emilsoftware-utilities 2.0.0-dev.22 → 2.0.0-dev.24

package/dist/accessi-module/Controllers/ConfiguratorController.js

@@ -32,8 +32,7 @@ const UserService_1 = require("../Services/UserService/UserService");
 const jwt_strategy_1 = require("../jwt/jwt.strategy");
 const accessControl_1 = require("../security/accessControl");
 let ConfiguratorController = ConfiguratorController_1 = class ConfiguratorController {
-    constructor(options, userService, configuratorService) {
-        this.options = options;
+    constructor(userService, configuratorService) {
         this.userService = userService;
         this.configuratorService = configuratorService;
     }
@@ -41,9 +40,9 @@ let ConfiguratorController = ConfiguratorController_1 = class ConfiguratorContro
         return __awaiter(this, void 0, void 0, function* () {
             try {
                 if (!codiceMenu)
-                    throw new Error('Il codice del menu e obbligatorio.');
+                    throw new common_1.BadRequestException('Il codice del menu e obbligatorio.');
                 if ((body === null || body === void 0 ? void 0 : body.enabled) === undefined)
-                    throw new Error('Lo stato di abilitazione e obbligatorio.');
+                    throw new common_1.BadRequestException('Lo stato di abilitazione e obbligatorio.');
                 const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(req);
                 const canConfigure = authenticatedUser.flagSuper ||
                     authenticatedUser.flagAdminConfigurator ||
@@ -64,9 +63,9 @@ let ConfiguratorController = ConfiguratorController_1 = class ConfiguratorContro
         return __awaiter(this, void 0, void 0, function* () {
             try {
                 if (!codiceGruppo)
-                    throw new Error('Il codice del gruppo e obbligatorio.');
+                    throw new common_1.BadRequestException('Il codice del gruppo e obbligatorio.');
                 if ((body === null || body === void 0 ? void 0 : body.enabled) === undefined)
-                    throw new Error('Lo stato di abilitazione e obbligatorio.');
+                    throw new common_1.BadRequestException('Lo stato di abilitazione e obbligatorio.');
                 const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(req);
                 const canConfigure = authenticatedUser.flagSuper ||
                     authenticatedUser.flagAdminConfigurator ||
@@ -141,9 +140,10 @@ exports.ConfiguratorController = ConfiguratorController = ConfiguratorController
     (0, swagger_1.ApiBearerAuth)(),
     (0, swagger_1.ApiTags)('Configurator'),
     (0, common_1.Controller)('accessi/configurator'),
-    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
-    __param(0, (0, common_1.Inject)('ACCESSI_OPTIONS')),
-    __metadata("design:paramtypes", [Object, UserService_1.UserService,
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard)
+    /** Endpoint amministrativi per abilitare o disabilitare cataloghi menu senza cancellarne lo storico. */
+    ,
+    __metadata("design:paramtypes", [UserService_1.UserService,
         ConfiguratorService_1.ConfiguratorService])
 ], ConfiguratorController);
 //# sourceMappingURL=ConfiguratorController.js.map

