Sathira Sri Sathara
9d3d431416
- Added account types and privileged account types constants. - Created admin user controller for updating user security fields. - Developed role assignment controller for managing user roles. - Implemented validation middleware for request schemas. - Defined user role and auth session models for database interactions. - Created services for authentication, email notifications, and OTP handling. - Developed OAuth service for Google and Apple authentication. - Added JWT utility functions for token generation and verification. - Implemented comprehensive tests for authentication, session management, and password policies. - Created migration for updating user schema and adding new tables for auth sessions and user identities.
22 lines
1.2 KiB
JavaScript
22 lines
1.2 KiB
JavaScript
const db = require("../models");
|
|
const { clearPermissionCache } = require("../utils/cache.util");
|
|
const { logActivity } = require("../services/activity.service");
|
|
|
|
exports.assignRole = async (req, res, next) => {
|
|
try {
|
|
const [assignment] = await db.UserRole.findOrCreate({ where: { user_id: req.params.userId, role_id: req.params.roleId } });
|
|
await clearPermissionCache(req.params.userId);
|
|
await logActivity({ user: req.user, description: `Role ${req.params.roleId} assigned to user ${req.params.userId}`, type: "ROLE_ASSIGNED", module: "Authorization" });
|
|
res.status(201).json({ success: true, data: { id: assignment.id, userId: assignment.user_id, roleId: assignment.role_id } });
|
|
} catch (error) { next(error); }
|
|
};
|
|
|
|
exports.removeRole = async (req, res, next) => {
|
|
try {
|
|
await db.UserRole.destroy({ where: { user_id: req.params.userId, role_id: req.params.roleId } });
|
|
await clearPermissionCache(req.params.userId);
|
|
await logActivity({ user: req.user, description: `Role ${req.params.roleId} removed from user ${req.params.userId}`, type: "ROLE_REMOVED", module: "Authorization" });
|
|
res.json({ success: true, message: "Role removed" });
|
|
} catch (error) { next(error); }
|
|
};
|