UPDATE: updating /me to get api key

FIX: Update ValidationPipe for class-validator 0.14.0+ compatibility
This fix addresses a breaking change introduced in class-validator 0.14.0 where the default for forbidUnknownValues changed from false to true. Issue: - POST /connections was returning 400 "an unknown value was passed to the validate function" errors - This occurred because CreateConnectionDto and UpdateConnectionDto have no validation decorators, causing class-validator 0.14.0+ to treat them as "unknown values" - Extra fields (like connector_version) in request payloads would fail validation Solution: - Set forbidUnknownValues: false to allow DTOs without validation decorators - Set whitelist: true to automatically strip extra properties not defined in DTOs - This maintains backward compatibility while adding security by removing unexpected fields 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2026-09-01 12:18:15 +00:00 · 2026-01-20 17:52:34 -03:00 · 2026-01-12 16:22:25 -03:00 · 2026-01-08 12:22:47 -03:00 · 2026-01-08 12:10:17 -03:00 · 2026-01-07 19:04:07 -03:00
18 changed files with 2684 additions and 3285 deletions
@@ -0,0 +1,12 @@
+node_modules
+dist
+.git
+*.log
+npm-debug.log*
+.DS_Store
+.env
+.env.*
+coverage
+.nyc_output
+*.tgz
+!protospack.tgz
@@ -1,4 +1,5 @@
-FROM node:18.17-alpine AS base_image
+FROM node:20-alpine AS base_image
+RUN npm install -g npm@latest

