emilsoftware-utilities 2.0.0-dev.8 → 2.0.0-dev.80

package/dist/initEmilsoftwareModule.js

@@ -16,17 +16,27 @@ exports.initEmilsoftwareModule = initEmilsoftwareModule;
 const express_1 = __importDefault(require("express"));
 const core_1 = require("@nestjs/core");
 const platform_express_1 = require("@nestjs/platform-express");
-const SwaggerConfig_1 = require("./swagger/SwaggerConfig");
+const OpenApiConfig_1 = require("./openapi/OpenApiConfig");
 const Logger_1 = require("./Logger");
 const EmilsoftwareModule_1 = require("./EmilsoftwareModule");
 const authenticateGen_1 = require("./accessi-module/middleware/authenticateGen");
+const accessiRuntime_1 = require("./accessi-module/accessiRuntime");
+const startupLog_1 = require("./accessi-module/startupLog");
+const accessiValidation_1 = require("./accessi-module/security/accessiValidation");
+const AccessiHttpExceptionFilter_1 = require("./accessi-module/security/AccessiHttpExceptionFilter");
+const jwks_1 = require("./accessi-module/security/jwks");
+const edgeRateLimit_1 = require("./accessi-module/security/edgeRateLimit");
+const securityHeaders_1 = require("./accessi-module/security/securityHeaders");
+const authCookies_1 = require("./accessi-module/security/authCookies");
 /**
  * Initializes the unified module that combines Accessi and Allegati functionality
  * @param app Express application instance
  * @param options Configuration options for both modules
+ * @returns Il sotto-app Nest e il documento OpenAPI generato.
  */
 function initEmilsoftwareModule(app, options) {
     return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l;
         const logger = new Logger_1.Logger(initEmilsoftwareModule.name);
         if (options === null || options === void 0 ? void 0 : options.accessiOptions) {
             (0, authenticateGen_1.beginAccessiAuthInitialization)();
@@ -34,35 +44,77 @@ function initEmilsoftwareModule(app, options) {
         try {
             // Isolate Nest on a dedicated Express instance and dispatch only module routes.
             // This keeps pre-existing routes/middlewares on the host app untouched.
+            // Prefisso OpenAPI configurabile (default `accessi/openapi`), cosi' piu'
+            // documentazioni possono convivere (backend su `/openapi`, moduli sotto
+            // `/<modulo>/openapi`).
+            // Precedenza: EmilsoftwareOptions.openapi > AccessiOptions.openapi > default.
+            const resolvedOpenApi = (0, OpenApiConfig_1.resolveAccessiOpenApiOptions)((_a = options === null || options === void 0 ? void 0 : options.accessiOptions) === null || _a === void 0 ? void 0 : _a.openapi, options === null || options === void 0 ? void 0 : options.openapi);
             const nestHostApp = (0, express_1.default)();
+            if (((_c = (_b = options === null || options === void 0 ? void 0 : options.accessiOptions) === null || _b === void 0 ? void 0 : _b.http) === null || _c === void 0 ? void 0 : _c.trustProxy) !== undefined) {
+                app.set('trust proxy', options.accessiOptions.http.trustProxy);
+                nestHostApp.set('trust proxy', options.accessiOptions.http.trustProxy);
+            }
+            const jwksPath = (options === null || options === void 0 ? void 0 : options.accessiOptions)
+                ? (0, jwks_1.getAccessiJwksPath)(options.accessiOptions)
+                : undefined;
             const isNestRoute = (path) => path === "/api" ||
                 path.startsWith("/api/") ||
-                path === "/swagger" ||
-                path.startsWith("/swagger/") ||
-                path === "/swagger-json";
+                (0, OpenApiConfig_1.isOpenApiRequestPath)(path, resolvedOpenApi) ||
+                (jwksPath !== undefined && path === jwksPath);
+            const edgeRateLimit = ((_d = options === null || options === void 0 ? void 0 : options.accessiOptions) === null || _d === void 0 ? void 0 : _d.edgeRateLimit)
+                ? (0, edgeRateLimit_1.createAccessiEdgeRateLimitMiddleware)(Object.assign(Object.assign({}, options.accessiOptions.edgeRateLimit), { match: (_e = options.accessiOptions.edgeRateLimit.match) !== null && _e !== void 0 ? _e : ((path) => isNestRoute(path)) }))
+                : undefined;
+            if (edgeRateLimit) {
+                app.use(edgeRateLimit);
+            }
+            if (options === null || options === void 0 ? void 0 : options.accessiOptions) {
+                const authCookie = (0, authCookies_1.createAccessiAuthCookieMiddleware)(options.accessiOptions, isNestRoute);
+                if (authCookie) {
+                    app.use(authCookie);
+                }
+            }
+            if ((options === null || options === void 0 ? void 0 : options.accessiOptions) && ((_f = options.accessiOptions.http) === null || _f === void 0 ? void 0 : _f.securityHeaders) !== false) {
+                const securityHeaders = (0, securityHeaders_1.createAccessiSecurityHeadersMiddleware)((_g = options.accessiOptions.http) === null || _g === void 0 ? void 0 : _g.securityHeaders, isNestRoute, { isOpenApiUi: (path) => (0, OpenApiConfig_1.isOpenApiRequestPath)(path, resolvedOpenApi) });
+                if (securityHeaders) {
+                    app.use(securityHeaders);
+                }
+            }
             app.use((req, res, next) => {
                 if (!isNestRoute(req.path)) {
                     return next();
                 }
                 return nestHostApp(req, res, next);
             });
+            if (options === null || options === void 0 ? void 0 : options.accessiOptions) {
+                (0, jwks_1.setupAccessiJwks)(app, options.accessiOptions);
+                if (jwksPath) {
+                    logger.info(`JWKS accessi disponibile su: ${jwksPath}`);
+                }
+            }
             const nestExpressInstance = new platform_express_1.ExpressAdapter(nestHostApp);
-            const nestApp = yield core_1.NestFactory.create(EmilsoftwareModule_1.EmilsoftwareModule.forRoot(options), nestExpressInstance, {
-                bufferLogs: true
-            });
-            nestApp.enableCors();
+            const nestApp = yield core_1.NestFactory.create(EmilsoftwareModule_1.EmilsoftwareModule.forRoot(options), nestExpressInstance, Object.assign({ bufferLogs: (options === null || options === void 0 ? void 0 : options.bufferLogs) !== false }, ((options === null || options === void 0 ? void 0 : options.logger) ? { logger: options.logger } : {})));
+            if (((_j = (_h = options === null || options === void 0 ? void 0 : options.accessiOptions) === null || _h === void 0 ? void 0 : _h.http) === null || _j === void 0 ? void 0 : _j.cors) !== false) {
+                nestApp.enableCors((_l = (_k = options === null || options === void 0 ? void 0 : options.accessiOptions) === null || _k === void 0 ? void 0 : _k.http) === null || _l === void 0 ? void 0 : _l.cors);
+            }
+            if (options === null || options === void 0 ? void 0 : options.accessiOptions) {
+                // Keep the Accessi API contract identical for standalone and unified bootstraps.
+                nestApp.useGlobalPipes((0, accessiValidation_1.createAccessiValidationPipe)());
+                nestApp.useGlobalFilters(new AccessiHttpExceptionFilter_1.AccessiHttpExceptionFilter());
+            }
             nestApp.setGlobalPrefix('api', {
-                exclude: ['/swagger', '/swagger/(.*)']
+                exclude: (0, OpenApiConfig_1.buildOpenApiExcludePaths)(resolvedOpenApi)
             });
-            // Setup unified Swagger documentation for all modules
-            (0, SwaggerConfig_1.setupSwagger)(nestApp);
+            // Documentazione OpenAPI del modulo unificato (Accessi + Allegati).
+            const document = (0, OpenApiConfig_1.setupOpenApi)(nestApp, resolvedOpenApi);
             yield nestApp.init();
             if (options === null || options === void 0 ? void 0 : options.accessiOptions) {
-                const authService = nestApp.get(authenticateGen_1.AuthenticateGenService);
-                app.locals.accessiAuthService = authService;
-                (0, authenticateGen_1.setAccessiAuthService)(authService);
+                const accessiServices = (0, accessiRuntime_1.registerAccessiModuleServices)(app, nestApp);
+                app.locals.accessiAuthService = accessiServices.authenticateGenService;
+                (0, authenticateGen_1.setAccessiAuthService)(accessiServices.authenticateGenService);
+                (0, startupLog_1.logAccessiStartup)(options.accessiOptions, resolvedOpenApi);
             }
             logger.info("Emilsoftware module initialized successfully");
+            return { nestApp, document };
         }
         catch (error) {
             if (options === null || options === void 0 ? void 0 : options.accessiOptions) {

