feat: add admin module

src/modules/admin/admin.module.ts

@@ -0,0 +1,9 @@
+import { Module } from '@nestjs/common';
+import { TestsController } from './controllers/tests/tests.controller';
+import { TestsModule } from '../tests/tests.module';
+
+@Module({
+  imports: [TestsModule],
+  controllers: [TestsController],
+})
+export class AdminModule {}

src/modules/admin/controllers/tests/tests.controller.ts

@@ -0,0 +1,21 @@
+import { Role } from '@/common/enums/roles.enum';
+import { Roles } from '@/modules/auth/decorators/roles.decorator';
+import { CreateTestDTO } from '@/modules/tests/dtos/create-test.dto';
+import { TestsService } from '@/modules/tests/providers/tests.service';
+import { Body, Controller, Post } from '@nestjs/common';
+
+@Controller('admin/tests')
+export class TestsController {
+  constructor(
+    /**
+     * Inject Tests Service
+     */
+    private readonly testsService: TestsService,
+  ) {}
+
+  @Post()
+  @Roles(Role.SUPERUSER, Role.ADMIN)
+  public async createTest(@Body() createTestDto: CreateTestDTO) {
+    return await this.testsService.createOne(createTestDto);
+  }
+}

src/modules/admin/http/tests/tests.post.http

@@ -0,0 +1,11 @@
+POST http://localhost:3000/admin/tests/
+Content-Type: application/json
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjEwLCJwaG9uZSI6IjA5MzMzMDI2MzYzIiwiaWF0IjoxNzgwMjIzNDExLCJleHAiOjE3ODAyMjcwMTEsImF1ZCI6ImxvY2FsaG9zdCIsImlzcyI6ImxvY2FsaG9zdCJ9.FNTIrk6FKO8P88yKnRCybZ6E5N3KlJaCHqZt5DMVgds
+
+{
+    "title": "Test Three",
+    "description": "Description Three",
+    "accessType": "free",
+    "price": "1234000",
+    "isActive": true
+}

src/modules/auth/constants/index.ts

@@ -1 +1,2 @@
 export const IS_PUBLIC_KEY = 'isPublic';
+export const ROLES_KEY = 'roles';

src/modules/auth/decorators/roles.decorator.ts

@@ -0,0 +1,5 @@
+import { Role } from '@/common/enums/roles.enum';
+import { SetMetadata } from '@nestjs/common';
+import { ROLES_KEY } from '../constants';
+
+export const Roles = (...roles: Array<Role>) => SetMetadata(ROLES_KEY, roles);

src/modules/auth/guards/global-auth.guard.ts

@@ -1,8 +1,14 @@
-import { IS_PUBLIC_KEY } from '../constants';
+import { Role } from '@/common/enums/roles.enum';
+import { IS_PUBLIC_KEY, ROLES_KEY } from '../constants';
 import { JwtAuthGuard } from './jwt-auth.guard';
-import { ExecutionContext, Injectable } from '@nestjs/common';
+import {
+  ExecutionContext,
+  ForbiddenException,
+  Injectable,
+} from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
-import { Observable } from 'rxjs';
+import type { Request } from 'express';
+import { User } from '@/modules/users/entities/user.entity';
 
 @Injectable()
 export class GlobalAuthGuard extends JwtAuthGuard {
@@ -15,9 +21,7 @@ export class GlobalAuthGuard extends JwtAuthGuard {
     super();
   }
 
-  canActivate(
-    context: ExecutionContext,
-  ): boolean | Promise<boolean> | Observable<boolean> {
+  async canActivate(context: ExecutionContext): Promise<boolean> {
     const isPublic = this.reflector.getAllAndOverride<boolean>(IS_PUBLIC_KEY, [
       context.getHandler(),
       context.getClass(),
@@ -27,6 +31,24 @@ export class GlobalAuthGuard extends JwtAuthGuard {
       return true;
     }
 
