Merge pull request #395 from dadosfera/beta

Beta
Merge pull request #398 from dadosfera/feat/user-properties
2026-09-01 12:18:15 +00:00 · 2025-12-01 17:47:24 -03:00 · 2025-12-01 17:36:56 -03:00 · 2025-12-01 17:30:37 -03:00 · 2025-12-01 12:36:16 -03:00 · 2025-12-01 12:26:33 -03:00
31 changed files with 437 additions and 219 deletions
@@ -146,7 +146,7 @@ jobs:
    needs: [extract_environment, semantic_release, build_ecr_image]
    uses: ./.github/workflows/k8s-deploy.yml
    with:
-      cloud: ${{ (needs.extract_environment.outputs.environment == 'prd' && 'azure' ) || 'oracle' }}
+      cloud: 'oracle'
      environment: ${{ needs.extract_environment.outputs.environment }}
      image: ${{ needs.semantic_release.outputs.new_release_version }}
    secrets: inherit
@@ -56,9 +56,9 @@ jobs:

      - name: Install Helmfile
        run: |
-          wget https://github.com/helmfile/helmfile/releases/download/v0.148.0/helmfile_0.148.0_linux_amd64.tar.gz
+          curl -fsSLO https://github.com/helmfile/helmfile/releases/download/v0.148.0/helmfile_0.148.0_linux_amd64.tar.gz
          tar -xzf helmfile_0.148.0_linux_amd64.tar.gz
-          mv helmfile /usr/local/bin/
+          sudo mv helmfile /usr/local/bin/
          helmfile --version

      - name: Install Helm Diff Plugin
@@ -105,7 +105,7 @@ jobs:

      - name: Install Helmfile
        run: |
-          wget https://github.com/helmfile/helmfile/releases/download/v0.148.0/helmfile_0.148.0_linux_amd64.tar.gz
+          curl -fsSLO https://github.com/helmfile/helmfile/releases/download/v0.148.0/helmfile_0.148.0_linux_amd64.tar.gz
          tar -xzf helmfile_0.148.0_linux_amd64.tar.gz
          sudo mv helmfile /usr/local/bin/
          helmfile --version
@@ -74,6 +74,8 @@ spec:
              value: "logstash-pipelines.dadosfera.ai"
            - name: LOGGER_GELF_PORT
              value: "{{ .Values.maestro.logger_gelf_port }}"
+            - name: LOGGER_CONSOLE_EXTRA
+              value: "true"
            - name: NIMBUS_BASE_URL
              value: "http://nimbus-api"
            - name: NPM_TOKEN
@@ -4,9 +4,18 @@ metadata:
  annotations:
    nginx.ingress.kubernetes.io/whitelist-source-range: "69.49.241.121/32" # hostgator ip 
    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: "300"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
    nginx.ingress.kubernetes.io/server-snippet: |
      underscores_in_headers on;
      ignore_invalid_headers on;
+    nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
+    nginx.ingress.kubernetes.io/proxy-buffers-number: "8"
+    nginx.ingress.kubernetes.io/proxy-busy-buffers-size: "64k"
+    {{- if .Values.maestro.restricted_ip}}
+    nginx.ingress.kubernetes.io/whitelist-source-range: {{ .Values.maestro.restricted_ip }}
+    {{- end }}
      
  generation: 1
  labels:
@@ -7,17 +7,10 @@ maestro:
  open_customer_id: b3e3dfe5-b992-4586-a73c-c0b0c00f615d
  open_group_id: e3f98a2f-7748-4981-8505-7695c8ca8218
  cookie_secret: "ff7bc13823edb2ae50d248e5780bddc9d4b31c36"
+  redis_database: "1"

 hostname: maestro.stg.dadosfera.ai

 replicaCount: 1

-affinity:
-  nodeAffinity:
-    requiredDuringSchedulingIgnoredDuringExecution:
-      nodeSelectorTerms:
-        - matchExpressions:
-            - key: name
-              operator: In
-              values:
-                - general
+affinity: null
@@ -45,7 +45,7 @@ maestro:
  open_group_id: 401573bb-334f-44b2-b30e-88d4cea31ae9
  dedicated_proxy: ""
  restricted_ip: ""
-  redis_host: "product-redis-prd.z4xvqj.0001.use1.cache.amazonaws.com"
+  redis_host: "aaapzppmlyamkocqwstpo7zvopczyyiyuy6xzm2g6c5k4mq3a66be4a-0.redis.sa-saopaulo-1.oci.oraclecloud.com"
  redis_port: "6379"
  redis_database: "0"
  cookie_secret: "13cc5e136d3074bcc05bec8697092ec1f5f376bf"
@@ -61,7 +61,7 @@ affinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchExpressions:
-            - key: applications
+            - key: name
              operator: In
              values:
-                - general
+                - product
@@ -1,4 +1,4 @@
-charts:
+releases:
  - name: maestro
    chart: ../helm-chart
    values:
@@ -49,5 +49,8 @@ charts:
        value: dea2c27f-0973-4588-a2e0-9e31b64c7ffd
      - name: replicaCount
        value: 1
+        # 10.70.0.0/16 internal network
+        # 137.131.167.254/32 loadbalancer
+        # 159.112.184.81/32 cluster ip for the uptime request ingest
      - name: maestro.restricted_ip
-        value: "177.52.172.0/24,189.84.160.157/32,186.237.171.146/32,57.151.113.140/30"
+        value: "177.52.172.0/24, 189.84.160.157/32, 186.237.171.146/32, 137.131.167.254/32, 10.70.0.0/16, 159.112.184.81/32, 10.244.0.0/16"
@@ -7,37 +7,24 @@ charts:
      