package/dist/initEmilsoftwareModule.js.map

@@ -1 +1 @@
-{"version":3,"file":"initEmilsoftwareModule.js","sourceRoot":"","sources":["../src/initEmilsoftwareModule.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAkBA,wDAsDC;AAxED,sDAAwD;AACxD,uCAA2C;AAC3C,+DAA0D;AAC1D,2DAAuD;AACvD,qCAAkC;AAClC,6DAA+E;AAC/E,iFAKqD;AAErD;;;;GAIG;AACH,SAAsB,sBAAsB,CAAC,GAAgB,EAAE,OAA4B;;QACvF,MAAM,MAAM,GAAW,IAAI,eAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;YAC1B,IAAA,gDAA8B,GAAE,CAAC;QACrC,CAAC;QAED,IAAI,CAAC;YACD,gFAAgF;YAChF,wEAAwE;YACxE,MAAM,WAAW,GAAG,IAAA,iBAAO,GAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,IAAI,KAAK,MAAM;gBACf,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBACxB,IAAI,KAAK,UAAU;gBACnB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAC5B,IAAI,KAAK,eAAe,CAAC;YAE7B,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzB,OAAO,IAAI,EAAE,CAAC;gBAClB,CAAC;gBACD,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YAEH,MAAM,mBAAmB,GAAG,IAAI,iCAAc,CAAC,WAAW,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,kBAAW,CAAC,MAAM,CAAC,uCAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,mBAAmB,EAAE;gBAC/F,UAAU,EAAE,IAAI;aACnB,CAAC,CAAC;YAEH,OAAO,CAAC,UAAU,EAAE,CAAC;YAErB,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE;gBAC3B,OAAO,EAAE,CAAC,UAAU,EAAE,eAAe,CAAC;aACzC,CAAC,CAAC;YAEH,sDAAsD;YACtD,IAAA,4BAAY,EAAC,OAAO,CAAC,CAAC;YAEtB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,wCAAsB,CAAC,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,kBAAkB,GAAG,WAAW,CAAC;gBAC5C,IAAA,uCAAqB,EAAC,WAAW,CAAC,CAAC;YACvC,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAEhE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;gBAC1B,IAAA,+CAA6B,EAAC,KAAK,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;CAAA","sourcesContent":["import express, { Application, Request } from \"express\";\r\nimport { NestFactory } from \"@nestjs/core\";\r\nimport { ExpressAdapter } from \"@nestjs/platform-express\";\r\nimport { setupSwagger } from \"./swagger/SwaggerConfig\";\r\nimport { Logger } from \"./Logger\";\r\nimport { EmilsoftwareModule, EmilsoftwareOptions } from \"./EmilsoftwareModule\";\r\nimport {\r\n    beginAccessiAuthInitialization,\r\n    failAccessiAuthInitialization,\r\n    AuthenticateGenService,\r\n    setAccessiAuthService\r\n} from \"./accessi-module/middleware/authenticateGen\";\r\n\r\n/**\r\n * Initializes the unified module that combines Accessi and Allegati functionality\r\n * @param app Express application instance\r\n * @param options Configuration options for both modules\r\n */\r\nexport async function initEmilsoftwareModule(app: Application, options: EmilsoftwareOptions) {\r\n    const logger: Logger = new Logger(initEmilsoftwareModule.name);\r\n    if (options?.accessiOptions) {\r\n        beginAccessiAuthInitialization();\r\n    }\r\n\r\n    try {\r\n        // Isolate Nest on a dedicated Express instance and dispatch only module routes.\r\n        // This keeps pre-existing routes/middlewares on the host app untouched.\r\n        const nestHostApp = express();\r\n        const isNestRoute = (path: string) =>\r\n            path === \"/api\" ||\r\n            path.startsWith(\"/api/\") ||\r\n            path === \"/swagger\" ||\r\n            path.startsWith(\"/swagger/\") ||\r\n            path === \"/swagger-json\";\r\n\r\n        app.use((req: Request, res, next) => {\r\n            if (!isNestRoute(req.path)) {\r\n                return next();\r\n            }\r\n            return nestHostApp(req, res, next);\r\n        });\r\n\r\n        const nestExpressInstance = new ExpressAdapter(nestHostApp);\r\n        const nestApp = await NestFactory.create(EmilsoftwareModule.forRoot(options), nestExpressInstance, {\r\n            bufferLogs: true\r\n        });\r\n\r\n        nestApp.enableCors();\r\n\r\n        nestApp.setGlobalPrefix('api', {\r\n            exclude: ['/swagger', '/swagger/(.*)']\r\n        });\r\n\r\n        // Setup unified Swagger documentation for all modules\r\n        setupSwagger(nestApp);\r\n\r\n        await nestApp.init();\r\n        if (options?.accessiOptions) {\r\n            const authService = nestApp.get(AuthenticateGenService);\r\n            app.locals.accessiAuthService = authService;\r\n            setAccessiAuthService(authService);\r\n        }\r\n\r\n        logger.info(\"Emilsoftware module initialized successfully\");\r\n\r\n    } catch (error) {\r\n        if (options?.accessiOptions) {\r\n            failAccessiAuthInitialization(error);\r\n        }\r\n        logger.error(\"Error initializing Emilsoftware Module:\", error);\r\n        throw error;\r\n    }\r\n}\r\n"]}
+{"version":3,"file":"initEmilsoftwareModule.js","sourceRoot":"","sources":["../src/initEmilsoftwareModule.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAyCA,wDAkHC;AA3JD,sDAAwD;AACxD,uCAA2C;AAC3C,+DAA0D;AAG1D,2DAKiC;AACjC,qCAAkC;AAClC,6DAA+E;AAC/E,iFAIqD;AACrD,oEAAgF;AAChF,4DAAgE;AAChE,mFAA0F;AAC1F,qGAAkG;AAClG,yDAAsF;AACtF,2EAA+F;AAC/F,+EAAmG;AACnG,uEAA0F;AAU1F;;;;;GAKG;AACH,SAAsB,sBAAsB,CACxC,GAAgB,EAChB,OAA4B;;;QAE5B,MAAM,MAAM,GAAW,IAAI,eAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;YAC1B,IAAA,gDAA8B,GAAE,CAAC;QACrC,CAAC;QAED,IAAI,CAAC;YACD,gFAAgF;YAChF,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,wBAAwB;YACxB,8EAA8E;YAC9E,MAAM,eAAe,GAAG,IAAA,4CAA4B,EAChD,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,OAAO,EAChC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CACnB,CAAC;YAEF,MAAM,WAAW,GAAG,IAAA,iBAAO,GAAE,CAAC;YAC9B,IAAI,CAAA,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,IAAI,0CAAE,UAAU,MAAK,SAAS,EAAE,CAAC;gBAC1D,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC/D,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,QAAQ,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc;gBACpC,CAAC,CAAC,IAAA,yBAAkB,EAAC,OAAO,CAAC,cAAc,CAAC;gBAC5C,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,IAAI,KAAK,MAAM;gBACf,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBACxB,IAAA,oCAAoB,EAAC,IAAI,EAAE,eAAe,CAAC;gBAC3C,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,aAAa;gBACxD,CAAC,CAAC,IAAA,oDAAoC,kCAC/B,OAAO,CAAC,cAAc,CAAC,aAAa,KACvC,KAAK,EAAE,MAAA,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,mCAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IACpF;gBACF,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,aAAa,EAAE,CAAC;gBAChB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,IAAA,+CAAiC,EAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;gBAC1F,IAAI,UAAU,EAAE,CAAC;oBACb,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxB,CAAC;YACL,CAAC;YACD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,KAAI,CAAA,MAAA,OAAO,CAAC,cAAc,CAAC,IAAI,0CAAE,eAAe,MAAK,KAAK,EAAE,CAAC;gBACpF,MAAM,eAAe,GAAG,IAAA,wDAAsC,EAC1D,MAAA,OAAO,CAAC,cAAc,CAAC,IAAI,0CAAE,eAAe,EAC5C,WAAW,EACX,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,oCAAoB,EAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CACzE,CAAC;gBACF,IAAI,eAAe,EAAE,CAAC;oBAClB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBAC7B,CAAC;YACL,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzB,OAAO,IAAI,EAAE,CAAC;gBAClB,CAAC;gBACD,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YAEH,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;gBAC1B,IAAA,uBAAgB,EAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC9C,IAAI,QAAQ,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;gBAC5D,CAAC;YACL,CAAC;YAED,MAAM,mBAAmB,GAAG,IAAI,iCAAc,CAAC,WAAW,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,MAAM,kBAAW,CAAC,MAAM,CAAC,uCAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,mBAAmB,kBAC7F,UAAU,EAAE,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,MAAK,KAAK,IACtC,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,EAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACxD,CAAC;YAEH,IAAI,CAAA,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,IAAI,0CAAE,IAAI,MAAK,KAAK,EAAE,CAAC;gBAChD,OAAO,CAAC,UAAU,CAAC,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,IAAI,0CAAE,IAAI,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;gBAC1B,iFAAiF;gBACjF,OAAO,CAAC,cAAc,CAAC,IAAA,+CAA2B,GAAE,CAAC,CAAC;gBACtD,OAAO,CAAC,gBAAgB,CAAC,IAAI,uDAA0B,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE;gBAC3B,OAAO,EAAE,IAAA,wCAAwB,EAAC,eAAe,CAAC;aACrD,CAAC,CAAC;YAEH,oEAAoE;YACpE,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YAExD,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;gBAC1B,MAAM,eAAe,GAAG,IAAA,8CAA6B,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,kBAAkB,GAAG,eAAe,CAAC,sBAAsB,CAAC;gBACvE,IAAA,uCAAqB,EAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;gBAC9D,IAAA,8BAAiB,EAAC,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAE5D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,EAAE,CAAC;gBAC1B,IAAA,+CAA6B,EAAC,KAAK,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;CAAA","sourcesContent":["import