-    return super.canActivate(context);
+    await super.canActivate(context);
+
+    const requiredRoles = this.reflector.getAllAndOverride<Array<Role>>(
+      ROLES_KEY,
+      [context.getHandler(), context.getClass()],
+    );
+
+    if (requiredRoles && requiredRoles.length > 0) {
+      const request = context.switchToHttp().getRequest<Request>();
+      const user = request.user as User;
+
+      const hasRole = requiredRoles.includes(user.role);
+
+      if (!hasRole) {
+        throw new ForbiddenException('auth.errors.accessDenied');
+      }
+    }
+
+    return true;
   }
 }

src/modules/auth/http/login.post.endpoints.http

@@ -4,5 +4,5 @@ lang: fa
 
 {
     "phone": "09333026363",
-    "password": "rad1.3.5"
+    "password": "Password1@"
 }

src/modules/auth/http/refresh.post.endpoints.http

@@ -1,6 +1,11 @@
 POST http://localhost:3000/auth/refresh
 Content-Type: application/json
 
+// {
+//     "access": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjEwLCJwaG9uZSI6IjA5MzMzMDI2MzYzIiwiaWF0IjoxNzgwMjIzNDExLCJleHAiOjE3ODAyMjcwMTEsImF1ZCI6ImxvY2FsaG9zdCIsImlzcyI6ImxvY2FsaG9zdCJ9.FNTIrk6FKO8P88yKnRCybZ6E5N3KlJaCHqZt5DMVgds",
+//     "refresh": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjEwLCJqdGkiOiJmZDRjZGViYS1iMjUzLTQ5MjgtOGIxYS0yZTJhZDMwOTIzYzMiLCJpYXQiOjE3ODAyMjM0MTEsImV4cCI6MTc4MTA4NzQxMSwiYXVkIjoibG9jYWxob3N0IiwiaXNzIjoibG9jYWxob3N0In0.EO0OpjQix794Y7yVZ8pjLH5HngYfCTwu3lonEfXtLIQ"
+// }
+
 {
-    "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjksImp0aSI6IjljOTY5OWRhLWI0NTgtNDc0Ny04YTRkLTQyODQxMDllOTVkZCIsImlhdCI6MTc3ODMwNDMyNSwiZXhwIjoxNzc5MTY4MzI1LCJhdWQiOiJsb2NhbGhvc3QiLCJpc3MiOiJsb2NhbGhvc3QifQ.oiHuj3vJRQl7rG8H0fFEfU9cG91KrLGdXqNAYFGTXVA"
+    "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjEwLCJqdGkiOiIyZjQ1YzcxMi01ZGQzLTRhY2ItYjExYS04ZDA5YTc3YTVmYTciLCJpYXQiOjE3Nzk5NTY1OTksImV4cCI6MTc4MDgyMDU5OSwiYXVkIjoibG9jYWxob3N0IiwiaXNzIjoibG9jYWxob3N0In0.GX4kSCUCIvBVq9l4lQ8dkETvFZ1NwBIm9NGOIjBsQCc"
 }

src/modules/auth/http/verify-otp.post.endpoints.http

@@ -2,6 +2,6 @@ POST http://localhost:3000/auth/verify-otp
 Content-Type: application/json
 
 {
-    "phone": "09121111114",
-    "otp": "99696"
+    "phone": "09333026363",
+    "otp": "44875"
 }

src/modules/auth/providers/generate-token.provider.ts

@@ -8,6 +8,7 @@ import {
   RefreshTokenPayload,
 } from '../interfaces/jwt.interface';
 import { AuthRedisProvider } from './auth-redis.provider';
+import { AppResponse } from '@/common/responses';
 
 @Injectable()
 export class GenerateTokenProvider {
@@ -75,6 +76,6 @@ export class GenerateTokenProvider {
       ),
     ]);
 
-    return { access, refresh };
+    return new AppResponse({ access, refresh });
   }
 }

src/modules/auth/providers/login.provider.ts

@@ -6,6 +6,7 @@ import { HashingProvider } from '@/common/modules/hashing/providers/hashing.prov
 import { GenerateTokenProvider } from './generate-token.provider';
 import { randomUUID } from 'crypto';
 import { I18nService } from 'nestjs-i18n';
+import { AppResponse } from '@/common/responses';
 
