feat: Intégration du backend NestJS depuis YNOV

- Framework: NestJS avec TypeORM
- Authentification: JWT (access + refresh tokens)
- Gestion utilisateurs: CRUD complet avec validation
- Routes: auth, users, parents, assistantes maternelles
- Dockerfile pour conteneurisation

backend/src/routes/auth/auth.controller.spec.ts

@@ -0,0 +1,18 @@
+import { Test, TestingModule } from '@nestjs/testing';
+import { AuthController } from './auth.controller';
+
+describe('AuthController', () => {
+  let controller: AuthController;
+
+  beforeEach(async () => {
+    const module: TestingModule = await Test.createTestingModule({
+      controllers: [AuthController],
+    }).compile();
+
+    controller = module.get<AuthController>(AuthController);
+  });
+
+  it('should be defined', () => {
+    expect(controller).toBeDefined();
+  });
+});

backend/src/routes/auth/auth.controller.ts

@@ -0,0 +1,75 @@
+import { Body, Controller, Get, Post, Req, UnauthorizedException, UseGuards } from '@nestjs/common';
+import { LoginDto } from './dto/login.dto';
+import { AuthService } from './auth.service';
+import { Public } from 'src/common/decorators/public.decorator';
+import { RegisterDto } from './dto/register.dto';
+import { ApiBearerAuth, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
+import { AuthGuard } from 'src/common/guards/auth.guard';
+import type { Request } from 'express';
+import { UserService } from '../user/user.service';
+import { ProfileResponseDto } from './dto/profile_response.dto';
+import { RefreshTokenDto } from './dto/refresh_token.dto';
+import { User } from 'src/common/decorators/user.decorator';
+import { Users } from 'src/entities/users.entity';
+
+@ApiTags('Authentification')
+@Controller('auth')
+export class AuthController {
+    constructor(
+        private readonly authService: AuthService,
+        private readonly userService: UserService,
+    ) { }
+
+
+    @Public()
+    @ApiOperation({ summary: 'Connexion' })
+    @Post('login')
+    async login(@Body() dto: LoginDto) {
+        return this.authService.login(dto);
+    }
+
+    @Public()
+    @Post('register')
+    @ApiOperation({ summary: 'Inscription' })
+    async register(@Body() dto: RegisterDto) {
+        return this.authService.register(dto);
+    }
+
+    @Public()
+    @Post('refresh')
+    @ApiBearerAuth('refresh_token')
+    @ApiResponse({ status: 200, description: 'Nouveaux tokens générés avec succès.' })
+    @ApiResponse({ status: 401, description: 'Token de rafraîchissement invalide ou expiré.' })
+    @ApiOperation({ summary: 'Rafraichir les tokens' })
+    async refresh(@Body() dto: RefreshTokenDto) {
+        return this.authService.refreshTokens(dto.refresh_token);
+    }
+
+    @Get('me')
+    @UseGuards(AuthGuard)
+    @ApiBearerAuth('access-token')
+    @ApiOperation({ summary: "Récupérer le profil complet de l'utilisateur connecté" })
+    @ApiResponse({ status: 200, type: ProfileResponseDto })
+    async getProfile(@Req() req: Request): Promise<ProfileResponseDto> {
+        if (!req.user || !req.user.sub) {
+            throw new UnauthorizedException('Utilisateur non authentifié');
+        }
+        const user = await this.userService.findOne(req.user.sub);
+        return {
+            id: user.id,
+            email: user.email,
+            role: user.role,
+            prenom: user.prenom ?? '',
+            nom: user.nom ?? '',
+            statut: user.statut,
+        };
+    }
+
+    @UseGuards(AuthGuard)
+    @ApiBearerAuth('access-token')
+    @Post('logout')
+    logout(@User() currentUser: Users) {
+        return this.authService.logout(currentUser.id);
+    }
+}
+

backend/src/routes/auth/auth.module.ts

@@ -0,0 +1,24 @@
+import { forwardRef, Module } from '@nestjs/common';
+import { AuthController } from './auth.controller';
+import { AuthService } from './auth.service';
+import { UserModule } from '../user/user.module';
+import { JwtModule } from '@nestjs/jwt';
+import { ConfigModule, ConfigService } from '@nestjs/config';
+
+@Module({
+  imports: [
+    forwardRef(() => UserModule),
+    JwtModule.registerAsync({
+      imports: [ConfigModule],
+      useFactory: (config: ConfigService) => ({
+        secret: config.get('jwt.secret'),
+        signOptions: { expiresIn: config.get('jwt.expirationTime') },
+      }),
+      inject: [ConfigService],
+    })
+  ],
+  controllers: [AuthController],
+  providers: [AuthService],
+  exports: [AuthService, JwtModule],
+})
+export class AuthModule {}

