emilsoftware-utilities 2.0.0-dev.3 → 2.0.0-dev.31

package/dist/accessi-module/Dtos/TwoFactorDtos.d.ts

@@ -0,0 +1,13 @@
+export declare class TwoFactorChallengeDto {
+    twoFactorRequired: true;
+    challengeId: string;
+    expiresAt: string;
+    resendAfterSeconds: number;
+    method: 'email';
+}
+export declare class ResendTwoFactorRequest {
+    challengeId: string;
+}
+export declare class VerifyTwoFactorRequest extends ResendTwoFactorRequest {
+    code: string;
+}

package/dist/accessi-module/Dtos/TwoFactorDtos.js

@@ -0,0 +1,60 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyTwoFactorRequest = exports.ResendTwoFactorRequest = exports.TwoFactorChallengeDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class TwoFactorChallengeDto {
+    constructor() {
+        this.twoFactorRequired = true;
+        this.method = 'email';
+    }
+}
+exports.TwoFactorChallengeDto = TwoFactorChallengeDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: [true], description: 'Il login non e completo: nessun JWT e stato emesso.' }),
+    __metadata("design:type", Boolean)
+], TwoFactorChallengeDto.prototype, "twoFactorRequired", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Identificativo opaco della verifica, non utilizzabile come Bearer token.' }),
+    __metadata("design:type", String)
+], TwoFactorChallengeDto.prototype, "challengeId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: 'date-time' }),
+    __metadata("design:type", String)
+], TwoFactorChallengeDto.prototype, "expiresAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: 60, description: 'Secondi minimi prima del prossimo reinvio.' }),
+    __metadata("design:type", Number)
+], TwoFactorChallengeDto.prototype, "resendAfterSeconds", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: ['email'] }),
+    __metadata("design:type", String)
+], TwoFactorChallengeDto.prototype, "method", void 0);
+class ResendTwoFactorRequest {
+}
+exports.ResendTwoFactorRequest = ResendTwoFactorRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({ minLength: 64, maxLength: 64 }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(/^[a-f0-9]{64}$/),
+    __metadata("design:type", String)
+], ResendTwoFactorRequest.prototype, "challengeId", void 0);
+class VerifyTwoFactorRequest extends ResendTwoFactorRequest {
+}
+exports.VerifyTwoFactorRequest = VerifyTwoFactorRequest;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Codice monouso ricevuto via email.', example: '012345', pattern: '^\\d{6}$' }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(/^\d{6}$/, { message: 'Il codice deve contenere 6 cifre.' }),
+    __metadata("design:type", String)
+], VerifyTwoFactorRequest.prototype, "code", void 0);
+//# sourceMappingURL=TwoFactorDtos.js.map

package/dist/accessi-module/Dtos/TwoFactorDtos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TwoFactorDtos.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TwoFactorDtos.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAoD;AAEpD,MAAa,qBAAqB;IAAlC;QAEE,sBAAiB,GAAS,IAAI,CAAC;QAY/B,WAAM,GAAY,OAAO,CAAC;IAC5B,CAAC;CAAA;AAfD,sDAeC;AAbC;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;;gEACnE;AAG/B;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,0EAA0E,EAAE,CAAC;;0DACpF;AAGrB;IADC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;;wDAClB;AAGnB;IADC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;;iEAC5D;AAG5B;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;;qDACP;AAG5B,MAAa,sBAAsB;CAKlC;AALD,wDAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC7C,IAAA,0BAAQ,GAAE;IACV,IAAA,yBAAO,EAAC,gBAAgB,CAAC;;2DACL;AAGvB,MAAa,sBAAuB,SAAQ,sBAAsB;CAKjE;AALD,wDAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC1G,IAAA,0BAAQ,GAAE;IACV,IAAA,yBAAO,EAAC,SAAS,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;oDACvD","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsString, Matches } from 'class-validator';\n\nexport class TwoFactorChallengeDto {\n  @ApiProperty({ enum: [true], description: 'Il login non e completo: nessun JWT e stato emesso.' })\n  twoFactorRequired: true = true;\n\n  @ApiProperty({ description: 'Identificativo opaco della verifica, non utilizzabile come Bearer token.' })\n  challengeId!: string;\n\n  @ApiProperty({ format: 'date-time' })\n  expiresAt!: string;\n\n  @ApiProperty({ example: 60, description: 'Secondi minimi prima del prossimo reinvio.' })\n  resendAfterSeconds!: number;\n\n  @ApiProperty({ enum: ['email'] })\n  method: 'email' = 'email';\n}\n\nexport class ResendTwoFactorRequest {\n  @ApiProperty({ minLength: 64, maxLength: 64 })\n  @IsString()\n  @Matches(/^[a-f0-9]{64}$/)\n  challengeId!: string;\n}\n\nexport class VerifyTwoFactorRequest extends ResendTwoFactorRequest {\n  @ApiProperty({ description: 'Codice monouso ricevuto via email.', example: '012345', pattern: '^\\\\d{6}$' })\n  @IsString()\n  @Matches(/^\\d{6}$/, { message: 'Il codice deve contenere 6 cifre.' })\n  code!: string;\n}\n"]}

package/dist/accessi-module/Dtos/UpdateEnabledStatusRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateEnabledStatusRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UpdateEnabledStatusRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAA4C;AAE5C,MAAa,0BAA0B;CAQtC;AARD,gEAQC;AADC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;2DACpD","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\r\nimport { IsBoolean } from 'class-validator';\r\n\r\nexport class UpdateEnabledStatusRequest {\r\n  @ApiProperty({\r\n    description: 'Nuovo stato di abilitazione',\r\n    example: true,\r\n    type: Boolean,\r\n  })\r\n  @IsBoolean({ message: 'Il valore di enabled deve essere booleano.' })\r\n  enabled: boolean;\r\n}\r\n"]}
+{"version":3,"file":"UpdateEnabledStatusRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UpdateEnabledStatusRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAA4C;AAE5C,MAAa,0BAA0B;CAQtC;AARD,gEAQC;AADC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;2DACnD","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsBoolean } from 'class-validator';\n\nexport class UpdateEnabledStatusRequest {\n  @ApiProperty({\n    description: 'Nuovo stato di abilitazione',\n    example: true,\n    type: Boolean,\n  })\n  @IsBoolean({ message: 'Il valore di enabled deve essere booleano.' })\n  enabled!: boolean;\n}\n"]}