package/dist/accessi-module/Controllers/ConfiguratorController.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfiguratorController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/ConfiguratorController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAOyB;AAEzB,+CAAgD;AAEhD,kCAAoF;AACpF,6FAA0F;AAC1F,qEAAkE;AAClE,sDAAqD;AACrD,6DAAwE;AAMjE,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IACjC,YAC8C,OAAuB,EAC3D,WAAwB,EACxB,mBAAwC;QAFJ,YAAO,GAAP,OAAO,CAAgB;QAC3D,gBAAW,GAAX,WAAW,CAAa;QACxB,wBAAmB,GAAnB,mBAAmB,CAAqB;IAC/C,CAAC;IAmBE,cAAc,CACG,UAAkB,EAC/B,IAAgC,EACjC,GAAY,EACZ,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACvE,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,MAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAE7F,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,GAAG,CAAC,CAAC;gBAE3D,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS;oBAC3B,iBAAiB,CAAC,qBAAqB;oBACvC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,8CAA8C,EAC9C,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAExE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,WAAW,UAAU,YAAY,MAAM,gBAAgB,CACxD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAmBK,eAAe,CACI,YAAoB,EACnC,IAAgC,EACjC,GAAY,EACZ,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC3E,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,MAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAE7F,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,GAAG,CAAC,CAAC;gBAE3D,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS;oBAC3B,iBAAiB,CAAC,qBAAqB;oBACvC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,qDAAqD,EACrD,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAE3E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,aAAa,YAAY,YAAY,MAAM,gBAAgB,CAC5D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAlHY,wDAAsB;AAwB3B;IAjBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,gBAAgB;KAC9B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,QAAQ;KAClB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC7C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,IAAI,EAAE,qBAAc,EAAE,CAAC;IACzG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACxG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2CAA2C,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAC3G,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iDAAiD,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACjH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAC3F,IAAA,cAAK,EAAC,2BAA2B,CAAC;IAEhC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAFQ,iCAA0B;;4DAiCzC;AAmBK;IAjBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,iBAAiB;KAC/B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,OAAO;KACjB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC7C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0CAA0C,EAAE,IAAI,EAAE,qBAAc,EAAE,CAAC;IAC3G,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACxG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2CAA2C,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAC3G,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iDAAiD,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACjH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAC3F,IAAA,cAAK,EAAC,8BAA8B,CAAC;IAEnC,WAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;IACrB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAFQ,iCAA0B;;6DAiCzC;iCAjHU,sBAAsB;IAJlC,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAO,EAAC,cAAc,CAAC;IACvB,IAAA,mBAAU,EAAC,sBAAsB,CAAC;IAClC,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAGrB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACL,yBAAW;QACH,yCAAmB;GAJvC,sBAAsB,CAkHlC","sourcesContent":["import {\n  Body,\n  Controller,\n  Inject,\n  Param,\n  Patch,\n  Req,\n  Res,\n  UseGuards,\n} from '@nestjs/common';\nimport {\n  ApiBearerAuth,\n  ApiBody,\n  ApiOperation,\n  ApiParam,\n  ApiResponse,\n  ApiTags,\n} from '@nestjs/swagger';\nimport { Request, Response } from 'express';\nimport { RestUtilities } from '../../Utilities';\nimport { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse, UpdateEnabledStatusRequest } from '../Dtos';\nimport { ConfiguratorService } from '../Services/ConfiguratorService/ConfiguratorService';\nimport { UserService } from '../Services/UserService/UserService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport { getAuthenticatedAccessiUser } from '../security/accessControl';\n\n@ApiBearerAuth()\n@ApiTags('Configurator')\n@Controller('accessi/configurator')\n@UseGuards(JwtSimpleGuard)\nexport class ConfiguratorController {\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions,\n    private userService: UserService,\n    private configuratorService: ConfiguratorService,\n  ) {}\n\n  @ApiOperation({\n    summary: 'Aggiorna lo stato di abilitazione di un menu',\n    operationId: 'setMenuEnabled',\n  })\n  @ApiParam({\n    name: 'codiceMenu',\n    description: 'Codice identificativo del menu da aggiornare',\n    required: true,\n    example: 'MNU001',\n  })\n  @ApiBody({ type: UpdateEnabledStatusRequest })\n  @ApiResponse({ status: 200, description: 'Stato del menu aggiornato con successo', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Errore di validazione nei dati inviati', type: ErrorResponse })\n  @ApiResponse({ status: 401, description: 'Utente non autenticato o token non valido', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: \"Utente non autorizzato ad eseguire l'operazione\", type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @Patch('menus/:codiceMenu/enabled')\n  async setMenuEnabled(\n    @Param('codiceMenu') codiceMenu: string,\n    @Body() body: UpdateEnabledStatusRequest,\n    @Req() req: Request,\n    @Res() res: Response,\n  ) {\n    try {\n      if (!codiceMenu) throw new Error('Il codice del menu e obbligatorio.');\n      if (body?.enabled === undefined) throw new Error('Lo stato di abilitazione e obbligatorio.');\n\n      const authenticatedUser = getAuthenticatedAccessiUser(req);\n\n      const canConfigure =\n        authenticatedUser.flagSuper ||\n        authenticatedUser.flagAdminConfigurator ||\n        (await this.userService.isAdminConfigurator(authenticatedUser.codiceUtente));\n      if (!canConfigure) {\n        return RestUtilities.sendErrorMessage(\n          res,\n          'Utente non autorizzato ad aggiornare i menu.',\n          ConfiguratorController.name,\n          403,\n        );\n      }\n\n      await this.configuratorService.setMenuEnabled(codiceMenu, body.enabled);\n\n      const action = body.enabled ? 'abilitato' : 'disabilitato';\n      return RestUtilities.sendOKMessage(\n        res,\n        `Il menu ${codiceMenu} e stato ${action} con successo.`,\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, ConfiguratorController.name);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Aggiorna lo stato di abilitazione di un gruppo menu',\n    operationId: 'setGroupEnabled',\n  })\n  @ApiParam({\n    name: 'codiceGruppo',\n    description: 'Codice identificativo del gruppo da aggiornare',\n    required: true,\n    example: 'GRP01',\n  })\n  @ApiBody({ type: UpdateEnabledStatusRequest })\n  @ApiResponse({ status: 200, description: 'Stato del gruppo aggiornato con successo', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Errore di validazione nei dati inviati', type: ErrorResponse })\n  @ApiResponse({ status: 401, description: 'Utente non autenticato o token non valido', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: \"Utente non autorizzato ad eseguire l'operazione\", type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @Patch('groups/:codiceGruppo/enabled')\n  async setGroupEnabled(\n    @Param('codiceGruppo') codiceGruppo: string,\n    @Body() body: UpdateEnabledStatusRequest,\n    @Req() req: Request,\n    @Res() res: Response,\n  ) {\n    try {\n      if (!codiceGruppo) throw new Error('Il codice del gruppo e obbligatorio.');\n      if (body?.enabled === undefined) throw new Error('Lo stato di abilitazione e obbligatorio.');\n\n      const authenticatedUser = getAuthenticatedAccessiUser(req);\n\n      const canConfigure =\n        authenticatedUser.flagSuper ||\n        authenticatedUser.flagAdminConfigurator ||\n        (await this.userService.isAdminConfigurator(authenticatedUser.codiceUtente));\n      if (!canConfigure) {\n        return RestUtilities.sendErrorMessage(\n          res,\n          'Utente non autorizzato ad aggiornare i gruppi menu.',\n          ConfiguratorController.name,\n          403,\n        );\n      }\n\n      await this.configuratorService.setGroupEnabled(codiceGruppo, body.enabled);\n\n      const action = body.enabled ? 'abilitato' : 'disabilitato';\n      return RestUtilities.sendOKMessage(\n        res,\n        `Il gruppo ${codiceGruppo} e stato ${action} con successo.`,\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, ConfiguratorController.name);\n    }\n  }\n}\n"]}
+{"version":3,"file":"ConfiguratorController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/ConfiguratorController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAOyB;AAEzB,+CAAgD;AAChD,kCAAoF;AACpF,6FAA0F;AAC1F,qEAAkE;AAClE,sDAAqD;AACrD,6DAAwE;AAOjE,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IACjC,YACU,WAAwB,EACxB,mBAAwC;QADxC,gBAAW,GAAX,WAAW,CAAa;QACxB,wBAAmB,GAAnB,mBAAmB,CAAqB;IAC/C,CAAC;IAmBE,cAAc,CACG,UAAkB,EAC/B,IAAgC,EACjC,GAAY,EACZ,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,4BAAmB,CAAC,oCAAoC,CAAC,CAAC;gBACrF,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,MAAK,SAAS;oBAAE,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;gBAE3G,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,GAAG,CAAC,CAAC;gBAE3D,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS;oBAC3B,iBAAiB,CAAC,qBAAqB;oBACvC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,8CAA8C,EAC9C,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAExE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,WAAW,UAAU,YAAY,MAAM,gBAAgB,CACxD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAmBK,eAAe,CACI,YAAoB,EACnC,IAAgC,EACjC,GAAY,EACZ,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,4BAAmB,CAAC,sCAAsC,CAAC,CAAC;gBACzF,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,MAAK,SAAS;oBAAE,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;gBAE3G,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,GAAG,CAAC,CAAC;gBAE3D,MAAM,YAAY,GAChB,iBAAiB,CAAC,SAAS;oBAC3B,iBAAiB,CAAC,qBAAqB;oBACvC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,qDAAqD,EACrD,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAE3E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,aAAa,YAAY,YAAY,MAAM,gBAAgB,CAC5D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAjHY,wDAAsB;AAuB3B;IAjBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,gBAAgB;KAC9B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,QAAQ;KAClB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC7C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,IAAI,EAAE,qBAAc,EAAE,CAAC;IACzG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACxG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2CAA2C,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAC3G,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iDAAiD,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACjH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAC3F,IAAA,cAAK,EAAC,2BAA2B,CAAC;IAEhC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAFQ,iCAA0B;;4DAiCzC;AAmBK;IAjBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,iBAAiB;KAC/B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,OAAO;KACjB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC7C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0CAA0C,EAAE,IAAI,EAAE,qBAAc,EAAE,CAAC;IAC3G,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACxG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2CAA2C,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAC3G,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iDAAiD,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACjH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAC3F,IAAA,cAAK,EAAC,8BAA8B,CAAC;IAEnC,WAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;IACrB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAFQ,iCAA0B;;6DAiCzC;iCAhHU,sBAAsB;IALlC,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAO,EAAC,cAAc,CAAC;IACvB,IAAA,mBAAU,EAAC,sBAAsB,CAAC;IAClC,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAC1B,wGAAwG;;qCAG/E,yBAAW;QACH,yCAAmB;GAHvC,sBAAsB,CAiHlC","sourcesContent":["import {\r\n  BadRequestException,\r\n  Body,\r\n  Controller,\r\n  Param,\r\n  Patch,\r\n  Req,\r\n  Res,\r\n  UseGuards,\r\n} from '@nestjs/common';\r\nimport {\r\n  ApiBearerAuth,\r\n  ApiBody,\r\n  ApiOperation,\r\n  ApiParam,\r\n  ApiResponse,\r\n  ApiTags,\r\n} from '@nestjs/swagger';\r\nimport { Request, Response } from 'express';\r\nimport { RestUtilities } from '../../Utilities';\r\nimport { ActionResponse, ErrorResponse, UpdateEnabledStatusRequest } from '../Dtos';\r\nimport { ConfiguratorService } from '../Services/ConfiguratorService/ConfiguratorService';\r\nimport { UserService } from '../Services/UserService/UserService';\r\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\r\nimport { getAuthenticatedAccessiUser } from '../security/accessControl';\r\n\r\n@ApiBearerAuth()\r\n@ApiTags('Configurator')\r\n@Controller('accessi/configurator')\r\n@UseGuards(JwtSimpleGuard)\r\n/** Endpoint amministrativi per abilitare o disabilitare cataloghi menu senza cancellarne lo storico. */\r\nexport class ConfiguratorController {\r\n  constructor(\r\n    private userService: UserService,\r\n    private configuratorService: ConfiguratorService,\r\n  ) {}\r\n\r\n  @ApiOperation({\r\n    summary: 'Aggiorna lo stato di abilitazione di un menu',\r\n    operationId: 'setMenuEnabled',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceMenu',\r\n    description: 'Codice identificativo del menu da aggiornare',\r\n    required: true,\r\n    example: 'MNU001',\r\n  })\r\n  @ApiBody({ type: UpdateEnabledStatusRequest })\r\n  @ApiResponse({ status: 200, description: 'Stato del menu aggiornato con successo', type: ActionResponse })\r\n  @ApiResponse({ status: 400, description: 'Errore di validazione nei dati inviati', type: ErrorResponse })\r\n  @ApiResponse({ status: 401, description: 'Utente non autenticato o token non valido', type: ErrorResponse })\r\n  @ApiResponse({ status: 403, description: \"Utente non autorizzato ad eseguire l'operazione\", type: ErrorResponse })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\r\n  @Patch('menus/:codiceMenu/enabled')\r\n  async setMenuEnabled(\r\n    @Param('codiceMenu') codiceMenu: string,\r\n    @Body() body: UpdateEnabledStatusRequest,\r\n    @Req() req: Request,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      if (!codiceMenu) throw new BadRequestException('Il codice del menu e obbligatorio.');\r\n      if (body?.enabled === undefined) throw new BadRequestException('Lo stato di abilitazione e obbligatorio.');\r\n\r\n      const authenticatedUser = getAuthenticatedAccessiUser(req);\r\n\r\n      const canConfigure =\r\n        authenticatedUser.flagSuper ||\r\n        authenticatedUser.flagAdminConfigurator ||\r\n        (await this.userService.isAdminConfigurator(authenticatedUser.codiceUtente));\r\n      if (!canConfigure) {\r\n        return RestUtilities.sendErrorMessage(\r\n          res,\r\n          'Utente non autorizzato ad aggiornare i menu.',\r\n          ConfiguratorController.name,\r\n          403,\r\n        );\r\n      }\r\n\r\n      await this.configuratorService.setMenuEnabled(codiceMenu, body.enabled);\r\n\r\n      const action = body.enabled ? 'abilitato' : 'disabilitato';\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `Il menu ${codiceMenu} e stato ${action} con successo.`,\r\n      );\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, ConfiguratorController.name);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Aggiorna lo stato di abilitazione di un gruppo menu',\r\n    operationId: 'setGroupEnabled',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceGruppo',\r\n    description: 'Codice identificativo del gruppo da aggiornare',\r\n    required: true,\r\n    example: 'GRP01',\r\n  })\r\n  @ApiBody({ type: UpdateEnabledStatusRequest })\r\n  @ApiResponse({ status: 200, description: 'Stato del gruppo aggiornato con successo', type: ActionResponse })\r\n  @ApiResponse({ status: 400, description: 'Errore di validazione nei dati inviati', type: ErrorResponse })\r\n  @ApiResponse({ status: 401, description: 'Utente non autenticato o token non valido', type: ErrorResponse })\r\n  @ApiResponse({ status: 403, description: \"Utente non autorizzato ad eseguire l'operazione\", type: ErrorResponse })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\r\n  @Patch('groups/:codiceGruppo/enabled')\r\n  async setGroupEnabled(\r\n    @Param('codiceGruppo') codiceGruppo: string,\r\n    @Body() body: UpdateEnabledStatusRequest,\r\n    @Req() req: Request,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      if (!codiceGruppo) throw new BadRequestException('Il codice del gruppo e obbligatorio.');\r\n      if (body?.enabled === undefined) throw new BadRequestException('Lo stato di abilitazione e obbligatorio.');\r\n\r\n      const authenticatedUser = getAuthenticatedAccessiUser(req);\r\n\r\n      const canConfigure =\r\n        authenticatedUser.flagSuper ||\r\n        authenticatedUser.flagAdminConfigurator ||\r\n        (await this.userService.isAdminConfigurator(authenticatedUser.codiceUtente));\r\n      if (!canConfigure) {\r\n        return RestUtilities.sendErrorMessage(\r\n          res,\r\n          'Utente non autorizzato ad aggiornare i gruppi menu.',\r\n          ConfiguratorController.name,\r\n          403,\r\n        );\r\n      }\r\n\r\n      await this.configuratorService.setGroupEnabled(codiceGruppo, body.enabled);\r\n\r\n      const action = body.enabled ? 'abilitato' : 'disabilitato';\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `Il gruppo ${codiceGruppo} e stato ${action} con successo.`,\r\n      );\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, ConfiguratorController.name);\r\n    }\r\n  }\r\n}\r\n"]}