  
    # Environment to test Network Policies
-  # - name: private-maestro
-  #   chart: ../helm-chart
-  #   values:
-  #   - ../helm-chart/values.yaml
-  #   set:
-  #     - name: app_name
-  #       value: maestro-private
-  #     - name: maestro.env
-  #       value: stg
-  #     - name: maestro.duc_url
-  #       value: duc.stg.dadosfera.ai
-  #     - name: hostname
-  #       value: private-maestro.stg.dadosfera.ai
-  #     - name: maestro.pi_factory_url
-  #       value: pi-factory.dadosfera.ai
-  #     - name: maestro.in_factory_url
-  #       value: in-factory.stg.dadosfera.ai
-  #     - name: maestro.tr_factory_url
-  #       value: in-factory.dadosfera.ai
-  #     - name: maestro.open_customer_id
-  #       value: b3e3dfe5-b992-4586-a73c-c0b0c00f615d
-  #     - name: maestro.open_group_id
-  #       value: e3f98a2f-7748-4981-8505-7695c8ca8218
-  #     # Customer id
-  #     - name: maestro.dedicated_proxy
-  #       value: 14d52fd4-d83d-4cdd-be34-bf11cc28b3bd
-  #     - name: replicaCount
-  #       value: 1
-  #     - name: affinity
-  #       value: null
-  #     - name: resources
-  #       value: null
-  #     - name: maestro.restricted_ip
-  #       value: "57.151.113.140/30"
+  - name: private-maestro
+    chart: ../helm-chart
+    values:
+    - ../helm-chart/values.yaml
+    - ../helm-chart/values-stg.yaml
+    set:
+      - name: app_name
+        value: maestro-private
+      - name: hostname
+        value: private-maestro.stg.dadosfera.ai
+      # Customer id
+      - name: maestro.dedicated_proxy
+        value: 14d52fd4-d83d-4cdd-be34-bf11cc28b3bd
+      - name: replicaCount
+        value: 1
+      - name: affinity
+        value: null
+      - name: resources
+        value: null
+      - name: maestro.restricted_ip
+        value: "137.131.167.254/32, 10.70.0.0/16, 159.112.184.81/32, 10.244.0.0/16"
@@ -42,6 +42,33 @@
          ]
        }
      },
+      "/auth/sign-out": {
+        "post": {
+          "operationId": "AuthController_signOut",
+          "parameters": [
+            {
+              "name": "dadosfera-lang",
+              "in": "header",
+              "required": false,
+              "schema": {
+                "enum": [
+                  "pt-br",
+                  "en-us"
+                ],
+                "type": "string"
+              }
+            }
+          ],
+          "responses": {
+            "204": {
+              "description": ""
+            }
+          },
+          "tags": [
+            "Auth"
+          ]
+        }
+      },
      "/auth/refresh-access-token": {
        "post": {
          "operationId": "AuthController_refreshAccessToken",
@@ -3415,9 +3442,6 @@
            "PipelinesV2"
          ],
          "security": [
-            {
-              "access-token": []
-            },
            {
              "access-token": []
            }
@@ -3467,9 +3491,6 @@
            "PipelinesV2"
          ],
          "security": [
-            {
-              "access-token": []
-            },
            {
              "access-token": []
            }
@@ -3519,9 +3540,6 @@
            "PipelinesV2"
          ],
          "security": [
-            {
-              "access-token": []
-            },
            {
              "access-token": []
            }
@@ -6251,6 +6269,39 @@
          ]
        }
      },
+      "/customers/{id}/theme/reset": {
+        "post": {
+          "operationId": "ThemeController_resetTheme",
+          "parameters": [
+            {
+              "name": "id",
+              "required": true,
+              "in": "path",
+              "schema": {
+                "type": "string"
+              }
+            }
+          ],
+          "responses": {
+            "200": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "$ref": "#/components/schemas/CustomerThemeResponse"
+                  }
+                }
+              }
+            },
+            "201": {
+              "description": ""
+            }
+          },
+          "tags": [
+            "Theme"
+          ]
+        }
+      },
      "/network-policy": {
        "get": {
          "operationId": "NetworkPolicyController_getNetworks",
@@ -12,7 +12,7 @@
        "@aws-sdk/client-secrets-manager": "^3.414.0",
        "@dadosfera/dadosfera-logs": "^1.0.0-beta.4",
        "@dadosfera/protospack": "2.5.3",
-        "@dadosfera/protospack-v2": "3.38.0-beta.10",
+        "@dadosfera/protospack-v2": "3.38.0-beta.14",
        "@grpc/grpc-js": "^1.9.3",
        "@grpc/proto-loader": "^0.7.9",
        "@nestjs/cli": "^9.5.0",
@@ -57,8 +57,8 @@
        "swagger-ui-express": "^4.6.3"
      },
      "devDependencies": {
-        "@types/cookie-parser": "^1.4.9",
        "@types/cache-manager": "^4.0.6",
+        "@types/cookie-parser": "^1.4.9",
        "@types/express": "^4.17.17",
        "@types/express-session": "^1.18.1",
        "@types/jest": "27.0.2",
@@ -850,6 +850,7 @@
      "integrity": "sha512-vMqyb7XCDMPvJFFOaT9kxtiRh42GwlZEg1/uIgtZshS5a/8OaduUfCi7kynKgc3Tw/6Uo2D+db9qBttghhmxwQ==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@ampproject/remapping": "^2.2.0",
        "@babel/code-frame": "^7.26.2",
@@ -1408,9 +1409,9 @@
      }
    },
    "node_modules/@dadosfera/protospack-v2": {
-      "version": "3.38.0-beta.10",
-      "resolved": "https://dadosfera-611330257153.d.codeartifact.us-east-1.amazonaws.com/npm/dadosfera-npm/@dadosfera/protospack-v2/-/protospack-v2-3.38.0-beta.10.tgz",
-      "integrity": "sha512-4miwovVFHtBY1VTHdW8BVmSB8m+LXfIA8uigHbeo8IwreMtTHuLpvfenT4MBSPkdVmlo9+0XBKKf+PaSqtdMAg==",
+      "version": "3.38.0-beta.14",
+      "resolved": "https://dadosfera-611330257153.d.codeartifact.us-east-1.amazonaws.com/npm/dadosfera-npm/@dadosfera/protospack-v2/-/protospack-v2-3.38.0-beta.14.tgz",
+      "integrity": "sha512-BiE1fUIHuam3cJjAGIknsRNIlf1Z0JHJOV/VZ2pyAp5mIkGOSoNFBAMXJZb+VMTnd2xsp+vPxNnWVu7OJ/CvMQ==",
      "license": "ISC",
      "dependencies": {
        "@grpc/grpc-js": "^1.9.3",
@@ -2260,6 +2261,7 @@
      "resolved": "https://registry.npmjs.org/@nestjs/common/-/common-9.4.3.tgz",
      "integrity": "sha512-Gd6D4IaYj01o14Bwv81ukidn4w3bPHCblMUq+SmUmWLyosK+XQmInCS09SbDDZyL8jy86PngtBLTdhJ2bXSUig==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "iterare": "1.2.1",
        "tslib": "2.5.3",
@@ -2338,6 +2340,7 @@
      "integrity": "sha512-Qi63+wi55Jh4sDyaj5Hhx2jOpKqT386aeo+VOKsxnd+Ql9VvkO/FjmuwBGUyzkJt29ENYc+P0Sx/k5LtstNpPQ==",
      "hasInstallScript": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@nuxtjs/opencollective": "0.3.2",
        "fast-safe-stringify": "2.1.1",
@@ -2475,6 +2478,7 @@
      "resolved": "https://registry.npmjs.org/@nestjs/platform-express/-/platform-express-9.4.3.tgz",
      "integrity": "sha512-FpdczWoRSC0zz2dNL9u2AQLXKXRVtq4HgHklAhbL59X0uy+mcxhlSThG7DHzDMkoSnuuHY8ojDVf7mDxk+GtCw==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "body-parser": "1.20.2",
        "cors": "2.8.5",
@@ -2838,6 +2842,7 @@
      "resolved": "https://registry.npmjs.org/@opentelemetry/api/-/api-1.9.0.tgz",
      "integrity": "sha512-3giAOQvZiH5F9bMlMiv8+GSPMeqg0dbaeo58/0SlA9sxSqZhnUtxzX9/2FzyhS9sWQf5S0GJE0AKBrFqjpeYcg==",
      "license": "Apache-2.0",
+      "peer": true,
      "engines": {
        "node": ">=8.0.0"
      }
@@ -2997,6 +3002,7 @@
      "resolved": "https://registry.npmjs.org/@redis/client/-/client-1.6.1.tgz",
      "integrity": "sha512-/KCsg3xSlR+nCK8/8ZYSknYxvXHwubJrU82F3Lm1Fp6789VQ0/3RJKfsmRXjqfaTA++23CvC3hqmqe/2GEt6Kw==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "cluster-key-slot": "1.1.2",
        "generic-pool": "3.9.0",
@@ -3793,6 +3799,7 @@
      "integrity": "sha512-ejlPM315qwLpaQlQDTjPdsUFSc6ZsP4AN6AlWnogPjQ7CVi7PYF3YVz+CY3jE2pwYf7E/7HlDAN0rV2GxTG0HQ==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@types/body-parser": "*",
        "@types/express-serve-static-core": "^4.17.33",
@@ -3873,6 +3880,7 @@
      "integrity": "sha512-4dRxkS/AFX0c5XW6IPMNOydLn2tEhNhJV7DnYK+0bjoJZ+QTmfucBlihX7aoEsh/ocYtkLC73UbnBXBXIxsULA==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "jest-diff": "^27.0.0",
        "pretty-format": "^27.0.0"
@@ -3936,7 +3944,8 @@
      "version": "16.18.126",
      "resolved": "https://registry.npmjs.org/@types/node/-/node-16.18.126.tgz",
      "integrity": "sha512-OTcgaiwfGFBKacvfwuHzzn1KLxH/er8mluiy8/uM3sGXHaRe73RrSIj01jow9t4kJEW633Ov+cOexXeiApTyAw==",
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
    },
    "node_modules/@types/oauth": {
      "version": "0.9.6",
@@ -4166,6 +4175,7 @@
      "integrity": "sha512-VlJEV0fOQ7BExOsHYAGrgbEiZoi8D+Bl2+f6V2RrXerRSylnp+ZBHmPvaIa8cz0Ajx7WO7Z5RqfgYg7ED1nRhA==",
      "dev": true,
      "license": "BSD-2-Clause",
+      "peer": true,
      "dependencies": {
        "@typescript-eslint/scope-manager": "5.62.0",
        "@typescript-eslint/types": "5.62.0",
@@ -4512,6 +4522,7 @@
      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.14.1.tgz",
      "integrity": "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg==",
      "license": "MIT",
+      "peer": true,
      "bin": {
        "acorn": "bin/acorn"
      },
@@ -4608,6 +4619,7 @@
      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.12.0.tgz",
      "integrity": "sha512-sRu1kpcO9yLtYxBKvqfTeh9KzZEwO3STyX1HT+4CaDzC6HpTGYhIhPIzj9XuKU7KYDwnaeh5hcOwjy1QuJzBPA==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "fast-deep-equal": "^3.1.1",
        "json-schema-traverse": "^1.0.0",
@@ -5236,6 +5248,7 @@
        }
      ],
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "caniuse-lite": "^1.0.30001688",
        "electron-to-chromium": "^1.5.73",
@@ -5342,6 +5355,7 @@
      "resolved": "https://registry.npmjs.org/cache-manager/-/cache-manager-5.7.6.tgz",
      "integrity": "sha512-wBxnBHjDxF1RXpHCBD6HGvKER003Ts7IIm0CHpggliHzN1RZditb7rXoduE1rplc2DEFYKxhLKgFuchXMJje9w==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "eventemitter3": "^5.0.1",
        "lodash.clonedeep": "^4.5.0",
@@ -5565,13 +5579,15 @@
      "version": "0.5.1",
      "resolved": "https://registry.npmjs.org/class-transformer/-/class-transformer-0.5.1.tgz",
      "integrity": "sha512-SQa1Ws6hUbfC98vKGxZH3KFY0Y1lm5Zm0SY8XX9zbK7FJCyVEac3ATW0RIpwzW+oOfmHE5PMPufDG9hCfoEOMw==",
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
    },
    "node_modules/class-validator": {
      "version": "0.14.1",
      "resolved": "https://registry.npmjs.org/class-validator/-/class-validator-0.14.1.tgz",
      "integrity": "sha512-2VEG9JICxIqTpoK1eMzZqaV+u/EiwEJkMGzTrZf6sU/fwsnOITVgYJ8yojSy6CaXtO9V0Cc6ZQZ8h8m4UBuLwQ==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@types/validator": "^13.11.8",
        "libphonenumber-js": "^1.10.53",
@@ -6235,7 +6251,8 @@
      "version": "0.0.1425554",
      "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1425554.tgz",
      "integrity": "sha512-uRfxR6Nlzdzt0ihVIkV+sLztKgs7rgquY/Mhcv1YNCWDh5IZgl5mnn2aeEnW5stYTE0wwiF4RYVz8eMEpV1SEw==",
-      "license": "BSD-3-Clause"
+      "license": "BSD-3-Clause",
+      "peer": true
    },
    "node_modules/dezalgo": {
      "version": "1.0.4",
@@ -6512,7 +6529,6 @@
      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">= 0.8"
      }
@@ -6700,6 +6716,7 @@
      "deprecated": "This version is no longer supported. Please see https://eslint.org/version-support for other options.",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@eslint-community/eslint-utils": "^4.2.0",
        "@eslint-community/regexpp": "^4.6.1",
@@ -7046,7 +7063,6 @@
      "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
      "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "accepts": "~1.3.8",
        "array-flatten": "1.1.1",
@@ -7093,7 +7109,6 @@
      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz",
      "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "bytes": "3.1.2",
        "content-type": "~1.0.5",
@@ -7118,7 +7133,6 @@
      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
      "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==",
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">= 0.6"
      }
@@ -7128,7 +7142,6 @@
      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "ms": "2.0.0"
      }
@@ -7137,22 +7150,19 @@
      "version": "2.0.0",
      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
    },
    "node_modules/express/node_modules/path-to-regexp": {
      "version": "0.1.12",
      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
      "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==",
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
    },
    "node_modules/express/node_modules/qs": {
      "version": "6.13.0",
      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
      "license": "BSD-3-Clause",
-      "peer": true,
      "dependencies": {
        "side-channel": "^1.0.6"
      },
@@ -7181,8 +7191,7 @@
          "url": "https://feross.org/support"
        }
      ],
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
    },
    "node_modules/external-editor": {
      "version": "3.1.0",
@@ -7417,7 +7426,6 @@
      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.1.tgz",
      "integrity": "sha512-6BN9trH7bp3qvnrRyzsBz+g3lZxTNZTbVO2EV1CS0WIcDbawYVdYvGflME/9QP0h0pYlCDBCTjYa9nZzMDpyxQ==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "debug": "2.6.9",
        "encodeurl": "~2.0.0",
@@ -7436,7 +7444,6 @@
      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "ms": "2.0.0"
      }
@@ -7445,8 +7452,7 @@
      "version": "2.0.0",
      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
    },
    "node_modules/find-up": {
      "version": "5.0.0",
@@ -8240,6 +8246,7 @@
      "resolved": "https://registry.npmjs.org/ioredis/-/ioredis-5.6.1.tgz",
      "integrity": "sha512-UxC0Yv1Y4WRJiGQxQkP0hfdL0/5/6YvdfOOClRgJ0qppSarkhneSa6UvkMkms0AkdGimSH3Ikqm+6mkMmX7vGA==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@ioredis/commands": "^1.1.1",
        "cluster-key-slot": "^1.1.0",
@@ -8581,6 +8588,7 @@
      "integrity": "sha512-Yn0mADZB89zTtjkPJEXwrac3LHudkQMR+Paqa8uxJHCBr9agxztUifWCyiYrjhMPBoUVBjyny0I7XH6ozDr7QQ==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@jest/core": "^27.5.1",
        "import-local": "^3.0.2",
@@ -9870,7 +9878,6 @@
      "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
      "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
      "license": "MIT",
-      "peer": true,
      "funding": {
        "url": "https://github.com/sponsors/sindresorhus"
      }
@@ -10628,6 +10635,7 @@
      "resolved": "https://registry.npmjs.org/passport/-/passport-0.6.0.tgz",
      "integrity": "sha512-0fe+p3ZnrWRW74fe8+SvCyf4a3Pb2/h7gFkQ8yTJpAO50gDzlfjZUZTO1k5Eg9kUct22OxHLqDZoKUWRHOh9ug==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "passport-strategy": "1.x.x",
        "pause": "0.0.1",
@@ -11017,6 +11025,7 @@
      "integrity": "sha512-tdN8qQGvNjw4CHbY+XXk0JgCXn9QiF21a55rBe5LJAU+kDyC4WQn4+awm2Xfk2lQMk5fKup9XgzTZtGkjBdP9Q==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "bin": {
        "prettier": "bin-prettier.js"
      },
@@ -11519,7 +11528,8 @@
      "version": "0.1.14",
      "resolved": "https://registry.npmjs.org/reflect-metadata/-/reflect-metadata-0.1.14.tgz",
      "integrity": "sha512-ZhYeb6nRaXCfhnndflDK8qI6ZQ/YcWZCISRAWICW9XYqMUwjZM9Z0DveWX/ABN01oxSHwVxKQmxeYZSsm0jh5A==",
-      "license": "Apache-2.0"
+      "license": "Apache-2.0",
+      "peer": true
    },
    "node_modules/relative-microtime": {
      "version": "2.0.0",
@@ -11706,6 +11716,7 @@
      "resolved": "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz",
      "integrity": "sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==",
      "license": "Apache-2.0",
+      "peer": true,
      "dependencies": {
        "tslib": "^2.1.0"
      }
@@ -11767,6 +11778,7 @@
      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
      "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "fast-deep-equal": "^3.1.1",
        "fast-json-stable-stringify": "^2.0.0",
@@ -11810,7 +11822,6 @@
      "resolved": "https://registry.npmjs.org/send/-/send-0.19.0.tgz",
      "integrity": "sha512-dW41u5VfLXu8SJh5bwRmyYUbAoSB3c9uQh6L8h/KtsFREPWpbX1lrljJo186Jc4nmci/sGUZ9a0a0J2zgfq2hw==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "debug": "2.6.9",
        "depd": "2.0.0",
@@ -11835,7 +11846,6 @@
      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "ms": "2.0.0"
      }
@@ -11844,15 +11854,13 @@
      "version": "2.0.0",
      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
    },
    "node_modules/send/node_modules/encodeurl": {
      "version": "1.0.2",
      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
      "integrity": "sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==",
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">= 0.8"
      }
@@ -11861,8 +11869,7 @@
      "version": "2.1.3",
      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
    },
    "node_modules/serialize-javascript": {
      "version": "6.0.2",
@@ -11878,7 +11885,6 @@
      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.2.tgz",
      "integrity": "sha512-VqpjJZKadQB/PEbEwvFdO43Ax5dFBZ2UECszz8bQ7pi7wt//PWe1P6MN7eCnjsatYtBT6EuiClbjSWP2WrIoTw==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "encodeurl": "~2.0.0",
        "escape-html": "~1.0.3",
@@ -12856,6 +12862,7 @@
      "integrity": "sha512-f0FFpIdcHgn8zcPSbf1dRevwt047YMnaiJM3u2w2RewrB+fob/zePZcrOyQoLMMO7aBIddLcQIEK5dYjkLnGrQ==",
      "dev": true,
      "license": "MIT",
+      "peer": true,
      "dependencies": {
        "@cspotcode/source-map-support": "^0.8.0",
        "@tsconfig/node10": "^1.0.7",
@@ -13085,6 +13092,7 @@
      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz",
      "integrity": "sha512-1FXk9E2Hm+QzZQ7z+McJiHL4NW1F2EzMu9Nq9i3zAaGqibafqYwCVU6WyWAuyQRRzOlxou8xZSyXLEN8oKj24g==",
      "license": "Apache-2.0",
+      "peer": true,
      "bin": {
        "tsc": "bin/tsc",
        "tsserver": "bin/tsserver"
@@ -13412,7 +13420,6 @@
      "resolved": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.0.tgz",
      "integrity": "sha512-Gf9qqc58SpCA/xdziiHz35F4GNIWYWZrEshUc/G/r5BnLph6xpKuLeoJoQuj5WfBIx/eQLf+hmVPYHaxJu7V2g==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@types/json-schema": "^7.0.9",
        "ajv": "^8.9.0",
@@ -30,7 +30,7 @@
    "@aws-sdk/client-secrets-manager": "^3.414.0",
    "@dadosfera/dadosfera-logs": "^1.0.0-beta.4",
    "@dadosfera/protospack": "2.5.3",
-    "@dadosfera/protospack-v2": "3.38.0-beta.10",
+    "@dadosfera/protospack-v2": "3.38.0-beta.14",
    "@grpc/grpc-js": "^1.9.3",
    "@grpc/proto-loader": "^0.7.9",
    "@nestjs/cli": "^9.5.0",
@@ -78,8 +78,8 @@
    "multer": "1.4.5-lts.1"
  },
  "devDependencies": {
-    "@types/cookie-parser": "^1.4.9",
    "@types/cache-manager": "^4.0.6",
+    "@types/cookie-parser": "^1.4.9",
    "@types/express": "^4.17.17",
    "@types/express-session": "^1.18.1",
    "@types/jest": "27.0.2",
@@ -0,0 +1,20 @@
+import jwt, { JwtPayload } from 'jsonwebtoken';
+
+export function extractUserFrom(aRawJwt: string) {
+  const decodedToken = jwt.decode(aRawJwt, {
+    complete: true,
+  });
+
+  const payload = decodedToken.payload as JwtPayload;
+
+  return {
+    user_id: payload.user_id,
+    username: payload.username,
+    permissions: payload.permissions,
+    customer_id: payload.customer_id,
+    customer_name: payload.customer_name,
+    customer_tier: payload.customer_tier,
+    customer_modules: payload.customer_modules,
+    access_token: aRawJwt,
+  }
+}
@@ -116,6 +116,44 @@ export const PERMISSIONS_GROUPS = {
      },
    },
  },
+  IMPORT_FILES: {
+    title: {
+      'pt-br': 'Coletar | Importar arquivos',
+      'en-us': 'Collect | Import files',
+      'es-es': 'Colecta | Importar archivos',
+    },
+    permissions: {
+      VIEW: {
+        seqid: 48,
+        claim: 'import-file:view',
+        usage: PermissionUsages.PUBLIC,
+        name: {
+          'pt-br': 'Importar arquivos',
+          'en-us': 'Import files',
+          'es-es': 'Importar archivos',
+        },
+      },
+    },
+  },
+   AI_CHAT: {
+    title: {
+      'pt-br': 'AutodriveDDF',
+      'en-us': 'AutodriveDDF',
+      'es-es': 'AutodriveDDF',
+    },
+    permissions: {
+      VIEW: {
+        seqid: 49,
+        claim: 'ai-chat:view',
+        usage: PermissionUsages.PUBLIC,
+        name: {
+          'pt-br': 'AutodriveDDF',
+          'en-us': 'AutodriveDDF',
+          'es-es': 'AutodriveDDF',
+        },
+      },
+    },
+  },
  CONNECTION: {
    title: {
      'pt-br': 'Coletar | Fontes de dados',
@@ -352,6 +390,25 @@ export const PERMISSIONS_GROUPS = {
      },
    },
  },
+  LINEAGE: {
+    title: {
+      'pt-br': 'Explorar | Linhagem',
+      'en-us': 'Explore | Lineage',
+      'es-es': 'Explorar | Linaje',
+    },
+    permissions: {
+      VIEW: {
+        seqid: 50,
+        claim: 'lineage:view',
+        usage: PermissionUsages.PUBLIC,
+        name: {
+          'pt-br': 'Acessar ao módulo de Linhagem',
+          'en-us': 'Access to Lineage module',
+          'es-es': 'Acceda al módulo de Linaje',
+        },
+      }
+    },
+  },
  EMBED: {
    title: {
      'pt-br': 'Analisar | Incorporação',
@@ -18,21 +18,41 @@ async function bootstrap() {
  });
  const logger = new DadosferaLogger();