 FROM base_image AS build_base
 WORKDIR /app
@@ -0,0 +1,47 @@
+FROM node:22-alpine AS base_image
+RUN npm install -g npm@latest
+
+FROM base_image AS build_base
+WORKDIR /app
+RUN apk update
+RUN apk add --no-cache \
+      aws-cli \
+      chromium \
+      nss \
+      freetype \
+      harfbuzz \
+      ca-certificates \
+      ttf-freefont
+COPY package*.json ./
+
+ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
+    PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
+
+
+# Local build with secrets
+FROM build_base AS build
+RUN --mount=type=secret,id=aws,target=/root/.aws/credentials \
+  aws codeartifact login --tool npm --namespace @dadosfera --repository dadosfera-npm --domain dadosfera --domain-owner 611330257153 --region us-east-1
+RUN npm ci
+COPY . .
+RUN npm run build
+
+
+FROM base_image
+WORKDIR /app
+COPY --from=build /app/dist ./dist
+COPY --from=build /app/node_modules ./node_modules
+COPY --from=build /app/package*.json ./
+RUN apk update
+RUN apk add --no-cache \
+      chromium \
+      nss \
+      freetype \
+      harfbuzz \
+      ca-certificates \
+      ttf-freefont
+
+ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
+    PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
+
+ENTRYPOINT ["npm", "run", "start:prod"]
@@ -48,6 +48,9 @@ spec:
            {{- toYaml .Values.resources | nindent 12 }}
          {{- end }}
          env:
+            # Auth Provider Configuration (cognito or keycloak)
+            - name: AUTH_PROVIDER
+              value: {{ .Values.maestro.auth_provider | default "cognito" | quote }}
            - name: AWS_IDENTITY_POOL_ID
              value: {{ .Values.maestro.aws_identity_pool_id }}
            - name: AWS_REGION
@@ -27,6 +27,9 @@ resources:
    cpu: 2000m
    memory: 2Gi
 maestro:
+  # Auth provider: "cognito" (default) or "keycloak"
+  # Note: maestro doesn't connect to Keycloak directly, only duc does
+  auth_provider: "cognito"
  aws_identity_pool_id: "us-east-1_Mrezsw9Sn"
  duc_url: duc.dadosfera.ai
  in_factory_url: in-factory.dadosfera.ai
@@ -213,14 +213,7 @@
          ],
          "responses": {
            "200": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "type": "object"
-                  }
-                }
-              }
+              "description": ""
            }
          },
          "tags": [
@@ -722,6 +715,158 @@
          ]
        }
      },
+      "/api-key": {
+        "post": {
+          "operationId": "ApiKeyController_create",
+          "parameters": [
+            {
+              "name": "dadosfera-lang",
+              "in": "header",
+              "required": false,
+              "schema": {
+                "enum": [
+                  "pt-br",
+                  "en-us"
+                ],
+                "type": "string"
+              }
+            }
+          ],
+          "requestBody": {
+            "required": true,
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CreateApiKeyDto"
+                }
+              }
+            }
+          },
+          "responses": {
+            "201": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "$ref": "#/components/schemas/CreateApiKeyResponseDto"
+                  }
+                }
+              }
+            },
+            "default": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "$ref": "#/components/schemas/CreateApiKeyResponseDto"
+                  }
+                }
+              }
+            }
+          },
+          "tags": [
+            "ApiKey"
+          ],
+          "security": [
+            {
+              "access-token": []
+            }
+          ]
+        },
+        "get": {
+          "operationId": "ApiKeyController_findAll",
+          "parameters": [
+            {
+              "name": "dadosfera-lang",
+              "in": "header",
+              "required": false,
+              "schema": {
+                "enum": [
+                  "pt-br",
+                  "en-us"
+                ],
+                "type": "string"
+              }
+            }
+          ],
+          "responses": {
+            "200": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/components/schemas/ApiKeyBaseResponseDto"
+                    }
+                  }
+                }
+              }
+            },
+            "default": {
+              "description": "",
+              "content": {
+                "application/json": {
+                  "schema": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/components/schemas/ApiKeyBaseResponseDto"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "tags": [
+            "ApiKey"
+          ],
+          "security": [
+            {
+              "access-token": []
+            }
+          ]
+        }
+      },
+      "/api-key/{id}": {
+        "delete": {
+          "operationId": "ApiKeyController_remove",
+          "parameters": [
+            {
+              "name": "dadosfera-lang",
+              "in": "header",
+              "required": false,
+              "schema": {
