Merge pull request #436 from dadosfera/beta

Beta
Merge pull request #435 from dadosfera/fix/validation-pipe
2026-09-02 04:34:49 +00:00 · 2026-01-26 18:03:42 -03:00 · 2026-01-21 14:46:57 -03:00 · 2026-01-21 14:43:43 -03:00 · 2026-01-20 17:53:09 -03:00 · 2026-01-20 17:52:34 -03:00
4 changed files with 279 additions and 270 deletions
@@ -715,6 +715,158 @@
          ]
        }
      },
+      "/api-key": {
+        "post": {
+          "operationId": "ApiKeyController_create",
+          "parameters": [
+            {
+              "name": "dadosfera-lang",
+              "in": "header",
+              "required": false,
+              "schema": {
+                "enum": [
+                  "pt-br",
+                  "en-us"
+                ],
+                "type": "string"
+              }
+            }
+          ],
+          "requestBody": {
+            "required": true,
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CreateApiKeyDto"
+                }
+              }
+            }
+          },
+          "responses": {
+            "201": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "$ref": "#/components/schemas/CreateApiKeyResponseDto"
+                  }
+                }
+              }
+            },
+            "default": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "$ref": "#/components/schemas/CreateApiKeyResponseDto"
+                  }
+                }
+              }
+            }
+          },
+          "tags": [
+            "ApiKey"
+          ],
+          "security": [
+            {
+              "access-token": []
+            }
+          ]
+        },
+        "get": {
+          "operationId": "ApiKeyController_findAll",
+          "parameters": [
+            {
+              "name": "dadosfera-lang",
+              "in": "header",
+              "required": false,
+              "schema": {
+                "enum": [
+                  "pt-br",
+                  "en-us"
+                ],
+                "type": "string"
+              }
+            }
+          ],
+          "responses": {
+            "200": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/components/schemas/ApiKeyBaseResponseDto"
+                    }
+                  }
+                }
+              }
+            },
+            "default": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/components/schemas/ApiKeyBaseResponseDto"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "tags": [
+            "ApiKey"
+          ],
+          "security": [
+            {
+              "access-token": []
+            }
+          ]
+        }
+      },
+      "/api-key/{id}": {
+        "delete": {
+          "operationId": "ApiKeyController_remove",
+          "parameters": [
+            {
+              "name": "dadosfera-lang",
+              "in": "header",
+              "required": false,
+              "schema": {
+                "enum": [
+                  "pt-br",
+                  "en-us"
+                ],
+                "type": "string"
+              }
+            },
+            {
+              "name": "id",
+              "required": true,
+              "in": "path",
+              "schema": {
+                "type": "string"
+              }
+            }
+          ],
+          "responses": {
+            "200": {
+              "description": ""
+            }
+          },
+          "tags": [
+            "ApiKey"
+          ],
+          "security": [
+            {
+              "access-token": []
+            }
+          ]
+        }
+      },
      "/connections": {
        "post": {
          "operationId": "ConnectionController_createConnection",
@@ -6584,158 +6736,6 @@
          ]
        }
      },
-      "/api-key": {
-        "post": {
-          "operationId": "ApiKeyController_create",
-          "parameters": [
-            {
-              "name": "dadosfera-lang",
-              "in": "header",
-              "required": false,
-              "schema": {
-                "enum": [
-                  "pt-br",
-                  "en-us"
-                ],
-                "type": "string"
-              }
-            }
-          ],
-          "requestBody": {
-            "required": true,
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/CreateApiKeyDto"
-                }
-              }
-            }
-          },
-          "responses": {
-            "201": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "$ref": "#/components/schemas/CreateApiKeyResponseDto"
-                  }
