObjectId, system.id);
+                const userSession = yield this._SessionService.retrieveUserSession(this.ObjectId);
+                let systemLogin = userSession.systemLogins.find((system) => system.code === systemCode);
+                const { randomUUID } = require('crypto');
+                const sessionId = randomUUID();
+                if (systemLogin) {
+                    systemLogin = systemLogin.sessionId = sessionId;
+                    userSession.systemLogins.map((system) => system.code === systemCode ? systemLogin : system);
+                }
+                else {
+                    const newLogin = {
+                        id: system.id.toString(),
+                        code: system.Code,
+                        sessionId: sessionId,
+                        privileges: yield this.getPrivileges(system.Code),
+                    };
+                    userSession.systemLogins.push(newLogin);
+                }
+                this._SessionService.setUserSession(this.ObjectId, userSession);
+                yield LoginUser._LoginHistoryRepository.create({
+                    UserId: this.ObjectId,
+                    SystemId: system.id,
+                    OriginIp: ipAddress,
+                    CreatedAt: new Date(),
+                });
+                return `${this.ObjectId}:${sessionId}`;
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    checkSystemAccess(userId, systemId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const systemAccess = yield LoginUser._SystemAccessRepository.findOne({
+                    where: {
+                        UserId: userId,
+                        SystemId: systemId,
+                    },
+                });
+                if (!systemAccess) {
+                    throw new Error("User don't have access to the system.");
+                }
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    alertNewLogin(userId, systemId, ipAddress) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const userLogins = yield LoginUser._LoginHistoryRepository.findAll({
+                    where: {
+                        UserId: userId,
+                        SystemId: systemId,
+                    },
+                });
+                const gotPreviousLogins = (userLogins === null || userLogins === void 0 ? void 0 : userLogins.length) !== 0;
+                let ipFound = undefined;
+                if (gotPreviousLogins) {
+                    ipFound = userLogins.find((item) => item.OriginIp === ipAddress);
+                }
+                if (gotPreviousLogins && !ipFound) {
+                    const EMAIL_SENDER = process.env.EMAIL_SENDER || 'itd-system@tomei.com.my';
+                    const transporter = new mailer_1.SMTPMailer();
+                    yield transporter.sendMail({
+                        from: EMAIL_SENDER,
+                        to: this.Email,
+                        subject: 'New Login Alert',
                         html: `<p>Dear ${this.FullName},</p>
                   <p>There was a new login to your account from ${ipAddress} on ${new Date().toLocaleString()}.</p>
                   <p>If this was you, you can safely ignore this email.</p>
@@ -218,222 +218,222 @@ class LoginUser extends general_1.LoginUserBase {
                   <p>
                       Best Regards,
                       IT Department
-                  </p>`,
-                    });
-                }
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    getPrivileges(systemCode) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const system = yield LoginUser._SystemRepository.findOne({
-                    where: {
-                        Code: systemCode,
-                    },
-                });
-                if (!system) {
-                    throw new Error('Invalid system code.');
-                }
-                const userUserGroups = yield this.getUserUserGroupFromDB(system.id);
-                const userGroupData = userUserGroups.map((u) => u.UserGroup);
-                let privileges = [];
-                for (const userGroup of userGroupData) {
-                    const groupSystemPrivileges = userGroup.GroupSystemPrivileges.map((g) => g.SystemPrivilege.Code);
-                    const groupRolePrivileges = userGroup.GroupRolePrivileges.map((g) => g.SystemPrivilege.Code);
-                    if (userGroup.GroupLevel !== 0 &&
-                        userGroup.AllowInheritFromParentYN === 'Y') {
-                        const parentTreePrivileges = yield this.getPrivilegesFromUserGroup(userGroup.ParentGroupCode);
-                        privileges = [...privileges, ...parentTreePrivileges];
-                    }
-                    privileges = [
-                        ...privileges,
-                        ...groupSystemPrivileges,
-                        ...groupRolePrivileges,
-                    ];
-                }
-                const userPrivileges = yield this.getUserPersonalPrivileges(system.id);
-                privileges = [...privileges, ...userPrivileges];
-                privileges = [...new Set(privileges)];
-                return privileges;
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    getPrivilegesFromUserGroup(groupCode) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const userGroup = yield this.getUserGroupFromDB(groupCode);
-                let privileges = [];
-                privileges = [
-                    ...privileges,
-                    ...userGroup.GroupSystemPrivileges.map((g) => g.SystemPrivilege.Code),
-                    ...userGroup.GroupRolePrivileges.map((g) => g.SystemPrivilege.Code),
-                ];
-                const isContinue = userGroup.GroupLevel !== 0 &&
-                    userGroup.AllowInheritFromParentYN === 'Y';
-                if (isContinue) {
-                    const recursivePrivileges = yield this.getPrivilegesFromUserGroup(userGroup.ParentGroupCode);
-                    privileges = privileges.concat(recursivePrivileges);
-                }
-                return privileges;
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    getUserGroupFromDB(groupCode) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const userGroup = yield LoginUser._UserGroupRepository.findOne({
-                    where: {
-                        GroupCode: groupCode,
-                    },
-                    include: [
-                        {
-                            model: group_system_privilege_entity_1.default,
-                            include: {
-                                model: system_privilege_entity_1.default,
-                            },
-                        },