+                "enum": [
+                  "pt-br",
+                  "en-us"
+                ],
+                "type": "string"
+              }
+            },
+            {
+              "name": "id",
+              "required": true,
+              "in": "path",
+              "schema": {
+                "type": "string"
+              }
+            }
+          ],
+          "responses": {
+            "200": {
+              "description": ""
+            }
+          },
+          "tags": [
+            "ApiKey"
+          ],
+          "security": [
+            {
+              "access-token": []
+            }
+          ]
+        }
+      },
      "/connections": {
        "post": {
          "operationId": "ConnectionController_createConnection",
@@ -5461,6 +5606,66 @@
          ]
        }
      },
+      "/customers/{id}/organization-info": {
+        "get": {
+          "operationId": "CustomersController_getOrganizationInfo",
+          "parameters": [
+            {
+              "name": "id",
+              "required": true,
+              "in": "path",
+              "schema": {
+                "type": "string"
+              }
+            }
+          ],
+          "responses": {
+            "200": {
+              "description": "Organization information"
+            }
+          },
+          "tags": [
+            "Customers"
+          ],
+          "security": [
+            {
+              "access-token": []
+            },
+            {
+              "access-token": []
+            }
+          ]
+        },
+        "put": {
+          "operationId": "CustomersController_updateOrganizationInfo",
+          "parameters": [
+            {
+              "name": "id",
+              "required": true,
+              "in": "path",
+              "schema": {
+                "type": "string"
+              }
+            }
+          ],
+          "responses": {
+            "200": {
+              "description": "Organization information updated"
+            }
+          },
+          "tags": [
+            "Customers"
+          ],
+          "security": [
+            {
+              "access-token": []
+            },
+            {
+              "access-token": []
+            }
+          ]
+        }
+      },
      "/catalog/data-asset/share/{id}": {
        "get": {
          "operationId": "ShareController_getShareDataAsset",
@@ -6531,158 +6736,6 @@
          ]
        }
      },
-      "/api-key": {
-        "post": {
-          "operationId": "ApiKeyController_create",
-          "parameters": [
-            {
-              "name": "dadosfera-lang",
-              "in": "header",
-              "required": false,
-              "schema": {
-                "enum": [
-                  "pt-br",
-                  "en-us"
-                ],
-                "type": "string"
-              }
-            }
-          ],
-          "requestBody": {
-            "required": true,
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/CreateApiKeyDto"
-                }
-              }
-            }
-          },
-          "responses": {
-            "201": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "$ref": "#/components/schemas/CreateApiKeyResponseDto"
-                  }
-                }
-              }
-            },
-            "default": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "$ref": "#/components/schemas/CreateApiKeyResponseDto"
-                  }
-                }
-              }
-            }
-          },
-          "tags": [
-            "ApiKey"
-          ],
-          "security": [
-            {
-              "access-token": []
-            }
-          ]
-        },
-        "get": {
-          "operationId": "ApiKeyController_findAll",
-          "parameters": [
-            {
-              "name": "dadosfera-lang",
-              "in": "header",
-              "required": false,
-              "schema": {
-                "enum": [
-                  "pt-br",
-                  "en-us"
-                ],
-                "type": "string"
-              }
-            }
-          ],
-          "responses": {
-            "200": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "type": "array",
-                    "items": {
-                      "$ref": "#/components/schemas/ApiKeyBaseResponseDto"
-                    }
-                  }
-                }
-              }
-            },
-            "default": {
-              "description": "",
-              "content": {
-                "application/json": {
-                  "schema": {
-                    "type": "array",
-                    "items": {
-                      "$ref": "#/components/schemas/ApiKeyBaseResponseDto"
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "tags": [
-            "ApiKey"
-          ],
-          "security": [
-            {
-              "access-token": []
-            }
-          ]
-        }
-      },
-      "/api-key/{id}": {
-        "delete": {
-          "operationId": "ApiKeyController_remove",