+  const corsOrigins = [];
+
+  if (process.env.ENV === 'local') {
+    corsOrigins.push('http://localhost:4200');
+  } else {
+    corsOrigins.push( 
+      'https://app.stg.dadosfera.ai',
+      'https://app.dadosfera.ai',
+      'https://private-frontend.stg.dadosfera.ai',
+      'https://unimed.dadosfera.ai',
+      'https://boston-scientific.dadosfera.ai',
+      'https://plataforma.dadosfera.ai'
+    );
+  }
+
  const app = await NestFactory.create(AppModule, {
    logger,
    cors: {
-      origin: '*',
+      origin: corsOrigins,
      methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',
      preflightContinue: false,
      optionsSuccessStatus: 204,
-      credentials: true
+      credentials: true,
    },
  });
+
  app.use(helmet());
  app.use(cookieParser(process.env.COOKIE_SECRET));
-  if (process.env.ENV === 'prd') {
+
+  if (process.env.ENV !== 'local') {
    app.use('/catalog/register-dataset', json({ limit: '10mb' }));
-    app.use('/catalog/register-dataset', urlencoded({ extended: true, limit: '10mb' }));
+    app.use(
+      '/catalog/register-dataset',
+      urlencoded({ extended: true, limit: '10mb' }),
+    );
  }

