import { mockUser, requireAuthenticated, requireCompanyContext } from "@erp/auth/api"; import { type RequestWithAuth, type StartParams, validateRequest } from "@erp/core/api"; import { type NextFunction, type Request, type Response, Router } from "express"; import { CreateSupplierRequestSchema, GetSupplierByIdRequestSchema, SupplierListRequestSchema, UpdateSupplierByIdParamsRequestSchema, UpdateSupplierByIdRequestSchema, } from "../../../common"; import type { SuppliersInternalDeps } from "../di"; import { CreateSupplierController, GetSupplierController, ListSuppliersController, UpdateSupplierController, } from "./controllers"; export const suppliersRouter = (params: StartParams) => { const { app, config, getInternal } = params; // Recuperamos el dominio interno del módulo const deps = getInternal("suppliers"); const router: Router = Router({ mergeParams: true }); // ---------------------------------------------- // 🔐 Autenticación + Tenancy para TODO el router if (process.env.NODE_ENV === "development" || process.env.NODE_ENV === "production") { router.use( (req: Request, res: Response, next: NextFunction) => mockUser(req as RequestWithAuth, res, next) // Debe ir antes de las rutas protegidas ); } //router.use(/*authenticateJWT(),*/ enforceTenant() /*checkTabContext*/); router.use([ (req: Request, res: Response, next: NextFunction) => requireAuthenticated()(req as RequestWithAuth, res, next), // Debe ir antes de las rutas protegidas (req: Request, res: Response, next: NextFunction) => requireCompanyContext()(req as RequestWithAuth, res, next), // Debe ir antes de las rutas protegidas ]); // ---------------------------------------------- router.get( "/", //checkTabContext, validateRequest(SupplierListRequestSchema, "params"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.useCases.listSuppliers(); const controller = new ListSuppliersController(useCase /*, deps.presenters.list */); return controller.execute(req, res, next); } ); router.get( "/:supplier_id", //checkTabContext, validateRequest(GetSupplierByIdRequestSchema, "params"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.useCases.getSupplierById(); const controller = new GetSupplierController(useCase); return controller.execute(req, res, next); } ); router.post( "/", //checkTabContext, validateRequest(CreateSupplierRequestSchema, "body"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.useCases.createSupplier(); const controller = new CreateSupplierController(useCase); return controller.execute(req, res, next); } ); router.put( "/:supplier_id", //checkTabContext, validateRequest(UpdateSupplierByIdParamsRequestSchema, "params"), validateRequest(UpdateSupplierByIdRequestSchema, "body"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.useCases.updateSupplier(); const controller = new UpdateSupplierController(useCase); return controller.execute(req, res, next); } ); /*router.delete( "/:supplier_id", //checkTabContext, validateRequest(DeleteSupplierByIdRequestSchema, "params"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.build.delete(); const controller = new DeleteSupplierController(useCase); return controller.execute(req, res, next); } );*/ app.use(`${config.server.apiBasePath}/suppliers`, router); };