express, { Application, Request } from \"express\";\nimport { NestFactory } from \"@nestjs/core\";\nimport { ExpressAdapter } from \"@nestjs/platform-express\";\nimport type { INestApplication } from \"@nestjs/common\";\nimport type { OpenAPIObject } from \"@nestjs/swagger\";\nimport {\n    buildOpenApiExcludePaths,\n    isOpenApiRequestPath,\n    resolveAccessiOpenApiOptions,\n    setupOpenApi\n} from \"./openapi/OpenApiConfig\";\nimport { Logger } from \"./Logger\";\nimport { EmilsoftwareModule, EmilsoftwareOptions } from \"./EmilsoftwareModule\";\nimport {\n    beginAccessiAuthInitialization,\n    failAccessiAuthInitialization,\n    setAccessiAuthService\n} from \"./accessi-module/middleware/authenticateGen\";\nimport { registerAccessiModuleServices } from \"./accessi-module/accessiRuntime\";\nimport { logAccessiStartup } from \"./accessi-module/startupLog\";\nimport { createAccessiValidationPipe } from './accessi-module/security/accessiValidation';\nimport { AccessiHttpExceptionFilter } from './accessi-module/security/AccessiHttpExceptionFilter';\nimport { getAccessiJwksPath, setupAccessiJwks } from './accessi-module/security/jwks';\nimport { createAccessiEdgeRateLimitMiddleware } from './accessi-module/security/edgeRateLimit';\nimport { createAccessiSecurityHeadersMiddleware } from './accessi-module/security/securityHeaders';\nimport { createAccessiAuthCookieMiddleware } from './accessi-module/security/authCookies';\n\n/** Esito del bootstrap del modulo unificato. */\nexport interface EmilsoftwareModuleInitializationResult {\n    /** Sotto-app Nest che serve Accessi, Allegati e la documentazione. */\n    nestApp: INestApplication;\n    /** Documento OpenAPI generato, mergiabile nel documento unico dell'host. */\n    document: OpenAPIObject;\n}\n\n/**\n * Initializes the unified module that combines Accessi and Allegati functionality\n * @param app Express application instance\n * @param options Configuration options for both modules\n * @returns Il sotto-app Nest e il documento OpenAPI generato.\n */\nexport async function initEmilsoftwareModule(\n    app: Application,\n    options: EmilsoftwareOptions\n): Promise<EmilsoftwareModuleInitializationResult> {\n    const logger: Logger = new Logger(initEmilsoftwareModule.name);\n    if (options?.accessiOptions) {\n        beginAccessiAuthInitialization();\n    }\n\n    try {\n        // Isolate Nest on a dedicated Express instance and dispatch only module routes.\n        // This keeps pre-existing routes/middlewares on the host app untouched.\n        // Prefisso OpenAPI configurabile (default `accessi/openapi`), cosi' piu'\n        // documentazioni possono convivere (backend su `/openapi`, moduli sotto\n        // `/<modulo>/openapi`).\n        // Precedenza: EmilsoftwareOptions.openapi > AccessiOptions.openapi > default.\n        const resolvedOpenApi = resolveAccessiOpenApiOptions(\n            options?.accessiOptions?.openapi,\n            options?.openapi\n        );\n\n        const nestHostApp = express();\n        if (options?.accessiOptions?.http?.trustProxy !== undefined) {\n            app.set('trust proxy', options.accessiOptions.http.trustProxy);\n            nestHostApp.set('trust proxy', options.accessiOptions.http.trustProxy);\n        }\n        const jwksPath = options?.accessiOptions\n            ? getAccessiJwksPath(options.accessiOptions)\n            : undefined;\n        const isNestRoute = (path: string) =>\n            path === \"/api\" ||\n            path.startsWith(\"/api/\") ||\n            isOpenApiRequestPath(path, resolvedOpenApi) ||\n            (jwksPath !== undefined && path === jwksPath);\n        const edgeRateLimit = options?.accessiOptions?.edgeRateLimit\n            ? createAccessiEdgeRateLimitMiddleware({\n                ...options.accessiOptions.edgeRateLimit,\n                match: options.accessiOptions.edgeRateLimit.match ?? ((path) => isNestRoute(path)),\n            })\n            : undefined;\n        if (edgeRateLimit) {\n            app.use(edgeRateLimit);\n        }\n        if (options?.accessiOptions) {\n            const authCookie = createAccessiAuthCookieMiddleware(options.accessiOptions, isNestRoute);\n            if (authCookie) {\n                app.use(authCookie);\n            }\n        }\n        if (options?.accessiOptions && options.accessiOptions.http?.securityHeaders !== false) {\n            const securityHeaders = createAccessiSecurityHeadersMiddleware(\n                options.accessiOptions.http?.securityHeaders,\n                isNestRoute,\n                { isOpenApiUi: (path) => isOpenApiRequestPath(path, resolvedOpenApi) },\n            );\n            if (securityHeaders) {\n                app.use(securityHeaders);\n            }\n        }\n\n        app.use((req: Request, res, next) => {\n            if (!isNestRoute(req.path)) {\n                return next();\n            }\n            return nestHostApp(req, res, next);\n        });\n\n        if (options?.accessiOptions) {\n            setupAccessiJwks(app, options.accessiOptions);\n            if (jwksPath) {\n                logger.info(`JWKS accessi disponibile su: ${jwksPath}`);\n            }\n        }\n\n        const nestExpressInstance = new ExpressAdapter(nestHostApp);\n        const nestApp = await NestFactory.create(EmilsoftwareModule.forRoot(options), nestExpressInstance, {\n            bufferLogs: options?.bufferLogs !== false,\n            ...(options?.logger ? { logger: options.logger } : {})\n        });\n\n        if (options?.accessiOptions?.http?.cors !== false) {\n            nestApp.enableCors(options?.accessiOptions?.http?.cors);\n        }\n        if (options?.accessiOptions) {\n            // Keep the Accessi API contract identical for standalone and unified bootstraps.\n            nestApp.useGlobalPipes(createAccessiValidationPipe());\n            nestApp.useGlobalFilters(new AccessiHttpExceptionFilter());\n        }\n\n        nestApp.setGlobalPrefix('api', {\n            exclude: buildOpenApiExcludePaths(resolvedOpenApi)\n        });\n\n        // Documentazione OpenAPI del modulo unificato (Accessi + Allegati).\n        const document = setupOpenApi(nestApp, resolvedOpenApi);\n\n        await nestApp.init();\n        if (options?.accessiOptions) {\n            const accessiServices = registerAccessiModuleServices(app, nestApp);\n            app.locals.accessiAuthService = accessiServices.authenticateGenService;\n            setAccessiAuthService(accessiServices.authenticateGenService);\n            logAccessiStartup(options.accessiOptions, resolvedOpenApi);\n        }\n\n        logger.info(\"Emilsoftware module initialized successfully\");\n\n        return { nestApp, document };\n    } catch (error) {\n        if (options?.accessiOptions) {\n            failAccessiAuthInitialization(error);\n        }\n        logger.error(\"Error initializing Emilsoftware Module:\", error);\n        throw error;\n    }\n}\n"]}