-                        {
-                            model: group_role_privilege_entity_1.default,
-                            include: {
-                                model: system_privilege_entity_1.default,
-                            },
-                        },
-                    ],
-                });
-                return userGroup;
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    getUserUserGroupFromDB(systemCode) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                return yield LoginUser._UserUserGroupRepository.findAll({
-                    where: {
-                        UserId: this.ObjectId,
-                        SystemId: systemCode,
-                    },
-                    include: {
-                        model: user_group_entity_1.default,
-                        include: [
-                            {
-                                model: group_system_privilege_entity_1.default,
-                                include: {
-                                    model: system_privilege_entity_1.default,
-                                },
-                            },
-                            {
-                                model: group_role_privilege_entity_1.default,
-                                include: {
-                                    model: system_privilege_entity_1.default,
-                                },
-                            },
-                        ],
-                    },
-                });
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    getUserPersonalPrivileges(systemId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const userRole = yield LoginUser._Repository.findOne({
-                    where: {
-                        id: this.ObjectId,
-                    },
-                    include: {
-                        model: system_privilege_entity_1.default,
-                    },
-                });
-                let userSystemPrivileges = userRole.SystemPrivileges;
-                userSystemPrivileges = userSystemPrivileges.filter((u) => u.SystemId === systemId);
-                const userPrivileges = userSystemPrivileges.map((u) => u.Code);
-                return userPrivileges;
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    checkPrivileges(systemCode, privilegeName) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                if (!this.ObjectId) {
-                    throw new Error('ObjectId(UserId) is not set');
-                }
-                const userSession = yield this._SessionService.retrieveUserSession(this.ObjectId);
-                const systemLogin = userSession.systemLogins.find((system) => system.code === systemCode);
-                if (!systemLogin) {
-                    return false;
-                }
-                const privileges = systemLogin.privileges;
-                const hasPrivilege = privileges.includes(privilegeName);
-                return hasPrivilege;
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    checkSession(systemCode, sessionId, userId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const userSession = yield this._SessionService.retrieveUserSession(userId);
-                if (userSession.systemLogins.length === 0) {
-                    throw new Error('Session expired.');
-                }
-                const systemLogin = userSession.systemLogins.find((sl) => sl.code === systemCode);
-                if (!systemLogin) {
-                    throw new Error('Session expired.');
-                }
-                if (systemLogin.sessionId !== sessionId) {
-                    throw new Error('Session expired.');
-                }
-                yield this._SessionService.refreshDuration(userId);
-                return systemLogin;
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-    logout(systemCode) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                if (!this.ObjectId) {
-                    throw new Error('ObjectId(UserId) is not set');
-                }
-                const userSession = yield this._SessionService.retrieveUserSession(this.ObjectId);
-                const index = userSession.systemLogins.findIndex((system) => system.code === systemCode);
-                userSession.systemLogins.splice(index, 1);
-                this._SessionService.setUserSession(this.ObjectId, userSession);
-            }
-            catch (error) {
-                throw error;
-            }
-        });
-    }
-}
-exports.LoginUser = LoginUser;
-LoginUser._Repository = new user_repository_1.UserRepository();
-LoginUser._SystemRepository = new system_repository_1.SystemRepository();
-LoginUser._SystemAccessRepository = new system_access_repository_1.SystemAccessRepository();
-LoginUser._LoginHistoryRepository = new login_history_repository_1.LoginHistoryRepository();
-LoginUser._UserUserGroupRepository = new user_user_group_repository_1.UserUserGroupRepository();
-LoginUser._UserGroupRepository = new user_group_repository_1.UserGroupRepository();
+                  </p>`,
+                    });
+                }
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    getPrivileges(systemCode) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const system = yield LoginUser._SystemRepository.findOne({
+                    where: {
+                        Code: systemCode,
+                    },
+                });
+                if (!system) {
+                    throw new Error('Invalid system code.');
+                }
+                const userUserGroups = yield this.getUserUserGroupFromDB(system.id);
+                const userGroupData = userUserGroups.map((u) => u.UserGroup);
+                let privileges = [];
+                for (const userGroup of userGroupData) {
+                    const groupSystemPrivileges = userGroup.GroupSystemPrivileges.map((g) => g.SystemPrivilege.Code);
+                    const groupRolePrivileges = userGroup.GroupRolePrivileges.map((g) => g.SystemPrivilege.Code);
+                    if (userGroup.GroupLevel !== 0 &&
+                        userGroup.AllowInheritFromParentYN === 'Y') {
+                        const parentTreePrivileges = yield this.getPrivilegesFromUserGroup(userGroup.ParentGroupCode);
+                        privileges = [...privileges, ...parentTreePrivileges];
+                    }
+                    privileges = [
+                        ...privileges,
+                        ...groupSystemPrivileges,
+                        ...groupRolePrivileges,
+                    ];
+                }
+                const userPrivileges = yield this.getUserPersonalPrivileges(system.id);