-          "parameters": [
-            {
-              "name": "dadosfera-lang",
-              "in": "header",
-              "required": false,
-              "schema": {
-                "enum": [
-                  "pt-br",
-                  "en-us"
-                ],
-                "type": "string"
-              }
-            },
-            {
-              "name": "id",
-              "required": true,
-              "in": "path",
-              "schema": {
-                "type": "string"
-              }
-            }
-          ],
-          "responses": {
-            "200": {
-              "description": ""
-            }
-          },
-          "tags": [
-            "ApiKey"
-          ],
-          "security": [
-            {
-              "access-token": []
-            }
-          ]
-        }
-      },
      "/identity-providers": {
        "post": {
          "operationId": "IdentityProviderController_addIdentityProvider",
@@ -7798,6 +7851,104 @@
            "accessToken"
          ]
        },
+        "CreateApiKeyDto": {
+          "type": "object",
+          "properties": {
+            "permissions": {
+              "description": "Array of permission IDs",
+              "type": "array",
+              "items": {
+                "type": "number"
+              }
+            }
+          },
+          "required": [
+            "permissions"
+          ]
+        },
+        "PermissionDto": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "number"
+            },
+            "name": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "id",
+            "name"
+          ]
+        },
+        "CreateApiKeyResponseDto": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "format": "uuid"
+            },
+            "key_mask": {
+              "type": "string"
+            },
+            "permissions": {
+              "type": "array",
+              "items": {
+                "$ref": "#/components/schemas/PermissionDto"
+              }
+            },
+            "created_at": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "created_by": {
+              "type": "string"
+            },
+            "key": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "id",
+            "key_mask",
+            "permissions",
+            "created_at",
+            "created_by",
+            "key"
+          ]
+        },
+        "ApiKeyBaseResponseDto": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "format": "uuid"
+            },
+            "key_mask": {
+              "type": "string"
+            },
+            "permissions": {
+              "type": "array",
+              "items": {
+                "$ref": "#/components/schemas/PermissionDto"
+              }
+            },
+            "created_at": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "created_by": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "id",
+            "key_mask",
+            "permissions",
+            "created_at",
+            "created_by"
+          ]
+        },
        "CreateConnectionDto": {
          "type": "object",
          "properties": {
@@ -8021,37 +8172,6 @@
            "message"
          ]
        },
-        "PermissionDto": {
-          "type": "object",
-          "properties": {
-            "id": {
-              "type": "number"
-            },
-            "seqid": {
-              "type": "number"
-            },
-            "name": {
-              "type": "string"
-            },
-            "claim": {
-              "type": "string"
-            },
-            "createdAt": {
-              "type": "string"
-            },
-            "updatedAt": {
-              "type": "string"
-            }
-          },
-          "required": [
-            "id",
-            "seqid",
-            "name",
-            "claim",
-            "createdAt",
-            "updatedAt"
-          ]
-        },
        "Customer": {
          "type": "object",
          "properties": {
@@ -8169,7 +8289,7 @@
            "companyName": {
              "type": "string"
            },
-            "companySite": {
+            "personalSite": {
              "type": "string"
            },
            "mfaStatus": {
@@ -8192,6 +8312,9 @@
              "items": {
                "type": "string"
              }
+            },
+            "authProvider": {
+              "type": "string"
            }
          },
          "required": [
@@ -8204,7 +8327,7 @@
            "hierarchy",
            "bio",
            "companyName",
-            "companySite",
+            "personalSite",
            "mfaStatus",
            "createdAt",
            "updatedAt",
@@ -8344,7 +8467,7 @@
            "companyName": {
              "type": "string"
            },
-            "companySite": {
+            "personalSite": {
              "type": "string"
            },
            "customer": {
@@ -8376,7 +8499,7 @@
            "hierarchy",
            "bio",
            "companyName",
-            "companySite",