package/dist/openapi/OpenApiConfig.d.ts

@@ -0,0 +1,68 @@
+import { INestApplication } from "@nestjs/common";
+import type { OpenAPIObject } from "@nestjs/swagger";
+/**
+ * Opzioni di setup della documentazione OpenAPI.
+ *
+ * `enabled: false` disabilita UI e JSON ma non il documento generato, che resta
+ * disponibile al chiamante per essere mergiato nel documento OpenAPI dell'host.
+ */
+export type OpenApiSetupOptions = {
+    enabled?: boolean;
+    openApiPath?: string;
+    openApiJsonPath?: string;
+    title?: string;
+    description?: string;
+    /** Callback invocata subito dopo la generazione del documento OpenAPI. */
+    onDocument?: (document: OpenAPIObject) => void;
+};
+/** Opzioni OpenAPI risolte: nessun campo opzionale salvo il callback. */
+export interface ResolvedOpenApiSetupOptions {
+    enabled: boolean;
+    openApiPath: string;
+    openApiJsonPath: string;
+    title: string;
+    description: string;
+    onDocument?: (document: OpenAPIObject) => void;
+}
+/**
+ * Default storici della documentazione Accessi.
+ *
+ * I consumer esistenti non devono cambiare comportamento: senza override la UI
+ * resta su `accessi/openapi` e la spec su `accessi/openapi.json`.
+ */
+export declare const DEFAULT_ACCESSI_OPENAPI: {
+    readonly enabled: true;
+    readonly openApiPath: "accessi/openapi";
+    readonly openApiJsonPath: "accessi/openapi.json";
+    readonly title: "Accessi API Documentation";
+    readonly description: "API del modulo accessi";
+};
+/**
+ * Risolve i default e i vari livelli di override in un'unica configurazione.
+ *
+ * L'ordine dei livelli e esplicito: i parametri successivi vincono sui precedenti.
+ */
+export declare function resolveOpenApiSetupOptions(defaults?: OpenApiSetupOptions, ...overrides: Array<OpenApiSetupOptions | undefined>): ResolvedOpenApiSetupOptions;
+/**
+ * Risolve la configurazione OpenAPI di Accessi.
+ *
+ * I livelli successivi vincono sui precedenti, quindi la variante unificata puo
+ * usare `resolveAccessiOpenApiOptions(accessiOptions.openapi, emilsoftwareOptions.openapi)`.
+ */
+export declare function resolveAccessiOpenApiOptions(...overrides: Array<OpenApiSetupOptions | undefined>): ResolvedOpenApiSetupOptions;
+/**
+ * Path da passare a `setGlobalPrefix` per escludere la documentazione.
+ *
+ * Usa la sintassi wildcard di path-to-regexp v8 (`{*path}`) per evitare il
+ * LegacyRouteConverter warning di Nest.
+ */
+export declare function buildOpenApiExcludePaths(options: ResolvedOpenApiSetupOptions): string[];
+/** True se il path Express appartiene alla documentazione OpenAPI configurata. */
+export declare function isOpenApiRequestPath(path: string, options: ResolvedOpenApiSetupOptions): boolean;
+/**
+ * Genera il documento OpenAPI e, se `enabled` non e false, monta UI e JSON.
+ *
+ * Il documento viene sempre restituito: questo permette all'host di mergiarlo
+ * nel proprio documento unico anche quando la UI del modulo e disabilitata.
+ */
+export declare function setupOpenApi(app: INestApplication, options?: OpenApiSetupOptions): OpenAPIObject;

package/dist/openapi/OpenApiConfig.js

@@ -0,0 +1,157 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ACCESSI_OPENAPI = void 0;
+exports.resolveOpenApiSetupOptions = resolveOpenApiSetupOptions;
+exports.resolveAccessiOpenApiOptions = resolveAccessiOpenApiOptions;
+exports.buildOpenApiExcludePaths = buildOpenApiExcludePaths;
+exports.isOpenApiRequestPath = isOpenApiRequestPath;
+exports.setupOpenApi = setupOpenApi;
+const swagger_1 = require("@nestjs/swagger");
+const Logger_1 = require("../Logger");
+/**
+ * Default storici della documentazione Accessi.
+ *
+ * I consumer esistenti non devono cambiare comportamento: senza override la UI
+ * resta su `accessi/openapi` e la spec su `accessi/openapi.json`.
+ */
+exports.DEFAULT_ACCESSI_OPENAPI = {
+    enabled: true,
+    openApiPath: "accessi/openapi",
+    openApiJsonPath: "accessi/openapi.json",
+    title: "Accessi API Documentation",
+    description: "API del modulo accessi",
+};
+/** Default del setup OpenAPI generico (usato direttamente da `setupOpenApi`). */
+const DEFAULT_OPENAPI_SETUP = {
+    enabled: true,
+    openApiPath: "openapi",
+    openApiJsonPath: "openapi.json",
+    title: "API Documentation",
+    description: "API per la gestione di accessi utenti e allegati",
+};
+function normalizeOpenApiPath(value) {
+    return value.replace(/^\/+|\/+$/g, "");
+}
+function normalizeOpenApiJsonPath(value) {
+    return value.replace(/^\/+|\/+$/g, "");
+}
+/**
+ * Unisce i livelli di configurazione ignorando le proprieta `undefined`.
+ *
+ * A differenza dello spread semplice, un `{ openApiPath: undefined }` esplicito
+ * non cancella il default del livello precedente.
+ */
+function mergeOpenApiSetupOptions(defaults, ...overrides) {
+    const merged = Object.assign({}, defaults);
+    for (const override of overrides) {
+        if (!override)
+            continue;
+        if (override.enabled !== undefined)
+            merged.enabled = override.enabled;
+        if (override.openApiPath !== undefined)
+            merged.openApiPath = override.openApiPath;
+        if (override.openApiJsonPath !== undefined)
+            merged.openApiJsonPath = override.openApiJsonPath;
+        if (override.title !== undefined)
+            merged.title = override.title;
+        if (override.description !== undefined)
+            merged.description = override.description;
+        if (override.onDocument !== undefined)
+            merged.onDocument = override.onDocument;
+    }
+    return merged;
+}
+/**
+ * Risolve i default e i vari livelli di override in un'unica configurazione.
+ *
+ * L'ordine dei livelli e esplicito: i parametri successivi vincono sui precedenti.
+ */
+function resolveOpenApiSetupOptions(defaults = DEFAULT_OPENAPI_SETUP, ...overrides) {
+    var _a, _b, _c, _d, _e, _f;
+    const merged = mergeOpenApiSetupOptions(defaults, ...overrides);
+    const defaultOpenApiPath = normalizeOpenApiPath((_a = defaults.openApiPath) !== null && _a !== void 0 ? _a : "openapi") || "openapi";
+    const openApiPath = normalizeOpenApiPath((_b = merged.openApiPath) !== null && _b !== void 0 ? _b : defaultOpenApiPath) || defaultOpenApiPath;
+    // Storico: se si cambia solo `openApiPath`, il JSON segue il nuovo path
+    // (`<path>.json`). Un `openApiJsonPath` esplicito in un override vince sempre.
+    const explicitJsonPath = (_c = [...overrides]
+        .reverse()
+        .find((override) => (override === null || override === void 0 ? void 0 : override.openApiJsonPath) !== undefined)) === null || _c === void 0 ? void 0 : _c.openApiJsonPath;
+    const hasOverrides = overrides.some((override) => override !== undefined);
+    const jsonPathCandidate = explicitJsonPath !== null && explicitJsonPath !== void 0 ? explicitJsonPath : (hasOverrides ? `${openApiPath}.json` : ((_d = merged.openApiJsonPath) !== null && _d !== void 0 ? _d : `${openApiPath}.json`));
+    const openApiJsonPath = normalizeOpenApiJsonPath(jsonPathCandidate) || `${openApiPath}.json`;
+    return Object.assign({ enabled: merged.enabled !== false, openApiPath,
+        openApiJsonPath, title: (_e = merged.title) !== null && _e !== void 0 ? _e : "API Documentation", description: (_f = merged.description) !== null && _f !== void 0 ? _f : "API per la gestione di accessi utenti e allegati" }, (merged.onDocument ? { onDocument: merged.onDocument } : {}));
+}
+/**
+ * Risolve la configurazione OpenAPI di Accessi.
+ *
+ * I livelli successivi vincono sui precedenti, quindi la variante unificata puo
+ * usare `resolveAccessiOpenApiOptions(accessiOptions.openapi, emilsoftwareOptions.openapi)`.
+ */
+function resolveAccessiOpenApiOptions(...overrides) {
+    return resolveOpenApiSetupOptions(exports.DEFAULT_ACCESSI_OPENAPI, ...overrides);
+}
+/**
+ * Path da passare a `setGlobalPrefix` per escludere la documentazione.
+ *
+ * Usa la sintassi wildcard di path-to-regexp v8 (`{*path}`) per evitare il
+ * LegacyRouteConverter warning di Nest.
+ */
+function buildOpenApiExcludePaths(options) {
+    if (!options.enabled)
+        return [];
+    return [`/${options.openApiPath}`, `/${options.openApiPath}/{*path}`];
+}
+/** True se il path Express appartiene alla documentazione OpenAPI configurata. */
+function isOpenApiRequestPath(path, options) {
+    if (!options.enabled)
+        return false;
+    const uiPath = `/${options.openApiPath}`;
+    if (path === uiPath || path.startsWith(`${uiPath}/`))
+        return true;
+    return path === `/${options.openApiJsonPath}` || path === `/${options.openApiPath}-json`;
+}
+/**
+ * Genera il documento OpenAPI e, se `enabled` non e false, monta UI e JSON.
+ *
+ * Il documento viene sempre restituito: questo permette all'host di mergiarlo
+ * nel proprio documento unico anche quando la UI del modulo e disabilitata.
+ */
+function setupOpenApi(app, options) {
+    var _a, _b, _c;
+    const logger = new Logger_1.Logger("OpenApiConfig");
+    const resolved = resolveOpenApiSetupOptions(DEFAULT_OPENAPI_SETUP, options);
+    const config = new swagger_1.DocumentBuilder()
+        .setTitle(resolved.title)
+        .setDescription(resolved.description)
+        .setVersion("1.0")
+        .addBearerAuth() // Per abilitare l'autenticazione JWT
+        .build();
+    const document = swagger_1.SwaggerModule.createDocument(app, config);
+    (_a = resolved.onDocument) === null || _a === void 0 ? void 0 : _a.call(resolved, document);
+    if (!resolved.enabled) {
+        logger.info("OpenAPI disabilitato: UI e JSON non montati.");
+        return document;
+    }
+    swagger_1.SwaggerModule.setup(resolved.openApiPath, app, document);
+    app.use(`/${resolved.openApiJsonPath}`, (_req, res) => {
+        res.setHeader("Content-Type", "application/json");
+        res.send(document);
+    });
+    // Manteniamo l'alias storico `<path>-json` per non rompere i consumer esistenti.
+    const legacyOpenApiJsonPath = `${resolved.openApiPath}-json`;
+    if (legacyOpenApiJsonPath !== resolved.openApiJsonPath) {
+        app.use(`/${legacyOpenApiJsonPath}`, (_req, res) => {
+            res.setHeader("Content-Type", "application/json");
+            res.send(document);
+        });
+    }
+    const serverAddress = (_c = (_b = app.getHttpServer()) === null || _b === void 0 ? void 0 : _b.address) === null || _c === void 0 ? void 0 : _c.call(_b);
+    const port = serverAddress && typeof serverAddress === "object"
+        ? serverAddress.port
+        : 3000;
+    logger.info(`OpenAPI documentation available at: http://localhost:${port}/${resolved.openApiPath}`);
+    logger.info(`OpenAPI JSON available at: http://localhost:${port}/${resolved.openApiJsonPath}`);
+    return document;
+}
+//# sourceMappingURL=OpenApiConfig.js.map