  configureSwagger(app);
@@ -1,4 +1,4 @@
-import { Controller, Post, Body, Put, Get} from '@nestjs/common';
+import { Controller, Body, Put, Get, NotFoundException} from '@nestjs/common';
 import { AssignService } from './assign.service';
 import { CreateAssignDto } from './dto/create-assign.dto';
 import { Authenticated, RequireModule, RequireSomePermission } from 'src/decorators/authentication.decorator';
@@ -28,6 +28,10 @@ export class AssignController {
  @RequireModule(DADOSFERA_MODULES_KEYS.EMBED_ASSIGNED)
  async get(@User() user: RequestUser) {
    const metadata = PackTheMetadata(user);
-    return await this.assignService.get(metadata);
+    try {
+      return await this.assignService.get(metadata);
+    } catch (error) {
+      throw new NotFoundException(error.message)
+    }
  }
 }
@@ -54,7 +54,6 @@ import jwt, { JwtPayload } from 'jsonwebtoken';
 import { LanguageEnum } from 'src/utils/languages.enum';
 import { Language } from 'src/decorators/language.decorator';
 import { ApiInternalOnlyEndpoint } from 'src/decorators/swagger.decorator';
-import { Cookie } from 'express-session';

 type CookiesValues = {
  accessToken?: string;
@@ -114,6 +113,7 @@ export class AuthController {
      return res.send(data);
    } catch (error) {
      this.logger.error('/auth - SignIn - ERROR', error);
+      throw error;
    }