+            "personalSite",
            "mfaStatus",
            "createdAt",
            "updatedAt",
@@ -8520,7 +8643,7 @@
            "bio": {
              "type": "string"
            },
-            "companySite": {
+            "personalSite": {
              "type": "string"
            },
            "companyName": {
@@ -8572,7 +8695,7 @@
            "companyName": {
              "type": "string"
            },
-            "companySite": {
+            "personalSite": {
              "type": "string"
            },
            "mfaStatus": {
@@ -8600,7 +8723,7 @@
            "hierarchy",
            "bio",
            "companyName",
-            "companySite",
+            "personalSite",
            "mfaStatus",
            "createdAt",
            "updatedAt",
@@ -9649,6 +9772,9 @@
                "public",
                "private"
              ]
+            },
+            "docs": {
+              "type": "string"
            }
          },
          "required": [
@@ -9903,6 +10029,9 @@
                "public",
                "private"
              ]
+            },
+            "docs": {
+              "type": "string"
            }
          },
          "required": [
@@ -9942,6 +10071,9 @@
            },
            "embed": {
              "$ref": "#/components/schemas/EmbedObject"
+            },
+            "docs": {
+              "type": "string"
            }
          },
          "required": [
@@ -10523,89 +10655,6 @@
            "publicKey"
          ]
        },
-        "CreateApiKeyDto": {
-          "type": "object",
-          "properties": {
-            "permissions": {
-              "description": "Array of permission IDs",
-              "type": "array",
-              "items": {
-                "type": "number"
-              }
-            }
-          },
-          "required": [
-            "permissions"
-          ]
-        },
-        "CreateApiKeyResponseDto": {
-          "type": "object",
-          "properties": {
-            "id": {
-              "type": "string",
-              "format": "uuid"
-            },
-            "key_mask": {
-              "type": "string"
-            },
-            "permissions": {
-              "type": "array",
-              "items": {
-                "$ref": "#/components/schemas/PermissionDto"
-              }
-            },
-            "created_at": {
-              "type": "string",
-              "format": "date-time"
-            },
-            "created_by": {
-              "type": "string"
-            },
-            "key": {
-              "type": "string"
-            }
-          },
-          "required": [
-            "id",
-            "key_mask",
-            "permissions",
-            "created_at",
-            "created_by",
-            "key"
-          ]
-        },
-        "ApiKeyBaseResponseDto": {
-          "type": "object",
-          "properties": {
-            "id": {
-              "type": "string",
-              "format": "uuid"
-            },
-            "key_mask": {
-              "type": "string"
-            },
-            "permissions": {
-              "type": "array",
-              "items": {
-                "$ref": "#/components/schemas/PermissionDto"
-              }
-            },
-            "created_at": {
-              "type": "string",
-              "format": "date-time"
-            },
-            "created_by": {
-              "type": "string"
-            }
-          },
-          "required": [
-            "id",
-            "key_mask",
-            "permissions",
-            "created_at",
-            "created_by"
-          ]
-        },
        "CreateIdentityProvider": {
          "type": "object",
          "properties": {
@@ -35,7 +35,7 @@
    "@aws-sdk/signature-v4": "^3.370.0",
    "@dadosfera/dadosfera-logs": "^1.0.0-beta.4",
    "@dadosfera/protospack": "2.5.3",
-    "@dadosfera/protospack-v2": "3.38.0-beta.18",
+    "@dadosfera/protospack-v2": "^3.38.0-beta.26",
    "@grpc/grpc-js": "^1.9.3",
    "@grpc/proto-loader": "^0.7.9",
    "@nestjs/cli": "^9.5.0",
@@ -49,7 +49,7 @@
    "@nestjs/schematics": "^9.2.0",
    "@nestjs/swagger": "^6.3.0",
    "@nestjs/testing": "^9.4.3",
-    "axios": "^0.27.2",
+    "axios": "^0.30.2",
    "cache-manager": "^5.1.4",
    "cache-manager-ioredis-yet": "^1.1.0",
    "class-transformer": "^0.5.1",
@@ -80,7 +80,13 @@
    "swagger-ui-express": "^4.6.3"
  },
  "overrides": {
-    "multer": "1.4.5-lts.1"
+    "multer": "2.0.2",
+    "form-data": "^4.0.4",
+    "body-parser": "^1.20.3",
+    "cross-spawn": "^7.0.5",
+    "glob": "^10.5.0",
+    "path-to-regexp": "^3.3.0",
+    "semver": "^7.5.2"
  },
  "devDependencies": {
    "@types/cache-manager": "^4.0.6",
@@ -55,6 +55,7 @@ import jwt, { JwtPayload } from 'jsonwebtoken';
 import { LanguageEnum } from 'src/utils/languages.enum';
 import { Language } from 'src/decorators/language.decorator';
 import { ApiInternalOnlyEndpoint } from 'src/decorators/swagger.decorator';
+import { ApiKeyService } from 'src/modules/api-key/api-key.service';

