import axios from "axios"; import { HrmsEmployee, Paging, User, UserRefreshToken, UserRole } from "entity"; import exceljs from "exceljs"; import { NextFunction, Response } from "express"; import { Request } from "express-jwt"; import Joi from "joi"; import { ILogObj, Logger } from "tslog"; import CommonHelper from "../helpers/common"; import { ReturnHelper } from "../helpers/express/return"; import { OrmHelper } from "../helpers/orm"; import { Language } from "../langs/lang"; import fs from "fs"; import path from "path"; import fileUpload from "express-fileupload"; import { v4 as uuidv4 } from 'uuid'; import config from '../../config/stag.json'; import { profile } from "console"; const log: Logger = new Logger({ name: "[UserController]", type: "pretty", }); export class UserController { static async list(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.parameters['filter'] = { description: 'Filter with 2 format : ', in: 'query', type: 'string' } #swagger.parameters['limit'] = { in: 'query', required: true, type: 'number' } #swagger.parameters['page'] = { in: 'query', required: true, type: 'number' } #swagger.parameters['with_deleted'] = { in: 'query', required: true, type: 'boolean' } #swagger.parameters['order_field'] = { in: 'query', required: true, type: 'string' } #swagger.parameters['order_direction'] = { in: 'query', required: true, schema: { '@enum': ['ASC', 'DESC'] } } */ try { const schema = Joi.object().keys({ filter: Joi.any().allow("").optional().label("Filter"), page: Joi.number().required().min(1).label("Page"), limit: Joi.number().required().min(1).label("Limit"), with_deleted: Joi.bool().required().label("With Deleted"), order_field: Joi.string().required().label("Order Field"), order_direction: Joi.string().allow("asc", "desc").required().label("Order Direction"), }); const param: Paging = await schema.validateAsync(req.query); const userRepository = OrmHelper.DB.getRepository(User); const offset = (param.page - 1) * param.limit; const { whereAttr, whereVal } = CommonHelper.handleFilter({ filter: param.filter, col_any_eq: ["email"], col_any_like: ["User.name", "User.username"], }); const res_count = userRepository.createQueryBuilder().where(whereAttr, whereVal); const subquery = userRepository .createQueryBuilder("User") .select("User.id", "id") .where(whereAttr, whereVal) .orderBy("User." + param.order_field, param.order_direction) .offset(offset) .limit(param.limit); const res_list = userRepository .createQueryBuilder("User") .innerJoin("(" + subquery.getQuery() + ")", "sub", "User.id = sub.id") .setParameters(subquery.getParameters()) .leftJoinAndSelect("User.roles", "roles") .leftJoinAndSelect("roles.application", "application") .orderBy("User." + param.order_field, param.order_direction); // const subquery = userRepository // .createQueryBuilder() // .select("User.id") // .where(whereAttr, whereVal) // .orderBy("User." + param.order_field, param.order_direction) // .offset(offset) // .limit(param.limit); // const res_list = userRepository // .createQueryBuilder() // .where(`User.id IN (${subquery.getQuery()})`) // .setParameters(subquery.getParameters()) // .leftJoinAndSelect("User.roles", "roles") // .leftJoinAndSelect("roles.application", "application"); // const res_list = userRepository.createQueryBuilder() // .where(whereAttr, whereVal) // .leftJoinAndSelect("User.roles", "roles") // .leftJoinAndSelect("roles.application", "application") // .orderBy(param.order_field, param.order_direction) // .offset(offset) // .limit(param.limit); if (param.with_deleted) { res_count.withDeleted(); res_list.withDeleted(); } const current_page = param.page; const total_count_data = await res_count.getCount(); const list_data = await res_list.getMany(); const count_data = CommonHelper.countObject(list_data); // ← Tambahkan mapping ini const mapped_data = list_data.map((user) => ({ ...user, profile_picture: user.profile_picture ?? null, file_profile_picture: user.profile_picture ? `${config.server.host_swagger}uploads/doctor-picture/${user.profile_picture}` : null, })); return ReturnHelper.successResponselist( res, 200, Language.lang.success_view, count_data, current_page, total_count_data, mapped_data, ); } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 400, 401, Language.lang.failed_view, err.message); } } static async export(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.parameters['filter'] = { description: 'Filter with 2 format :
  • Simple format use text plaint will filter eq:email or like %name% or like %username%
  • Advance format using field existing {status:\'Y\', any:\'SAME AS PLAINT LOGIC\', etc...}
