IAM, package, luggage, app health, rate limit, and more

apps/edr-passenger-api/src/modules/auth/auth.controller.ts

@@ -1,5 +1,6 @@
-import { Body, Controller, Post, HttpCode, HttpStatus, UseGuards, Get, Request, UnauthorizedException } from '@nestjs/common';
+import { Body, Controller, Post, HttpCode, HttpStatus, UseGuards, Get, Patch, Delete, Param, Request, Query, UnauthorizedException } from '@nestjs/common';
 import { ApiTags, ApiOperation, ApiResponse, ApiBody, ApiBearerAuth } from '@nestjs/swagger';
+import { Throttle, SkipThrottle } from '@nestjs/throttler';
 import { IsPublic } from '@tria-plc/api-common/modules/auth/decorators/public.decorator';
 import { PassengerAuthService } from './passenger-auth.service';
 import { RegisterDto, LoginDto } from './auth.dto';
@@ -7,6 +8,7 @@ import { JwtGuard } from '../../common/jwt.guard';
 
 @ApiTags('Auth')
 @Controller('auth')
+@Throttle({ auth: { limit: 5, ttl: 60_000 } })
 export class AuthController {
   constructor(private passengerAuthService: PassengerAuthService) {}
 
@@ -66,4 +68,54 @@ export class AuthController {
   }
 
   // TODO: admin user management endpoints — implement when admin module is ready
+
+  @Get('users')
+  @UseGuards(JwtGuard)
+  @ApiBearerAuth('JWT-auth')
+  @ApiOperation({ summary: 'List all users (admin)' })
+  listUsers(
+    @Query('search') search?: string,
+    @Query('role') role?: string,
+    @Query('status') status?: string,
+    @Query('page') page?: string,
+    @Query('pageSize') pageSize?: string,
+  ) {
+    return this.passengerAuthService.listUsers({
+      search, role, status,
+      page: page ? +page : 1,
+      pageSize: pageSize ? +pageSize : 20,
+    });
+  }
+
+  @Post('users')
+  @UseGuards(JwtGuard)
+  @ApiBearerAuth('JWT-auth')
+  @ApiOperation({ summary: 'Create user (admin)' })
+  createUser(@Body() body: any) {
+    return this.passengerAuthService.createUser(body);
+  }
+
+  @Patch('users/:id')
+  @UseGuards(JwtGuard)
+  @ApiBearerAuth('JWT-auth')
+  @ApiOperation({ summary: 'Update user (admin)' })
+  updateUser(@Param('id') id: string, @Body() body: any) {
+    return this.passengerAuthService.updateUser(id, body);
+  }
+
+  @Delete('users/:id')
+  @UseGuards(JwtGuard)
+  @ApiBearerAuth('JWT-auth')
+  @ApiOperation({ summary: 'Delete user (admin)' })
+  deleteUser(@Param('id') id: string) {
+    return this.passengerAuthService.deleteUser(id);
+  }
+
+  @Post('users/:id/reset-password')
+  @UseGuards(JwtGuard)
+  @ApiBearerAuth('JWT-auth')
+  @ApiOperation({ summary: 'Reset user password (admin)' })
+  resetPassword(@Param('id') id: string, @Body() body: { tempPassword: string }) {
+    return this.passengerAuthService.resetUserPassword(id, body.tempPassword);
+  }
 }