package/dist/accessi-module/Dtos/UserDto.d.ts

@@ -2,6 +2,11 @@ import { StatoRegistrazione } from './StatoRegistrazione';
 import { Permission } from './Permission';
 import { FiltriUtente } from './FiltriUtente';
 declare const UserDto_base: import("@nestjs/common").Type<Omit<FiltriUtente, "codUte">>;
+/**
+ * Profilo Accessi con dati anagrafici, policy di accesso e filtri legacy.
+ * I campi amministrativi (`flagSuper`, `flagAdminConfigurator`, ruoli, grant e policy password) devono essere
+ * accettati soltanto da endpoint e flussi backend esplicitamente privilegiati.
+ */
 export declare class UserDto extends UserDto_base {
     codiceUtente: number;
     email: string;
@@ -16,14 +21,28 @@ export declare class UserDto extends UserDto_base {
     nome?: string;
     avatar?: string | null;
     flagDueFattori?: boolean;
+    passwordlessLoginEnabled?: boolean;
     codiceLingua?: string;
     cellulare?: string | null;
     flagSuper?: boolean;
     flagAdminConfigurator?: boolean;
+    passwordLoginEnabled?: boolean;
     paginaDefault?: string;
     nummac?: number;
     jsonMetadata?: string;
     ragSocCli?: string;
+    caumov?: string;
+    enableIa?: boolean;
+    flagMop?: boolean;
+    flagPiana?: boolean;
+    flagAddetti?: boolean;
+    flagOspiti?: boolean;
+    flagPianaRfid?: boolean;
+    flagConta?: boolean;
+    flagCubi?: boolean;
+    flagCicliPass?: boolean;
+    flagDipendenti?: boolean;
+    flagInventari?: boolean;
     roles?: number[];
     permissions?: Permission[];
 }

package/dist/accessi-module/Dtos/UserDto.js

@@ -17,11 +17,16 @@ const StatoRegistrazione_1 = require("./StatoRegistrazione");
 const Permission_1 = require("./Permission");
 const TipoAbilitazione_1 = require("./TipoAbilitazione");
 const FiltriUtente_1 = require("./FiltriUtente");
+/**
+ * Profilo Accessi con dati anagrafici, policy di accesso e filtri legacy.
+ * I campi amministrativi (`flagSuper`, `flagAdminConfigurator`, ruoli, grant e policy password) devono essere
+ * accettati soltanto da endpoint e flussi backend esplicitamente privilegiati.
+ */
 class UserDto extends (0, swagger_1.OmitType)(FiltriUtente_1.FiltriUtente, ['codUte']) {
 }
 exports.UserDto = UserDto;
 __decorate([
-    (0, swagger_1.ApiProperty)({ description: "Codice identificativo univoco dell'utente.", example: 'USR123' }),
+    (0, swagger_1.ApiProperty)({ description: "Codice identificativo univoco dell'utente.", example: 123 }),
     (0, class_validator_1.IsOptional)(),
     (0, class_transformer_1.Type)(() => Number),
     (0, class_validator_1.IsInt)({ message: 'Il codice utente deve essere un intero.' }),
@@ -117,12 +122,13 @@ __decorate([
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Avatar (URL o base64).',
+        type: String,
         example: 'https://example.com/avatar.jpg',
         nullable: true,
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)({ message: "L'avatar deve essere una stringa." }),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], UserDto.prototype, "avatar", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
@@ -131,8 +137,16 @@ __decorate([
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsBoolean)({ message: 'Il flag due fattori deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
     __metadata("design:type", Boolean)
 ], UserDto.prototype, "flagDueFattori", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Consente accesso con il solo codice email. Richiede flagDueFattori e viene gestito dagli amministratori.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "passwordlessLoginEnabled", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({ description: 'Codice lingua preferito.', example: 'it' }),
     (0, class_validator_1.IsOptional)(),
@@ -143,13 +157,14 @@ __decorate([
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Numero di cellulare.',
+        type: String,
         example: '+393401234567',
         nullable: true,
     }),
     (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)({ message: 'Il cellulare deve essere una stringa.' }),
     (0, class_validator_1.Length)(1, 50, { message: 'Il cellulare deve essere compreso tra 1 e 50 caratteri.' }),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], UserDto.prototype, "cellulare", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({ description: 'Flag superutente.', example: false }),
@@ -166,6 +181,15 @@ __decorate([
     (0, class_validator_1.IsBoolean)({ message: 'Il flag configuratore deve essere booleano.' }),
     __metadata("design:type", Boolean)
 ], UserDto.prototype, "flagAdminConfigurator", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Abilita il login locale con password. Se false, l utente puo autenticarsi solo tramite identita SSO attive.',
+        example: false,
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag login password deve essere booleano.' }),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "passwordLoginEnabled", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: "Pagina di default dell'utente all'accesso.",
@@ -180,6 +204,10 @@ __decorate([
         description: "Numero MAC associato all'utente.",
         example: 12,
     }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)({ message: 'Il numero MAC deve essere un intero.' }),
+    (0, class_validator_1.Min)(0, { message: 'Il numero MAC non puo essere negativo.' }),
     __metadata("design:type", Number)
 ], UserDto.prototype, "nummac", void 0);
 __decorate([
@@ -197,6 +225,89 @@ __decorate([
     (0, class_validator_1.IsString)({ message: 'La ragione sociale deve essere una stringa.' }),
     __metadata("design:type", String)
 ], UserDto.prototype, "ragSocCli", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Codice causale movimento applicativa.', example: 'VEN' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)({ message: 'Il codice causale deve essere una stringa.' }),
+    __metadata("design:type", String)
+], UserDto.prototype, "caumov", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilita l\'utente all\'uso dell\'assistente IA.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag IA deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "enableIa", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione funzionalita MOP.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag MOP deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagMop", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione funzionalita Piana.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Piana deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagPiana", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione funzionalita Addetti.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Addetti deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagAddetti", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione funzionalita Ospiti.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Ospiti deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagOspiti", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione Piana RFID.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Piana RFID deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagPianaRfid", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione funzionalita Contabilita.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Conta deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagConta", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione funzionalita Cubi.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Cubi deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagCubi", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione funzionalita Cicli passivi.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Cicli passivi deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagCicliPass", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione gestione dipendenti.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Dipendenti deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagDipendenti", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Abilitazione gestione inventari.', default: false }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)({ message: 'Il flag Inventari deve essere booleano.' }),
+    (0, class_transformer_1.Transform)(({ obj, key }) => obj[key]),
+    __metadata("design:type", Boolean)
+], UserDto.prototype, "flagInventari", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({ description: "Ruoli assegnati all'utente.", example: [1, 2] }),
     (0, class_validator_1.IsOptional)(),