 @Injectable()
 export class LoginProvider {
@@ -57,10 +58,10 @@ export class LoginProvider {
     }
 
     if (!password) {
-      return {
-        newUser: false,
-        message: this.i18nService.translate('auth.messages.sendPass'),
-      };
+      return new AppResponse(
+        { newUser: false },
+        this.i18nService.translate('auth.messages.sendPass'),
+      );
     }
 
     const isPasswordCorrect = await this.hashingProvider.compare(

src/modules/tests/dtos/create-test.dto.ts

@@ -0,0 +1,48 @@
+import {
+  IsBoolean,
+  IsEnum,
+  IsNotEmpty,
+  IsOptional,
+  IsString,
+  Matches,
+  MaxLength,
+} from 'class-validator';
+import { i18nValidationMessage as t } from 'nestjs-i18n';
+import { AccessType } from '../enums/access-types.enum';
+
+export class CreateTestDTO {
+  @IsString()
+  @IsNotEmpty({
+    message: t('validation.requiredField', {
+      field: '$t(tests.fields.title)',
+    }),
+  })
+  @MaxLength(255, {
+    message: t('validation.maxLengthField', {
+      field: '$t(tests.fields.title)',
+      max: 255,
+    }),
+  })
+  title: string;
+
+  @IsString()
+  @IsNotEmpty({
+    message: t('validation.requiredField', {
+      field: '$t(tests.fields.description)',
+    }),
+  })
+  description: string;
+
+  @IsEnum(AccessType)
+  @IsOptional()
+  accessType?: AccessType;
+
+  @IsString()
+  @IsOptional()
+  @Matches(/^\d+$/, { message: t('tests.errors.intPrice') })
+  price?: string;
+
+  @IsBoolean()
+  @IsOptional()
+  isActive?: boolean;
+}

src/modules/tests/entities/test.entity.ts

@@ -20,6 +20,7 @@ export class Test {
     type: 'varchar',
     length: 255,
     nullable: false,
+    unique: true,
   })
   title: string;
 

src/modules/tests/providers/tests.service.ts

@@ -0,0 +1,57 @@
+import {
+  HttpStatus,
+  Injectable,
+  RequestTimeoutException,
+} from '@nestjs/common';
+import { Repository } from 'typeorm';
+import { Test } from '../entities/test.entity';
+import { InjectRepository } from '@nestjs/typeorm';
+import { CreateTestDTO } from '../dtos/create-test.dto';
+import { AppException } from '@/common/exceptions/app.exception';
+import { AppResponse } from '@/common/responses';
+import { I18nService } from 'nestjs-i18n';
+
+@Injectable()
+export class TestsService {
+  constructor(
+    /**
+     * Inject Tests Repository
+     */
+    @InjectRepository(Test)
+    private readonly testRepository: Repository<Test>,
+
+    /**
+     * Inject I18n Service
+     */
+    private readonly i18nService: I18nService,
+  ) {}
+
+  public async createOne(createTestDto: CreateTestDTO) {
+    const titleExists = await this.testRepository.findOne({
+      where: {
+        title: createTestDto.title,
+      },
+    });
+
+    if (titleExists) {
+      throw new AppException('validation.duplicateField', HttpStatus.CONFLICT, {
+        field: '$t(tests.fields.title)',
+      });
+    }
+
+    const newTest = this.testRepository.create(createTestDto);
+
+    try {
+      await this.testRepository.save(newTest);
+      return new AppResponse(
+        newTest,
+        this.i18nService.translate('tests.messages.createSuccess'),
+      );
+    } catch (err) {
+      throw new RequestTimeoutException('common.errors.requestTimeout', {
+        cause: err,
+        description: 'Error connecting to the database',
+      });
+    }
+  }
+}

src/modules/tests/tests.module.ts

@@ -1,8 +1,11 @@
 import { Module } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { Test } from './entities/test.entity';
+import { TestsService } from './providers/tests.service';
 
 @Module({
   imports: [TypeOrmModule.forFeature([Test])],
+  providers: [TestsService],
+  exports: [TestsService],
 })
 export class TestsModule {}

src/modules/users/http/users.get.endpoints.http

@@ -1,2 +1,2 @@
 GET http://localhost:3000/users/profile
-Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjIsInBob25lIjoiMDkzMzMwMjYzNjMiLCJpYXQiOjE3NzgzOTE0MTQsImV4cCI6MTc3ODM5NTAxNCwiYXVkIjoibG9jYWxob3N0IiwiaXNzIjoibG9jYWxob3N0In0.ckp0DoNxarVkraiel02daRttbmESuN9vKQe3JNjBL4c
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjEwLCJwaG9uZSI6IjA5MzMzMDI2MzYzIiwiaWF0IjoxNzgwMjIzNDExLCJleHAiOjE3ODAyMjcwMTEsImF1ZCI6ImxvY2FsaG9zdCIsImlzcyI6ImxvY2FsaG9zdCJ9.FNTIrk6FKO8P88yKnRCybZ6E5N3KlJaCHqZt5DMVgds