', in: 'query', type: 'string' } #swagger.parameters['filter'] = { in: 'query', type: 'string' } #swagger.parameters['order_field'] = { in: 'query', required: true, type: 'string' } #swagger.parameters['order_direction'] = { in: 'query', required: true, schema: { '@enum': ['ASC', 'DESC'] } } */ try { const schema = Joi.object().keys({ filter: Joi.array().allow("").optional().label("Filter"), order_field: Joi.string().required().label("Order Field"), order_direction: Joi.string().allow("asc", "desc").required().label("Order Direction"), }); const param: Paging = await schema.validateAsync(req.query); const userRepository = OrmHelper.DB.getRepository(User); const { whereAttr, whereVal } = CommonHelper.handleFilter({ filter: param.filter, col_any_eq: ["email"], col_any_like: ["name", "username"], }); const filename = "user.xlsx"; res.setHeader( "Content-Type", "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", ); res.setHeader("Content-Disposition", "attachment; filename=" + filename); const workbook = new exceljs.stream.xlsx.WorkbookWriter({ stream: res }); const sheet = workbook.addWorksheet("Data"); sheet.columns = [ { header: "ID", key: "id", width: 10 }, { header: "Name", key: "name", width: 20 }, { header: "Email", key: "email", width: 20 }, { header: "Username", key: "username", width: 20 }, { header: "Status", key: "status", width: 10 }, { header: "Created At", key: "created_at", width: 15 }, { header: "Roles", key: "role_name", width: 15 }, { header: "Application", key: "application", width: 15 }, ]; const limit = 50; const fetchAndWrite = async (page: any) => { const offset = (page - 1) * limit; const data = await userRepository .createQueryBuilder() .where(whereAttr, whereVal) .select([ "User.id as id", "User.name as name", "User.email as email", "User.username as username", "User.status as status", "User.created_at as created_at", "roles.name as role_name", "application.id as application", ]) .leftJoin("User.roles", "roles") .leftJoin("roles.application", "application") .orderBy(param.order_field, param.order_direction) .offset(offset) .limit(limit) .getRawMany(); data.forEach((item: any) => sheet.addRow(item).commit()); if (CommonHelper.countObject(data) == limit) { fetchAndWrite(page + 1); } else { sheet.commit(); workbook.commit(); } }; fetchAndWrite(1); } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 400, 401, Language.lang.failed_view, err.message); } } static async create(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.requestBody = { required: true, content: { "application/json": { schema: { $ref: "#/components/schemas/user" } } } } */ try { const schema = Joi.object().keys({ email: Joi.string().email().max(64).required().label("Email"), username: Joi.string().max(64).required().label("Username"), password: Joi.string() .pattern(new RegExp("^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-]).{8,}$")) .min(8) .required() .label("Password"), retype_password: Joi.ref("password"), name: Joi.string().max(64).required().label("Name"), employee_id: Joi.string().uuid().optional().allow("").label("Employee ID"), status: Joi.string().required().label("Status"), }); const param: any = await schema.validateAsync(req.body); const data = new User(); data.name = param.name; data.username = param.username; data.password = param.password; data.email = param.email; data.status = param.status; if (param.employee_id && param.employee_id != "") { const employee = await OrmHelper.DB.manager .getRepository(HrmsEmployee) .findOneByOrFail({ id: param.employee_id }); data.employee = employee; } else { data.employee = null; } data.hashPassword(); data.created_by = req.auth?.data.name; data.created_at = new Date(); await OrmHelper.DB.manager.save(data); return ReturnHelper.successResponseAny(res, 200, Language.lang.success_insert, data); } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 401, Language.lang.failed_insert, err.message); } } static async addRole(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.parameters['id'] = { in: 'path', description: 'User ID.', required: true, type: 'string' } #swagger.parameters['id_role'] = { in: 'path', description: 'User Role ID.', required: true, type: 'string' } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), id_role: Joi.string().uuid().required().label("ID"), }); const param: { id: string; id_role: string } = await schema.validateAsync(req.params); const userRepository = OrmHelper.DB.getRepository(User); const repo_role = OrmHelper.DB.getRepository(UserRole); const data = await userRepository.findOne({ relations: ["roles", "roles.application"], where: { id: param.id }, }); if (data != null) { // const new_role = await repo_role.findOneBy({ id: param.id_role }); const new_role = await repo_role.findOne({ relations: { application: true, }, where: { id: param.id_role }, }); if (data.roles) { for (let r of data.roles) { if (r.id == param.id_role) { //already added return ReturnHelper.errorResponse( res, 409, 401, Language.lang.failed_insert + ", roles already exists ", "", ); } if (r.application.id == new_role?.application.id) { return ReturnHelper.errorResponse( res, 409, 402, Language.lang.failed_insert + ", roles in this application already exists ", "", ); } } } if (!data.roles) { data.roles = []; } data.roles.push(new_role); await userRepository.save(data); return ReturnHelper.successResponseAny(res, 200, Language.lang.success_update, data); } else { return ReturnHelper.errorResponse(res, 404, 403, Language.lang.failed_not_found, ""); } } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 404, Language.lang.failed_update, err.message); } } static async deleteRole(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.parameters['id'] = { in: 'path', description: 'User ID.', required: true, type: 'string' } #swagger.parameters['id_role'] = { in: 'path', description: 'User Role ID.', required: true, type: 'string' } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), id_role: Joi.string().uuid().required().label("ID"), }); const param: { id: string; id_role: string } = await schema.validateAsync(req.params); const userRepository = OrmHelper.DB.getRepository(User); const data = await userRepository.findOne({ relations: { roles: true, }, where: { id: param.id }, }); if (data != null && data.roles) { let found = false; let new_roles: UserRole[] = []; for (let r of data.roles) { if (r.id != param.id_role) { new_roles.push(r); } else if (r.id == param.id_role) { found = true; } } data.roles = new_roles; if (found) { await userRepository.save(data); return ReturnHelper.successResponseAny(res, 200, Language.lang.success_delete, data); } else { return ReturnHelper.errorResponse( res, 404, 401, Language.lang.failed_not_found + ", role not found", "", ); } } else { return ReturnHelper.errorResponse(res, 404, 402, Language.lang.failed_not_found, ""); } } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 403, Language.lang.failed_delete, err.message); } } static async updateProfile(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.requestBody = { required: true, description: "This action will effect to user related token JWT logged", content: { "application/json": { schema: { $ref: "#/components/schemas/user_profile" } } } } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), email: Joi.string().email().max(64).required().label("Email"), username: Joi.string().max(64).required().label("Username"), name: Joi.string().max(64).required().label("Name"), }); req.body.id = req.auth?.data.id; const param: User = await schema.validateAsync(req.body); const userRepository = OrmHelper.DB.getRepository(User); const data = await userRepository.findOneBy({ id: param.id }); if (data != null) { data.name = param.name; data.username = param.username; data.email = param.email; data.updated_by = req.auth?.data.name; await userRepository.save(data); return ReturnHelper.successResponseAny(res, 200, Language.lang.success_update, data); } else { return ReturnHelper.errorResponse(res, 404, 401, Language.lang.failed_not_found, ""); } } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 402, Language.lang.failed_update, err.message); } } static async updatePassword(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.requestBody = { required: true, description: "This action will effect to user related token JWT logged", content: { "application/json": { schema: { $ref: "#/components/schemas/user_password" } } } } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), password: Joi.string() .pattern(new RegExp("^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-]).{8,}$")) .min(8) .required() .label("Password"), retype_password: Joi.ref("password"), }); req.body.id = req.auth?.data.id; const param: User = await schema.validateAsync(req.body); const userRepository = OrmHelper.DB.getRepository(User); const data = await userRepository.findOneBy({ id: param.id }); if (data != null) { if (param.password) { data.password = param.password; data.hashPassword(); } await userRepository.save(data); return ReturnHelper.successResponseAny(res, 200, Language.lang.success_update, data); } else { return ReturnHelper.errorResponse(res, 404, 401, Language.lang.failed_not_found, ""); } } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 402, Language.lang.failed_update, err.message); } } static async uploadFile( files: fileUpload.FileArray | null | undefined, fieldName: string, folderPath: string ): Promise { if (!files || !files[fieldName]) return null; const file = files[fieldName] as