+                privileges = [...privileges, ...userPrivileges];
+                privileges = [...new Set(privileges)];
+                return privileges;
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    getPrivilegesFromUserGroup(groupCode) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const userGroup = yield this.getUserGroupFromDB(groupCode);
+                let privileges = [];
+                privileges = [
+                    ...privileges,
+                    ...userGroup.GroupSystemPrivileges.map((g) => g.SystemPrivilege.Code),
+                    ...userGroup.GroupRolePrivileges.map((g) => g.SystemPrivilege.Code),
+                ];
+                const isContinue = userGroup.GroupLevel !== 0 &&
+                    userGroup.AllowInheritFromParentYN === 'Y';
+                if (isContinue) {
+                    const recursivePrivileges = yield this.getPrivilegesFromUserGroup(userGroup.ParentGroupCode);
+                    privileges = privileges.concat(recursivePrivileges);
+                }
+                return privileges;
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    getUserGroupFromDB(groupCode) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const userGroup = yield LoginUser._UserGroupRepository.findOne({
+                    where: {
+                        GroupCode: groupCode,
+                    },
+                    include: [
+                        {
+                            model: group_system_privilege_entity_1.default,
+                            include: {
+                                model: system_privilege_entity_1.default,
+                            },
+                        },
+                        {
+                            model: group_role_privilege_entity_1.default,
+                            include: {
+                                model: system_privilege_entity_1.default,
+                            },
+                        },
+                    ],
+                });
+                return userGroup;
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    getUserUserGroupFromDB(systemCode) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                return yield LoginUser._UserUserGroupRepository.findAll({
+                    where: {
+                        UserId: this.ObjectId,
+                        SystemId: systemCode,
+                    },
+                    include: {
+                        model: user_group_entity_1.default,
+                        include: [
+                            {
+                                model: group_system_privilege_entity_1.default,
+                                include: {
+                                    model: system_privilege_entity_1.default,
+                                },
+                            },
+                            {
+                                model: group_role_privilege_entity_1.default,
+                                include: {
+                                    model: system_privilege_entity_1.default,
+                                },
+                            },
+                        ],
+                    },
+                });
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    getUserPersonalPrivileges(systemId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const userRole = yield LoginUser._Repository.findOne({
+                    where: {
+                        id: this.ObjectId,
+                    },
+                    include: {
+                        model: system_privilege_entity_1.default,
+                    },
+                });
+                let userSystemPrivileges = userRole.SystemPrivileges;
+                userSystemPrivileges = userSystemPrivileges.filter((u) => u.SystemId === systemId);
+                const userPrivileges = userSystemPrivileges.map((u) => u.Code);
+                return userPrivileges;
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    checkPrivileges(systemCode, privilegeName) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (!this.ObjectId) {
+                    throw new Error('ObjectId(UserId) is not set');
+                }
+                const userSession = yield this._SessionService.retrieveUserSession(this.ObjectId);
+                const systemLogin = userSession.systemLogins.find((system) => system.code === systemCode);
+                if (!systemLogin) {
+                    return false;
+                }
+                const privileges = systemLogin.privileges;
+                const hasPrivilege = privileges.includes(privilegeName);
+                return hasPrivilege;
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    checkSession(systemCode, sessionId, userId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const userSession = yield this._SessionService.retrieveUserSession(userId);
+                if (userSession.systemLogins.length === 0) {
+                    throw new Error('Session expired.');
+                }
+                const systemLogin = userSession.systemLogins.find((sl) => sl.code === systemCode);
+                if (!systemLogin) {
+                    throw new Error('Session expired.');
+                }
+                if (systemLogin.sessionId !== sessionId) {
+                    throw new Error('Session expired.');
+                }
+                yield this._SessionService.refreshDuration(userId);
+                return systemLogin;
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    logout(systemCode) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (!this.ObjectId) {
+                    throw new Error('ObjectId(UserId) is not set');
+                }
+                const userSession = yield this._SessionService.retrieveUserSession(this.ObjectId);
+                const index = userSession.systemLogins.findIndex((system) => system.code === systemCode);
+                userSession.systemLogins.splice(index, 1);
+                this._SessionService.setUserSession(this.ObjectId, userSession);
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+}
+exports.LoginUser = LoginUser;
+LoginUser._Repository = new user_repository_1.UserRepository();
+LoginUser._SystemRepository = new system_repository_1.SystemRepository();
+LoginUser._SystemAccessRepository = new system_access_repository_1.SystemAccessRepository();
+LoginUser._LoginHistoryRepository = new login_history_repository_1.LoginHistoryRepository();
+LoginUser._UserUserGroupRepository = new user_user_group_repository_1.UserUserGroupRepository();
+LoginUser._UserGroupRepository = new user_group_repository_1.UserGroupRepository();
 //# sourceMappingURL=login-user.js.map