emilsoftware-utilities 2.0.0-dev.22 → 2.0.0-dev.24

package/dist/accessi-module/Controllers/ServiceTokenController.js

@@ -0,0 +1,176 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var ServiceTokenController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceTokenController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const Utilities_1 = require("../../Utilities");
+const Dtos_1 = require("../Dtos");
+const jwt_strategy_1 = require("../jwt/jwt.strategy");
+const accessControl_1 = require("../security/accessControl");
+const ServiceTokenService_1 = require("../Services/ServiceTokenService/ServiceTokenService");
+/**
+ * Gestione amministrativa dei token di servizio (macchina-a-macchina).
+ *
+ * Il segreto e mostrato una sola volta alla creazione/rotazione; le operazioni richiedono un
+ * superutente Accessi. Gli endpoint di utilizzo dei token non sono qui: i consumer autenticano
+ * con `Authorization: Bearer <token>` tramite `ServiceTokenGuard`.
+ */
+let ServiceTokenController = ServiceTokenController_1 = class ServiceTokenController {
+    constructor(serviceTokenService, options) {
+        this.serviceTokenService = serviceTokenService;
+        this.options = options;
+    }
+    assertEnabled() {
+        var _a;
+        if (((_a = this.options.serviceTokens) === null || _a === void 0 ? void 0 : _a.enabled) === false) {
+            throw new common_1.HttpException('I token di servizio sono disabilitati in questa istanza.', 404);
+        }
+    }
+    requireSuperUser(req) {
+        this.assertEnabled();
+        const user = (0, accessControl_1.getAuthenticatedAccessiUser)(req);
+        (0, accessControl_1.ensureSuperUser)(user, 'Solo un superutente puo gestire i token di servizio.');
+        return user;
+    }
+    sendError(res, error) {
+        // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).
+        return Utilities_1.RestUtilities.sendErrorMessage(res, error, ServiceTokenController_1.name);
+    }
+    create(body, req, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const user = this.requireSuperUser(req);
+                const issued = yield this.serviceTokenService.issue(body, user.codiceUtente);
+                return Utilities_1.RestUtilities.sendBaseResponse(res, issued, 201);
+            }
+            catch (error) {
+                return this.sendError(res, error);
+            }
+        });
+    }
+    list(includeRevoked, req, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                this.requireSuperUser(req);
+                const tokens = yield this.serviceTokenService.list(includeRevoked === 'true');
+                return Utilities_1.RestUtilities.sendBaseResponse(res, tokens);
+            }
+            catch (error) {
+                return this.sendError(res, error);
+            }
+        });
+    }
+    revoke(tokenId, req, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const user = this.requireSuperUser(req);
+                yield this.serviceTokenService.revoke(tokenId, user.codiceUtente);
+                return Utilities_1.RestUtilities.sendOKMessage(res, 'Token di servizio revocato con successo.');
+            }
+            catch (error) {
+                return this.sendError(res, error);
+            }
+        });
+    }
+    rotate(tokenId, req, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const user = this.requireSuperUser(req);
+                const issued = yield this.serviceTokenService.rotate(tokenId, user.codiceUtente);
+                return Utilities_1.RestUtilities.sendBaseResponse(res, issued, 201);
+            }
+            catch (error) {
+                return this.sendError(res, error);
+            }
+        });
+    }
+};
+exports.ServiceTokenController = ServiceTokenController;
+__decorate([
+    (0, common_1.Post)(),
+    (0, swagger_1.ApiOperation)({ summary: 'Emetti un nuovo token di servizio', operationId: 'createServiceToken' }),
+    (0, swagger_1.ApiBody)({ type: Dtos_1.CreateServiceTokenRequest }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Token creato; il segreto e mostrato solo in questa risposta.', type: Dtos_1.CreateServiceTokenResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Dati non validi', type: Dtos_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 401, description: 'Token Accessi mancante o non valido', type: Dtos_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Richiede un superutente', type: Dtos_1.ErrorResponse }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Req)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Dtos_1.CreateServiceTokenRequest, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ServiceTokenController.prototype, "create", null);
+__decorate([
+    (0, common_1.Get)(),
+    (0, swagger_1.ApiOperation)({ summary: 'Elenca i token di servizio (senza segreti)', operationId: 'getServiceTokens' }),
+    (0, swagger_1.ApiQuery)({ name: 'includeRevoked', required: false, description: 'Includi anche i token revocati.', type: Boolean }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Elenco dei token.', type: Dtos_1.GetServiceTokensResponse }),
+    (0, swagger_1.ApiResponse)({ status: 401, description: 'Token Accessi mancante o non valido', type: Dtos_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Richiede un superutente', type: Dtos_1.ErrorResponse }),
+    __param(0, (0, common_1.Query)('includeRevoked')),
+    __param(1, (0, common_1.Req)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ServiceTokenController.prototype, "list", null);
+__decorate([
+    (0, common_1.Delete)(':tokenId'),
+    (0, swagger_1.ApiOperation)({ summary: 'Revoca un token di servizio', operationId: 'revokeServiceToken' }),
+    (0, swagger_1.ApiParam)({ name: 'tokenId', description: 'Identificativo del token.', example: 'st_3f1a2b3c4d5e6f708192a3b4c5d6e7f8' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Token revocato.', type: Dtos_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Token non trovato', type: Dtos_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Richiede un superutente', type: Dtos_1.ErrorResponse }),
+    __param(0, (0, common_1.Param)('tokenId')),
+    __param(1, (0, common_1.Req)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ServiceTokenController.prototype, "revoke", null);
+__decorate([
+    (0, common_1.Post)(':tokenId/rotate'),
+    (0, swagger_1.ApiOperation)({ summary: 'Ruota un token di servizio', operationId: 'rotateServiceToken' }),
+    (0, swagger_1.ApiParam)({ name: 'tokenId', description: 'Identificativo del token da sostituire.', example: 'st_3f1a2b3c4d5e6f708192a3b4c5d6e7f8' }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Nuovo token emesso; il vecchio e revocato.', type: Dtos_1.CreateServiceTokenResponse }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Token non trovato', type: Dtos_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Richiede un superutente', type: Dtos_1.ErrorResponse }),
+    __param(0, (0, common_1.Param)('tokenId')),
+    __param(1, (0, common_1.Req)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ServiceTokenController.prototype, "rotate", null);
+exports.ServiceTokenController = ServiceTokenController = ServiceTokenController_1 = __decorate([
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, swagger_1.ApiTags)('ServiceToken'),
+    (0, common_1.Controller)('accessi/service-token'),
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
+    __param(1, (0, common_1.Inject)('ACCESSI_OPTIONS')),
+    __metadata("design:paramtypes", [ServiceTokenService_1.ServiceTokenService, Object])
+], ServiceTokenController);
+//# sourceMappingURL=ServiceTokenController.js.map

package/dist/accessi-module/Controllers/ServiceTokenController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceTokenController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/ServiceTokenController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA+H;AAC/H,6CAAiH;AAEjH,+CAAgD;AAEhD,kCAKiB;AACjB,sDAAqD;AACrD,6DAAyF;AACzF,6FAA0F;AAE1F;;;;;;GAMG;AAKI,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IACjC,YACmB,mBAAwC,EACb,OAAuB;QADlD,wBAAmB,GAAnB,mBAAmB,CAAqB;QACb,YAAO,GAAP,OAAO,CAAgB;IAClE,CAAC;IAEI,aAAa;;QACnB,IAAI,CAAA,MAAA,IAAI,CAAC,OAAO,CAAC,aAAa,0CAAE,OAAO,MAAK,KAAK,EAAE,CAAC;YAClD,MAAM,IAAI,sBAAa,CAAC,0DAA0D,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,GAAY;QACnC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAA,2CAA2B,EAAC,GAAG,CAAC,CAAC;QAC9C,IAAA,+BAAe,EAAC,IAAI,EAAE,sDAAsD,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CAAC,GAAa,EAAE,KAAc;QAC7C,gFAAgF;QAChF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;IASK,MAAM,CACF,IAA+B,EAChC,GAAY,EACZ,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7E,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;KAAA;IAQK,IAAI,CACiB,cAAkC,EACpD,GAAY,EACZ,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC;gBAC9E,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;KAAA;IAQK,MAAM,CACQ,OAAe,EAC1B,GAAY,EACZ,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACxC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBAClE,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;KAAA;IAQK,MAAM,CACQ,OAAe,EAC1B,GAAY,EACZ,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBACjF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAxGY,wDAAsB;AA+B3B;IAPL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACjG,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,gCAAyB,EAAE,CAAC;IAC5C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,8DAA8D,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC3I,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qCAAqC,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACrG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yBAAyB,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAEvF,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;qCAFQ,gCAAyB;;oDAWxC;AAQK;IANL,IAAA,YAAG,GAAE;IACL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACxG,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACpH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,EAAE,+BAAwB,EAAE,CAAC;IAC9F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qCAAqC,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACrG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yBAAyB,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAEvF,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;;;kDASP;AAQK;IANL,IAAA,eAAM,EAAC,UAAU,CAAC;IAClB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAC3F,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IACvH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yBAAyB,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAEvF,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;IAChB,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;;;oDASP;AAQK;IANL,IAAA,aAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAC1F,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yCAAyC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IACrI,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4CAA4C,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IACzH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yBAAyB,EAAE,IAAI,EAAE,oBAAa,EAAE,CAAC;IAEvF,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;IAChB,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;;;oDASP;iCAvGU,sBAAsB;IAJlC,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAO,EAAC,cAAc,CAAC;IACvB,IAAA,mBAAU,EAAC,uBAAuB,CAAC;IACnC,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAIrB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;qCADY,yCAAmB;GAFhD,sBAAsB,CAwGlC","sourcesContent":["import { Body, Controller, Delete, Get, HttpException, Inject, Param, Post, Query, Req, Res, UseGuards } from '@nestjs/common';\nimport { ApiBearerAuth, ApiBody, ApiOperation, ApiParam, ApiQuery, ApiResponse, ApiTags } from '@nestjs/swagger';\nimport { Request, Response } from 'express';\nimport { RestUtilities } from '../../Utilities';\nimport type { AccessiOptions } from '../AccessiModule';\nimport {\n  CreateServiceTokenRequest,\n  CreateServiceTokenResponse,\n  ErrorResponse,\n  GetServiceTokensResponse,\n} from '../Dtos';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport { getAuthenticatedAccessiUser, ensureSuperUser } from '../security/accessControl';\nimport { ServiceTokenService } from '../Services/ServiceTokenService/ServiceTokenService';\n\n/**\n * Gestione amministrativa dei token di servizio (macchina-a-macchina).\n *\n * Il segreto e mostrato una sola volta alla creazione/rotazione; le operazioni richiedono un\n * superutente Accessi. Gli endpoint di utilizzo dei token non sono qui: i consumer autenticano\n * con `Authorization: Bearer <token>` tramite `ServiceTokenGuard`.\n */\n@ApiBearerAuth()\n@ApiTags('ServiceToken')\n@Controller('accessi/service-token')\n@UseGuards(JwtSimpleGuard)\nexport class ServiceTokenController {\n  constructor(\n    private readonly serviceTokenService: ServiceTokenService,\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions,\n  ) {}\n\n  private assertEnabled(): void {\n    if (this.options.serviceTokens?.enabled === false) {\n      throw new HttpException('I token di servizio sono disabilitati in questa istanza.', 404);\n    }\n  }\n\n  private requireSuperUser(req: Request) {\n    this.assertEnabled();\n    const user = getAuthenticatedAccessiUser(req);\n    ensureSuperUser(user, 'Solo un superutente puo gestire i token di servizio.');\n    return user;\n  }\n\n  private sendError(res: Response, error: unknown): Response {\n    // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).\n    return RestUtilities.sendErrorMessage(res, error, ServiceTokenController.name);\n  }\n\n  @Post()\n  @ApiOperation({ summary: 'Emetti un nuovo token di servizio', operationId: 'createServiceToken' })\n  @ApiBody({ type: CreateServiceTokenRequest })\n  @ApiResponse({ status: 201, description: 'Token creato; il segreto e mostrato solo in questa risposta.', type: CreateServiceTokenResponse })\n  @ApiResponse({ status: 400, description: 'Dati non validi', type: ErrorResponse })\n  @ApiResponse({ status: 401, description: 'Token Accessi mancante o non valido', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Richiede un superutente', type: ErrorResponse })\n  async create(\n    @Body() body: CreateServiceTokenRequest,\n    @Req() req: Request,\n    @Res() res: Response,\n  ): Promise<Response> {\n    try {\n      const user = this.requireSuperUser(req);\n      const issued = await this.serviceTokenService.issue(body, user.codiceUtente);\n      return RestUtilities.sendBaseResponse(res, issued, 201);\n    } catch (error) {\n      return this.sendError(res, error);\n    }\n  }\n\n  @Get()\n  @ApiOperation({ summary: 'Elenca i token di servizio (senza segreti)', operationId: 'getServiceTokens' })\n  @ApiQuery({ name: 'includeRevoked', required: false, description: 'Includi anche i token revocati.', type: Boolean })\n  @ApiResponse({ status: 200, description: 'Elenco dei token.', type: GetServiceTokensResponse })\n  @ApiResponse({ status: 401, description: 'Token Accessi mancante o non valido', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Richiede un superutente', type: ErrorResponse })\n  async list(\n    @Query('includeRevoked') includeRevoked: string | undefined,\n    @Req() req: Request,\n    @Res() res: Response,\n  ): Promise<Response> {\n    try {\n      this.requireSuperUser(req);\n      const tokens = await this.serviceTokenService.list(includeRevoked === 'true');\n      return RestUtilities.sendBaseResponse(res, tokens);\n    } catch (error) {\n      return this.sendError(res, error);\n    }\n  }\n\n  @Delete(':tokenId')\n  @ApiOperation({ summary: 'Revoca un token di servizio', operationId: 'revokeServiceToken' })\n  @ApiParam({ name: 'tokenId', description: 'Identificativo del token.', example: 'st_3f1a2b3c4d5e6f708192a3b4c5d6e7f8' })\n  @ApiResponse({ status: 200, description: 'Token revocato.', type: ErrorResponse })\n  @ApiResponse({ status: 404, description: 'Token non trovato', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Richiede un superutente', type: ErrorResponse })\n  async revoke(\n    @Param('tokenId') tokenId: string,\n    @Req() req: Request,\n    @Res() res: Response,\n  ): Promise<Response> {\n    try {\n      const user = this.requireSuperUser(req);\n      await this.serviceTokenService.revoke(tokenId, user.codiceUtente);\n      return RestUtilities.sendOKMessage(res, 'Token di servizio revocato con successo.');\n    } catch (error) {\n      return this.sendError(res, error);\n    }\n  }\n\n  @Post(':tokenId/rotate')\n  @ApiOperation({ summary: 'Ruota un token di servizio', operationId: 'rotateServiceToken' })\n  @ApiParam({ name: 'tokenId', description: 'Identificativo del token da sostituire.', example: 'st_3f1a2b3c4d5e6f708192a3b4c5d6e7f8' })\n  @ApiResponse({ status: 201, description: 'Nuovo token emesso; il vecchio e revocato.', type: CreateServiceTokenResponse })\n  @ApiResponse({ status: 404, description: 'Token non trovato', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Richiede un superutente', type: ErrorResponse })\n  async rotate(\n    @Param('tokenId') tokenId: string,\n    @Req() req: Request,\n    @Res() res: Response,\n  ): Promise<Response> {\n    try {\n      const user = this.requireSuperUser(req);\n      const issued = await this.serviceTokenService.rotate(tokenId, user.codiceUtente);\n      return RestUtilities.sendBaseResponse(res, issued, 201);\n    } catch (error) {\n      return this.sendError(res, error);\n    }\n  }\n}\n"]}

package/dist/accessi-module/Controllers/UserController.d.ts

@@ -1,6 +1,7 @@
 import { Request, Response } from 'express';
-import { AccessiOptions } from '../AccessiModule';
+import type { AccessiOptions } from '../AccessiModule';
 import { PublicRegisterRequest } from '../Dtos/PublicRegisterRequest';
+import { RegisterRequest } from '../Dtos/RegisterRequest';
 import { SetStatoRegistrazioneDto } from '../Dtos/SetStatoRegistrazione';
 import { UserDto } from '../Dtos/UserDto';
 import { EmailService } from '../Services/EmailService/EmailService';
@@ -12,11 +13,12 @@ export declare class UserController {
     private readonly logger;
     constructor(accessiOptions: AccessiOptions, userService: UserService, emailService: EmailService);
     private sendControllerError;
-    serveResetPasswordPage(res: Response, token: string): Promise<void>;
-    getUsers(request: Request, res: Response, email?: string, codiceUtente?: number, includeExtensionFields?: boolean, includeGrants?: boolean): Promise<Response<any, Record<string, any>>>;
+    serveResetPasswordPage(res: Response, _token: string): Promise<void>;
+    getUsers(request: Request, res: Response, email?: string, codiceUtente?: number, includeExtensionFields?: boolean, includeGrants?: boolean, limit?: number, offset?: number): Promise<Response<any, Record<string, any>>>;
     deleteUser(request: Request, codiceUtente: number, res: Response): Promise<Response<any, Record<string, any>>>;
     setStatoRegistrazione(request: Request, body: SetStatoRegistrazioneDto, res: Response): Promise<Response<any, Record<string, any>>>;
     register(request: Request, registrationData: PublicRegisterRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    createManagedUser(request: Request, registrationData: RegisterRequest, res: Response): Promise<Response<any, Record<string, any>>>;
     updateUtente(request: Request, codiceUtente: number, user: UserDto, res: Response): Promise<Response<any, Record<string, any>>>;
     setGdpr(request: Request, codiceUtente: number, res: Response): Promise<Response<any, Record<string, any>>>;
 }

package/dist/accessi-module/Controllers/UserController.js

@@ -32,6 +32,7 @@ const BaseResponse_1 = require("../Dtos/BaseResponse");
 const GetUsersResponse_1 = require("../Dtos/GetUsersResponse");
 const PublicRegisterRequest_1 = require("../Dtos/PublicRegisterRequest");
 const RegisterResponse_1 = require("../Dtos/RegisterResponse");
+const RegisterRequest_1 = require("../Dtos/RegisterRequest");
 const SetStatoRegistrazione_1 = require("../Dtos/SetStatoRegistrazione");
 const UserDto_1 = require("../Dtos/UserDto");
 const EmailService_1 = require("../Services/EmailService/EmailService");
@@ -47,24 +48,26 @@ let UserController = UserController_1 = class UserController {
         this.logger = new Logger_1.Logger(UserController_1.name);
     }
     sendControllerError(res, error) {
-        const status = error instanceof common_1.HttpException ? error.getStatus() : common_1.HttpStatus.INTERNAL_SERVER_ERROR;
-        return Utilities_1.RestUtilities.sendErrorMessage(res, error, UserController_1.name, status);
+        // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).