package/dist/accessi-module/Controllers/EmailController.d.ts

@@ -1,11 +1,11 @@
 import { Request, Response } from 'express';
-import { AccessiOptions } from '../AccessiModule';
+import type { AccessiOptions } from '../AccessiModule';
 import { SendResetPasswordEmailRequest } from '../Dtos';
 import { EmailService } from '../Services/EmailService/EmailService';
 export declare class EmailController {
     private readonly accessiOptions;
     private readonly emailService;
     constructor(accessiOptions: AccessiOptions, emailService: EmailService);
-    serveResetPasswordPage(res: Response, token: string, returnUrl?: string): Promise<void>;
+    serveResetPasswordPage(res: Response, _token: string, _returnUrl?: string): Promise<void>;
     sendPasswordResetEmail(request: Request, sendResetPasswordData: SendResetPasswordEmailRequest, res: Response): Promise<Response<any, Record<string, any>>>;
 }

package/dist/accessi-module/Controllers/EmailController.js

@@ -35,7 +35,7 @@ let EmailController = EmailController_1 = class EmailController {
         this.accessiOptions = accessiOptions;
         this.emailService = emailService;
     }
-    serveResetPasswordPage(res, token, returnUrl) {
+    serveResetPasswordPage(res, _token, _returnUrl) {
         return __awaiter(this, void 0, void 0, function* () {
             return res.sendFile((0, path_1.join)(__dirname, '..', 'Views', 'reset-password.html'));
         });
@@ -103,7 +103,9 @@ __decorate([
 ], EmailController.prototype, "sendPasswordResetEmail", null);
 exports.EmailController = EmailController = EmailController_1 = __decorate([
     (0, swagger_1.ApiTags)('Email'),
-    (0, common_1.Controller)('accessi/email'),
+    (0, common_1.Controller)('accessi/email')
+    /** Endpoint pubblici del ciclo reset password; le risposte non rivelano se l'email esiste. */
+    ,
     __param(0, (0, common_1.Inject)('ACCESSI_OPTIONS')),
     __metadata("design:paramtypes", [Object, EmailService_1.EmailService])
 ], EmailController);

