emilsoftware-utilities 2.0.0-dev.4 → 2.0.0-dev.41

package/dist/accessi-module/Controllers/UserController.js

@@ -28,9 +28,11 @@ const swagger_1 = require("@nestjs/swagger");
 const path_1 = require("path");
 const Logger_1 = require("../../Logger");
 const Utilities_1 = require("../../Utilities");
+const BaseResponse_1 = require("../Dtos/BaseResponse");
 const GetUsersResponse_1 = require("../Dtos/GetUsersResponse");
-const RegisterRequest_1 = require("../Dtos/RegisterRequest");
+const PublicRegisterRequest_1 = require("../Dtos/PublicRegisterRequest");
 const RegisterResponse_1 = require("../Dtos/RegisterResponse");
+const RegisterRequest_1 = require("../Dtos/RegisterRequest");
 const SetStatoRegistrazione_1 = require("../Dtos/SetStatoRegistrazione");
 const UserDto_1 = require("../Dtos/UserDto");
 const EmailService_1 = require("../Services/EmailService/EmailService");
@@ -46,24 +48,26 @@ let UserController = UserController_1 = class UserController {
         this.logger = new Logger_1.Logger(UserController_1.name);
     }
     sendControllerError(res, error) {
-        const status = error instanceof common_1.HttpException ? error.getStatus() : common_1.HttpStatus.INTERNAL_SERVER_ERROR;
-        return Utilities_1.RestUtilities.sendErrorMessage(res, error, UserController_1.name, status);
+        // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).
+        return Utilities_1.RestUtilities.sendErrorMessage(res, error, UserController_1.name);
     }
-    serveResetPasswordPage(res, token) {
+    serveResetPasswordPage(res, _token) {
         return __awaiter(this, void 0, void 0, function* () {
             return res.sendFile((0, path_1.join)(__dirname, '..', 'Views', 'reset-password.html'));
         });
     }
-    getUsers(request, res, email, codiceUtente, includeExtensionFields, includeGrants) {
+    getUsers(request, res, email, codiceUtente, includeExtensionFields, includeGrants, limit, offset) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono consultare gli utenti.');
-                const filters = { email, codiceUtente };
+                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono consultare gli utenti.');
+                const filters = { email, codiceUtente, limit, offset };
                 const options = {
                     includeExtensionFields: includeExtensionFields !== null && includeExtensionFields !== void 0 ? includeExtensionFields : true,
                     includeGrants: includeGrants !== null && includeGrants !== void 0 ? includeGrants : true,
                 };
                 const users = yield this.userService.getUsers(filters, options);
+                const total = yield this.userService.countUsers({ email, codiceUtente });
+                res.setHeader('X-Total-Count', String(total));
                 return Utilities_1.RestUtilities.sendBaseResponse(res, users);
             }
             catch (error) {
@@ -75,7 +79,7 @@ let UserController = UserController_1 = class UserController {
     deleteUser(request, codiceUtente, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono eliminare utenti.');
+                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono eliminare utenti.');
                 yield this.userService.deleteUser(codiceUtente);
                 return Utilities_1.RestUtilities.sendOKMessage(res, "L'utente e' stato eliminato con successo.");
             }
@@ -84,15 +88,39 @@ let UserController = UserController_1 = class UserController {
             }
         });
     }
+    forcePasswordReset(request, codiceUtente, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono forzare il reset password.');
+                yield this.userService.forcePasswordReset(codiceUtente);
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Email di reset inviata all utente ${codiceUtente}.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
+    forcePasswordResetLegacy(request, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono forzare il reset password.');
+                const sent = yield this.userService.forcePasswordResetForLegacyPasswords();
+                return Utilities_1.RestUtilities.sendOKMessage(res, `Email di reset inviata a ${sent} utenti con password legacy.`);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
     setStatoRegistrazione(request, body, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                (0, accessControl_1.ensureSuperUser)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare lo stato di registrazione.');
+                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono modificare lo stato di registrazione.');
                 const { codiceUtente, statoRegistrazione } = body;
                 if (!codiceUtente)
-                    throw new Error('Il codice utente e\' obbligatorio.');
+                    throw new common_1.BadRequestException('Il codice utente e\' obbligatorio.');
                 if (statoRegistrazione === undefined) {
-                    throw new Error('Lo stato registrazione e\' obbligatorio.');
+                    throw new common_1.BadRequestException('Lo stato registrazione e\' obbligatorio.');
                 }
                 yield this.userService.setStato(codiceUtente, statoRegistrazione);
                 return Utilities_1.RestUtilities.sendOKMessage(res, `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`);
@@ -104,7 +132,11 @@ let UserController = UserController_1 = class UserController {
     }
     register(request, registrationData, res) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             try {
+                if (((_a = this.accessiOptions.publicRegistration) === null || _a === void 0 ? void 0 : _a.enabled) !== true) {
+                    throw new common_1.HttpException('La registrazione pubblica e disabilitata. Un amministratore deve creare l utente.', common_1.HttpStatus.FORBIDDEN);
+                }
                 const rateLimitDecision = (0, publicAuthRateLimit_1.checkPublicAuthRateLimit)(this.accessiOptions, 'register', request, [registrationData === null || registrationData === void 0 ? void 0 : registrationData.email]);
                 if (!rateLimitDecision.allowed) {
                     return (0, publicAuthRateLimit_1.sendPublicAuthRateLimitExceeded)(res, rateLimitDecision.retryAfterSeconds);
@@ -113,7 +145,7 @@ let UserController = UserController_1 = class UserController {
                     allowPrivilegedFields: false,
                 });
                 yield this.emailService.sendPasswordResetEmail(registrationData.email);
-                return Utilities_1.RestUtilities.sendBaseResponse(res, codiceUtente);
+                return Utilities_1.RestUtilities.sendBaseResponse(res, codiceUtente, common_1.HttpStatus.CREATED);
             }
             catch (error) {
                 const status = error instanceof common_1.HttpException ? error.getStatus() : common_1.HttpStatus.BAD_REQUEST;
@@ -121,22 +153,35 @@ let UserController = UserController_1 = class UserController {
             }
         });
     }
+    createManagedUser(request, registrationData, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                (0, accessControl_1.ensureUserManagement)((0, accessControl_1.getAuthenticatedAccessiUser)(request), 'Solo gli amministratori possono creare utenti.');
+                const codiceUtente = yield this.userService.register(registrationData, { allowPrivilegedFields: true });
+                yield this.emailService.sendPasswordResetEmail(registrationData.email, registrationData.htmlMail);
+                return Utilities_1.RestUtilities.sendBaseResponse(res, codiceUtente, common_1.HttpStatus.CREATED);
+            }
+            catch (error) {
+                return this.sendControllerError(res, error);
+            }
+        });
+    }
     updateUtente(request, codiceUtente, user, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
                 const authenticatedUser = (0, accessControl_1.getAuthenticatedAccessiUser)(request);
                 const isPrivilegedUpdate = (0, accessControl_1.hasPrivilegedUserChanges)(user);
                 if (isPrivilegedUpdate) {
-                    (0, accessControl_1.ensureSuperUser)(authenticatedUser, 'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.');
+                    (0, accessControl_1.ensureUserManagement)(authenticatedUser, 'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.');
                 }
                 else {
                     (0, accessControl_1.ensureSelfOrSuperUser)(authenticatedUser, codiceUtente, 'Puoi modificare solo il tuo profilo.');
                 }
                 if (user.codiceUtente !== undefined && user.codiceUtente !== codiceUtente) {
-                    throw new Error('Il codice utente nel body non coincide con quello del path.');
+                    throw new common_1.BadRequestException('Il codice utente nel body non coincide con quello del path.');
                 }
                 yield this.userService.updateUser(codiceUtente, user, {
-                    allowPrivilegedChanges: authenticatedUser.flagSuper,
+                    allowPrivilegedChanges: authenticatedUser.flagSuper || authenticatedUser.flagAdmin,
                 });
                 return Utilities_1.RestUtilities.sendOKMessage(res, `L'utente ${codiceUtente} e' stato aggiornato con successo.`);
             }
@@ -186,26 +231,44 @@ __decorate([
         description: 'Lista utenti recuperata con successo',
         type: GetUsersResponse_1.GetUsersResponse,
     }),
-    (0, swagger_1.ApiResponse)({ status: 401, description: 'Credenziali non valide' }),
+    (0, swagger_1.ApiResponse)({ status: 401, description: 'Credenziali non valide', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Operazione non autorizzata', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
     (0, swagger_1.ApiQuery)({
         name: 'email',
         required: false,
         description: "Email dell'utente da cercare",
+        type: String,
     }),
     (0, swagger_1.ApiQuery)({
         name: 'codiceUtente',
         required: false,
         description: "Codice dell'utente da cercare",
+        type: Number,