package/dist/openapi/OpenApiConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenApiConfig.js","sourceRoot":"","sources":["../../src/openapi/OpenApiConfig.ts"],"names":[],"mappings":";;;AA4FA,gEA2BC;AAQD,oEAIC;AAQD,4DAGC;AAGD,oDAOC;AAQD,oCAgDC;AA/MD,6CAAiE;AAIjE,sCAAmC;AA4BnC;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG;IACnC,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,iBAAiB;IAC9B,eAAe,EAAE,sBAAsB;IACvC,KAAK,EAAE,2BAA2B;IAClC,WAAW,EAAE,wBAAwB;CACO,CAAC;AAEjD,iFAAiF;AACjF,MAAM,qBAAqB,GAAG;IAC1B,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,SAAS;IACtB,eAAe,EAAE,cAAc;IAC/B,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EAAE,kDAAkD;CACnB,CAAC;AAEjD,SAAS,oBAAoB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAC7B,QAA6B,EAC7B,GAAG,SAAiD;IAEpD,MAAM,MAAM,qBAA6B,QAAQ,CAAE,CAAC;IACpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACtE,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAClF,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;QAC9F,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAChE,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAClF,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,0BAA0B,CACtC,WAAgC,qBAAqB,EACrD,GAAG,SAAiD;;IAEpD,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,MAAA,QAAQ,CAAC,WAAW,mCAAI,SAAS,CAAC,IAAI,SAAS,CAAC;IAChG,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAA,MAAM,CAAC,WAAW,mCAAI,kBAAkB,CAAC,IAAI,kBAAkB,CAAC;IAEzG,wEAAwE;IACxE,+EAA+E;IAC/E,MAAM,gBAAgB,GAAG,MAAA,CAAC,GAAG,SAAS,CAAC;SAClC,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,eAAe,MAAK,SAAS,CAAC,0CAC1D,eAAe,CAAC;IACtB,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAC1E,MAAM,iBAAiB,GAAG,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GACnC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,WAAW,OAAO,CAAC,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,eAAe,mCAAI,GAAG,WAAW,OAAO,CAAC,CAAC,CAAC;IAClG,MAAM,eAAe,GAAG,wBAAwB,CAAC,iBAAiB,CAAC,IAAI,GAAG,WAAW,OAAO,CAAC;IAE7F,uBACI,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK,EACjC,WAAW;QACX,eAAe,EACf,KAAK,EAAE,MAAA,MAAM,CAAC,KAAK,mCAAI,mBAAmB,EAC1C,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,kDAAkD,IAClF,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACjE;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B,CACxC,GAAG,SAAiD;IAEpD,OAAO,0BAA0B,CAAC,+BAAuB,EAAE,GAAG,SAAS,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAoC;IACzE,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,OAAO,CAAC,WAAW,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED,kFAAkF;AAClF,SAAgB,oBAAoB,CAAC,IAAY,EAAE,OAAoC;IACnF,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAEnC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAElE,OAAO,IAAI,KAAK,IAAI,OAAO,CAAC,eAAe,EAAE,IAAI,IAAI,KAAK,IAAI,OAAO,CAAC,WAAW,OAAO,CAAC;AAC7F,CAAC;AAED;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,GAAqB,EAAE,OAA6B;;IAC7E,MAAM,MAAM,GAAW,IAAI,eAAM,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,IAAI,yBAAe,EAAE;SAC/B,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;SACxB,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC;SACpC,UAAU,CAAC,KAAK,CAAC;SACjB,aAAa,EAAE,CAAC,qCAAqC;SACrD,KAAK,EAAE,CAAC;IAEb,MAAM,QAAQ,GAAG,uBAAa,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAA,QAAQ,CAAC,UAAU,yDAAG,QAAQ,CAAC,CAAC;IAEhC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,uBAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEzD,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACrE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,MAAM,qBAAqB,GAAG,GAAG,QAAQ,CAAC,WAAW,OAAO,CAAC;IAC7D,IAAI,qBAAqB,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,IAAI,qBAAqB,EAAE,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAClE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,aAAa,GAAG,MAAA,MAAA,GAAG,CAAC,aAAa,EAAE,0CAAE,OAAO,kDAAI,CAAC;IACvD,MAAM,IAAI,GAAG,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ;QAC3D,CAAC,CAAE,aAA6B,CAAC,IAAI;QACrC,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,CAAC,IAAI,CACP,wDAAwD,IAAI,IAAI,QAAQ,CAAC,WAAW,EAAE,CACzF,CAAC;IACF,MAAM,CAAC,IAAI,CACP,+CAA+C,IAAI,IAAI,QAAQ,CAAC,eAAe,EAAE,CACpF,CAAC;IAEF,OAAO,QAAQ,CAAC;AACpB,CAAC","sourcesContent":["import { INestApplication } from \"@nestjs/common\";\nimport { DocumentBuilder, SwaggerModule } from \"@nestjs/swagger\";\nimport type { OpenAPIObject } from \"@nestjs/swagger\";\nimport { Request, Response } from \"express\";\nimport { AddressInfo } from \"net\";\nimport { Logger } from \"../Logger\";\n\n/**\n * Opzioni di setup della documentazione OpenAPI.\n *\n * `enabled: false` disabilita UI e JSON ma non il documento generato, che resta\n * disponibile al chiamante per essere mergiato nel documento OpenAPI dell'host.\n */\nexport type OpenApiSetupOptions = {\n    enabled?: boolean;\n    openApiPath?: string;\n    openApiJsonPath?: string;\n    title?: string;\n    description?: string;\n    /** Callback invocata subito dopo la generazione del documento OpenAPI. */\n    onDocument?: (document: OpenAPIObject) => void;\n};\n\n/** Opzioni OpenAPI risolte: nessun campo opzionale salvo il callback. */\nexport interface ResolvedOpenApiSetupOptions {\n    enabled: boolean;\n    openApiPath: string;\n    openApiJsonPath: string;\n    title: string;\n    description: string;\n    onDocument?: (document: OpenAPIObject) => void;\n}\n\n/**\n * Default storici della documentazione Accessi.\n *\n * I consumer esistenti non devono cambiare comportamento: senza override la UI\n * resta su `accessi/openapi` e la spec su `accessi/openapi.json`.\n */\nexport const DEFAULT_ACCESSI_OPENAPI = {\n    enabled: true,\n    openApiPath: \"accessi/openapi\",\n    openApiJsonPath: \"accessi/openapi.json\",\n    title: \"Accessi API Documentation\",\n    description: \"API del modulo accessi\",\n} as const satisfies ResolvedOpenApiSetupOptions;\n\n/** Default del setup OpenAPI generico (usato direttamente da `setupOpenApi`). */\nconst DEFAULT_OPENAPI_SETUP = {\n    enabled: true,\n    openApiPath: \"openapi\",\n    openApiJsonPath: \"openapi.json\",\n    title: \"API Documentation\",\n    description: \"API per la gestione di accessi utenti e allegati\",\n} as const satisfies ResolvedOpenApiSetupOptions;\n\nfunction normalizeOpenApiPath(value: string): string {\n    return value.replace(/^\\/+|\\/+$/g, \"\");\n}\n\nfunction normalizeOpenApiJsonPath(value: string): string {\n    return value.replace(/^\\/+|\\/+$/g, \"\");\n}\n\n/**\n * Unisce i livelli di configurazione ignorando le proprieta `undefined`.