package/dist/accessi-module/Controllers/EmailController.js.map

@@ -1 +1 @@
-{"version":3,"file":"EmailController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/EmailController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6F;AAC7F,6CAAkG;AAElG,+BAA4B;AAC5B,+CAAgD;AAEhD,kCAAuF;AACvF,wEAAqE;AACrE,yEAGyC;AAIlC,IAAM,eAAe,uBAArB,MAAM,eAAe;IAC1B,YAC8C,cAA8B,EACzD,YAA0B;QADC,mBAAc,GAAd,cAAc,CAAgB;QACzD,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAcE,sBAAsB,CACnB,GAAa,EACJ,KAAa,EACT,SAAkB;;YAEtC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC;KAAA;IAkBK,sBAAsB,CACnB,OAAgB,EACf,qBAAoD,EACrD,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,cAAc,EACnB,oBAAoB,EACpB,OAAO,EACP,CAAC,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,KAAK,CAAC,CAC/B,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBAC5E,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,iBAAe,CAAC,IAAI,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAnEY,0CAAe;AAkBpB;IAZL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,wBAAwB;KACtC,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7F,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC;IAC1F,IAAA,YAAG,EAAC,4BAA4B,CAAC;IAE/B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;;;;6DAGpB;AAkBK;IAhBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,wBAAwB;KACtC,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,oCAA6B,EAAE,CAAC;IAChD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,+CAA+C;QAC5D,IAAI,EAAE,qBAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2CAA2C;QACxD,IAAI,EAAE,oBAAa;KACpB,CAAC;IACD,IAAA,aAAI,EAAC,2BAA2B,CAAC;IAE/B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADyB,oCAA6B;;6DAsB7D;0BAlEU,eAAe;IAF3B,IAAA,iBAAO,EAAC,OAAO,CAAC;IAChB,IAAA,mBAAU,EAAC,eAAe,CAAC;IAGvB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACK,2BAAY;GAHlC,eAAe,CAmE3B","sourcesContent":["import { Body, Controller, Get, Inject, Param, Post, Query, Req, Res } from '@nestjs/common';\nimport { ApiBody, ApiOperation, ApiParam, ApiQuery, ApiResponse, ApiTags } from '@nestjs/swagger';\nimport { Request, Response } from 'express';\nimport { join } from 'path';\nimport { RestUtilities } from '../../Utilities';\nimport { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse, SendResetPasswordEmailRequest } from '../Dtos';\nimport { EmailService } from '../Services/EmailService/EmailService';\nimport {\n  checkPublicAuthRateLimit,\n  sendPublicAuthRateLimitExceeded,\n} from '../security/publicAuthRateLimit';\n\n@ApiTags('Email')\n@Controller('accessi/email')\nexport class EmailController {\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\n    private readonly emailService: EmailService,\n  ) {}\n\n  @ApiOperation({\n    summary: 'Serve una pagina per il reset della password',\n    operationId: 'serveResetPasswordPage',\n  })\n  @ApiParam({ name: 'token', description: 'Token per il reset della password', required: true })\n  @ApiQuery({\n    name: 'returnUrl',\n    description: 'Url di ritorno della pagina',\n    required: false,\n  })\n  @ApiResponse({ status: 200, description: 'Pagina di reset password servita con successo' })\n  @Get('reset-password-page/:token')\n  async serveResetPasswordPage(\n    @Res() res: Response,\n    @Param('token') token: string,\n    @Query('returnUrl') returnUrl?: string,\n  ) {\n    return res.sendFile(join(__dirname, '..', 'Views', 'reset-password.html'));\n  }\n\n  @ApiOperation({\n    summary: 'Invia una e-mail per il reset della password',\n    operationId: 'sendPasswordResetEmail',\n  })\n  @ApiBody({ type: SendResetPasswordEmailRequest })\n  @ApiResponse({\n    status: 200,\n    description: \"L'email di reset e stata gestita con successo\",\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: \"Errore interno durante l'invio dell'email\",\n    type: ErrorResponse,\n  })\n  @Post('send-reset-password-email')\n  async sendPasswordResetEmail(\n    @Req() request: Request,\n    @Body() sendResetPasswordData: SendResetPasswordEmailRequest,\n    @Res() res: Response,\n  ) {\n    try {\n      const rateLimitDecision = checkPublicAuthRateLimit(\n        this.accessiOptions,\n        'passwordResetEmail',\n        request,\n        [sendResetPasswordData?.email],\n      );\n      if (!rateLimitDecision.allowed) {\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\n      }\n\n      await this.emailService.sendPasswordResetEmail(sendResetPasswordData.email);\n      return RestUtilities.sendOKMessage(\n        res,\n        \"Se l'account esiste, l'email di reset e stata inoltrata al destinatario.\",\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, EmailController.name);\n    }\n  }\n}\n"]}
+{"version":3,"file":"EmailController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/EmailController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6F;AAC7F,6CAAkG;AAElG,+BAA4B;AAC5B,+CAAgD;AAEhD,kCAAuF;AACvF,wEAAqE;AACrE,yEAGyC;AAKlC,IAAM,eAAe,uBAArB,MAAM,eAAe;IAC1B,YAC8C,cAA8B,EACzD,YAA0B;QADC,mBAAc,GAAd,cAAc,CAAgB;QACzD,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAcE,sBAAsB,CACnB,GAAa,EACJ,MAAc,EACV,UAAmB;;YAEvC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC;KAAA;IAkBK,sBAAsB,CACnB,OAAgB,EACf,qBAAoD,EACrD,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,cAAc,EACnB,oBAAoB,EACpB,OAAO,EACP,CAAC,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,KAAK,CAAC,CAC/B,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBAC5E,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,iBAAe,CAAC,IAAI,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAnEY,0CAAe;AAkBpB;IAZL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,wBAAwB;KACtC,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7F,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC;IAC1F,IAAA,YAAG,EAAC,4BAA4B,CAAC;IAE/B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;;;;6DAGpB;AAkBK;IAhBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,wBAAwB;KACtC,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,oCAA6B,EAAE,CAAC;IAChD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,+CAA+C;QAC5D,IAAI,EAAE,qBAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2CAA2C;QACxD,IAAI,EAAE,oBAAa;KACpB,CAAC;IACD,IAAA,aAAI,EAAC,2BAA2B,CAAC;IAE/B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADyB,oCAA6B;;6DAsB7D;0BAlEU,eAAe;IAH3B,IAAA,iBAAO,EAAC,OAAO,CAAC;IAChB,IAAA,mBAAU,EAAC,eAAe,CAAC;IAC5B,8FAA8F;;IAGzF,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACK,2BAAY;GAHlC,eAAe,CAmE3B","sourcesContent":["import { Body, Controller, Get, Inject, Param, Post, Query, Req, Res } from '@nestjs/common';\nimport { ApiBody, ApiOperation, ApiParam, ApiQuery, ApiResponse, ApiTags } from '@nestjs/swagger';\nimport { Request, Response } from 'express';\nimport { join } from 'path';\nimport { RestUtilities } from '../../Utilities';\nimport type { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse, SendResetPasswordEmailRequest } from '../Dtos';\nimport { EmailService } from '../Services/EmailService/EmailService';\nimport {\n  checkPublicAuthRateLimit,\n  sendPublicAuthRateLimitExceeded,\n} from '../security/publicAuthRateLimit';\n\n@ApiTags('Email')\n@Controller('accessi/email')\n/** Endpoint pubblici del ciclo reset password; le risposte non rivelano se l'email esiste. */\nexport class EmailController {\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\n    private readonly emailService: EmailService,\n  ) {}\n\n  @ApiOperation({\n    summary: 'Serve una pagina per il reset della password',\n    operationId: 'serveResetPasswordPage',\n  })\n  @ApiParam({ name: 'token', description: 'Token per il reset della password', required: true })\n  @ApiQuery({\n    name: 'returnUrl',\n    description: 'Url di ritorno della pagina',\n    required: false,\n  })\n  @ApiResponse({ status: 200, description: 'Pagina di reset password servita con successo' })\n  @Get('reset-password-page/:token')\n  async serveResetPasswordPage(\n    @Res() res: Response,\n    @Param('token') _token: string,\n    @Query('returnUrl') _returnUrl?: string,\n  ) {\n    return res.sendFile(join(__dirname, '..', 'Views', 'reset-password.html'));\n  }\n\n  @ApiOperation({\n    summary: 'Invia una e-mail per il reset della password',\n    operationId: 'sendPasswordResetEmail',\n  })\n  @ApiBody({ type: SendResetPasswordEmailRequest })\n  @ApiResponse({\n    status: 200,\n    description: \"L'email di reset e stata gestita con successo\",\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: \"Errore interno durante l'invio dell'email\",\n    type: ErrorResponse,\n  })\n  @Post('send-reset-password-email')\n  async sendPasswordResetEmail(\n    @Req() request: Request,\n    @Body() sendResetPasswordData: SendResetPasswordEmailRequest,\n    @Res() res: Response,\n  ) {\n    try {\n      const rateLimitDecision = checkPublicAuthRateLimit(\n        this.accessiOptions,\n        'passwordResetEmail',\n        request,\n        [sendResetPasswordData?.email],\n      );\n      if (!rateLimitDecision.allowed) {\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\n      }\n\n      await this.emailService.sendPasswordResetEmail(sendResetPasswordData.email);\n      return RestUtilities.sendOKMessage(\n        res,\n        \"Se l'account esiste, l'email di reset e stata inoltrata al destinatario.\",\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, EmailController.name);\n    }\n  }\n}\n"]}

