reorg to domain and api

server/src/api/validation/userValidation.ts

@@ -0,0 +1,72 @@
+import { z } from "zod";
+import { UserRoles } from "@/domain/users/user.type.js";
+import { nameValidation, lowercaseEmailValidation, passwordValidation } from "./shared.js";
+
+//****************************************
+// User Validations
+//****************************************
+
+export const getUserByIdParamValidation = z.object({
+	userId: z.string().min(1, "User ID is required"),
+});
+
+export const editUserByIdParamValidation = z.object({
+	userId: z.string().min(1, "User ID is required"),
+});
+
+export const editUserByIdBodyValidation = z.object({
+	firstName: nameValidation,
+	lastName: nameValidation,
+	role: z.array(z.enum(UserRoles)).min(1, "At least one role is required"),
+});
+
+export const editSuperadminUserByIdBodyValidation = z.object({
+	firstName: nameValidation,
+	lastName: nameValidation,
+	role: z.array(z.enum(UserRoles)).min(1, "At least one role is required"),
+});
+
+export const editUserPasswordByIdBodyValidation = z.object({
+	password: passwordValidation,
+});
+
+export const createUserBodyValidation = z.object({
+	firstName: nameValidation,
+	lastName: nameValidation,
+	email: lowercaseEmailValidation,
+	password: passwordValidation,
+	role: z.array(z.enum(UserRoles)).min(1, "At least one role is required"),
+});
+
+export const editUserBodyValidation = z
+	.object({
+		firstName: nameValidation.optional(),
+		lastName: nameValidation.optional(),
+		email: lowercaseEmailValidation.optional(),
+		profilePicture: z.string().optional(),
+		password: passwordValidation.optional(),
+		newPassword: passwordValidation.optional(),
+	})
+	// Changing a password requires both the current password and the new one.
+	// The service only runs the change-password flow when both are present, so
+	// reject a half-filled request
+	.refine((data) => (data.password === undefined) === (data.newPassword === undefined), {
+		message: "Both current password and new password are required to change your password",
+		path: ["newPassword"],
+	});
+
+// Canonical user shape returned by auth/user endpoints. Keep aligned with what
+// the controllers actually serialize (password is intentionally omitted).
+export const userResponseSchema = z
+	.object({
+		_id: z.string(),
+		firstName: z.string(),
+		lastName: z.string(),
+		email: z.string(),
+		role: z.array(z.string()),
+		teamId: z.string().optional(),
+		profileImage: z.string().nullable().optional(),
+		createdAt: z.string(),
+		updatedAt: z.string(),
+	})
+	.passthrough();