Auth - GET/PATCH users e permissions

Doc da API: ver APIs

Diagrama de sequencia

sequenceDiagram
  participant Client as Cliente
  participant Guard as JwtAuthGuard
  participant Ctrl as AuthV1Controller
  participant Detail as UserDetailService
  participant Patch as UserPatchService
  participant Perms as UserPermissionsService
  participant AuthDB as PostgreSQL Auth

  Client->>Guard: GET /api/v1/auth/users/:userId Bearer
  Guard-->>Ctrl: actor
  Ctrl->>Detail: getUserFullById
  Detail->>AuthDB: load user e relacionadas
  Detail-->>Client: 200 UserFullResponse

  Client->>Guard: PATCH /api/v1/auth/users/:userId
  Guard-->>Ctrl: actor
  Ctrl->>Patch: patchUser
  Patch->>Patch: check proprio ou admin
  alt sem permissao
    Patch-->>Client: 403
  else OK
    Patch->>AuthDB: update parcial e replace arrays
    Patch-->>Client: 200 UserFullResponse
  end

  Client->>Guard: PATCH /api/v1/auth/users/:userId/permissions
  Guard-->>Ctrl: actor
  Ctrl->>Perms: grant revoke
  Perms->>AuthDB: update user_permissoes
  Perms-->>Client: 200 granted revoked active