 type CookiesValues = {
  accessToken?: string;
@@ -74,6 +75,7 @@ export class AuthController {
    @Inject(DadosferaLogger)
    dadosferaLogger: DadosferaLogger,
    private authClient: AuthClientService,
+    private apiKeyService: ApiKeyService,
  ) {
    this.logger = dadosferaLogger.logger;

@@ -190,13 +192,14 @@ export class AuthController {
  ) {
    this.logger.info('/auth - change-password');

-    const { oldPassword, newPassword } = body;
+    const { oldPassword, newPassword, totpCode } = body;
    const { authorization: accessToken } = headers;

    return this.authClient.changePassword({
      accessToken,
      oldPassword,
      newPassword,
+      totpCode,
    });
  }

@@ -214,7 +217,8 @@ export class AuthController {

    const { username } = body;

-    return this.authClient.resetPassword({ username }, metadata);
+    await this.authClient.resetPassword({ username }, metadata);
+    return { authProvider: process.env.AUTH_PROVIDER || 'cognito' };
  }

  @ApiInternalOnlyEndpoint()
@@ -475,10 +479,29 @@ export class AuthController {
  async getMe(@Req() req: Request, @Res() res: Response) {
    this.logger.info('GET /auth/me ')

+    // Check for API key header first
+    const apiKey = req.get('X-Api-key');
+    if (apiKey) {
+      this.logger.info('Authenticating via X-Api-key header');
+      const { api_key } = await this.apiKeyService.get(apiKey);
+
+      const userDto = {
+        id: api_key.user_id,
+        name: api_key.username,
+        customer: {
+          id: api_key.customer_id,
+          name: api_key.customer_name,
+          tier: api_key.customer_tier,
+        }
+      };
+
+      return res.status(200).json(userDto);
+    }
+
    // Get token and headers
    const accessToken = req.cookies['ddf-auth'];
-    const refreshToken = req.cookies['ddf-refresh-auth']; 
-    const userId = req.cookies['ddf-user-id']; 
+    const refreshToken = req.cookies['ddf-refresh-auth'];
+    const userId = req.cookies['ddf-user-id'];
    const resourceHost = req.headers["host"]

    const hasUserSession = Boolean(accessToken) && Boolean(userId);
@@ -8,10 +8,11 @@ import { AuthClientService } from './auth.service';
 import { DucClient } from '../duc/client.config';
 import { GoogleLoginStrategy } from './passport-strategies/google-strategy';
 import { getOauthSecrets } from 'src/utils/OauthSecrets';
+import { ApiKeyModule } from '../api-key/api-key.module';
 const client = new DucClient();

@Module({
-  imports: [ClientsModule.register([client.providerOptions])],
+  imports: [ClientsModule.register([client.providerOptions]), ApiKeyModule],
  controllers: [AuthController],
  providers: [
    AuthClientService,
@@ -143,6 +143,7 @@ export class AuthClientService implements OnModuleInit {
    accessToken,
    oldPassword,
    newPassword,
+    totpCode,
  }: AuthChangePasswordRequest) {
    this.logger.info('ChangePassword');