     }),
     (0, swagger_1.ApiQuery)({
         name: 'includeExtensionFields',
         required: false,
         description: 'Includi extension fields',
+        type: Boolean,
     }),
     (0, swagger_1.ApiQuery)({
         name: 'includeGrants',
         required: false,
         description: 'Includi permessi',
+        type: Boolean,
+    }),
+    (0, swagger_1.ApiQuery)({
+        name: 'limit',
+        required: false,
+        description: 'Numero massimo di utenti restituiti (1-1000). Omesso = tutti.',
+        type: Number,
+    }),
+    (0, swagger_1.ApiQuery)({
+        name: 'offset',
+        required: false,
+        description: 'Numero di utenti da saltare (paginazione).',
+        type: Number,
     }),
     (0, swagger_1.ApiBearerAuth)(),
     (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
@@ -213,11 +276,13 @@ __decorate([
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Res)()),
     __param(2, (0, common_1.Query)('email')),
-    __param(3, (0, common_1.Query)('codiceUtente')),
+    __param(3, (0, common_1.Query)('codiceUtente', new common_1.ParseIntPipe({ optional: true }))),
     __param(4, (0, common_1.Query)('includeExtensionFields', new common_1.ParseBoolPipe({ optional: true }))),
     __param(5, (0, common_1.Query)('includeGrants', new common_1.ParseBoolPipe({ optional: true }))),
+    __param(6, (0, common_1.Query)('limit', new common_1.ParseIntPipe({ optional: true }))),
+    __param(7, (0, common_1.Query)('offset', new common_1.ParseIntPipe({ optional: true }))),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, String, Number, Boolean, Boolean]),
+    __metadata("design:paramtypes", [Object, Object, String, Number, Boolean, Boolean, Number, Number]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "getUsers", null);
 __decorate([
@@ -230,14 +295,15 @@ __decorate([
         name: 'codiceUtente',
         description: "Codice identificativo dell'utente da eliminare",
         required: true,
-        example: '123',
+        example: 123,
     }),
-    (0, swagger_1.ApiResponse)({ status: 200, description: 'Utente eliminato con successo' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Utente eliminato con successo', type: BaseResponse_1.ActionResponse }),
     (0, swagger_1.ApiResponse)({
         status: 400,
         description: 'Errore nei parametri della richiesta',
+        type: BaseResponse_1.ErrorResponse,
     }),
-    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server' }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
     (0, swagger_1.ApiBearerAuth)(),
     (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
     (0, common_1.Delete)('delete-user/:codiceUtente'),
@@ -248,6 +314,43 @@ __decorate([
     __metadata("design:paramtypes", [Object, Number, Object]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "deleteUser", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Forza l invio dell email di reset password a un utente',
+        operationId: 'forcePasswordReset',
+        description: 'Riservato al superutente. Richiede un servizio email configurato; altrimenti risponde con ACCESSI_EMAIL_NOT_CONFIGURED.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'codiceUtente', description: 'Codice identificativo dell utente', required: true, example: 123, type: Number }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Email di reset inviata', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Servizio email non configurato', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Utente non trovato', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
+    (0, common_1.Post)('force-password-reset/:codiceUtente'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('codiceUtente', common_1.ParseIntPipe)),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Number, Object]),
+    __metadata("design:returntype", Promise)
+], UserController.prototype, "forcePasswordReset", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Forza il reset password per tutti gli utenti con password legacy',
+        operationId: 'forcePasswordResetLegacy',
+        description: 'Riservato al superutente. Invia l email di reset a tutti gli utenti la cui password non e ancora nel formato moderno. Richiede un servizio email configurato.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Email di reset inviate', type: BaseResponse_1.ActionResponse }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Servizio email non configurato', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
+    (0, common_1.Post)('force-password-reset-legacy'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], UserController.prototype, "forcePasswordResetLegacy", null);
 __decorate([
     (0, swagger_1.ApiOperation)({
         summary: 'Imposta lo stato di registrazione di un utente',
@@ -256,14 +359,17 @@ __decorate([
     (0, swagger_1.ApiResponse)({
         status: 200,
         description: 'Stato registrazione aggiornato con successo',
+        type: BaseResponse_1.ActionResponse,
     }),
     (0, swagger_1.ApiResponse)({
         status: 400,
         description: 'Errore nei parametri della richiesta',
+        type: BaseResponse_1.ErrorResponse,
     }),
     (0, swagger_1.ApiResponse)({
         status: 500,
         description: 'Errore interno del server',
+        type: BaseResponse_1.ErrorResponse,
     }),
     (0, swagger_1.ApiBody)({ type: SetStatoRegistrazione_1.SetStatoRegistrazioneDto }),
     (0, swagger_1.ApiBearerAuth)(),
@@ -279,10 +385,11 @@ __decorate([
 __decorate([
     (0, swagger_1.ApiOperation)({
         summary: 'Registra un nuovo utente',
+        description: 'Disponibile soltanto quando publicRegistration.enabled e true. Per utenti SSO usare il provisioning master nel tag Federated authentication.',
         operationId: 'register',
     }),
     (0, swagger_1.ApiBody)({
-        type: RegisterRequest_1.RegisterRequest,
+        type: PublicRegisterRequest_1.PublicRegisterRequest,
         description: "Dati necessari per la registrazione dell'utente",
     }),
     (0, swagger_1.ApiCreatedResponse)({
@@ -292,19 +399,35 @@ __decorate([
     (0, swagger_1.ApiResponse)({
         status: common_1.HttpStatus.BAD_REQUEST,
         description: 'Errore nella registrazione.',
+        type: BaseResponse_1.ErrorResponse,
     }),
     (0, swagger_1.ApiResponse)({
         status: common_1.HttpStatus.INTERNAL_SERVER_ERROR,
         description: 'Errore interno del server durante la registrazione o l\'invio email.',
+        type: BaseResponse_1.ErrorResponse,
     }),
     (0, common_1.Post)('register'),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Body)()),
     __param(2, (0, common_1.Res)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, RegisterRequest_1.RegisterRequest, Object]),
+    __metadata("design:paramtypes", [Object, PublicRegisterRequest_1.PublicRegisterRequest, Object]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "register", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({ summary: 'Crea un utente locale da amministrazione', operationId: 'createManagedUser', description: 'Riservato a superutente. Crea un utente in attesa di impostazione password e invia la mail di reset.' }),
+    (0, swagger_1.ApiBody)({ type: RegisterRequest_1.RegisterRequest }),
+    (0, swagger_1.ApiCreatedResponse)({ type: RegisterResponse_1.RegisterResponse }),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
+    (0, common_1.Post)('create-managed-user'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, RegisterRequest_1.RegisterRequest, Object]),
+    __metadata("design:returntype", Promise)
+], UserController.prototype, "createManagedUser", null);
 __decorate([
     (0, swagger_1.ApiOperation)({
         summary: 'Aggiorna un utente esistente',
@@ -314,7 +437,7 @@ __decorate([
         name: 'codiceUtente',
         description: "Codice identificativo dell'utente da aggiornare",
         required: true,
-        example: '123',
+        example: 123,
     }),
     (0, swagger_1.ApiBody)({
         type: UserDto_1.UserDto,
@@ -323,8 +446,11 @@ __decorate([
     (0, swagger_1.ApiResponse)({
         status: common_1.HttpStatus.OK,
         description: 'Utente aggiornato con successo',
+        type: BaseResponse_1.ActionResponse,
     }),
-    (0, swagger_1.ApiResponse)({ status: 400, description: "Errore nell'aggiornamento" }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: "Errore nell'aggiornamento", type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Operazione non autorizzata', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 500, description: 'Errore interno del server', type: BaseResponse_1.ErrorResponse }),
     (0, swagger_1.ApiBearerAuth)(),
     (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
     (0, common_1.Put)('update-user/:codiceUtente'),
@@ -345,13 +471,15 @@ __decorate([
         name: 'codiceUtente',
         description: "Codice identificativo dell'utente che accetta il GDPR",
         required: true,
-        example: '123',
+        example: 123,
     }),
     (0, swagger_1.ApiResponse)({
         status: 200,
         description: 'Consenso GDPR impostato con successo',
+        type: BaseResponse_1.ActionResponse,
     }),
-    (0, swagger_1.ApiResponse)({ status: 400, description: 'Errore nella richiesta' }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Errore nella richiesta', type: BaseResponse_1.ErrorResponse }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'Operazione non autorizzata', type: BaseResponse_1.ErrorResponse }),
     (0, swagger_1.ApiBearerAuth)(),
     (0, common_1.UseGuards)(jwt_strategy_1.JwtSimpleGuard),
     (0, common_1.Patch)('set-gdpr/:codiceUtente'),
@@ -364,7 +492,12 @@ __decorate([
 ], UserController.prototype, "setGdpr", null);
 exports.UserController = UserController = UserController_1 = __decorate([
     (0, swagger_1.ApiTags)('User'),
-    (0, common_1.Controller)('accessi/user'),
+    (0, common_1.Controller)('accessi/user')
+    /**
+     * Gestione utenti: la registrazione pubblica e opt-in, mentre creazione, stato e profili privilegiati
+     * richiedono un superutente Accessi. Le API restituiscono sempre il wrapper `BaseResponse` storico.