+        return Utilities_1.RestUtilities.sendErrorMessage(res, error, UserController_1.name);
     }
-    serveResetPasswordPage(res, token) {
+    serveResetPasswordPage(res, _token) {
         return __awaiter(this, void 0, void 0, function* () {
             return res.sendFile((0, path_1.join)(__dirname, '..', 'Views', 'reset-password.html'));
         });
     }
-    getUsers(request, res, email, codiceUtente, includeExtensionFields, includeGrants) {
+    getUsers(request, res, email, codiceUtente, includeExtensionFields, includeGrants, limit, offset) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
                 (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono consultare gli utenti.');
-                const filters = { email, codiceUtente };
+                const filters = { email, codiceUtente, limit, offset };
                 const options = {
                     includeExtensionFields: includeExtensionFields !== null && includeExtensionFields !== void 0 ? includeExtensionFields : true,
                     includeGrants: includeGrants !== null && includeGrants !== void 0 ? includeGrants : true,
                 };
                 const users = yield this.userService.getUsers(filters, options);
+                const total = yield this.userService.countUsers({ email, codiceUtente });
+                res.setHeader('X-Total-Count', String(total));
                 return Utilities_1.RestUtilities.sendBaseResponse(res, users);
             }
             catch (error) {
@@ -91,9 +94,9 @@ let UserController = UserController_1 = class UserController {
                 (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare lo stato di registrazione.');
                 const { codiceUtente, statoRegistrazione } = body;
                 if (!codiceUtente)
-                    throw new Error('Il codice utente e\' obbligatorio.');
+                    throw new common_1.BadRequestException('Il codice utente e\' obbligatorio.');
                 if (statoRegistrazione === undefined) {
-                    throw new Error('Lo stato registrazione e\' obbligatorio.');
+                    throw new common_1.BadRequestException('Lo stato registrazione e\' obbligatorio.');
                 }
                 yield this.userService.setStato(codiceUtente, statoRegistrazione);
                 return Utilities_1.RestUtilities.sendOKMessage(res, `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`);
@@ -105,7 +108,11 @@ let UserController = UserController_1 = class UserController {
     }
     register(request, registrationData, res) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             try {
+                if (((_a = this.accessiOptions.publicRegistration) === null || _a === void 0 ? void 0 : _a.enabled) !== true) {
+                    throw new common_1.HttpException('La registrazione pubblica e disabilitata. Un amministratore deve creare l utente.', common_1.HttpStatus.FORBIDDEN);
+                }
                 const rateLimitDecision = (0, publicAuthRateLimit_1.checkPublicAuthRateLimit)(this.accessiOptions, 'register', request, [registrationData === null || registrationData === void 0 ? void 0 : registrationData.email]);
                 if (!rateLimitDecision.allowed) {
                     return (0, publicAuthRateLimit_1.sendPublicAuthRateLimitExceeded)(res, rateLimitDecision.retryAfterSeconds);
@@ -114,7 +121,7 @@ let UserController = UserController_1 = class UserController {
                     allowPrivilegedFields: false,
                 });
                 yield this.emailService.sendPasswordResetEmail(registrationData.email);
-                return Utilities_1.RestUtilities.sendBaseResponse(res, codiceUtente);
+                return Utilities_1.RestUtilities.sendBaseResponse(res, codiceUtente, common_1.HttpStatus.CREATED);
             }
             catch (error) {
                 const status = error instanceof common_1.HttpException ? error.getStatus() : common_1.HttpStatus.BAD_REQUEST;
@@ -122,6 +129,19 @@ let UserController = UserController_1 = class UserController {
             }
         });
     }
+    createManagedUser(request, registrationData, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare utenti.');
+                const codiceUtente = yield this.userService.register(registrationData, { allowPrivilegedFields: true });
+                yield this.emailService.sendPasswordResetEmail(registrationData.email, registrationData.htmlMail);
+                return Utilities_1.RestUtilities.sendBaseResponse(res, codiceUtente, common_1.HttpStatus.CREATED);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
     updateUtente(request, codiceUtente, user, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
@@ -134,7 +154,7 @@ let UserController = UserController_1 = class UserController {
                     (0, accessControl_1.ensureSelfOrSuperUser)(authenticatedUser, codiceUtente, 'Puoi modificare solo il tuo profilo.');
                 }
                 if (user.codiceUtente !== undefined && user.codiceUtente !== codiceUtente) {
-                    throw new Error('Il codice utente nel body non coincide con quello del path.');
+                    throw new common_1.BadRequestException('Il codice utente nel body non coincide con quello del path.');
                 }
                 yield this.userService.updateUser(codiceUtente, user, {
                     allowPrivilegedChanges: authenticatedUser.flagSuper,
@@ -214,6 +234,18 @@ __decorate([
         description: 'Includi permessi',
         type: Boolean,
     }),
+    (0, swagger_1.ApiQuery)({
+        name: 'limit',
+        required: false,
+        description: 'Numero massimo di utenti restituiti (1-1000). Omesso = tutti.',
+        type: Number,
+    }),
+    (0, swagger_1.ApiQuery)({
+        name: 'offset',
+        required: false,
+        description: 'Numero di utenti da saltare (paginazione).',
+        type: Number,
+    }),
     (0, swagger_1.ApiBearerAuth)(),
     (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
     (0, common_1.Get)('get-users'),
@@ -223,8 +255,10 @@ __decorate([
     __param(3, (0, common_1.Query)('codiceUtente', new common_1.ParseIntPipe({ optional: true }))),
     __param(4, (0, common_1.Query)('includeExtensionFields', new common_1.ParseBoolPipe({ optional: true }))),
     __param(5, (0, common_1.Query)('includeGrants', new common_1.ParseBoolPipe({ optional: true }))),
+    __param(6, (0, common_1.Query)('limit', new common_1.ParseIntPipe({ optional: true }))),
+    __param(7, (0, common_1.Query)('offset', new common_1.ParseIntPipe({ optional: true }))),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, String, Number, Boolean, Boolean]),
+    __metadata("design:paramtypes", [Object, Object, String, Number, Boolean, Boolean, Number, Number]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "getUsers", null);
 __decorate([
@@ -290,6 +324,7 @@ __decorate([
 __decorate([
     (0, swagger_1.ApiOperation)({
         summary: 'Registra un nuovo utente',
+        description: 'Disponibile soltanto quando publicRegistration.enabled e true. Per utenti SSO usare il provisioning master nel tag Federated authentication.',
         operationId: 'register',
     }),
     (0, swagger_1.ApiBody)({
@@ -318,6 +353,20 @@ __decorate([
     __metadata("design:paramtypes", [Object, PublicRegisterRequest_1.PublicRegisterRequest, Object]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "register", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Crea un utente locale da amministrazione', operationId: 'createManagedUser', description: 'Riservato a superutente. Crea un utente in attesa di impostazione password e invia la mail di reset.' }),
+    (0, swagger_1.ApiBody)({ type: RegisterRequest_1.RegisterRequest }),
+    (0, swagger_1.ApiCreatedResponse)({ type: RegisterResponse_1.RegisterResponse }),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
+    (0, common_1.Post)('create-managed-user'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, RegisterRequest_1.RegisterRequest, Object]),
+    __metadata("design:returntype", Promise)
+], UserController.prototype, "createManagedUser", null);
 __decorate([
     (0, swagger_1.ApiOperation)({
         summary: 'Aggiorna un utente esistente',
@@ -382,7 +431,12 @@ __decorate([
 ], UserController.prototype, "setGdpr", null);
 exports.UserController = UserController = UserController_1 = __decorate([
     (0, swagger_1.ApiTags)('User'),
-    (0, common_1.Controller)('accessi/user'),
+    (0, common_1.Controller)('accessi/user')
+    /**
+     * Gestione utenti: la registrazione pubblica e opt-in, mentre creazione, stato e profili privilegiati
+     * richiedono un superutente Accessi. Le API restituiscono sempre il wrapper `BaseResponse` storico.