-                }
-              }
-            },
-            "default": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "$ref": "#/components/schemas/CreateApiKeyResponseDto"
-                  }
-                }
-              }
-            }
-          },
-          "tags": [
-            "ApiKey"
-          ],
-          "security": [
-            {
-              "access-token": []
-            }
-          ]
-        },
-        "get": {
-          "operationId": "ApiKeyController_findAll",
-          "parameters": [
-            {
-              "name": "dadosfera-lang",
-              "in": "header",
-              "required": false,
-              "schema": {
-                "enum": [
-                  "pt-br",
-                  "en-us"
-                ],
-                "type": "string"
-              }
-            }
-          ],
-          "responses": {
-            "200": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "type": "array",
-                    "items": {
-                      "$ref": "#/components/schemas/ApiKeyBaseResponseDto"
-                    }
-                  }
-                }
-              }
-            },
-            "default": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "type": "array",
-                    "items": {
-                      "$ref": "#/components/schemas/ApiKeyBaseResponseDto"
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "tags": [
-            "ApiKey"
-          ],
-          "security": [
-            {
-              "access-token": []
-            }
-          ]
-        }
-      },
-      "/api-key/{id}": {
-        "delete": {
-          "operationId": "ApiKeyController_remove",
-          "parameters": [
-            {
-              "name": "dadosfera-lang",
-              "in": "header",
-              "required": false,
-              "schema": {
-                "enum": [
-                  "pt-br",
-                  "en-us"
-                ],
-                "type": "string"
-              }
-            },
-            {
-              "name": "id",
-              "required": true,
-              "in": "path",
-              "schema": {
-                "type": "string"
-              }
-            }
-          ],
-          "responses": {
-            "200": {
-              "description": ""
-            }
-          },
-          "tags": [
-            "ApiKey"
-          ],
-          "security": [
-            {
-              "access-token": []
-            }
-          ]
-        }
-      },
      "/identity-providers": {
        "post": {
          "operationId": "IdentityProviderController_addIdentityProvider",
@@ -8593,6 +8593,104 @@
            "accessToken"
          ]
        },
+        "CreateApiKeyDto": {
+          "type": "object",
+          "properties": {
+            "permissions": {
+              "description": "Array of permission IDs",
+              "type": "array",
+              "items": {
+                "type": "number"
+              }
+            }
+          },
+          "required": [
+            "permissions"
+          ]
+        },
+        "PermissionDto": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "number"
+            },
+            "name": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "id",
+            "name"
+          ]
+        },
+        "CreateApiKeyResponseDto": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "format": "uuid"
+            },
+            "key_mask": {
+              "type": "string"
+            },
+            "permissions": {
+              "type": "array",
+              "items": {
+                "$ref": "#/components/schemas/PermissionDto"
+              }
+            },
+            "created_at": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "created_by": {
+              "type": "string"
+            },
+            "key": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "id",
+            "key_mask",
+            "permissions",
+            "created_at",
+            "created_by",
+            "key"
+          ]
+        },
+        "ApiKeyBaseResponseDto": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "format": "uuid"
+            },
+            "key_mask": {
+              "type": "string"
+            },
+            "permissions": {
+              "type": "array",
+              "items": {
+                "$ref": "#/components/schemas/PermissionDto"
+              }
+            },
+            "created_at": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "created_by": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "id",