package/dist/accessi-module/Dtos/UserDto.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserDto.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UserDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA6E;AAC7E,yDAAyC;AACzC,qDAWyB;AACzB,6DAA0D;AAC1D,6CAA0C;AAC1C,yDAAsD;AACtD,iDAA8C;AAE9C,MAAa,OAAQ,SAAQ,IAAA,kBAAQ,EAAC,2BAAY,EAAE,CAAC,QAAQ,CAAU,CAAC;CA+KvE;AA/KD,0BA+KC;AAzKC;IALC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC7F,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC7D,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;;6CACjD;AAMrB;IAJC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IACjF,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;sCACrE;AAKd;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;;yCAC1C;AASnB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gCAAgC;QAC7C,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;yCAC7C;AASlB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;;gDAChD;AASzB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yBAAyB;QACtC,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,YAAY;KACtB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;qDAC9C;AAS9B;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,qCAAqC;QAClD,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;;8CAClD;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,wCAAwC;QACrD,IAAI,EAAE,uCAAkB;QACxB,OAAO,EAAE,uCAAkB,CAAC,IAAI;KACjC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,uCAAkB,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;mDAC3C;AAQxC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,WAAW;KACrB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;iDAChD;AAM1B;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC5D,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;;wCACrE;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC3E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;qCACrE;AASd;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,wBAAwB;QACrC,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;uCACpC;AAQvB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,+DAA+D;QAC5E,OAAO,EAAE,IAAI;KACd,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;+CAC3C;AAMzB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAClE,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC;;6CACpE;AAUtB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAC9D,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;;0CAC5D;AAK1B;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzE,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;0CAChD;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,KAAK;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;;sDACtC;AAQhC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,YAAY;KACtB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;;8CAChD;AAMvB;IAJC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,EAAE;KACZ,CAAC;;uCACc;AAQhB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,mBAAmB;KAC7B,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;6CAC9C;AAKtB;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC1F,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;;0CAClD;AAQnB;IANC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACpF,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACvD,IAAA,6BAAW,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACpE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;sCACnD;AAWjB;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,CAAC,uBAAU,CAAC;QAClB,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,mCAAgB,CAAC,SAAS,EAAE,CAAC;KACvF,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1D,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,uBAAU,CAAC;;4CACI","sourcesContent":["import { ApiProperty, ApiPropertyOptional, OmitType } from '@nestjs/swagger';\r\nimport { Type } from 'class-transformer';\r\nimport {\r\n  ArrayUnique,\r\n  IsArray,\r\n  IsBoolean,\r\n  IsEnum,\r\n  IsInt,\r\n  IsOptional,\r\n  IsString,\r\n  Length,\r\n  Min,\r\n  ValidateNested,\r\n} from 'class-validator';\r\nimport { StatoRegistrazione } from './StatoRegistrazione';\r\nimport { Permission } from './Permission';\r\nimport { TipoAbilitazione } from './TipoAbilitazione';\r\nimport { FiltriUtente } from './FiltriUtente';\r\n\r\nexport class UserDto extends OmitType(FiltriUtente, ['codUte'] as const) {\r\n  @ApiProperty({ description: \"Codice identificativo univoco dell'utente.\", example: 'USR123' })\r\n  @IsOptional()\r\n  @Type(() => Number)\r\n  @IsInt({ message: 'Il codice utente deve essere un intero.' })\r\n  @Min(1, { message: 'Il codice utente deve essere maggiore di zero.' })\r\n  codiceUtente: number;\r\n\r\n  @ApiProperty({ description: \"Email dell'utente.\", example: 'mario.rossi@dev.it' })\r\n  @IsOptional()\r\n  @IsString({ message: \"L'email deve essere una stringa.\" })\r\n  @Length(3, 254, { message: \"L'email deve essere compresa tra 3 e 254 caratteri.\" })\r\n  email: string;\r\n\r\n  @ApiPropertyOptional({ description: \"Flag per l'accettazione del GDPR.\", example: true })\r\n  @IsOptional()\r\n  @IsBoolean({ message: 'Il flag GDPR deve essere booleano.' })\r\n  flagGdpr?: boolean;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Data di accettazione del GDPR.',\r\n    format: 'date-time',\r\n    example: '2024-03-18T12:34:56Z',\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: 'La data GDPR deve essere una stringa.' })\r\n  dataGdpr?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Data di inserimento dell'utente nel sistema.\",\r\n    format: 'date-time',\r\n    example: '2023-01-01T08:30:00Z',\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: 'La data di inserimento deve essere una stringa.' })\r\n  dataInserimento?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Data scadenza password.',\r\n    format: 'date-time',\r\n    example: '2025-06-01',\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: 'La data scadenza password deve essere una stringa.' })\r\n  dataScadenzaPassword?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Ultima data di accesso dell'utente.\",\r\n    format: 'date-time',\r\n    example: '2024-03-15T14:45:00Z',\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: 'La data ultimo accesso deve essere una stringa.' })\r\n  dataLastLogin?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Stato della registrazione dell'utente.\",\r\n    enum: StatoRegistrazione,\r\n    example: StatoRegistrazione.CONF,\r\n  })\r\n  @IsOptional()\r\n  @IsEnum(StatoRegistrazione, { message: 'Lo stato di registrazione non e valido.' })\r\n  statoRegistrazione?: StatoRegistrazione;\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Chiave di registrazione dell'utente.\",\r\n    example: 'abc123xyz',\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: 'La chiave registrazione deve essere una stringa.' })\r\n  keyRegistrazione?: string;\r\n\r\n  @ApiPropertyOptional({ description: \"Cognome dell'utente.\", example: 'Rossi' })\r\n  @IsOptional()\r\n  @IsString({ message: 'Il cognome deve essere una stringa.' })\r\n  @Length(1, 255, { message: 'Il cognome deve essere compreso tra 1 e 255 caratteri.' })\r\n  cognome?: string;\r\n\r\n  @ApiPropertyOptional({ description: \"Nome dell'utente.\", example: 'Mario' })\r\n  @IsOptional()\r\n  @IsString({ message: 'Il nome deve essere una stringa.' })\r\n  @Length(1, 255, { message: 'Il nome deve essere compreso tra 1 e 255 caratteri.' })\r\n  nome?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Avatar (URL o base64).',\r\n    example: 'https://example.com/avatar.jpg',\r\n    nullable: true,\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: \"L'avatar deve essere una stringa.\" })\r\n  avatar?: string | null;\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Flag che indica se l'autenticazione a due fattori è attivata.\",\r\n    example: true,\r\n  })\r\n  @IsOptional()\r\n  @IsBoolean({ message: 'Il flag due fattori deve essere booleano.' })\r\n  flagDueFattori?: boolean;\r\n\r\n  @ApiPropertyOptional({ description: 'Codice lingua preferito.', example: 'it' })\r\n  @IsOptional()\r\n  @IsString({ message: 'Il codice lingua deve essere una stringa.' })\r\n  @Length(1, 20, { message: 'Il codice lingua deve essere compreso tra 1 e 20 caratteri.' })\r\n  codiceLingua?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Numero di cellulare.',\r\n    example: '+393401234567',\r\n    nullable: true,\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: 'Il cellulare deve essere una stringa.' })\r\n  @Length(1, 50, { message: 'Il cellulare deve essere compreso tra 1 e 50 caratteri.' })\r\n  cellulare?: string | null;\r\n\r\n  @ApiPropertyOptional({ description: 'Flag superutente.', example: false })\r\n  @IsOptional()\r\n  @IsBoolean({ message: 'Il flag superutente deve essere booleano.' })\r\n  flagSuper?: boolean;\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Flag che indica se l'utente è configuratore\",\r\n    example: false,\r\n  })\r\n  @IsOptional()\r\n  @IsBoolean({ message: 'Il flag configuratore deve essere booleano.' })\r\n  flagAdminConfigurator?: boolean;\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Pagina di default dell'utente all'accesso.