fileUpload.UploadedFile; const maxSize = 1 * 1024 * 1024; // 1MB if (file.size > maxSize) { throw { message: `${fieldName}: File size exceeds 1MB limit` }; } const allowedMimes = ['image/jpeg', 'image/jpg', 'image/png', 'image/webp']; if (!allowedMimes.includes(file.mimetype)) { throw { message: `${fieldName}: Invalid file type. Only JPG, PNG, and WEBP are allowed` }; } const ext = file.name.split('.'); const name = uuidv4() + '.' + ext[ext.length - 1]; const file_path = path.join(folderPath, name); if (!fs.existsSync(folderPath)) { fs.mkdirSync(folderPath, { recursive: true }); } await file.mv(file_path); log.info(`File uploaded successfully: ${file_path}`); return name; } static async deleteFile(filePath: string): Promise { try { if (fs.existsSync(filePath)) { fs.unlinkSync(filePath); log.info(`File deleted successfully: ${filePath}`); } } catch (e) { log.error(`Failed to delete file: ${filePath}`, e); } } static async update(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.consumes = ['multipart/form-data'] #swagger.parameters['id'] = { in: 'path', description: 'User ID.', required: true, type: 'string' } #swagger.requestBody = { required: true, content: { "multipart/form-data": { schema: { type: "object", properties: { email: { type: "string", description: "Email" }, username: { type: "string", description: "Username" }, password: { type: "string", description: "Password" }, name: { type: "string", description: "name" }, status: { type: "string", description: "Status" }, profile_picture: { type: "string", format: "binary", description: "Image file (max 1MB, jpg/png/webp)" } } } } } } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), email: Joi.string().email().max(64).required().label("Email"), username: Joi.string().max(64).required().label("Username"), password: Joi.string().allow("").optional().label("Password"), name: Joi.string().max(64).required().label("Name"), employee_id: Joi.string().uuid().optional().allow("").label("Employee ID"), status: Joi.string().required().label("Status"), profile_picture: Joi.string().allow('', null).optional().label("Profile Picture"), }); req.body.id = req.params["id"]; const param: any = await schema.validateAsync(req.body); const userRepository = OrmHelper.DB.getRepository(User); const data = await userRepository.findOneBy({ id: param.id }); if (data != null) { const doctorprofile = await UserController.uploadFile(req.files, 'profile_picture', 'uploads/doctor-picture'); if (doctorprofile) { if (data.profile_picture) { const oldFilePath = path.join('uploads/doctor-picture', data.profile_picture); await UserController.deleteFile(oldFilePath); } data.profile_picture = doctorprofile; } data.name = param.name; data.username = param.username; data.email = param.email; data.status = param.status; data.updated_by = req.auth?.data.name; data.updated_at = new Date(); // if (param.employee_id && param.employee_id != "") { // const employee = await OrmHelper.DB.manager // .getRepository(HrmsEmployee) // .findOneByOrFail({id: param.employee_id}); // data.employee = employee; // } else { // data.employee = null; // } if (param.password) { data.password = param.password; data.hashPassword(); } await userRepository.save(data); return ReturnHelper.successResponseAny(res, 200, Language.lang.success_update, data); } else { return ReturnHelper.errorResponse(res, 404, 401, Language.lang.failed_not_found, ""); } } catch (e: unknown) { // ← Ganti dari log.error(e) menjadi ini if (e instanceof Error) { log.error(e.message, e.stack); } else { log.error(JSON.stringify(e)); } const err = e as Error; return ReturnHelper.errorResponse(res, 500, 402, Language.lang.failed_update, err.message); } } static async updateUserSignature(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.consumes = ['multipart/form-data'] #swagger.parameters['id'] = { in: 'path', description: 'User ID.', required: true, type: 'string' } #swagger.requestBody = { required: true, content: { "multipart/form-data": { schema: { type: "object", required: ["user_signature"], properties: { user_signature: { type: "string", format: "binary", description: "Image file (max 1MB, jpg/png/webp)" } } } } } } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), user_signature: Joi.string().allow('', null).optional().label("User Signature"), }); req.body.id = req.params["id"]; const param: any = await schema.validateAsync(req.body); const userRepository = OrmHelper.DB.getRepository(User); const data = await userRepository.findOneBy({ id: param.id }); if (data != null) { const usersignature = await UserController.uploadFile(req.files, 'user_signature', 'uploads/user-signature'); if (usersignature) { // ← Hapus signature lama jika