  }
@@ -497,29 +497,10 @@ export class AuthController {
    const userId = req.cookies['ddf-user-id'];

    this.logger.info('Has cookie: ' + Boolean(accessToken))
-    let payload: any;
-    let userInfo: any = {};
    try {
      // Decodifica e valida o JWT de acesso
-      const decoded: any = accessToken && jwt.decode(accessToken, { complete: true });
-      if (!decoded) throw new Error('Invalid token')
-      const { kid } = decoded.header;
-      // Busca a chave pública
-      const { keys } = await this.authClient.getPublicKeys();
-      const pemValue = keys.find((k) => k.kid === kid)?.pem;
-      if (!pemValue) throw new Error('Public key not found');
-      jwt.verify(accessToken, pemValue);
-      payload = decoded.payload;
-      userInfo = {
-        id: payload.user_id,
-        name: payload.username,
-        customer: {
-          id: payload.customer_id,
-          name: payload.customer_name,
-          tier: payload.customer_tier,
-        }
-      };
-      return res.status(200).json(userInfo);
+      const userDto = await this.authClient.extractUserFrom(accessToken);
+      return res.status(200).json(userDto);
    } catch (err) {
      this.logger.error(err.message);
      const refreshToken = req.cookies['ddf-refresh-auth'];
@@ -544,18 +525,8 @@ export class AuthController {
          userId
        });
        // Decodifica novo token
-        const decoded: any = jwt.decode(data.accessToken, { complete: true });
-        const payload = decoded.payload;
-        userInfo = {
-          id: payload.user_id,
-          name: payload.username,
-          customer: {
-            id: payload.customer_id,
-            name: payload.customer_name,
-            tier: payload.customer_tier,
-          }
-        };
-        return res.status(200).json(userInfo);
+        const userDto = await this.authClient.extractUserFrom(accessToken);
+        return res.status(200).json(userDto);
      } catch (refreshErr) {
        this.logger.error(refreshErr)
        return res.status(401).json({ error: 'Not authenticated' });
@@ -572,7 +543,7 @@ export class AuthController {

      this.logger.info('Set Cookie ddf-auth')
      res.cookie('ddf-auth', data.accessToken, {
-        domain: 'stg.dadosfera.ai',
+        domain: '.dadosfera.ai',
        maxAge: exp,
        httpOnly: true,
        secure: true,
@@ -583,7 +554,7 @@ export class AuthController {
    if (data.refreshToken) {
      this.logger.info('Set Cookie ddf-refresh-auth')
      res.cookie('ddf-refresh-auth', data.refreshToken, {
-        domain: 'stg.dadosfera.ai',
+        domain: '.dadosfera.ai',
        maxAge: exp,
        httpOnly: true,
        secure: true,
@@ -594,7 +565,7 @@ export class AuthController {
    if (data.userId) {
      this.logger.info('Set Cookie ddf-refresh-auth')
      res.cookie('ddf-user-id', data.userId, {
-        domain: 'stg.dadosfera.ai',
+        domain: '.dadosfera.ai',
        maxAge: exp,
        httpOnly: true,
        secure: true,
@@ -4,7 +4,7 @@ import { DadosferaLogger } from '@dadosfera/dadosfera-logs';
 import { lastValueFrom } from 'rxjs';

 import { ProtoServices } from '@dadosfera/protospack-v2/dist/lib/Duc';
-import { AuthProtoService as AuthServiceInterface, IdentityProviderProtoService } from '@dadosfera/protospack-v2/dist/lib/Duc/interfaces/write-service';
+import { AuthProtoService as AuthServiceInterface, IdentityProviderProtoService, UsersProtoService } from '@dadosfera/protospack-v2/dist/lib/Duc/interfaces/write-service';
 import {
  AuthSnowflakeSignInRequest,
  AuthSignInRequest,
@@ -21,18 +21,18 @@ import {
 } from '@dadosfera/protospack-v2/dist/lib/Duc/interfaces/messages';
 import { DucClient } from '../duc/client.config';
 import { Metadata } from '@grpc/grpc-js';
-import { BulkEditResponse } from './dtos/login';
-
+import { BulkEditResponse, UserDTO } from './dtos/login';
+import jwt from 'jsonwebtoken';
+import { PackTheMetadata } from 'src/utils/PackTheMetadata';

@Injectable()
 export class AuthClientService implements OnModuleInit {

-
  logger: DadosferaLogger;

-
  private authService: AuthServiceInterface;
-  private identityProviderService: IdentityProviderProtoService;
+  private userService: UsersProtoService;
+
  constructor(
    @Inject(DadosferaLogger)
    dadosferaLogger: DadosferaLogger,
@@ -46,8 +46,8 @@ export class AuthClientService implements OnModuleInit {
      ProtoServices.AuthProtoService,
    );

-    this.identityProviderService = this.grpcClient.getService<IdentityProviderProtoService>(
-      ProtoServices.IdentityProviderProtoService,
+    this.userService = this.grpcClient.getService<UsersProtoService>(
+      ProtoServices.UsersProtoService,
    );
  }

@@ -283,4 +283,51 @@ export class AuthClientService implements OnModuleInit {
      throw error;
    }
  }
+
+  private async getUser(id: string, metadata: Metadata) {
+    this.logger.info('getUser');
+    return await lastValueFrom(
+      this.userService.UserFindOneById({ id }, metadata),
+    );
+  }
+
+  public async extractUserFrom(token: string) {
+      const decoded: any = token && jwt.decode(token, { complete: true });
+      if (!decoded) throw new Error('Invalid token');
+
+      const { kid } = decoded.header;
+      // Busca a chave pública
+      const { keys } = await this.getPublicKeys();
+      const pemValue = keys.find((k) => k.kid === kid)?.pem;
+      if (!pemValue)
+          throw new Error('Public key not found');
+      jwt.verify(token, pemValue);
+
+      const payload = decoded.payload;
+      const metadata = PackTheMetadata({
+        customer_id: payload.customer_id
+      })
+
+      const {
+        user
+      } = await this.getUser(
+        payload.user_id,
+        metadata
+      );
+
+      const userDto: UserDTO = {
+          id: user.id,
+          name: user.username,
+          jobTitle: user?.jobTitle || null,
+          department: user?.department || null,
+          hierarchy: user?.hierarchy || null,
+          customer: {
+            id: payload.customer_id,
+            name: payload.customer_name,
+            tier: payload.customer_tier,
+          }
+        };
+
+      return userDto;
+    }
 }
@@ -140,3 +140,16 @@ export interface BulkEditResponse {
  successfulUsers: string[];
  failedUsers: string[];
 }
+
+export type UserDTO = {
+  id: string,
+  name: string,
+  jobTitle?: string,
+  department?: string,
+  hierarchy?: string,
+  customer: {
+    id: string,
+    name: string,
+    tier: string,
+  }
+}
@@ -197,9 +197,11 @@ class CatalogService implements OnModuleInit {
  async getUserRolesIds(userId: string) {
    const result = await this.userService.findOneById(userId).catch(() => null);

-    const roles_ids = result.user.roles.map((role) => role.id);
+    if (result) {
+      return result.user.roles.map((role) => role.id);
+    }