backend/src/routes/auth/auth.service.spec.ts

@@ -0,0 +1,18 @@
+import { Test, TestingModule } from '@nestjs/testing';
+import { AuthService } from './auth.service';
+
+describe('AuthService', () => {
+  let service: AuthService;
+
+  beforeEach(async () => {
+    const module: TestingModule = await Test.createTestingModule({
+      providers: [AuthService],
+    }).compile();
+
+    service = module.get<AuthService>(AuthService);
+  });
+
+  it('should be defined', () => {
+    expect(service).toBeDefined();
+  });
+});

backend/src/routes/auth/auth.service.ts

@@ -0,0 +1,137 @@
+import {
+    ConflictException,
+    Injectable,
+    UnauthorizedException,
+} from '@nestjs/common';
+import { UserService } from '../user/user.service';
+import { JwtService } from '@nestjs/jwt';
+import * as bcrypt from 'bcrypt';
+import { RegisterDto } from './dto/register.dto';
+import { ConfigService } from '@nestjs/config';
+import { RoleType, StatutUtilisateurType, Users } from 'src/entities/users.entity';
+import { LoginDto } from './dto/login.dto';
+
+@Injectable()
+export class AuthService {
+    constructor(
+        private readonly usersService: UserService,
+        private readonly jwtService: JwtService,
+        private readonly configService: ConfigService,
+    ) { }
+
+    /**
+     * Génère un access_token et un refresh_token
+     */
+    async generateTokens(userId: string, email: string, role: RoleType) {
+        const accessSecret = this.configService.get<string>('jwt.accessSecret');
+        const accessExpiresIn = this.configService.get<string>('jwt.accessExpiresIn');
+        const refreshSecret = this.configService.get<string>('jwt.refreshSecret');
+        const refreshExpiresIn = this.configService.get<string>('jwt.refreshExpiresIn');
+
+        const [accessToken, refreshToken] = await Promise.all([
+            this.jwtService.signAsync({ sub: userId, email, role }, { secret: accessSecret, expiresIn: accessExpiresIn }),
+            this.jwtService.signAsync({ sub: userId }, { secret: refreshSecret, expiresIn: refreshExpiresIn }),
+        ]);
+
+        return {
+            access_token: accessToken,
+            refresh_token: refreshToken,
+        };
+    }
+
+    /**
+     * Connexion utilisateur
+     */
+    async login(dto: LoginDto) {
+        try {
+            const user = await this.usersService.findByEmailOrNull(dto.email);
+
+            if (!user) {
+                throw new UnauthorizedException('Email invalide');
+            }
+            console.log("Tentative login:", dto.email, JSON.stringify(dto.password));
+            console.log("Utilisateur trouvé:", user.email, user.password);
+
+            const isMatch = await bcrypt.compare(dto.password, user.password);
+            console.log("Résultat bcrypt.compare:", isMatch);
+            if (!isMatch) {
+                throw new UnauthorizedException('Mot de passe invalide');
+            }
+            // if (user.password !== dto.password) {
+            //     throw new UnauthorizedException('Mot de passe invalide');
+            // }
+
+            return this.generateTokens(user.id, user.email, user.role);
+        } catch (error) {
+            console.error('Erreur de connexion :', error);
+            throw new UnauthorizedException('Identifiants invalides');
+        }
+    }
+
+    /**
+     * Rafraîchir les tokens
+     */
+    async refreshTokens(refreshToken: string) {
+        try {
+            const payload = await this.jwtService.verifyAsync(refreshToken, {
+                secret: this.configService.get<string>('jwt.refreshSecret'),
+            });
+
+            const user = await this.usersService.findOne(payload.sub);
+            if (!user) {
+                throw new UnauthorizedException('Utilisateur introuvable');
+            }
+
+            return this.generateTokens(user.id, user.email, user.role);
+        } catch {
+            throw new UnauthorizedException('Refresh token invalide');
+        }
+    }
+
+    /**
+     * Inscription utilisateur lambda (parent ou assistante maternelle)
+     */
+    async register(registerDto: RegisterDto) {
+        const exists = await this.usersService.findByEmailOrNull(registerDto.email);
+        if (exists) {
+            throw new ConflictException('Email déjà utilisé');
+        }
+
+        const allowedRoles = new Set<RoleType>([RoleType.PARENT, RoleType.ASSISTANTE_MATERNELLE]);
+        if (!allowedRoles.has(registerDto.role)) {
+            registerDto.role = RoleType.PARENT;
+        }
+
+        registerDto.statut = StatutUtilisateurType.EN_ATTENTE;
+
+        if (!registerDto.consentement_photo) {
+            registerDto.date_consentement_photo = null;
+        } else if (registerDto.date_consentement_photo) {
+            const date = new Date(registerDto.date_consentement_photo);
+            if (isNaN(date.getTime())) {
+                registerDto.date_consentement_photo = null;
+            }
+        }
+
+        const user = await this.usersService.createUser(registerDto);
+        const tokens = await this.generateTokens(user.id, user.email, user.role);
+
+        return {
+            ...tokens,
+            user: {
+                id: user.id,
+                email: user.email,
+                role: user.role,
+                prenom: user.prenom,
+                nom: user.nom,
+                statut: user.statut,
+            },
+        };
+    }
+
+    async logout(userId: string) {
+        // Pour le moment envoyer un message clair
+        return { success: true, message: 'Deconnexion'}
+        
+    }
+}