package/dist/accessi-module/Controllers/FiltriController.d.ts

@@ -1,12 +1,13 @@
 import { Request, Response } from 'express';
-import { AccessiOptions } from '../AccessiModule';
-import { FiltriUtente, GetFiltriUtenteRequest } from '../Dtos';
+import { CreateFilterTypeRequest, FiltriUtente, GetFiltriUtenteRequest, UpdateFilterTypeRequest } from '../Dtos';
 import { FiltriService } from '../Services/FiltriService/FiltriService';
 export declare class FiltriController {
     private readonly filtriService;
-    private readonly options;
-    constructor(filtriService: FiltriService, options: AccessiOptions);
+    constructor(filtriService: FiltriService);
     getTipoFiltri(res: Response): Promise<Response<any, Record<string, any>>>;
+    createTipoFiltro(request: Request, res: Response, body: CreateFilterTypeRequest): Promise<Response<any, Record<string, any>>>;
+    updateTipoFiltro(request: Request, res: Response, tipFil: number, body: UpdateFilterTypeRequest): Promise<Response<any, Record<string, any>>>;
+    deleteTipoFiltro(request: Request, res: Response, tipFil: number): Promise<Response<any, Record<string, any>>>;
     getFiltriUtente(request: Request, res: Response, req: GetFiltriUtenteRequest): Promise<Response<any, Record<string, any>>>;
     saveFiltriUtente(request: Request, res: Response, req: FiltriUtente): Promise<Response<any, Record<string, any>>>;
 }

package/dist/accessi-module/Controllers/FiltriController.js

@@ -33,9 +33,8 @@ const FiltriService_1 = require("../Services/FiltriService/FiltriService");
 const jwt_strategy_1 = require("../jwt/jwt.strategy");
 const accessControl_1 = require("../security/accessControl");
 let FiltriController = FiltriController_1 = class FiltriController {
-    constructor(filtriService, options) {
+    constructor(filtriService) {
         this.filtriService = filtriService;
-        this.options = options;
     }
     getTipoFiltri(res) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -48,6 +47,42 @@ let FiltriController = FiltriController_1 = class FiltriController {
             }
         });
     }
+    createTipoFiltro(request, res, body) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare tipi filtro.');
+                yield this.filtriService.createTipoFiltro(body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo filtro ${body.tipFil} e' stato creato con successo.`, common_1.HttpStatus.CREATED);
+            }
+            catch (error) {
+                return Utilities_1.RestUtilities.sendErrorMessage(res, error, FiltriController_1.name);
+            }
+        });
+    }
+    updateTipoFiltro(request, res, tipFil, body) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare tipi filtro.');
+                yield this.filtriService.updateTipoFiltro(tipFil, body);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo filtro ${tipFil} e' stato aggiornato con successo.`);
+            }
+            catch (error) {
+                return Utilities_1.RestUtilities.sendErrorMessage(res, error, FiltriController_1.name);
+            }
+        });
+    }
+    deleteTipoFiltro(request, res, tipFil) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono eliminare tipi filtro.');
+                yield this.filtriService.deleteTipoFiltro(tipFil);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Il tipo filtro ${tipFil} e' stato eliminato con successo.`);
+            }
+            catch (error) {
+                return Utilities_1.RestUtilities.sendErrorMessage(res, error, FiltriController_1.name);
+            }
+        });
+    }
     getFiltriUtente(request, res, req) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
@@ -106,6 +141,60 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], FiltriController.prototype, "getTipoFiltri", null);
+__decorate([
+    (0, common_1.Post)('tipi'),
+    (0, swagger_1.ApiOperation)({
+        operationId: 'createTipoFiltro',
+        summary: 'Crea un tipo di filtro',
+        description: 'Inserisce una nuova voce nel catalogo dei tipi di filtro. Operazione riservata al superutente.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Tipo filtro creato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Dtos_1.CreateFilterTypeRequest]),
+    __metadata("design:returntype", Promise)
+], FiltriController.prototype, "createTipoFiltro", null);
+__decorate([
+    (0, common_1.Put)('tipi/:tipFil'),
+    (0, swagger_1.ApiOperation)({
+        operationId: 'updateTipoFiltro',
+        summary: 'Aggiorna un tipo di filtro',
+        description: 'Aggiorna descrizione, campo o stato di un tipo di filtro esistente.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'tipFil', description: 'Identificativo del tipo filtro', required: true, example: 1, type: Number }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Tipo filtro aggiornato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Param)('tipFil', common_1.ParseIntPipe)),
+    __param(3, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Number, Dtos_1.UpdateFilterTypeRequest]),
+    __metadata("design:returntype", Promise)
+], FiltriController.prototype, "updateTipoFiltro", null);
+__decorate([
+    (0, common_1.Delete)('tipi/:tipFil'),
+    (0, swagger_1.ApiOperation)({
+        operationId: 'deleteTipoFiltro',
+        summary: 'Elimina un tipo di filtro',
+        description: 'Elimina un tipo di filtro solo se nessun filtro utente lo utilizza.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'tipFil', description: 'Identificativo del tipo filtro', required: true, example: 1, type: Number }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Tipo filtro eliminato con successo', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Param)('tipFil', common_1.ParseIntPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Number]),
+    __metadata("design:returntype", Promise)
+], FiltriController.prototype, "deleteTipoFiltro", null);
 __decorate([
     (0, common_1.Get)('utente'),
     (0, swagger_1.ApiOperation)({
@@ -178,8 +267,9 @@ exports.FiltriController = FiltriController = FiltriController_1 = __decorate([
     (0, swagger_1.ApiTags)('Filtri'),
     (0, swagger_1.ApiBearerAuth)(),
     (0, common_1.Controller)('accessi/filtri'),
-    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
-    __param(1, (0, common_1.Inject)('ACCESSI_OPTIONS')),
-    __metadata("design:paramtypes", [FiltriService_1.FiltriService, Object])
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard)
+    /** API per lettura e persistenza dei filtri applicativi collegati a un utente Accessi. */
+    ,
+    __metadata("design:paramtypes", [FiltriService_1.FiltriService])
 ], FiltriController);
 //# sourceMappingURL=FiltriController.js.map