@@ -151,6 +152,7 @@ export class AuthClientService implements OnModuleInit {
        accessToken,
        oldPassword,
        newPassword,
+        totpCode,
      }),
    );
  }
@@ -98,6 +98,8 @@ export class IDataAsset {
  embed?: EmbedObject;
  @ApiPropertyOptional({ enum: DataAssetShareType })
  share_type?: DataAssetShareType;
+  @ApiPropertyOptional()
+  docs?: string;
 }

 export class IOneDataAsset {
@@ -200,6 +202,8 @@ export class IUpdateDataRequest {
  embed: EmbedObject;
  @ApiPropertyOptional({ enum: DataAssetShareType })
  share_type?: DataAssetShareType;
+  @ApiPropertyOptional()
+  docs?: string;
 }
 export class ICreateDataAsset implements CreateDataAssetRequest {
  @ApiProperty()
@@ -214,6 +218,8 @@ export class ICreateDataAsset implements CreateDataAssetRequest {
  location: string;
  @ApiPropertyOptional()
  embed: EmbedObject;
+  @ApiPropertyOptional()
+  docs: string;
 }

 export class IPreview {
@@ -136,4 +136,32 @@ export class CustomersController {
    const result = await this.customersService.getAccessDashboardUrl(user.customer_name, metadata);
    return result;
  }
+
+  @Get(':id/organization-info')
+  @Authenticated()
+  @RequireAllPermissions(PERMISSIONS_GROUPS.USERS.permissions.ADMIN)
+  @ApiOkResponse({ description: 'Organization information' })
+  async getOrganizationInfo(@Param('id') id: string) {
+    this.logger.info('getOrganizationInfo', { id });
+    return this.customersService.getOrganizationInfo(id);
+  }
+
+  @Put(':id/organization-info')
+  @Authenticated()
+  @RequireAllPermissions(PERMISSIONS_GROUPS.USERS.permissions.ADMIN)
+  @HttpCode(HttpStatus.OK)
+  @ApiOkResponse({ description: 'Organization information updated' })
+  async updateOrganizationInfo(
+    @Param('id') id: string,
+    @Body() body: {
+      companyName: string;
+      companySite: string;
+      domain: string;
+      cnpj: string;
+      description: string;
+    },
+  ) {
+    return this.customersService.updateOrganizationInfo(id, body);
+  }
+
 }
@@ -223,4 +223,57 @@ export class CustomersService implements OnModuleInit {
      })
    )
  }
-}
+
+  async updateOrganizationInfo(
+    customerId: string,
+    data: {
+      companyName: string;
+      companySite: string;
+      domain: string;
+      cnpj: string;
+      description: string;
+    },
+  ) {
+    try {
+      const result = await lastValueFrom(
+        this.customerService.OrganizationUpdate({
+          customerId,
+          companyName: data.companyName || '',
+          companySite: data.companySite || '',
+          domain: data.domain || '',
+          cnpj: data.cnpj || '',
+          description: data.description || '',
+        }),
+      );
+
+      return result;
+    } catch (err) {
+      if (err.details === ErrorCodes.CUSTOMER.NOT_FOUND)
+        throw new HttpException(err.details, HttpStatus.NOT_FOUND);
+      else throw err;
+    }
+  }
+
+  async getOrganizationInfo(customerId: string) {
+    try {
+      const customerResponse = await lastValueFrom(
+        this.customerService.CustomerFindOneById({ id: customerId })
+      );
+
+      const customer = customerResponse.customer;
+      
+      return {
+        companyName: customer.companyName || '',
+        companySite: customer.companySite || '',
+        domain: customer.domain || '',
+        cnpj: customer.cnpj || '',
+        description: customer.description || ''
+      };
+    } catch (err) {
+      if (err.details === ErrorCodes.CUSTOMER.NOT_FOUND)
+        throw new HttpException(err.details, HttpStatus.NOT_FOUND);
+      else throw err;
+    }
+  }
+
+}
@@ -0,0 +1,27 @@
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+
+export class OrganizationUpdateRequest {
+  @ApiProperty()
+  name: string;
+  @ApiPropertyOptional()
+  companySite: string;
+  @ApiProperty()
+  domain: string;
+  @ApiPropertyOptional()
+  info: string;
+  @ApiPropertyOptional()
+  cnpj: string;
+}
+
+export class OrganizationResponse {
+  @ApiProperty()
+  name: string;
+  @ApiPropertyOptional()
+  companySite: string;
+  @ApiProperty()
+  domain: string;
+  @ApiPropertyOptional()
+  info: string;
+  @ApiPropertyOptional()
+  cnpj: string;
+}
@@ -43,7 +43,7 @@ export class User {
  @ApiProperty()
  companyName?: string;
  @ApiProperty()
-  companySite?: string;
+  personalSite?: string;
  @ApiPropertyOptional()
  customer?: Customer;
  @ApiProperty()
@@ -64,6 +64,8 @@ export class UserNoRolesAndCustomer extends OmitType(UserNoRoles, [
 export class IUserByCustomer extends OmitType(User, ['customer']) {
  @ApiPropertyOptional()
  permissions?: string[];
+  @ApiPropertyOptional()
+  authProvider?: string;
 }