+     */
+    ,
     __param(0, (0, common_1.Inject)('ACCESSI_OPTIONS')),
     __metadata("design:paramtypes", [Object, UserService_1.UserService,
         EmailService_1.EmailService])

package/dist/accessi-module/Controllers/UserController.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/UserController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAkBwB;AAExB,6CASyB;AACzB,+BAA4B;AAC5B,yCAAsC;AACtC,+CAAgD;AAEhD,+DAA4D;AAC5D,6DAA0D;AAC1D,+DAA4D;AAC5D,yEAAyE;AACzE,6CAA0C;AAC1C,wEAAqE;AACrE,qEAAkE;AAClE,sDAAqD;AACrD,yEAGyC;AACzC,6DAKmC;AAI5B,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAC6B,cAA+C,EACzD,WAAwB,EACxB,YAA0B;QAFC,mBAAc,GAAd,cAAc,CAAgB;QACzD,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;QAL5B,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAMvD,CAAC;IAEI,mBAAmB,CAAC,GAAa,EAAE,KAAc;QACvD,MAAM,MAAM,GACV,KAAK,YAAY,sBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,qBAAqB,CAAC;QACxF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjF,CAAC;IAYK,sBAAsB,CAAQ,GAAa,EAAkB,KAAa;;YAC9E,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC;KAAA;IAmCK,QAAQ,CACL,OAAgB,EAChB,GAAa,EACJ,KAAc,EACP,YAAqB,EAE5C,sBAAgC,EAEhC,aAAuB;;YAEvB,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,wDAAwD,CACzD,CAAC;gBAEF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG;oBACd,sBAAsB,EAAE,sBAAsB,aAAtB,sBAAsB,cAAtB,sBAAsB,GAAI,IAAI;oBACtD,aAAa,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,IAAI;iBACrC,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAsBK,UAAU,CACP,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,mDAAmD,CACpD,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAChD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAsBK,qBAAqB,CAClB,OAAgB,EACf,IAA8B,EAC/B,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,+BAAe,EACb,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,uEAAuE,CACxE,CAAC;gBAEF,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;gBAClD,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACzE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;gBAClE,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,wBAAwB,YAAY,0BAA0B,kBAAkB,GAAG,CACpF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAwBK,QAAQ,CACL,OAAgB,EACf,gBAAiC,EAClC,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,cAAc,EACnB,UAAU,EACV,OAAO,EACP,CAAC,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,KAAK,CAAC,CAC1B,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBACrE,qBAAqB,EAAE,KAAK;iBAC7B,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GACV,KAAK,YAAY,sBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;gBAC9E,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAwBK,YAAY,CACT,OAAgB,EACc,YAAoB,EACjD,IAAa,EACd,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,kBAAkB,GAAG,IAAA,wCAAwB,EAAC,IAAI,CAAC,CAAC;gBAE1D,IAAI,kBAAkB,EAAE,CAAC;oBACvB,IAAA,+BAAe,EACb,iBAAiB,EACjB,iFAAiF,CAClF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,YAAY,EACZ,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBACjF,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE;oBACpD,sBAAsB,EAAE,iBAAiB,CAAC,SAAS;iBACpD,CAAC,CAAC;gBAEH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,YAAY,YAAY,oCAAoC,CAC7D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAoBK,OAAO,CACJ,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,qCAAqB,EACnB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,YAAY,EACZ,6CAA6C,CAC9C,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7C,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,YAAY,wBAAwB,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAtUY,wCAAc;AAyBnB;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,4BAA4B;KAC1C,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,YAAG,EAAC,uBAAuB,CAAC;IACC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;;;;4DAEjE;AAmCK;IAjCL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACnE,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8BAA8B;KAC5C,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+BAA+B;KAC7C,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,0BAA0B;KACxC,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kBAAkB;KAChC,CAAC;IACD,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,WAAW,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;IACrB,WAAA,IAAA,cAAK,EAAC,wBAAwB,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEtE,WAAA,IAAA,cAAK,EAAC,eAAe,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;;;;8CAqB/D;AAsBK;IApBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,KAAK;KACf,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;IAC1E,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;KACpD,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACtE,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,eAAM,EAAC,2BAA2B,CAAC;IAEjC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;gDAaP;AAsBK;IApBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uBAAuB;KACrC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6CAA6C;KAC3D,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;KACpD,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2BAA2B;KACzC,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,gDAAwB,EAAE,CAAC;IAC3C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,WAAW,CAAC;IAEf,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADQ,gDAAwB;;2DAuBvC;AAwBK;IAtBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,iCAAe;QACrB,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,4BAAkB,EAAC;QAClB,WAAW,EACT,kGAAkG;QACpG,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,WAAW;QAC9B,WAAW,EAAE,6BAA6B;KAC3C,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,qBAAqB;QACxC,WAAW,EAAE,sEAAsE;KACpF,CAAC;IACD,IAAA,aAAI,EAAC,UAAU,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADoB,iCAAe;;8CAyB1C;AAwBK;IAtBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,cAAc;KAC5B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,KAAK;KACf,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,iBAAO;QACb,WAAW,EAAE,6BAA6B;KAC3C,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,EAAE;QACrB,WAAW,EAAE,gCAAgC;KAC9C,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACtE,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAE9B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qDADQ,iBAAO;;kDAmCtB;AAoBK;IAlBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,SAAS;KACvB,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,KAAK;KACf,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;KACpD,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACnE,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,cAAK,EAAC,wBAAwB,CAAC;IAE7B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAcP;yBArUU,cAAc;IAF1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,cAAc,CAAC;IAKtB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACI,yBAAW;QACV,2BAAY;GANlC,cAAc,CAsU1B","sourcesContent":["import {\r\n  Body,\r\n  Controller,\r\n  Delete,\r\n  Get,\r\n  HttpException,\r\n  HttpStatus,\r\n  Param,\r\n  ParseBoolPipe,\r\n  ParseIntPipe,\r\n  Patch,\r\n  Post,\r\n  Put,\r\n  Query,\r\n  Inject,\r\n  Req,\r\n  Res,\r\n  UseGuards,\r\n} from '@nestjs/common';\r\nimport { Request, Response } from 'express';\r\nimport {\r\n  ApiBearerAuth,\r\n  ApiBody,\r\n  ApiCreatedResponse,\r\n  ApiOperation,\r\n  ApiParam,\r\n  ApiQuery,\r\n  ApiResponse,\r\n  ApiTags,\r\n} from '@nestjs/swagger';\r\nimport { join } from 'path';\r\nimport { Logger } from '../../Logger';\r\nimport { RestUtilities } from '../../Utilities';\r\nimport { AccessiOptions } from '../AccessiModule';\r\nimport { GetUsersResponse } from '../Dtos/GetUsersResponse';\r\nimport { RegisterRequest } from '../Dtos/RegisterRequest';\r\nimport { RegisterResponse } from '../Dtos/RegisterResponse';\r\nimport { SetStatoRegistrazioneDto } from '../Dtos/SetStatoRegistrazione';\r\nimport { UserDto } from '../Dtos/UserDto';\r\nimport { EmailService } from '../Services/EmailService/EmailService';\r\nimport { UserService } from '../Services/UserService/UserService';\r\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\r\nimport {\r\n  checkPublicAuthRateLimit,\r\n  sendPublicAuthRateLimitExceeded,\r\n} from '../security/publicAuthRateLimit';\r\nimport {\r\n  ensureSelfOrSuperUser,\r\n  ensureSuperUser,\r\n  getAuthenticatedAccessiUser,\r\n  hasPrivilegedUserChanges,\r\n} from '../security/accessControl';\r\n\r\n@ApiTags('User')\r\n@Controller('accessi/user')\r\nexport class UserController {\r\n  private readonly logger = new Logger(UserController.name);\r\n\r\n  constructor(\r\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\r\n    private readonly userService: UserService,\r\n    private readonly emailService: EmailService,\r\n  ) {}\r\n\r\n  private sendControllerError(res: Response, error: unknown) {\r\n    const status =\r\n      error instanceof HttpException ? error.getStatus() : HttpStatus.INTERNAL_SERVER_ERROR;\r\n    return RestUtilities.sendErrorMessage(res, error, UserController.name, status);\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Serve la pagina di reset password',\r\n    operationId: 'serveResetPasswordPageUser',\r\n  })\r\n  @ApiParam({\r\n    name: 'token',\r\n    description: 'Token per il reset della password',\r\n    required: true,\r\n  })\r\n  @Get('reset-password/:token')\r\n  async serveResetPasswordPage(@Res() res: Response, @Param('token') token: string) {\r\n    return res.sendFile(join(__dirname, '..', 'Views', 'reset-password.html'));\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Recupera la lista degli utenti',\r\n    operationId: 'getUsers',\r\n  })\r\n  @ApiResponse({\r\n    status: 200,\r\n    description: 'Lista utenti recuperata con successo',\r\n    type: GetUsersResponse,\r\n  })\r\n  @ApiResponse({ status: 401, description: 'Credenziali non valide' })\r\n  @ApiQuery({\r\n    name: 'email',\r\n    required: false,\r\n    description: \"Email dell'utente da cercare\",\r\n  })\r\n  @ApiQuery({\r\n    name: 'codiceUtente',\r\n    required: false,\r\n    description: \"Codice dell'utente da cercare\",\r\n  })\r\n  @ApiQuery({\r\n    name: 'includeExtensionFields',\r\n    required: false,\r\n    description: 'Includi extension fields',\r\n  })\r\n  @ApiQuery({\r\n    name: 'includeGrants',\r\n    required: false,\r\n    description: 'Includi permessi',\r\n  })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Get('get-users')\r\n  async getUsers(\r\n    @Req() request: Request,\r\n    @Res() res: Response,\r\n    @Query('email') email?: string,\r\n    @Query('codiceUtente') codiceUtente?: number,\r\n    @Query('includeExtensionFields', new ParseBoolPipe({ optional: true }))\r\n    includeExtensionFields?: boolean,\r\n    @Query('includeGrants', new ParseBoolPipe({ optional: true }))\r\n    includeGrants?: boolean,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(\r\n        getAuthenticatedAccessiUser(request),\r\n        'Solo gli amministratori possono consultare gli utenti.',\r\n      );\r\n\r\n      const filters = { email, codiceUtente };\r\n      const options = {\r\n        includeExtensionFields: includeExtensionFields ?? true,\r\n        includeGrants: includeGrants ?? true,\r\n      };\r\n\r\n      const users = await this.userService.getUsers(filters, options);\r\n      return RestUtilities.sendBaseResponse(res, users);\r\n    } catch (error) {\r\n      this.logger.error('Errore durante il recupero degli utenti: ', error);\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Elimina un utente',\r\n    operationId: 'deleteUser',\r\n    description: 'Imposta lo stato di un utente a eliminato senza rimuovere i record.',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceUtente',\r\n    description: \"Codice identificativo dell'utente da eliminare\",\r\n    required: true,\r\n    example: '123',\r\n  })\r\n  @ApiResponse({ status: 200, description: 'Utente eliminato con successo' })\r\n  @ApiResponse({\r\n    status: 400,\r\n    description: 'Errore nei parametri della richiesta',\r\n  })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server' })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Delete('delete-user/:codiceUtente')\r\n  async deleteUser(\r\n    @Req() request: Request,\r\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(\r\n        getAuthenticatedAccessiUser(request),\r\n        'Solo gli amministratori possono eliminare utenti.',\r\n      );\r\n\r\n      await this.userService.deleteUser(codiceUtente);\r\n      return RestUtilities.sendOKMessage(res, \"L'utente e' stato eliminato con successo.\");\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Imposta lo stato di registrazione di un utente',\r\n    operationId: 'setStatoRegistrazione',\r\n  })\r\n  @ApiResponse({\r\n    status: 200,\r\n    description: 'Stato registrazione aggiornato con successo',\r\n  })\r\n  @ApiResponse({\r\n    status: 400,\r\n    description: 'Errore nei parametri della richiesta',\r\n  })\r\n  @ApiResponse({\r\n    status: 500,\r\n    description: 'Errore interno del server',\r\n  })\r\n  @ApiBody({ type: SetStatoRegistrazioneDto })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Post('set-stato')\r\n  async setStatoRegistrazione(\r\n    @Req() request: Request,\r\n    @Body() body: SetStatoRegistrazioneDto,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      ensureSuperUser(\r\n        getAuthenticatedAccessiUser(request),\r\n        'Solo gli amministratori possono modificare lo stato di registrazione.',\r\n      );\r\n\r\n      const { codiceUtente, statoRegistrazione } = body;\r\n      if (!codiceUtente) throw new Error('Il codice utente e\\' obbligatorio.');\r\n      if (statoRegistrazione === undefined) {\r\n        throw new Error('Lo stato registrazione e\\' obbligatorio.');\r\n      }\r\n\r\n      await this.userService.setStato(codiceUtente, statoRegistrazione);\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`,\r\n      );\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Registra un nuovo utente',\r\n    operationId: 'register',\r\n  })\r\n  @ApiBody({\r\n    type: RegisterRequest,\r\n    description: \"Dati necessari per la registrazione dell'utente\",\r\n  })\r\n  @ApiCreatedResponse({\r\n    description:\r\n      'Utente registrato con successo. Restituisce il codice utente e invia una mail di reset password.',\r\n    type: RegisterResponse,\r\n  })\r\n  @ApiResponse({\r\n    status: HttpStatus.BAD_REQUEST,\r\n    description: 'Errore nella registrazione.',\r\n  })\r\n  @ApiResponse({\r\n    status: HttpStatus.INTERNAL_SERVER_ERROR,\r\n    description: 'Errore interno del server durante la registrazione o l\\'invio email.',\r\n  })\r\n  @Post('register')\r\n  async register(\r\n    @Req() request: Request,\r\n    @Body() registrationData: RegisterRequest,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      const rateLimitDecision = checkPublicAuthRateLimit(\r\n        this.accessiOptions,\r\n        'register',\r\n        request,\r\n        [registrationData?.email],\r\n      );\r\n      if (!rateLimitDecision.allowed) {\r\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\r\n      }\r\n\r\n      const codiceUtente = await this.userService.register(registrationData, {\r\n        allowPrivilegedFields: false,\r\n      });\r\n\r\n      await this.emailService.sendPasswordResetEmail(registrationData.email);\r\n      return RestUtilities.sendBaseResponse(res, codiceUtente);\r\n    } catch (error) {\r\n      const status =\r\n        error instanceof HttpException ? error.getStatus() : HttpStatus.BAD_REQUEST;\r\n      return RestUtilities.sendErrorMessage(res, error, UserController.name, status);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Aggiorna un utente esistente',\r\n    operationId: 'updateUtente',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceUtente',\r\n    description: \"Codice identificativo dell'utente da aggiornare\",\r\n    required: true,\r\n    example: '123',\r\n  })\r\n  @ApiBody({\r\n    type: UserDto,\r\n    description: \"Dati aggiornati dell'utente\",\r\n  })\r\n  @ApiResponse({\r\n    status: HttpStatus.OK,\r\n    description: 'Utente aggiornato con successo',\r\n  })\r\n  @ApiResponse({ status: 400, description: \"Errore nell'aggiornamento\" })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Put('update-user/:codiceUtente')\r\n  async updateUtente(\r\n    @Req() request: Request,\r\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\r\n    @Body() user: UserDto,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\r\n      const isPrivilegedUpdate = hasPrivilegedUserChanges(user);\r\n\r\n      if (isPrivilegedUpdate) {\r\n        ensureSuperUser(\r\n          authenticatedUser,\r\n          'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.',\r\n        );\r\n      } else {\r\n        ensureSelfOrSuperUser(\r\n          authenticatedUser,\r\n          codiceUtente,\r\n          'Puoi modificare solo il tuo profilo.',\r\n        );\r\n      }\r\n\r\n      if (user.codiceUtente !== undefined && user.codiceUtente !== codiceUtente) {\r\n        throw new Error('Il codice utente nel body non coincide con quello del path.');\r\n      }\r\n\r\n      await this.userService.updateUser(codiceUtente, user, {\r\n        allowPrivilegedChanges: authenticatedUser.flagSuper,\r\n      });\r\n\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `L'utente ${codiceUtente} e' stato aggiornato con successo.`,\r\n      );\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Imposta il consenso GDPR per un utente',\r\n    operationId: 'setGdpr',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceUtente',\r\n    description: \"Codice identificativo dell'utente che accetta il GDPR\",\r\n    required: true,\r\n    example: '123',\r\n  })\r\n  @ApiResponse({\r\n    status: 200,\r\n    description: 'Consenso GDPR impostato con successo',\r\n  })\r\n  @ApiResponse({ status: 400, description: 'Errore nella richiesta' })\r\n  @ApiBearerAuth()\r\n  @UseGuards(JwtSimpleGuard)\r\n  @Patch('set-gdpr/:codiceUtente')\r\n  async setGdpr(\r\n    @Req() request: Request,\r\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      ensureSelfOrSuperUser(\r\n        getAuthenticatedAccessiUser(request),\r\n        codiceUtente,\r\n        'Puoi impostare il GDPR solo sul tuo utente.',\r\n      );\r\n\r\n      await this.userService.setGdpr(codiceUtente);\r\n      return RestUtilities.sendOKMessage(res, `L'utente ${codiceUtente} ha accettato il GDPR.