\",\r\n    example: '/dashboard',\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: 'La pagina di default deve essere una stringa.' })\r\n  paginaDefault?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Numero MAC associato all'utente.\",\r\n    example: 12,\r\n  })\r\n  nummac?: number;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Metadata JSON personalizzato.',\r\n    example: '{\"theme\": \"dark\"}',\r\n  })\r\n  @IsOptional()\r\n  @IsString({ message: 'I metadata JSON devono essere una stringa.' })\r\n  jsonMetadata?: string;\r\n\r\n  @ApiPropertyOptional({ description: 'Ragione sociale cliente.', example: 'ACME Corp SpA' })\r\n  @IsOptional()\r\n  @IsString({ message: 'La ragione sociale deve essere una stringa.' })\r\n  ragSocCli?: string;\r\n\r\n  @ApiPropertyOptional({ description: \"Ruoli assegnati all'utente.\", example: [1, 2] })\r\n  @IsOptional()\r\n  @IsArray({ message: 'I ruoli devono essere un array.' })\r\n  @ArrayUnique({ message: 'I ruoli non possono contenere duplicati.' })\r\n  @Type(() => Number)\r\n  @IsInt({ each: true, message: 'Ogni ruolo deve essere un intero.' })\r\n  roles?: number[];\r\n\r\n  @ApiPropertyOptional({\r\n    description: \"Permessi assegnati all'utente.\",\r\n    type: [Permission],\r\n    example: [{ codiceMenu: 'MNUOFFICINA', tipoAbilitazione: TipoAbilitazione.SCRITTURA }],\r\n  })\r\n  @IsOptional()\r\n  @IsArray({ message: 'I permessi devono essere un array.' })\r\n  @ValidateNested({ each: true })\r\n  @Type(() => Permission)\r\n  permissions?: Permission[];\r\n}\r\n"]}
+{"version":3,"file":"UserDto.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UserDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA6E;AAC7E,yDAAoD;AACpD,qDAWyB;AACzB,6DAA0D;AAC1D,6CAA0C;AAC1C,yDAAsD;AACtD,iDAA8C;AAE9C;;;;GAIG;AACH,MAAa,OAAQ,SAAQ,IAAA,kBAAQ,EAAC,2BAAY,EAAE,CAAC,QAAQ,CAAU,CAAC;CA2QvE;AA3QD,0BA2QC;AArQC;IALC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACxF,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC7D,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;;6CAChD;AAMtB;IAJC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IACjF,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;sCACpE;AAKf;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;;yCAC1C;AASnB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gCAAgC;QAC7C,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;yCAC7C;AASlB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;;gDAChD;AASzB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yBAAyB;QACtC,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,YAAY;KACtB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;qDAC9C;AAS9B;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,qCAAqC;QAClD,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;;8CAClD;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,wCAAwC;QACrD,IAAI,EAAE,uCAAkB;QACxB,OAAO,EAAE,uCAAkB,CAAC,IAAI;KACjC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,uCAAkB,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;mDAC3C;AAQxC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,WAAW;KACrB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;iDAChD;AAM1B;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC5D,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;;wCACrE;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC3E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;qCACrE;AAUd;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,wBAAwB;QACrC,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;uCACpC;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,+DAA+D;QAC5E,OAAO,EAAE,IAAI;KACd,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACnE,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;+CACb;AAMzB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0GAA0G,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChK,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;IACX,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;yDACH;AAMnC;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAClE,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC;;6CACpE;AAWtB;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAC9D,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;;0CAC5D;AAK1B;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzE,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;0CAChD;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,KAAK;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;;sDACtC;AAQhC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,6GAA6G;QAC1H,OAAO,EAAE,KAAK;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;;qDACxC;AAQ/B;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,YAAY;KACtB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;;8CAChD;AAUvB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,EAAE;KACZ,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;IAC1D,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;;uCAC9C;AAQhB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,mBAAmB;KAC7B,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;6CAC9C;AAKtB;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC1F,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;;0CAClD;AAKnB;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7F,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;uCACpD;AAMhB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvG,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAC1D,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;yCACnB;AAMnB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;IAC3D,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;wCACpB;AAMlB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC7D,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;0CAClB;AAMpB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1F,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAC/D,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;4CAChB;AAMtB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;IAC9D,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;2CACjB;AAMrB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IAClE,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;8CACd;AAMxB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9F,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC7D,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;0CAClB;AAMpB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC5D,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;yCACnB;AAMnB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChG,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IACrE,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;8CACd;AAMxB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IAClE,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;+CACb;AAMzB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACjE,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;8CACd;AAQxB;IANC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACpF,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACvD,IAAA,6BAAW,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACpE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;sCACnD;AAWjB;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,CAAC,uBAAU,CAAC;QAClB,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,mCAAgB,CAAC,SAAS,EAAE,CAAC;KACvF,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1D,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,uBAAU,CAAC;;4CACI","sourcesContent":["import { ApiProperty, ApiPropertyOptional, OmitType } from '@nestjs/swagger';\nimport { Transform, Type } from 'class-transformer';\nimport {\n  ArrayUnique,\n  IsArray,\n  IsBoolean,\n  IsEnum,\n  IsInt,\n  IsOptional,\n  IsString,\n  Length,\n  Min,\n  ValidateNested,\n} from 'class-validator';\nimport { StatoRegistrazione } from './StatoRegistrazione';\nimport { Permission } from './Permission';\nimport { TipoAbilitazione } from './TipoAbilitazione';\nimport { FiltriUtente } from './FiltriUtente';\n\n/**\n * Profilo Accessi con dati anagrafici, policy di accesso e filtri legacy.\n * I campi amministrativi (`flagSuper`, `flagAdminConfigurator`, ruoli, grant e policy password) devono essere\n * accettati soltanto da endpoint e flussi backend esplicitamente privilegiati.\n */\nexport class UserDto extends OmitType(FiltriUtente, ['codUte'] as const) {\n  @ApiProperty({ description: \"Codice identificativo univoco dell'utente.\", example: 123 })\n  @IsOptional()\n  @Type(() => Number)\n  @IsInt({ message: 'Il codice utente deve essere un intero.' })\n  @Min(1, { message: 'Il codice utente deve essere maggiore di zero.' })\n  codiceUtente!: number;\n\n  @ApiProperty({ description: \"Email dell'utente.\", example: 'mario.rossi@dev.it' })\n  @IsOptional()\n  @IsString({ message: \"L'email deve essere una stringa.