 export class CreateUserReq {
@@ -117,7 +119,7 @@ export class UpdateUserReq {
  @ApiPropertyOptional()
  bio?: string;
  @ApiPropertyOptional()
-  companySite?: string;
+  personalSite?: string;
  @ApiPropertyOptional()
  companyName?: string;
  @ApiPropertyOptional()
@@ -125,6 +125,7 @@ export class UsersService implements OnModuleInit {
      return { permissions };
    });
    res.user.permissions = permissions;
+    res.user.authProvider = process.env.AUTH_PROVIDER || 'cognito';
    return res;
  }

@@ -162,7 +163,7 @@ export class UsersService implements OnModuleInit {
        name: updateUserDTO.name,
        bio: updateUserDTO.bio,
        companyName: updateUserDTO.companyName,
-        companySite: updateUserDTO.companySite,
+        personalSite: updateUserDTO.personalSite,
        customerId,
        id,
        metabaseUserId: undefined,
@@ -14,7 +14,10 @@ export class ValidationPipe implements PipeTransform<any> {
      return value;
    }
    const object = plainToInstance(metatype, value);
-    const errors = await validate(object);
+    const errors = await validate(object, {
+      forbidUnknownValues: false,
+      whitelist: true,
+    });
    if (errors.length > 0) {
      const errorMessages = errors.map((err) => err.constraints);
      throw new BadRequestException(errorMessages);
Author	SHA1	Message	Date
Rafael	4246c7495e	UPDATE: updating /me to get api key	2026-01-20 17:52:34 -03:00
RafaelandClaude	85c8a4937d	FIX: Update ValidationPipe for class-validator 0.14.0+ compatibility This fix addresses a breaking change introduced in class-validator 0.14.0 where the default for forbidUnknownValues changed from false to true. Issue: - POST /connections was returning 400 "an unknown value was passed to the validate function" errors - This occurred because CreateConnectionDto and UpdateConnectionDto have no validation decorators, causing class-validator 0.14.0+ to treat them as "unknown values" - Extra fields (like connector_version) in request payloads would fail validation Solution: - Set forbidUnknownValues: false to allow DTOs without validation decorators - Set whitelist: true to automatically strip extra properties not defined in DTOs - This maintains backward compatibility while adding security by removing unexpected fields 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2026-01-12 16:22:25 -03:00
RafaelandClaude Opus 4.5	8c34914806	FEAT: add AUTH_PROVIDER config to Helm chart - Add auth_provider to values.yaml (cognito/keycloak) - Add AUTH_PROVIDER env var to deployment template - Note: maestro only needs to know which provider is used, duc handles connection Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-08 12:22:47 -03:00
RafaelandClaude Opus 4.5	1881d07c4a	FEAT: add dual auth provider support to Helm chart - Add auth_provider config to values.yaml (cognito/keycloak) - Add AUTH_PROVIDER env var to deployment template - Add conditional Keycloak env vars (URL, realm, client ID, secret) - Enables parallel deployments with different auth providers Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-08 12:10:17 -03:00
RafaelandClaude Opus 4.5	3b8310fdca	CHORE: simplify Dockerfile.local to use npm ci only Remove protospack tarball fallback logic Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-07 19:04:07 -03:00
RafaelandClaude Opus 4.5	52bda8ebe2	FEAT: add authProvider field to user response - Add authProvider to user entity DTO - Update user service to include authProvider - Update auth controller response Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-07 18:55:36 -03:00
Rafael	275a53dbd1	Merge remote-tracking branch 'origin/beta' into feature/mgc-keycloak-migration	2026-01-06 12:44:05 -03:00
vinicius gadea	9cefdb226d	Merge pull request #430 from dadosfera/feat/organization-form Feat/organization form	2026-01-06 10:52:33 -03:00
viniciusgadea	8ac0a8a79f	REFACTOR: rename 'companySite' to 'personalSite' in user DTOs and related services	2026-01-05 15:43:35 -03:00
viniciusgadea	285de97375	FIX: update organization info field from 'name' to 'companyName' in updateOrganizationInfo method	2026-01-05 12:01:04 -03:00
viniciusgadea	e2a7d2b92b	FIX: update organization info field from 'name' to 'companyName'	2026-01-05 11:47:20 -03:00
viniciusgadea	da23ad76db	DOCS: update docs to organization forms	2026-01-02 09:22:27 -03:00
viniciusgadea	55b0961b82	FEAT: add organization info endpoints and DTOs for update and retrieval new organization forms	2026-01-02 09:21:46 -03:00
Rafael Santana	d3c5c0fa63	Merge pull request #427 from dadosfera/fix/security-vulnerabilities-high FIX: resolve HIGH security vulnerabilities (18 → 0)	2025-12-29 11:47:51 -03:00
RafaelandClaude Opus 4.5	5dbc644d1d	fix: security vulnerability - upgrade multer to 2.0.2 - Update multer override from 1.4.5-lts.1 to 2.0.2 to fix HIGH vulnerabilities: - CVE-2025-47935 (DoS via memory leaks) - CVE-2025-47944 - CVE-2025-48997 - CVE-2025-7338 Reduces HIGH vulnerabilities from 4 to 0 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-29 11:42:04 -03:00
Marcos Rodrigues Silva	8eddb9e1bf	Merge pull request #428 from dadosfera/hotfix/user-patch Hotfix/user patch	2025-12-26 17:58:28 -03:00
RafaelandClaude Opus 4.5	8e0182aa50	FEAT: add TOTP support for change password and local build support - Pass TOTP code to DUC for Keycloak users with MFA - Add Dockerfile.local for local protospack builds - Add .dockerignore to exclude node_modules from Docker context 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-24 19:03:50 -03:00
Rafael Santana	a18bdccc09	Merge branch 'beta' into fix/security-vulnerabilities-high	2025-12-23 13:51:25 -03:00
RafaelandClaude	b27298501d	FIX: resolve HIGH security vulnerabilities (18 → 0) Upgraded Node.js and dependencies to address critical vulnerabilities: Infrastructure: - Upgrade Node.js from 18.17-alpine to 20-alpine (Alpine 3.18 → 3.23) - Upgrade npm to 11.7.0 (includes glob 13.0.0 fix) - Replace npm ci with npm install, then back to npm ci with npm 11 lock Dependencies: - Update axios: 0.27.2 → 0.30.2 (fixes 2 CVEs) - Update body-parser: 1.20.1/1.20.2 → 1.20.3 - Update cross-spawn: 7.0.3 → 7.0.6 (hoisted) - Update glob: 10.2.4 → 10.5.0 (hoisted) - Update path-to-regexp: 3.2.0 → 3.3.0 (maintains @nestjs/swagger compatibility) - Update semver: 7.5.1 → 7.5.2 Results: - HIGH vulnerabilities: 18 → 0 (100% reduction) - Alpine OS vulnerabilities: 6 → 0 (fixed by Alpine 3.23) - Node.js vulnerabilities: 12 → 0 - All tests passing - Production verified working 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-12-23 13:48:02 -03:00
vinicius gadea	33ebc91826	Merge pull request #426 from dadosfera/feature/catalog-update FEAT: Add optional 'docs' field to assets	2025-12-19 08:24:54 -03:00
vinicius gadea	6948156693	Merge branch 'beta' into feature/catalog-update	2025-12-19 08:21:52 -03:00
viniciusgadea	0aaa4384c3	DOCS: Add 'docs' field to schemas in docsfera.json and update protospack-v2 to version 3.38.0-beta.19 in package-lock.json	2025-12-18 17:43:54 -03:00
viniciusgadea	039c652b28	DOC: Update @dadosfera/protospack-v2 to version 3.38.0-beta.19 in package.json and package-lock.json	2025-12-18 17:11:18 -03:00
viniciusgadea	653d4f53b5	FEAT: Add optional 'docs' field to IDataAsset, IUpdateDataRequest, and ICreateDataAsset	2025-12-18 16:16:00 -03:00