`);\r\n    } catch (error) {\r\n      return this.sendControllerError(res, error);\r\n    }\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"UserController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/UserController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAmBwB;AAExB,6CASyB;AACzB,+BAA4B;AAC5B,yCAAsC;AACtC,+CAAgD;AAEhD,uDAAqE;AACrE,+DAA4D;AAC5D,yEAAsE;AACtE,+DAA4D;AAC5D,6DAA0D;AAC1D,yEAAyE;AACzE,6CAA0C;AAC1C,wEAAqE;AACrE,qEAAkE;AAClE,sDAAqD;AACrD,yEAGyC;AACzC,6DAKmC;AAQ5B,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAC6B,cAA+C,EACzD,WAAwB,EACxB,YAA0B;QAFC,mBAAc,GAAd,cAAc,CAAgB;QACzD,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;QAL5B,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAMvD,CAAC;IAEI,mBAAmB,CAAC,GAAa,EAAE,KAAc;QACvD,gFAAgF;QAChF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAYK,sBAAsB,CAAQ,GAAa,EAAkB,MAAc;;YAC/E,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC;KAAA;IAqDK,QAAQ,CACL,OAAgB,EAChB,GAAa,EACJ,KAAc,EAC+B,YAAqB,EAElF,sBAAgC,EAEhC,aAAuB,EAC+B,KAAc,EACb,MAAe;;YAEtE,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,wDAAwD,CACzD,CAAC;gBAEF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBACvD,MAAM,OAAO,GAAG;oBACd,sBAAsB,EAAE,sBAAsB,aAAtB,sBAAsB,cAAtB,sBAAsB,GAAI,IAAI;oBACtD,aAAa,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,IAAI;iBACrC,CAAC;gBAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBACzE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9C,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAuBK,UAAU,CACP,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,mDAAmD,CACpD,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAChD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAcK,kBAAkB,CACf,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,4DAA4D,CAC7D,CAAC;gBACF,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;gBACxD,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,qCAAqC,YAAY,GAAG,CAAC,CAAC;YAChG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAYK,wBAAwB,CAAQ,OAAgB,EAAS,GAAa;;YAC1E,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,4DAA4D,CAC7D,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oCAAoC,EAAE,CAAC;gBAC3E,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,4BAA4B,IAAI,8BAA8B,CAAC,CAAC;YAC1G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAyBK,qBAAqB,CAClB,OAAgB,EACf,IAA8B,EAC/B,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAClB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,uEAAuE,CACxE,CAAC;gBAEF,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;gBAClD,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,4BAAmB,CAAC,oCAAoC,CAAC,CAAC;gBACvF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;gBAC5E,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;gBAClE,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,wBAAwB,YAAY,0BAA0B,kBAAkB,GAAG,CACpF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA2BK,QAAQ,CACL,OAAgB,EACf,gBAAuC,EACxC,GAAa;;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAA,MAAA,IAAI,CAAC,cAAc,CAAC,kBAAkB,0CAAE,OAAO,MAAK,IAAI,EAAE,CAAC;oBAC7D,MAAM,IAAI,sBAAa,CACrB,mFAAmF,EACnF,mBAAU,CAAC,SAAS,CACrB,CAAC;gBACJ,CAAC;gBAED,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,cAAc,EACnB,UAAU,EACV,OAAO,EACP,CAAC,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,KAAK,CAAC,CAC1B,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBACrE,qBAAqB,EAAE,KAAK;iBAC7B,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,mBAAU,CAAC,OAAO,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GACV,KAAK,YAAY,sBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC;gBAC9E,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAQK,iBAAiB,CAAQ,OAAgB,EAAU,gBAAiC,EAAS,GAAa;;YAC9G,IAAI,CAAC;gBACH,IAAA,oCAAoB,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,EAAE,gDAAgD,CAAC,CAAC;gBAC7G,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAClG,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,mBAAU,CAAC,OAAO,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IA2BK,YAAY,CACT,OAAgB,EACc,YAAoB,EACjD,IAAa,EACd,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,2CAA2B,EAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,kBAAkB,GAAG,IAAA,wCAAwB,EAAC,IAAI,CAAC,CAAC;gBAE1D,IAAI,kBAAkB,EAAE,CAAC;oBACvB,IAAA,oCAAoB,EAClB,iBAAiB,EACjB,iFAAiF,CAClF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAA,qCAAqB,EACnB,iBAAiB,EACjB,YAAY,EACZ,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBAC1E,MAAM,IAAI,4BAAmB,CAAC,6DAA6D,CAAC,CAAC;gBAC/F,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE;oBACpD,sBAAsB,EAAE,iBAAiB,CAAC,SAAS,IAAI,iBAAiB,CAAC,SAAS;iBACnF,CAAC,CAAC;gBAEH,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,YAAY,YAAY,oCAAoC,CAC7D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;IAsBK,OAAO,CACJ,OAAgB,EACc,YAAoB,EAClD,GAAa;;YAEpB,IAAI,CAAC;gBACH,IAAA,qCAAqB,EACnB,IAAA,2CAA2B,EAAC,OAAO,CAAC,EACpC,YAAY,EACZ,6CAA6C,CAC9C,CAAC;gBAEF,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7C,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,YAAY,wBAAwB,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAnbY,wCAAc;AAwBnB;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,4BAA4B;KAC1C,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,YAAG,EAAC,uBAAuB,CAAC;IACC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;;;;4DAEjE;AAqDK;IAnDL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,0BAA0B;QACvC,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+DAA+D;QAC5E,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,WAAW,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3D,WAAA,IAAA,cAAK,EAAC,wBAAwB,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEtE,WAAA,IAAA,cAAK,EAAC,eAAe,EAAE,IAAI,sBAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAE7D,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACpD,WAAA,IAAA,cAAK,EAAC,QAAQ,EAAE,IAAI,qBAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;;;;8CAsBvD;AAuBK;IArBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,qEAAqE;KACnF,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,+BAA+B,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IAChG,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,eAAM,EAAC,2BAA2B,CAAC;IAEjC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;gDAaP;AAcK;IAZL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,oBAAoB;QACjC,WAAW,EAAE,yHAAyH;KACvI,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChI,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACzF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gCAAgC,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAChG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACpF,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,oCAAoC,CAAC;IAExC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;wDAYP;AAYK;IAVL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kEAAkE;QAC3E,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,+JAA+J;KAC7K,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,6BAAc,EAAE,CAAC;IACzF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gCAAgC,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAChG,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,6BAA6B,CAAC;IACJ,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;8DAW7D;AAyBK;IAvBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uBAAuB;KACrC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,gDAAwB,EAAE,CAAC;IAC3C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,WAAW,CAAC;IAEf,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADQ,gDAAwB;;2DAuBvC;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,8IAA8I;QAC3J,WAAW,EAAE,UAAU;KACxB,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,6CAAqB;QAC3B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,4BAAkB,EAAC;QAClB,WAAW,EACT,kGAAkG;QACpG,IAAI,EAAE,mCAAgB;KACvB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,WAAW;QAC9B,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,qBAAqB;QACxC,WAAW,EAAE,sEAAsE;QACnF,IAAI,EAAE,4BAAa;KACpB,CAAC;IACD,IAAA,aAAI,EAAC,UAAU,CAAC;IAEd,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;6CADoB,6CAAqB;;8CAgChD;AAQK;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,sGAAsG,EAAE,CAAC;IAC5N,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAAe,EAAE,CAAC;IAClC,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,mCAAgB,EAAE,CAAC;IAC9C,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,aAAI,EAAC,qBAAqB,CAAC;IACH,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,aAAI,GAAE,CAAA;IAAqC,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAAvB,iCAAe;;uDASzF;AA2BK;IAzBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,cAAc;KAC5B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,iBAAO,EAAC;QACP,IAAI,EAAE,iBAAO;QACb,WAAW,EAAE,6BAA6B;KAC3C,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,mBAAU,CAAC,EAAE;QACrB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC3F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAE9B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;qDADQ,iBAAO;;kDAmCtB;AAsBK;IApBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,SAAS;KACvB,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,6BAAc;KACrB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,4BAAa,EAAE,CAAC;IAC5F,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,6BAAc,CAAC;IACzB,IAAA,cAAK,EAAC,wBAAwB,CAAC;IAE7B,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,cAAc,EAAE,qBAAY,CAAC,CAAA;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAcP;yBAlbU,cAAc;IAN1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,cAAc,CAAC;IAC3B;;;OAGG;;IAKE,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACI,yBAAW;QACV,2BAAY;GANlC,cAAc,CAmb1B","sourcesContent":["import {\n  BadRequestException,\n  Body,\n  Controller,\n  Delete,\n  Get,\n  HttpException,\n  HttpStatus,\n  Param,\n  ParseBoolPipe,\n  ParseIntPipe,\n  Patch,\n  Post,\n  Put,\n  Query,\n  Inject,\n  Req,\n  Res,\n  UseGuards,\n} from '@nestjs/common';\nimport { Request, Response } from 'express';\nimport {\n  ApiBearerAuth,\n  ApiBody,\n  ApiCreatedResponse,\n  ApiOperation,\n  ApiParam,\n  ApiQuery,\n  ApiResponse,\n  ApiTags,\n} from '@nestjs/swagger';\nimport { join } from 'path';\nimport { Logger } from '../../Logger';\nimport { RestUtilities } from '../../Utilities';\nimport type { AccessiOptions } from '../AccessiModule';\nimport { ActionResponse, ErrorResponse } from '../Dtos/BaseResponse';\nimport { GetUsersResponse } from '../Dtos/GetUsersResponse';\nimport { PublicRegisterRequest } from '../Dtos/PublicRegisterRequest';\nimport { RegisterResponse } from '../Dtos/RegisterResponse';\nimport { RegisterRequest } from '../Dtos/RegisterRequest';\nimport { SetStatoRegistrazioneDto } from '../Dtos/SetStatoRegistrazione';\nimport { UserDto } from '../Dtos/UserDto';\nimport { EmailService } from '../Services/EmailService/EmailService';\nimport { UserService } from '../Services/UserService/UserService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\nimport {\n  checkPublicAuthRateLimit,\n  sendPublicAuthRateLimitExceeded,\n} from '../security/publicAuthRateLimit';\nimport {\n  ensureSelfOrSuperUser,\n  ensureUserManagement,\n  getAuthenticatedAccessiUser,\n  hasPrivilegedUserChanges,\n} from '../security/accessControl';\n\n@ApiTags('User')\n@Controller('accessi/user')\n/**\n * Gestione utenti: la registrazione pubblica e opt-in, mentre creazione, stato e profili privilegiati\n * richiedono un superutente Accessi. Le API restituiscono sempre il wrapper `BaseResponse` storico.\n */\nexport class UserController {\n  private readonly logger = new Logger(UserController.name);\n\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly accessiOptions: AccessiOptions,\n    private readonly userService: UserService,\n    private readonly emailService: EmailService,\n  ) {}\n\n  private sendControllerError(res: Response, error: unknown) {\n    // Lo status viene derivato centralmente da RestUtilities (HttpException o 500).\n    return RestUtilities.sendErrorMessage(res, error, UserController.name);\n  }\n\n  @ApiOperation({\n    summary: 'Serve la pagina di reset password',\n    operationId: 'serveResetPasswordPageUser',\n  })\n  @ApiParam({\n    name: 'token',\n    description: 'Token per il reset della password',\n    required: true,\n  })\n  @Get('reset-password/:token')\n  async serveResetPasswordPage(@Res() res: Response, @Param('token') _token: string) {\n    return res.sendFile(join(__dirname, '..', 'Views', 'reset-password.html'));\n  }\n\n  @ApiOperation({\n    summary: 'Recupera la lista degli utenti',\n    operationId: 'getUsers',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Lista utenti recuperata con successo',\n    type: GetUsersResponse,\n  })\n  @ApiResponse({ status: 401, description: 'Credenziali non valide', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiQuery({\n    name: 'email',\n    required: false,\n    description: \"Email dell'utente da cercare\",\n    type: String,\n  })\n  @ApiQuery({\n    name: 'codiceUtente',\n    required: false,\n    description: \"Codice dell'utente da cercare\",\n    type: Number,\n  })\n  @ApiQuery({\n    name: 'includeExtensionFields',\n    required: false,\n    description: 'Includi extension fields',\n    type: Boolean,\n  })\n  @ApiQuery({\n    name: 'includeGrants',\n    required: false,\n    description: 'Includi permessi',\n    type: Boolean,\n  })\n  @ApiQuery({\n    name: 'limit',\n    required: false,\n    description: 'Numero massimo di utenti restituiti (1-1000). Omesso = tutti.',\n    type: Number,\n  })\n  @ApiQuery({\n    name: 'offset',\n    required: false,\n    description: 'Numero di utenti da saltare (paginazione).',\n    type: Number,\n  })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Get('get-users')\n  async getUsers(\n    @Req() request: Request,\n    @Res() res: Response,\n    @Query('email') email?: string,\n    @Query('codiceUtente', new ParseIntPipe({ optional: true })) codiceUtente?: number,\n    @Query('includeExtensionFields', new ParseBoolPipe({ optional: true }))\n    includeExtensionFields?: boolean,\n    @Query('includeGrants', new ParseBoolPipe({ optional: true }))\n    includeGrants?: boolean,\n    @Query('limit', new ParseIntPipe({ optional: true })) limit?: number,\n    @Query('offset', new ParseIntPipe({ optional: true })) offset?: number,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono consultare gli utenti.',\n      );\n\n      const filters = { email, codiceUtente, limit, offset };\n      const options = {\n        includeExtensionFields: includeExtensionFields ?? true,\n        includeGrants: includeGrants ?? true,\n      };\n\n      const users = await this.userService.getUsers(filters, options);\n      const total = await this.userService.countUsers({ email, codiceUtente });\n      res.setHeader('X-Total-Count', String(total));\n      return RestUtilities.sendBaseResponse(res, users);\n    } catch (error) {\n      this.logger.error('Errore durante il recupero degli utenti: ', error);\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Elimina un utente',\n    operationId: 'deleteUser',\n    description: 'Imposta lo stato di un utente a eliminato senza rimuovere i record.',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da eliminare\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({ status: 200, description: 'Utente eliminato con successo', type: ActionResponse })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nei parametri della richiesta',\n    type: ErrorResponse,\n  })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Delete('delete-user/:codiceUtente')\n  async deleteUser(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono eliminare utenti.',\n      );\n\n      await this.userService.deleteUser(codiceUtente);\n      return RestUtilities.sendOKMessage(res, \"L'utente e' stato eliminato con successo.\");\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Forza l invio dell email di reset password a un utente',\n    operationId: 'forcePasswordReset',\n    description: 'Riservato al superutente. Richiede un servizio email configurato; altrimenti risponde con ACCESSI_EMAIL_NOT_CONFIGURED.',\n  })\n  @ApiParam({ name: 'codiceUtente', description: 'Codice identificativo dell utente', required: true, example: 123, type: Number })\n  @ApiResponse({ status: 200, description: 'Email di reset inviata', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Servizio email non configurato', type: ErrorResponse })\n  @ApiResponse({ status: 404, description: 'Utente non trovato', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('force-password-reset/:codiceUtente')\n  async forcePasswordReset(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono forzare il reset password.',\n      );\n      await this.userService.forcePasswordReset(codiceUtente);\n      return RestUtilities.sendOKMessage(res, `Email di reset inviata all utente ${codiceUtente}.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Forza il reset password per tutti gli utenti con password legacy',\n    operationId: 'forcePasswordResetLegacy',\n    description: 'Riservato al superutente. Invia l email di reset a tutti gli utenti la cui password non e ancora nel formato moderno. Richiede un servizio email configurato.',\n  })\n  @ApiResponse({ status: 200, description: 'Email di reset inviate', type: ActionResponse })\n  @ApiResponse({ status: 400, description: 'Servizio email non configurato', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('force-password-reset-legacy')\n  async forcePasswordResetLegacy(@Req() request: Request, @Res() res: Response) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono forzare il reset password.',\n      );\n      const sent = await this.userService.forcePasswordResetForLegacyPasswords();\n      return RestUtilities.sendOKMessage(res, `Email di reset inviata a ${sent} utenti con password legacy.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta lo stato di registrazione di un utente',\n    operationId: 'setStatoRegistrazione',\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Stato registrazione aggiornato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({\n    status: 400,\n    description: 'Errore nei parametri della richiesta',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: 500,\n    description: 'Errore interno del server',\n    type: ErrorResponse,\n  })\n  @ApiBody({ type: SetStatoRegistrazioneDto })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('set-stato')\n  async setStatoRegistrazione(\n    @Req() request: Request,\n    @Body() body: SetStatoRegistrazioneDto,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureUserManagement(\n        getAuthenticatedAccessiUser(request),\n        'Solo gli amministratori possono modificare lo stato di registrazione.',\n      );\n\n      const { codiceUtente, statoRegistrazione } = body;\n      if (!codiceUtente) throw new BadRequestException('Il codice utente e\\' obbligatorio.');\n      if (statoRegistrazione === undefined) {\n        throw new BadRequestException('Lo stato registrazione e\\' obbligatorio.');\n      }\n\n      await this.userService.setStato(codiceUtente, statoRegistrazione);\n      return RestUtilities.sendOKMessage(\n        res,\n        `Lo stato dell'utente ${codiceUtente} e' stato aggiornato a ${statoRegistrazione}.