package/dist/accessi-module/Controllers/FiltriController.js.map

@@ -1 +1 @@
-{"version":3,"file":"FiltriController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/FiltriController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAiG;AACjG,6CAAoF;AAEpF,+CAAgD;AAEhD,uDAAqE;AACrE,kCAAwF;AACxF,mDAAuD;AACvD,2EAAwE;AACxE,sDAAqD;AACrD,6DAImC;AAM5B,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAC3B,YACmB,aAA4B,EACD,OAAuB;QADlD,kBAAa,GAAb,aAAa,CAAe;QACD,YAAO,GAAP,OAAO,CAAgB;IAClE,CAAC;IAkBE,aAAa,CAAQ,GAAa;;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;gBAC1D,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IA4BK,eAAe,CACZ,OAAgB,EAChB,GAAa,EACX,GAA2B;;YAEpC,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,CAAC;gBAEnC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,IAAA,+BAAe,EACb,iBAAiB,EACjB,0EAA0E,CAC3E,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAAC,EACtB,qCAAqC,CACtC,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;gBACxE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IA4BK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACZ,GAAiB;;;YAEzB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,mCAAI,iBAAiB,CAAC,YAAY,CAAC;gBAErE,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAAC,EACtB,qCAAqC,CACtC,CAAC;gBAEF,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,cAAc,kCACrD,GAAG,KACN,MAAM,EAAE,cAAc,IACtB,CAAC;gBACH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,qCAAqC,cAAc,2BAA2B,CAC/E,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AA3IY,4CAAgB;AAsBrB;IAhBL,IAAA,YAAG,EAAC,MAAM,CAAC;IACX,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,wDAAwD;KACtE,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kDAAkD;QAC/D,IAAI,EAAE,8BAAiB;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,4BAAa;KACpB,CAAC;IACmB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAOzB;AA4BK;IA1BL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,yDAAyD;KACvE,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sDAAsD;QACnE,IAAI,EAAE,8BAAuB;KAC9B,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,4BAA4B;QACzC,IAAI,EAAE,4BAAa;KACpB,CAAC;IAEC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,GAAE,CAAA;;qDAAM,6BAAsB;;uDAwBrC;AA4BK;IA1BL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,4CAA4C;QACrD,WAAW,EAAE,+DAA+D;KAC7E,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,4BAAa;KACpB,CAAC;IAEC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;;qDAAM,mBAAY;;wDAuB1B;2BA1IU,gBAAgB;IAJ5B,IAAA,iBAAO,EAAC,QAAQ,CAAC;IACjB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,gBAAgB,CAAC;IAC5B,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAIrB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;qCADM,6BAAa;GAFpC,gBAAgB,CA2I5B","sourcesContent":["import { Body, Controller, Get, Inject, Post, Query, Req, Res, UseGuards } from '@nestjs/common';\nimport { ApiBearerAuth, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';\nimport { Request, Response } from 'express';\nimport { RestUtilities } from '../../Utilities';\nimport { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\nimport { FiltriUtente, GetFiltriUtenteRequest, GetFiltriUtenteResponse } from '../Dtos';\nimport { GetFiltriResponse } from '../Dtos/TipoFiltro';\nimport { FiltriService } from '../Services/FiltriService/FiltriService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport {\n  ensureSelfOrSuperUser,\n  ensureSuperUser,\n  getAuthenticatedAccessiUser,\n} from '../security/accessControl';\n\n@ApiTags('Filtri')\n@ApiBearerAuth()\n@Controller('accessi/filtri')\n@UseGuards(JwtSimpleGuard)\nexport class FiltriController {\n  constructor(\n    private readonly filtriService: FiltriService,\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions,\n  ) {}\n\n  @Get('tipi')\n  @ApiOperation({\n    operationId: 'getTipiFiltro',\n    summary: 'Recupera la lista dei tipi di filtri',\n    description: 'Ritorna tutti i tipi di filtri disponibili nel sistema',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Lista dei tipi di filtri recuperata con successo',\n    type: GetFiltriResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno durante il recupero dei tipi di filtri',\n    type: ErrorResponse,\n  })\n  async getTipoFiltri(@Res() res: Response) {\n    try {\n      const response = await this.filtriService.getTipoFiltri();\n      return RestUtilities.sendBaseResponse(res, response);\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Get('utente')\n  @ApiOperation({\n    operationId: 'getFiltriUtente',\n    summary: 'Recupera i filtri di un utente',\n    description: 'Ritorna tutti i filtri associati ad un utente specifico',\n  })\n  @ApiResponse({\n    status: 200,\n    description: \"Lista dei filtri dell'utente recuperata con successo\",\n    type: GetFiltriUtenteResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nella richiesta.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 403,\n    description: 'Operazione non autorizzata.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno del server.',\n    type: ErrorResponse,\n  })\n  async getFiltriUtente(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Query() req: GetFiltriUtenteRequest,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const targetUserCode = req?.codUte;\n\n      if (targetUserCode === undefined) {\n        ensureSuperUser(\n          authenticatedUser,\n          'Solo gli amministratori possono consultare i filtri di tutti gli utenti.',\n        );\n      } else {\n        ensureSelfOrSuperUser(\n          authenticatedUser,\n          Number(targetUserCode),\n          'Puoi consultare solo i tuoi filtri.',\n        );\n      }\n\n      const response = await this.filtriService.getFiltriUser(targetUserCode);\n      return RestUtilities.sendBaseResponse(res, response);\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n\n  @Post('utente')\n  @ApiOperation({\n    operationId: 'saveFiltriUtente',\n    summary: 'Inserisce o aggiorna i filtri di un utente',\n    description: 'Permette di salvare i filtri associati ad un utente specifico',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Filtri utente salvati con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore di validazione nei dati inviati.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 403,\n    description: 'Operazione non autorizzata.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno durante il salvataggio dei filtri utente',\n    type: ErrorResponse,\n  })\n  async saveFiltriUtente(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Body() req: FiltriUtente,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const targetUserCode = req?.codUte ?? authenticatedUser.codiceUtente;\n\n      ensureSelfOrSuperUser(\n        authenticatedUser,\n        Number(targetUserCode),\n        'Puoi modificare solo i tuoi filtri.',\n      );\n\n      await this.filtriService.upsertFiltriUtente(targetUserCode, {\n        ...req,\n        codUte: targetUserCode,\n      });\n      return RestUtilities.sendOKMessage(\n        res,\n        `Aggiornamento filtri per l'utente ${targetUserCode} effettuato correttamente`,\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\n    }\n  }\n}\n"]}
+{"version":3,"file":"FiltriController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/FiltriController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAcwB;AACxB,6CAA8F;AAE9F,+CAAgD;AAChD,uDAAqE;AACrE,kCAMiB;AACjB,mDAAuD;AACvD,2EAAwE;AACxE,sDAAqD;AACrD,6DAImC;AAO5B,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAC3B,YACmB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAkBE,aAAa,CAAQ,GAAa;;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;gBAC1D,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IAWK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACZ,IAA6B;;YAErC,IAAI,CAAC;gBACH,IAAA,+BAAe,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,qDAAqD,CAAC,CAAC;gBAC7G,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAChD,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,kBAAkB,IAAI,CAAC,MAAM,gCAAgC,EAC7D,mBAAU,CAAC,OAAO,CACnB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IAYK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACW,MAAc,EACrC,IAA6B;;YAErC,IAAI,CAAC;gBACH,IAAA,+BAAe,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,yDAAyD,CAAC,CAAC;gBACjH,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACxD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,MAAM,oCAAoC,CAAC,CAAC;YACxG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IAYK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACW,MAAc;;YAE7C,IAAI,CAAC;gBACH,IAAA,+BAAe,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,wDAAwD,CAAC,CAAC;gBAChH,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAClD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,MAAM,mCAAmC,CAAC,CAAC;YACvG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IA4BK,eAAe,CACZ,OAAgB,EAChB,GAAa,EACX,GAA2B;;YAEpC,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,CAAC;gBAEnC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,IAAA,+BAAe,EACb,iBAAiB,EACjB,0EAA0E,CAC3E,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAAC,EACtB,qCAAqC,CACtC,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;gBACxE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;IA4BK,gBAAgB,CACb,OAAgB,EAChB,GAAa,EACZ,GAAiB;;;YAEzB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,mCAAI,iBAAiB,CAAC,YAAY,CAAC;gBAErE,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,MAAM,CAAC,cAAc,CAAC,EACtB,qCAAqC,CACtC,CAAC;gBAEF,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,cAAc,kCACrD,GAAG,KACN,MAAM,EAAE,cAAc,IACtB,CAAC;gBACH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,qCAAqC,cAAc,2BAA2B,CAC/E,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAtNY,4CAAgB;AAqBrB;IAhBL,IAAA,YAAG,EAAC,MAAM,CAAC;IACX,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,wDAAwD;KACtE,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kDAAkD;QAC/D,IAAI,EAAE,8BAAiB;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,4BAAa;KACpB,CAAC;IACmB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAOzB;AAWK;IATL