+     */
+    ,
     __param(0, (0, common_1.Inject)('ACCESSI_OPTIONS')),
     __metadata("design:paramtypes", [Object, UserService_1.UserService,
         EmailService_1.EmailService])

package/dist/accessi-module/Controllers/UserController.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/UserController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAkBwB;AAExB,6CASyB;AACzB,+BAA4B;AAC5B,yCAAsC;AACtC,+CAAgD;AAEhD,uDAAqE;AACrE,+DAA4D;AAC5D,yEAAsE;AACtE,+DAA4D;AAC5D,yEAAyE;AACzE,6CAA0C;AAC1C,wEAAqE;AACrE,qEAAkE;AAClE,sDAAqD;AACrD,yEAGyC;AACzC,6DAKmC;AAI5B,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAC6B,cAA+C,EACzD,WAAwB,EACxB,YAA0B;QAFC,mBAAc,GAAd,cAAc,CAAgB;QACzD,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;QAL5B,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAMvD,CAAC;IAEI,mBAAmB,CAAC,GAAa,EAAE,KAAc;QACvD,MAAM,MAAM,GACV,KAAK,YAAY,sBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,qBAAqB,CAAC;QACxF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjF,CAAC;IAYK,sBAAsB,CAAQ,GAAa,EAAkB,KAAa;;YAC9E,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC;KAAA;IAyCK,QAAQ,CACL,OAAgB,EAChB,GAAa,EACJ,KAAc,EAC+B,YAAqB,EAElF,sBAAgC,EAEhC,aAAuB;;YAEvB,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,wDAAwD,CACzD,CAAC;gBAEF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG;oBACd,sBAAsB,EAAE,sBAAsB,aAAtB,sBAAsB,cAAtB,sBAAsB,GAAI,IAAI;oBACtD,aAAa,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,IAAI;iBACrC,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAuBK,UAAU,CACP,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,mDAAmD,CACpD,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAChD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAyBK,qBAAqB,CAClB,OAAgB,EACf,IAA8B,EAC/B,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,uEAAuE,CACxE,CAAC;gBAEF,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;gBAClD,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACzE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;gBAClE,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,wBAAwB,YAAY,0BAA0B,kBAAkB,GAAG,CACpF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA0BK,QAAQ,CACL,OAAgB,EACf,gBAAuC,EACxC,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,cAAc,EACnB,UAAU,EACV,OAAO,EACP,CAAC,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,KAAK,CAAC,CAC1B,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBACrE,qBAAqB,EAAE,KAAK;iBAC7B,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GACV,KAAK,YAAY,sBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;gBAC9E,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IA2BK,YAAY,CACT,OAAgB,EACc,YAAoB,EACjD,IAAa,EACd,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,kBAAkB,GAAG,IAAA,wCAAwB,EAAC,IAAI,CAAC,CAAC;gBAE1D,IAAI,kBAAkB,EAAE,CAAC;oBACvB,IAAA,+BAAe,EACb,iBAAiB,EACjB,iFAAiF,CAClF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,YAAY,EACZ,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBACjF,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE;oBACpD,sBAAsB,EAAE,iBAAiB,CAAC,SAAS;iBACpD,CAAC,CAAC;gBAEH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,YAAY,YAAY,oCAAoC,CAC7D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAsBK,OAAO,CACJ,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,qCAAqB,EACnB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,YAAY,EACZ,6CAA6C,CAC9C,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7C,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,YAAY,wBAAwB,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAvVY,wCAAc;AAyBnB;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,4BAA4B;KAC1C,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,YAAG,EAAC,uBAAuB,CAAC;IACC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;;;;4DAEjE;AAyCK;IAvCL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,0BAA0B;QACvC,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,WAAW,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3D,WAAA,IAAA,cAAK,EAAC,wBAAwB,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEtE,WAAA,IAAA,cAAK,EAAC,eAAe,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;;;;8CAqB/D;AAuBK;IArBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+BAA+B,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IAChG,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,eAAM,EAAC,2BAA2B,CAAC;IAEjC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;gDAaP;AAyBK;IAvBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uBAAuB;KACrC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,gDAAwB,EAAE,CAAC;IAC3C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,WAAW,CAAC;IAEf,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADQ,gDAAwB;;2DAuBvC;AA0BK;IAxBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,6CAAqB;QAC3B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,4BAAkB,EAAC;QAClB,WAAW,EACT,kGAAkG;QACpG,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,WAAW;QAC9B,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,qBAAqB;QACxC,WAAW,EAAE,sEAAsE;QACnF,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,aAAI,EAAC,UAAU,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADoB,6CAAqB;;8CAyBhD;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,cAAc;KAC5B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,iBAAO;QACb,WAAW,EAAE,6BAA6B;KAC3C,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,EAAE;QACrB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAE9B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qDADQ,iBAAO;;kDAmCtB;AAsBK;IApBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,SAAS;KACvB,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,cAAK,EAAC,wBAAwB,CAAC;IAE7B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAcP;yBAtVU,cAAc;IAF1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,cAAc,CAAC;IAKtB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACI,yBAAW;QACV,2BAAY;GANlC,cAAc,CAuV1B","sourcesContent":["import {\n  Body,\n  Controller,\n  Delete,\n  Get,\n  HttpException,\n  HttpStatus,\n  Param,\n  ParseBoolPipe,\n  ParseIntPipe,\n  Patch,\n  Post,\n  Put,\n  Query,\n  Inject,\n  Req,\n  Res,\n  UseGuards,\n} from '@nestjs/common';\nimport { Request, Response } from 'express';\nimport {\n  ApiBearerAuth,\n  ApiBody,\n  ApiCreatedResponse,\n  ApiOperation,\n  ApiParam,\n  ApiQuery,\n  ApiResponse,\n  ApiTags,\n} from '@nestjs/swagger';\nimport { join } from 'path';\nimport { Logger } from '../../Logger';\nimport { RestUtilities } from '../../Utilities';\nimport { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\nimport { GetUsersResponse } from '../Dtos/GetUsersResponse';\nimport { PublicRegisterRequest } from '../Dtos/PublicRegisterRequest';\nimport { RegisterResponse } from '../Dtos/RegisterResponse';\nimport { SetStatoRegistrazioneDto } from '../Dtos/SetStatoRegistrazione';\nimport { UserDto } from '../Dtos/UserDto';\nimport { EmailService } from '../Services/EmailService/EmailService';\nimport { UserService } from '../Services/UserService/UserService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport {\n  checkPublicAuthRateLimit,\n  sendPublicAuthRateLimitExceeded,\n} from '../security/publicAuthRateLimit';\nimport {\n  ensureSelfOrSuperUser,\n  ensureSuperUser,\n  getAuthenticatedAccessiUser,\n  hasPrivilegedUserChanges,\n} from '../security/accessControl';\n\n@ApiTags('User')\n@Controller('accessi/user')\nexport class UserController {\n  private readonly logger = new Logger(UserController.name);\n\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\n    private readonly userService: UserService,\n    private readonly emailService: EmailService,\n  ) {}\n\n  private sendControllerError(res: Response, error: unknown) {\n    const status =\n      error instanceof HttpException ? error.getStatus() : HttpStatus.INTERNAL_SERVER_ERROR;\n    return RestUtilities.sendErrorMessage(res, error, UserController.name, status);\n  }\n\n  @ApiOperation({\n    summary: 'Serve la pagina di reset password',\n    operationId: 'serveResetPasswordPageUser',\n  })\n  @ApiParam({\n    name: 'token',\n    description: 'Token per il reset della password',\n    required: true,\n  })\n  @Get('reset-password/:token')\n  async serveResetPasswordPage(@Res() res: Response, @Param('token') token: string) {\n    return res.sendFile(join(__dirname, '..', 'Views', 'reset-password.html'));\n  }\n\n  @ApiOperation({\n    summary: 'Recupera la lista degli utenti',\n    operationId: 'getUsers',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Lista utenti recuperata con successo',\n    type: GetUsersResponse,\n  })\n  @ApiResponse({ status: 401, description: 'Credenziali non valide', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiQuery({\n    name: 'email',\n    required: false,\n    description: \"Email dell'utente da cercare\",\n    type: String,\n  })\n  @ApiQuery({\n    name: 'codiceUtente',\n    required: false,\n    description: \"Codice dell'utente da cercare\",\n    type: Number,\n  })\n  @ApiQuery({\n    name: 'includeExtensionFields',\n    required: false,\n    description: 'Includi extension fields',\n    type: Boolean,\n  })\n  @ApiQuery({\n    name: 'includeGrants',\n    required: false,\n    description: 'Includi permessi',\n    type: Boolean,\n  })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Get('get-users')\n  async getUsers(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Query('email') email?: string,\n    @Query('codiceUtente', new ParseIntPipe({ optional: true })) codiceUtente?: number,\n    @Query('includeExtensionFields', new ParseBoolPipe({ optional: true }))\n    includeExtensionFields?: boolean,\n    @Query('includeGrants', new ParseBoolPipe({ optional: true }))\n    includeGrants?: boolean,\n  ) {\n    try {\n      ensureSuperUser(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono consultare gli utenti.',\n      );\n\n      const filters = { email, codiceUtente };\n      const options = {\n        includeExtensionFields: includeExtensionFields ?? true,\n        includeGrants: includeGrants ?? true,\n      };\n\n      const users = await this.userService.getUsers(filters, options);\n      return RestUtilities.sendBaseResponse(res, users);\n    } catch (error) {\n      this.logger.error('Errore durante il recupero degli utenti: ', error);\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Elimina un utente',\n    operationId: 'deleteUser',\n    description: 'Imposta lo stato di un utente a eliminato senza rimuovere i record.',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da eliminare\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({ status: 200, description: 'Utente eliminato con successo', type: ActionResponse })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nei parametri della richiesta',\n    type: ErrorResponse,\n  })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Delete('delete-user/:codiceUtente')\n  async deleteUser(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureSuperUser(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono eliminare utenti.',\n      );\n\n      await this.userService.deleteUser(codiceUtente);\n      return RestUtilities.sendOKMessage(res, \"L'utente e' stato eliminato con successo.