\" })\n  @Length(3, 254, { message: \"L'email deve essere compresa tra 3 e 254 caratteri.\" })\n  email!: string;\n\n  @ApiPropertyOptional({ description: \"Flag per l'accettazione del GDPR.\", example: true })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag GDPR deve essere booleano.' })\n  flagGdpr?: boolean;\n\n  @ApiPropertyOptional({\n    description: 'Data di accettazione del GDPR.',\n    format: 'date-time',\n    example: '2024-03-18T12:34:56Z',\n  })\n  @IsOptional()\n  @IsString({ message: 'La data GDPR deve essere una stringa.' })\n  dataGdpr?: string;\n\n  @ApiPropertyOptional({\n    description: \"Data di inserimento dell'utente nel sistema.\",\n    format: 'date-time',\n    example: '2023-01-01T08:30:00Z',\n  })\n  @IsOptional()\n  @IsString({ message: 'La data di inserimento deve essere una stringa.' })\n  dataInserimento?: string;\n\n  @ApiPropertyOptional({\n    description: 'Data scadenza password.',\n    format: 'date-time',\n    example: '2025-06-01',\n  })\n  @IsOptional()\n  @IsString({ message: 'La data scadenza password deve essere una stringa.' })\n  dataScadenzaPassword?: string;\n\n  @ApiPropertyOptional({\n    description: \"Ultima data di accesso dell'utente.\",\n    format: 'date-time',\n    example: '2024-03-15T14:45:00Z',\n  })\n  @IsOptional()\n  @IsString({ message: 'La data ultimo accesso deve essere una stringa.' })\n  dataLastLogin?: string;\n\n  @ApiPropertyOptional({\n    description: \"Stato della registrazione dell'utente.\",\n    enum: StatoRegistrazione,\n    example: StatoRegistrazione.CONF,\n  })\n  @IsOptional()\n  @IsEnum(StatoRegistrazione, { message: 'Lo stato di registrazione non e valido.' })\n  statoRegistrazione?: StatoRegistrazione;\n\n  @ApiPropertyOptional({\n    description: \"Chiave di registrazione dell'utente.\",\n    example: 'abc123xyz',\n  })\n  @IsOptional()\n  @IsString({ message: 'La chiave registrazione deve essere una stringa.' })\n  keyRegistrazione?: string;\n\n  @ApiPropertyOptional({ description: \"Cognome dell'utente.\", example: 'Rossi' })\n  @IsOptional()\n  @IsString({ message: 'Il cognome deve essere una stringa.' })\n  @Length(1, 255, { message: 'Il cognome deve essere compreso tra 1 e 255 caratteri.' })\n  cognome?: string;\n\n  @ApiPropertyOptional({ description: \"Nome dell'utente.\", example: 'Mario' })\n  @IsOptional()\n  @IsString({ message: 'Il nome deve essere una stringa.' })\n  @Length(1, 255, { message: 'Il nome deve essere compreso tra 1 e 255 caratteri.' })\n  nome?: string;\n\n  @ApiPropertyOptional({\n    description: 'Avatar (URL o base64).',\n    type: String,\n    example: 'https://example.com/avatar.jpg',\n    nullable: true,\n  })\n  @IsOptional()\n  @IsString({ message: \"L'avatar deve essere una stringa.\" })\n  avatar?: string | null;\n\n  @ApiPropertyOptional({\n    description: \"Flag che indica se l'autenticazione a due fattori è attivata.\",\n    example: true,\n  })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag due fattori deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagDueFattori?: boolean;\n\n  @ApiPropertyOptional({ description: 'Consente accesso con il solo codice email. Richiede flagDueFattori e viene gestito dagli amministratori.', default: false })\n  @IsOptional()\n  @IsBoolean()\n  @Transform(({ obj, key }) => obj[key])\n  passwordlessLoginEnabled?: boolean;\n\n  @ApiPropertyOptional({ description: 'Codice lingua preferito.', example: 'it' })\n  @IsOptional()\n  @IsString({ message: 'Il codice lingua deve essere una stringa.' })\n  @Length(1, 20, { message: 'Il codice lingua deve essere compreso tra 1 e 20 caratteri.' })\n  codiceLingua?: string;\n\n  @ApiPropertyOptional({\n    description: 'Numero di cellulare.',\n    type: String,\n    example: '+393401234567',\n    nullable: true,\n  })\n  @IsOptional()\n  @IsString({ message: 'Il cellulare deve essere una stringa.' })\n  @Length(1, 50, { message: 'Il cellulare deve essere compreso tra 1 e 50 caratteri.' })\n  cellulare?: string | null;\n\n  @ApiPropertyOptional({ description: 'Flag superutente.', example: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag superutente deve essere booleano.' })\n  flagSuper?: boolean;\n\n  @ApiPropertyOptional({\n    description: \"Flag che indica se l'utente è configuratore\",\n    example: false,\n  })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag configuratore deve essere booleano.' })\n  flagAdminConfigurator?: boolean;\n\n  @ApiPropertyOptional({\n    description: 'Abilita il login locale con password. Se false, l utente puo autenticarsi solo tramite identita SSO attive.',\n    example: false,\n  })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag login password deve essere booleano.' })\n  passwordLoginEnabled?: boolean;\n\n  @ApiPropertyOptional({\n    description: \"Pagina di default dell'utente all'accesso.\",\n    example: '/dashboard',\n  })\n  @IsOptional()\n  @IsString({ message: 'La pagina di default deve essere una stringa.' })\n  paginaDefault?: string;\n\n  @ApiPropertyOptional({\n    description: \"Numero MAC associato all'utente.\",\n    example: 12,\n  })\n  @IsOptional()\n  @Type(() => Number)\n  @IsInt({ message: 'Il numero MAC deve essere un intero.' })\n  @Min(0, { message: 'Il numero MAC non puo essere negativo.' })\n  nummac?: number;\n\n  @ApiPropertyOptional({\n    description: 'Metadata JSON personalizzato.',\n    example: '{\"theme\": \"dark\"}',\n  })\n  @IsOptional()\n  @IsString({ message: 'I metadata JSON devono essere una stringa.' })\n  jsonMetadata?: string;\n\n  @ApiPropertyOptional({ description: 'Ragione sociale cliente.', example: 'ACME Corp SpA' })\n  @IsOptional()\n  @IsString({ message: 'La ragione sociale deve essere una stringa.' })\n  ragSocCli?: string;\n\n  @ApiPropertyOptional({ description: 'Codice causale movimento applicativa.', example: 'VEN' })\n  @IsOptional()\n  @IsString({ message: 'Il codice causale deve essere una stringa.' })\n  caumov?: string;\n\n  @ApiPropertyOptional({ description: 'Abilita l\\'utente all\\'uso dell\\'assistente IA.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag IA deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  enableIa?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione funzionalita MOP.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag MOP deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagMop?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione funzionalita Piana.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Piana deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagPiana?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione funzionalita Addetti.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Addetti deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagAddetti?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione funzionalita Ospiti.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Ospiti deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagOspiti?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione Piana RFID.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Piana RFID deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagPianaRfid?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione funzionalita Contabilita.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Conta deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagConta?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione funzionalita Cubi.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Cubi deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagCubi?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione funzionalita Cicli passivi.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Cicli passivi deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagCicliPass?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione gestione dipendenti.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Dipendenti deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagDipendenti?: boolean;\n\n  @ApiPropertyOptional({ description: 'Abilitazione gestione inventari.', default: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag Inventari deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagInventari?: boolean;\n\n  @ApiPropertyOptional({ description: \"Ruoli assegnati all'utente.\", example: [1, 2] })\n  @IsOptional()\n  @IsArray({ message: 'I ruoli devono essere un array.' })\n  @ArrayUnique({ message: 'I ruoli non possono contenere duplicati.' })\n  @Type(() => Number)\n  @IsInt({ each: true, message: 'Ogni ruolo deve essere un intero.' })\n  roles?: number[];\n\n  @ApiPropertyOptional({\n    description: \"Permessi assegnati all'utente.\",\n    type: [Permission],\n    example: [{ codiceMenu: 'MNUOFFICINA', tipoAbilitazione: TipoAbilitazione.SCRITTURA }],\n  })\n  @IsOptional()\n  @IsArray({ message: 'I permessi devono essere un array.' })\n  @ValidateNested({ each: true })\n  @Type(() => Permission)\n  permissions?: Permission[];\n}\n"]}