`,\n      );\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Registra un nuovo utente',\n    description: 'Disponibile soltanto quando publicRegistration.enabled e true. Per utenti SSO usare il provisioning master nel tag Federated authentication.',\n    operationId: 'register',\n  })\n  @ApiBody({\n    type: PublicRegisterRequest,\n    description: \"Dati necessari per la registrazione dell'utente\",\n  })\n  @ApiCreatedResponse({\n    description:\n      'Utente registrato con successo. Restituisce il codice utente e invia una mail di reset password.',\n    type: RegisterResponse,\n  })\n  @ApiResponse({\n    status: HttpStatus.BAD_REQUEST,\n    description: 'Errore nella registrazione.',\n    type: ErrorResponse,\n  })\n  @ApiResponse({\n    status: HttpStatus.INTERNAL_SERVER_ERROR,\n    description: 'Errore interno del server durante la registrazione o l\\'invio email.',\n    type: ErrorResponse,\n  })\n  @Post('register')\n  async register(\n    @Req() request: Request,\n    @Body() registrationData: PublicRegisterRequest,\n    @Res() res: Response,\n  ) {\n    try {\n      if (this.accessiOptions.publicRegistration?.enabled !== true) {\n        throw new HttpException(\n          'La registrazione pubblica e disabilitata. Un amministratore deve creare l utente.',\n          HttpStatus.FORBIDDEN,\n        );\n      }\n\n      const rateLimitDecision = checkPublicAuthRateLimit(\n        this.accessiOptions,\n        'register',\n        request,\n        [registrationData?.email],\n      );\n      if (!rateLimitDecision.allowed) {\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\n      }\n\n      const codiceUtente = await this.userService.register(registrationData, {\n        allowPrivilegedFields: false,\n      });\n\n      await this.emailService.sendPasswordResetEmail(registrationData.email);\n      return RestUtilities.sendBaseResponse(res, codiceUtente, HttpStatus.CREATED);\n    } catch (error) {\n      const status =\n        error instanceof HttpException ? error.getStatus() : HttpStatus.BAD_REQUEST;\n      return RestUtilities.sendErrorMessage(res, error, UserController.name, status);\n    }\n  }\n\n  @ApiOperation({ summary: 'Crea un utente locale da amministrazione', operationId: 'createManagedUser', description: 'Riservato a superutente. Crea un utente in attesa di impostazione password e invia la mail di reset.' })\n  @ApiBody({ type: RegisterRequest })\n  @ApiCreatedResponse({ type: RegisterResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Post('create-managed-user')\n  async createManagedUser(@Req() request: Request, @Body() registrationData: RegisterRequest, @Res() res: Response) {\n    try {\n      ensureUserManagement(getAuthenticatedAccessiUser(request), 'Solo gli amministratori possono creare utenti.');\n      const codiceUtente = await this.userService.register(registrationData, { allowPrivilegedFields: true });\n      await this.emailService.sendPasswordResetEmail(registrationData.email, registrationData.htmlMail);\n      return RestUtilities.sendBaseResponse(res, codiceUtente, HttpStatus.CREATED);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Aggiorna un utente esistente',\n    operationId: 'updateUtente',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente da aggiornare\",\n    required: true,\n    example: 123,\n  })\n  @ApiBody({\n    type: UserDto,\n    description: \"Dati aggiornati dell'utente\",\n  })\n  @ApiResponse({\n    status: HttpStatus.OK,\n    description: 'Utente aggiornato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({ status: 400, description: \"Errore nell'aggiornamento\", type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiResponse({ status: 500, description: 'Errore interno del server', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Put('update-user/:codiceUtente')\n  async updateUtente(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Body() user: UserDto,\n    @Res() res: Response,\n  ) {\n    try {\n      const authenticatedUser = getAuthenticatedAccessiUser(request);\n      const isPrivilegedUpdate = hasPrivilegedUserChanges(user);\n\n      if (isPrivilegedUpdate) {\n        ensureUserManagement(\n          authenticatedUser,\n          'Solo gli amministratori possono modificare ruoli, permessi o flag privilegiati.',\n        );\n      } else {\n        ensureSelfOrSuperUser(\n          authenticatedUser,\n          codiceUtente,\n          'Puoi modificare solo il tuo profilo.',\n        );\n      }\n\n      if (user.codiceUtente !== undefined && user.codiceUtente !== codiceUtente) {\n        throw new BadRequestException('Il codice utente nel body non coincide con quello del path.');\n      }\n\n      await this.userService.updateUser(codiceUtente, user, {\n        allowPrivilegedChanges: authenticatedUser.flagSuper || authenticatedUser.flagAdmin,\n      });\n\n      return RestUtilities.sendOKMessage(\n        res,\n        `L'utente ${codiceUtente} e' stato aggiornato con successo.`,\n      );\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Imposta il consenso GDPR per un utente',\n    operationId: 'setGdpr',\n  })\n  @ApiParam({\n    name: 'codiceUtente',\n    description: \"Codice identificativo dell'utente che accetta il GDPR\",\n    required: true,\n    example: 123,\n  })\n  @ApiResponse({\n    status: 200,\n    description: 'Consenso GDPR impostato con successo',\n    type: ActionResponse,\n  })\n  @ApiResponse({ status: 400, description: 'Errore nella richiesta', type: ErrorResponse })\n  @ApiResponse({ status: 403, description: 'Operazione non autorizzata', type: ErrorResponse })\n  @ApiBearerAuth()\n  @UseGuards(JwtSimpleGuard)\n  @Patch('set-gdpr/:codiceUtente')\n  async setGdpr(\n    @Req() request: Request,\n    @Param('codiceUtente', ParseIntPipe) codiceUtente: number,\n    @Res() res: Response,\n  ) {\n    try {\n      ensureSelfOrSuperUser(\n        getAuthenticatedAccessiUser(request),\n        codiceUtente,\n        'Puoi impostare il GDPR solo sul tuo utente.',\n      );\n\n      await this.userService.setGdpr(codiceUtente);\n      return RestUtilities.sendOKMessage(res, `L'utente ${codiceUtente} ha accettato il GDPR.`);\n    } catch (error) {\n      return this.sendControllerError(res, error);\n    }\n  }\n}\n"]}

package/dist/accessi-module/Dtos/Abilitazione.js.map

@@ -1 +1 @@
-{"version":3,"file":"Abilitazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/Abilitazione.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAsD;AACtD,qDAAuE;AAEvE,MAAa,YAAY;CA2BxB;AA3BD,oCA2BC;AAlBC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,UAAU;KACpB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAC3D,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;kDAC5D;AASrB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,UAAU;KACpB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;gDAC5D;AAQnB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,mCAAgB;QACtB,OAAO,EAAE,mCAAgB,CAAC,OAAO;KAClC,CAAC;IACD,IAAA,wBAAM,EAAC,mCAAgB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;sDAC5C","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\r\nimport { TipoAbilitazione } from \"./TipoAbilitazione\";\r\nimport { IsString, IsNotEmpty, Length, IsEnum } from \"class-validator\";\r\n\r\nexport class Abilitazione {\r\n\r\n  @ApiProperty({\r\n    description: 'Codice univoco dell\\'utente',\r\n    example: 'USR12345'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"Il codice utente è obbligatorio.\" })\r\n  @Length(5, 20, { message: \"Il codice utente deve essere tra 5 e 20 caratteri.\" })\r\n  codiceUtente: number;\r\n\r\n  @ApiProperty({\r\n    description: 'Codice univoco del menu',\r\n    example: 'MENU_001'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"Il codice menu è obbligatorio.\" })\r\n  @Length(3, 20, { message: \"Il codice menu deve essere tra 3 e 20 caratteri.\" })\r\n  codiceMenu: string;\r\n\r\n  @ApiProperty({\r\n    description: 'Tipo di abilitazione',\r\n    enum: TipoAbilitazione,\r\n    example: TipoAbilitazione.LETTURA\r\n  })\r\n  @IsEnum(TipoAbilitazione, { message: \"Il tipo di abilitazione non è valido.\" })\r\n  tipoAbilitazione: TipoAbilitazione;\r\n}"]}
+{"version":3,"file":"Abilitazione.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/Abilitazione.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAsD;AACtD,qDAAuE;AAEvE,MAAa,YAAY;CA2BxB;AA3BD,oCA2BC;AAlBC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,UAAU;KACpB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAC3D,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;kDAC3D;AAStB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,UAAU;KACpB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;gDAC3D;AAQpB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,mCAAgB;QACtB,OAAO,EAAE,mCAAgB,CAAC,OAAO;KAClC,CAAC;IACD,IAAA,wBAAM,EAAC,mCAAgB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;sDAC3C","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\nimport { TipoAbilitazione } from \"./TipoAbilitazione\";\nimport { IsString, IsNotEmpty, Length, IsEnum } from \"class-validator\";\n\nexport class Abilitazione {\n\n  @ApiProperty({\n    description: 'Codice univoco dell\\'utente',\n    example: 'USR12345'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"Il codice utente è obbligatorio.\" })\n  @Length(5, 20, { message: \"Il codice utente deve essere tra 5 e 20 caratteri.\" })\n  codiceUtente!: number;\n\n  @ApiProperty({\n    description: 'Codice univoco del menu',\n    example: 'MENU_001'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"Il codice menu è obbligatorio.\" })\n  @Length(3, 20, { message: \"Il codice menu deve essere tra 3 e 20 caratteri.\" })\n  codiceMenu!: string;\n\n  @ApiProperty({\n    description: 'Tipo di abilitazione',\n    enum: TipoAbilitazione,\n    example: TipoAbilitazione.LETTURA\n  })\n  @IsEnum(TipoAbilitazione, { message: \"Il tipo di abilitazione non è valido.\" })\n  tipoAbilitazione!: TipoAbilitazione;\n}"]}