ada if (data.signature) { const oldFilePath = path.join('uploads/user-signature', data.signature); await UserController.deleteFile(oldFilePath); } data.signature = usersignature; } // data.name = param.name; // data.username = param.username; // data.email = param.email; // data.status = param.status; // data.updated_by = req.auth?.data.name; // data.updated_at = new Date(); // if (param.employee_id && param.employee_id != "") { // const employee = await OrmHelper.DB.manager // .getRepository(HrmsEmployee) // .findOneByOrFail({id: param.employee_id}); // data.employee = employee; // } else { // data.employee = null; // } // if (param.password) { // data.password = param.password; // data.hashPassword(); // } await userRepository.save(data); return ReturnHelper.successResponseAny(res, 200, Language.lang.success_update, data); } else { return ReturnHelper.errorResponse(res, 404, 401, Language.lang.failed_not_found, ""); } } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 402, Language.lang.failed_update, err.message); } } static async delete(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.parameters['id'] = { in: 'path', description: 'User ID.', required: true, type: 'string' } #swagger.parameters['hard'] = { in: 'path', description: 'Is Hard Delete', required: false, type: 'boolean' } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), hard: Joi.bool().optional().allow("").label("Is hard delete?"), }); const param: { id: string; hard: boolean } = await schema.validateAsync(req.params); const userRepository = OrmHelper.DB.getRepository(User); const userRTRepository = OrmHelper.DB.getRepository(UserRefreshToken); const affected = ( !param.hard ? await userRepository.softDelete({ id: param.id }) : await userRepository.delete({ id: param.id }) ).affected ?? 0; const affected_rt = ( !param.hard ? await userRTRepository.softDelete({ id_user: param.id }) : await userRTRepository.delete({ id_user: param.id }) ).affected; if (affected > 0) { return ReturnHelper.successResponseAny(res, 200, Language.lang.success_delete, {}); } else { return ReturnHelper.errorResponse(res, 404, 401, Language.lang.failed_not_found, ""); } } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 402, Language.lang.failed_delete, err.message); } } static async detail(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.parameters['id'] = { in: 'path', description: 'User ID.', required: true, type: 'string' } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), }); const param: User = await schema.validateAsync(req.params); const userRepository = OrmHelper.DB.getRepository(User); const detail = await userRepository.findOne({ relations: [ "roles", "roles.application", "employee", "employee.department", "employee.position", "employee.shift", "employee.nationality", "employee.aldeia", "employee.suco", "employee.administrativu", "employee.munisipo", ], where: { id: param.id }, }); if (detail != null) { const data = { ...detail, signature: detail.signature ?? null, file_signature: detail.signature ? `${config.server.host_swagger}uploads/user-signature/${detail.signature}` : null, profile: detail.profile_picture ?? null, profile_picture: detail.profile_picture ? `${config.server.host_swagger}uploads/doctor-profile/${detail.profile_picture}` : null, }; return ReturnHelper.successResponseAny(res, 200, Language.lang.success_view, data); } else { return ReturnHelper.errorResponse(res, 404, 401, Language.lang.failed_not_found, ""); } } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 402, Language.lang.failed_view, err.message); } } static async restore(req: Request, res: Response, next: NextFunction): Promise { /* #swagger.tags = ['User'] #swagger.security = [{ "bearerAuth": [] }] #swagger.parameters['id'] = { in: 'path', description: 'User ID.', required: true, type: 'string' } */ try { const schema = Joi.object().keys({ id: Joi.string().uuid().required().label("ID"), }); const param: User = await schema.validateAsync(req.params); const userRepository = OrmHelper.DB.getRepository(User); const userRTRepository = OrmHelper.DB.getRepository(UserRefreshToken); const affected = (await userRepository.restore({ id: param.id })).affected ?? 0; const affected_rt = (await userRTRepository.restore({ id_user: param.id })).affected; if (affected > 0) { return ReturnHelper.successResponseAny(res, 200, Language.lang.success_restore, {}); } else { return ReturnHelper.errorResponse(res, 404, 401, Language.lang.failed_not_found, ""); } } catch (e: unknown) { log.error(e); const err = e as Error; return ReturnHelper.errorResponse(res, 500, 402, Language.lang.failed_restore, err.message); } } } function moment() { throw new Error("Function not implemented."); }