Uecko_ERP/apps/server/src/contexts/auth/domain/aggregates/authenticated-user.ts

import { AggregateRoot, Result, UniqueID } from "@common/domain";
import { UserAuthenticatedEvent } from "../events";
import { EmailAddress, PasswordHash, Username } from "../value-objects";

export interface IAuthenticatedUserProps {
  username: Username;
  email: EmailAddress;
  passwordHash: PasswordHash;
  roles: string[];
}

export interface IAuthenticatedUser {
  username: Username;
  email: EmailAddress;

  accessToken: string;
  refreshToken: string;

  isUser: boolean;
  isAdmin: boolean;

  comparePassword(password: PasswordHash | string): Promise<boolean>;
  getRoles(): string[];
  toPersistenceData(): any;
}

export class AuthenticatedUser
  extends AggregateRoot<IAuthenticatedUserProps>
  implements IAuthenticatedUser
{
  public accessToken: string = "";
  public refreshToken: string = "";

  static create(props: IAuthenticatedUserProps, id: UniqueID): Result<AuthenticatedUser, Error> {
    const user = new AuthenticatedUser(props, id);

    // 🔹 Disparar evento de dominio "UserAuthenticatedEvent"
    const { email } = props;
    user.addDomainEvent(new UserAuthenticatedEvent(id, email.toString()));

    return Result.ok(user);
  }

  private _hasRole(role: string): boolean {
    return (this._props.roles || []).some((r) => r === role);
  }

  comparePassword(password: PasswordHash | string): Promise<boolean> {
    if (typeof password === "string") {
      return this._props.passwordHash.compare(password);
    } else {
      return this._props.passwordHash.compare(password.toString());
    }
  }

  getRoles(): string[] {
    return this._props.roles;
  }

  get username(): Username {
    return this._props.username;
  }

  get email(): EmailAddress {
    return this._props.email;
  }

  get isUser(): boolean {
    return this._hasRole("user");
  }

  get isAdmin(): boolean {
    return this._hasRole("admin");
  }

  /**
   * 🔹 Devuelve una representación lista para persistencia
   */
  toPersistenceData(): any {
    return {
      id: this._id.toString(),
      username: this._props.username.toString(),
      email: this._props.email.toString(),
      password: this._props.passwordHash.toString(),
      roles: this._props.roles.map((role) => role.toString()),
      accessToken: this.accessToken,
      refreshToken: this.refreshToken,
    };
  }
}