\");\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta lo stato di registrazione di un utente',\n    operationId: 'setStatoRegistrazione',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Stato registrazione aggiornato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nei parametri della richiesta',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno del server',\n    type: ErrorResponse,\n  })\n  @ApiBody({ type: SetStatoRegistrazioneDto })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('set-stato')\n  async setStatoRegistrazione(\n    @Req() request: Request,\n    @Body() body: SetStatoRegistrazioneDto,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureSuperUser(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono modificare lo stato di registrazione.',\n      );\n\n      const { codiceUtente, statoRegistrazione } = body;\n      if (!codiceUtente) throw new Error('Il codice utente e\\' obbligatorio.');\n      if (statoRegistrazione === undefined) {\n        throw new Error('Lo stato registrazione e\\' obbligatorio.');\n      }\n\n      await this.userService.setStato(codiceUtente, statoRegistrazione);\n      return RestUtilities.sendOKMessage(\n        res,\n        `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`,\n      );\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Registra un nuovo utente',\n    operationId: 'register',\n  })\n  @ApiBody({\n    type: PublicRegisterRequest,\n    description: \"Dati necessari per la registrazione dell'utente\",\n  })\n  @ApiCreatedResponse({\n    description:\n      'Utente registrato con successo. Restituisce il codice utente e invia una mail di reset password.',\n    type: RegisterResponse,\n  })\n  @ApiResponse({\n    status: HttpStatus.BAD_REQUEST,\n    description: 'Errore nella registrazione.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: HttpStatus.INTERNAL_SERVER_ERROR,\n    description: 'Errore interno del server durante la registrazione o l\\'invio email.',\n    type: ErrorResponse,\n  })\n  @Post('register')\n  async register(\n    @Req() request: Request,\n    @Body() registrationData: PublicRegisterRequest,\n    @Res() res: Response,\n  ) {\n    try {\n      const rateLimitDecision = checkPublicAuthRateLimit(\n        this.accessiOptions,\n        'register',\n        request,\n        [registrationData?.email],\n      );\n      if (!rateLimitDecision.allowed) {\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\n      }\n\n      const codiceUtente = await this.userService.register(registrationData, {\n        allowPrivilegedFields: false,\n      });\n\n      await this.emailService.sendPasswordResetEmail(registrationData.email);\n      return RestUtilities.sendBaseResponse(res, codiceUtente);\n    } catch (error) {\n      const status =\n        error instanceof HttpException ? error.getStatus() : HttpStatus.BAD_REQUEST;\n      return RestUtilities.sendErrorMessage(res, error, UserController.name, status);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Aggiorna un utente esistente',\n    operationId: 'updateUtente',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da aggiornare\",\n    required: true,\n    example: 123,\n  })\n  @ApiBody({\n    type: UserDto,\n    description: \"Dati aggiornati dell'utente\",\n  })\n  @ApiResponse({\n    status: HttpStatus.OK,\n    description: 'Utente aggiornato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({ status: 400, description: \"Errore nell'aggiornamento\", type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Put('update-user/:codiceUtente')\n  async updateUtente(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Body() user: UserDto,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const isPrivilegedUpdate = hasPrivilegedUserChanges(user);\n\n      if (isPrivilegedUpdate) {\n        ensureSuperUser(\n          authenticatedUser,\n          'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.',\n        );\n      } else {\n        ensureSelfOrSuperUser(\n          authenticatedUser,\n          codiceUtente,\n          'Puoi modificare solo il tuo profilo.',\n        );\n      }\n\n      if (user.codiceUtente !== undefined && user.codiceUtente !== codiceUtente) {\n        throw new Error('Il codice utente nel body non coincide con quello del path.');\n      }\n\n      await this.userService.updateUser(codiceUtente, user, {\n        allowPrivilegedChanges: authenticatedUser.flagSuper,\n      });\n\n      return RestUtilities.sendOKMessage(\n        res,\n        `L'utente ${codiceUtente} e' stato aggiornato con successo.`,\n      );\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta il consenso GDPR per un utente',\n    operationId: 'setGdpr',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente che accetta il GDPR\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Consenso GDPR impostato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({ status: 400, description: 'Errore nella richiesta', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Patch('set-gdpr/:codiceUtente')\n  async setGdpr(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureSelfOrSuperUser(\n        getAuthenticatedAccessiUser(request),\n        codiceUtente,\n        'Puoi impostare il GDPR solo sul tuo utente.',\n      );\n\n      await this.userService.setGdpr(codiceUtente);\n      return RestUtilities.sendOKMessage(res, `L'utente ${codiceUtente} ha accettato il GDPR.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n}\n"]}
+{"version":3,"file":"UserController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/UserController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAmBwB;AAExB,6CASyB;AACzB,+BAA4B;AAC5B,yCAAsC;AACtC,+CAAgD;AAEhD,uDAAqE;AACrE,+DAA4D;AAC5D,yEAAsE;AACtE,+DAA4D;AAC5D,6DAA0D;AAC1D,yEAAyE;AACzE,6CAA0C;AAC1C,wEAAqE;AACrE,qEAAkE;AAClE,sDAAqD;AACrD,yEAGyC;AACzC,6DAKmC;AAQ5B,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAC6B,cAA+C,EACzD,WAAwB,EACxB,YAA0B;QAFC,mBAAc,GAAd,cAAc,CAAgB;QACzD,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;QAL5B,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAMvD,CAAC;IAEI,mBAAmB,CAAC,GAAa,EAAE,KAAc;QACvD,gFAAgF;QAChF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAYK,sBAAsB,CAAQ,GAAa,EAAkB,MAAc;;YAC/E,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC;KAAA;IAqDK,QAAQ,CACL,OAAgB,EAChB,GAAa,EACJ,KAAc,EAC+B,YAAqB,EAElF,sBAAgC,EAEhC,aAAuB,EAC+B,KAAc,EACb,MAAe;;YAEtE,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,wDAAwD,CACzD,CAAC;gBAEF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBACvD,MAAM,OAAO,GAAG;oBACd,sBAAsB,EAAE,sBAAsB,aAAtB,sBAAsB,cAAtB,sBAAsB,GAAI,IAAI;oBACtD,aAAa,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,IAAI;iBACrC,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBACzE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9C,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAuBK,UAAU,CACP,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,mDAAmD,CACpD,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAChD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAyBK,qBAAqB,CAClB,OAAgB,EACf,IAA8B,EAC/B,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,uEAAuE,CACxE,CAAC;gBAEF,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;gBAClD,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,4BAAmB,CAAC,oCAAoC,CAAC,CAAC;gBACvF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;gBAC5E,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;gBAClE,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,wBAAwB,YAAY,0BAA0B,kBAAkB,GAAG,CACpF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA2BK,QAAQ,CACL,OAAgB,EACf,gBAAuC,EACxC,GAAa;;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAA,MAAA,IAAI,CAAC,cAAc,CAAC,kBAAkB,0CAAE,OAAO,MAAK,IAAI,EAAE,CAAC;oBAC7D,MAAM,IAAI,sBAAa,CACrB,mFAAmF,EACnF,mBAAU,CAAC,SAAS,CACrB,CAAC;gBACJ,CAAC;gBAED,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,cAAc,EACnB,UAAU,EACV,OAAO,EACP,CAAC,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,KAAK,CAAC,CAC1B,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBACrE,qBAAqB,EAAE,KAAK;iBAC7B,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,mBAAU,CAAC,OAAO,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GACV,KAAK,YAAY,sBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;gBAC9E,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAQK,iBAAiB,CAAQ,OAAgB,EAAU,gBAAiC,EAAS,GAAa;;YAC9G,IAAI,CAAC;gBACH,IAAA,+BAAe,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,gDAAgD,CAAC,CAAC;gBACxG,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAClG,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,mBAAU,CAAC,OAAO,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA2BK,YAAY,CACT,OAAgB,EACc,YAAoB,EACjD,IAAa,EACd,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,kBAAkB,GAAG,IAAA,wCAAwB,EAAC,IAAI,CAAC,CAAC;gBAE1D,IAAI,kBAAkB,EAAE,CAAC;oBACvB,IAAA,+BAAe,EACb,iBAAiB,EACjB,iFAAiF,CAClF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,YAAY,EACZ,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBAC1E,MAAM,IAAI,4BAAmB,CAAC,6DAA6D,CAAC,CAAC;gBAC/F,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE;oBACpD,sBAAsB,EAAE,iBAAiB,CAAC,SAAS;iBACpD,CAAC,CAAC;gBAEH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,YAAY,YAAY,oCAAoC,CAC7D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAsBK,OAAO,CACJ,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,qCAAqB,EACnB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,YAAY,EACZ,6CAA6C,CAC9C,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7C,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,YAAY,wBAAwB,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AA/XY,wCAAc;AAwBnB;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,4BAA4B;KAC1C,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,YAAG,EAAC,uBAAuB,CAAC;IACC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;;;;4DAEjE;AAqDK;IAnDL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,0BAA0B;QACvC,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+DAA+D;QAC5E,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,WAAW,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3D,WAAA,IAAA,cAAK,EAAC,wBAAwB,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEtE,WAAA,IAAA,cAAK,EAAC,eAAe,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAE7D,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACpD,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;;;;8CAsBvD;AAuBK;IArBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+BAA+B,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IAChG,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,eAAM,EAAC,2BAA2B,CAAC;IAEjC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;gDAaP;AAyBK;IAvBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uBAAuB;KACrC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,gDAAwB,EAAE,CAAC;IAC3C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,WAAW,CAAC;IAEf,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADQ,gDAAwB;;2DAuBvC;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,8IAA8I;QAC3J,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,6CAAqB;QAC3B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,4BAAkB,EAAC;QAClB,WAAW,EACT,kGAAkG;QACpG,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,WAAW;QAC9B,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,qBAAqB;QACxC,WAAW,EAAE,sEAAsE;QACnF,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,aAAI,EAAC,UAAU,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADoB,6CAAqB;;8CAgChD;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,sGAAsG,EAAE,CAAC;IAC5N,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAAe,EAAE,CAAC;IAClC,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,mCAAgB,EAAE,CAAC;IAC9C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,qBAAqB,CAAC;IACH,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,aAAI,GAAE,CAAA;IAAqC,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAAvB,iCAAe;;uDASzF;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,cAAc;KAC5B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,iBAAO;QACb,WAAW,EAAE,6BAA6B;KAC3C,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,EAAE;QACrB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAE9B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qDADQ,iBAAO;;kDAmCtB;AAsBK;IApBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,SAAS;KACvB,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,cAAK,EAAC,wBAAwB,CAAC;IAE7B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAcP;yBA9XU,cAAc;IAN1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,cAAc,CAAC;IAC3B;;;OAGG;;IAKE,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACI,yBAAW;QACV,2BAAY;GANlC,cAAc,CA+X1B","sourcesContent":["import {\r\n  BadRequestException,\r\n  Body,\r\n  Controller,\r\n  Delete,\r\n  Get,\r\n  HttpException,\r\n  HttpStatus,\r\n  Param,\r\n  ParseBoolPipe,\r\n  ParseIntPipe,\r\n  Patch,\r\n  Post,\r\n  Put,\r\n  Query,\r\n  Inject,\r\n  Req,\r\n  Res,\r\n  UseGuards,\r\n} from '@nestjs/common';\r\nimport { Request, Response } from 'express';\r\nimport {\r\n  ApiBearerAuth,\r\n  ApiBody,\r\n  ApiCreatedResponse,\r\n  ApiOperation,\r\n  ApiParam,\r\n  ApiQuery,\r\n  ApiResponse,\r\n  ApiTags,\r\n} from '@nestjs/swagger';\r\nimport { join } from 'path';\r\nimport { Logger } from '../../Logger';\r\nimport { RestUtilities } from '../../Utilities';\r\nimport type { AccessiOptions } from '../AccessiModule';\r\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\r\nimport { GetUsersResponse } from '../Dtos/GetUsersResponse';\r\nimport { PublicRegisterRequest } from '../Dtos/PublicRegisterRequest';\r\nimport { RegisterResponse } from '../Dtos/RegisterResponse';\r\nimport { RegisterRequest } from '../Dtos/RegisterRequest';\r\nimport { SetStatoRegistrazioneDto } from '../Dtos/SetStatoRegistrazione';\r\nimport { UserDto } from '../Dtos/UserDto';\r\nimport { EmailService } from '../Services/EmailService/EmailService';\r\nimport { UserService } from '../Services/UserService/UserService';\r\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\r\nimport {\r\n  checkPublicAuthRateLimit,\r\n  sendPublicAuthRateLimitExceeded,\r\n} from '../security/publicAuthRateLimit';\r\nimport {\r\n  ensureSelfOrSuperUser,\r\n  ensureSuperUser,\r\n  getAuthenticatedAccessiUser,\r\n  hasPrivilegedUserChanges,\r\n} from '../security/accessControl';\r\n\r\n@ApiTags('User')\r\n@Controller('accessi/user')\r\n/**\r\n * Gestione utenti: la registrazione pubblica e opt-in, mentre creazione, stato e profili privilegiati\r\n * richiedono un superutente Accessi. Le API restituiscono sempre il wrapper `BaseResponse` storico.\r\n */\r\nexport class UserController {\r\n  private readonly logger = new Logger(UserController.name);\r\n\r\n  constructor(\r\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\r\n    private readonly userService: UserService,\r\n    private readonly emailService: EmailService,\r\n  ) {}\r\n\r\n  private sendControllerError(res: Response, error: unknown) {\r\n    // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).\r\n    return RestUtilities.sendErrorMessage(res, error, UserController.name);\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Serve la pagina di reset password',\r\n    operationId: 'serveResetPasswordPageUser',\r\n  })\r\n  @ApiParam({\r\n    name: 'token',\r\n    description: 'Token per il reset della password',\r\n    required: true,\r\n  })\r\n  @Get('reset-password/:token')\r\n  async serveResetPasswordPage(@Res() res: Response, @Param('token') _token: string) {\r\n    return res.sendFile(join(__dirname, '..', 'Views', 'reset-password.html'));\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Recupera la lista degli utenti',\r\n    operationId: 'getUsers',\r\n  })\r\n  @ApiResponse({\r\n    status: 200,\r\n    description: 'Lista utenti recuperata con successo',\r\n    type: GetUsersResponse,\r\n  })\r\n  @ApiResponse({ status: 401, description: 'Credenziali non valide', type: ErrorResponse })\r\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\r\n  @ApiQuery({\r\n    name: 'email',\r\n    required: false,\r\n    description: \"Email dell'utente da cercare\",\r\n    type: String,\r\n  })\r\n  @ApiQuery({\r\n    name: 'codiceUtente',\r\n    required: false,\r\n    description: \"Codice dell'utente da cercare\",\r\n    type: Number,\r\n  })\r\n  @ApiQuery({\r\n    name: 'includeExtensionFields',\r\n    required: false,\r\n    description: 'Includi extension fields',\r\n    type: Boolean,\r\n  })\r\n  @ApiQuery({\r\n    name: 'includeGrants',\r\n    required: false,\r\n    description: 'Includi permessi',\r\n    type: Boolean,\r\n  })\r\n  @ApiQuery({\r\n    name: 'limit',\r\n    required: false,\r\n    description: 'Numero massimo di utenti restituiti (1-1000). Omesso = tutti.',\r\n    type: Number,\r\n  })\r\n  @ApiQuery({\r\n    name: 'offset',\r\n    required: false,\r\n    description: 'Numero di utenti da saltare (paginazione).',\r\n    type: Number,\r\n  })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Get('get-users')\r\n  async getUsers(\r\n    @Req() request: Request,\r\n    @Res() res: Response,\r\n    @Query('email') email?: string,\r\n    @Query('codiceUtente', new ParseIntPipe({ optional: true })) codiceUtente?: number,\r\n    @Query('includeExtensionFields', new ParseBoolPipe({ optional: true }))\r\n    includeExtensionFields?: boolean,\r\n    @Query('includeGrants', new ParseBoolPipe({ optional: true }))\r\n    includeGrants?: boolean,\r\n    @Query('limit', new ParseIntPipe({ optional: true })) limit?: number,\r\n    @Query('offset', new ParseIntPipe({ optional: true })) offset?: number,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(\r\n        getAuthenticatedAccessiUser(request),\r\n        'Solo gli amministratori possono consultare gli utenti.',\r\n      );\r\n\r\n      const filters = { email, codiceUtente, limit, offset };\r\n      const options = {\r\n        includeExtensionFields: includeExtensionFields ?? true,\r\n        includeGrants: includeGrants ?? true,\r\n      };\r\n\r\n      const users = await this.userService.getUsers(filters, options);\r\n      const total = await this.userService.countUsers({ email, codiceUtente });\r\n      res.setHeader('X-Total-Count', String(total));\r\n      return RestUtilities.sendBaseResponse(res, users);\r\n    } catch (error) {\r\n      this.logger.error('Errore durante il recupero degli utenti: ', error);\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Elimina un utente',\r\n    operationId: 'deleteUser',\r\n    description: 'Imposta lo stato di un utente a eliminato senza rimuovere i record.',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceUtente',\r\n    description: \"Codice identificativo dell'utente da eliminare\",\r\n    required: true,\r\n    example: 123,\r\n  })\r\n  @ApiResponse({ status: 200, description: 'Utente eliminato con successo', type: ActionResponse })\r\n  @ApiResponse({\r\n    status: 400,\r\n    description: 'Errore nei parametri della richiesta',\r\n    type: ErrorResponse,\r\n  })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Delete('delete-user/:codiceUtente')\r\n  async deleteUser(\r\n    @Req() request: Request,\r\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(\r\n        getAuthenticatedAccessiUser(request),\r\n        'Solo gli amministratori possono eliminare utenti.',\r\n      );\r\n\r\n      await this.userService.deleteUser(codiceUtente);\r\n      return RestUtilities.sendOKMessage(res, \"L'utente e' stato eliminato con successo.