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,gGAAgG;KAC9G,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iCAAiC,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IAClG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAEzF,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;;qDAAO,8BAAuB;;wDAatC;AAYK;IAVL,IAAA,YAAG,EAAC,cAAc,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qCAAqC,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACtG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAEzF,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,qBAAY,CAAC,CAAA;IAC7B,WAAA,IAAA,aAAI,GAAE,CAAA;;6DAAO,8BAAuB;;wDAStC;AAYK;IAVL,IAAA,eAAM,EAAC,cAAc,CAAC;IACtB,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,2BAA2B;QACpC,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oCAAoC,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACrG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAEzF,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,qBAAY,CAAC,CAAA;;;;wDAS/B;AA4BK;IA1BL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,yDAAyD;KACvE,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sDAAsD;QACnE,IAAI,EAAE,8BAAuB;KAC9B,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,4BAA4B;QACzC,IAAI,EAAE,4BAAa;KACpB,CAAC;IAEC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,GAAE,CAAA;;qDAAM,6BAAsB;;uDAwBrC;AA4BK;IA1BL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC;QACZ,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,4CAA4C;QACrD,WAAW,EAAE,+DAA+D;KAC7E,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,4BAAa;KACpB,CAAC;IAEC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;;qDAAM,mBAAY;;wDAuB1B;2BArNU,gBAAgB;IAL5B,IAAA,iBAAO,EAAC,QAAQ,CAAC;IACjB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,gBAAgB,CAAC;IAC5B,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAC1B,0FAA0F;;qCAGtD,6BAAa;GAFpC,gBAAgB,CAsN5B","sourcesContent":["import {\r\n  Body,\r\n  Controller,\r\n  Delete,\r\n  Get,\r\n  HttpStatus,\r\n  Param,\r\n  ParseIntPipe,\r\n  Post,\r\n  Put,\r\n  Query,\r\n  Req,\r\n  Res,\r\n  UseGuards,\r\n} from '@nestjs/common';\r\nimport { ApiBearerAuth, ApiOperation, ApiParam, ApiResponse, ApiTags } from '@nestjs/swagger';\r\nimport { Request, Response } from 'express';\r\nimport { RestUtilities } from '../../Utilities';\r\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\r\nimport {\r\n  CreateFilterTypeRequest,\r\n  FiltriUtente,\r\n  GetFiltriUtenteRequest,\r\n  GetFiltriUtenteResponse,\r\n  UpdateFilterTypeRequest,\r\n} from '../Dtos';\r\nimport { GetFiltriResponse } from '../Dtos/TipoFiltro';\nimport { FiltriService } from '../Services/FiltriService/FiltriService';\r\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\r\nimport {\r\n  ensureSelfOrSuperUser,\r\n  ensureSuperUser,\r\n  getAuthenticatedAccessiUser,\r\n} from '../security/accessControl';\r\n\r\n@ApiTags('Filtri')\r\n@ApiBearerAuth()\n@Controller('accessi/filtri')\n@UseGuards(JwtSimpleGuard)\n/** API per lettura e persistenza dei filtri applicativi collegati a un utente Accessi. */\nexport class FiltriController {\n  constructor(\r\n    private readonly filtriService: FiltriService,\r\n  ) {}\r\n\r\n  @Get('tipi')\r\n  @ApiOperation({\r\n    operationId: 'getTipiFiltro',\r\n    summary: 'Recupera la lista dei tipi di filtri',\r\n    description: 'Ritorna tutti i tipi di filtri disponibili nel sistema',\r\n  })\r\n  @ApiResponse({\r\n    status: 200,\r\n    description: 'Lista dei tipi di filtri recuperata con successo',\r\n    type: GetFiltriResponse,\r\n  })\r\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno durante il recupero dei tipi di filtri',\n    type: ErrorResponse,\n  })\n  async getTipoFiltri(@Res() res: Response) {\r\n    try {\r\n      const response = await this.filtriService.getTipoFiltri();\r\n      return RestUtilities.sendBaseResponse(res, response);\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\r\n    }\r\n  }\r\n\r\n  @Post('tipi')\r\n  @ApiOperation({\r\n    operationId: 'createTipoFiltro',\r\n    summary: 'Crea un tipo di filtro',\r\n    description: 'Inserisce una nuova voce nel catalogo dei tipi di filtro. Operazione riservata al superutente.',\r\n  })\r\n  @ApiResponse({ status: 201, description: 'Tipo filtro creato con successo', type: ActionResponse })\r\n  @ApiResponse({ status: 400, description: 'Dati non validi', type: ErrorResponse })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\r\n  async createTipoFiltro(\r\n    @Req() request: Request,\r\n    @Res() res: Response,\r\n    @Body() body: CreateFilterTypeRequest,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono creare tipi filtro.');\r\n      await this.filtriService.createTipoFiltro(body);\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `Il tipo filtro ${body.tipFil} e' stato creato con successo.`,\r\n        HttpStatus.CREATED,\r\n      );\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\r\n    }\r\n  }\r\n\r\n  @Put('tipi/:tipFil')\r\n  @ApiOperation({\r\n    operationId: 'updateTipoFiltro',\r\n    summary: 'Aggiorna un tipo di filtro',\r\n    description: 'Aggiorna descrizione, campo o stato di un tipo di filtro esistente.',\r\n  })\r\n  @ApiParam({ name: 'tipFil', description: 'Identificativo del tipo filtro', required: true, example: 1, type: Number })\r\n  @ApiResponse({ status: 200, description: 'Tipo filtro aggiornato con successo', type: ActionResponse })\r\n  @ApiResponse({ status: 400, description: 'Dati non validi', type: ErrorResponse })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\r\n  async updateTipoFiltro(\r\n    @Req() request: Request,\r\n    @Res() res: Response,\r\n    @Param('tipFil', ParseIntPipe) tipFil: number,\r\n    @Body() body: UpdateFilterTypeRequest,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono modificare tipi filtro.');\r\n      await this.filtriService.updateTipoFiltro(tipFil, body);\r\n      return RestUtilities.sendOKMessage(res, `Il tipo filtro ${tipFil} e' stato aggiornato con successo.`);\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\r\n    }\r\n  }\r\n\r\n  @Delete('tipi/:tipFil')\r\n  @ApiOperation({\r\n    operationId: 'deleteTipoFiltro',\r\n    summary: 'Elimina un tipo di filtro',\r\n    description: 'Elimina un tipo di filtro solo se nessun filtro utente lo utilizza.',\r\n  })\r\n  @ApiParam({ name: 'tipFil', description: 'Identificativo del tipo filtro', required: true, example: 1, type: Number })\r\n  @ApiResponse({ status: 200, description: 'Tipo filtro eliminato con successo', type: ActionResponse })\r\n  @ApiResponse({ status: 400, description: 'Dati non validi', type: ErrorResponse })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\r\n  async deleteTipoFiltro(\r\n    @Req() request: Request,\r\n    @Res() res: Response,\r\n    @Param('tipFil', ParseIntPipe) tipFil: number,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono eliminare tipi filtro.');\r\n      await this.filtriService.deleteTipoFiltro(tipFil);\r\n      return RestUtilities.sendOKMessage(res, `Il tipo filtro ${tipFil} e' stato eliminato con successo.`);\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\r\n    }\r\n  }\r\n\r\n  @Get('utente')\r\n  @ApiOperation({\r\n    operationId: 'getFiltriUtente',\r\n    summary: 'Recupera i filtri di un utente',\r\n    description: 'Ritorna tutti i filtri associati ad un utente specifico',\r\n  })\r\n  @ApiResponse({\n    status: 200,\n    description: \"Lista dei filtri dell'utente recuperata con successo\",\n    type: GetFiltriUtenteResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nella richiesta.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 403,\n    description: 'Operazione non autorizzata.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno del server.',\n    type: ErrorResponse,\n  })\n  async getFiltriUtente(\r\n    @Req() request: Request,\r\n    @Res() res: Response,\r\n    @Query() req: GetFiltriUtenteRequest,\r\n  ) {\r\n    try {\r\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\r\n      const targetUserCode = req?.codUte;\r\n\r\n      if (targetUserCode === undefined) {\r\n        ensureSuperUser(\r\n          authenticatedUser,\r\n          'Solo gli amministratori possono consultare i filtri di tutti gli utenti.',\r\n        );\r\n      } else {\r\n        ensureSelfOrSuperUser(\r\n          authenticatedUser,\r\n          Number(targetUserCode),\r\n          'Puoi consultare solo i tuoi filtri.',\r\n        );\r\n      }\r\n\r\n      const response = await this.filtriService.getFiltriUser(targetUserCode);\r\n      return RestUtilities.sendBaseResponse(res, response);\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\r\n    }\r\n  }\r\n\r\n  @Post('utente')\r\n  @ApiOperation({\r\n    operationId: 'saveFiltriUtente',\r\n    summary: 'Inserisce o aggiorna i filtri di un utente',\r\n    description: 'Permette di salvare i filtri associati ad un utente specifico',\r\n  })\r\n  @ApiResponse({\n    status: 200,\n    description: 'Filtri utente salvati con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore di validazione nei dati inviati.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 403,\n    description: 'Operazione non autorizzata.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno durante il salvataggio dei filtri utente',\n    type: ErrorResponse,\n  })\n  async saveFiltriUtente(\r\n    @Req() request: Request,\r\n    @Res() res: Response,\r\n    @Body() req: FiltriUtente,\r\n  ) {\r\n    try {\r\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\r\n      const targetUserCode = req?.codUte ?? authenticatedUser.codiceUtente;\r\n\r\n      ensureSelfOrSuperUser(\r\n        authenticatedUser,\r\n        Number(targetUserCode),\r\n        'Puoi modificare solo i tuoi filtri.',\r\n      );\r\n\r\n      await this.filtriService.upsertFiltriUtente(targetUserCode, {\r\n        ...req,\r\n        codUte: targetUserCode,\r\n      });\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `Aggiornamento filtri per l'utente ${targetUserCode} effettuato correttamente`,\r\n      );\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, FiltriController.name);\r\n    }\r\n  }\r\n}\r\n"]}