\n *\n * A differenza dello spread semplice, un `{ openApiPath: undefined }` esplicito\n * non cancella il default del livello precedente.\n */\nfunction mergeOpenApiSetupOptions(\n    defaults: OpenApiSetupOptions,\n    ...overrides: Array<OpenApiSetupOptions | undefined>\n): OpenApiSetupOptions {\n    const merged: OpenApiSetupOptions = { ...defaults };\n    for (const override of overrides) {\n        if (!override) continue;\n        if (override.enabled !== undefined) merged.enabled = override.enabled;\n        if (override.openApiPath !== undefined) merged.openApiPath = override.openApiPath;\n        if (override.openApiJsonPath !== undefined) merged.openApiJsonPath = override.openApiJsonPath;\n        if (override.title !== undefined) merged.title = override.title;\n        if (override.description !== undefined) merged.description = override.description;\n        if (override.onDocument !== undefined) merged.onDocument = override.onDocument;\n    }\n    return merged;\n}\n\n/**\n * Risolve i default e i vari livelli di override in un'unica configurazione.\n *\n * L'ordine dei livelli e esplicito: i parametri successivi vincono sui precedenti.\n */\nexport function resolveOpenApiSetupOptions(\n    defaults: OpenApiSetupOptions = DEFAULT_OPENAPI_SETUP,\n    ...overrides: Array<OpenApiSetupOptions | undefined>\n): ResolvedOpenApiSetupOptions {\n    const merged = mergeOpenApiSetupOptions(defaults, ...overrides);\n    const defaultOpenApiPath = normalizeOpenApiPath(defaults.openApiPath ?? \"openapi\") || \"openapi\";\n    const openApiPath = normalizeOpenApiPath(merged.openApiPath ?? defaultOpenApiPath) || defaultOpenApiPath;\n\n    // Storico: se si cambia solo `openApiPath`, il JSON segue il nuovo path\n    // (`<path>.json`). Un `openApiJsonPath` esplicito in un override vince sempre.\n    const explicitJsonPath = [...overrides]\n        .reverse()\n        .find((override) => override?.openApiJsonPath !== undefined)\n        ?.openApiJsonPath;\n    const hasOverrides = overrides.some((override) => override !== undefined);\n    const jsonPathCandidate = explicitJsonPath\n        ?? (hasOverrides ? `${openApiPath}.json` : (merged.openApiJsonPath ?? `${openApiPath}.json`));\n    const openApiJsonPath = normalizeOpenApiJsonPath(jsonPathCandidate) || `${openApiPath}.json`;\n\n    return {\n        enabled: merged.enabled !== false,\n        openApiPath,\n        openApiJsonPath,\n        title: merged.title ?? \"API Documentation\",\n        description: merged.description ?? \"API per la gestione di accessi utenti e allegati\",\n        ...(merged.onDocument ? { onDocument: merged.onDocument } : {}),\n    };\n}\n\n/**\n * Risolve la configurazione OpenAPI di Accessi.\n *\n * I livelli successivi vincono sui precedenti, quindi la variante unificata puo\n * usare `resolveAccessiOpenApiOptions(accessiOptions.openapi, emilsoftwareOptions.openapi)`.\n */\nexport function resolveAccessiOpenApiOptions(\n    ...overrides: Array<OpenApiSetupOptions | undefined>\n): ResolvedOpenApiSetupOptions {\n    return resolveOpenApiSetupOptions(DEFAULT_ACCESSI_OPENAPI, ...overrides);\n}\n\n/**\n * Path da passare a `setGlobalPrefix` per escludere la documentazione.\n *\n * Usa la sintassi wildcard di path-to-regexp v8 (`{*path}`) per evitare il\n * LegacyRouteConverter warning di Nest.\n */\nexport function buildOpenApiExcludePaths(options: ResolvedOpenApiSetupOptions): string[] {\n    if (!options.enabled) return [];\n    return [`/${options.openApiPath}`, `/${options.openApiPath}/{*path}`];\n}\n\n/** True se il path Express appartiene alla documentazione OpenAPI configurata. */\nexport function isOpenApiRequestPath(path: string, options: ResolvedOpenApiSetupOptions): boolean {\n    if (!options.enabled) return false;\n\n    const uiPath = `/${options.openApiPath}`;\n    if (path === uiPath || path.startsWith(`${uiPath}/`)) return true;\n\n    return path === `/${options.openApiJsonPath}` || path === `/${options.openApiPath}-json`;\n}\n\n/**\n * Genera il documento OpenAPI e, se `enabled` non e false, monta UI e JSON.\n *\n * Il documento viene sempre restituito: questo permette all'host di mergiarlo\n * nel proprio documento unico anche quando la UI del modulo e disabilitata.\n */\nexport function setupOpenApi(app: INestApplication, options?: OpenApiSetupOptions): OpenAPIObject {\n    const logger: Logger = new Logger(\"OpenApiConfig\");\n    const resolved = resolveOpenApiSetupOptions(DEFAULT_OPENAPI_SETUP, options);\n\n    const config = new DocumentBuilder()\n        .setTitle(resolved.title)\n        .setDescription(resolved.description)\n        .setVersion(\"1.0\")\n        .addBearerAuth() // Per abilitare l'autenticazione JWT\n        .build();\n\n    const document = SwaggerModule.createDocument(app, config);\n    resolved.onDocument?.(document);\n\n    if (!resolved.enabled) {\n        logger.info(\"OpenAPI disabilitato: UI e JSON non montati.\");\n        return document;\n    }\n\n    SwaggerModule.setup(resolved.openApiPath, app, document);\n\n    app.use(`/${resolved.openApiJsonPath}`, (_req: Request, res: Response) => {\n        res.setHeader(\"Content-Type\", \"application/json\");\n        res.send(document);\n    });\n\n    // Manteniamo l'alias storico `<path>-json` per non rompere i consumer esistenti.\n    const legacyOpenApiJsonPath = `${resolved.openApiPath}-json`;\n    if (legacyOpenApiJsonPath !== resolved.openApiJsonPath) {\n        app.use(`/${legacyOpenApiJsonPath}`, (_req: Request, res: Response) => {\n            res.setHeader(\"Content-Type\", \"application/json\");\n            res.send(document);\n        });\n    }\n\n    const serverAddress = app.getHttpServer()?.address?.();\n    const port = serverAddress && typeof serverAddress === \"object\"\n        ? (serverAddress as AddressInfo).port\n        : 3000;\n\n    logger.info(\n        `OpenAPI documentation available at: http://localhost:${port}/${resolved.openApiPath}`\n    );\n    logger.info(\n        `OpenAPI JSON available at: http://localhost:${port}/${resolved.openApiJsonPath}`\n    );\n\n    return document;\n}\n"]}