\");\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Imposta lo stato di registrazione di un utente',\r\n    operationId: 'setStatoRegistrazione',\r\n  })\r\n  @ApiResponse({\r\n    status: 200,\r\n    description: 'Stato registrazione aggiornato con successo',\r\n    type: ActionResponse,\r\n  })\r\n  @ApiResponse({\r\n    status: 400,\r\n    description: 'Errore nei parametri della richiesta',\r\n    type: ErrorResponse,\r\n  })\r\n  @ApiResponse({\r\n    status: 500,\r\n    description: 'Errore interno del server',\r\n    type: ErrorResponse,\r\n  })\r\n  @ApiBody({ type: SetStatoRegistrazioneDto })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Post('set-stato')\r\n  async setStatoRegistrazione(\r\n    @Req() request: Request,\r\n    @Body() body: SetStatoRegistrazioneDto,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(\r\n        getAuthenticatedAccessiUser(request),\r\n        'Solo gli amministratori possono modificare lo stato di registrazione.',\r\n      );\r\n\r\n      const { codiceUtente, statoRegistrazione } = body;\r\n      if (!codiceUtente) throw new BadRequestException('Il codice utente e\\' obbligatorio.');\r\n      if (statoRegistrazione === undefined) {\r\n        throw new BadRequestException('Lo stato registrazione e\\' obbligatorio.');\r\n      }\r\n\r\n      await this.userService.setStato(codiceUtente, statoRegistrazione);\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`,\r\n      );\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Registra un nuovo utente',\r\n    description: 'Disponibile soltanto quando publicRegistration.enabled e true. Per utenti SSO usare il provisioning master nel tag Federated authentication.',\r\n    operationId: 'register',\r\n  })\r\n  @ApiBody({\r\n    type: PublicRegisterRequest,\r\n    description: \"Dati necessari per la registrazione dell'utente\",\r\n  })\r\n  @ApiCreatedResponse({\r\n    description:\r\n      'Utente registrato con successo. Restituisce il codice utente e invia una mail di reset password.',\r\n    type: RegisterResponse,\r\n  })\r\n  @ApiResponse({\r\n    status: HttpStatus.BAD_REQUEST,\r\n    description: 'Errore nella registrazione.',\r\n    type: ErrorResponse,\r\n  })\r\n  @ApiResponse({\r\n    status: HttpStatus.INTERNAL_SERVER_ERROR,\r\n    description: 'Errore interno del server durante la registrazione o l\\'invio email.',\r\n    type: ErrorResponse,\r\n  })\r\n  @Post('register')\r\n  async register(\r\n    @Req() request: Request,\r\n    @Body() registrationData: PublicRegisterRequest,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      if (this.accessiOptions.publicRegistration?.enabled !== true) {\r\n        throw new HttpException(\r\n          'La registrazione pubblica e disabilitata. Un amministratore deve creare l utente.',\r\n          HttpStatus.FORBIDDEN,\r\n        );\r\n      }\r\n\r\n      const rateLimitDecision = checkPublicAuthRateLimit(\r\n        this.accessiOptions,\r\n        'register',\r\n        request,\r\n        [registrationData?.email],\r\n      );\r\n      if (!rateLimitDecision.allowed) {\r\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\r\n      }\r\n\r\n      const codiceUtente = await this.userService.register(registrationData, {\r\n        allowPrivilegedFields: false,\r\n      });\r\n\r\n      await this.emailService.sendPasswordResetEmail(registrationData.email);\r\n      return RestUtilities.sendBaseResponse(res, codiceUtente, HttpStatus.CREATED);\r\n    } catch (error) {\r\n      const status =\r\n        error instanceof HttpException ? error.getStatus() : HttpStatus.BAD_REQUEST;\r\n      return RestUtilities.sendErrorMessage(res, error, UserController.name, status);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({ summary: 'Crea un utente locale da amministrazione', operationId: 'createManagedUser', description: 'Riservato a superutente. Crea un utente in attesa di impostazione password e invia la mail di reset.' })\r\n  @ApiBody({ type: RegisterRequest })\r\n  @ApiCreatedResponse({ type: RegisterResponse })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Post('create-managed-user')\r\n  async createManagedUser(@Req() request: Request, @Body() registrationData: RegisterRequest, @Res() res: Response) {\r\n    try {\r\n      ensureSuperUser(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono creare utenti.');\r\n      const codiceUtente = await this.userService.register(registrationData, { allowPrivilegedFields: true });\r\n      await this.emailService.sendPasswordResetEmail(registrationData.email, registrationData.htmlMail);\r\n      return RestUtilities.sendBaseResponse(res, codiceUtente, HttpStatus.CREATED);\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Aggiorna un utente esistente',\r\n    operationId: 'updateUtente',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceUtente',\r\n    description: \"Codice identificativo dell'utente da aggiornare\",\r\n    required: true,\r\n    example: 123,\r\n  })\r\n  @ApiBody({\r\n    type: UserDto,\r\n    description: \"Dati aggiornati dell'utente\",\r\n  })\r\n  @ApiResponse({\r\n    status: HttpStatus.OK,\r\n    description: 'Utente aggiornato con successo',\r\n    type: ActionResponse,\r\n  })\r\n  @ApiResponse({ status: 400, description: \"Errore nell'aggiornamento\", type: ErrorResponse })\r\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Put('update-user/:codiceUtente')\r\n  async updateUtente(\r\n    @Req() request: Request,\r\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\r\n    @Body() user: UserDto,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\r\n      const isPrivilegedUpdate = hasPrivilegedUserChanges(user);\r\n\r\n      if (isPrivilegedUpdate) {\r\n        ensureSuperUser(\r\n          authenticatedUser,\r\n          'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.',\r\n        );\r\n      } else {\r\n        ensureSelfOrSuperUser(\r\n          authenticatedUser,\r\n          codiceUtente,\r\n          'Puoi modificare solo il tuo profilo.',\r\n        );\r\n      }\r\n\r\n      if (user.codiceUtente !== undefined && user.codiceUtente !== codiceUtente) {\r\n        throw new BadRequestException('Il codice utente nel body non coincide con quello del path.');\r\n      }\r\n\r\n      await this.userService.updateUser(codiceUtente, user, {\r\n        allowPrivilegedChanges: authenticatedUser.flagSuper,\r\n      });\r\n\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `L'utente ${codiceUtente} e' stato aggiornato con successo.`,\r\n      );\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Imposta il consenso GDPR per un utente',\r\n    operationId: 'setGdpr',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceUtente',\r\n    description: \"Codice identificativo dell'utente che accetta il GDPR\",\r\n    required: true,\r\n    example: 123,\r\n  })\r\n  @ApiResponse({\r\n    status: 200,\r\n    description: 'Consenso GDPR impostato con successo',\r\n    type: ActionResponse,\r\n  })\r\n  @ApiResponse({ status: 400, description: 'Errore nella richiesta', type: ErrorResponse })\r\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Patch('set-gdpr/:codiceUtente')\r\n  async setGdpr(\r\n    @Req() request: Request,\r\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      ensureSelfOrSuperUser(\r\n        getAuthenticatedAccessiUser(request),\r\n        codiceUtente,\r\n        'Puoi impostare il GDPR solo sul tuo utente.',\r\n      );\r\n\r\n      await this.userService.setGdpr(codiceUtente);\r\n      return RestUtilities.sendOKMessage(res, `L'utente ${codiceUtente} ha accettato il GDPR.`);\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n}\r\n"]}

package/dist/accessi-module/Dtos/Abilitazione.js.map

@@ -1 +1 @@
-{"version":3,"file":"Abilitazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/Abilitazione.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAsD;AACtD,qDAAuE;AAEvE,MAAa,YAAY;CA2BxB;AA3BD,oCA2BC;AAlBC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,UAAU;KACpB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAC3D,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;kDAC5D;AASrB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,UAAU;KACpB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;gDAC5D;AAQnB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,mCAAgB;QACtB,OAAO,EAAE,mCAAgB,CAAC,OAAO;KAClC,CAAC;IACD,IAAA,wBAAM,EAAC,mCAAgB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;sDAC5C","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\nimport { TipoAbilitazione } from \"./TipoAbilitazione\";\nimport { IsString, IsNotEmpty, Length, IsEnum } from \"class-validator\";\n\nexport class Abilitazione {\n\n  @ApiProperty({\n    description: 'Codice univoco dell\\'utente',\n    example: 'USR12345'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"Il codice utente è obbligatorio.\" })\n  @Length(5, 20, { message: \"Il codice utente deve essere tra 5 e 20 caratteri.\" })\n  codiceUtente: number;\n\n  @ApiProperty({\n    description: 'Codice univoco del menu',\n    example: 'MENU_001'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"Il codice menu è obbligatorio.\" })\n  @Length(3, 20, { message: \"Il codice menu deve essere tra 3 e 20 caratteri.\" })\n  codiceMenu: string;\n\n  @ApiProperty({\n    description: 'Tipo di abilitazione',\n    enum: TipoAbilitazione,\n    example: TipoAbilitazione.LETTURA\n  })\n  @IsEnum(TipoAbilitazione, { message: \"Il tipo di abilitazione non è valido.\" })\n  tipoAbilitazione: TipoAbilitazione;\n}"]}