-    return roles_ids;
+    return [];
  }

  async searchDataAssets(
@@ -406,11 +408,14 @@ class CatalogService implements OnModuleInit {

      const roles = [];
      const users = [];
-      for (const role_id of data_asset.roles) {
+      const data_asset_roles = data_asset?.roles || []
+      for (const role_id of data_asset_roles) {
        const role = customer_roles.find((r) => r.id === role_id);
        if (role) roles.push({ id: role.id, name: role.name });
      }
-      for (const user_id of data_asset.users) {
+
+      const data_asset_users = data_asset?.users || []
+      for (const user_id of data_asset_users) {
        const user = customer_users.find((r) => r.id === user_id);
        if (user) users.push({ id: user.id, username: user.username });
      }
@@ -1,29 +1,46 @@
 import { Body, Controller, Inject, Param, Post, Req } from '@nestjs/common';
-import { init } from 'mixpanel';
-import { Authenticated } from 'src/decorators/authentication.decorator';
 import { ApiInternalOnlyController } from 'src/decorators/swagger.decorator';
-import { RequestUser, User } from 'src/decorators/user.decorator';
+import { RequestUser } from 'src/decorators/user.decorator';
 import { MixpanelService } from './mixpanel.service';
+import { extractUserFrom } from 'src/authentication/extract-user';
+import DadosferaLogger from '@dadosfera/dadosfera-logs';

@ApiInternalOnlyController()
@Controller('trackEvent')
 export class MixpanelController {
+  logger: DadosferaLogger;
+
  constructor(
-    private mixpanelService: MixpanelService
-  ) {}
+    @Inject(DadosferaLogger)
+    dadosferaLogger: DadosferaLogger,
+    private mixpanelService: MixpanelService,
+  ) {
+    this.logger = dadosferaLogger.logger;
+  }
+
  @Post(':id')
  async trackEvent(
    @Param('id') id,
    @Body() body,
-    @User() user: RequestUser,
    @Req() request
  ) {
+    this.logger.info(`POST Track Event: ${id}`)
    delete body.info;
+
+    const anonymousUser = {
+      username: "anonymous",
+      customer_name: "anonymous"
+    } as RequestUser
+
+    const hasToken = request.headers['authorization'];
+
+    const user = hasToken ? extractUserFrom(hasToken) : anonymousUser;
+
+    this.logger.info(`Has user: ${typeof hasToken == "string"}`)
 
    await this.mixpanelService.track(id, user, request, body)

+    this.logger.info(`Event successful`)
    return { id, body, user: user.username };
  }
-
-
 }
@@ -3,6 +3,7 @@ import { ApiOperation, ApiTags } from '@nestjs/swagger';
 import {
  AuthenticateCondition,
  Authenticated,
+  RequireSomePermission,
 } from 'src/decorators/authentication.decorator';
 import { PERMISSIONS_GROUPS } from '../../authentication/permissions.enum';
 import { PipelinesService } from './pipelines.service';
@@ -13,26 +14,6 @@ import { ApiInternalOnlyController } from 'src/decorators/swagger.decorator';
@ApiTags('Pipelines')
@Controller('pipelines')
@Authenticated()
-@AuthenticateCondition((req, user) => {
-  let action;
-
-  switch (req.method) {
-    case 'POST':
-      action = 'CREATE';
-      break;
-
-    case 'PUT':
-      action = 'UPDATE';
-      break;
-
-    default:
-      action = req.method;
-  }
-
-  return user.permissions.includes(
-    PERMISSIONS_GROUPS.PIPELINE.permissions[action].seqid,
-  );
-})
 export class PipelinesController {
  logger: DadosferaLogger;
  constructor(
@@ -44,6 +25,7 @@ export class PipelinesController {
  }

  @Post('start/:id')
+  @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.CREATE)
  @ApiOperation({
    deprecated: true,
    description:
@@ -71,6 +53,7 @@ export class PipelinesController {
    description:
      'This method is deprecated. Please use route /pipelinesV2/:id/status instead',
  })
+  @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.GET)
  async getPipelineStatus(@Body() body, @Param('id') id: string) {
    body.id = id;

@@ -26,6 +26,7 @@ import {
 import {
  AuthenticateCondition,
  RequireAllPermissions,
+  RequireSomePermission,
 } from 'src/decorators/authentication.decorator';
 import { PERMISSIONS_GROUPS } from '../../authentication/permissions.enum';
 import { PipelinesService } from './pipelines.service';
@@ -52,30 +53,6 @@ import { ApiInternalOnlyEndpoint } from 'src/decorators/swagger.decorator';
@ApiHeaders([{ name: 'dadosfera-lang', enum: LanguageEnum, required: false }])
@UseFilters(new GrpcToHttpExceptionFilter())
@Controller('pipelinesV2')
-@AuthenticateCondition((req, user) => {
-  let action;
-
-  switch (req.method) {
-    case 'POST':
-      action = 'CREATE';
-      break;
-
-    case 'PUT':
-      action = 'UPDATE';
-      break;
-
-    case 'PATCH':
-      action = 'UPDATE';
-      break;
-
-    default:
-      action = req.method;
-  }
-
-  return user.permissions.includes(
-    PERMISSIONS_GROUPS.PIPELINE.permissions[action].seqid,
-  );
-})
 export class PipelinesController {
  logger: DadosferaLogger;
  constructor(
@@ -88,6 +65,7 @@ export class PipelinesController {
  }

  @Get('monitoring-dashboard')
+  @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.GET)
  async getMonitoringDashboard(@User() user: RequestUser) {
    this.logger.info('PipelinesController - getMonitoringDashboard', { user });

@@ -100,6 +78,7 @@ export class PipelinesController {
  }

  @Post()
+  @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.CREATE)
  @ApiCreatedResponse({ type: IPipelineV2 })
  async create(
    @Language() language: LanguageEnum,
@@ -126,6 +105,7 @@ export class PipelinesController {
  }

  @Get()
+  @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.GET)
  async findAll(
    @User() user: RequestUser,
    @Language() language: LanguageEnum,
@@ -150,6 +130,7 @@ export class PipelinesController {
  }

  @Get('/download-logs')
+  @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.GET)
  async downloadLogs(
    @User() user: RequestUser,
    @Language() language: LanguageEnum,
@@ -180,6 +161,7 @@ export class PipelinesController {
  }

  @Get(':id/config')
+  @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW,PERMISSIONS_GROUPS.PIPELINE.permissions.GET)
  async getPipelineproperties(
    @Language() language: LanguageEnum,
    @User() user: RequestUser,
@@ -191,6 +173,7 @@ export class PipelinesController {
  }

  @Get(':id/objects')
+  @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.GET)
  async getPipelineObjects(
    @Language() language: LanguageEnum,
    @User() user: RequestUser,
@@ -202,16 +185,14 @@ export class PipelinesController {
  }

  @Get(':id/status')
+  @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.GET)
  async getPipelineStatus(@Body() body, @Param('id') id: string) {
    body.id = id;

-    this.logger.info(
-      process.env.DEV_URL + `/pipeline/${id} - ON GET PIPELINE STATUS ROUTE`,
-      {
-        user: body.info.user_id,
-        customer: body.info.customer,
-      },
-    );
+    this.logger.info(`/pipeline/${id} - ON GET PIPELINE STATUS ROUTE`, {
+      user: body.info.user_id,
+      customer: body.info.customer,
+    });

    const response = await this.oldPipelinesService.getPipelineStatus(body);

@@ -219,6 +200,7 @@ export class PipelinesController {
  }

  @Get('/:id')
+  @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.GET)
  async findOne(
    @Language() language: LanguageEnum,
    @User() user: RequestUser,
@@ -256,10 +238,12 @@ export class PipelinesController {
        });
        return res;
      });
+
    return result;
  }

  @Patch('/:id')
+  @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.UPDATE)
  async update(
    @Language() language: LanguageEnum,
    @Body() updatePipelineDto,
@@ -299,6 +283,7 @@ export class PipelinesController {
    deprecated: true,
    description: 'This method is deprecated. Please use PATCH instead',
  })
+  @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.UPDATE)
  async updateDeprecated(
    @Language() language: LanguageEnum,
    @Body() updatePipelineDto,
@@ -314,6 +299,7 @@ export class PipelinesController {
  @Delete(':id')
  @ApiNoContentResponse()
  @HttpCode(HttpStatus.NO_CONTENT)
+  @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.DELETE)
  async delete(@Param('id') id: string, @User() user: RequestUser) {
    this.logger.info('PipelinesController - delete', { user });
    const metadata = PackTheMetadata({
@@ -327,7 +313,7 @@ export class PipelinesController {