backend/src/routes/auth/dto/login.dto.ts

@@ -0,0 +1,17 @@
+import { ApiProperty } from "@nestjs/swagger";
+import { IsEmail, IsString, MaxLength, MinLength } from "class-validator";
+
+export class LoginDto {
+    @ApiProperty({ example: 'mon.utilisateur@exemple.com', description: "Adresse email de l'utililisateur" })
+    @IsEmail()
+    email: string;
+
+    @ApiProperty({
+        example: "Mon_motdepasse_fort_1234?",
+        description: "Mot de passe de l'utilisateur"
+    })
+    @IsString({ message: 'Le mot de passe doit etre une chaine de caracteres' })
+    //@MinLength(8, { message: 'Le mot de passe doit contenir au moins 8 caracteres' })
+    @MaxLength(50)
+    password: string;
+}

backend/src/routes/auth/dto/profile_response.dto.ts

@@ -0,0 +1,22 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { RoleType, StatutUtilisateurType } from 'src/entities/users.entity';
+
+export class ProfileResponseDto {
+    @ApiProperty()
+    id: string;
+
+    @ApiProperty()
+    email: string;
+
+    @ApiProperty({ enum: RoleType })
+    role: RoleType;
+
+    @ApiProperty()
+    prenom?: string;
+
+    @ApiProperty()
+    nom?: string;
+
+    @ApiProperty({ enum: StatutUtilisateurType })
+    statut: StatutUtilisateurType;
+}

backend/src/routes/auth/dto/refresh_token.dto.ts

@@ -0,0 +1,12 @@
+import { ApiProperty } from "@nestjs/swagger";
+import { IsString } from "class-validator";
+
+export class RefreshTokenDto {
+
+    @ApiProperty({
+        description: 'Token de rafraîchissement',
+        example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...',
+    })
+    @IsString()
+    refresh_token: string;
+}

backend/src/routes/auth/dto/register.dto.ts

@@ -0,0 +1,14 @@
+import { ApiProperty, OmitType } from '@nestjs/swagger';
+import { IsEnum, IsOptional } from 'class-validator';
+import { CreateUserDto } from '../../user/dto/create_user.dto';
+import { RoleType, StatutUtilisateurType } from 'src/entities/users.entity';
+
+export class RegisterDto extends OmitType(CreateUserDto, ['changement_mdp_obligatoire'] as const) {
+  @ApiProperty({ enum: [RoleType.ASSISTANTE_MATERNELLE, RoleType.PARENT], default: RoleType.PARENT })
+  @IsEnum(RoleType)
+  role: RoleType = RoleType.PARENT;
+
+  @IsEnum(StatutUtilisateurType)
+  @IsOptional()
+  statut?: StatutUtilisateurType = StatutUtilisateurType.EN_ATTENTE;
+}