package/dist/accessi-module/Dtos/UserGrantsDto.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserGrantsDto.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UserGrantsDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAyC;AACzC,qDAAiD;AACjD,yDAAsD;AACtD,iCAA8B;AAE9B,MAAa,aAAa;CAevB;AAfH,sCAeG;AAXC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,mCAAgB,CAAC,EAAE,CAAC;IACnF,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mCAAgB,CAAC;;mDACI;AAKjC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,WAAI,CAAC,EAAE,CAAC;IAChE,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,WAAI,CAAC;;4CACH;AAKd;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,mCAAgB,CAAC,EAAE,CAAC;IAC1E,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mCAAgB,CAAC;;6CACF","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\r\nimport { Type } from \"class-transformer\";\r\nimport { ValidateNested } from \"class-validator\";\r\nimport { AbilitazioneMenu } from \"./AbilitazioneMenu\";\r\nimport { Role } from \"./Role\";\r\n\r\nexport class UserGrantsDto {\r\n    @ApiProperty({ description: 'Abilitazioni dell\\'utente', type: [AbilitazioneMenu] })\r\n    @ValidateNested({ each: true })\r\n    @Type(() => AbilitazioneMenu)\r\n    abilitazioni: AbilitazioneMenu[];\r\n  \r\n    @ApiProperty({ description: 'Ruoli dell\\'utente', type: [Role] })\r\n    @ValidateNested({ each: true })\r\n    @Type(() => Role)\r\n    ruoli: Role[];\r\n  \r\n    @ApiProperty({ description: 'Grants combinati', type: [AbilitazioneMenu] })\r\n    @ValidateNested({ each: true })\r\n    @Type(() => AbilitazioneMenu)\r\n    grants: AbilitazioneMenu[];\r\n  }"]}
+{"version":3,"file":"UserGrantsDto.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UserGrantsDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAyC;AACzC,qDAAiD;AACjD,yDAAsD;AACtD,iCAA8B;AAE9B,MAAa,aAAa;CAevB;AAfH,sCAeG;AAXC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,mCAAgB,CAAC,EAAE,CAAC;IACnF,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mCAAgB,CAAC;;mDACK;AAKlC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,WAAI,CAAC,EAAE,CAAC;IAChE,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,WAAI,CAAC;;4CACF;AAKf;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,mCAAgB,CAAC,EAAE,CAAC;IAC1E,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mCAAgB,CAAC;;6CACD","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\nimport { Type } from \"class-transformer\";\nimport { ValidateNested } from \"class-validator\";\nimport { AbilitazioneMenu } from \"./AbilitazioneMenu\";\nimport { Role } from \"./Role\";\n\nexport class UserGrantsDto {\n    @ApiProperty({ description: 'Abilitazioni dell\\'utente', type: [AbilitazioneMenu] })\n    @ValidateNested({ each: true })\n    @Type(() => AbilitazioneMenu)\n    abilitazioni!: AbilitazioneMenu[];\n  \n    @ApiProperty({ description: 'Ruoli dell\\'utente', type: [Role] })\n    @ValidateNested({ each: true })\n    @Type(() => Role)\n    ruoli!: Role[];\n  \n    @ApiProperty({ description: 'Grants combinati', type: [AbilitazioneMenu] })\n    @ValidateNested({ each: true })\n    @Type(() => AbilitazioneMenu)\n    grants!: AbilitazioneMenu[];\n  }"]}