+{"version":3,"file":"Abilitazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/Abilitazione.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAsD;AACtD,qDAAuE;AAEvE,MAAa,YAAY;CA2BxB;AA3BD,oCA2BC;AAlBC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,UAAU;KACpB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAC3D,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;kDAC3D;AAStB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,UAAU;KACpB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;gDAC3D;AAQpB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,mCAAgB;QACtB,OAAO,EAAE,mCAAgB,CAAC,OAAO;KAClC,CAAC;IACD,IAAA,wBAAM,EAAC,mCAAgB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;sDAC3C","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\r\nimport { TipoAbilitazione } from \"./TipoAbilitazione\";\r\nimport { IsString, IsNotEmpty, Length, IsEnum } from \"class-validator\";\r\n\r\nexport class Abilitazione {\r\n\r\n  @ApiProperty({\r\n    description: 'Codice univoco dell\\'utente',\r\n    example: 'USR12345'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"Il codice utente è obbligatorio.\" })\r\n  @Length(5, 20, { message: \"Il codice utente deve essere tra 5 e 20 caratteri.\" })\r\n  codiceUtente!: number;\r\n\r\n  @ApiProperty({\r\n    description: 'Codice univoco del menu',\r\n    example: 'MENU_001'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"Il codice menu è obbligatorio.\" })\r\n  @Length(3, 20, { message: \"Il codice menu deve essere tra 3 e 20 caratteri.\" })\r\n  codiceMenu!: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Tipo di abilitazione',\r\n    enum: TipoAbilitazione,\r\n    example: TipoAbilitazione.LETTURA\r\n  })\r\n  @IsEnum(TipoAbilitazione, { message: \"Il tipo di abilitazione non è valido.\" })\r\n  tipoAbilitazione!: TipoAbilitazione;\r\n}"]}

package/dist/accessi-module/Dtos/AbilitazioneMenu.js

@@ -65,37 +65,45 @@ __decorate([
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Nome dell\'icona associata al menu',
-        example: 'people'
+        type: String,
+        example: 'people',
+        nullable: true
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], AbilitazioneMenu.prototype, "icona", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Tipo di menu',
-        example: 'M'
+        type: String,
+        example: 'M',
+        nullable: true
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], AbilitazioneMenu.prototype, "tipo", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Percorso della pagina associata al menu',
-        example: '/lista-clienti'
+        type: String,
+        example: '/lista-clienti',
+        nullable: true
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], AbilitazioneMenu.prototype, "pagina", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Nota informativa associata al menu',
-        example: 'Visibile solo dopo abilitazione'
+        type: String,
+        example: 'Visibile solo dopo abilitazione',
+        nullable: true
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], AbilitazioneMenu.prototype, "note", void 0);
 //# sourceMappingURL=AbilitazioneMenu.js.map

package/dist/accessi-module/Dtos/AbilitazioneMenu.js.map

@@ -1 +1 @@
-{"version":3,"file":"AbilitazioneMenu.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/AbilitazioneMenu.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAsD;AACtD,qDAAmF;AAEnF,MAAa,gBAAgB;CA0E5B;AA1ED,4CA0EC;AAjEC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;oDAC5D;AAQnB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,mCAAgB;QACtB,OAAO,EAAE,mCAAgB,CAAC,SAAS;KACpC,CAAC;IACD,IAAA,wBAAM,EAAC,mCAAgB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;0DAC3C;AAQpC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,eAAe;KACzB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;yDAC1C;AAQzB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;2DAC1C;AAQ3B;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;sDACtC;AAQtB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,QAAQ;KAClB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+CACS;AAQtB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACQ;AAQrB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,gBAAgB;KAC1B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACU;AAQvB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,iCAAiC;KAC3C,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACQ","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from \"@nestjs/swagger\";\nimport { TipoAbilitazione } from \"./TipoAbilitazione\";\nimport { IsEnum, IsNotEmpty, IsString, Length, IsOptional } from \"class-validator\";\n\nexport class AbilitazioneMenu {\n  \n  @ApiProperty({\n    description: 'Codice univoco del menu',\n    example: 'MNUELENCOCLIENTI'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"Il codice menu è obbligatorio.\" })\n  @Length(3, 20, { message: \"Il codice menu deve essere tra 3 e 20 caratteri.\" })\n  codiceMenu: string;\n\n  @ApiPropertyOptional({\n    description: 'Tipo di abilitazione',\n    enum: TipoAbilitazione,\n    example: TipoAbilitazione.SCRITTURA\n  })\n  @IsEnum(TipoAbilitazione, { message: \"Il tipo di abilitazione non è valido.\" })\n  tipoAbilitazione?: TipoAbilitazione;\n\n  @ApiPropertyOptional({\n    description: 'Descrizione del menu',\n    example: 'Lista Clienti'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"La descrizione del menu è obbligatoria.\" })\n  descrizioneMenu?: string;\n\n  @ApiPropertyOptional({\n    description: 'Descrizione del gruppo a cui appartiene il menu',\n    example: 'Amministrazione'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"La descrizione del gruppo è obbligatoria.\" })\n  descrizioneGruppo?: string;\n\n  @ApiPropertyOptional({\n    description: 'Codice univoco del gruppo a cui appartiene il menu',\n    example: 'C'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"Il codice gruppo è obbligatorio.\" })\n  codiceGruppo?: string;\n\n  @ApiPropertyOptional({\n    description: 'Nome dell\\'icona associata al menu',\n    example: 'people'\n  })\n  @IsString()\n  @IsOptional()\n  icona?: string | null;\n\n  @ApiPropertyOptional({\n    description: 'Tipo di menu',\n    example: 'M'\n  })\n  @IsString()\n  @IsOptional()\n  tipo?: string | null;\n\n  @ApiPropertyOptional({\n    description: 'Percorso della pagina associata al menu',\n    example: '/lista-clienti'\n  })\n  @IsString()\n  @IsOptional()\n  pagina?: string | null;\n\n  @ApiPropertyOptional({\n    description: 'Nota informativa associata al menu',\n    example: 'Visibile solo dopo abilitazione'\n  })\n  @IsString()\n  @IsOptional()\n  note?: string | null;\n}\n"]}
+{"version":3,"file":"AbilitazioneMenu.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/AbilitazioneMenu.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAsD;AACtD,qDAAmF;AAEnF,MAAa,gBAAgB;CAkF5B;AAlFD,4CAkFC;AAzEC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;oDAC3D;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,mCAAgB;QACtB,OAAO,EAAE,mCAAgB,CAAC,SAAS;KACpC,CAAC;IACD,IAAA,wBAAM,EAAC,mCAAgB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;0DAC3C;AAQpC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,eAAe;KACzB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;yDAC1C;AAQzB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;2DAC1C;AAQ3B;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;sDACtC;AAUtB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+CACS;AAUtB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,cAAc;QAC3B,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACQ;AAUrB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACU;AAUvB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACQ","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from \"@nestjs/swagger\";\r\nimport { TipoAbilitazione } from \"./TipoAbilitazione\";\r\nimport { IsEnum, IsNotEmpty, IsString, Length, IsOptional } from \"class-validator\";\r\n\r\nexport class AbilitazioneMenu {\r\n  \r\n  @ApiProperty({\r\n    description: 'Codice univoco del menu',\r\n    example: 'MNUELENCOCLIENTI'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"Il codice menu è obbligatorio.\" })\r\n  @Length(3, 20, { message: \"Il codice menu deve essere tra 3 e 20 caratteri.\" })\r\n  codiceMenu!: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Tipo di abilitazione',\r\n    enum: TipoAbilitazione,\r\n    example: TipoAbilitazione.SCRITTURA\r\n  })\r\n  @IsEnum(TipoAbilitazione, { message: \"Il tipo di abilitazione non è valido.\" })\r\n  tipoAbilitazione?: TipoAbilitazione;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Descrizione del menu',\r\n    example: 'Lista Clienti'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"La descrizione del menu è obbligatoria.\" })\r\n  descrizioneMenu?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Descrizione del gruppo a cui appartiene il menu',\r\n    example: 'Amministrazione'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"La descrizione del gruppo è obbligatoria.\" })\r\n  descrizioneGruppo?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Codice univoco del gruppo a cui appartiene il menu',\r\n    example: 'C'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"Il codice gruppo è obbligatorio.\" })\r\n  codiceGruppo?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Nome dell\\'icona associata al menu',\r\n    type: String,\r\n    example: 'people',\r\n    nullable: true\r\n  })\r\n  @IsString()\r\n  @IsOptional()\r\n  icona?: string | null;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Tipo di menu',\r\n    type: String,\r\n    example: 'M',\r\n    nullable: true\r\n  })\r\n  @IsString()\r\n  @IsOptional()\r\n  tipo?: string | null;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Percorso della pagina associata al menu',\r\n    type: String,\r\n    example: '/lista-clienti',\r\n    nullable: true\r\n  })\r\n  @IsString()\r\n  @IsOptional()\r\n  pagina?: string | null;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Nota informativa associata al menu',\r\n    type: String,\r\n    example: 'Visibile solo dopo abilitazione',\r\n    nullable: true\r\n  })\r\n  @IsString()\r\n  @IsOptional()\r\n  note?: string | null;\r\n}\r\n"]}