linusandClaude Sonnet 5
d48c07b0e4
Per the updated plan, Gemeinde Teamer are no longer Authentik-backed; they
are local accounts a Gemeinde Verantwortliche/r provisions per KC.
Schema:
- User.authentikSub now nullable; add passwordHash + kcId (cascade from Kc)
so one User model covers Authentik members and local Teamer.
- new TeamerInvite model: shareable group link (email null, maxUses null)
or personal invite (email pinned, single use), with expiry + revoke.
- sync log now also replicates User / Membership / TeamerInvite.
Auth:
- TeamAuthService: bcrypt password login (POST /auth/team-login) and invite
redemption (POST /auth/teamer/register) issuing a JWT signed with
TEAM_JWT_SECRET, payload typ:"team".
- TeamJwtStrategy (AuthGuard('team')) resolves it to the same
AuthenticatedUser shape as AuthentikStrategy.
- TokenVerificationService.verifyEither() also accepts team tokens (WS).
- files + chat read endpoints accept 'team' tokens; Teamer see non-Konfi
files and can use chat / start DMs.
Teamer admin (teamer/ module, under /gemeinde/:gemeindeId):
- POST/GET teamer, DELETE teamer/:userId
- POST/GET teamer-invites, DELETE teamer-invites/:inviteId
- LT may manage any Gemeinde; a Verantwortliche/r only their own
(checked in TeamerService, since RolesGuard only scopes by kcId).
Tests: TeamAuthService + TeamerService specs added (Prisma/Sync mocked),
npm test green at 32. Docs (plan + backend README) updated.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
97 lines
2.7 KiB
JSON
97 lines
2.7 KiB
JSON
{
|
|
"name": "backend",
|
|
"version": "0.0.1",
|
|
"description": "KC-App backend (NestJS)",
|
|
"author": "",
|
|
"private": true,
|
|
"license": "UNLICENSED",
|
|
"scripts": {
|
|
"build": "nest build",
|
|
"format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
|
|
"start": "nest start",
|
|
"start:dev": "nest start --watch",
|
|
"start:debug": "nest start --debug --watch",
|
|
"start:prod": "node dist/main",
|
|
"lint": "eslint \"{src,test}/**/*.ts\" --fix",
|
|
"test": "jest",
|
|
"test:watch": "jest --watch",
|
|
"test:cov": "jest --coverage",
|
|
"test:e2e": "jest --config ./test/jest-e2e.json",
|
|
"prisma:generate": "prisma generate",
|
|
"prisma:migrate": "prisma migrate dev"
|
|
},
|
|
"dependencies": {
|
|
"@aws-sdk/client-s3": "^3.679.0",
|
|
"@nestjs/common": "^10.4.15",
|
|
"@nestjs/config": "^3.3.0",
|
|
"@nestjs/core": "^10.4.15",
|
|
"@nestjs/jwt": "^10.2.0",
|
|
"@nestjs/passport": "^10.0.3",
|
|
"@nestjs/platform-express": "^10.4.15",
|
|
"@nestjs/platform-ws": "^10.4.15",
|
|
"@nestjs/schedule": "^4.1.1",
|
|
"@nestjs/serve-static": "^4.0.2",
|
|
"@nestjs/websockets": "^10.4.15",
|
|
"@prisma/client": "^5.22.0",
|
|
"bcryptjs": "^3.0.3",
|
|
"class-transformer": "^0.5.1",
|
|
"class-validator": "^0.14.1",
|
|
"jsonwebtoken": "^9.0.2",
|
|
"jwks-rsa": "^3.1.0",
|
|
"multer": "^2.0.1",
|
|
"passport": "^0.7.0",
|
|
"passport-jwt": "^4.0.1",
|
|
"reflect-metadata": "^0.2.2",
|
|
"rxjs": "^7.8.1",
|
|
"webdav": "^5.7.1",
|
|
"ws": "^8.18.0"
|
|
},
|
|
"devDependencies": {
|
|
"@nestjs/cli": "^10.4.9",
|
|
"@nestjs/schematics": "^10.2.3",
|
|
"@nestjs/testing": "^10.4.15",
|
|
"@types/bcryptjs": "^2.4.6",
|
|
"@types/express": "^4.17.21",
|
|
"@types/jest": "^29.5.14",
|
|
"@types/jsonwebtoken": "^9.0.7",
|
|
"@types/multer": "^1.4.12",
|
|
"@types/node": "^20.17.9",
|
|
"@types/passport": "^1.0.17",
|
|
"@types/passport-jwt": "^4.0.1",
|
|
"@types/supertest": "^6.0.2",
|
|
"@types/ws": "^8.5.13",
|
|
"@typescript-eslint/eslint-plugin": "^7.18.0",
|
|
"@typescript-eslint/parser": "^7.18.0",
|
|
"eslint": "^8.57.1",
|
|
"eslint-config-prettier": "^9.1.0",
|
|
"eslint-plugin-prettier": "^5.2.1",
|
|
"jest": "^29.7.0",
|
|
"prettier": "^3.4.2",
|
|
"prisma": "^5.22.0",
|
|
"source-map-support": "^0.5.21",
|
|
"supertest": "^6.3.4",
|
|
"ts-jest": "^29.2.5",
|
|
"ts-loader": "^9.5.1",
|
|
"ts-node": "^10.9.2",
|
|
"tsconfig-paths": "^4.2.0",
|
|
"typescript": "^5.6.3"
|
|
},
|
|
"jest": {
|
|
"moduleFileExtensions": [
|
|
"js",
|
|
"json",
|
|
"ts"
|
|
],
|
|
"rootDir": "src",
|
|
"testRegex": ".*\\.spec\\.ts$",
|
|
"transform": {
|
|
"^.+\\.(t|j)s$": "ts-jest"
|
|
},
|
|
"collectCoverageFrom": [
|
|
"**/*.(t|j)s"
|
|
],
|
|
"coverageDirectory": "../coverage",
|
|
"testEnvironment": "node"
|
|
}
|
|
}
|