chore: restore zod validation for users

Author: ocsoares

src/users/types.ts

@@ -0,0 +1,31 @@
+import { AccessLevel } from '@prisma/client';
+import z from 'zod';
+
+import { removeNotNumbers } from '../utils';
+
+const UserSchema = z.object({
+  id: z.string().uuid(),
+  name: z.string(),
+  lastName: z.string(),
+  login: z.string().transform((v) => v.toLowerCase()),
+  password: z.string(),
+  phone: z.string().transform(removeNotNumbers),
+  accessLevel: z.nativeEnum(AccessLevel),
+  createdAt: z.string(),
+  updatedAt: z.string().nullable().optional(),
+});
+
+const CreateUserSchema = UserSchema.pick({
+  name: true,
+  lastName: true,
+  phone: true,
+});
+
+const UpdateUserSchema = UserSchema.omit({
+  id: true,
+  accessLevel: true,
+  createdAt: true,
+  updatedAt: true,
+}).partial();
+
+export { CreateUserSchema, UpdateUserSchema };

src/users/users.service.ts

@@ -3,12 +3,14 @@ import { Injectable } from '@nestjs/common';
 import { PrismaService } from '../prisma/prisma.service';
 import { CreateUserDTO } from './dtos/CreateUserDTO';
 import { UpdateUserDTO } from './dtos/UpdateUserDTO';
+import { CreateUserSchema, UpdateUserSchema } from './types';
 
 @Injectable()
 export class UsersService {
   constructor(private readonly prismaService: PrismaService) {}
 
-  async store({ name, lastName, phone }: CreateUserDTO) {
+  async store(body: CreateUserDTO) {
+    const { name, lastName, phone } = CreateUserSchema.parse(body);
     await this.prismaService.user.create({
       data: {
         name,
@@ -22,12 +24,13 @@ export class UsersService {
   }
 
   async update(id: string, body: UpdateUserDTO) {
+    const payload = UpdateUserSchema.parse(body);
     await this.prismaService.user.update({
       where: {
         id,
       },
       data: {
-        ...body,
+        ...payload,
         updatedAt: new Date().toISOString(),
       },
     });