package/dist/accessi-module/Dtos/AbilitazioneMenu.js

@@ -65,37 +65,45 @@ __decorate([
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Nome dell\'icona associata al menu',
-        example: 'people'
+        type: String,
+        example: 'people',
+        nullable: true
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], AbilitazioneMenu.prototype, "icona", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Tipo di menu',
-        example: 'M'
+        type: String,
+        example: 'M',
+        nullable: true
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], AbilitazioneMenu.prototype, "tipo", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Percorso della pagina associata al menu',
-        example: '/lista-clienti'
+        type: String,
+        example: '/lista-clienti',
+        nullable: true
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], AbilitazioneMenu.prototype, "pagina", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Nota informativa associata al menu',
-        example: 'Visibile solo dopo abilitazione'
+        type: String,
+        example: 'Visibile solo dopo abilitazione',
+        nullable: true
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
+    __metadata("design:type", Object)
 ], AbilitazioneMenu.prototype, "note", void 0);
 //# sourceMappingURL=AbilitazioneMenu.js.map

package/dist/accessi-module/Dtos/AbilitazioneMenu.js.map

@@ -1 +1 @@
-{"version":3,"file":"AbilitazioneMenu.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/AbilitazioneMenu.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAsD;AACtD,qDAAmF;AAEnF,MAAa,gBAAgB;CA0E5B;AA1ED,4CA0EC;AAjEC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;oDAC5D;AAQnB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,mCAAgB;QACtB,OAAO,EAAE,mCAAgB,CAAC,SAAS;KACpC,CAAC;IACD,IAAA,wBAAM,EAAC,mCAAgB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;0DAC3C;AAQpC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,eAAe;KACzB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;yDAC1C;AAQzB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;2DAC1C;AAQ3B;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;sDACtC;AAQtB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,QAAQ;KAClB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+CACS;AAQtB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACQ;AAQrB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,gBAAgB;KAC1B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACU;AAQvB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,iCAAiC;KAC3C,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACQ","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from \"@nestjs/swagger\";\r\nimport { TipoAbilitazione } from \"./TipoAbilitazione\";\r\nimport { IsEnum, IsNotEmpty, IsString, Length, IsOptional } from \"class-validator\";\r\n\r\nexport class AbilitazioneMenu {\r\n  \r\n  @ApiProperty({\r\n    description: 'Codice univoco del menu',\r\n    example: 'MNUELENCOCLIENTI'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"Il codice menu è obbligatorio.\" })\r\n  @Length(3, 20, { message: \"Il codice menu deve essere tra 3 e 20 caratteri.\" })\r\n  codiceMenu: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Tipo di abilitazione',\r\n    enum: TipoAbilitazione,\r\n    example: TipoAbilitazione.SCRITTURA\r\n  })\r\n  @IsEnum(TipoAbilitazione, { message: \"Il tipo di abilitazione non è valido.\" })\r\n  tipoAbilitazione?: TipoAbilitazione;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Descrizione del menu',\r\n    example: 'Lista Clienti'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"La descrizione del menu è obbligatoria.\" })\r\n  descrizioneMenu?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Descrizione del gruppo a cui appartiene il menu',\r\n    example: 'Amministrazione'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"La descrizione del gruppo è obbligatoria.\" })\r\n  descrizioneGruppo?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Codice univoco del gruppo a cui appartiene il menu',\r\n    example: 'C'\r\n  })\r\n  @IsString()\r\n  @IsNotEmpty({ message: \"Il codice gruppo è obbligatorio.\" })\r\n  codiceGruppo?: string;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Nome dell\\'icona associata al menu',\r\n    example: 'people'\r\n  })\r\n  @IsString()\r\n  @IsOptional()\r\n  icona?: string | null;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Tipo di menu',\r\n    example: 'M'\r\n  })\r\n  @IsString()\r\n  @IsOptional()\r\n  tipo?: string | null;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Percorso della pagina associata al menu',\r\n    example: '/lista-clienti'\r\n  })\r\n  @IsString()\r\n  @IsOptional()\r\n  pagina?: string | null;\r\n\r\n  @ApiPropertyOptional({\r\n    description: 'Nota informativa associata al menu',\r\n    example: 'Visibile solo dopo abilitazione'\r\n  })\r\n  @IsString()\r\n  @IsOptional()\r\n  note?: string | null;\r\n}\r\n"]}
+{"version":3,"file":"AbilitazioneMenu.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/AbilitazioneMenu.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAsD;AACtD,qDAAmF;AAEnF,MAAa,gBAAgB;CAkF5B;AAlFD,4CAkFC;AAzEC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;oDAC3D;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,mCAAgB;QACtB,OAAO,EAAE,mCAAgB,CAAC,SAAS;KACpC,CAAC;IACD,IAAA,wBAAM,EAAC,mCAAgB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;0DAC3C;AAQpC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,eAAe;KACzB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;yDAC1C;AAQzB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;2DAC1C;AAQ3B;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,GAAG;KACb,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;sDACtC;AAUtB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+CACS;AAUtB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,cAAc;QAC3B,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACQ;AAUrB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACU;AAUvB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACQ","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from \"@nestjs/swagger\";\nimport { TipoAbilitazione } from \"./TipoAbilitazione\";\nimport { IsEnum, IsNotEmpty, IsString, Length, IsOptional } from \"class-validator\";\n\nexport class AbilitazioneMenu {\n  \n  @ApiProperty({\n    description: 'Codice univoco del menu',\n    example: 'MNUELENCOCLIENTI'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"Il codice menu è obbligatorio.\" })\n  @Length(3, 20, { message: \"Il codice menu deve essere tra 3 e 20 caratteri.\" })\n  codiceMenu!: string;\n\n  @ApiPropertyOptional({\n    description: 'Tipo di abilitazione',\n    enum: TipoAbilitazione,\n    example: TipoAbilitazione.SCRITTURA\n  })\n  @IsEnum(TipoAbilitazione, { message: \"Il tipo di abilitazione non è valido.\" })\n  tipoAbilitazione?: TipoAbilitazione;\n\n  @ApiPropertyOptional({\n    description: 'Descrizione del menu',\n    example: 'Lista Clienti'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"La descrizione del menu è obbligatoria.\" })\n  descrizioneMenu?: string;\n\n  @ApiPropertyOptional({\n    description: 'Descrizione del gruppo a cui appartiene il menu',\n    example: 'Amministrazione'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"La descrizione del gruppo è obbligatoria.\" })\n  descrizioneGruppo?: string;\n\n  @ApiPropertyOptional({\n    description: 'Codice univoco del gruppo a cui appartiene il menu',\n    example: 'C'\n  })\n  @IsString()\n  @IsNotEmpty({ message: \"Il codice gruppo è obbligatorio.\" })\n  codiceGruppo?: string;\n\n  @ApiPropertyOptional({\n    description: 'Nome dell\\'icona associata al menu',\n    type: String,\n    example: 'people',\n    nullable: true\n  })\n  @IsString()\n  @IsOptional()\n  icona?: string | null;\n\n  @ApiPropertyOptional({\n    description: 'Tipo di menu',\n    type: String,\n    example: 'M',\n    nullable: true\n  })\n  @IsString()\n  @IsOptional()\n  tipo?: string | null;\n\n  @ApiPropertyOptional({\n    description: 'Percorso della pagina associata al menu',\n    type: String,\n    example: '/lista-clienti',\n    nullable: true\n  })\n  @IsString()\n  @IsOptional()\n  pagina?: string | null;\n\n  @ApiPropertyOptional({\n    description: 'Nota informativa associata al menu',\n    type: String,\n    example: 'Visibile solo dopo abilitazione',\n    nullable: true\n  })\n  @IsString()\n  @IsOptional()\n  note?: string | null;\n}\n"]}