+            "key_mask",
+            "permissions",
+            "created_at",
+            "created_by"
+          ]
+        },
        "CreateConnectionDto": {
          "type": "object",
          "properties": {
@@ -8816,37 +8914,6 @@
            "message"
          ]
        },
-        "PermissionDto": {
-          "type": "object",
-          "properties": {
-            "id": {
-              "type": "number"
-            },
-            "seqid": {
-              "type": "number"
-            },
-            "name": {
-              "type": "string"
-            },
-            "claim": {
-              "type": "string"
-            },
-            "createdAt": {
-              "type": "string"
-            },
-            "updatedAt": {
-              "type": "string"
-            }
-          },
-          "required": [
-            "id",
-            "seqid",
-            "name",
-            "claim",
-            "createdAt",
-            "updatedAt"
-          ]
-        },
        "Customer": {
          "type": "object",
          "properties": {
@@ -11330,89 +11397,6 @@
            "publicKey"
          ]
        },
-        "CreateApiKeyDto": {
-          "type": "object",
-          "properties": {
-            "permissions": {
-              "description": "Array of permission IDs",
-              "type": "array",
-              "items": {
-                "type": "number"
-              }
-            }
-          },
-          "required": [
-            "permissions"
-          ]
-        },
-        "CreateApiKeyResponseDto": {
-          "type": "object",
-          "properties": {
-            "id": {
-              "type": "string",
-              "format": "uuid"
-            },
-            "key_mask": {
-              "type": "string"
-            },
-            "permissions": {
-              "type": "array",
-              "items": {
-                "$ref": "#/components/schemas/PermissionDto"
-              }
-            },
-            "created_at": {
-              "type": "string",
-              "format": "date-time"
-            },
-            "created_by": {
-              "type": "string"
-            },
-            "key": {
-              "type": "string"
-            }
-          },
-          "required": [
-            "id",
-            "key_mask",
-            "permissions",
-            "created_at",
-            "created_by",
-            "key"
-          ]
-        },
-        "ApiKeyBaseResponseDto": {
-          "type": "object",
-          "properties": {
-            "id": {
-              "type": "string",
-              "format": "uuid"
-            },
-            "key_mask": {
-              "type": "string"
-            },
-            "permissions": {
-              "type": "array",
-              "items": {
-                "$ref": "#/components/schemas/PermissionDto"
-              }
-            },
-            "created_at": {
-              "type": "string",
-              "format": "date-time"
-            },
-            "created_by": {
-              "type": "string"
-            }
-          },
-          "required": [
-            "id",
-            "key_mask",
-            "permissions",
-            "created_at",
-            "created_by"
-          ]
-        },
        "CreateIdentityProvider": {
          "type": "object",
          "properties": {
@@ -55,6 +55,7 @@ import jwt, { JwtPayload } from 'jsonwebtoken';
 import { LanguageEnum } from 'src/utils/languages.enum';
 import { Language } from 'src/decorators/language.decorator';
 import { ApiInternalOnlyEndpoint } from 'src/decorators/swagger.decorator';
+import { ApiKeyService } from 'src/modules/api-key/api-key.service';

 type CookiesValues = {
  accessToken?: string;
@@ -74,6 +75,7 @@ export class AuthController {
    @Inject(DadosferaLogger)
    dadosferaLogger: DadosferaLogger,
    private authClient: AuthClientService,
+    private apiKeyService: ApiKeyService,
  ) {
    this.logger = dadosferaLogger.logger;

@@ -477,10 +479,29 @@ export class AuthController {
  async getMe(@Req() req: Request, @Res() res: Response) {
    this.logger.info('GET /auth/me ')

+    // Check for API key header first
+    const apiKey = req.get('X-Api-key');
+    if (apiKey) {
+      this.logger.info('Authenticating via X-Api-key header');
+      const { api_key } = await this.apiKeyService.get(apiKey);
+
+      const userDto = {
+        id: api_key.user_id,
+        name: api_key.username,
+        customer: {