src/modules/users/http/users.patch.endpoints.http

@@ -1,16 +1,16 @@
 PATCH http://localhost:3000/users/profile
 Content-Type: application/json
-Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjIsInBob25lIjoiMDkzMzMwMjYzNjMiLCJpYXQiOjE3NzgzOTE0MTQsImV4cCI6MTc3ODM5NTAxNCwiYXVkIjoibG9jYWxob3N0IiwiaXNzIjoibG9jYWxob3N0In0.ckp0DoNxarVkraiel02daRttbmESuN9vKQe3JNjBL4c
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjEwLCJwaG9uZSI6IjA5MzMzMDI2MzYzIiwiaWF0IjoxNzc5OTIzMzU4LCJleHAiOjE3Nzk5MjY5NTgsImF1ZCI6ImxvY2FsaG9zdCIsImlzcyI6ImxvY2FsaG9zdCJ9.1XFNvOFdfSc2LRybiCNlRPAdP5JNWpCu5MeJCZIE9kc
 lang: fa
 
 // {
-//   "access": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjIsInBob25lIjoiMDkzMzMwMjYzNjMiLCJpYXQiOjE3NzgzOTE0MTQsImV4cCI6MTc3ODM5NTAxNCwiYXVkIjoibG9jYWxob3N0IiwiaXNzIjoibG9jYWxob3N0In0.ckp0DoNxarVkraiel02daRttbmESuN9vKQe3JNjBL4c",
-//   "refresh": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjIsImp0aSI6IjI3ZTk1NGI2LWRjZDktNDVkNy04OWRhLTIwYWM0NjcwZmZmNCIsImlhdCI6MTc3ODM5MTQxNCwiZXhwIjoxNzc5MjU1NDE0LCJhdWQiOiJsb2NhbGhvc3QiLCJpc3MiOiJsb2NhbGhvc3QifQ.mX3KideTda658EEi03cQGxgi4j6qwPeoCg2wr9dj_u0"
+//   "access": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjEwLCJwaG9uZSI6IjA5MzMzMDI2MzYzIiwiaWF0IjoxNzc5OTU2NTk5LCJleHAiOjE3Nzk5NjAxOTksImF1ZCI6ImxvY2FsaG9zdCIsImlzcyI6ImxvY2FsaG9zdCJ9.e1Qay8cf6jW4OYPY8HCLs5TWUHObICkoAidj0QBhbM4",
+//   "refresh": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOjEwLCJqdGkiOiIyZjQ1YzcxMi01ZGQzLTRhY2ItYjExYS04ZDA5YTc3YTVmYTciLCJpYXQiOjE3Nzk5NTY1OTksImV4cCI6MTc4MDgyMDU5OSwiYXVkIjoibG9jYWxob3N0IiwiaXNzIjoibG9jYWxob3N0In0.GX4kSCUCIvBVq9l4lQ8dkETvFZ1NwBIm9NGOIjBsQCc"
 // }
 
 {
-    "firstName": "Radi",
-    "lastName": "Tar"
-    // "password": "Password1@",
-    // "confirmPassword": "Password1@"
+    "firstName": "Radmehr",
+    "lastName": "Tarnas",
+    "password": "Password1@",
+    "confirmPassword": "Password1@"
 }

src/modules/users/providers/user-profile.provider.ts

@@ -5,6 +5,7 @@ import { User } from '../entities/user.entity';
 import { UpdateProfileDTO } from '../dto/update-profile.dto';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
+import { AppResponse } from '@/common/responses';
 
 @Injectable()
 export class UserProfileProvider {
@@ -27,12 +28,12 @@ export class UserProfileProvider {
   ) {}
 
   public getProfile(user: User) {
-    return {
+    return new AppResponse({
       phone: user.phone,
       firstName: user.firstName,
       lastName: user.lastName,
       dateJoined: user.createdAt,
-    };
+    });
   }
 
   public async updateProfile(user: User, updateProfileDto: UpdateProfileDTO) {