package/dist/accessi-module/Dtos/UserGrantsResponse.d.ts

@@ -0,0 +1,5 @@
+import { BaseResponse } from './BaseResponse';
+import { UserGrantsDto } from './UserGrantsDto';
+export declare class UserGrantsResponse extends BaseResponse {
+    Result: UserGrantsDto;
+}

package/dist/accessi-module/Dtos/UserGrantsResponse.js

@@ -0,0 +1,27 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserGrantsResponse = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const BaseResponse_1 = require("./BaseResponse");
+const UserGrantsDto_1 = require("./UserGrantsDto");
+class UserGrantsResponse extends BaseResponse_1.BaseResponse {
+}
+exports.UserGrantsResponse = UserGrantsResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: UserGrantsDto_1.UserGrantsDto }),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => UserGrantsDto_1.UserGrantsDto),
+    __metadata("design:type", UserGrantsDto_1.UserGrantsDto)
+], UserGrantsResponse.prototype, "Result", void 0);
+//# sourceMappingURL=UserGrantsResponse.js.map

package/dist/accessi-module/Dtos/UserGrantsResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserGrantsResponse.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UserGrantsResponse.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAyC;AACzC,qDAAiD;AACjD,iDAA8C;AAC9C,mDAAgD;AAEhD,MAAa,kBAAmB,SAAQ,2BAAY;CAKnD;AALD,gDAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,6BAAa,EAAE,CAAC;IACpC,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,6BAAa,CAAC;8BACjB,6BAAa;kDAAC","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { Type } from 'class-transformer';\nimport { ValidateNested } from 'class-validator';\nimport { BaseResponse } from './BaseResponse';\nimport { UserGrantsDto } from './UserGrantsDto';\n\nexport class UserGrantsResponse extends BaseResponse {\n  @ApiProperty({ type: UserGrantsDto })\n  @ValidateNested()\n  @Type(() => UserGrantsDto)\n  Result!: UserGrantsDto;\n}\n"]}

package/dist/accessi-module/Dtos/index.d.ts

@@ -2,15 +2,26 @@ export * from "./Abilitazione";
 export * from "./AbilitazioneMenu";
 export * from "./AssignPermissionsToUserRequest";
 export * from "./AssignRolesToUserRequest";
+export * from "./AuthenticatedUserPayloadDto";
 export * from "./BaseResponse";
+export * from "./CatalogDtos";
+export * from "./ConfirmResetPasswordRequest";
 export * from "./UpdateEnabledStatusRequest";
 export * from "./FiltriUtente";
+export * from "./FederatedIdentityDtos";
+export * from "./GetUserByTokenRequest";
+export * from "./GetUserByTokenResponse";
 export * from "./LoginRequest";
 export * from "./LoginResponse";
 export * from "./Permission";
+export * from "./PublicRegisterRequest";
 export * from "./Role";
+export * from "./SendResetPasswordEmailRequest";
 export * from "./StatoRegistrazione";
 export * from "./TipoAbilitazione";
 export * from "./TokenResult";
 export * from "./UserDto";
+export * from "./UserGrantsResponse";
 export * from "./RuoliMenu";
+export * from "./ServiceToken";
+export * from './TwoFactorDtos';

package/dist/accessi-module/Dtos/index.js

@@ -18,16 +18,27 @@ __exportStar(require("./Abilitazione"), exports);
 __exportStar(require("./AbilitazioneMenu"), exports);
 __exportStar(require("./AssignPermissionsToUserRequest"), exports);
 __exportStar(require("./AssignRolesToUserRequest"), exports);
+__exportStar(require("./AuthenticatedUserPayloadDto"), exports);
 __exportStar(require("./BaseResponse"), exports);
+__exportStar(require("./CatalogDtos"), exports);
+__exportStar(require("./ConfirmResetPasswordRequest"), exports);
 __exportStar(require("./UpdateEnabledStatusRequest"), exports);
 __exportStar(require("./FiltriUtente"), exports);
+__exportStar(require("./FederatedIdentityDtos"), exports);
+__exportStar(require("./GetUserByTokenRequest"), exports);
+__exportStar(require("./GetUserByTokenResponse"), exports);
 __exportStar(require("./LoginRequest"), exports);
 __exportStar(require("./LoginResponse"), exports);
 __exportStar(require("./Permission"), exports);
+__exportStar(require("./PublicRegisterRequest"), exports);
 __exportStar(require("./Role"), exports);
+__exportStar(require("./SendResetPasswordEmailRequest"), exports);
 __exportStar(require("./StatoRegistrazione"), exports);
 __exportStar(require("./TipoAbilitazione"), exports);
 __exportStar(require("./TokenResult"), exports);
 __exportStar(require("./UserDto"), exports);
+__exportStar(require("./UserGrantsResponse"), exports);
 __exportStar(require("./RuoliMenu"), exports);
+__exportStar(require("./ServiceToken"), exports);
+__exportStar(require("./TwoFactorDtos"), exports);
 //# sourceMappingURL=index.js.map