+          id: api_key.customer_id,
+          name: api_key.customer_name,
+          tier: api_key.customer_tier,
+        }
+      };
+
+      return res.status(200).json(userDto);
+    }
+
    // Get token and headers
    const accessToken = req.cookies['ddf-auth'];
-    const refreshToken = req.cookies['ddf-refresh-auth']; 
-    const userId = req.cookies['ddf-user-id']; 
+    const refreshToken = req.cookies['ddf-refresh-auth'];
+    const userId = req.cookies['ddf-user-id'];
    const resourceHost = req.headers["host"]

    const hasUserSession = Boolean(accessToken) && Boolean(userId);
@@ -8,10 +8,11 @@ import { AuthClientService } from './auth.service';
 import { DucClient } from '../duc/client.config';
 import { GoogleLoginStrategy } from './passport-strategies/google-strategy';
 import { getOauthSecrets } from 'src/utils/OauthSecrets';
+import { ApiKeyModule } from '../api-key/api-key.module';
 const client = new DucClient();

@Module({
-  imports: [ClientsModule.register([client.providerOptions])],
+  imports: [ClientsModule.register([client.providerOptions]), ApiKeyModule],
  controllers: [AuthController],
  providers: [
    AuthClientService,
@@ -14,7 +14,10 @@ export class ValidationPipe implements PipeTransform<any> {
      return value;
    }
    const object = plainToInstance(metatype, value);
-    const errors = await validate(object);
+    const errors = await validate(object, {
+      forbidUnknownValues: false,
+      whitelist: true,
+    });
    if (errors.length > 0) {
      const errorMessages = errors.map((err) => err.constraints);
      throw new BadRequestException(errorMessages);
Author	SHA1	Message	Date
Marcos Rodrigues Silva	8006867bc2	Merge pull request #436 from dadosfera/beta Beta	2026-01-26 18:03:42 -03:00
Marcos Rodrigues Silva	784b0ef090	Merge pull request #435 from dadosfera/fix/validation-pipe FIX: Update ValidationPipe for class-validator 0.14.0+ compatibility	2026-01-21 14:46:57 -03:00
RafaelandClaude	b736cddf07	FIX: Update ValidationPipe for class-validator 0.14.0+ compatibility This fix addresses a breaking change introduced in class-validator 0.14.0 where the default for forbidUnknownValues changed from false to true. Issue: - POST /connections was returning 400 "an unknown value was passed to the validate function" errors - This occurred because CreateConnectionDto and UpdateConnectionDto have no validation decorators, causing class-validator 0.14.0+ to treat them as "unknown values" - Extra fields (like connector_version) in request payloads would fail validation Solution: - Set forbidUnknownValues: false to allow DTOs without validation decorators - Set whitelist: true to automatically strip extra properties not defined in DTOs - This maintains backward compatibility while adding security by removing unexpected fields 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2026-01-21 14:43:43 -03:00
Rafael Santana	3d6328fb0b	Merge pull request #434 from dadosfera/fix/class-validator-0.14-compatibility UPDATE: updating /me to get api key	2026-01-20 17:53:09 -03:00
Rafael	4246c7495e	UPDATE: updating /me to get api key	2026-01-20 17:52:34 -03:00
vinicius gadea	3d40746ccb	Merge pull request #433 from dadosfera/feat/storage-explorer-api-integration FEAT: integrate Storage Explorer API with new endpoints and permissions	2026-01-14 09:37:53 -03:00
Rafael Santana	121e30ce45	Merge pull request #432 from dadosfera/fix/class-validator-0.14-compatibility FIX: Update ValidationPipe for class-validator 0.14.0+ compatibility	2026-01-12 16:30:41 -03:00
RafaelandClaude	85c8a4937d	FIX: Update ValidationPipe for class-validator 0.14.0+ compatibility This fix addresses a breaking change introduced in class-validator 0.14.0 where the default for forbidUnknownValues changed from false to true. Issue: - POST /connections was returning 400 "an unknown value was passed to the validate function" errors - This occurred because CreateConnectionDto and UpdateConnectionDto have no validation decorators, causing class-validator 0.14.0+ to treat them as "unknown values" - Extra fields (like connector_version) in request payloads would fail validation Solution: - Set forbidUnknownValues: false to allow DTOs without validation decorators - Set whitelist: true to automatically strip extra properties not defined in DTOs - This maintains backward compatibility while adding security by removing unexpected fields 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2026-01-12 16:22:25 -03:00
Marcos Rodrigues Silva	007f3911ff	Merge pull request #429 from dadosfera/beta Beta	2026-01-05 17:43:34 -03:00