package/dist/openapi/OpenApiMerge.d.ts

@@ -0,0 +1,15 @@
+import type { OpenAPIObject } from "@nestjs/swagger";
+/** Politica di risoluzione quando due documenti definiscono la stessa chiave. */
+export type OpenApiMergeConflictPolicy = "error" | "keep" | "overwrite";
+export interface MergeOpenApiOptions {
+    /** Default: `error`. */
+    conflict?: OpenApiMergeConflictPolicy;
+}
+/**
+ * Unisce il documento Accessi nel documento OpenAPI dell'host.
+ *
+ * Per default un conflitto su path, schema o security scheme produce errore:
+ * e meglio accorgersi subito di due contratti incompatibili. Usare
+ * `conflict: "overwrite"` solo quando il documento host deve vincere.
+ */
+export declare function mergeOpenApiDocuments(target: OpenAPIObject, source: OpenAPIObject, options?: MergeOpenApiOptions): OpenAPIObject;

package/dist/openapi/OpenApiMerge.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mergeOpenApiDocuments = mergeOpenApiDocuments;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function cloneDocument(document) {
+    return JSON.parse(JSON.stringify(document));
+}
+function sameValue(left, right) {
+    return JSON.stringify(left) === JSON.stringify(right);
+}
+function mergeRecord(target, source, policy, section) {
+    if (!source)
+        return target;
+    const merged = Object.assign({}, (target !== null && target !== void 0 ? target : {}));
+    for (const [key, value] of Object.entries(source)) {
+        if (!(key in merged)) {
+            merged[key] = value;
+            continue;
+        }
+        if (sameValue(merged[key], value))
+            continue;
+        if (policy === "keep")
+            continue;
+        if (policy === "overwrite") {
+            merged[key] = value;
+            continue;
+        }
+        throw new Error(`Conflitto OpenAPI in ${section}.${key}.`);
+    }
+    return merged;
+}
+function mergeTags(target, source, policy) {
+    if (!Array.isArray(target) || !Array.isArray(source))
+        return target !== null && target !== void 0 ? target : source;
+    const merged = [...target];
+    for (const tag of source) {
+        if (!isRecord(tag) || typeof tag.name !== "string") {
+            merged.push(tag);
+            continue;
+        }
+        const existingIndex = merged.findIndex((candidate) => isRecord(candidate) && candidate.name === tag.name);
+        if (existingIndex < 0) {
+            merged.push(tag);
+            continue;
+        }
+        const existing = merged[existingIndex];
+        if (sameValue(existing, tag))
+            continue;
+        if (policy === "keep")
+            continue;
+        if (policy === "overwrite") {
+            merged[existingIndex] = tag;
+            continue;
+        }
+        throw new Error(`Conflitto OpenAPI nel tag "${tag.name}".`);
+    }
+    return merged;
+}
+function mergeServers(target, source, policy) {
+    if (!Array.isArray(target) || !Array.isArray(source))
+        return target !== null && target !== void 0 ? target : source;
+    const merged = [...target];
+    for (const server of source) {
+        if (!isRecord(server) || typeof server.url !== "string") {
+            merged.push(server);
+            continue;
+        }
+        const existingIndex = merged.findIndex((candidate) => isRecord(candidate) && candidate.url === server.url);
+        if (existingIndex < 0) {
+            merged.push(server);
+            continue;
+        }
+        const existing = merged[existingIndex];
+        if (sameValue(existing, server))
+            continue;
+        if (policy === "keep")
+            continue;
+        if (policy === "overwrite") {
+            merged[existingIndex] = server;
+            continue;
+        }
+        throw new Error(`Conflitto OpenAPI nel server "${server.url}".`);
+    }
+    return merged;
+}
+/**
+ * Unisce il documento Accessi nel documento OpenAPI dell'host.
+ *
+ * Per default un conflitto su path, schema o security scheme produce errore:
+ * e meglio accorgersi subito di due contratti incompatibili. Usare
+ * `conflict: "overwrite"` solo quando il documento host deve vincere.
+ */
+function mergeOpenApiDocuments(target, source, options = {}) {
+    var _a;
+    if (!target || !source) {
+        throw new Error("mergeOpenApiDocuments richiede due documenti OpenAPI validi.");
+    }
+    const policy = (_a = options.conflict) !== null && _a !== void 0 ? _a : "error";
+    const result = cloneDocument(target);
+    const sourceDocument = source;
+    result.paths = mergeRecord(isRecord(result.paths) ? result.paths : undefined, isRecord(sourceDocument.paths) ? sourceDocument.paths : undefined, policy, "paths");
+    const targetComponents = isRecord(result.components) ? result.components : {};
+    const sourceComponents = isRecord(sourceDocument.components) ? sourceDocument.components : {};
+    const componentSections = new Set([
+        ...Object.keys(targetComponents),
+        ...Object.keys(sourceComponents),
+    ]);
+    const mergedComponents = Object.assign({}, targetComponents);
+    for (const section of componentSections) {
+        mergedComponents[section] = mergeRecord(isRecord(targetComponents[section]) ? targetComponents[section] : undefined, isRecord(sourceComponents[section]) ? sourceComponents[section] : undefined, policy, `components.${section}`);
+    }
+    result.components = mergedComponents;
+    result.tags = mergeTags(result.tags, sourceDocument.tags, policy);
+    result.servers = mergeServers(result.servers, sourceDocument.servers, policy);
+    return result;
+}
+//# sourceMappingURL=OpenApiMerge.js.map