package/dist/accessi-module/Dtos/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,qDAAmC;AACnC,mEAAiD;AACjD,6DAA2C;AAC3C,iDAA+B;AAC/B,+DAA4C;AAE5C,iDAA+B;AAC/B,iDAA+B;AAC/B,kDAAgC;AAChC,+CAA6B;AAC7B,yCAAuB;AACvB,uDAAqC;AACrC,qDAAmC;AACnC,gDAA8B;AAC9B,4CAA0B;AAE1B,8CAA2B","sourcesContent":["export * from \"./Abilitazione\";\r\nexport * from \"./AbilitazioneMenu\";\r\nexport * from \"./AssignPermissionsToUserRequest\";\r\nexport * from \"./AssignRolesToUserRequest\";\r\nexport * from \"./BaseResponse\";\r\nexport * from \"./UpdateEnabledStatusRequest\"\r\n\r\nexport * from \"./FiltriUtente\";\r\nexport * from \"./LoginRequest\";\r\nexport * from \"./LoginResponse\";\r\nexport * from \"./Permission\";\r\nexport * from \"./Role\";\r\nexport * from \"./StatoRegistrazione\";\r\nexport * from \"./TipoAbilitazione\";\r\nexport * from \"./TokenResult\";\r\nexport * from \"./UserDto\";\r\n\r\nexport * from \"./RuoliMenu\"\r\n\r\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,qDAAmC;AACnC,mEAAiD;AACjD,6DAA2C;AAC3C,gEAA8C;AAC9C,iDAA+B;AAC/B,gDAA8B;AAC9B,gEAA8C;AAC9C,+DAA4C;AAE5C,iDAA+B;AAC/B,0DAAwC;AACxC,0DAAwC;AACxC,2DAAyC;AACzC,iDAA+B;AAC/B,kDAAgC;AAChC,+CAA6B;AAC7B,0DAAwC;AACxC,yCAAuB;AACvB,kEAAgD;AAChD,uDAAqC;AACrC,qDAAmC;AACnC,gDAA8B;AAC9B,4CAA0B;AAC1B,uDAAqC;AAErC,8CAA2B;AAE3B,iDAA+B;AAE/B,kDAAgC","sourcesContent":["export * from \"./Abilitazione\";\nexport * from \"./AbilitazioneMenu\";\nexport * from \"./AssignPermissionsToUserRequest\";\nexport * from \"./AssignRolesToUserRequest\";\nexport * from \"./AuthenticatedUserPayloadDto\";\nexport * from \"./BaseResponse\";\nexport * from \"./CatalogDtos\";\nexport * from \"./ConfirmResetPasswordRequest\";\nexport * from \"./UpdateEnabledStatusRequest\"\n\nexport * from \"./FiltriUtente\";\nexport * from \"./FederatedIdentityDtos\";\nexport * from \"./GetUserByTokenRequest\";\nexport * from \"./GetUserByTokenResponse\";\nexport * from \"./LoginRequest\";\nexport * from \"./LoginResponse\";\nexport * from \"./Permission\";\nexport * from \"./PublicRegisterRequest\";\nexport * from \"./Role\";\nexport * from \"./SendResetPasswordEmailRequest\";\nexport * from \"./StatoRegistrazione\";\nexport * from \"./TipoAbilitazione\";\nexport * from \"./TokenResult\";\nexport * from \"./UserDto\";\nexport * from \"./UserGrantsResponse\";\n\nexport * from \"./RuoliMenu\"\n\nexport * from \"./ServiceToken\";\n\nexport * from './TwoFactorDtos';\n"]}

package/dist/accessi-module/Services/AuthService/AuthService.d.ts

@@ -1,24 +1,59 @@
-import { AccessiOptions } from "../../AccessiModule";
+import { TwoFactorService } from '../TwoFactorService/TwoFactorService';
+import type { AccessiOptions } from "../../AccessiModule";
 import { LoginRequest } from "../../Dtos/LoginRequest";
 import { LoginResult } from "../../Dtos/LoginResponse";
 import { UserService } from "../UserService/UserService";
-import { PermissionService } from "../PermissionService/PermissionService";
 import { FiltriService } from "../FiltriService/FiltriService";
+import { TokenResult } from '../../Dtos/TokenResult';
+/** Error code deliberately returned when a user is configured as SSO-only. */
+export declare const PASSWORD_LOGIN_DISABLED = "PASSWORD_LOGIN_DISABLED";
 export declare class AuthService {
     private userService;
-    private permissionService;
     private filtriService;
     private readonly accessiOptions;
+    private readonly twoFactorService;
     private readonly logger;
-    constructor(userService: UserService, permissionService: PermissionService, filtriService: FiltriService, accessiOptions: AccessiOptions);
+    constructor(userService: UserService, filtriService: FiltriService, accessiOptions: AccessiOptions, twoFactorService: TwoFactorService);
     private refreshPasswordExpiration;
     private isMockDemoUserEnabled;
+    /** Creates the normal internal JWT consumed by all existing Accessi guards. */
+    createAccessiToken(utente: LoginResult['utente'], methods?: string[]): TokenResult;
+    /** Builds the standard login response for a user authenticated by a supported method. */
+    getLoginResultForUser(codiceUtente: number): Promise<LoginResult>;
+    /** Users without a row retain the historic password-login enabled default. */
+    private isPasswordLoginEnabled;
+    /**
+     * Autentica con credenziali locali e restituisce profilo, filtri e grant effettivi.
+     * Non crea il JWT: il controller o il flusso SSO deve chiamare `createAccessiToken` sul risultato.
+     * Per utenti SSO-only genera `PASSWORD_LOGIN_DISABLED`, da trattare come istruzione a usare l'SSO.
+     */
     login(request: LoginRequest): Promise<LoginResult>;
+    /**
+     * Verifica un JWT Accessi e ricostruisce il profilo corrente dal database.
+     * Questo evita che privilegi, stato utente o flag amministrativi presenti in un token vecchio restino validi.
+     */
     getAuthenticatedTokenPayload(token: string): Promise<Record<string, unknown>>;
-    setPassword(codiceUtente: number, nuovaPassword: string): Promise<any>;
+    /** Starts a second-factor challenge after the hosting backend has verified an SSO identity. */
+    beginFederatedTwoFactor(codiceUtente: number, identityKey: string): Promise<LoginResult>;
+    private validateTwoFactorProof;
+    verifyTwoFactor(challengeId: string, code: string): Promise<LoginResult>;
+    resendTwoFactor(challengeId: string): Promise<LoginResult>;
+    /** Persiste una password hashata e aggiorna la scadenza, se la policy password e attiva. Non invia email. */
+    setPassword(codiceUtente: number, nuovaPassword: string): Promise<Record<string, unknown>[]>;
+    /**
+     * Converte le password legacy cifrate nel formato hash compatibile, senza conoscere le password in chiaro.
+     * E idempotente: hash moderni e gia migrati vengono ignorati.
+     */
     migrateLegacyEncryptedPasswords(): Promise<void>;
+    /** Verifica una password locale e migra automaticamente il formato legacy dopo una verifica positiva. */
     verifyPassword(codiceUtente: number, plainPassword: string): Promise<boolean>;
+    /** Restituisce l'utente fittizio amministratore; usabile solo con `mockDemoUser` esplicitamente abilitato. */
     getAdminUser(): Promise<LoginResult>;
+    /** Restituisce l'utente demo fittizio; non contiene dati o grant reali. */
     getDemoUser(): LoginResult;
+    /**
+     * Consuma un token monouso di reset, riporta l'utente allo stato confermato e salva la nuova password.
+     * Il nonce in `UTENTI.KEYREG` viene annullato prima di impostare la password, impedendo il riuso del token.
+     */
     confirmResetPassword(token: string, newPassword: string): Promise<void>;
 }