  @ApiInternalOnlyEndpoint()
  @Post('/init-upload')
-  @RequireAllPermissions(PERMISSIONS_GROUPS.PIPELINE.permissions.CREATE)
+  @RequireAllPermissions(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW)
  async initUploadFile(
    @User() user: RequestUser,
    @Body() body: IInitUploadCSVFile,
@@ -359,7 +345,7 @@ export class PipelinesController {

  @ApiInternalOnlyEndpoint()
  @Post('/complete-upload')
-  @RequireAllPermissions(PERMISSIONS_GROUPS.PIPELINE.permissions.CREATE)
+  @RequireAllPermissions(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW)
  async completeUploadFile(
    @User() user: RequestUser,
    @Body() body: ICompleteUploadCSVFile,
@@ -377,7 +363,7 @@ export class PipelinesController {

  @ApiInternalOnlyEndpoint()
  @Post('/file')
-  @RequireAllPermissions(PERMISSIONS_GROUPS.PIPELINE.permissions.CREATE)
+  @RequireAllPermissions(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW)
  async uploadedFile(
    @User() user: RequestUser,
    @Body() body: ICreatePipelineCSVFile,
@@ -427,6 +413,7 @@ export class PipelinesController {

  @ApiInternalOnlyEndpoint()
  @Post('start/:id')
+  @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.CREATE)
  async activate(@Param('id') id: string, @Body() body) {
    const { info } = body;

@@ -124,4 +124,24 @@ export class ThemeController {
    }
  }

+  @Post('/:id/theme/reset')
+  @ApiOkResponse({ type: CustomerThemeResponse })
+  async resetTheme(@Param('id') id: string) {
+    this.logger.info('getCustomerTheme with id' + id);
+
+    try {
+      await this.themeService.resetTheme(id);
+
+      return { theme: null };
+    }catch (err) {
+      if (err.details === ErrorCodes.CUSTOMER.NOT_FOUND) {
+        this.logger.error('Error - getCustomerTheme - Expect CUSTOMER.NOT_FOUND');
+        throw new HttpException(err.details, HttpStatus.NOT_FOUND);
+      } else {
+        this.logger.error('Error - getCustomerTheme Unknown Error:' + err?.message);
+        return { theme: null };
+      };
+    }
+  }
+
 }
@@ -44,6 +44,18 @@ export class ThemeService implements OnModuleInit {
    );
  }