package/dist/openapi/OpenApiMerge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenApiMerge.js","sourceRoot":"","sources":["../../src/openapi/OpenApiMerge.ts"],"names":[],"mappings":";;AAqHA,sDAyCC;AApJD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,QAAuB;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAA4B,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,IAAa,EAAE,KAAc;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAClB,MAA2C,EAC3C,MAA2C,EAC3C,MAAkC,EAClC,OAAe;IAEf,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,MAAM,MAAM,qBAAiC,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAC,CAAE,CAAC;IAE9D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;YAAE,SAAS;QAC5C,IAAI,MAAM,KAAK,MAAM;YAAE,SAAS;QAChC,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,IAAI,GAAG,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAChB,MAAe,EACf,MAAe,EACf,MAAkC;IAElC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,MAAM,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CACpC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAClE,CAAC;QACF,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC;YAAE,SAAS;QACvC,IAAI,MAAM,KAAK,MAAM;YAAE,SAAS;QAChC,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CACnB,MAAe,EACf,MAAe,EACf,MAAkC;IAElC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,MAAM,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CACpC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CACnE,CAAC;QACF,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,SAAS;QAC1C,IAAI,MAAM,KAAK,MAAM;YAAE,SAAS;QAChC,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB,CACnC,MAAqB,EACrB,MAAqB,EACrB,UAA+B,EAAE;;IAEjC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,MAAM,GAAG,MAAA,OAAO,CAAC,QAAQ,mCAAI,OAAO,CAAC;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,MAA4C,CAAC;IAEpE,MAAM,CAAC,KAAK,GAAG,WAAW,CACxB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EACjD,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EACjE,MAAM,EACN,OAAO,CACR,CAAC;IAEF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;QAChC,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAChC,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,gBAAgB,qBAAiC,gBAAgB,CAAE,CAAC;IAC1E,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,gBAAgB,CAAC,OAAO,CAAC,GAAG,WAAW,CACrC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAC3E,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAC3E,MAAM,EACN,cAAc,OAAO,EAAE,CACxB,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,UAAU,GAAG,gBAAgB,CAAC;IAErC,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE9E,OAAO,MAAkC,CAAC;AAC5C,CAAC","sourcesContent":["import type { OpenAPIObject } from \"@nestjs/swagger\";\n\n/** Politica di risoluzione quando due documenti definiscono la stessa chiave. */\nexport type OpenApiMergeConflictPolicy = \"error\" | \"keep\" | \"overwrite\";\n\nexport interface MergeOpenApiOptions {\n  /** Default: `error`. */\n  conflict?: OpenApiMergeConflictPolicy;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction cloneDocument(document: OpenAPIObject): Record<string, unknown> {\n  return JSON.parse(JSON.stringify(document)) as Record<string, unknown>;\n}\n\nfunction sameValue(left: unknown, right: unknown): boolean {\n  return JSON.stringify(left) === JSON.stringify(right);\n}\n\nfunction mergeRecord(\n  target: Record<string, unknown> | undefined,\n  source: Record<string, unknown> | undefined,\n  policy: OpenApiMergeConflictPolicy,\n  section: string,\n): Record<string, unknown> | undefined {\n  if (!source) return target;\n  const merged: Record<string, unknown> = { ...(target ?? {}) };\n\n  for (const [key, value] of Object.entries(source)) {\n    if (!(key in merged)) {\n      merged[key] = value;\n      continue;\n    }\n    if (sameValue(merged[key], value)) continue;\n    if (policy === \"keep\") continue;\n    if (policy === \"overwrite\") {\n      merged[key] = value;\n      continue;\n    }\n    throw new Error(`Conflitto OpenAPI in ${section}.${key}.`);\n  }\n\n  return merged;\n}\n\nfunction mergeTags(\n  target: unknown,\n  source: unknown,\n  policy: OpenApiMergeConflictPolicy,\n): unknown {\n  if (!Array.isArray(target) || !Array.isArray(source)) return target ?? source;\n  const merged = [...target];\n  for (const tag of source) {\n    if (!isRecord(tag) || typeof tag.name !== \"string\") {\n      merged.push(tag);\n      continue;\n    }\n    const existingIndex = merged.findIndex(\n      (candidate) => isRecord(candidate) && candidate.name === tag.name,\n    );\n    if (existingIndex < 0) {\n      merged.push(tag);\n      continue;\n    }\n    const existing = merged[existingIndex];\n    if (sameValue(existing, tag)) continue;\n    if (policy === \"keep\") continue;\n    if (policy === \"overwrite\") {\n      merged[existingIndex] = tag;\n      continue;\n    }\n    throw new Error(`Conflitto OpenAPI nel tag \"${tag.name}\".`);\n  }\n  return merged;\n}\n\nfunction mergeServers(\n  target: unknown,\n  source: unknown,\n  policy: OpenApiMergeConflictPolicy,\n): unknown {\n  if (!Array.isArray(target) || !Array.isArray(source)) return target ?? source;\n  const merged = [...target];\n  for (const server of source) {\n    if (!isRecord(server) || typeof server.url !== \"string\") {\n      merged.push(server);\n      continue;\n    }\n    const existingIndex = merged.findIndex(\n      (candidate) => isRecord(candidate) && candidate.url === server.url,\n    );\n    if (existingIndex < 0) {\n      merged.push(server);\n      continue;\n    }\n    const existing = merged[existingIndex];\n    if (sameValue(existing, server)) continue;\n    if (policy === \"keep\") continue;\n    if (policy === \"overwrite\") {\n      merged[existingIndex] = server;\n      continue;\n    }\n    throw new Error(`Conflitto OpenAPI nel server \"${server.url}\".`);\n  }\n  return merged;\n}\n\n/**\n * Unisce il documento Accessi nel documento OpenAPI dell'host.\n *\n * Per default un conflitto su path, schema o security scheme produce errore:\n * e meglio accorgersi subito di due contratti incompatibili. Usare\n * `conflict: \"overwrite\"` solo quando il documento host deve vincere.\n */\nexport function mergeOpenApiDocuments(\n  target: OpenAPIObject,\n  source: OpenAPIObject,\n  options: MergeOpenApiOptions = {},\n): OpenAPIObject {\n  if (!target || !source) {\n    throw new Error(\"mergeOpenApiDocuments richiede due documenti OpenAPI validi.\");\n  }\n\n  const policy = options.conflict ?? \"error\";\n  const result = cloneDocument(target);\n  const sourceDocument = source as unknown as Record<string, unknown>;\n\n  result.paths = mergeRecord(\n    isRecord(result.paths) ? result.paths : undefined,\n    isRecord(sourceDocument.paths) ? sourceDocument.paths : undefined,\n    policy,\n    \"paths\",\n  );\n\n  const targetComponents = isRecord(result.components) ? result.components : {};\n  const sourceComponents = isRecord(sourceDocument.components) ? sourceDocument.components : {};\n  const componentSections = new Set([\n    ...Object.keys(targetComponents),\n    ...Object.keys(sourceComponents),\n  ]);\n  const mergedComponents: Record<string, unknown> = { ...targetComponents };\n  for (const section of componentSections) {\n    mergedComponents[section] = mergeRecord(\n      isRecord(targetComponents[section]) ? targetComponents[section] : undefined,\n      isRecord(sourceComponents[section]) ? sourceComponents[section] : undefined,\n      policy,\n      `components.${section}`,\n    );\n  }\n  result.components = mergedComponents;\n\n  result.tags = mergeTags(result.tags, sourceDocument.tags, policy);\n  result.servers = mergeServers(result.servers, sourceDocument.servers, policy);\n\n  return result as unknown as OpenAPIObject;\n}\n"]}

package/dist/scripts/generateAccessiOpenApi.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/scripts/generateAccessiOpenApi.js

@@ -0,0 +1,57 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const swagger_1 = require("@nestjs/swagger");
+const core_1 = require("@nestjs/core");
+const platform_express_1 = require("@nestjs/platform-express");
+const express_1 = __importDefault(require("express"));
+const promises_1 = require("fs/promises");
+const path_1 = require("path");
+const AccessiModule_1 = require("../accessi-module/AccessiModule");
+/**
+ * Esporta il contratto OpenAPI dai decorator Nest senza avviare il database.
+ * Il file risultante e l'unica sorgente per il client Orval della console.
+ */
+function generateAccessiOpenApi() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const options = {
+            databaseOptions: { host: 'openapi-generation', database: 'not-used', user: 'not-used' },
+            confirmationEmailUrl: 'https://invalid.local',
+            confirmationEmailReturnUrl: 'https://invalid.local',
+            encryptionKey: 'openapi-generation-only',
+            mockDemoUser: false,
+            autoUpdateDatabase: false,
+            legacyPasswordMigrationOnStartup: false,
+            jwtOptions: { secret: 'openapi-generation-only', expiresIn: '1h' },
+            emailOptions: {
+                host: 'localhost', port: 25, secure: false, requireTLS: false,
+                tls: { rejectUnauthorized: true }, from: 'openapi@invalid.local', auth: { user: '', pass: '' },
+            },
+            federatedAuthentication: { enabled: false },
+        };
+        const app = yield core_1.NestFactory.create(AccessiModule_1.AccessiModule.forRoot(options), new platform_express_1.ExpressAdapter((0, express_1.default)()), { logger: false });
+        app.setGlobalPrefix('api');
+        // Decorator inspection requires no lifecycle hooks or database connection.
+        const document = swagger_1.SwaggerModule.createDocument(app, new swagger_1.DocumentBuilder().setTitle('Accessi API').setVersion('1.0').addBearerAuth().build());
+        const outputDirectory = (0, path_1.join)(process.cwd(), 'src', 'accessi-module', 'openapi');
+        yield (0, promises_1.mkdir)(outputDirectory, { recursive: true });
+        yield (0, promises_1.writeFile)((0, path_1.join)(outputDirectory, 'accessi.openapi.json'), `${JSON.stringify(document, null, 2)}\n`);
+        yield app.close();
+    });
+}
+generateAccessiOpenApi().catch((error) => {
+    console.error(error);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=generateAccessiOpenApi.js.map