import { mockUser, requireAuthenticated, requireCompanyContext } from "@erp/auth/api"; import { type ModuleParams, type RequestWithAuth, validateRequest } from "@erp/core/api"; import { type NextFunction, type Request, type Response, Router } from "express"; import { CreateCustomerRequestSchema, CustomerListRequestSchema, GetCustomerByIdRequestSchema, UpdateCustomerByIdParamsRequestSchema, UpdateCustomerByIdRequestSchema, } from "../../../common/dto"; import type { CustomersInternalDeps } from "../di"; import { CreateCustomerController, GetCustomerController, ListCustomersController, UpdateCustomerController, } from "./controllers"; export const customersRouter = (params: ModuleParams, deps: CustomersInternalDeps) => { const { app, config } = params; const router: Router = Router({ mergeParams: true }); // 🔐 Autenticación + Tenancy para TODO el router if (process.env.NODE_ENV === "development" || process.env.NODE_ENV === "production") { router.use( (req: Request, res: Response, next: NextFunction) => mockUser(req as RequestWithAuth, res, next) // Debe ir antes de las rutas protegidas ); } //router.use(/*authenticateJWT(),*/ enforceTenant() /*checkTabContext*/); router.use([ (req: Request, res: Response, next: NextFunction) => requireAuthenticated()(req as RequestWithAuth, res, next), // Debe ir antes de las rutas protegidas (req: Request, res: Response, next: NextFunction) => requireCompanyContext()(req as RequestWithAuth, res, next), // Debe ir antes de las rutas protegidas ]); // ---------------------------------------------- router.get( "/", //checkTabContext, validateRequest(CustomerListRequestSchema, "params"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.useCases.listCustomers(); const controller = new ListCustomersController(useCase /*, deps.presenters.list */); return controller.execute(req, res, next); } ); router.get( "/:customer_id", //checkTabContext, validateRequest(GetCustomerByIdRequestSchema, "params"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.useCases.getCustomerById(); const controller = new GetCustomerController(useCase); return controller.execute(req, res, next); } ); router.post( "/", //checkTabContext, validateRequest(CreateCustomerRequestSchema, "body"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.useCases.createCustomer(); const controller = new CreateCustomerController(useCase); return controller.execute(req, res, next); } ); router.put( "/:customer_id", //checkTabContext, validateRequest(UpdateCustomerByIdParamsRequestSchema, "params"), validateRequest(UpdateCustomerByIdRequestSchema, "body"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.useCases.updateCustomer(); const controller = new UpdateCustomerController(useCase); return controller.execute(req, res, next); } ); /*router.delete( "/:customer_id", //checkTabContext, validateRequest(DeleteCustomerByIdRequestSchema, "params"), (req: Request, res: Response, next: NextFunction) => { const useCase = deps.build.delete(); const controller = new DeleteCustomerController(useCase); return controller.execute(req, res, next); } );*/ app.use(`${config.server.apiBasePath}/customers`, router); };