+  async resetTheme(id: string) {
+    const { theme } = await firstValueFrom(
+      this.themeService.ResetCustomerTheme({
+        id
+      }),
+    );
+
+     return {
+      theme
+    }
+  }
+
  async createThemeByCustomer(id: string, theme: CustomerThemeRequest & Files) {
    if (!id) {
      this.logger.error('Error - saveCustomertheme - not found id:' + id);
@@ -5,15 +5,25 @@ import { redisStore } from 'cache-manager-ioredis-yet';
@Module({
  imports: [
    CacheModule.registerAsync({
-      useFactory: async () => ({
-        store: await redisStore({
+      useFactory: async () => {
+        const baseRedisConfig = {
          ttl: 5 * 1000 * 60, // 5 minute
          host: process.env.REDIS_HOST,
          port: process.env.REDIS_PORT && Number(process.env.REDIS_PORT),
          db: process.env.REDIS_DATABASE && Number(process.env.REDIS_DATABASE),
          keyPrefix: 'maestro:sso',
-        }),
-      }),
+        }
+
+        if (process.env.ENV !== 'local') {  
+          baseRedisConfig['tls'] = {
+            servername: process.env.REDIS_HOST,
+          }
+        }
+
+        return {
+          store: await redisStore(baseRedisConfig),
+        }
+      },
    }),
  ],
  providers: [CacheService],
Author	SHA1	Message	Date
Marcos Rodrigues Silva	e7f410831f	Merge pull request #395 from dadosfera/beta Beta	2025-12-01 17:47:24 -03:00
Marcos Rodrigues Silva	cd2c53b5c5	Merge pull request #398 from dadosfera/feat/user-properties FIX: user response	2025-12-01 17:36:56 -03:00
Marcos Rodrigues	adf1b3b97e	FIX: user response	2025-12-01 17:30:37 -03:00
Marcos Rodrigues Silva	d84b5e184b	Merge pull request #397 from dadosfera/feat/user-properties FEAT: include more user info in /me	2025-12-01 12:36:16 -03:00
Marcos Rodrigues	6d608a0457	FEAT: include more user info in /me	2025-12-01 12:26:33 -03:00
Marcos Rodrigues Silva	b8be2c7803	Merge pull request #396 from dadosfera/fix/api-key-catalog-roles FIX: api key catalog roles	2025-12-01 09:34:21 -03:00
Marcos Rodrigues	24fce721e3	FIX: api key catalog roles	2025-12-01 09:32:26 -03:00
Marcos Rodrigues Silva	23a9a27db1	Merge pull request #394 from dadosfera/fix/private-front-cors FIX: 404 in get public key	2025-11-28 16:44:54 -03:00
Marcos Rodrigues	0f5ed50af9	FIX: 404 in get public key	2025-11-28 16:37:38 -03:00
Marcos Rodrigues Silva	5f8f6a64ab	Merge pull request #393 from dadosfera/fix/private-front-cors FIX: include private frontend url in cors origins list	2025-11-28 10:53:45 -03:00
Marcos Rodrigues	8800ac2736	FIX: include private frontend url in cors origins list	2025-11-28 10:50:31 -03:00
Marcos Rodrigues Silva	bdb82c2ce4	Merge pull request #392 from dadosfera/fix/authenticated-track-events Fix/authenticated track events	2025-11-27 09:45:46 -03:00
Marcos Rodrigues	6d9ecc3568	FIX: mixpanel events	2025-11-27 09:43:43 -03:00
Marcos Rodrigues Silva	7764447adc	Merge pull request #391 from dadosfera/fix/private-ingress-annotations FIX: ci to oracle github worker	2025-11-25 11:37:29 -03:00
Marcos Rodrigues	576fdecf89	FIX: ci to oracle github worker	2025-11-25 11:27:04 -03:00
Marcos Rodrigues Silva	3de1e90fa8	Merge pull request #390 from dadosfera/fix/private-ingress-annotations Fix/private ingress annotations	2025-11-25 11:12:58 -03:00
Marcos Rodrigues	5e90950660	FIX: restore whitelist annotation	2025-11-25 10:59:06 -03:00
Marcos Rodrigues	3ed26e648f	FIX: ci	2025-11-25 10:48:06 -03:00
Marcos Rodrigues Silva	fff3523152	Merge pull request #389 from dadosfera/fix/private-ingress-annotations FIX: private ingress annotations	2025-11-25 10:38:52 -03:00
Marcos Rodrigues	19e4daeea4	FIX: private ingress annotations	2025-11-25 10:35:08 -03:00
Marcos Rodrigues Silva	8624d3f016	Merge pull request #388 from dadosfera/fix/reset-theme Fix/reset theme	2025-11-21 11:01:48 -03:00
Marcos Rodrigues	4f4da5bebe	FIX: reset theme	2025-11-21 10:51:31 -03:00
Marcos Rodrigues	f00d2bf41d	FIX: reset cstumer theme	2025-11-21 09:55:39 -03:00
Marcos Rodrigues Silva	dc1d1400d8	Merge pull request #387 from dadosfera/feat/lineage FIX: change wget to curl	2025-11-13 18:19:20 -03:00
Marcos Rodrigues	d4451153a3	FIX: change wget to curl	2025-11-13 18:14:47 -03:00
Marcos Rodrigues Silva	06ba759ea3	Merge pull request #386 from dadosfera/feat/lineage Feat/lineage	2025-11-13 17:58:33 -03:00
Marcos Rodrigues	dd0d08ad6e	FEAT: add permissions to lineage module	2025-11-13 17:48:55 -03:00
Marcos Rodrigues	ec81082877	FIX: resolve cors from localhost	2025-11-13 17:48:38 -03:00
Marcos Rodrigues Silva	7f58dc7090	Merge pull request #385 from dadosfera/hotfix/import-files FIX: permissions	2025-10-22 18:35:35 -03:00
Marcos Rodrigues	43aa379c06	FIX: permissions	2025-10-22 18:29:43 -03:00
Marcos Rodrigues Silva	c284f8753c	Merge pull request #384 from dadosfera/hotfix/import-files FIX: pipelines v2 permissions	2025-10-22 17:48:26 -03:00
Marcos Rodrigues	3a8f2495c4	FIX: pipelines v2 permissions	2025-10-20 18:13:54 -03:00
Marcos Rodrigues Silva	af248716ef	Merge pull request #383 from dadosfera/beta Beta	2025-10-16 18:15:08 -03:00
Marcos Rodrigues Silva	a57ad41ad4	Merge pull request #382 from dadosfera/features/roles Features/roles	2025-10-16 17:21:37 -03:00
Marcos Rodrigues	ffddceec3b	FEAT: roles	2025-10-16 17:17:01 -03:00
Marcos Rodrigues Silva	b04d5bb402	Merge pull request #381 from dadosfera/feature/tableau-dash UPDATE: default roles and user	2025-09-23 18:10:35 -03:00
Marcos Rodrigues	53df3caf3f	UPDATE: default roles and user	2025-09-23 18:09:25 -03:00
Marcos Rodrigues Silva	ab2e35b54f	Merge pull request #380 from dadosfera/beta Beta	2025-09-17 18:11:05 -03:00
Marcos Rodrigues Silva	bfa77d8f7b	Merge pull request #379 from dadosfera/feature/auth-cookie Feature/auth cookie	2025-09-16 17:40:10 -03:00
marcos-silva-rodrigues	5002d147ad	UPDATE: add all dadosfera domains	2025-09-16 17:33:19 -03:00
Marcos Rodrigues Silva	cd55dc0dc4	Merge pull request #378 from dadosfera/hotfix/uptime-ip UPDATE: uptime internal ip	2025-09-15 18:04:14 -03:00
marcos-silva-rodrigues	f1d56e4c2c	UPDATE: uptime internal ip	2025-09-15 10:34:36 -03:00
Marcos Rodrigues Silva	bc49f79cb3	Merge pull request #373 from dadosfera/hotfix/oracle Network policies	2025-09-09 18:08:28 -03:00
marcos-silva-rodrigues	00163ad894	UPDATE: network policies	2025-09-09 11:17:45 -03:00
Marcos Rodrigues Silva	a2fbeb97cc	Merge pull request #377 from dadosfera/feature/auth-cookie UPDATE: test cors domain	2025-09-08 15:25:05 -03:00
marcos-silva-rodrigues	288a796f46	UPDATE: test cors domain	2025-09-08 15:22:26 -03:00
Marcos Rodrigues Silva	b5a1e93770	Merge pull request #376 from dadosfera/feature/auth-cookie UPDATE: cookie path	2025-09-08 10:32:32 -03:00
marcos-silva-rodrigues	1ee49ceab8	UPDATE: cookie path	2025-09-08 10:30:56 -03:00
Marcos Rodrigues Silva	6eaf9cf6d0	Merge pull request #375 from dadosfera/feature/auth-cookie UDATE: test cookie domain dadosfera.ai	2025-09-08 09:32:21 -03:00
marcos-silva-rodrigues	075ca747df	FIX: ghost commit	2025-09-08 09:26:47 -03:00
marcos-silva-rodrigues	9ead4588c1	UDATE: test cookie domain dadosfera.ai	2025-09-08 09:25:14 -03:00
Marcos Rodrigues Silva	92b64bb362	Merge pull request #374 from dadosfera/hotfix/oracle Hotfix/oracle	2025-09-05 10:25:38 -03:00
marcos-silva-rodrigues	cb8798d871	FIX: enable restricted ips	2025-09-05 10:21:11 -03:00
marcos-silva-rodrigues	be70f4da09	FIX: disabled network policies	2025-09-04 10:02:20 -03:00
Marcos Rodrigues Silva	b436d7de7a	Merge pull request #372 from dadosfera/hotfix/oracle Hotfix/oracle	2025-09-03 16:49:31 -03:00
Marcos Rodrigues Silva	6780167f2b	Merge pull request #371 from dadosfera/hotfix/oracle FIX: infinite loading when login is incorrect	2025-09-03 16:31:28 -03:00
marcos-silva-rodrigues	2a3ab4228f	FIX: infinite loading when login is incorrect	2025-09-03 16:25:46 -03:00
Marcos Rodrigues Silva	caeaf62a9d	Merge pull request #370 from dadosfera/hotfix/oracle Hotfix/oracle	2025-09-03 12:21:17 -03:00
marcos-silva-rodrigues	8e605aa361	FIX: affinity and tls config local	2025-09-03 12:19:30 -03:00
Marcos Rodrigues Silva	fa4267f54a	Merge pull request #369 from dadosfera/hotfix/oracle UPDATE: oracle vpn	2025-08-29 10:16:45 -03:00
marcos-silva-rodrigues	47d8ca2760	UPDATE: oracle vpn	2025-08-29 10:12:58 -03:00
Marcos Rodrigues Silva	f3c51e5328	Merge pull request #368 from dadosfera/beta UPDATE: fixed cloud oracle	2025-08-28 18:54:02 -03:00
marcos-silva-rodrigues	dcf70fdaae	UPDATE: fixed cloud oracle	2025-08-28 18:40:43 -03:00
Marcos Rodrigues Silva	70f663374d	Merge pull request #366 from dadosfera/beta MIgração para oracle	2025-08-28 18:32:59 -03:00
Marcos Rodrigues Silva	38f2317bb6	Merge pull request #367 from dadosfera/chore/oracle UPDATE: affinity and log	2025-08-28 17:05:32 -03:00
marcos-silva-rodrigues	31e0ca6c91	UPDATE: affinity and log	2025-08-28 16:52:52 -03:00
Marcos Rodrigues Silva	dc063cbf3f	Merge pull request #365 from dadosfera/chore/oracle Chore/oracle	2025-08-27 17:45:34 -03:00
marcos-silva-rodrigues	a4c82ae4a8	UPDATE:migration to oracle	2025-08-27 17:38:26 -03:00
Marcos Rodrigues Silva	11a65e11d1	Merge pull request #364 from dadosfera/chore/oracle UPDATE: redis host	2025-08-27 14:15:27 -03:00
marcos-silva-rodrigues	73d47f0ff5	UPDATE: merge	2025-08-27 14:13:17 -03:00
marcos-silva-rodrigues	d36e532c8e	UPDATE: redis host	2025-08-27 13:58:31 -03:00
Marcos Rodrigues Silva	b2a24e3a49	Merge pull request #363 from dadosfera/feature/auth-session UPDATE: test subdomain	2025-08-14 17:51:36 -03:00
Marcos Rodrigues Silva	381a401ebb	Merge pull request #362 from dadosfera/feature/auth-session CI: add cookie secret	2025-08-14 17:27:09 -03:00
Marcos Rodrigues Silva	1b6846532f	Merge pull request #361 from dadosfera/feature/auth-session CHORE: update nginx ingress annotations	2025-08-14 16:07:31 -03:00
Marcos Rodrigues Silva	878c9cf450	Merge pull request #360 from dadosfera/feature/auth-session FIX: set cookies if exists tokens	2025-08-14 15:39:57 -03:00
Marcos Rodrigues Silva	df852449b2	Merge pull request #359 from dadosfera/feature/auth-session Feature/auth session	2025-08-14 15:28:23 -03:00
Marcos Rodrigues Silva	9b168612a4	Merge pull request #358 from dadosfera/beta Beta	2025-08-08 11:23:02 -03:00