Lecomte-Adrien-The-git-url/src/modules/user/user.controller.ts

import {
  Body,
  Controller,
  Delete,
  ForbiddenException,
  Get,
  NotFoundException,
  Param,
  ParseIntPipe,
  Post,
  Put,
  Query,
  UseGuards,
} from '@nestjs/common';
import { User } from './user.entity';
import { UserService } from './user.service';
import {
  ApiBearerAuth,
  ApiImplicitParam,
  ApiResponse,
  ApiUseTags,
} from '@nestjs/swagger';
import {
  UserDtoRegister,
  UserDtoUpdateInfo,
  UserDtoUpdatePassword,
} from './user.dto';
import { AuthGuard } from '@nestjs/passport';
import { Roles } from '../../decorators/roles.decorator';
import { ADMIN_ROLE } from '../roles/roles.constants';
import { CurrentUser } from '../../decorators/currentUser.decorator';

@ApiUseTags('User')
@Controller()
@ApiBearerAuth()
export class UserController {
  constructor(private readonly userService: UserService) {}

  @Get()
  @ApiResponse({
    status: 200,
    description: 'Get a list of all User.',
    type: User,
    isArray: true,
  })
  @Roles(ADMIN_ROLE)
  getAll(): Promise<User[]> {
    return this.userService.getAll();
  }

  @Post()
  @ApiResponse({
    status: 201,
    description: 'The User has been created.',
    type: User,
  })
  @Roles(ADMIN_ROLE)
  saveNew(@Body() userDto: UserDtoRegister): Promise<User> {
    return this.userService.saveNew(userDto);
  }

  @Get(':id')
  @ApiResponse({
    status: 200,
    description: 'The User with the matching id',
    type: User,
  })
  @ApiResponse({ status: 404, description: 'Not found.' })
  async findOne(
    @Param('id', new ParseIntPipe()) id: number,
    @CurrentUser() user: User,
  ): Promise<User> {
    if (!user.isAdmin() && user.id !== id) {
      throw new ForbiddenException();
    }
    return (await this.userService.getOneById(id)).orElseThrow(
      () => new NotFoundException(),
    );
  }

  @Put(':id')
  @ApiResponse({
    status: 200,
    description: 'The updated User with the matching id',
    type: User,
  })
  @ApiResponse({ status: 404, description: 'Not found.' })
  async updateOne(
    @Param('id', new ParseIntPipe()) id: number,
    @Body() userDto: UserDtoUpdateInfo,
    @CurrentUser() user: User,
  ): Promise<User> {
    if (!user.isAdmin() && user.id !== id) {
      throw new ForbiddenException();
    }
    return this.userService.update(id, userDto);
  }

  @Put(':id/password')
  @ApiResponse({
    status: 200,
    description: 'The updated User with the matching id',
    type: User,
  })
  @ApiResponse({ status: 404, description: 'Not found.' })
  async updateOnePassword(
    @Param('id', new ParseIntPipe()) id: number,
    @Body() userDto: UserDtoUpdatePassword,
    @CurrentUser() user: User,
  ): Promise<User> {
    if (!user.isAdmin() && user.id !== id) {
      throw new ForbiddenException();
    }
    return this.userService.updatePassword(id, userDto);
  }

  @Delete(':id')
  @ApiResponse({
    status: 200,
    description: 'The User with the matching id was deleted',
  })
  @ApiResponse({ status: 404, description: 'Not found.' })
  async deleteOne(
    @Param('id', new ParseIntPipe()) id: number,
    @CurrentUser() user: User,
  ): Promise<void> {
    if (!user.isAdmin() && user.id !== id) {
      throw new ForbiddenException();
    }
    await this.userService.deleteById(id);
  }
}