package/dist/accessi-module/Controllers/PermissionController.d.ts

@@ -1,13 +1,14 @@
 import { Request, Response } from 'express';
 import { AssignPermissionsToUserRequest } from '../Dtos/AssignPermissionsToUserRequest';
 import { AssignRolesToUserRequest } from '../Dtos/AssignRolesToUserRequest';
+import { CreateMenuGroupRequest, CreateMenuRequest, CreateMenuTypeRequest, UpdateMenuGroupRequest, UpdateMenuRequest, UpdateMenuTypeRequest } from '../Dtos/CatalogDtos';
 import { Role } from '../Dtos/Role';
 import { PermissionService } from '../Services/PermissionService/PermissionService';
 export declare class PermissionController {
     private readonly permissionService;
     constructor(permissionService: PermissionService);
     private sendControllerError;
-    getRoles(res: Response): Promise<void>;
+    getRoles(res: Response): Promise<Response>;
     updateRole(request: Request, codiceRuolo: number, role: Role, res: Response): Promise<Response<any, Record<string, any>>>;
     createRole(request: Request, res: Response, role: Role): Promise<Response<any, Record<string, any>>>;
     assignRolesToUser(request: Request, res: Response, codiceUtente: number, assignRolesRequest: AssignRolesToUserRequest): Promise<Response<any, Record<string, any>>>;
@@ -15,5 +16,15 @@ export declare class PermissionController {
     deleteRole(request: Request, codiceRuolo: number, res: Response): Promise<Response<any, Record<string, any>>>;
     getMenus(res: Response): Promise<Response<any, Record<string, any>>>;
     getGroupsWithMenus(includeDisabled: string, res: Response): Promise<Response<any, Record<string, any>>>;
+    getMenuTypes(res: Response): Promise<Response<any, Record<string, any>>>;
+    createMenu(request: Request, body: CreateMenuRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    updateMenu(request: Request, codiceMenu: string, body: UpdateMenuRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    deleteMenu(request: Request, codiceMenu: string, res: Response): Promise<Response<any, Record<string, any>>>;
+    createMenuGroup(request: Request, body: CreateMenuGroupRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    updateMenuGroup(request: Request, codiceGruppo: string, body: UpdateMenuGroupRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    deleteMenuGroup(request: Request, codiceGruppo: string, res: Response): Promise<Response<any, Record<string, any>>>;
+    createMenuType(request: Request, body: CreateMenuTypeRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    updateMenuType(request: Request, codiceTipo: string, body: UpdateMenuTypeRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    deleteMenuType(request: Request, codiceTipo: string, res: Response): Promise<Response<any, Record<string, any>>>;
     getUserRolesAndGrants(request: Request, codiceUtente: number, res: Response): Promise<Response<any, Record<string, any>>>;
 }